ee48f0ccfc52934fab105674f77c41f95dbe443dbecddf5d611a2e4a05f25c2b

General

Target
SimpleCircuits v0.1.2.zip
Size 458.3MB
Sample260707-lts3aae12t
SHA256 ee48f0ccfc52934fab105674f77c41f95dbe443dbecddf5d611a2e4a05f25c2b
MD5 8c24f891be19377369d5c5c3f51ba9a4
SHA1 10e7cd503bc478494fd7364e09c75b0e7fa96883
SHA512 bde7809673e40ad02bcdd2ee7d4596971b4294d0820feb2b8f32db58977911c5fe1fe1e39b3a8df8ead617939cfd2b61365ec64f32f123cb0f59ddeaefa46a36
SSDEEP 12582912:yFsGoIvqvHrvGtW3jWsP8bAQWTqjlM3h5FFDtT7gCKSt:isYkL9Wn0Q2caZXg3m
TLSH
T105393364DFB7C912FD266D334B22C5F58BF65CE51AED0446BC880F0AE8BD16AAD50831
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  SimpleCircuits v0.1.2.zip
- Size 458.3MB
- SHA256 ee48f0ccfc52934fab105674f77c41f95dbe443dbecddf5d611a2e4a05f25c2b
- MD5 8c24f891be19377369d5c5c3f51ba9a4
- SHA1 10e7cd503bc478494fd7364e09c75b0e7fa96883
- SHA512 bde7809673e40ad02bcdd2ee7d4596971b4294d0820feb2b8f32db58977911c5fe1fe1e39b3a8df8ead617939cfd2b61365ec64f32f123cb0f59ddeaefa46a36
- SSDEEP 12582912:yFsGoIvqvHrvGtW3jWsP8bAQWTqjlM3h5FFDtT7gCKSt:isYkL9Wn0Q2caZXg3m
- TLSH
  T105393364DFB7C912FD266D334B22C5F58BF65CE51AED0446BC880F0AE8BD16AAD50831
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  SimpleCircuits v0.1.2/SimpleCircuits 0.1.2.exe
- Size 458.3MB
- SHA256 f018e6198c913b4d39f09d9e41bdd687438defc4b9e09b24eb6e16e5c619c886
- MD5 2788b0f231a94330a807bee2ded380d4
- SHA1 9100289f90f70de3505570f9fb5dedec216fe09b
- SHA512 328e425f1202f806b999e03c758d8b0a07ee0eb84867a9b99e63a326136dcd408d8ce6ac62b4f88342a4c4c6ac598085b335947582bd77b2043ad4f23586d7bd
- SSDEEP 12582912:kFsGoIvqvHrvGtW3jWsP8bAQWTqjlM3h5FFDtT7gCKSZ:ssYkL9Wn0Q2caZXg3a
- TLSH
  T1D9393364DFB7C912FD266D334B22C5F58BF65CE51AED0446BC880F0AE8BD16AAD50831
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Reads ssh keys stored on the system
  Tries to access SSH used by SSH programs.
  spyware stealer
behavioral3 behavioral4