d812a16d2d0b991bd7f2ce965143e154ffe236a513ad61583d421ecb25924f5e

General

Target
Leitostrap (1).exe
Size 47.9MB
Sample260708-s2ctlahv5t
SHA256 d812a16d2d0b991bd7f2ce965143e154ffe236a513ad61583d421ecb25924f5e
MD5 9ffb820739b1a992cfc0da8aba462ad3
SHA1 37767b983eb2aa44e6751975b5edd33135261ca2
SHA512 e1653884f5dcff2afb66ead7c9296588c21b62d0b068740762320d6642302cec7d14cc99e7fcf667381e5f72841ed8043bcf3343d92892572eb42084a0e94c3a
SSDEEP 786432:w+gX4BMdhwzTQXR5FbPp3CYFcSS5U/LT2KVVyPVLIvdcWzbWlA68VCu0LhX5m43u:WXGMK4XR3b9CHSCU/+UyPlKcWzbWm6eR
TLSH
T18BB73312F2D409E5F9FB6A3497628341EB19749D8B31C1FB00E102535D7B9782B73AB9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Leitostrap (1).exe
- Size 47.9MB
- SHA256 d812a16d2d0b991bd7f2ce965143e154ffe236a513ad61583d421ecb25924f5e
- MD5 9ffb820739b1a992cfc0da8aba462ad3
- SHA1 37767b983eb2aa44e6751975b5edd33135261ca2
- SHA512 e1653884f5dcff2afb66ead7c9296588c21b62d0b068740762320d6642302cec7d14cc99e7fcf667381e5f72841ed8043bcf3343d92892572eb42084a0e94c3a
- SSDEEP 786432:w+gX4BMdhwzTQXR5FbPp3CYFcSS5U/LT2KVVyPVLIvdcWzbWlA68VCu0LhX5m43u:WXGMK4XR3b9CHSCU/+UyPlKcWzbWm6eR
- TLSH
  T18BB73312F2D409E5F9FB6A3497628341EB19749D8B31C1FB00E102535D7B9782B73AB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery trojan adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2
- Target
  Leitostrap.pyc
- Size 561KB
- SHA256 a2517a6ed98df30d044eb5c2a25e5a294c58fbfddc4820189b5d80c36169d702
- MD5 53ad10fb8c02ae96975b132a73a88df3
- SHA1 54059ee46ec4c11eb6532f31de800140a7b4808b
- SHA512 7dcf031f0dfb277c2fc62ccb438632d8a9c66c96a3e109af1168876cdcb0f3a5bc2f0b4c20aecdc211cd1a9dd7a0c570f7c47c4a4aa82c63d923f715f5a11d0a
- SSDEEP 12288:9llgaaZsNukQwVk4Yr/jGV6SzqWSU7XvXZie+kxiQ+Uiq9:v7QwVk4Yry23+vJtV4Q5
- TLSH
  T153C4D0A1B2B1583FEC67B0F5655A670FB7349013B302DB17B57E60682FC29A189239DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3 behavioral4