50efa58f64c198ea4f1c2a0a05496b8c94527d1e0f8a0e90d3d1f6c04971bdde

General

Target
27-07-2026_RakZcLw0RxdgP4E.zip
Size 8.0MB
Sample260727-p8x7bsbb22
SHA256 50efa58f64c198ea4f1c2a0a05496b8c94527d1e0f8a0e90d3d1f6c04971bdde
MD5 9428f69ae1f2547fbbcfd700fe5c16bb
SHA1 0e3a53f878c22d5b4a74cc7d591168be6457ddef
SHA512 5e80eb787b2a7435f785486f0bb0857ef8ce96634d5ad5b34f3326f9125600e80aebf0c638d4f4dcb5d700c4d90f88854e42afcf89c4cc4cecad1cf8884f48f0
SSDEEP 196608:fxuqjRgnMZX+ZY+g9Qg8hVDXQAaGeVcBZojqipcBALe5PK98m:xjB+ZY+EQthVDXPeqBZotciLe5Pu5
TLSH
T1D28633F55DC1D0A63BBF32CC46B0DDC69BD2255B6D1E6347B22BE91A0AC2B0054B7683
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  CSTestProject.exe
- Size 16.1MB
- SHA256 8fb6924a837d422cd4db184124639b2f5d57a55fe9e8e8885f6ea29b05622ec7
- MD5 468ad6d62e86100b0664191f638bf538
- SHA1 6fad31a07421ecc0a7606d42607bd77b9676c93f
- SHA512 d1ea92002a978010f8fc5944e59d1cd629b22c9e90d5b82ed9dd403b397b2f2482b7355c21e36be7b0ed46b77b19877ed56cd0e000629d0da7c97424e7bb88ff
- SSDEEP 196608:BgFbkPIw0bysaEZUupW2g7PAmktnnYfZ3xNGV5YBJx:y+0by/EZ5cPAmktniLwV5Y
- TLSH
  T17407CF06F3E50AA2E42BD638C6528333D6B17C461720958B1698F9562FB7BE04F3F716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  runtime/WebView2Loader.dll
- Size 156KB
- SHA256 8427b1fc58ec707813e5c0a51eb5d69397bb333250a7b891be4d3b123f1e0f1c
- MD5 b7f10b8066ee96c628e09c439b8d0b9b
- SHA1 3a2fe02d9d43100056b7dd1ccd2dfb3f30ad0f55
- SHA512 4ce26a59faadfa0a20e098caf297f3403ac1542706f72879ed7248dee4026a5c7ffc3aa95912d8e3510ac7593082429ce0e83978a5843cfce52fb475cc975333
- SSDEEP 3072:1mJgy7/ph9euiDNQ6A93jJBC9JGv6T/MEtJ6mj4UrqhQ:w/NVZ6A93j//EtJnrX
- TLSH
  T173F35C5BB2E900BBE17BC278C5A34A15E772B8111760AAEF036447791F137D0AE3DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  runtime/WebViewHost.exe
- Size 947KB
- SHA256 ac095ce02c0257a748c2d1acc02c473296146a78cbb9de174e1f45415226c028
- MD5 353a739e65b8dccf8a721e0159027017
- SHA1 54d1fa71e2df87cb894d8cee68472d98a68deab9
- SHA512 5bba74db2534b6fe0c4dc6184a3fd7a6452421119d92506febe452a0d18bc27439e7496eb9c48d22952a0a4d65f026800b5d153f3beec03b92062f255c4f328f
- SSDEEP 12288:tphfjDX6kWu57c53BfVnfFe7bqOarD6niWFynSbOR4qn7BdkJX1Il5g3dM6sq9ck:NyQcl41OZ/etdll
- TLSH
  T10825B51223FD421AF1F27F79567917608FBABC96BA39D38E4694506D0D72B809DA0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Downloads MZ/PE file
- Loads dropped DLL
behavioral4 behavioral5