138de315059fd8f73297c2271709b4be3ec3b051636a15cbc0d6956b63290aa6

General

Target
Nueva carpeta.zip
Size 24.1MB
Sample260722-21nddadc23
SHA256 138de315059fd8f73297c2271709b4be3ec3b051636a15cbc0d6956b63290aa6
MD5 1f709cc0de6af68432ba071ff22e64ef
SHA1 c3d22201194a3aed5c45adbaac86e0049ae62231
SHA512 85358ef4dbcd6c195dc40b162963e3eb67bd061442815551fc4d09515c58af853374f30ddf8556d9427e9a7dddde5c091f0c1adc79a4ea3e67436c792abe63f2
SSDEEP 786432:mCH/zqP85clQNDcPTiw/RC2NUofqRCkTG:/fzqHq0vXNUMITG
TLSH
T1B64733907D513788999BE834082D8C3433CF88FE927A7916A15737A6BE026D15F72DE3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Nueva carpeta/winupdate_version_720.ai/winupdate_version_720.ai
- Size 25KB
- SHA256 7893a9ec128fd54084393ddba814f264cb43c72a21816288faf5e0955998bfe4
- MD5 94a3f8d24978bfc82170c202dcce57a2
- SHA1 807219d8483976957b8642fd9cda72d28aee20c1
- SHA512 20779f969f34b9cab7a99b01a353d6fd0303e1b31e043a89deb8a815b81593495011a257da5c26bc8b642f2e87881dfb33e1c26fdce7e8bc44317dc2ec48172c
- SSDEEP 768:oRZHX9/bIdxm2UNt5AgJcnM0ogmHyvpkKhbVCJGe:UNX9EdATr6nETytVSGe
- TLSH
  T135C2E1843B6EA8F865045D5FC4296F79E34E2E596C3CC8D2810B04568F2F37D178C6B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Nueva carpeta/winupdate_version_812.exe/winupdate_version_812.exe
- Size 925KB
- SHA256 98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b
- MD5 0adb9b817f1df7807576c2d7068dd931
- SHA1 4a1b94a9a5113106f40cd8ea724703734d15f118
- SHA512 883aa88f2dba4214bb534fbdaf69712127357a3d0f5666667525db3c1fa351598f067068dfc9e7c7a45fed4248d7dca729ba4f75764341e47048429f9ca8846a
- SSDEEP 24576:fYgAon+KfqNbXD2XJ2PH1ddATgs/u2kaCB+l:f37+KSbq5e1diEnHaCK
- TLSH
  T101158C0373918062FEA7A5331F5FE7265B7C6D2A0323B52F13981E79B9701B1162E672
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery adware defense_evasion persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  Nueva carpeta/winupdate_version_906.ia/winupdate_version_906.ia
- Size 23.6MB
- SHA256 ce6d47dd9c139b9ca47873a40b6d63bfd4e8cb89b2bd5d846da7af1a1bf1b89b
- MD5 6ac67b8ec7097ff7293b00c497067a07
- SHA1 82f3f95134649fe8f3966c591922a10a35f60b8c
- SHA512 d6d363dfe39631610a65122f78ffe73172c144c8da30b773a4572a89d1b76733c99ab2777d670131c261ba3b59eb66b0d240d4ed518d6cb9b99bc75967b32065
- SSDEEP 393216:8dfp+b+BTvye+lazadqHyqc28IkZCHgt3sMYJBkER+Xf8VeHYbOaRt+9LGMj7:KwbP5MzadqHyb3IHHmGrRQ8VCYHs9aMH
- TLSH
  T1644733507C5133899E9BE834082D4838338F99FE827A7816A15737A66E12BD15F72DF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6