2df33342b6996b4b1a4c0e9cd5e7400b99c7396dc8cacc1e76e7b2375667bf9e

General

Target
8_vkdolosa_2.0.rar
Size 2.8MB
Sample260721-pmbffabn2z
SHA256 2df33342b6996b4b1a4c0e9cd5e7400b99c7396dc8cacc1e76e7b2375667bf9e
MD5 5fc3b8d79994d1a7d141c972d7cda34b
SHA1 968164acc017056cec8d1862aac9a5c43360932f
SHA512 401014a5464a458aeeac16204d57ef29f2f5fc569662e32e2ff120f0e36fd23c3958b96fdede2ec80a95aec11bcd35abc71ae49b4d00ad22d71420aa9e3353dd
SSDEEP 49152:A1UQFuGCPA6uZrKqclZAUYJqAj1OfWTuLVcff8OqUB64fOxL2L7DdxHlZEinH:A1UQjCI6uZ2blZAm+OuiiD7O8lxoiH
TLSH
T1C5D533CB0E953DFC0B10995076B18A682B95E0BF53621724C3A3F681FD5E4D7A7E9023
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  build/msvcr71.dll
- Size 164KB
- SHA256 42ded6072e28ed5394b0a832a0559b8e618490764f2490dbedcf7e5479537573
- MD5 5776a4ef7f492636c052ae64b35bf4ce
- SHA1 33f56f902e20ed138baa351f7446bf40abdd62c9
- SHA512 829e286fd303577c2c6352c6279b084055f2bb772650f7b26d4b0a1c7c0185385ed8bde855fcc598c09ccd79ed92fcbf47537c7ea09786fddb6005dee3b9ae6d
- SSDEEP 3072:HTXFhfsEYqkiQLJEYvkxEzUQ7F9aR35K/IGopf9W7lFiMl9Kd8w/FMciFdNINrbL:H7FhfsxqkiQaBEzUQ7363URGEsG9Kd8U
- TLSH
  T1DCF31227FBB9143EE1879732873AE66F542AC5C28733E7058A8907B85E5171D9640FC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  build/vkgolosa 2.0.exe
- Size 6.6MB
- SHA256 c0e08ef9cba658b18270360ed019ebd4433a5efba6a457cc62f9688f6c48901d
- MD5 57e122971f8fe9134f50cba7f3e9d41a
- SHA1 622ef11ae0919fb9d5de11d2d0b02cdff514e511
- SHA512 3c0186648e1e58d299a970de465e04d05b8671a0d2686a23d4e6d11c3762b4d0e98fa4f829c6691d0266a9d50f860bcaf1c24abeac460f3b54711f4ad1a78172
- SSDEEP 98304:5e1aO8bX2W7UJCc5Z88NYRBNOy4V5SJBAUZLBn5Dl:5e1c2WLc6LmIJVVnH
- TLSH
  T19166D102F38280F7D91711785477A37FAB399F0616119987EBB0FE891D323517A2A39B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery upx
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4
- Target
  vkgolosa 2.0.lnk
- Size 616B
- SHA256 2b6aa1c478027596fa5e1fd7c2b0de78e352a7c6f896d0b7fb77fefd06c59000
- MD5 52813a933abf1232232a6475920d64c9
- SHA1 5df1ffbf76538eaf2d72531b25249425f55e765e
- SHA512 7d3e9347245671ee75799f7bee0d4d2a4ae0da1d081f4d6e79c899e17a601a39a65c1309a253b29f7583271364071e8ab202910262712c29d5480bb4853d10cb
- TLSH
  T169F081181CD136CDFB3395F5989547DF8535761F99EC534D81C88D0448722419868FC7
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery execution upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral5 behavioral6