699493a8b4b96375b64a3d515d5e62ac5de1d8c734422a274c13a0a66a77660b

Sharing

Copy URL Twitter E-mail

General

Target
TD2DR.zip
Size 168.8MB
Sample260708-pv285afx4s
SHA256 699493a8b4b96375b64a3d515d5e62ac5de1d8c734422a274c13a0a66a77660b
MD5 85507ef20c897f5afbff232dc3225683
SHA1 ed47d68f6cb0b3448e2e76f0fdca5eb0a1c70c5c
SHA512 278cd99c32a6a1538f4d4539407fee85a35c45cee3cc3c302ae161ede94f9f5e28f2e91876c45ffe21044d72f1ed31515644182880d478646ec0d7b6361ff206
SSDEEP 3145728:LGJ4kx30kQ/84I6JH6MYVUJfnhZV+AjkYfIhJOF/yvjCbBavTFTakiED:LG5xEk/4I6JaMYVU5lbwhJOF/iMBavTB
TLSH
T11488331A2DD95B8DF20CBD72FE09234D13ACE1A19687C3FEB35D2A82CE464C12665747
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Sonicexe The Disaster 2D Remake.exe
- Size 11.6MB
- SHA256 0c3cf5a5b27b029bfe12953fe3bcca29981ce9be34d8a3e208a3865106c7c067
- MD5 86fc882cdf153981c7ee71fc59874d27
- SHA1 d898f8ae82da6694f7aef970dec65fadb8f8c80e
- SHA512 af4d9c31f16c59ac7ec6acf619c99e676a2c13100d3e7238283e1f6d68dc4789437cf661571595c3cc56ccec1d7134266ea0aba8510813a9710ed417995e5265
- SSDEEP 196608:8dqneGdaDYg6IgCYJselLYsuIEA0Ua1sAodLOAvS0uoN3TxuTH3SNDOo3A1mY2N6:8dAeGdaDYg6IgCYJFlQI30SO+acr
- TLSH
  T1A0C629103966C1CDC076D07CC5A6AAB6FE313C94CB244BFB9A603E5E3FB66D05936612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  data.dll
- Size 11KB
- SHA256 3331f2a5fe9e1ce87ff53f8f29fba8c103c779a6c44ff0caf8aee2c22d1e8878
- MD5 5948f023ea844d8f16cbe19cd2a040de
- SHA1 bf3096a33b7debca4b89709937c2d583e0e34e4a
- SHA512 e0837d3933130595a729ce6395072e8a5091601f7e9d51e512c4e00716296443b33acca129102c69c46ccaa260b19c1e62c5dcfc4c49a594f86db6be015bf998
- SSDEEP 96:n1YIvJJfFc7sl678bdvLeuZ3J4Zqq0Fsqb4SrpTtaIcrJCJd5QlPeHvo44rOiU6k:zbWwkK9Lxl4gpTcrJO9Hvo44rp
- TLSH
  T14A321B4AFB6458EDD41640B5C8738A1BB6B9B62057113BCF0320A2A92D733D4337F795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  disnet.dll
- Size 35KB
- SHA256 bf96633a717d980d744eb5cf151566ccd5e3a940eb9817d58cd81a87f2096a61
- MD5 43e6b797d495feecd1878494fc68af05
- SHA1 6728d23ca1062f4b00b993dfa3ad85e8ae6f9162
- SHA512 ea525b6be5dd5d07b6bbcf2dc8dec655362c2c22ff8e32d5f73a6d17646201f7ebd5b07ed0d0d98d765e2d02f84db4f9edc93a4aa58c52e45f1fa808fbda5d23
- SSDEEP 384:+EHwwuinPWlsG7yPsk6H5edj3Ccc8K31vpHAF2KlHrx7wunDkxsaYDLqE+N9TwH+:+YDlGe6ZM3CccJFBAF24rxaY63V
- TLSH
  T172F25A88E3A411E5E4678578C6536B4BE7B6301413202BEF53F086672F63BF1A73A302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  mus_hideandseek2_chase.ogg
- Size 1019KB
- SHA256 1c8ad160a8bdf5221b9bc7474465655666d0b9c5c65e698e8de833dc11646d99
- MD5 6c191b8afc3d1dfedd5fc5ad125b5235
- SHA1 24759c73b6a71df4ba866cec03d763b51c29915e
- SHA512 ef0adf838dc2bf46eb20dd5fc8b3112fa9b3c732a3e9684e39efae201356ddfb4ac4d0a620202fab2cf128cb30f993840e6ae3229366398356ac44a4099ff243
- SSDEEP 24576:cJyc5xLWTEghrhzbyG4xalCU9yrzvDapYEP7MqwepKeEeVgXX:cZkTEUrtyG4xaMUUrzvDAOeIeEei
- TLSH
  T1852533516A27C9AFEB3752BBE310E32749DA9898BB8449AD499D20343FF711E4040DF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8