0e1d2ea98b16501c9e2125daea8285ffbf11bf10e355a3e26e8263a7051b1e88

Resubmissions

06/07/2026, 20:35

260706-zc6hyadv9y8

05/07/2026, 06:05

260705-gs7f3aat2w8

Sharing

Copy URL Twitter E-mail

General

Target
X-Men97 02 (2024) [Só Quadrinhos].cbr
Size 54.1MB
Sample260705-gs7f3aat2w
SHA256 0e1d2ea98b16501c9e2125daea8285ffbf11bf10e355a3e26e8263a7051b1e88
MD5 df6a0c1adffa3c6506717164292c54c4
SHA1 cbe1a464d8d19a97042cc08e274710f71a8fe789
SHA512 7a7b675e8f3110025c5bc6353533644f8ca320cfa0fa01452f65d178576711407520f81465b97976aaecd46e41bb350a88cb17ab2479e9e3788851cfd074d83d
SSDEEP 1572864:WxcZafVdAta/+y2WcHb1orOXUaL+yJ7xlMSn5G6sDUviv7+rKg+8kxfdyFG:WxcZWVdA8mBb1SmL+Mxhc6eeGSOg+8aV
TLSH
T1F3C733EBD3E36CA4A1AC74CD1E954936DAEF245836E72AD8430B393119DF769335C880
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

