c28c1a04467c6bf25facbcbd63f1d306e5b2df311de95df22a071c769c2c65fe

General

Target
recording of the issue with my order.zip
Size 92.6MB
Sample260727-krvmnack2s
SHA256 c28c1a04467c6bf25facbcbd63f1d306e5b2df311de95df22a071c769c2c65fe
MD5 6a99e3ac5d32019320754c24aed8f05b
SHA1 5f8b07f1097cd188874c6d81d48d66c4cbcc9196
SHA512 c0e3170910d8fd6fadeb9cf2c576e786950b29b677ba8bdbaee51bdab425d6688e77433c52903bbf4ee99d27d626261cd89447e66b022326a7d661c43cb3b536
SSDEEP 1572864:FtCG+A0YuY9QWDVXUf1snqSrSXrMOdsyfZMLT0maH0JUB59IZjR4u2ZuR:FwNLY7ycqSr8rMOd3feo4uXW19R
TLSH
T1C62833347581BB34627D700C49F9C6C227DED376E418AC88F7AA0EEB9ED1AD58D49720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  USERENV.dll
- Size 100.0MB
- SHA256 0566d14c1e9f99860825ed0222daad6c5c1d6867c45b283c02c1fbc395519c9e
- MD5 038be7da30c506c549338e9b063bdde6
- SHA1 8b73e4376ae47b77a958515078e83d23386300ed
- SHA512 bdab6f5a549cd1b253a83cf61f20c6fd599b85ffab09c2e6eb255dc421f3a5916e1eee445ec7c1d4c1f13d20e8cc73dc5ec129b9b5b0eb546286ada744df9e6d
- SSDEEP 1572864:oZAAPmBIhT4OyHZY1zhxK+g0LKMmdiKf6+Jj3Ji6nyl+qWrsaU:oZlPVhT4OyHOhM0LKhjfTjA+VIH
- TLSH
  T1AA383340A9A1C5B4F5CA81783E7919487BB07ADBC5EC779E0A05F4B43FE726A048D4CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware defense_evasion discovery persistence spyware
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2
- Target
  recording of the issue with my order.mp4 .exe
- Size 1018KB
- SHA256 e60134d5e7774c5d7e35f2de0f81bf5ad07d8b1bd93e32112be12a12291293ec
- MD5 ab44a68a77d4953c1c8204848ca3f537
- SHA1 fa2936db71e39fdb5a157cd188bd2e094d3a3093
- SHA512 9ff7c0ecc3571a81cc816c425d3dc510cdefcea3cabcaa49de7db443a77d1dcc2ab6eaffdd2c1875e3fc28fbd29899d58673cf3e19eb435f0f9f85137994b2f3
- SSDEEP 12288:IRwkznnF7WPMJe9ACwWTgMz0QfMtQsKRItKa2nEWThGdcAM:IRwwZWPMJeGhWTkQsKRItKvnJThEcz
- TLSH
  T1D3257E1A669C41F5D1B6A33C88920106D7B5BC16777182CF02B5A69E6F37AE08E3F731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence
- Adds Run key to start application
  persistence
- Enumerates processes with tasklist
  discovery
behavioral3 behavioral4
- Target
  winhttp2
- Size 9.6MB
- SHA256 3d6b1873266b6180109dabbb663aeff54825d192ea0e9216dd52a079b6cba6ad
- MD5 de2fb6a4672aabe203c0087e99b2f432
- SHA1 6d62d630da7d207559b03657901a895ac42cb149
- SHA512 ddf6f2be7bcc265e1c203efc1f2e03eaedd6b6a13205918c6c7102120953f7af73ad2a3d9073954b9cfdbbbd07b46f81be20f28fbb03a1837adf9fbf52c8f176
- SSDEEP 196608:zw/1FS48tSwOEX4vF4jj1NFlZVUb4wdnkIJX5dQR23:zM15WRtk2jnFHVUbRnkI3E23
- TLSH
  T1BAA63327C6284F66EE4FF379443DDA89929E63A4B854C2CF7C7541C8ED8A4E45B0B123
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6