ce08743050504a7501d25f83d6e8ab3afb65aa0719c31448094a822d15058fed

Sharing

Copy URL Twitter E-mail

General

Target
9_klass_2019-2020.rar
Size 2.0MB
Sample260731-pkt5rssfpf
SHA256 ce08743050504a7501d25f83d6e8ab3afb65aa0719c31448094a822d15058fed
MD5 2c545439a9c1a0db3f0c0c806a9f3e9c
SHA1 acc11ecca7f93eeda527a55b3ae4b267170f2c9b
SHA512 3e4b5d1dd54db91d096846ac2bfd127c9f7215a5bfab51923a492a826f49002dc650600950690243e98595b9eb60d66f63922f4b60ab917922e1ed2e100907e4
SSDEEP 49152:sv4hMEMN/MvzvJJGBXA5fOJujM7J4gDQV4adGp0aSZQm/07:4VRqt6L6gDC4XQQ1
TLSH
T108A52331302A89ED9C2312B8C476FF1EF5A44799B62E3497246577CBAECCD37C195A80
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  9 класс 2019-2020/9 класс 2019-2020.exe
- Size 41KB
- SHA256 70d98b736c32160617e8e272c2f5b2c10c72789fe40e27ec16f94ffa09394cd7
- MD5 483fcf432217d71544246aa760d98cdc
- SHA1 591b0ec52ad2a306f1cf8af2fc04125642b1a00b
- SHA512 c416acf7af8eaf9c6e331e4097bdc79ffb5fc07f8b932649683ecacc5db94f6b9208cd4795da5b488e9b86336940f62b7414432a38a63d57c963697ad868eebd
- SSDEEP 768:J/n/s4NzTSD5IZfRrbjOmd2VZX+DNxEUKbO5/Pd4PV2g1Q3qv35BMCV:JsgToKHSmdkIDNxfdPy35B
- TLSH
  T12A139E03935DD7C9C4B256389A6C25E27BF52C2B4552F5EB4E82BE4778B2E6398C1043
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery persistence
- Modifies visibility of file extensions in Explorer
  defense_evasion
- Modifies visibility of hidden/system files in Explorer
  defense_evasion
- Disables RegEdit via registry modification
  defense_evasion
- Disables cmd.exe use via registry modification
  defense_evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2
- Target
  9 класс 2019-2020/Алгебра, 9 класс (1).docx
- Size 118KB
- SHA256 e1666c3bd46b49bdc2c12410f1b12d0966260685c17272b4b3aa18c639aea845
- MD5 7a09b47185508916ffb27452310d9578
- SHA1 d51a9766e39dd8584450137f885f734cdaa470cb
- SHA512 e66eb818006fad964b70d2455b185593b1c56a6bc5f18c8549c8eb046154dd287d2405ea575b2288d83ad0e2f4cb4699c589aae4b26cf4a14e4b80389027b39e
- SSDEEP 3072:iXCqk8kkmQcrs2ygg2c/9ZBOT+uIwkw+zPvsy5hyf:iwlIV2c+9kRzPvsyWf
- TLSH
  T1B6C3023DD1113330E9F392B855E787D6E4CA0A4DD1C0E55A6E636F84CF2248B6B89C4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  9 класс 2019-2020/Английский язык, 9 класс/Английский язык, 9 класс.exe
- Size 41KB
- SHA256 70d98b736c32160617e8e272c2f5b2c10c72789fe40e27ec16f94ffa09394cd7
- MD5 483fcf432217d71544246aa760d98cdc
- SHA1 591b0ec52ad2a306f1cf8af2fc04125642b1a00b
- SHA512 c416acf7af8eaf9c6e331e4097bdc79ffb5fc07f8b932649683ecacc5db94f6b9208cd4795da5b488e9b86336940f62b7414432a38a63d57c963697ad868eebd
- SSDEEP 768:J/n/s4NzTSD5IZfRrbjOmd2VZX+DNxEUKbO5/Pd4PV2g1Q3qv35BMCV:JsgToKHSmdkIDNxfdPy35B
- TLSH
  T12A139E03935DD7C9C4B256389A6C25E27BF52C2B4552F5EB4E82BE4778B2E6398C1043
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery persistence
- Modifies visibility of file extensions in Explorer
  defense_evasion
- Modifies visibility of hidden/system files in Explorer
  defense_evasion
- Disables RegEdit via registry modification
  defense_evasion
- Disables cmd.exe use via registry modification
  defense_evasion
- Adds Run key to start application
  persistence
behavioral5 behavioral6
- Target
  9 класс 2019-2020/Английский язык, 9 класс/пояснительная 9.doc
- Size 140KB
- SHA256 f628557b38833c6c31bd985cd116e13b44fa96c5733959de7da0404484c66b85