adware link persistence qr ransomware spyware

Malware Config

Targets

- Target
  X-Men97 02 (2024) [Só Quadrinhos].cbr
- Size 54.1MB
- SHA256 0e1d2ea98b16501c9e2125daea8285ffbf11bf10e355a3e26e8263a7051b1e88
- MD5 df6a0c1adffa3c6506717164292c54c4
- SHA1 cbe1a464d8d19a97042cc08e274710f71a8fe789
- SHA512 7a7b675e8f3110025c5bc6353533644f8ca320cfa0fa01452f65d178576711407520f81465b97976aaecd46e41bb350a88cb17ab2479e9e3788851cfd074d83d
- SSDEEP 1572864:WxcZafVdAta/+y2WcHb1orOXUaL+yJ7xlMSn5G6sDUviv7+rKg+8kxfdyFG:WxcZWVdA8mBb1SmL+Mxhc6eeGSOg+8aV
- TLSH
  T1F3C733EBD3E36CA4A1AC74CD1E954936DAEF245836E72AD8430B393119DF769335C880
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  01.jpg
- Size 1.6MB
- SHA256 8f64fdb6cb62cf0379d7fe822511aaedf71a28b141bc7a375a3110028d9ac043
- MD5 e042cceddd5f11a2e185522a5fd32a6d
- SHA1 4fb2557ad2b7889b7065dd1ea0861ad555ba3598
- SHA512 05105a2f5d6ae54ccfd00396b402b728f0c8646a67668de46aaca5bdaa1d827fe2562a6c08f5ca048b54646fadce61be9ab6c68023ca5b846cfc151e54e3a124
- SSDEEP 24576:CaU5+YTwCl/6KXmoHKhGkpUBcOJfrP5kPdfZA0M1yGInWN9gSij1VJwWuccKf4Mc:CadY8eR2oHcpmJNkAnyGWWNCjugcK5G
- TLSH
  T1857533667786C921EE708BBDAF704E81697B424D57EAB187B8CC240D73F5DC862E6D00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  02.jpg
- Size 1.2MB
- SHA256 14c8fa269aff036d94ad8688b8493a0406f31401b7200af881d8b71462b8a08d
- MD5 557122227aa6ba421dea4ba57d94d0b1
- SHA1 77d30d52dc32ce0c640d63557d7705e91b9c0514
- SHA512 ae215165f37cb3c1ac8434cbebb8ddb9e2902f79d5fd8e2a9815d255d5780936c75f250de9b5cccd6b6503128cef4fa9e2abc7be431a826d925fdbbfd9661291
- SSDEEP 24576:a0yrwsE/q/dxGynor18kHbKWiSHCCbaiXEFdk+Pmk:krwuo2kHViSHCCF6dk+Pv
- TLSH
  T19645237E5FA280D3C3EC5F31CA52170B467CC971201F572BF48C262A5F9275A0AB669B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  03.jpg
- Size 1.2MB
- SHA256 4c52d639b4e53dc57ec35a08afaf04d2d9afea34f360ca38881fcef1f26497f7
- MD5 582f76aace511a41f8309efa493abbab
- SHA1 9e8ae395fae7466ffba43bc667b0814a27ab962b
- SHA512 9dcca6763830522ef23e5c524383c57b185469b0127017186975e5e36885b4dd1adca9d254af624c30ffb2743ab54c3e44d48b8015161676f6428aeb1ac0fc51
- SSDEEP 24576:yCMJBHHeDZD+NlaKsrDYBJ1AX1aHfY9ZXc9TQNSTM4:ytJVMZD+NlaKs4BJS1MYm6S7
- TLSH
  T1E04522A1F2D3CF501B570DBC907E7CA78B6612E207E1819742A3BD402195F70AA67A7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  04.jpg
- Size 1.2MB
- SHA256 50bf006cebe0ad91af933d1fcaa257cd0d2c9f54ef2359e8bc454088d4404809
- MD5 5eef78d61e2c9d63241ae4d48627710f
- SHA1 7ec5f427e730730f546ee787caf3f0310935cd83
- SHA512 0c15e16bae99a52335b0e61e42a18a2d42fa6f2711bd1127b68088f632eae4a98453c82d297f95abe9c79cac13e5fbe7493bada990935ffca9b2a769d5cb2944
- SSDEEP 24576:SQv2n+p98/EBQBR+XalsL6hUadVQbkiGU3M6yZ/IMYZu+1IOXTc:SQx9JGXyDyEM1ZQuyTc
- TLSH
  T1124523B0EB46C751A7535C7D587EADFB0B362BE602C0419384227E902EC2B749953E7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  05.jpg
- Size 2.0MB
- SHA256 80f9d5adf437129643994d4dd87984ac198cfc55a1662d9ee63b95151492a844
