60d79eeb4c78a915885a285cf6bf28c598cbb70556205198193db3ef10cfba8d

Resubmissions

31/07/2026, 15:35

260731-s1hy8aar4t

31/07/2026, 15:35

260731-s1hnfsar4s

31/07/2026, 15:30

260731-sxy62avhma8

31/07/2026, 15:24

260731-sth1msce748

Sharing

Copy URL Twitter E-mail

General

Target
ATRACTool-Rel-Portable.zip
Size 22.0MB
Sample260731-sth1msce74
SHA256 60d79eeb4c78a915885a285cf6bf28c598cbb70556205198193db3ef10cfba8d
MD5 2eccdb2f57ae4385a468d89481a99427
SHA1 91e33d838ba134d79d46806621f000faf99553de
SHA512 8b512cbaddac2866ee338490c3e11f670fe0464b1179b18e6e51274f043b8de4792cab5ee89a97e6b869d09f9fa1893ece1c6849977e190fe20d6ff370ea1775
SSDEEP 393216:pQFUtEMyTcBa3RQsckaehiMJEhY2eUCu9hrZ2BQR/U0UW+At/6ze2V3Iv:pVtE/Gafa31eURhrZAQu0UiC9lIv
TLSH
T13C373377D9E08D2CF5CCB9AA5076206D11C93A7622C04C9FB706209A10EEFDF65AE4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  release-portable/ATRACTool-Reloaded.exe
- Size 26.0MB
- SHA256 f82f47aca4cabfe3e53b26a0c754581bf16c28b4f3f850743fb8222b33a72fea
- MD5 36aa073b957d2765565008d1ff33af95
- SHA1 03bab466c72c4120a5a7417cd91fbe43050ae8f6
- SHA512 550a72dc120b4e620aafe9b78c49d2473d8fd2170e7372f8de10aad6fc1d6cc43f72c97b7df7352b9eca231a8f84fa32a2c53b72999bfbf9fa9c5f1418ed2416
- SSDEEP 393216:EGvGqTRvwLMhzXG8caOtljrU5NF+h3nBt87Qnz62Zdxihq/WuLjz1:L4MUaEEo3nBtmQz6mJXX1
- TLSH
  T13957F1806591E402E1675772FA6DE3F125672FF9F3448B5F60207DDA36B3B820532A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery persistence ransomware spyware
- Downloads MZ/PE file
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1
- Target
  release-portable/res/TraConv.exe
- Size 79KB
- SHA256 88622173b1a7c91fc38ceedc846a59c8f7593515183550d897811f53c293d993
- MD5 bd4297605ee8f1b2d88ce94a77c9fa7d
- SHA1 7567c7255e4a337614a7e6b88e78c5d458df53f4
- SHA512 c8345a872c237940efa7768e4f627efb039633dc778130d8d3131d8e50fe75504b22c07554c738209afa25f534e8bf478286baa7556674778d7227197df22496
- SSDEEP 1536:2ECKwhYD0uv7cs3Kb3ziyBg4Ocp7SzDCgrT9WArlhW8ldovX2SB1tlT+1wSd2cqv:oYxSbeyBg4OcZEDCgrT9WArlhW8ldov5
- TLSH
  T1DE83E96273E612E5E71755F14AD2673E8E73743B0324CADBEB701E4B55222B18478BC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  release-portable/res/msvcr71.dll
- Size 340KB
- SHA256 8094af5ee310714caebccaeee7769ffb08048503ba478b879edfef5f1a24fefe
- MD5 86f1895ae8c5e8b17d99ece768a70732
- SHA1 d5502a1d00787d68f548ddeebbde1eca5e2b38ca
- SHA512 3b7ce2b67056b6e005472b73447d2226677a8cadae70428873f7efa5ed11a3b3dbf6b1a42c5b05b1f2b1d8e06ff50dfc6532f043af8452ed87687eefbf1791da
- SSDEEP 6144:OcV9z83OtqxnEYmt3NEnvfF+Tbmbw6An8FMciFMNrb3YgxxpbCAOxO2ElvlE:Ooz83OtIEzW+/m/AyF7bCrO/E
- TLSH
  T10374C012B1A3CCB3D0B6007449596B599BBFE43046798A73BFE80E4E4F746D1D726A23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  release-portable/res/ps3_at3tool.exe
- Size 836KB