- MD5 426bf9a54759eab34bd803391533a5f0
- SHA1 2e0c657f864b3e11743facf8912f0d3ae8e8852e
- SHA512 7ec2faf1eb81725d21e5a279dd7a896ef1c54d7930ea4e459a44883cb67ea5c7b4965c26ed507085aa3eb23148a4bd84e238456bd6d31937fa0a01abfda32c83
- SSDEEP 1536:yN6NE9X5d7h4fuvHllePvP1PfP1P7mxPNP1P1PfPNPLPL1ngSc2:ygNy5dOGvHTlHR
- TLSH
  T128E3FD4FBA7CE625D0A4D6301B1642E7057ABF84D72096CA92CF3DA8797C1393B24787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  9 класс 2019-2020/Английский язык, 9 класс/тематическое планирование 9.doc
- Size 191KB
- SHA256 2f149fb242e400cbece0177783d06bfced738b8c3151f85efa5d8426ac103c76
- MD5 9a1be8cc004b6da8af129196623ed339
- SHA1 e33ea381a34ee24c3d5bdeef86c3a6d8b7e24418
- SHA512 b11a0c84ef5fe3f61a5b37f38d9607bb674730f80e20d8a7de550b31a23fa3d59d1826c67d55fbf72876d1be7fac58f6e715763f08188dbc1d981ecdc11902d0
- SSDEEP 3072:RAinht25zuvDURMoP8t1S0i9qQMoyVrX17M0fVtkTrx3JoRInWm:PoO8CSHx3JoRInW
- TLSH
  T12114FD1BFEA96A20D4E586310A52C6F64517BF40EB3456C670CF3E67B83C5346A33B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  9 класс 2019-2020/Биология, 9 класс.docx
- Size 91KB
- SHA256 b3f8242e1aab39b8d72e8264f2f1496435e380c839db8af9d32f21773e1a2e96
- MD5 f39b782b454c38342fddc63162f9af0c
- SHA1 a60afe47fea94db316831a4a2eb751ada445dc6d
- SHA512 d4932c43be2c82e427749d1081b8ab95fc4bcbe8b4b05388e2b5a6bf12f64beef5e4bba4e6145927753070ffb286daf735c24a050de2e659c49ee12dabebd087
- SSDEEP 1536:QvDm64CFSPlWUXRw/MbuePGRz6qvnL2HmHB62h5JEFQ1JTIk2Ed8GAL7eK1qgFPs:QvDmrPoOqoGI4n51hcFOtA+wfE
- TLSH
  T1FB93026EA006BDB5C6A099BF072B07B8E3C21D4277B1661D211AF50A7F21797F0429DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  9 класс 2019-2020/География, 9 класс (1).doc
- Size 185KB
- SHA256 fe23cc668cb9dffa491da11a027ee8607bc4aaa6cd03a2f85c2eec03e49169a7
- MD5 84954215a41c9297f6659d61738150b3
- SHA1 f472620801e85c68b78a6e475bbd191bfb6d25f5
- SHA512 e37fc76af13887f3396e95b058345eec72f55c5ad516fa72a2ca4587f72d24d2631d9372346ae35e813502c1d57ac2ec8f9f6fad3cec8932d3cdfa6e9696fcc7
- SSDEEP 3072:uWhMeOzoMdC9q10/Zvuc2Eas4h46Alz7Xyz2q5wR:JEZdCiANXyz2o
- TLSH
  T1AC041E4FFEBDAA21D49592345B5282E31257BF50EB6846C3A18F7E19B8384353F13287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  9 класс 2019-2020/Геометрия, 9 класс.doc
- Size 384KB
- SHA256 cf08c5832a539843e8bfaf0427ee93fa400f83f9cbd1743387f71cdee95b2c24
- MD5 d83e89829c2ba0ced1711020c14b546d
- SHA1 eb9464e05cc24c50ea9df270d967d5f001539f73
- SHA512 53aa0f3dedac87a835477e379575aa9a6c65a2e42ba818dff0fc1e3e657627b21d6b8fa0bbbb51ec6b9fed364a8fd72496b68bb9638e1cbc6f420855cdd82e69
- SSDEEP 6144:VbVE/l0kBHvDHkBoa2sPGs2ztH+ZmRaHW5GZnUxnAJWo:VqHL8l2sPmzh4mRaW56UJ2
- TLSH
  T1DE84184BFE68A655C092C0758A56C7F6026BBF50CB6155C7B0DF3E6B78385323B43A82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  9 класс 2019-2020/Информатика, 8-9/Информатика 8-9.docx
- Size 65KB
- SHA256 1d1048e7ad98f35cb7492a87ac076df1655162ff344a77d286f28d4468c513e9
- MD5 ab21a8e4ac08f1369f55f85dd7314e14
- SHA1 d9572320db1a826e8ec739f57b41a1650c30bf2f
- SHA512 3f73407f455919a5482fe80693f0e61bb2bde9a1f751bdc53d6e516a709372c5092fb2a318e5f08dd23e1b214ae1a947dd1ddaa28dc4eafca76cead95a92c18c
- SSDEEP 1536:k5W2XshY0I9l1MOPsb1qwZc9kqqVVHiYgPLI81x:k5W2Xsh78l1MYa13G9kVHiYgPn
- TLSH
  T16963022CD2E1E42DDCAB2FB5A06951B0861EDCC0F73B1C5E7A25F8EFAA406474756206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  9 класс 2019-2020/Информатика, 8-9/Информатика (демоверсия).docx
