7b189b1700e3c428b3d5368ed45e385f73240298ef2cfc9ce3eb1ae59852113b

Sharing

Copy URL Twitter E-mail

General

Target
dox.zip
Size 574KB
Sample260718-dwl3rah181
SHA256 7b189b1700e3c428b3d5368ed45e385f73240298ef2cfc9ce3eb1ae59852113b
MD5 713babf290aa551ee2e09435efe889c6
SHA1 d395b0b16ec9cf78489fe45c8d773f70e36573dd
SHA512 bfc81fc3406340732acb9bd62ad3d2f6cb40127630c2988c79f8309f9769e4435ec1f612360a98043725b18be28cb67dca7e547b593d46987831e07faa07843a
SSDEEP 12288:/fTbAA/A/yprl/GqVOfedowqoLNmoVBhsZhfJ4e9QhGONVd1M:/fvXkerlEfedBqANF5sZx9QFc
TLSH
T12DC423B7D0C6ED368814D57A0B865042E3B7EB536F20B4AA41D561484A3BC7E83BF7C6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution ransomware

Malware Config

Targets

- Target
  dox.zip
- Size 574KB
- SHA256 7b189b1700e3c428b3d5368ed45e385f73240298ef2cfc9ce3eb1ae59852113b
- MD5 713babf290aa551ee2e09435efe889c6
- SHA1 d395b0b16ec9cf78489fe45c8d773f70e36573dd
- SHA512 bfc81fc3406340732acb9bd62ad3d2f6cb40127630c2988c79f8309f9769e4435ec1f612360a98043725b18be28cb67dca7e547b593d46987831e07faa07843a
- SSDEEP 12288:/fTbAA/A/yprl/GqVOfedowqoLNmoVBhsZhfJ4e9QhGONVd1M:/fvXkerlEfedBqANF5sZx9QFc
- TLSH
  T12DC423B7D0C6ED368814D57A0B865042E3B7EB536F20B4AA41D561484A3BC7E83BF7C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Autofills/Brave_Default.txt
- Size 29KB
- SHA256 19b055ba11b8877ae74fa5adce2fee256b58789a523844ca1556c993b557f9d5
- MD5 0d6990ea87dc8c8e1990d2feb425df7a
- SHA1 46c14929b57e28e8ee256ce64c33b727ea80db40
- SHA512 8f01e4876a2a8528b680c9a6e44f3805c0a9db63b1e70ada14c7a6c1733c020371b4b9cc024cbed10c56c22d78315fb39c55a19eede7c3dfb777eb69035e0359
- SSDEEP 768:GNYU60ydQ8AO8/PXQSchcVwhc5J3hE81Hi+uT4pxDC:/U60r85y5C
- TLSH
  T1F1D273E6C5E04116135285AD23FB22094185431BF778E4F2F0FB586E4F2A76E23E6D8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral2
- Target
  Autofills/Google Chrome_Default.txt
- Size 1KB
- SHA256 7952eed0dcd12d32c6dd51aef293b9141daf2cdb181236fe2127bf068011f046
- MD5 b658ccbde6eeb4ba5bd87ab05d7dbead
- SHA1 175ae4276d59cc0d4ffd9c77fd16a7fa0e421c00
- SHA512 226207a02cbfc2ebb2a2a7fc386a3b30e64f003d1b13e05a2c9ce58969d1094ec73b8de19086b2d732bbadd354d5aa6ec264dc561b6fd28d5b89e575d26a7b4c
- TLSH
  T1DD41DBD1D2E092130A0384FA30FEB519509964ABEB3064F5B37E143CDF0ABCC53A984B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  Autofills/Microsoft Edge_Default.txt
- Size 1KB
- SHA256 8a7a08484a3dcb65618cf1986fcd768e9e303a0f8fe79966a48e79b440b14ccc
- MD5 ec4627ddea85ebefb7047bbc5c81ed08
- SHA1 58c95a5b792f57227814537bc7cba148266dc451
- SHA512 3024b5de0097942b144621e8b46044c3cd4e9e1956f83eeb7d5f4ff421a8d81e39f8239bc58df5f8f027bf75ee243b4282f5c8fc1607d7ff8f2afa5241b8c908
- TLSH
  T179212CE4A0D0A411146390FE38FBB95D65C80127DB7564F47B7E256D4B1F7CD6E88087
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  Autofills/Opera GX_Default.txt
- Size 1KB
- SHA256 2764dbb584b9ea351fbb62de94c9f6b3edd0ca20a88e072e1222a0d365899b4b
- MD5 7183d645d72ddefa69aecca03d746231
- SHA1 3bb49827b63816eb7ba5c62a030543d851999f77
- SHA512 a01b7ef40de553661e4c7439d0cd12c7b5cfbd1c4ca86bf24270db4f65eb9ca0185f3b1b3e7748d569515ce95f83aaeb32bb44d4df5d8372d8eee8d151952ca6
