c0def8e8ff1f622b7d6911965c971cf19fa40ef6e577ecc4f7a252d08404aca3

General

Target
both.zip
Size 423KB
Sample260731-vd4zaack6t
SHA256 c0def8e8ff1f622b7d6911965c971cf19fa40ef6e577ecc4f7a252d08404aca3
MD5 df44732c18575f0f2a4950a60fefcce1
SHA1 82c5cc7e5ba6f6d362c3d08a82764eb29fe80066
SHA512 ba9483e64ef76192cb180e245a8d7d531c1f3024fd5419651b3a36e572eef034aa7be7ec89e2878231fd2ebfd9d819e721202b9860d8960d0e3985fa981d3109
SSDEEP 12288:N0592dXsN4sxYB8VRLY7u1uqu/dLuPOnpaJxn+lqzvJ11EqV:KSYQ8jY7u1UuWoClqzR11xV
TLSH
T19C942318C702E0998EFD852F2EA417CAEF71213A5A5B9B57C57EF529772721C808C24F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  both.zip
- Size 423KB
- SHA256 c0def8e8ff1f622b7d6911965c971cf19fa40ef6e577ecc4f7a252d08404aca3
- MD5 df44732c18575f0f2a4950a60fefcce1
- SHA1 82c5cc7e5ba6f6d362c3d08a82764eb29fe80066
- SHA512 ba9483e64ef76192cb180e245a8d7d531c1f3024fd5419651b3a36e572eef034aa7be7ec89e2878231fd2ebfd9d819e721202b9860d8960d0e3985fa981d3109
- SSDEEP 12288:N0592dXsN4sxYB8VRLY7u1uqu/dLuPOnpaJxn+lqzvJ11EqV:KSYQ8jY7u1UuWoClqzR11xV
- TLSH
  T19C942318C702E0998EFD852F2EA417CAEF71213A5A5B9B57C57EF529772721C808C24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  both/FluxusZ Windows 1.2.5_51658971.exe
- Size 702KB
- SHA256 35d5cdf23553b14ad8051f68b1af8199805f06479391888f609af4ed54ed5a63
- MD5 cd85c75fa053954c4ae4ee338d3bcb63
- SHA1 fb2fb89c667d901ef01600dae3f027c7dbfe16be
- SHA512 f0d7e4732df889e6513f67e266c68bf7490c513bb78736b4fac4d90ed49040415a500ae8f0f9b696e100a92c871d5cf80fdb628bec0f42e3a531e1a636873f6d
- SSDEEP 12288:utflJ50c6GeHR6Kjx288tG6rmC0tzeIiZ4fFo:ut9J6MB8gGaUtze74f+
- TLSH
  T123E48C16B6A801FCE1B7D179C9524912F7B1B847437297CF03A05A66AF2BAE05F3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Downloads MZ/PE file
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral2
- Target
  both/x96dbg.exe
- Size 194KB
- SHA256 7473d96b13c350643fc8f471a2e840494f8ab771b35e3e316ebf8a66660df158
- MD5 550ca69da5d9c92a5287456220c4e1cf
- SHA1 c5095ca3c2d7b5f1b51ca47f8e52ffbeafa523eb
- SHA512 b06bc32977418d1dbeaf0a927683ed153b8132afd875b3429ac464d793cbbaad2d90057c22a365ca73377ab91e313b5b2ac3d8ac1b289e8336c64015393d30eb
- SSDEEP 3072:NqVO3SCNXhEnDl+dUc/+Bc5Ja9taJlJHPHqy9dF6JNq6oIo4iFk04sZVc:BUwK3c5JStaR/1+DRiN4qVc
- TLSH
  T14B144A117BC1D933D796093149A18BB1893DBC603B91EEDBA7C40EFD0960AF0DA3A657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery persistence
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral3