bafff55d07f0b42dac4060dfbc3f1134cc6799510568d4fb8ac6c6fcea8dbe94

General

Target
07.31Important details.zip
Size 699KB
Sample260731-rt43fabh76
SHA256 bafff55d07f0b42dac4060dfbc3f1134cc6799510568d4fb8ac6c6fcea8dbe94
MD5 35406c093514c97da15507ed6d10fe4a
SHA1 64eec886fa22062679ab563d3a65bdc6b6271f95
SHA512 f09eeb5489b159c7a82172bc09bbf1b1e1e09977f567fa19a651246565f24a757daa4361cd95a0001f7e2cb5711364b3717a73f780672122ebcdae1190d8b0b8
SSDEEP 12288:wbOWP9mva6PxX7sefs0xGLpn6gQ9ZckFSFsGnoVjo4zkxwCUxuTED0xq:GOWP9my6B7sepGLpU9ZckFSF4jo4XMEV
TLSH
T134E423EAA87CAF0A490297FD3749A38F5960DE086AD725EC514A4F7E340F274734D643
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  07.31Important details.exe
- Size 585KB
- SHA256 2d2a251a88632f010fd9671789746908eeccaa5bc5c0a5d25e4649efe4f5b15d
- MD5 315bda377beafb746f1c2f4fba430867
- SHA1 62e3ba37a23669139a222cd43ec2b202277a4030
- SHA512 dbf0dfd5e062c1869a20876013cb30c6e6a563c4e46027396c0590ad93d1c3fef5b42a0f68a82c20db90cfd5cfc4d3fae0452c784f0d40c63049d0c7a3d26018
- SSDEEP 6144:vMTDKZGfvKRhPTyB0fVL3A8AG1myJ0bLehmzQnZoMTroJRoKhiz3ZZs+PE7b39By:wDKZGMsqsN9MpxJsse796CvbFJTG
- TLSH
  T1B3D45A9ABB6887F5D02BE17984D68242E3B574520B2197CB02B12B6D1F377E25D3F321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

persistence upx
- Drops file in System32 directory
- Suspicious use of SetThreadContext
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  teamspeak_control.bin
- Size 291KB
- SHA256 2d42dc6ed0b031dca868df0cc4de8549d7b3444570c2172c8cb314da61b9096e
- MD5 7d4c3337abd45ce16aa97f7cef69785e
- SHA1 367f170f83aec859ad3072562f691574b1635aee
- SHA512 bf3a871fba13659fe28e372d1edce9ae25a1bba0cdf237c7d1c04cdb71ec58e98bd2754f9408e9c49b760e3ae498ac0ae0029be795b04b2e934915a5539b9b0d
- SSDEEP 6144:7PWHu4olhwbLrhH6DCmcQ18gO58cutDJGPRJWY7seCQukarxXb0oGqmuDkj:7PNwjhH6OmP9wva8PrX7seD80DG8
- TLSH
  T1935423F124BF8C164E89E7FC369D95D70DB2680F395B81B82215CB2E143A2B0735A74B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  teamspeak_control.dll
- Size 192KB
- SHA256 05d6e05d63c2fba753c459d2bffaf99118eb405eff2fdb9d11cb39ee4c9ae87f
- MD5 6f2caa4f8d656752fdc76a0f5a3b606b
- SHA1 e8957e08d0ea323b26b987e386db11ae96742f27
- SHA512 cdf502f6347a67208422ccf4899ec77d8c2dff4f575d8c8d3b1af40498cd171ad7ccf9182d134db282529d7f66d49cce9a9c15c418373e840a6c007840460fe8
- SSDEEP 6144:AgUyrG1TBJ7LGwwYDBkyJpIvAXQX3DwhrRmL:AgMnsJQ59XQwrRmL
- TLSH
  T1DA14122B9F28A523C755E7BB9709C2E6D539FAA1020E101D46C9865D7D32C49CECF335
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral5 behavioral6