23105cf188c99e391d7771759314877d5d05ebc529e660e27bfea87ba53ed36a

General

Target
86nn00r.zip
Size 5.1MB
Sample260727-n3qdvsdr6x
SHA256 23105cf188c99e391d7771759314877d5d05ebc529e660e27bfea87ba53ed36a
MD5 c01a30d1f927e8c3d588ff3c00ad9a51
SHA1 03027858fb3a85aa5ab99849508c387ccd454586
SHA512 9e7d72dbcc550ce8d53a55b56f44b39870348150e145132b1b435ed9913924fe6b05b2cc470a9e52e28f913e99064c4fac622b83bff6bd4e59702b0a0d3538b1
SSDEEP 98304:siO7NS7fnjw5Kf9N4BEV9NTeW9Z1GqIppJcFSyKjIPXJB8E:67E7fU5KFNvV9NyW9CqiqKjIxB8E
TLSH
T1AA4633E012067B378A49930E4A2FE0D98996F2F8DC7D5BFAC19846573D2C457F2D086B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Bin/Decompiler.exe
- Size 3.6MB
- SHA256 ee3f01b0ec81a6f30dadaaf918a4c9abdd487f23a3781ea1674b37a2aa9d4179
- MD5 7931e593c52df0815f624866f4599c05
- SHA1 8fea58c2931e501af948014af6091f8ee2fa1478
- SHA512 3427253654ac067cc8d38c2e3fb426c4ca544e9aa168e42d2c7ce65638065b5be2e6611bd99837067cf91176ff866b01cb321bf50638fd7a414063cb75240300
- SSDEEP 49152:YlhKSwIHu0fDwc5L+jbw17CRZVG+y/u5YpynL9EkU1/GUfSALm:YKV0Qw15d/CD2/GUfS
- TLSH
  T1660619657A5BA8BDD15AC87083468A735E2134DB0B36B8FF04C496393FA9FB45B2C314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Bin/Soda.dll
- Size 2.9MB
- SHA256 b768834e091205bbf3643dbcc53071268cf5fc54c7d150ab2143975c59d55693
- MD5 a5d15d3d243a6a78a14c4bb0066e11ba
- SHA1 9c2e2c132e6b03c0b75279951a4f5db9cca8eae1
- SHA512 a4084cbc33ac2a8e02de20d72c41da30c245f2994b7c26cc83541fed8280888a8f53570482d1211720cbb85fec6a8fc30c1ae20eb34593641672ae308f4e498f
- SSDEEP 49152:2TO1cJjSeQJc78av7t1dYGYPxcRvGn9PYaDyaPZtdEBNg1XhvbbzLl0nZ2F8:2K1NtT399PYaDyaPZtd+8dX
- TLSH
  T14AD59E57B3E400EDC467C1B8C6579613E7B2B4481320ABEB17E98A652F23BE55B7E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Bin/fa91bc37d6e8.exe
- Size 77KB
- SHA256 c2f37251a9d9f505cb6d6c24c9bf20cdb100eae82796c1b15d2b93669b8ea22d
- MD5 3641a182d1bba7113e41a9991b49d348
- SHA1 1446ac15ccf9a9e445f3d0d7233f7cda61c33cce
- SHA512 a1df377e83b0547856ae6c82d9d093ed537321c84599d2ed70527fbe3182210014be71ae7e30a1e842d547c2fc888b0b9459a2d4c6f0ddd65d809f4cc71a152f
- SSDEEP 1536:WRiUKK500GQVSnr+9mMMHS/FVz2GyRho+gu53VOiEqc:27KY00Ve+9mMMyFVz+WEc
- TLSH
  T1CE73EA258D6950AAC33A8978C8177C07FF51B8954BA66BCB5B405ED31E23AD4AF3F301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Bin/version.txt
- Size 5B
- SHA256 0b88f7a63f3a40fc380aaf21abc72cc8ded9cd28d7ee901bc7327497bb683116
- MD5 346d13300ccbf7bd88ca7ab380371b50
- SHA1 a029dcf5bdca8043715a7b2559006be80027e660
- SHA512 b2f2358819c1fbd2701994da89409c594fe068a5073459b61780c53c82de942b1817cc827083c4d2b27ad6f7fb125ec571cf9496a344bbb615564cbba0d34f5e
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral4
- Target
  Soda.lol.exe
- Size 8.2MB
- SHA256 0cd1115ab90d1acb3cd0defd27366c5e252005db814ca946e966664f73e2a5db
- MD5 e3da04ee557848ff8734da4876b7d54b
- SHA1 8229db27e22abaae343a29e1a601321abd40b1af
- SHA512 5c90cae75723d2c5501c9ffec82e2b2ad5ba64cb278b0f2d2cabfe63b10130fc0805d0df33c28bdf257a0106760fffeb646c0dac5940f50f015d2912de2ede99
- SSDEEP 98304:ZHwhZI+yly/ww22mz4y5ciW78Q7pjVpz/jrxIfUP:NwhZI+yly/ww22mz4y5cBvpVJe8P
- TLSH
  T16696E5257B5F996CD09BC474824B8A66492030DB0B39A9FF4484963C2F7EBF56F38319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery execution trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Command and Scripting Interpreter: PowerShell
  Start PowerShell.
  execution
behavioral5