d2401169fb5a284f7ec2f9b6b715727e640dc88a7c9fc6805b8b37a5574373eb

Sharing

Copy URL Twitter E-mail

General

Target
$RKML6L6.rar
Size 166.6MB
Sample260715-scyprsez2p
SHA256 d2401169fb5a284f7ec2f9b6b715727e640dc88a7c9fc6805b8b37a5574373eb
MD5 c53ce2b90be03aa48049a59150c6bad8
SHA1 ba7b10a88f3df9d228f559d01f8f30775c521b8c
SHA512 87ca541a7dfabf27879284a12168241676e7edc3673ad75b289f600f1cc681e0d5599bb9b2868a702f492bfab97e1402a57ec8fb912958ec5a53831745d785f6
SSDEEP 3145728:u/nnl5iQtzmu2SHbhTtuU+i185BxseS1SNyYbsQqRFRc4nVZZXzcD+XiTkKBE:eB5fB5b1wBvm0yWGRFhVZhEZTkK+
TLSH
T165883318B3B946C0A4517E3A029269C963CEFBA92CB794F7041E05F587E75A7303396F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

ransomware

Malware Config

Targets

- Target
  $RKML6L6.rar
- Size 166.6MB
- SHA256 d2401169fb5a284f7ec2f9b6b715727e640dc88a7c9fc6805b8b37a5574373eb
- MD5 c53ce2b90be03aa48049a59150c6bad8
- SHA1 ba7b10a88f3df9d228f559d01f8f30775c521b8c
- SHA512 87ca541a7dfabf27879284a12168241676e7edc3673ad75b289f600f1cc681e0d5599bb9b2868a702f492bfab97e1402a57ec8fb912958ec5a53831745d785f6
- SSDEEP 3145728:u/nnl5iQtzmu2SHbhTtuU+i185BxseS1SNyYbsQqRFRc4nVZZXzcD+XiTkKBE:eB5fB5b1wBvm0yWGRFhVZhEZTkK+
- TLSH
  T165883318B3B946C0A4517E3A029269C963CEFBA92CB794F7041E05F587E75A7303396F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Undertale/abc_123_a.ogg
- Size 40KB
- SHA256 a2f4db480e9dbecdb0ca3d38b64787cb06517768c68726b002828a9168a49a63
- MD5 09bc36f3f7861b929b7959a7a61b5768
- SHA1 bb6c19f3f749a8240fd020c4941cadb05d793a65
- SHA512 3cbc40a788e7def8ec2ac53e39e1d84a22674006d6f565405eee964e6ba22832e322521e6886580692871b8b4e98c07e1c2bd344a088b6cb5fade79b90218382
- SSDEEP 768:UFAouS/4+i/rnpc1kdjRvST+zR4tSAgwOjbsHAiWR6HRtX8Q:Uym/49/baGdlqCggvjKAlRgT8Q
- TLSH
  T18513F137D980A41DE02A327107FFBE6003FA95C91EE5E1BC3595EE4568E0F85AB322D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral3 behavioral4
- Target
  Undertale/credits.txt
- Size 11KB
- SHA256 5e5ab1852c4734a547e6143ef643b43d211e3cee334e949cb59fffb51bf04098
- MD5 85ef2348d70f81de3b00be93348361f1
- SHA1 6c734e646ca25e19391099e32aea9f1a006722aa
- SHA512 01661bda880aa2ea085fa98eb565fd5b938cb86d673908fad80980ea3a13d0a5255a431a909388740a33b8e33e2ae4b4a38c9de141eb072048d47d81aa6268e3
- SSDEEP 192:LWeim7I52WPeEvoxDNFMIjV6W+2VJB1yum1JxqjKrxnqBKpZXgBrt3W+L/GqkWb7:LWeimEneYoxDNFJEj6JKZxhAKPXwrtmw
- TLSH
  T1CD422B95D86680D5CDEF33DD0D829092F4DE81A55A2B36402C86E6FD33009ED3BA8B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral5 behavioral6
- Target
  Undertale/data.win
