dfaf1c7294ddcb2210638f900c8666a301ba18b5c0028071e747b134cc56c121

General

Target
dfaf1c7294ddcb2210638f900c8666a301ba18b5c0028071e747b134cc56c121
Size 8.9MB
Sample260728-q63jpsywhy
SHA256 dfaf1c7294ddcb2210638f900c8666a301ba18b5c0028071e747b134cc56c121
MD5 05076c52a594ec16ea4d40a8e566132a
SHA1 05940f3106f229311ffab637cad9c8533ac8ec19
SHA512 36ba3e96f78cf45f457e57c845a86e32895c2d8d58a1cbb7b44f97971f14564e267ac75570a1745f71a332abe95f5f8c1092b21da9ab994bf67be9d9d129a693
SSDEEP 196608:D42YwfmG8/evyO0GLMk1T4N4SAiZFv0hfZS0VaxbqLnMdBqm9y8r/XU2j889L:D42RRyOuk1MN4FyFv0nS0VLLnMF5pTL
TLSH
T1DB9633E5D298AA26CE740ADE3C7593CC6DD9E1173F17267E83D7B298B340023B592583
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  单文件制作工具 7.0.2.3865_x86_x64/单文件制作工具 7.0.2.3865_x64.exe
- Size 4.5MB
- SHA256 73e1cb95238fb28f6f7bb3064310f7a0ec801ea141dc138c83b5e122242e5927
- MD5 5de69643f62d562f999952d805c68d86
- SHA1 361a2baabaa4960747f463461951c2186a0a7276
- SHA512 3a0acb93d891e29477e842dacd57362158d9468da19a88a2c3957e3f94632ad131c21d1bfd9019592ee8db570c2ecfae1447c7b07049bf136b6da9f04dd3016c
- SSDEEP 98304:UIHyG6Xr3rWktYM846LJnM1b+DsBw0B9oMzTSP1PE9T3cFIU9dyUWKYRs7zbuhtX:UsyG2DYM8Xcb+ASm9oMzTSdgUIUdpdYF
- TLSH
  T1B52633D0D6643DE6CE72857D68F222489682EDA31E963D5FC2877ECD3170203B693297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
behavioral1 behavioral2
- Target
  单文件制作工具 7.0.2.3865_x86_x64/单文件制作工具 7.0.2.3865_x86.exe
- Size 4.5MB
- SHA256 6491c644a730e029db4f4caba581708cbdffec8ecff346669b3255ab193638f9
- MD5 9bd0ffc6c332b11ffcc20de2b87a63bd
- SHA1 d903076631b3a55d4b5e93cc641e76e3e4eff536
- SHA512 5d47cda6f7d45c56650a5d3df500d3ed9dffe0f2a2661395a37cd8ff130e8235d4b255cad0b65a912d337c0e15f454f045b4a6c9f18ff2a638dd2eb910aa1d89
- SSDEEP 98304:oSlo7XinXmz33pn1+lV7T+mdmyAMtia6635R6yeu8W:oS+XinXiHBsr7imdmyvJR6yV8W
- TLSH
  T1592633E9E50CCEA6F83419BA287A56842DB77DB25722055C9FC3BEAA3571013245FE03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
behavioral3 behavioral4