- Size 15KB
- SHA256 f5a473e8a67f51b4af058614fe2f0dba2129ca339126a9036c8cab4a2c432299
- MD5 0f14bb879316e42e7c3dfa076d433f4b
- SHA1 a04462a24ed4883e03b1393ea966c57ac91bc55f
- SHA512 fafcbb3aa01f079a7bfc9978f426976d920024772872d461e4298c5a88f68a6efb1c50d6b2da4d342da3cf84f4bfe7b56d794f802d0ede88d3112a0117452d1f
- SSDEEP 384:dzqiNB+cwCNgvTmyUsRZbnkLB6UcLKTgFI7pnNgZ:oiNQaNQmQRzvLKTg2tyZ
- TLSH
  T18962AF34E5472C18C4B3D8BE80B417F0FA546383BA259B2E5846F38CC79ED871B75649
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  9 класс 2019-2020/Информатика, 8-9/Информатика, 8-9.exe
- Size 41KB
- SHA256 70d98b736c32160617e8e272c2f5b2c10c72789fe40e27ec16f94ffa09394cd7
- MD5 483fcf432217d71544246aa760d98cdc
- SHA1 591b0ec52ad2a306f1cf8af2fc04125642b1a00b
- SHA512 c416acf7af8eaf9c6e331e4097bdc79ffb5fc07f8b932649683ecacc5db94f6b9208cd4795da5b488e9b86336940f62b7414432a38a63d57c963697ad868eebd
- SSDEEP 768:J/n/s4NzTSD5IZfRrbjOmd2VZX+DNxEUKbO5/Pd4PV2g1Q3qv35BMCV:JsgToKHSmdkIDNxfdPy35B
- TLSH
  T12A139E03935DD7C9C4B256389A6C25E27BF52C2B4552F5EB4E82BE4778B2E6398C1043
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery persistence
- Modifies visibility of file extensions in Explorer
  defense_evasion
- Modifies visibility of hidden/system files in Explorer
  defense_evasion
- Disables RegEdit via registry modification
  defense_evasion
- Disables cmd.exe use via registry modification
  defense_evasion
- Adds Run key to start application
  persistence
behavioral21 behavioral22
- Target
  9 класс 2019-2020/История России. Всеобщая история, 9 класс/История России. Всеобщая история, 9 класс`.exe
- Size 41KB
- SHA256 70d98b736c32160617e8e272c2f5b2c10c72789fe40e27ec16f94ffa09394cd7
- MD5 483fcf432217d71544246aa760d98cdc
- SHA1 591b0ec52ad2a306f1cf8af2fc04125642b1a00b
- SHA512 c416acf7af8eaf9c6e331e4097bdc79ffb5fc07f8b932649683ecacc5db94f6b9208cd4795da5b488e9b86336940f62b7414432a38a63d57c963697ad868eebd
- SSDEEP 768:J/n/s4NzTSD5IZfRrbjOmd2VZX+DNxEUKbO5/Pd4PV2g1Q3qv35BMCV:JsgToKHSmdkIDNxfdPy35B
- TLSH
  T12A139E03935DD7C9C4B256389A6C25E27BF52C2B4552F5EB4E82BE4778B2E6398C1043
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery persistence
- Modifies visibility of file extensions in Explorer
  defense_evasion
- Modifies visibility of hidden/system files in Explorer
  defense_evasion
- Disables RegEdit via registry modification
  defense_evasion
- Disables cmd.exe use via registry modification
  defense_evasion
- Adds Run key to start application
  persistence
behavioral23 behavioral24
- Target
  9 класс 2019-2020/История России. Всеобщая история, 9 класс/Рабочая программа .История . 9 класс. Новая.docx
- Size 52KB
- SHA256 be19db6268a86a2ab72101dab8b9659d40c28fdba0167dc19062198d6b9c3d5f
- MD5 0e18af8be3e92fc961965235a49ce8a4
- SHA1 7a946c67e9ff967fa1a7df58d5533d6208ab4c6a
- SHA512 ccac4b1c2f9ebcf0415a6f8e311c507a2c5de219db1f6c41c66af95036b01967018c1c9e6847e1ad2abb044d33a3279d38c0ef14784365862c88123207eef487
- SSDEEP 1536:oFg+AHukA10FIn26ArBmqn+xWNfpkhNHBUtKZki0jOo:o8OP0M266Bb+oNfp4U09YOo
- TLSH
  T1D733E11DDC489437D2E1EEF0D1AD01D0B2E0259A036EF06B5BE2BF5CD744A979923AC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  9 класс 2019-2020/История России. Всеобщая история, 9 класс/тематич. планирование.docx