- Size 60.0MB
- SHA256 b718f8223a5bb31979ffeed10be6140c857b882fc0d0462b89d6287ae38c81c7
- MD5 5903fc5cb042a728d4ad8ee9e949c6eb
- SHA1 cb394cdd8a663bd0e39a5cf1f1607c3d12da4b58
- SHA512 1bb4d74acf76ee94ae877bbe81ed1da1b314726b95b9663fba16b98a450378da10914e53d552da38dbdc863cba4602f48f878b4b377ec9ac0d78403bffc8b2f0
- SSDEEP 1572864:Gyw50GXNl62VQD50jfE8KDWYk5YGIeyz1fx1ITJ1h9E1:G/1XH62VYxo5YGiVTy7A
- TLSH
  T19FD78C69F502E6E2C5507276CC45FE817110FD41EF25062B38E8BF6EA8B2249C85F99F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  Undertale/mus_a2.ogg
- Size 186KB
- SHA256 48e6ea6b0e5c5e52c54c3d93150f0d7952d04de982403fdaf05030ece41461b9
- MD5 7cea27fd565dace384f8d29df80b3689
- SHA1 29d63a309d903be18920e412fb8ed56fa77116ce
- SHA512 c2df7adffe959ac05343cf5e0e58e8dedc337bf91ec91b0e0130c95e582400a6678cb81b79ec8f952b15629e3fb93ce1b9b1a5c7382ae3aa80fcb8d8f1653de4
- SSDEEP 3072:qCSTTJRfpW+Y1ZKJ2awzcGvyNXoJ9XAxnwn0tEPqs39UXk4AMsgIL+70DlHkt:4dRxW+YKJ2awzcN+9Xc5s3mUGIaulHkt
- TLSH
  T15114120C592CB08DC428977F732A4C79D3BAFB2526B6F9C8D506C47225378F9AD58C82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral10 behavioral9
- Target
  Undertale/mus_alphysfix.ogg
- Size 36KB
- SHA256 26c16ea3bd1f416ab1cdf078bd52263f3d10a78b4a209a44533a0d3767b1b4aa
- MD5 1e2302743358b69c7494c4b934d3a891
- SHA1 c3fb37add1ec8a2e4e3f4e5fe07e03cebd21754e
- SHA512 aea48d41484830f91254bf3b78ec26c522320e21144a0b87086737b938541761890524034f8eaf9adbc348e3b3469589d8f61e890218ad7eaa8b0e646fcdb61b
- SSDEEP 768:UZpgBCrkVnQ1tKTcMCU480x8KtosyQKC1Z/nGTOn:UZp2CQVnQ7wcMu8S7y+dnGTOn
- TLSH
  T15EF2F19B57EC8218ECA1F2325EA7D650E7AD1AD56335F282BE4DA20D48224907F330DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral11 behavioral12
- Target
  Undertale/mus_amalgam.ogg
- Size 903KB
- SHA256 6d4c338830a7287e2baeb91b73557b66f3ba03b97d89a542c4713d1c5cfcb02c
- MD5 3d98aa2d0b116d12c5ba27840740b89a
- SHA1 24de2067f855387bb41882dae30904b5eab301df
- SHA512 bfa7e6cc5ed0dddad44b1307f362c38dbed041c246e8a497afc71da5520f1431d0b9bce03c272067337182ccdb83c9ea1901195241297fa3ae1cc35b70cab4cb
- SSDEEP 24576:qvgQ7i/2G8iL0Wjeu5w4lg7EDIDDd9En2XM8I2S:qvgQ7i/vLrlRQ0I19FX/C
- TLSH
  T1E71533C69B07A11CDF059273B6239565FBBC253EF21B23B499B494740AF33889A50F2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral13 behavioral14
- Target
  Undertale/mus_ambientwater.ogg
- Size 24KB
- SHA256 2d413bca82f599ec37556fc8201065b9e2c3d46f76278679285629cc1caf7509
- MD5 a6eaf93759788589b0230fef6da68736
- SHA1 adf4a957633108b3b137965e1a6cba909ac6e783
