a9a7d151126374a9a1208efef327f792af779799595341ca0fe93535ad4b28b7

Resubmissions

26/07/2026, 22:45

260726-2prawssvfy8

26/07/2026, 22:44

260726-2n7w9asvfv8

Sharing

Copy URL Twitter E-mail

General

Target
mbf-release.zip
Size 870KB
Sample260726-2prawssvfy
SHA256 a9a7d151126374a9a1208efef327f792af779799595341ca0fe93535ad4b28b7
MD5 8b475f427d9c6ba970489b213ff0a2d4
SHA1 54ba68fc073225954d978a8c1a14350b098edbe7
SHA512 b5ba8b314a028f1c3a3176d93f05c1f659514011fad77523ee4347b65f3a21edf0a2bb0adc9bf07238cac2f1cf78849e6b59c7cd7ed8177bd80bc4f432873fb9
SSDEEP 24576:nGOM8MqD70abgNu88UHdZkwirM9+rvyGVt6uUvSdncc9p:nGOQqBbcJ8gkwYs66CtNASttL
TLSH
T14C15237E40518CFEE6614BFD3443984A7840D378A7A1B339BA0774A7C5D1C2B3A6B5A3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  mbf-release.zip
- Size 870KB
- SHA256 a9a7d151126374a9a1208efef327f792af779799595341ca0fe93535ad4b28b7
- MD5 8b475f427d9c6ba970489b213ff0a2d4
- SHA1 54ba68fc073225954d978a8c1a14350b098edbe7
- SHA512 b5ba8b314a028f1c3a3176d93f05c1f659514011fad77523ee4347b65f3a21edf0a2bb0adc9bf07238cac2f1cf78849e6b59c7cd7ed8177bd80bc4f432873fb9
- SSDEEP 24576:nGOM8MqD70abgNu88UHdZkwirM9+rvyGVt6uUvSdncc9p:nGOQqBbcJ8gkwYs66CtNASttL
- TLSH
  T14C15237E40518CFEE6614BFD3443984A7840D378A7A1B339BA0774A7C5D1C2B3A6B5A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  mbf-release/.cache/bazaar_last.json
- Size 321B
- SHA256 f39225a827c242067bd7f2292f832aeffb61951c879414e4db59c83b8462b29b
- MD5 140045ba0c19c202ce2b70448ed18b8d
- SHA1 e793736a0d154a4a8c80f7e87a2e117b9b7a5974
- SHA512 db204fb07b4bca86e3b279bb76ba51fa7f3bf9a1c540636e93cb849b8e0e0d347826621040f9740d41e8451aa53d34870dce7e95baf50a8c22bb803c4fa6feb9
- TLSH
  T101E02680A961A8F10A3C0700609A293076B38003084017D0F8DE1DE5E0FCB1F949E8B6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  mbf-release/.cache/latest.json
- Size 112B
- SHA256 1aeb93f0baf5eab97cbf413783c1d4784255c568c24087e7d91a0a11b68b9d6d
- MD5 a1053abbb8c6cf01094de507a1a431f3
- SHA1 d231d34843749837a7cc0bc335e018d07a05e6a3
- SHA512 4ff38c791f4c2356bebf382b592a422ac9d2c609243a84636633e1664a911a845ef4198e9ff6025d8e92362f880c8ded01f4bfc0246450fece6eece401613048
- TLSH
  T193B012BE5B5F299D4D006531C04177EC229DE1163A897DACA3462E90518B2719B20043
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  mbf-release/CHANGELOG.txt
- Size 365B
- SHA256 e120168bcfe438a0fbb2b3282e76014507c57e85163615e889e36ab7393d89e2
- MD5 e848e386a907c3b197eadce4cf0d2740
- SHA1 973796e0751008ad32f1cba8dd0761d349d9f676
- SHA512 ddbe306d0da5f73a48f6a8df00fc7ebec38b2431230726f488ab8860d6c165a43943f5b2aa3da4e840fb796345107021b8a13ccaec814a2c1bf23bc125cbb03c
- TLSH
  T130E0C044F0F7747D52CC56D3E00008362AEA7848CB07712152ACD31C0E0A378EB0FA38
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  mbf-release/README.txt
- Size 1KB
- SHA256 bf37dc9097b65c985213b0e3906a97eaa8476f38fd1bc57611d0d849c79a93fd
- MD5 0abaab626bd9900285d7d76089e529e4
- SHA1 ed693cb043164cb666f7bf68811e14ca0eef6784
- SHA512 2e7ff8f6e8e6bfed970f0e91927ac1fba13b01f45d35c05359d29a8bbc51f05ed7eddbfec6f5a941ce312541f8846e7bc034e739d74078bdfa4683d356e32539
- TLSH
  T1C411611F4E01682B3272E6A16C0A40A9EB5B181E87C8B80E6168420C3B7A36A60FD027
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  mbf-release/config.json
- Size 824B
- SHA256 0e3ad7c8e2ffd2ff1eab2d1805297a6b9addc97615028a53d71b7d10a8c0329b
- MD5 2f79faa11232299820a3232fe636e6bc
- SHA1 1e50f4055f468274259a681f8e2ba06724da5125
- SHA512 0a4aab39e6dd81aefa1925c75e589b3b78879855472900069489952c968f50e05bf1ede2cec9ef032ec1a0e4b090d59c2f206d4029d0843ea03fd4b9beaeb1f6
- TLSH
  T157014522D5786DB760F573646CFE6316E220730B14908D6B73BD450C1F36A030150E8E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  mbf-release/data/blacklist.txt
- Size 191B
- SHA256 d606a5639e0a0d2654533e27b0ca0835aa2eb58b2d00dfddf5525275c5a4610a
- MD5 9c4f80d6e560bfde6d378ce568958511
- SHA1 41c30651b71a43a04d0feee899f9ca306decfade
