246b349d9c5996d3d7a161ac4405516d6e069aebc88344102e9d8e112fafd056

Sharing

Copy URL Twitter E-mail

General

Target
NFA Accounts.zip
Size 1.8MB
Sample260717-svdsbaew5l
SHA256 246b349d9c5996d3d7a161ac4405516d6e069aebc88344102e9d8e112fafd056
MD5 05d473aebc4a5e78decebebb95375b7b
SHA1 af7c962cd9fc3554a3d311bc0b6e135b9517ec93
SHA512 c7e8f878527b2e46d82ba4091b035813ff4a7e6e7c2a662f3da0bfda3ed4286f80a47fb2a942ff433b4394f0b8363710642ec30f97c66e608eca7c1da02a9227
SSDEEP 24576:yxQsHGCeroetmJOwiXCAunPk/G8g3UWMex8SQX0sQJSgp85Js0e+8f2/PMjEHf8z:yVmyym70CAwUe3EU311sUj45Jax
TLSH
T1519523278E1C9682D71C9AF47E921D7C3E197918BCC12DFE110F4EDA3EA06215C8B56E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  NFA Accounts.zip
- Size 1.8MB
- SHA256 246b349d9c5996d3d7a161ac4405516d6e069aebc88344102e9d8e112fafd056
- MD5 05d473aebc4a5e78decebebb95375b7b
- SHA1 af7c962cd9fc3554a3d311bc0b6e135b9517ec93
- SHA512 c7e8f878527b2e46d82ba4091b035813ff4a7e6e7c2a662f3da0bfda3ed4286f80a47fb2a942ff433b4394f0b8363710642ec30f97c66e608eca7c1da02a9227
- SSDEEP 24576:yxQsHGCeroetmJOwiXCAunPk/G8g3UWMex8SQX0sQJSgp85Js0e+8f2/PMjEHf8z:yVmyym70CAwUe3EU311sUj45Jax
- TLSH
  T1519523278E1C9682D71C9AF47E921D7C3E197918BCC12DFE110F4EDA3EA06215C8B56E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  NFA Accounts/error-fix.pdf
- Size 356KB
- SHA256 567e032d427f6886ca7da8d24cc4453d9da065f04a6c24ea39dc47695164a243
- MD5 6adb1f2fa014f7d90106ed785a81014f
- SHA1 a6ca5a0c078e744acf4316e986876394549aad5b
- SHA512 b62fe22a6eb52b314ab647a9d9904b2e6b36495072806f0f897519cd5e7af1fdb61ce9651cac2868cdeca9aee630538c991113e8b42798e15ee9dd0fe0248784
- SSDEEP 6144:CD3B6O4tGVHGCN0lmsWneNiXL7ttLHzuPb7TaLgGfnLpebmtxVKZGfC0kVIr83qQ:Qx6XsHGCemsWQQ7tRKvkgGfnsmJOBOip
- TLSH
  T18774E0578D0C8B46DA2847E8BE531DAC6E0D6B1CF8C639FF06660FDA3D516211C8E16E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  NFA Accounts/instructions-talimatlar.txt
- Size 170B
- SHA256 286edf34be8d3a0c6b3fcd3bfd9df63e4bd2c90dd705c0ee7d2c7e63640263a3
- MD5 d22db6a9cf0008cb7c2dae6a5dbc19f3
- SHA1 c2f7e6cf7d8871d56688302925e9a550ef0380bd
- SHA512 a462b787be70cdb761d0b1a1d484bde83739e8975de2b2f7fab529e63b1ef32d6039423a8f0bb0747f1e83c9070e4859ab1bedf784c40b9c3e465c83c827ad27
- TLSH
  T19CC0C01F82ACC10108020941F50ECF91CC0B403F3A9404EA019C004CD3FC2B644033CF
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  NFA Accounts/nfa-loader-latest.exe
- Size 1.4MB
- SHA256 2b698aa3cd7e195f699b8b5b2ca0617f70a2fc484081d0a7f26596e38b3f0e68
- MD5 f89c0a1ccfeac11adcd7f592ebdf4944
- SHA1 cf1e01989c16c61a4bbef2d0905ce039382c38f2
- SHA512 a3164ba08dc1641552ef9b10e4bdb0702b0231249202e04c9ba825a035266900cc17154c963d7cd1b9bad7aa4e2e29b7fdd6e1a5f5ad5824127dd549b6686d93
- SSDEEP 24576:ZCAunPk/G8g3UWMex8SQX0sQJSgp85Js0e+8f2/PMjEHf8mJy5xL:ZCAwUe3EU311sUj45Ja
- TLSH
  T1B56533785FACA5E1D388BDF113E812343D26B4502CC15E94A00F9DDEABE05A565C3E7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan upx
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks whether UAC is enabled

Network Share Discovery

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8