- TLSH
  T16C31A9F1A8C0C511956248F376EBFD4AB2418507CB35A0B47AAFC5294B07BDC5BE9423
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5
- Target
  Browser/Google_Chrome_Default_History.txt
- Size 371KB
- SHA256 e7e5c36bb052d7eb33bb3436c28a127891fe471a599a49b59c8d7f9a26ef0e5a
- MD5 66e07e362a46e94739b35087253e8c63
- SHA1 01207e2f87b19474b5e95686a8671b8c89a75206
- SHA512 65d09af8f005e5561d3b3bb922000a429f7d4d57bf6a760dcbf0af04f8c543bc765acb7dca825bb0738ebf70597d94c71d9c51101d4f0ec0bccc7e9d9dfafbac
- SSDEEP 6144:EVh/TfxQdTr+hhUT847zoIbRZzQAq+wP/i3onOOEd9HefWdtwyo/uox/OwUw0il7:EVh/DxQd/+hhUTN7zoIbRZzQAXwP/i3C
- TLSH
  T1DF8466E36F35395097A28342C1117F0DA767791ABD4DA0E57F48C98780C6F2B2FAAD06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral6
- Target
  Browser/Microsoft_Edge_Default_Bookmarks.txt
- Size 373B
- SHA256 8ff84d56b370ef33dfb3ea353bd9f3413afe8e7ebbce59e77387038b9f0ae6d4
- MD5 94f5cfc76ad8dd2e7d92a4c56156f15b
- SHA1 b1352c78adf4d1527f71d30ff3ed45305c5d5b5b
- SHA512 0dd7828fbf7c27675f13b041c176f8e6e574c12c4043198db637cd307801dac5d22da15bb2c09f385f95da7fce3fc02dfa5a6f37a61e64f7b477f1852b12f63a
- TLSH
  T1A3E0723F8002E24CF2022AE0E5007F3482070B9FEAD692A66212202D7B83736C2842E1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral7
- Target
  Browser/Microsoft_Edge_Default_History.txt
- Size 63KB
- SHA256 c80f022ee06a0b28782e9eeea4dda7e32e66b4ff28443c0efc156259b611bfd2
- MD5 9c8ab6225d25ee13571fe527d7ee893e
- SHA1 b547177a57c5b1f0511ac1c61999f975387a9dce
- SHA512 036d9702e0d7bee67e6795423cc30dbca03021d748150f8666e33b4e013f969ce21062c00607d2d8083566a50568111af28c269d636b6cc1ddba9a27091f9be1
- SSDEEP 768:gFRBhJordFjVsx6hMLrpdO6AkOdZnNKse3M4zTNXg9bXIK1fujA:sJ2Pqx6YO6ROdJNK/9zTNQ9bv1
- TLSH
  T189532CEFA7B6980B4B204342E5097E5DCF037A1ABDDCE4E877B092021193D371A985DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral8
- Target
  Cookies/Brave_Default.txt
- Size 149KB
- SHA256 ba6dd34734d7d0634dd02f65c2a88a827bd1565b5520601e362bba655eb962b9
- MD5 2c46d8ae463cdff6aeed2107d89e245f
- SHA1 7af6a7666946377a74ec29d98bdcd4aff99cc4de
- SHA512 ee0370dedd0779a587c6778eeee1e169e5ddfe638a78c0070189e37440df16e90604365b0b0db1ac5b719498d2b45357bffba6c7ac7fe176c556b2b3e866c849
- SSDEEP 3072:WjGfqvqBgNjgId7gXz8Yd/Xcyed8Ds3ty:WjGSiBgNkMgj8YNMyi8A34
- TLSH
  T159E3D8DFF6B38553775BA4389694A72A0E103F3B787CB794268074A991EFFE0148409E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral9
- Target
  Cookies/Google Chrome_Default.txt
- Size 145KB
- SHA256 33e197bf9fbff0975e63307ca5fffba06f6763d482a527c1f9c20feb9db8725c
- MD5 07bc41ca96e1909efc80a835d7227919
- SHA1 ca4317fef2b759ff4ae1acd911616da082e9ad18
- SHA512 c5b960a3597fb0b6b9f558301b169dcbe7aa3f167980af602bd657a5b34adff8a0e66b0222fb2f64a1cfd06567e513eeae6820c8e46464f861474c5284e44e09
- SSDEEP 1536:CSpdbRzzeFL1IZ9ErwJ7HBKieuFMzaRRUSn4RSO/H9eDd8sJITijmlpL:CShzeteaA7hRzFyaR3GSOkJJXjO
- TLSH
  T1A9E35ECBB7B78513735BA0385A989B360E103F3A797DB29425D434A980EFFE4258509F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  Cookies/Microsoft Edge_Default.txt
- Size 72KB
