a91b0027cbbcc20322ee05288d1dcc8cf56254cea7c2290e56f34ef3f826c0e2

Sharing

Copy URL Twitter E-mail

General

Target
project-figma-reborn-main.zip
Size 4.4MB
Sample260722-2as6yawcqa
SHA256 a91b0027cbbcc20322ee05288d1dcc8cf56254cea7c2290e56f34ef3f826c0e2
MD5 d37f83d69fed1288d0a5eb09308bf564
SHA1 9fb39c144b6f39606bd817cdf919ae9c80155fab
SHA512 212099a88b1ccb12a786df5ff1b7e98e033a1b0fa8b9c690a1c7d81cf4b72a7aab9799a6264b68798cb11dff8f7b144bf96d16dbd651aca559efd8f4a3402334
SSDEEP 98304:S421274Hf+or0p3u391C0mZJYespiwA3G/uVEylEp5MY:S42Ikf+K0mLfGJYnpiwA3niyCp55
TLSH
T1422633017B2CCB25453A20A34A8117E2F8F847E614939693235B7F76D8657C27BE87BC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution ransomware

Malware Config

Targets

- Target
  project-figma-reborn-main.zip
- Size 4.4MB
- SHA256 a91b0027cbbcc20322ee05288d1dcc8cf56254cea7c2290e56f34ef3f826c0e2
- MD5 d37f83d69fed1288d0a5eb09308bf564
- SHA1 9fb39c144b6f39606bd817cdf919ae9c80155fab
- SHA512 212099a88b1ccb12a786df5ff1b7e98e033a1b0fa8b9c690a1c7d81cf4b72a7aab9799a6264b68798cb11dff8f7b144bf96d16dbd651aca559efd8f4a3402334
- SSDEEP 98304:S421274Hf+or0p3u391C0mZJYespiwA3G/uVEylEp5MY:S42Ikf+K0mLfGJYnpiwA3niyCp55
- TLSH
  T1422633017B2CCB25453A20A34A8117E2F8F847E614939693235B7F76D8657C27BE87BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  project-figma-reborn-main/Project Figma.zip
- Size 4.4MB
- SHA256 0209a203f0f911b64d39e46288fada26eec32aca01e9787dacaadc0c03c95ae7
- MD5 fd2e85fc2307925fd425672dc38dd6e9
- SHA1 afaac43a91e9bb83471fd29afa9be2a99b0b61da
- SHA512 2bb4a4dd7507687d093b24556dacbd12fc33146ce15a3213cb66814f42fec4ba7ba173f09fb083afeeb996ffd134914d49d2009844a7533d90719d52a6c8cdc7
- SSDEEP 98304:IxGT8TLZXPEXHxEjm/vGbYs1zyyvtGh9k5dHc25/aCwFqrChXKBjeVM82:VsLZE3Yzb12kS9kPc25/aCwFhOj782
- TLSH
  T18826335167640D52C66F20B28F801FE2F6B19AA71293D1D331EB7E22EC1D1917BF86E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Release/FigmaRebornApi.dll
- Size 219KB
- SHA256 28a5074063a7ee29fbfb47fd64c1005e1a5ff2b96b8bfe3c55ced740dbaa1b5c
- MD5 4798d147f2e8ab8fe3c9eb85df5adc14
- SHA1 f822a38fa1098d602e9e36f4326deba8d5e5818c
- SHA512 6e0749a9c40818aace4041378e74b86b646728dbe42e0020d639c1e0aa5906a69d42ec3b410a0d7787fa3d13ddc085662b3358cfd1964a0a621638a2edfc8ced
- SSDEEP 3072:FXd+w6mp5C9RjI+ecBKwc1qe6tOXhhTYb0hrCS6eJeJ+JGwJ2JGJ2jz1JWJmeeR3:zwC7pBWP
- TLSH
  T16424FD45EB487F05C5ACFA3981EEEE1D8B96E1C72373D42DCE8077D80C92692AB8C155
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Release/Newtonsoft.Json.dll
- Size 704KB
- SHA256 f0c07af0e84d4dd4da4bd7823ba4535bc0481b3bf623ed40b659b68147a6bb75
- MD5 24704261e701b49b51e40c1292ed149e
- SHA1 db8ce5e0b7d8c14920bc9c4eebe51bdf706e3fc6
- SHA512 8ef6a6196044862a9d8d53c6a88e68d9591edf244385bc4888cb9c16c942eeb4a1689c49245d6cf80d619e95f0745898513ed2b67a6fc4c65fbc06b872f72184
- SSDEEP 12288:65RsO50fsVuW3icGomHAQ/DUHIdGFRrDTOAPKfhUUNSUmTIcvABXyoJl8fCfB5qm:om2VuaOKdKSUNz0IpBXyov8fC3
- TLSH
  T178E45B2177FC8E16D9EF2375B430D9181BF1F956A2BAE78FA504D9A51C837918C203A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Release/Project Figma Reborn.exe
- Size 18KB
- SHA256 0e42688e8748116778ec01a2e4bb4c6fa45b94cb7cfd67439263c2270217e425
