54e9d3aef599f39a95f5a8c93aaef19aa2edcd3b2a266336cb5c89005ca0d3b9

General

Target
priv estoradin RLK.rar
Size 90.8MB
Sample260727-rcfzaafn9w
SHA256 54e9d3aef599f39a95f5a8c93aaef19aa2edcd3b2a266336cb5c89005ca0d3b9
MD5 0c642307f78e0205c1560755cecc463a
SHA1 065dd430bcfeee91e80ac58185517e5d3922785b
SHA512 011b34d56bcd0840c312e613104045dfb311420ef21d8b88233e08e69c7602acb66fd3731a4fdfef0dd926a4c234f08438480189db54096d88b12cbed2308162
SSDEEP 1572864:VkUkvNVz8b3on5pOIwLvT8mE8Y4egNIdIeSpZh4keVu8rY5EXPGsYpGbZUGRVrm:VkHfwb3o5pYLvYmjGdIeSpZh4kP8s5EY
TLSH
T17C283385511165B2F5C8CBF507E9CAC4EE8078F006FDA703B3109E67E48FAAC6E6B645
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  priv estoradin RLK.rar
- Size 90.8MB
- SHA256 54e9d3aef599f39a95f5a8c93aaef19aa2edcd3b2a266336cb5c89005ca0d3b9
- MD5 0c642307f78e0205c1560755cecc463a
- SHA1 065dd430bcfeee91e80ac58185517e5d3922785b
- SHA512 011b34d56bcd0840c312e613104045dfb311420ef21d8b88233e08e69c7602acb66fd3731a4fdfef0dd926a4c234f08438480189db54096d88b12cbed2308162
- SSDEEP 1572864:VkUkvNVz8b3on5pOIwLvT8mE8Y4egNIdIeSpZh4keVu8rY5EXPGsYpGbZUGRVrm:VkHfwb3o5pYLvYmjGdIeSpZh4kP8s5EY
- TLSH
  T17C283385511165B2F5C8CBF507E9CAC4EE8078F006FDA703B3109E67E48FAAC6E6B645
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  RESIDENT.rpf
- Size 191.7MB
- SHA256 27c0c92530ef95e57711e7c98adb908e4fa397459abfebc08259c8eea9d875ab
- MD5 4bb5927ebec18e1617e020632741f070
- SHA1 d296bf9e904787509bd304694d026d07a1ea80e5
- SHA512 71520513b95ab789e636ac7c479c628504acd86a31b64b7ec2ed510795c043b2ebc4f3cd07487db58019d274abe844639f36f0bd7b920fdcbfb50a46724dff75
- SSDEEP 3145728:50ljrYiLzYz2FveJ+lFHlF0TfyvaRqXpmxwES1:50tYivYz4eJ+lFHlF0TKSRCjh
- TLSH
  T175A82353F4839A0DC4A665368E63CC842ED67A4CAE81012B3275DE7D7673300B9EBBD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery execution
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral3 behavioral4
- Target
  WEAPONS_PLAYER.rpf
- Size 8.0MB
- SHA256 529d87e1e6e598d8792084661669d77a446f5745aa4c9e13197752084ed7c8ac
- MD5 69176964b2ec9357048b27fd664d6b0a
- SHA1 9955db4e9df6e75ec3f70cc1e65fe23c3e495538
- SHA512 5e97448f3983519bb4ca82a8c23d8ded3326114a8b83b94b9e431ebf534985e520ad5d68a18617cb5cdc1bdaaf60d37a36b2907c939dbfaa2688a85703ca115b
- SSDEEP 98304:jeCkDdolg65kr8t/pMFaaFqU1NDUfI8cqjDP6weVWdh91gkWW9x9:jBkJHwJ2XGRnHeVshskNL
- TLSH
  T19886BE43E983AA0ED0A174394D2BCDEC3ED67A885E8141277331DE3E6A7650174EBBD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6