9984d6b786f987317b2c79ff4bdaf7d0642323d46fbae2f8c8862eca62c66907

General

Target
d.rar
Size 210KB
Sample260709-p29xjsbz3v
SHA256 9984d6b786f987317b2c79ff4bdaf7d0642323d46fbae2f8c8862eca62c66907
MD5 235317ed7aea3485b7455f75a234e988
SHA1 b7a999d0e9a45f573e270046754123cf894e2b69
SHA512 ad25621d3211e3a669092f46120c9c96ce663b5dde1677b75c6f73854ede3a7937280e186405e6ac53694b27f30a23576f6110ce8a7ceb39054e4a54b7bdc97f
SSDEEP 6144:tGRjMMhVaEEhQSSNxuDC8u8Hdc8YUSQ4kM:M9hXhEhQLh8V9c87H43
TLSH
T1B42413DF88F10A8DCFF5AE52D455692A07401EF2737AC5CBE61139D83F9580BE12A85C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

ransomware

Malware Config

Targets

- Target
  d.rar
- Size 210KB
- SHA256 9984d6b786f987317b2c79ff4bdaf7d0642323d46fbae2f8c8862eca62c66907
- MD5 235317ed7aea3485b7455f75a234e988
- SHA1 b7a999d0e9a45f573e270046754123cf894e2b69
- SHA512 ad25621d3211e3a669092f46120c9c96ce663b5dde1677b75c6f73854ede3a7937280e186405e6ac53694b27f30a23576f6110ce8a7ceb39054e4a54b7bdc97f
- SSDEEP 6144:tGRjMMhVaEEhQSSNxuDC8u8Hdc8YUSQ4kM:M9hXhEhQLh8V9c87H43
- TLSH
  T1B42413DF88F10A8DCFF5AE52D455692A07401EF2737AC5CBE61139D83F9580BE12A85C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral1 behavioral2
- Target
  d/d.txt
- Size 37B
- SHA256 38da91a46cde85e22d56135e4884095f158aa02dc01797910bdaa9f69ce73e4e
- MD5 d4cf3793055920884d6088d6cb104dbf
- SHA1 f299f62b855d643894575a29278c6d9e6ee82ac1
- SHA512 b6ef30bc961e844085c686da122486e31b7a1586dba4b7855ab39bfc9008914336b3d699dc698b62a79d3cdc8f6d2fa95ca1608270a2bc977c758647f9862a8f
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral3 behavioral4
- Target
  d/rushwoofer.exe
- Size 705KB
- SHA256 4134cc9bb99e0fceeb02f9e074b1f7fdbba76d1aeec9f76d80e1b12016721b5f
- MD5 1689a4c010dbcd446f45799b9736d48d
- SHA1 505d3a5a15c99b0e35f57b194aa4da3a0dda83ee
- SHA512 4639c446ac3bed1b76e6b15136d73556623b0f28ffa45b5717a68c1ee6acd929d7f5ac39679863eef56f84d093a373bbc70a464d9cc678b6d25e220773994dd9
- SSDEEP 12288:OyU7vs4Fsi1eF6HFi+LuBua81amQI4bsXU75A9l9+oIDRc5F+ha:OyU7vs4Fsi1eF6HFi+LuBua83QI4bsXS
- TLSH
  T1B6E47CE9972C05F9E662C23C89566606F6F2BC5E03A0DFFB33D04EA51E1B5C4DA39640
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Maps connected drives based on registry

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6