c51bb40f2dcc25b5190b34ccda8c0d2099abc98d31b2c4a91897916e34c7f3f8

Sharing

Copy URL Twitter E-mail

General

Target
DepthScanner2-v2.6.58.exe
Size 2.8MB
Sample260721-2ablwsvdqe
SHA256 c51bb40f2dcc25b5190b34ccda8c0d2099abc98d31b2c4a91897916e34c7f3f8
MD5 df5cfb0e5c4a7c7dd3eb9200026e70de
SHA1 9c55ed5c2dbea17c768b3a636a260aa1c2ab35c7
SHA512 7201058cf1d338debcbb9bf89c18aec8562372d1da8dcec10e80fbe1ef6d940c53f0abbf58320634dbe30d5a7272df62841fb6bd7b034687ceb270e941cb7133
SSDEEP 49152:zOTaf2E3rHX7mDbxbNxeLU86BIjAq4Al8n9YbG3PZV2bchP6hIqI8ERqZ+:zOT82EbHLixPeLZ6BIEq4AlJG3ybchCY
TLSH
T162D533B14A83C92FE58883B026DB9C7EE1191D8DF5B71F425F20F79DA231245BBE9604
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  DepthScanner2-v2.6.58.exe
- Size 2.8MB
- SHA256 c51bb40f2dcc25b5190b34ccda8c0d2099abc98d31b2c4a91897916e34c7f3f8
- MD5 df5cfb0e5c4a7c7dd3eb9200026e70de
- SHA1 9c55ed5c2dbea17c768b3a636a260aa1c2ab35c7
- SHA512 7201058cf1d338debcbb9bf89c18aec8562372d1da8dcec10e80fbe1ef6d940c53f0abbf58320634dbe30d5a7272df62841fb6bd7b034687ceb270e941cb7133
- SSDEEP 49152:zOTaf2E3rHX7mDbxbNxeLU86BIjAq4Al8n9YbG3PZV2bchP6hIqI8ERqZ+:zOT82EbHLixPeLZ6BIEq4AlJG3ybchCY
- TLSH
  T162D533B14A83C92FE58883B026DB9C7EE1191D8DF5B71F425F20F79DA231245BBE9604
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery execution persistence ransomware
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  $PLUGINSDIR/NScurl.dll
- Size 5.4MB
- SHA256 3d134d39cf51289a00ddca1d3b1218004ef42309e3964a25f4c292de11d1c3cf
- MD5 1c908ecdd6ec0c7c048d90f444f3d1da
- SHA1 199174d2e89e026cf6dbd9689f8dbf42459a408a
- SHA512 087f5c98c8dcb5d8d5b9605fbf94374a8eb0cecca60970855f446b86865944f5368433e969ed45e153737448657a0d9cb6194fd8f9001e9b9ccf0e524fadae50
- SSDEEP 98304:XaRTNm4K3sVqhBxu8YD5Hvc2DG9czBKCjspArM9IvDLOP1MOVCcuePqBLJ9ssIj1:XaR5mj8VqhBxu8ayczUCj+ArM9IvDSP5
- TLSH
  T173460794FECB04F1E55384B0ECDBA37F8B349B018125D6BAEE4C5E56F933A01152A25B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
- MD5 4add245d4ba34b04f213409bfe504c07
- SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
- SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
- SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
- TLSH
  T188426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DBA879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed
- MD5 1d8f01a83ddd259bc339902c1d33c8f1
- SHA1 9f7806af462c94c39e2ec6cc9c7ad05c44eba04e
- SHA512 28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567
- SSDEEP 96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc
- TLSH
  T12A120992E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 01e72332362345c415a7edcb366d6a1b52be9ac6e946fb9da49785c140ba1a4b
- MD5 b4579bc396ace8cafd9e825ff63fe244
- SHA1 32a87ed28a510e3b3c06a451d1f3d0ba9faf8d9c
- SHA512 3a76e0e259a0ca12275fed922ce6e01bdfd9e33ba85973e80101b8025ef9243f5e32461a113bbcc6aa75e40894bb5d3a42d6b21045517b6b3cf12d76b4cfa36a
- SSDEEP 96:JwzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuH0DQ:JTQHDb2vSuOc41ZfUNQZGdHM
- TLSH
  T171E1093571C02DF7D08D89743816BD2F43F4D52627BE05A04A7B1AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9