f33320614ef26be5019ea778c20dcf227ea47460129267afc8f713ce5d30b89c

General

Target
Kiddions Menu.zip
Size 11.6MB
Sample260705-vvlt2aas2m
SHA256 f33320614ef26be5019ea778c20dcf227ea47460129267afc8f713ce5d30b89c
MD5 f7d2b593a37b8dbd07c6527b4139ccd6
SHA1 ce30a1c8da59090aad12cb2e871789ba6dfc432e
SHA512 3e7eb0e0a847250bc876c61c9451b8f39b864a365561bf69a535ec1a3e26001489f7d14aee5a795bad0797bf6d2f9329713fd5180b58598b6391140e91ded53a
SSDEEP 196608:NHGo3Zd6ZD1YtRRf5xvKgybWcuDWIr4OjW8HG+zfsMD+zBBfi4hbKMeP49NMcPMQ:NPd6m95BTybZuKdqnffYBBfC9w91MXur
TLSH
T16AC6331C7A9686FCE272E75FC92DCC74122D8B0331CB4624950B965434B49BF26FA8DB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Kiddions Menu.zip
- Size 11.6MB
- SHA256 f33320614ef26be5019ea778c20dcf227ea47460129267afc8f713ce5d30b89c
- MD5 f7d2b593a37b8dbd07c6527b4139ccd6
- SHA1 ce30a1c8da59090aad12cb2e871789ba6dfc432e
- SHA512 3e7eb0e0a847250bc876c61c9451b8f39b864a365561bf69a535ec1a3e26001489f7d14aee5a795bad0797bf6d2f9329713fd5180b58598b6391140e91ded53a
- SSDEEP 196608:NHGo3Zd6ZD1YtRRf5xvKgybWcuDWIr4OjW8HG+zfsMD+zBBfi4hbKMeP49NMcPMQ:NPd6m95BTybZuKdqnffYBBfC9w91MXur
- TLSH
  T16AC6331C7A9686FCE272E75FC92DCC74122D8B0331CB4624950B965434B49BF26FA8DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  Kiddions Menu.exe
- Size 11.9MB
- SHA256 b1dc4fc92e47dac11d29bd780401d48029c1ee2042f95e1ae559520fbfc44e9f
- MD5 517bc0bfe4449b89e345112346b3eee6
- SHA1 93f2a61d7fa9b9a2c18516a0e2ce01ad68cb8d20
- SHA512 9179bc04928ba2ec10f7176e57d4d3f93f14644b069a5cabd76ace1bd31cce65450fabd82c4e5650d3deab4196ea8354650517614c83f07125b621197596a0b5
- SSDEEP 196608:puoCnWourHmtND9BKG+5fc2S/ErXKEtw+SJo7c+JfPB4sV6RMsqvSHnLwyrE+0n5:pu0ouCvDvV+53SM8+9fPBESDqHEWE1O
- TLSH
  T17FC633946E31C6FBFAB6A13DD515DD2C922CAFB27649C29306A831B518375F8803DDE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery trojan adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral3 behavioral4
- Target
  app.pyc
- Size 1020B
- SHA256 5744c8ec8aca69b41401e8472930dd2e0e289f5cd99b69b96e6299dc571e146b
- MD5 486a543dd5f728efdd9a73b6d1ea1fac
- SHA1 da329fea4d637f5dbbb03ccf20e95593a11c33f1
- SHA512 0a62f1d5f0c4ed723142995debab519a6e889549b6bf24a19822b1ca8d082e9dc0056fe764e2c4bf357e5ec3957986db32ce9b2ce2f62184640af19d84e4a748
- TLSH
  T134117562E50014C6D2ACDBBA84FDAAA0955D7FF4F001D60A6B0EB0DA79D5231AFE1D08
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6