- SHA512 92ac05b5ede72a845d4d8cf34352832bdf27cbd7c6cac947629efab94004ddff4f81c40e6213f7c6ae11f3a756f1f662fe6b7089b51d3c6519a53e27154bdd58
- SSDEEP 768:BZzkyyKI+2pO2epOVg3JbHtQOhJOKWAtnaW:BZzvbpOUHfJpSW
- TLSH
  T11AB2C0543EAF493BCA3275B2FA2B01BEBF62319D1774DFC16514F1222CA3518C947298
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral15 behavioral16
- Target
  Undertale/mus_anothermedium.ogg
- Size 1.6MB
- SHA256 90c658a788c25b8474216a544068e589fafebbb735cdee47faf195578cdf03cb
- MD5 78cb8683e76072a8d7fc7899c020566c
- SHA1 3790a54825e85ff1de310f924952f351baec1955
- SHA512 93134e1e918fc1e2bcb11721b059622fa6e1e3c5e758679547c28a4364db4d645358a42d4fc888b2cf095cf7211a067dc1491cf89712f3c8a99c78df5026f0e5
- SSDEEP 49152:VA+TPfT+jW9rn0oWK9DLMHhLDJttG9kPfqPDxLnM:mqPfiq9BzUBXJ/kefqhM
- TLSH
  T1AE7533B2BF678FCCCA850230C39B7B17B6243F3C27112C8B0679295936176D56BDA295
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral17 behavioral18
- Target
  Undertale/mus_bad.ogg
- Size 15KB
- SHA256 dcde5d552cc34c64ec5a7993d646c637be596c8a477ad63765429b8a27585cac
- MD5 910464223b9f7cfcaa4b94c63751f780
- SHA1 234318f30332c83742435743e635415f7b13c1a7
- SHA512 d98dd3c5d6096686bade6a067a8d9b8738c26a78c4980e51bb74a6e1837811926874b2559b2c3dd8a23a0785f41544488a0108c7a6fb4c198d379b1667faa283
- SSDEEP 192:gDJo+OFStME/FnQe2iUbjhjDaNFu4U8urDKtF6r2i3DxyTj5kyn:Ci+OoMmnQl12NFu4NOYF6rR3ly5nn
- TLSH
  T13462CFE4DD64D86CDCB2E3BFB51A52652FE0279CA240A4E6FEC8992162F9D065C00C8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral19 behavioral20
- Target
  Undertale/mus_barrier.ogg
- Size 287KB
- SHA256 fcf4fc4ba69ce23537b985c531f599241b33c9859a96dd4c6d3ea4628edc4f8c
- MD5 434b91f4dfbeae243dda38030e83e35d
- SHA1 7f87ad15847872b2e0e34fecf58f58cff0f90bda
- SHA512 9e70bb62ec26e10ce4aedf49a7e8ef3ccabe3d098ae46f5e01426c50c9a887fb3dfeb7eca8ae6c85288e8727ef3ec1cc451f4e60fa626b24372e01dd32896b2e
- SSDEEP 6144:UCGXPCyO++eB5Br4f/w7TPeJuTyj1jMD2knAF/s+YslQv4dEd:PGfMNOBrEw/2Ju+j1C2KAi+Hl64dEd
- TLSH
  T13D542350CFD63E45C87851BAE42B4C1AE635172DE72C3F1CCB41AC152EA6B84BE23B59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral21 behavioral22
- Target
  Undertale/mus_battle1.ogg
- Size 642KB
- SHA256 b71af14aae6e817239a3255296e1a764a4fe4ee25ef67f5540577f5c0d37cea3
- MD5 a6761dc72a0ec1ff4b7cd324e6ca20fc
- SHA1 2f69cdcbdb3d9cd583b9aad89df91ffd424c1bf2
- SHA512 0fe902743967b75b4e7608971adc452cd00c3d7dcd51394fcd889a806f69b5e7bb269416815ecd575d21120f3980849cbfc3035cf4d417cad01a7b4cfe5223a1
- SSDEEP 12288:WK8IeFbW9huz/JFE8yiQsEtMdV3FvPLWJBi89cg97LROPo:6blFefsyMdt9gBduxPo