- MD5 59dbffdf9b2e0662b3322071b959dedc
- SHA1 69e381a9c4ccd7722569183dcabbabd2461550aa
- SHA512 1bfca1020824acab2d47dcea09b9ba9923ed6a65f1e5f485054dd857401b2f9b3af1ffe72c7134bc6269436d23f3950303fed86819ce69804c48c9ade85f8fef
- SSDEEP 384:wZYKjNPDC0TOZHr8huokwfwAPLZWBu/Ou/S6hH:wZ3NPGnryYIdSwH
- TLSH
  T1D6824B207AAEC63FC17907F289A326415772A9056066EEDF6CD6258E9DF2F404313B83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Release/Project Figma Reborn.exe.config
- Size 189B
- SHA256 47e5a0f101af4151d7f13d2d6bfa9b847d5b5e4a98d1f4674b7c015772746cdf
- MD5 9dbad5517b46f41dbb0d8780b20ab87e
- SHA1 ef6aef0b1ea5d01b6e088a8bf2f429773c04ba5e
- SHA512 43825f5c26c54e1fc5bffcce30caad1449a28c0c9a9432e9ce17d255f8bf6057c1a1002d9471e5b654ab1de08fb6eabf96302cdb3e0fb4b63ba0ff186e903be8
- TLSH
  T17CC080454054BD274D334B1357518539EFB073A36424140CF42FA7560F3114D4657377
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Release/Project Figma Reborn.pdb
- Size 37KB
- SHA256 54efac7eabc4151c4fdce81c3dfe13478b0891e31ce09c5cfde3ba43d047f2b2
- MD5 1c253ea43bbf2fbb81d3aec8390fa10a
- SHA1 71c9edd4ed697f0851b92bff3754d80895da5d73
- SHA512 8a6530951b37044f66f547295d0c386ccf8e89492440d2b9ab0321d726efee91fe8fcab864f728d0dd614a09045c2b7fd4adfa9cd385dad537cd9a7386d0fc27
- SSDEEP 384:MIcjySBjySeN2GsiH+38+CJxxso+V52l/N2Gaij:MnjySBjySeN2Ghxx2kl/N2GTj
- TLSH
  T150035397FB45C876C6948675A6839F686137EC009BD1137FA38BBA6C7DF0BA82C50250
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Release/QuorumAPI.dll
- Size 219KB
- SHA256 28a5074063a7ee29fbfb47fd64c1005e1a5ff2b96b8bfe3c55ced740dbaa1b5c
- MD5 4798d147f2e8ab8fe3c9eb85df5adc14
- SHA1 f822a38fa1098d602e9e36f4326deba8d5e5818c
- SHA512 6e0749a9c40818aace4041378e74b86b646728dbe42e0020d639c1e0aa5906a69d42ec3b410a0d7787fa3d13ddc085662b3358cfd1964a0a621638a2edfc8ced
- SSDEEP 3072:FXd+w6mp5C9RjI+ecBKwc1qe6tOXhhTYb0hrCS6eJeJ+JGwJ2JGJ2jz1JWJmeeR3:zwC7pBWP
- TLSH
  T16424FD45EB487F05C5ACFA3981EEEE1D8B96E1C72373D42DCE8077D80C92692AB8C155
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Release/bin/Xeno.dll
- Size 1.9MB
- SHA256 18b57515b5a13af1d76d60c6f699e3f338d091690fecc2b9b465610b6bd04199
- MD5 919286f0cc3668aa180b285ae9e85562
- SHA1 120b13eaa434d1d0d071a30580dc731791eae643
- SHA512 9299ca421010026b320b3e5a9793992dcc9068f91ae7fbe3606a8ae790261ce6a848b8cfe30705be2a96e1b3d29df8da3541730fccd2f537922deeee5c156908
- SSDEEP 24576:pQQciXGQr5hjJexuNNUUxfQlOqHc5bTdlPV0Z1wtpH7AT9Y6UIetEFIFYinb/9Cr:RBY+NlfWa5/dlnHH7eU/t7F3w03SMMmU
- TLSH
  T1A6959E17B69441F8C06AE2F8CA5B9A13EB727C490331929702F5BA516F277328F3D719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Release/bin/current_version.txt
- Size 5B
- SHA256 41deb4f831a4d02c80b1f65338ae034cf8c827a697163caa721e3e6fb7dfe9fd
- MD5 2d3122b037d996d22c41158f40c7f2d3
- SHA1 ccc7f2bf6d0604d86f3d33a12b75411b311e9dfe
- SHA512 6dfcefdca5e64af50e6edac462a45609e03ec3f4681058ac098335bc818c191ba23b12310e6fbb09417f91b18942dc35144091c0f461144abf47042a50d7569d
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral19 behavioral20
- Target
  Release/bin/libcrypto-3-x64.dll
- Size 7.1MB
- SHA256 16e85806333aa3b3a4fe8c31c9402b78ee01a4a143e9031db165c48386dd6289