- MD5 7fe8f0c3e3cd9a0bbc994e35eb412881
- SHA1 bf37eeb07093bb5cab34a2f67d1ad1e074f6af8c
- SHA512 9eb7c8979f6b643a3883877f2761690cd9d72b1260c7c2f488e6805883ba09b5c042d2faa84a633dacfbb70d32bcc6e7f1f3f4187242e99fc9e7693d1d4ced30
- SSDEEP 24576:ZwurmSoBrbs9RnoMnAAuf3tOAB7x/9y4iChEgily4uaZku8Rf2WTq2rFaegK0/o:ZsBMANf3tZ7x1ynChQwlaZSOWTbaeg5w
- TLSH
  T10E9533C5DA4BE047C0EA93B1E9CBE56A5E526070E0D559CA3C1FBBE2233B791F48C059
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  06.jpg
- Size 2.0MB
- SHA256 ceab8b203ead41e33f855dfd568884a5bd6d446a6e2397011b39c82043bbe258
- MD5 8eaab212e69c17b56b9d064849c4c791
- SHA1 b92f8b5b086f3b4e9617f9d7f9331cd0020e7a1e
- SHA512 f5eb67bb733cae71b4b4ee72d4e3ef0e0202b04860fff0b2f4b3fa9698c0957ea6452d2fd006c0b2fbf7e55359f66c4cbb838003ef8d34f40de23b91e48e7a54
- SSDEEP 49152:NHSqmPEJVG/KrcG25TNBYwGshDdpaWBepXKu0LRiMFTT:Ny7IGCrX25T+s9RiM9T
- TLSH
  T1AFA5331AE794E9A6D0A9D23A8074507E6C8D36F4E1B78B6C346CC7247340377EC479AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  07.jpg
- Size 2.1MB
- SHA256 d9c0961aa33c8c65efd5d1df35a3fd4005ed906c81a51c20e5c9928695076314
- MD5 6dc78db0d148718d7a5a5423f02ca1e9
- SHA1 5a3644ee342122f065d90f3afde960f080d8c3b6
- SHA512 1418d601d7798d3482213b424eb4d420457db26bdb8e0448e05af95320950c4437a6352a459d76239b87bac4cea16ffbb306429dfa51ad32e037c7b31f914e9f
- SSDEEP 49152:yXjUIH34MdkQpM8hPhdQ/FqhzFwQfhsfjILLo3d1fDLo5:yXYIX41kDh5dQ/F7eoDQ5
- TLSH
  T1A8A5334B479D9E0AC54A463ACA5FD0260819453C3ECEDB083C7E96F1B756EF04EA2B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15 behavioral16
- Target
  08.jpg
- Size 2.0MB
- SHA256 242e3afc6a767ce62d5b4de6e02ad645fa9244f31dfc711e6c11b3238742434f
- MD5 04acc90c33bb17899f3e247abcb97db6
- SHA1 eb71fe572ba6bc06a2a1448d77c5a890ce9801a2
- SHA512 f68191a1e0c769a70e343266945e6b67bdba581c6ac742ff244cbd902f6fe059e969de7323a9120d12c10f11aa6ea5ddd8a483da46e6aca2fa66dd3a0e97cf36
- SSDEEP 49152:hL46ci8uIMyRavfoWJvsd933M+XceHXIyd:hL46jnJcYO
- TLSH
  T161A5331686A7B043C0EF977C21537DC71BADEE6069515A037E1CA8BC37997AD2ECE048
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  09.jpg
- Size 1.5MB
- SHA256 60ceef31e59dc293e8b4db880ee482681fc1ce28d50233aa93c6e22e9543bdf1
- MD5 a3d7ba6dceb6ce6f4ec6e1d5b49a0446
- SHA1 c6ff4918325068ffa9468eda8a31e195e2c69cb4
- SHA512 940820ef843c465ce2e252ed3a96743417d8f13b9e138deea6ee94b371464c32ff3e3575c49f9afb8bf49d9ef98d664fdff7ea495eb575228a73cba648d97e09
- SSDEEP 24576:e3oL++bRJB4Qzl7G1BdvSsE/YiaFePS0M66vNAe3HQ+cFF3Jze1sgh9gqQHBNN4:e4KMJ+2QBdJEv/61vXZcnWRtQHBc
- TLSH
  T16A7533BE3A68E657CAC193F028933A2954D5CF3846391D53B94C364BE3097B28E439F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19 behavioral20
- Target
  10.jpg
- Size 2.2MB
- SHA256 3dfabd296ee0eef6cb8ce8eabbe55ae9160a50364b68f0b49a74bb443edd3c84
- MD5 735ca40fafc9747c8a3191cee3954cf8
- SHA1 7026015e4caf64bc0c336cae2692826fff9377f5
- SHA512 6fd451a35935afd65db3cab1402759ec3b5b74de4eb58753c9143b4b217c5e386a9050f68bddfcb4ce0237b92187dbbbd20de12a969649981fa42c701bbfb94b
