622bf36a4ec40af530d7ae646bac937f21f4c3a4fac915f62ffed0400fb0dde4

General

Target
07.30Document detail.zip
Size 609KB
Sample260731-fy67tadb95
SHA256 622bf36a4ec40af530d7ae646bac937f21f4c3a4fac915f62ffed0400fb0dde4
MD5 5f6349afb3d10e057c3fcdde7223a5d3
SHA1 939ee90b730c24d2ecf4318510e15894c380c1b9
SHA512 d7b6940a3cc9d9b58e5d9d50e64be1e5e5422b26727b0842712589fb20ee561949767ae9aa4aa603bc44270f5c7f9d849937fca8f12b7ff530e2b57bb3fe027b
SSDEEP 12288:0Vjo4zkxwCUxuTED0xrnj/SHakLGwTwYnJC9KaDFGWo8Ql+/RNq:4jo4XMED0xzjYakHT5nJ+5DFw9Y/2
TLSH
T17ED423EB894CA12C54166AFCA592430FA8885D21D1FCFFDFC2664F78279C72C6D4EA11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  07.30Document details.exe
- Size 585KB
- SHA256 2d2a251a88632f010fd9671789746908eeccaa5bc5c0a5d25e4649efe4f5b15d
- MD5 315bda377beafb746f1c2f4fba430867
- SHA1 62e3ba37a23669139a222cd43ec2b202277a4030
- SHA512 dbf0dfd5e062c1869a20876013cb30c6e6a563c4e46027396c0590ad93d1c3fef5b42a0f68a82c20db90cfd5cfc4d3fae0452c784f0d40c63049d0c7a3d26018
- SSDEEP 6144:vMTDKZGfvKRhPTyB0fVL3A8AG1myJ0bLehmzQnZoMTroJRoKhiz3ZZs+PE7b39By:wDKZGMsqsN9MpxJsse796CvbFJTG
- TLSH
  T1B3D45A9ABB6887F5D02BE17984D68242E3B574520B2197CB02B12B6D1F377E25D3F321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

persistence upx
- Drops file in System32 directory
- Suspicious use of SetThreadContext
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  teamspeak_control.bin
- Size 291KB
- SHA256 bc9aef1693a125664a89c3ee424fdd687142eef601c52422b38cc74492287935
- MD5 d9d0eaba3f8e97b4b1562a26aa715002
- SHA1 7de942da8993a45a5a7547de0a883f9b13f2f71c
- SHA512 8007fc0da2fa29f5c5bd9084a39e13e32b1d4cd982ac461e8ccbe4d97b9a4aa163c981876338fc6ef2ac8b9604998987f6cc650abe8046619dc6274524207124
- SSDEEP 6144:72O97Zwv/dWHKXkhVGSdXwYmuRnsISmhfzUYQ+C7WuIeogDFJ4Wov0QlB:72E72SakLGS5wY7F69saDFCWo8QlB
- TLSH
  T19D5423E2676E5038085AE6F9A0578D4EFD44396AA2BCFF2E85E64DB012D07DC4C4FB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  teamspeak_control.dll
- Size 101KB
- SHA256 6129ee8615f050beb17d0cd4080ddd8c740fffb93fa9245685aba2f1fc763ad4
- MD5 c66db0c326e77008daf6e9b5a16f5afa
- SHA1 f062e682ee38b33141ba03b17880b9cacca0e376
- SHA512 53a5c11d86f86fa4c73d1d62c84bcd903c34993ad043d6387ca33a439ba04fb5d52a701887dbecbd9c1e61f1940288390589f86da5bea2a7e82954ad31740ddc
- SSDEEP 3072:fW5sF9S+1KPTkLzPTSR8i2cjp/E91JPQ8fzM:+OW+ZSRwiy91O8o
- TLSH
  T180A312B4E2E57B69D17310729FB4E3924D107526C9CA4D7F1514E13CABDF826B017392
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral5 behavioral6