b00258ae5dcde9d41274523a1f9eabc89711e722b6cbbdc25f088ce287d1f96b

General

Target
PRIVATE_Lunars_Custom_made_Japanese_Base.litematic
Size 64KB
Sample260706-zbct8sdv4t
SHA256 b00258ae5dcde9d41274523a1f9eabc89711e722b6cbbdc25f088ce287d1f96b
MD5 10a0c88449fc87c8d363212a96d62505
SHA1 10085aa68ec16810f6e0bd21c812aaed51f209cd
SHA512 cd230cdd84ed343dec5f615fb39396e022989e3f67929fa5842379ee3302cfe663144c02a3bf21067f9215c7c830ff050b21c798bf52d3986ecdb03dab64e1e3
SSDEEP 1536:n1etVP8tJgoinx0D/eZkFTddX9zd/oqVI:nctV0LgoixU/eZkFLX9VVI
TLSH
T1125302D562162E200D7921E2B72DAE162E6C2240B57D039F392FFAB7F285DA164073DD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  PRIVATE_Lunars_Custom_made_Japanese_Base.litematic
- Size 64KB
- SHA256 b00258ae5dcde9d41274523a1f9eabc89711e722b6cbbdc25f088ce287d1f96b
- MD5 10a0c88449fc87c8d363212a96d62505
- SHA1 10085aa68ec16810f6e0bd21c812aaed51f209cd
- SHA512 cd230cdd84ed343dec5f615fb39396e022989e3f67929fa5842379ee3302cfe663144c02a3bf21067f9215c7c830ff050b21c798bf52d3986ecdb03dab64e1e3
- SSDEEP 1536:n1etVP8tJgoinx0D/eZkFTddX9zd/oqVI:nctV0LgoixU/eZkFLX9VVI
- TLSH
  T1125302D562162E200D7921E2B72DAE162E6C2240B57D039F392FFAB7F285DA164073DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  PRIVATE_Lunars_Custom_made_Japanese_Base.litematic
- Size 665KB
- SHA256 cd83489c47dcd092f485facdcaa449fc66b3fd60ca69352c5ae5094ce24e77b0
- MD5 efc9220aea7f51a414ddd539c9c9dfff
- SHA1 d603655a968849e95657f802935e309829612036
- SHA512 1195e27dd7eee46dc4ffd204305b8958671ec8453afbefa313e5bff2ff92e4aad3396698fbe46d816389db5ff2c7a57a129cbd24ee945c27b45b0f555ad5c926
- SSDEEP 3072:VNkpfY/WjOBM24LUfIbW5v1fSHwKgtoBOhKLKtNyXspuj4Va/0xWrg9iBjNlKDvA:f6KWjOBM24LQUW1QHwKgtQOhKL7
- TLSH
  T1F0E40E55EC233C1EE38BE33E5FF66B17A36809BA7CD2A7A97532676432C94D21217410
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4