1a6f854bdbed993590005c3e48add5cac1d6982adf2ced19dc9ee5fd48cc918c

Sharing

Copy URL Twitter E-mail

General

Target
GeniusTool.zip
Size 7.6MB
Sample260730-t6mp2acd59
SHA256 1a6f854bdbed993590005c3e48add5cac1d6982adf2ced19dc9ee5fd48cc918c
MD5 ffdaaad9acd0a4d2dde79ef01633c195
SHA1 4e1dc9a36809ca850f2b432e3867764321bb9670
SHA512 67312b11900852c3d7c608c4dbd67a281b8ece7bf2d9624fd810cd8bfb2e5706000808b4238e5a511f0b32b14bf64f1ae045c1df661b550cd9465b96255f25e5
SSDEEP 196608:a2F/tzaiDzaypo/N/Cdg/acMW3SJOX8YjIxJS3NbdJwHnq5xUdp8MHn:a2FpaiDZQNq9cY+jBbDAn4SQI
TLSH
T14E8633F8E194964BE8AFC613F073FA11B09A3F6673531DCE864AC348CE460961E65778
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  GeniusTool.zip
- Size 7.6MB
- SHA256 1a6f854bdbed993590005c3e48add5cac1d6982adf2ced19dc9ee5fd48cc918c
- MD5 ffdaaad9acd0a4d2dde79ef01633c195
- SHA1 4e1dc9a36809ca850f2b432e3867764321bb9670
- SHA512 67312b11900852c3d7c608c4dbd67a281b8ece7bf2d9624fd810cd8bfb2e5706000808b4238e5a511f0b32b14bf64f1ae045c1df661b550cd9465b96255f25e5
- SSDEEP 196608:a2F/tzaiDzaypo/N/Cdg/acMW3SJOX8YjIxJS3NbdJwHnq5xUdp8MHn:a2FpaiDZQNq9cY+jBbDAn4SQI
- TLSH
  T14E8633F8E194964BE8AFC613F073FA11B09A3F6673531DCE864AC348CE460961E65778
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  GeniusTool.deps.json
- Size 475B
- SHA256 9fdb426727941d6c0857f82bd460b316399396682baa82601ec789642b09d0ef
- MD5 71e5167173129406dc68797087abaaa3
- SHA1 401b5395ad1235e1f6503dfc0af239dfe4d75bae
- SHA512 694db42bf1cc4928d40012522454614f03286f5773724a51f7da9a8d27904e7eeab0ecb32153ea84ef173b2eb8352c972c829b6b4b6e1542bd887a6da782810a
- TLSH
  T155F0E509E5840CA781F123B564364767F9736B730C252A0E79FE881C0F779174090F68
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  GeniusTool.dll
- Size 7.8MB
- SHA256 582592b0eeca45e6113a8d13bf97ddfa950cd51b1d0f859f29efc0d2dec7cbde
- MD5 5881832914e3216db52085bc80a2ef6e
- SHA1 6ba6658ce67da7aca14c4802d464d55ff4b49a24
- SHA512 5c176661598b0518dd2a47704a77069549726afc5fb08ee4045b4154dc5133dbbfbe964e7631b357a4e515a6b3a4017510cb334a9f90cdc8eed86765ac48c5cf
- SSDEEP 196608:6QjmLHa8j3a0L+RN5cl0jw2+a/Qh4f4YZmRFYlNX7H+vfMDVUfR+4:6Q4a8jhSNWV2cwZ7XTofWOk
- TLSH
  T12F8601DC726072DFC85BC462DEA82D68FA5178BB931B4603902755ADEE4D897CF180F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  GeniusTool.exe
- Size 183KB
- SHA256 460960200fbb44f513951e998cee76ea303da31c8584770ccbc05b3794e654a6
- MD5 407945b601060096300dfcbc67b3bca0
- SHA1 d858bed669d060b65e84bff33a4884da2fbe3ec7
- SHA512 e8b1f0fe0666c809b43ce3c8870e97067b4c6f0e027ffbae8c3a064adb48d48bf6ac1c1e883a21c7e8ddac40ce0f4d25bb841fef7f28cfd95c9468e57d06c8a4
- SSDEEP 3072:QqeXA/4yIg9vkNPNu6H6xCYOiVUE265XJhiXpmbPx6dawDjQLTP:QvgvkNFNaxmNE3JepmLx6dNDjQLT
- TLSH
  T1FA046C07A2A851BDE1B7C679CDA24D41FB7378598B71A7CF07504A760E63BD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  GeniusTool.runtimeconfig.json
- Size 429B
- SHA256 73b37384bb001e78db2014d328750eb2990393712fd63cd00c0f41965b3dbe96
- MD5 1043e1e5e960609d014e56f638202c24
- SHA1 aaa1583e8c9809a39a52c73efff1e5e439cfd3df
- SHA512 5fe61affcddd7b6235270cc3f0e7fa7f2e890852de6f5c7759234870d244ee1b32f95dfd7efb5e2f410d12557593491c53a5323b68966918f92a545c1f10d66e
- TLSH
  T1BEE02A3ACA206DB714F02BBEC02AC187FA3023AB00040D16BAFC180C2F361A22001F88
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9