- SSDEEP 49152:m5oqwtOnUouAJC5Amcb37RrLKDcfdnlilCgZLaBLU:m5oqwEUM4qmcbLsCvdU
- TLSH
  T10DB533479FB74175CC10397ACA2BD340909937D913A9AC1B3A0DFCB35386691B36AD8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  11.jpg
- Size 2.0MB
- SHA256 0364ffcf21f5507f154048c20e1f9ccd64fd5391835c51a6506679af8bc28246
- MD5 a5ae9c5769312938083f18fac7cdc0c8
- SHA1 161f26e24131f16bc8f6875e2b98afa216538bfb
- SHA512 ab5fd5c3207628571130c2899df16d43eb8d245b56f3748ee2dd4f17b1ba563ff766e2372675e7bd642a037783abcbe58d0b2faddf29c273064eac58e2304e41
- SSDEEP 49152:HI/Fji7lUEEIZaoEGgH5Ncr7mVTNyqsEEd:8Zo33keC5NyqjEd
- TLSH
  T17FA533BAFDC76E23F4C4AB74D1C584EE3A9ADD1467B415C23A2D67043B0B3E65C98481
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  12.jpg
- Size 2.1MB
- SHA256 6a4193e7bfd7df9602948c413124a946495b2d49cb3ed4bd800ba9ce6e9b18eb
- MD5 414dc1d5b80455dde4dea08100540cfd
- SHA1 a8683a0760e202438f06e8b65bd5e4320954bf25
- SHA512 f9841271d04dd6f62669bfa2c67084a1dab4b34613d1e97c19a8b8700dcac2b6564c66efbff70d4667a221012d7ae7926ea37a3836088e9fe6ee16fc4daf6f23
- SSDEEP 49152:Ubv4rrUCCEnww8XaIqUviDPxJZuU10LwU4U/woOA:KPCpOXaIqyiDFuUZzU/t
- TLSH
  T1A7A5338030EA957AE46C5BB8BE67D68D360528DB1E63C2097D0EF4627710731EE84E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  13.jpg
- Size 1.5MB
- SHA256 73538fdd3e50bc8db3bc0afbd3a55098755bfecedea69ac07efbb4292458da39
- MD5 e8f494988c24db144edd4887b6d7cf42
- SHA1 4c8405c03f5ef022ecb20c8fafc56168dc893a00
- SHA512 20fbad1f85e7f9aedfaac541cd435ed5c47775fc456ca6d567958c48b2ed1f05465d4cfc5416a6ce932b05c94042115476460b99479d99025f7d1e76aaa8f261
- SSDEEP 24576:fK4pZZnXnUaNjHhKSv+8f8ee8da+DQ0kbjh4DQHjxLeOqlW/dYAFy9TgLLVX3Clv:f5RXLDhk6DxkbjhLIOQes9T8LVXoVL
- TLSH
  T1A375337C3FCAE9A6D376F6BEAA9C8964B3551666B593013EB91F3608F353A170D0C000
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  14.jpg
- Size 2.0MB
- SHA256 6d34d2d7582a4a848deadb9caa7d86352d8c2b75fa8de1f57b86f1e3d3b21590
- MD5 4bb9abde18272540a63953cd6b6595e6
- SHA1 6e37cd81b68817496cdb365987e345e44f7bf1d7
- SHA512 663bc42d0a1e72aa8b9ef7b83ecc815d2ed3916ed26880004154a59cd21c292f0e56d7d75cbc55d39831d7041bd09f1c640d7ed9b3ad4357800c9de80ddd81e7
- SSDEEP 49152:3zqG+LYOuuONUScMZTrl4lDklyQ9AAnbJPidvxNu:3zqGWBo/ZTJ4lD3Q9ASJPEvy
- TLSH
  T1E9A5332EBA0C9959DB99197C49D5CA406B386772A16F0F73FE1C8800BB57308F87B15B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral29 behavioral30
- Target
  15.jpg
- Size 2.3MB
- SHA256 710786f6b2c67e7c6b8494b24394e64707b7089a096e9767e3ddbd67d5795c09
- MD5 71a50b0e57216b01e54102f0685d1662
- SHA1 c2d27d5fe8855d083e985fca59d4173eda447378
- SHA512 0bccc9df705bd8bf1ab2fe13f225ac1c768e8c4609a7ee1a74190184951d8700ee04e4551bbe20aa6546b351948d665e3992c80a9c2efeb4a3e2bfc87addf2c5
- SSDEEP 49152:h96Glo+56uGEHT8mMMjngYU1B0qA9JMFM5Zvo8cM1N9eODYo:S87jwmM2gRnM9JA6ZPNRYo
- TLSH
  T1E6B5336BD6639CF8C13D67B88C53DB29E60EDC782D18E345F51C6B311389A59384E0AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32