- SHA256 8ac653df80443000c8532052a7005167031b546143295aa8c2ab89f3697af3bb
- MD5 e3a802a193fddefa2556761a717e3bc3
- SHA1 ee486df3a20d5b5c48ce99a0f62cfeb5f917f7a4
- SHA512 782092ffe194537b6c7060ddba7b78e9567f9a09fed73ae53dd16a3a481ba578d7a02700280298df962acb127e3c2d46dee8b5d551fe4ef5adfd4080951e6f70
- SSDEEP 12288:8SLCNbw+MUGmZ2+I8vzlu07Cgf2ncyczvDVAXxT/vVQ0/FDkx2d:85bw+MUGmCUzlJ7CWPy4vDyXxZHNAxA
- TLSH
  T1F7051890E80BC586FA93043D747FBD324A64276763F3C976B5A8E8ECF6C13223586645
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  release-portable/res/ps4_at9tool.exe
- Size 155KB
- SHA256 8228fbd4ea5552a1ea80ca8304c09104423d142313d6d80ea49d63c048c8d00b
- MD5 416c5930d7cab0a1919f738a9aaee43f
- SHA1 d84b53d81684185cc5e0e4dcac44644ea03183c9
- SHA512 eebfbe4e37be4ceae0893ddc5b5a602164ebe3dcf480c0433155a86840f86e7a1c7a2b09ed1f739ea9fe7df33a1c940ce4d9e997cba3af5fd7319367e3845785
- SSDEEP 3072:N9o6LtW+/8YPiNxlDEwIIwWzzeux9X3YL9UAmJlbDsvy8lV3DtbsK7WJj5sl7Y:LUEc9zzeJcSvy6sEi
- TLSH
  T1A4F36B01F9C04362E56A027D41FB96236B345564CF09CEC376D8BB6AFAD20D16B763CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  release-portable/res/psp_at3tool.exe
- Size 772KB
- SHA256 823199113c59ffcd3fc3e1855dbb88a9cd44d29e82e7a7cfc42e8c92f2a61341
- MD5 e6c49df45efe619ee3ace5796dd41aac
- SHA1 53f36d90151d4c00856ed24273f06981629b860c
- SHA512 51ffdedc2659e12982e666439236f0c1c2c45bc34cb7983629e53a6479000f9ad818082e638bc6ece3e4ca88a550b8c497156ee8fd2e05eee914da541f902040
- SSDEEP 12288:b6I/R8U/sQUt8Gj41LFiby+Em8PjpynsLxLOTYDkWuQl1FdRmWsC:N/R8U/sQUCG6Yb4m8AnsLxyTZKP3mWs
- TLSH
  T149F40790E80BC596FA93043D747FBD320A60276763F7C972B5A8E8EDF6D13223586245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  release-portable/res/psv_at9tool.exe
- Size 217KB
- SHA256 d57d5f24b3f733864d1ac24d5a9293269b7b0a113e28944dcd848a168bb69b63
- MD5 10fec5b7c796f5087ae82dc9fd6ab8e7
- SHA1 b9eb2461b535109179975c7ea51b378c3e9a9009
- SHA512 17ea6ab733df7e3417df530c1116fdb62f0eb655c30dab558a43b6097c65f18e241818b69b2f566de837f4eeb41040251e26436b699f08c6600d7b00410974fc
- SSDEEP 3072:/iml32DyQV9Ap5VH0ZYEg6tJ5d3murWiTyy5neupJl7pT3ZN5zoRghiKOvfBEQ7k:qmIdXyp5MRAE6W
- TLSH
  T195240900E601BE10D0F16D3651C351AA753817244BF49E87BE9C3B9CE7A2DF9DB36A89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  release-portable/res/updater.exe
- Size 315KB
- SHA256 c0f91521997ca4b3be88def9a9671dfc7d8f2add9a2d266a8eb05185d4ab6aea
- MD5 a8b3a1d28bd04e3dba84e05dccb252db
- SHA1 2e1e64a07368e15fd600ac38fa26b9d0d977a9b9
- SHA512 4bc8f44853e2c14976ed879dde9ade0a7ce5249f81a45bb748b010730698ece73f6d19a5286ace444e59726e94ab3b9e5b9710547d291c3810ea8827d0d54dfd
- SSDEEP 3072:QuXYUKm0cBAzolI54ojtWlUauX8CRSJRsIal2NYy9zfk3RZ82IXeHREPvvFi5yiK:QygV+ItWlUa7C2NYy2LkOIqs4YJ
- TLSH
  T1A9646C15F7A804F9E9B7857CCA534906EA727C064772D6DF03A04A572F236E09E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8