- SHA512 fb2577f9f9170b9543fb8b23e6d0243f90c3901e8393a1b8f3ef06fc6684ae6c6157176d388cb6e10fe05717ec32cb71e906a50b40c451445bbd04257417d3ce
- TLSH
  T121C02252B22B029A841112512D0E2ACFA32251532200B18DC82E500900613C864280AC
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  mbf-release/data/prices.db-shm
- Size 12B
- SHA256 15ec7bf0b50732b49f8228e07d24365338f9e3ab994b00af08e5a3bffe55fd8b
- MD5 8dd6bb7329a71449b0a1b292b5999164
- SHA1 2c513f149e737ec4063fc1d37aee9beabc4b4bbf
- SHA512 666a9a1a7542e895a9f447d1c3e0ffd679bbf6346e0c43f5c7a733c46f5e56c2f65e69dfd4769a9cad2b79b31d282f1ca2aa296ef41bd9833947ada194f46940
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral15 behavioral16
- Target
  mbf-release/data/prices.db-wal
- Size 30B
- SHA256 86f86a3d3fe2c51eda8d74936ca016eaa6e6c9e9a5e2235c40d1f82367ecb765
- MD5 d46323a41a99f383f5efd3a46056e3df
- SHA1 49168da523a19cc8d1d8feb5bf6e8f945a1fe6fc
- SHA512 7d580105390b19f9e528d774018b9b95fd9ec00749702a8b39bfe822e6340fb89a5e057ec52d6a1a4280a9409fc0072fd49421c9736e3a1bf39516a5defd5585
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral17 behavioral18
- Target
  mbf-release/gup.xml
- Size 4KB
- SHA256 92717951aae89e960b142cef3d273f104051896a3d527a78ca4a88c22b5216a5
- MD5 abde55a0b1cb4a904e622c02f559dcd1
- SHA1 1662f8445a000bbf7c61c40e39266658f169bf13
- SHA512 8fe75fb468f87be1153a6a0d70c0583a355f355bfe988027c88d154b500e97f2c5241d9557ebb981067205e2f23ad07b6a49c669cd3e94eaa728201173b235a0
- SSDEEP 96:rrxgFDl+72Y+WbPRkrm1+U4YeJS2kG6QrABYUCJ8PYPwJrkFI:rVgFhunzbpka1+UNQo2sBCPwJrkFI
- TLSH
  T19491944B57DCC3770C3112A178AE9191D33409F932B5500138A8809BA36ADA6BBBF7E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  mbf-release/libcurl.dll
- Size 781KB
- SHA256 630c80f15b676e94f872c1cb6a489814b033ce4d96059679b53b6bf1c3d779b5
- MD5 5e2142d92fcb7db620cd4ed0673fd825
- SHA1 e03223a971e4993ca21a8b23d94f34b75f5327e3
- SHA512 637f4e8a5a7c413476bb302c8c0a3246bac885ca6490344d2148600b66f052729c9034a32506cfb9288260d51415f358780c9db14b29ba516a31c3f011ac38db
- SSDEEP 12288:zM+DhGRMe9LZuAQmvMCAhkUClUy4unChvNX7ARuOmi:zM+DTUsd6zAhk1nChvNbO
- TLSH
  T14C05CF2BA96D90A7F0BAD43DE5134402FB60749B273A92DF97015A192FE7BF0193D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  mbf-release/logs/debug.log
- Size 685B
- SHA256 45a34263b21f011d73a4fdc39a937e9e2420c63f11b105b351a2bfae09393c77
- MD5 cc77dafb35543b43bf690f9d77d960cd
- SHA1 6ed2e234f5961c3e9757e52c38169a70c9eef23a
- SHA512 d63bb9b1f81eb65cfa33d529a07c60b0194118e3aa4a683812b48e30fd988cab051b970f36e8a8376a41492be8ea8b8a25591c7206b7b721037ffcfcd34ca448
- TLSH
  T17701703354BD68DA4BB13491C2802A7AB123331D164BECD5BE5158FC0430A1A29C6354
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  mbf-release/logs/error.log
- Size 554B
- SHA256 315f78fc10c604d5cbc9bb06dd972ae0c5c1698a15e3510db8ccb7c841245b6b
- MD5 11fbb0f7e2cc9f5c2bb190483210f315
- SHA1 4615b7fe7a148406958384d88fe9a3eb93c2ffa1
- SHA512 7b81a2572e9cbf856dde3db50aa5131795c9e763352740695a9977cb2d57486667958278443e7dc6d651a76cb8500666a8d7d57039c408cfc23d158757dd6dc9
- TLSH
  T1D6F0C0C612BE30773D811181E4339E1CBF32740B42234DB5BB5C79DC251AD402F75196
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  mbf-release/mbf-setup.exe
- Size 785KB
- SHA256 eaac64c113ebaba1fae924ad1b6239a44c8806bf2b85d8dc11a27ad65a981cc1
- MD5 bca6478b230b6920fe79b97a3066e835
- SHA1 f61e771c53c63f35f5a2b416c260c74d29329adf
- SHA512 463f16b737768ac2bb285efc09e69781132e95c234e2eab37eb98be797606e45d1dbb38df3a6ef55144f4f7e1b08a213768e915b7d967b8c90bd03b216a07ff7
- SSDEEP 12288:/AstffLBk3Q45wU0/St0Z4j9lAx5ylTxEIyTXnxYV:4s9uQ45oyj9lE5yFuTXmV
- TLSH
  T1CB058E6A66AC01F8E0B7D17989964907F7B27845137197CF43A087AB2F276E05F7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
  execution
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Command and Scripting Interpreter: PowerShell

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28