- Size 77KB
- SHA256 7a28087191e81074f33124d395b0645ced207cd8c43b8d437fe06ecc9f955ec2
- MD5 86c91cc62293d46fb88eb67ee1efbb01
- SHA1 58e64e02ef2a7d2516fb5b201b7d41818960a0a3
- SHA512 6bc7aa3d260fd2309cf18f1e95feda769dfc47c14a37d36f0f40902eced001024ffe25b97bac7cb49933f7fe7171200105594483f3be04b42f3e0cadb568a182
- SSDEEP 1536:oiYssS0ZyEQMPE8aQvD71O2oEUd3Wm3vhpRNn7pX8pmeRalY:IssS0ZyE9tNtBUd3597pX8plalY
- TLSH
  T10A7302B4CB812713FE2C8BBED6E42C107222569535551C05ADE762EA5F837632F0FAC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  9 класс 2019-2020/Литература, 9 класс/Литература, 9 класс.exe
- Size 41KB
- SHA256 70d98b736c32160617e8e272c2f5b2c10c72789fe40e27ec16f94ffa09394cd7
- MD5 483fcf432217d71544246aa760d98cdc
- SHA1 591b0ec52ad2a306f1cf8af2fc04125642b1a00b
- SHA512 c416acf7af8eaf9c6e331e4097bdc79ffb5fc07f8b932649683ecacc5db94f6b9208cd4795da5b488e9b86336940f62b7414432a38a63d57c963697ad868eebd
- SSDEEP 768:J/n/s4NzTSD5IZfRrbjOmd2VZX+DNxEUKbO5/Pd4PV2g1Q3qv35BMCV:JsgToKHSmdkIDNxfdPy35B
- TLSH
  T12A139E03935DD7C9C4B256389A6C25E27BF52C2B4552F5EB4E82BE4778B2E6398C1043
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery persistence
- Modifies visibility of file extensions in Explorer
  defense_evasion
- Modifies visibility of hidden/system files in Explorer
  defense_evasion
- Disables RegEdit via registry modification
  defense_evasion
- Disables cmd.exe use via registry modification
  defense_evasion
- Adds Run key to start application
  persistence
behavioral29 behavioral30
- Target
  9 класс 2019-2020/Литература, 9 класс/календар план литер 9.doc
- Size 344KB
- SHA256 0bccd914355c37a466091bb445b2e7ab00d0719e7471845aa3febc2a8c8e32bd
- MD5 60428841b757114c9b6ba4e8df1fb183
- SHA1 df3728708052f4361b42526aa1212ce241295596
- SHA512 ada8918b1ba6924e2c80064791b47873d80d1bf962f6f98429a2f614f7bb14eb0f96077c135e86ee392cbf03d6bb01978fa47f18450901a34ac413818991ed5e
- SSDEEP 1536:CoZHYQtGrwtWKVWCm+iNfsol7KX9VpPgHrMct5Q3fby0B:CGHYQIrwtWKVWCmYoEXjP
- TLSH
  T14D74CA0FFE6D9A16D4A1E2300A52CAE71156BF60DB2995C691CF3E76B03C1353B262C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Modifies visibility of file extensions in Explorer

Modifies visibility of hidden/system files in Explorer

Disables RegEdit via registry modification

Disables cmd.exe use via registry modification

Adds Run key to start application

Modifies visibility of file extensions in Explorer

Modifies visibility of hidden/system files in Explorer

Disables RegEdit via registry modification

Disables cmd.exe use via registry modification

Adds Run key to start application

Modifies visibility of file extensions in Explorer

Modifies visibility of hidden/system files in Explorer

Disables RegEdit via registry modification

Disables cmd.exe use via registry modification

Adds Run key to start application

Modifies visibility of file extensions in Explorer

Modifies visibility of hidden/system files in Explorer

Disables RegEdit via registry modification

Disables cmd.exe use via registry modification

Adds Run key to start application

Modifies visibility of file extensions in Explorer

Modifies visibility of hidden/system files in Explorer

Disables RegEdit via registry modification

Disables cmd.exe use via registry modification

Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32