- MD5 b47c9988a203a596803837c128853517
- SHA1 2f669bf535dde5727989da919ffa5c36cf9d78e2
- SHA512 24874b5902785cea67d3781e59471e6b8fb8c9d9e6e33e8c894745eb4324bfa1ab123ff2809269e1a7b2eb604343efe556183479c0e0d30214dec252c31fb69b
- SSDEEP 196608:uHhm399Xki0GiR/8yGX26ui1CPwDvt3uFOxC:uHhm399XkifiR/8rGfi1CPwDvt3uFoC
- TLSH
  T164767BADA67C0109E8AA81BDC2979327D771B91957F013CF186196F80F23FD92B7A740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Release/bin/libcurl.dll
- Size 637KB
- SHA256 8645f1b6bec48f061e54941ec1d9c5e4b8096ce1a80d8ea0a0353e4cb557f8f5
- MD5 8c14feded4b94c4b72af1f710f236778
- SHA1 62dd8f17cff9916faa792a8188f8e82ed6edf9c8
- SHA512 c0222d788aef2be7eb205f923302a79b59ec6018210944cf6d807b073fcd2c08182f42e4a1766b7e42e190ac4ebb090f6afe026a52e5bb11f585db180bbe0fc8
- SSDEEP 12288:EzbJ84IyhxblduSGHhphyfiuEkatR5YI80OdnmqKENG:EzbJ84pjbWSGHz1uEkatR5YI80Odnmqt
- TLSH
  T13CD46C56B3F414A9D1A7C17CC6538227E3B2B0542361A7DB12B4CBBA6F13BE2573A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Release/bin/libssl-3-x64.dll
- Size 1.4MB
- SHA256 bfc059e16951fa90cc14489a8263f35c6703e762f2f5413682b4f7935bbced57
- MD5 754fff93ed112eb26bd4a6b0e8300deb
- SHA1 de9edf5c9ac80b1f26dcc91d89791065097a7d23
- SHA512 05d215d1e0cd65a98cf55a2a5e123992e5719006eb346261c0c03a629cfe2cde910765a1a87a3f5a93d2371ea9c15d677277b903d55c24731bcc7c7eed87a71a
- SSDEEP 24576:CV6b+rLptrBSFH+tK8olR+WmXWdEVB36eVE:CV6bedt9UlIzWdEVB3a
- TLSH
  T1F1656CAAA7B8019CD5B6C17CC2934B23D2B6F4162370A7DF0A658A781F63BD5173D384
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Release/bin/zlib1.dll
- Size 88KB
- SHA256 f6b58fdde3bfef2c25c7254fadfed12d86d81c4a5c962262715868c48063fc76
- MD5 68cf6f98cb8b227814a59ff3f909a0af
- SHA1 0383a4d7a74417d3ec90526e61b7637256e0bb57
- SHA512 b59f9eeededd1f76f048b57ae753f79227aead32006fc649532a9bae3f441515bab85338d25b26e5002c54c65d661c0c3048f5c3c1ded6274638ee950afb4744
- SSDEEP 1536:QvkS6XmTzqbKxfXOTBpp/foyUaDmjGI23aIOcIOZhhkxBJNJ5:PdXozwBppnqG3oSZfkxBJNJ5
- TLSH
  T1C5936B4AAAB412A5D6F78178D8D207ADC331701407A44BDF9648A7691F23BE41F363FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Release/logs/2026-05-10_18-04-39.log
- Size 1KB
- SHA256 f26d0f8e27b0c8862d04cbadf26ca8eaa46c1490f843170227c77c5543bbb7ff
- MD5 7582a5e90fc39901ae19155d89ad0014
- SHA1 7b5383e200c598b56e832025ec91227c783e4e8f
- SHA512 152466b700dd71219fe124abd0b86e31f5e7708141e8d772974a1a210d467377385abb3b735e46b135c6cdb1439b10e6c43296bdb79278bcf77bfcdef2ad9a4a
- TLSH
  T1C921ACC34BE8B0B339B05488D6D5CDC7AFE332735E470A36828644A91286D781DC3C45
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Release/logs/2026-05-10_18-05-56.log
- Size 4KB
- SHA256 70acbebcd0520440ade26031c33b338df7941e1caec5cab5adc8b5bc0ac7b859
- MD5 aaf45879cc1c4920922da22027fb9e7a
- SHA1 c4db309b0751604ecec75387b4e3e265cab4da7f
- SHA512 151c862c99f7b4db3fcb8b8c8b2338f4c5c17bb54e0ef33684fd4b18545070cf706f7f48c2c660af9b9fd9c41fe987069bcd247c998a2c44c7300d524d20f1b3
- SSDEEP 96:oYh2mJ6F4hZCPNmG8vpHK3rzg5FK3rzybhSo7m7O7M7O7j7O:LJ6Nihq3Q5s3ibhSd
- TLSH
  T19EA114132E78327326B81309DB4ADEC2ABE5317A57470A40B7CA419C215AF795DCBDBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32