General

  • Target
    OpXOyuApWKTlFzrV.zip
  • Size 24.4MB
  • Sample260721-ehc4cses7j
  • SHA256 2f9eff4232df130b7d9e64f95c080e32c7d5bff772d32c0bdf4885cf06e84ea6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      OpXOyuApWKTlFzrV.zip
    • Size 24.4MB
    • SHA256 2f9eff4232df130b7d9e64f95c080e32c7d5bff772d32c0bdf4885cf06e84ea6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Potassium.exe
    • Size 74.9MB
    • SHA256 32c23117961e1c5e56d108f087314151f1c714be5015b5622871a2cb346fb0f7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Network Share Discovery

      Attempt to gather information on host network.

    • Target
      WebView2Loader.dll
    • Size 156KB
    • SHA256 4cd3ffd5f52122432b6537b360c2317f96650928c927bb3caa59d5807da573a9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      autoexec.lnk
    • Size 2KB
    • SHA256 efbfe672f08e384cf022bd9722e5b83ca75f602b53fc0d389525b179303897f4
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/monaco/Fonts/JetBrainsMono-Regular.ttf
    • Size 167KB
    • SHA256 1f376439c75ab33392eb7a2f5ec999809493b378728d723327655c9fcb45cea9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/monaco/Fonts/JetBrainsMono-Regular.woff2
    • Size 56KB
    • SHA256 d43399032a7a3c539287a31645ded08075a3ca72de0921b62a51f65c3ca7a002
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/monaco/index.html
    • Size 18KB
    • SHA256 589dfdfd1851ef4e64a6f346de8a25d125e9113957fde3c0f7e8ce330da9a63b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/monaco/vs/base/browser/ui/codicons/codicon/codicon.ttf
    • Size 69KB
    • SHA256 4946e7465803ccab735800d9236f188c2200d28b395e77727e9aa0baa443b87a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/monaco/vs/base/worker/workerMain.js
    • Size 174KB
    • SHA256 19b566655d73370a820a7d6fffe7af03dba3af4997016c0983be5bd188603ec2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/monaco/vs/basic-languages/lua/autocompletes.js
    • Size 2KB
    • SHA256 9636806a05da6a43937d122e2211e8d2877ed95caaf691f4f079dbaf47e0c6bb
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/monaco/vs/basic-languages/lua/autocompletes/base.js
    • Size 521B
    • SHA256 9a6c60193eb2dda7c2682bf9c7ff7e01b0f6000d70881583f0055782c8b2c619
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/monaco/vs/basic-languages/lua/autocompletes/classes.js
    • Size 33KB
    • SHA256 75418233aff9a1401f6c467f8ca20999803436bc1ebb463123d1fb94dcff1f38
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/monaco/vs/basic-languages/lua/autocompletes/classes/DataModel.js
    • Size 11KB
    • SHA256 573e821c40792e10d2dab59ee3483e2482379241c94b2b98ec5fb098556e3e89
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/monaco/vs/basic-languages/lua/autocompletes/classes/Enum.js
    • Size 594B
    • SHA256 9bd9c85c5d1f476e663889ab2008f83b323c8d794abb0df35d43091c689ef64d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/monaco/vs/basic-languages/lua/autocompletes/classes/EnumItem.js
    • Size 1KB
    • SHA256 f7ada012dcc309b7c1cd272d1a81657b0ddb3d51521e682116522099285d525e
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/monaco/vs/basic-languages/lua/autocompletes/classes/Enums.js
    • Size 777KB
    • SHA256 799c0657b0ab027c3ec0794e8934bed4a4a8e7f063dcae47783a7f32fbeda25c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/monaco/vs/basic-languages/lua/autocompletes/classes/Instance.js
    • Size 16KB
    • SHA256 807dd6d35bf5fffcd4de4aa4ed1800716223a6fe014077f23f2f652ac86d2a31
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/monaco/vs/basic-languages/lua/autocompletes/classes/Model.js
    • Size 7KB
    • SHA256 17b72f11f227d6261e44b0bf49d6cdc4ed88cef93c68384ba73f7550d9614d99
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/monaco/vs/basic-languages/lua/autocompletes/classes/RBXScriptSignal.js
    • Size 1KB
    • SHA256 660f088e8da6e3c7c16ff4df184a92fe96c2b2ffb8c3b3411f30b68d93723dba
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/monaco/vs/basic-languages/lua/autocompletes/classes/ServiceProvider.js
    • Size 6KB
    • SHA256 60a9fa2721d16f3162f5701b7ada27de313794b97047cc7bba25f82859e4c75e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/monaco/vs/basic-languages/lua/autocompletes/classes/Workspace.js
    • Size 12KB
    • SHA256 251d21959744760aa1e79274b7a9fad433fd42b2d3fb4783f56f0b070d06cf8e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/monaco/vs/basic-languages/lua/autocompletes/functions-pd.js
    • Size 103KB
    • SHA256 4eee4425a844af77022f85a101a0e914e9fb90168a80941edbe40e89b6cb4de6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/monaco/vs/basic-languages/lua/autocompletes/functions.js
    • Size 10KB
    • SHA256 269c81ad08e8302bbd3bfc1463e2a4d5c263a20894536a913501bb36df26a196
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/monaco/vs/basic-languages/lua/autocompletes/globals.js
    • Size 757B
    • SHA256 f7922ec8a50df2a30bef9cc7e9148934a9edcbaf8874a54b81ddd4569120b836
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/monaco/vs/editor/editor.main.css
    • Size 68KB
    • SHA256 85b305d49bae83ae9fb7d5d1c84d93989e3dc252db38a7dc07b7d349902a89ce
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/themes/default.json
    • Size 3KB
    • SHA256 dadf3e82053443240761d11c6a6a839f6d94664a580488d45791bea087721404
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/themes/dracula.json
    • Size 3KB
    • SHA256 09b7a998046bfa898ac047d72b39f861a7e4c41253ea777ad6c4c710d6ecd97e
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/themes/gruvbox_dark.json
    • Size 3KB
    • SHA256 0e137922f77bded9c7d1ef7fcae5c7f5119bb1196989871164119aa9c95861b3
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/themes/midnight_blue.json
    • Size 3KB
    • SHA256 f05b289deef6d1a0b6113bd7037c4269fac41e11971ba22c9538160938daa6a1
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/themes/mint.json
    • Size 3KB
    • SHA256 0f1086ff09f72695d928333fa8c047e3fbfa469ab9d81158b3d0bf605eec25c8
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/themes/nord.json
    • Size 3KB
    • SHA256 9317b3eb75d6f7e89b40d42d346e6c14e3146cb678804186847924e4645db2d4
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      bin/themes/rose.json
    • Size 3KB
    • SHA256 f17337517d9c6dbebfa25b459bd5c79393f81281502a2b2dd69410a01bea1387
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

discoverypersistenceransomware
Score
8/10

behavioral3

Score
1/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

executionransomware
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10