- TLSH
  T1F8E423A6E256FF28F36AB23799B74CF513BC0044EF895A066615033D5C7F6583D08A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral23 behavioral24
- Target
  Undertale/mus_battle2.ogg
- Size 706KB
- SHA256 7a5d68eeab84740cb61a01d94274be7e5a1902183d340ea915e16d9d48b16a7d
- MD5 c590a824ff5021f90d459780291921e1
- SHA1 00907164cbb78be4db25f190d1d8d9b072a3c7e1
- SHA512 a08ae3ef74a57d9f54b5aedfc058162361038c2911d28c6c8bbd04decc88039476803776d3a496d4e67e1f11963be6ae5474b90e5e5a8e3db48a9d28c8cd3cc4
- SSDEEP 12288:gZICrrYTWCp8fvUBN7byPOKNR5BlOvM2ZoNy/hwMiSn4vlpm6vy:j/yK8fvKJWPOK/5vjeoMK64N0Iy
- TLSH
  T1EEF42381A60B955DF0FF74BE159F7282B6AD220F134AEB44CA63A43B3E87554436243F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral25 behavioral26
- Target
  Undertale/mus_bergentruckung.ogg
- Size 135KB
- SHA256 38390e04d25a2b45b5520d11475769fd372e50046e9607a0c6fa9c7dab4ffaa4
- MD5 7bcf55005118d033a1c714120c3441a8
- SHA1 c06a4668d62968799d43e1c05f333ffc32c88ad1
- SHA512 3457b81815a8311235c01bb3cce223db639595696115119e5a0d73d7318917d95a5c8f88b6ba1ebaa7529bc5c74a22ca3064006890e8727d1ef43784d41d94df
- SSDEEP 3072:IPxGWg+bYAT1S6DWi0L0mfV4EH1OU1e86lQy2l+Ijq5hrEdhlq:IPx5T46DWqkl918t2qWrq
- TLSH
  T1D8D312F6DE647889F4E6BBFE30ADD63323C8B25819E62296DF945360F12902CC05B5D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral27 behavioral28
- Target
  Undertale/mus_bgflameA.ogg
- Size 53KB
- SHA256 0fa89a8b8d65c7201d02bb5d080871e312e7321614f181fb9b2387ebb4d43bbd
- MD5 a0850c405e4d82e268120cfedb7b294b
- SHA1 fceef7b59c2f57009658761805226132a352cfce
- SHA512 263097cc5d90f2ab4e75709938c67e33493eda52fe91760704ab01804a6bdcfbf5dc204ffd870dfa5da77b6fa49dbab94d33e23988e63ee7d14f892e552d9aa2
- SSDEEP 1536:uZYArMY82tE/AH6CmUD0rQE+WFcsHkyBHAyU:rAIDuE+6/UQrVTFdHv/U
- TLSH
  T1913302E080DFD1F6C4BB9079AEFF1A3878B1273E3265C5F2C54D43299830359A99E516
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral29 behavioral30
- Target
  Undertale/mus_birdnoise.ogg
- Size 331KB
- SHA256 1dc3b122d9853efad045dc56d25f7cdcb54298d2124d3caebdadbb286ed742d2
- MD5 e7f46cb8433902fe02be26d242d489f5
- SHA1 aabc8c6a65b4ab81a089590d93a12077d1ffbd23
- SHA512 210a53a1d8126cd770d24d447a6cad47166573b7248515d9941bfb9e9310a681f68a964cec86f19b00f00cf442641d735495c1764174df3b96bcfff5b49375a1
- SSDEEP 6144:J3+BrPDuaZCjOdMXkdE9s4Kgc7lFOGtMP++EzglejIjcO33/khZaEO5iTxce:J3+VPF8OjlF5tMPOjEc6vkh4x5i6e
- TLSH
  T15D7423D21ACE7A11C6E4B27C3B275446F6E2F19C84F1DDA2FA84576362C48843A2B1D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32