3e761cd8e707c9432f6a65b86e1468914b8eba9a24942fe4f6c5f84a92afe68e

Sharing

Copy URL Twitter E-mail

General

Target
Disk 2.iso
Size 429.2MB
Sample260711-s1vb9ad12l
SHA256 3e761cd8e707c9432f6a65b86e1468914b8eba9a24942fe4f6c5f84a92afe68e
MD5 1468d27cd03e0734b9b43b6067e7acc5
SHA1 57c22e253a99ba1fef5f8674a57b48185e640203
SHA512 ee266cc37d4e75224f52211bbf55d32d084d53eadddc7403ad6b350acb5a28fcd6b3db3cd0de8a2eebed875d18933a3a2f981383f35024e0bb93ec8df68c38bf
SSDEEP 12582912:cotD1y1OYsJAMkkGOFusQ1pGUfsq+7fBjp0O8FKT:lxy1OYs2M+pFz+7fD58cT
TLSH
T1D72933E6FE8CCE7BC03EAC7709842D852608B562D9DA54F5C4370B6D8F69ED35079A08
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery ransomware

Malware Config

Targets

- Target
  Disk 2.iso
- Size 429.2MB
- SHA256 3e761cd8e707c9432f6a65b86e1468914b8eba9a24942fe4f6c5f84a92afe68e
- MD5 1468d27cd03e0734b9b43b6067e7acc5
- SHA1 57c22e253a99ba1fef5f8674a57b48185e640203
- SHA512 ee266cc37d4e75224f52211bbf55d32d084d53eadddc7403ad6b350acb5a28fcd6b3db3cd0de8a2eebed875d18933a3a2f981383f35024e0bb93ec8df68c38bf
- SSDEEP 12582912:cotD1y1OYsJAMkkGOFusQ1pGUfsq+7fBjp0O8FKT:lxy1OYs2M+pFz+7fD58cT
- TLSH
  T1D72933E6FE8CCE7BC03EAC7709842D852608B562D9DA54F5C4370B6D8F69ED35079A08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral1 behavioral2
- Target
  out.iso
- Size 429.2MB
- SHA256 3e761cd8e707c9432f6a65b86e1468914b8eba9a24942fe4f6c5f84a92afe68e
- MD5 1468d27cd03e0734b9b43b6067e7acc5
- SHA1 57c22e253a99ba1fef5f8674a57b48185e640203
- SHA512 ee266cc37d4e75224f52211bbf55d32d084d53eadddc7403ad6b350acb5a28fcd6b3db3cd0de8a2eebed875d18933a3a2f981383f35024e0bb93ec8df68c38bf
- SSDEEP 12582912:cotD1y1OYsJAMkkGOFusQ1pGUfsq+7fBjp0O8FKT:lxy1OYs2M+pFz+7fD58cT
- TLSH
  T1D72933E6FE8CCE7BC03EAC7709842D852608B562D9DA54F5C4370B6D8F69ED35079A08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  IceAge2.ico
- Size 7KB
- SHA256 36e4a0f0f13ccbbda40bf52eec037b7c391d16bd08fd0821f0beea24e91e0447
- MD5 1eaba07e9e8162ad936d068f184430a8
- SHA1 0f55c0d6d527c873db33184e255ab767e64ddffa
- SHA512 2207f5ccb7f2978e834fe24f3bb422559d1e4bf584141b13de46735aa0680d6447bc2da06726097aa37fd8d9819daf7660564765c48b927e0f8fa8f2230ada53
- SSDEEP 192:x2SX3DCBb/0VOKxosYtXTQj3noIISEpBv:x2SX3GB70JxosYtTQDnooCBv
- TLSH
  T1B4F15C48B709B280C0625B32B15E878D712D1CF23619876B2EFBFD373EB206EE440595
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  autorun.exe
- Size 1.1MB
- SHA256 addc58d3363bcf8dd0d19855b68eb5f474826bf7f898ea198c390af3e6fd76fe
- MD5 533e0c75bb369ad03e797e3a5c6be92d
- SHA1 93ee7dd9c6bae06256084e0e90fa7d7e54cde7fd
- SHA512 eb9cacb9fe7c917c93e1cf30f60f8c95df37cfa01d436ec0080f2251c461fab2f03cf3104aa63d7fc4c08e6332b27424a52590db99747a52462c61412ccb85ca
- SSDEEP 24576:1Uc6t4BN291/UX91w49mF7+bXClixk5jFIFqdpF+FrFJFBFH49lq4jQmxMzNfBQO:1UcvN29lUPD6dnS4cBQw/l
- TLSH
  T1A8450253B7E8D8B9CA6323328FF6BB49B2BBF5200E32464375691B0F4A305C45636759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  autorun.inf
- Size 47B
- SHA256 724a43360d77aba928e779454fe46364eeee248fe7259357424572c7e7df6032
- MD5 2cdebaf6c5711355ba57d0ab41d73db9
- SHA1 d4f0c0f660515d39bc61b7eac89b896386ff6ce1
- SHA512 df8e909d34e46f19f261e5a328ad02645d77f3497c39dbf192014fb2d13d3592587685d1372f405b9a9410bf6e870d3c7d33a66bbd2261b10f75751f08c97483
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral10 behavioral9
- Target
  data3.cab
- Size 428.0MB
- SHA256 e645cd3f95d3d8b59a4063224633e75032619e8eb9d215bdac72d70db504c6c6
- MD5 88c4af41843032b696f045f521d8fab3
- SHA1 f9cf6bba97a14820a1c667dd9c44a856fd8c8e20
- SHA512 8938537d9e93d5fad7dee9c59b09dbf857501e345e9f028b72df2761ea0ebe8af88bfe845e0c36aae807cb9004e32a0245690f24ae774a8a589d1bd5845ad667
- SSDEEP 12582912:TotD1y1OYsJAMkkGOFusQ1pGUfsq+7fBjp0O8FKTZ:yxy1OYs2M+pFz+7fD58cTZ
- TLSH
  T10B2933E9FE4C8E7BD03DAC7705841CC51908B6A3D5CA64F9C4334BAD9EA9ED350B9908
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12