- SHA256 3d66d80efa5e5fb7f84fd06a561d592225790ea7c1379baa2619c102c88856f7
- MD5 b5384241cbf025376452d94b49c87e2d
- SHA1 e2bf0b2470b62366f82659c22348c59df0c20dff
- SHA512 1e1464d1478108ba8a659b0c358afccdb171562a83a07bf6ddafcecabcdbcddeba62cecb393fa76627ecca4e026aa7500cd0f9bbc995f1ad134a1e0019d63bc5
- SSDEEP 1536:5mWdStr0PoD9Z8BjOwnGj8UE8R2/JjDpo9aD7O3cN:EWdStR6BA8tIujD/P
- TLSH
  T19473B7DBB2B38553779BA1745A84AB2A1E003F3B78BCB2A4559070A581EFFF454850CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  Cookies/Opera GX_Default.txt
- Size 165KB
- SHA256 855daad9b93277cd02b755a892ab9abd9e2dccf2db1ebb1fe76ce99de589bee3
- MD5 a260776fc5361283ba7204ae17cb479b
- SHA1 daf43bc660d2682a91ddc43393e3a7c7a6d79261
- SHA512 4e35aca1c2dd36d90b5998fab39d538039ebc89c34fc0b46e6ddb172e15716005dea079fd4aa3010c3d5f3a0f99ab6ded94c7554506b4cac2ae00a74673d0fb6
- SSDEEP 3072:dA8Pcqf8AiXFLGfLuDPmqmR7E3sX+FWvO3roeLT:6GfXqmIsKWG3rtT
- TLSH
  T1E9F380DFB2B38153775BA0745A98973A0E003F3A3DBDB398259075E981AFBE5148508F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  GoogleTokens/Google Chrome_Default.txt
- Size 592B
- SHA256 50c0fec3ed4ba7b461429520068847226acf652d71e6375e171500cffa46eafd
- MD5 4565a1fc21a0c63053e676a46ccb8c85
- SHA1 b41bed2116ae465036cc28ca2d7fc470e53a95ab
- SHA512 41f6e713d36e13fe007068435438f38c30ea3d5d174b2dfcf04c2cea9bb3193be6232cfaadf54e2b50458a8dcf261a7a8c4d16e33d62533e0775770bb577cec8
- TLSH
  T1D9F0A0E1362596104C6360FB3806F37F2A48691BDA1A41F87F4E4AEAC3477CA0951086
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13
- Target
  INFO.txt
- Size 1KB
- SHA256 e0d19a22f018fea73cefd8bbc65728516800845767f1803225928778128fb796
- MD5 364c9f9b35bc78c718b1019e8810c600
- SHA1 04212c9b8bfdd2df38ce5247190c0e7b3e6c2322
- SHA512 8f7266a8b7977d5ee8abb9c2a3910f4c9876671ab41b158516128438de5cc7ce537f7df1d873eefb777a3a64afd79485b7930d6dfd091da8626c1771464c17b9
- TLSH
  T1C321CCE93C44491018B3D5F53A42FB1EE791860B8C6602F43E4D18F4EB833CE596E08B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral14
- Target
  Passwords.txt
- Size 17KB
- SHA256 db9e624e14b393e75465bb4f4988cf0b9da556b24539b4e50848d45861231930
- MD5 c4e6e14cb7c836003a180c898f0a9053
- SHA1 f64390cad63facd32123b93c36a59204834698d6
- SHA512 50f6661ce1add4da462507e2f3d77f597b25c8cd44b574341d84fbade903adbdee04f76424e72d459b7ded4ca102ed7ca3e2aca157f6c953e7d80aba3ce01a0d
- SSDEEP 192:+BtHkegVli5E7yU/M092n/F19QPGOaX5O41Ve4O9scDVd8y42iIV9VifhNb0BoNO:1P9cob+nJvx8vd
- TLSH
  T1BC7259B39C8694545362A3FDE0360E183485991FC4A6BDE0F197270C1F3BF27B9A52A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral15
- Target
  screenshot.jpg
- Size 254KB
- SHA256 4e66660d2dcbb96e3cd3f69b3b662ac5ba17ee826185c3ca35b60241c4863c2c
- MD5 f7f6bb3d276ea3c6acec3b08a92ee946
- SHA1 55600992c218d830f15c1942559e3b388e6ce00a
- SHA512 d7c59d34828971b7a4633b25462be7edcbf6af4f07bff59d74909d8ab8fd46be8fd4bbc9102cc6cd7101a7f4adb4e5f4b7bc97575810a416b9baa88858e5cefc
- SSDEEP 6144:Y9X78pn36qO8Dk+2SwwH+h+Tl6f0YmgyNopRrtVlf:+Qptt4LS1W+TciipVXlf
- TLSH
  T1F144AE178C189797A41C43E4BD030DAD6F1A6B2DE9863EFF102A5ECE3E612264C5E51F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16