03a64bb1efe4ded25eeeaba4cde0785f02ca7d41e288e6daba66071598ace48a

General

Target
TaskSplitter11.zip
Size 593KB
Sample260727-lv8jcszdpf
SHA256 03a64bb1efe4ded25eeeaba4cde0785f02ca7d41e288e6daba66071598ace48a
MD5 c54627072509c2786242ba75301c95f9
SHA1 a5c683bd0e4f088074c18fdea027e40835760225
SHA512 d6c6313b8b081e3567b9afb8d07700ef3d85f8b6cf0d6012a5b692dd16d800af3a042078968cac69436389fac8504c4346baa39d5e9a596c99ad72d46ca19663
SSDEEP 12288:HN3yteuTH0Kt9jDAPt+XK0PVNImoKkKYOxwLp6hAlhzXX8Be+Y/M/wO:Hzu70c9jSt+XT/oGwrzXs4j/2wO
TLSH
T187D4235DB1148E3684EAC93D72D76DEC949A9E16C08BF3725F6C5C9081E1D882C4FA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  TaskSeparator11.msi
- Size 651KB
- SHA256 577a3f268a4864ea72bb4184a41dc3790312e1e40eb1c455de0dc739cc81401b
- MD5 ab67a76ff4e0a51385b6f880060b757b
- SHA1 6ced17bb3cb14307eec5472191f2d4d26c8b3266
- SHA512 3cd9a057b2eaaa794d63d30e9612887c3a6420f7018db2a958708b907af3070f1858fdc80ef270179cd0a529be105dcfae860550320ebf582c99085eb5e07a58
- SSDEEP 12288:oQtRUFb4H6KJF/pDYkw0gCvoKWg6AZznX4kBSlFWAPt+/K0PLNIm4Yq:oQkOxtwYX7Bw/t+/TxL
- TLSH
  T137E4AE117AC78632E0BB0230357F67A55B7EBC709AB1C60B9394B65C2D716809379FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence privilege_escalation ransomware
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  setup.exe
- Size 546KB
- SHA256 972e5349c98308f0e100c9b8f6a9974781bc0f8adf92982a6966b1e96e108974
- MD5 145fbf321041b3bb79dfb12988839e47
- SHA1 92b78c64616beb93d3353b77924b46fc45f4128e
- SHA512 ec34024b85cabbc349b9600f887a92fe2fbea450bdcfbcfad2e523d75ad5ca4b253d34ad9bf285feaf18315bfb265b5a3c428bf02cbf79c9d58d0c1d3ff3d89e
- SSDEEP 12288:yFNIbiTShdX/O3lvK9Xbg21oPeMb01JQntLOCghWh7X:yPuiTShJ/O3v2GPemgMd
- TLSH
  T1B5C418136AECBCB5E1B266702B7793E0977EFC211931C91F23C0491D697C882B9217A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery ransomware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4