2acbd443b9ab1bc9f327bae40b2840b2e63135c8d19086850f1b30ba8cc5a4be

Sharing

Copy URL Twitter E-mail

General

Target
Autodraw-win-x64-2024_10_17__19_11.zip
Size 20.7MB
Sample260801-fenalaej51
SHA256 2acbd443b9ab1bc9f327bae40b2840b2e63135c8d19086850f1b30ba8cc5a4be
MD5 678c66c9df51ded6f79f4440879e45eb
SHA1 0355b042e852937f5956e8ba9d73c1500cd1e0f6
SHA512 56b9b0141208df91d72f4508bd73f900882f9af939b8c52ca767353770e47a8b8e3f27e5f4a2b0050444ccb6464a3c30b12b7ea978652e01dce2bbbdf0a293e2
SSDEEP 393216:UYemGuvO4dtQU5PJhuHJU/z+xwxAjZqTjjkwzNR0JdiR5gopFVGeFguI:OmGuvO4dCUoHa/z/EZqTjjTPWdw2oFGT
TLSH
T13227333CC18EBE997AF7A531B9CBC189BC98B2170DEA467EC62D605D1ECD413294E470
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Autodraw/autodraw.exe
- Size 34.5MB
- SHA256 6fe2ab89cded0fbd3aa5d9680cab2481287d9e3cdd4c90de42c9020bb17bb9ea
- MD5 603e9aa8ce9c362f099649b75cb36555
- SHA1 37c0f125c7a33b7c34770bdc1da403a5362e04ad
- SHA512 bf39c1d9cc7af41f7c7b15914bf322b7de9d1df3ba65cd981b0a7e079d6a45d5e100e81afa1611d1da4788a67125c0e5d5b947879dd461a192d923d3c4663a3e
- SSDEEP 196608:KcAc8d5rv4/fpVrrOrvevb/lwhP2zRIKuk+fVOVzH0/1HSV0oc5MZtNVCfa9u1+s:6D574/fpVrYfgm8W5olGaJY
- TLSH
  T154879E07E79C8E1BD5AF0A3D947802C0A37CE4769751DBDB710CB5A85B5BB080E263B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery persistence ransomware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  Autodraw/av_libglesv2.dll
- Size 4.2MB
- SHA256 85b3aee47c0e0eaf3a5ea5c75ba8131387a12639b6a0ef280c28531fb77695ae
- MD5 73d2fb4c35d323813a86e3bf5c85c345
- SHA1 81f751a34e0c25bdea93902a19a94a49ce1495df
- SHA512 e81677cc9b99ff3d54f67000a60489603e01a896f90c4ef0c883b82e2fdb7b90d2899c078958b3f060a20373b99cb6c4deb7f64cc4c7e0ba2a708209f4684ca4
- SSDEEP 49152:I1qISHMa72SRXc0kFg760EvAy4U5hDempTKkslMx0YEQtHhcEIy/rcgcrq8T/2tj:vbMNgMdth1t
- TLSH
  T175167D1AA7B400BAC8BBD139C9175A0BE3F1FC4641B0D70F21B9679A5FA7770626B314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Autodraw/libHarfBuzzSharp.dll
- Size 1.5MB
- SHA256 f13d0dae00a598620a436fd991219a2e0fe6157eac90faa025d4d76845cd996c
- MD5 f121a2afb03f1b8ca1784e544464a346
- SHA1 9346297a66989dbe88bc459ee8bf936e7acb3d24
- SHA512 ebbb8c2d7d97521286af0f6b02195890b193e660a28e6b1e5112ed9f1fcc081c66587a7a82c8a9468d1a55d477880487d1b3edf1deb2ea285e17d70fbd56c6f1
- SSDEEP 49152:PBy4VCDmxqVx/1hlcsHI7woyGYdwENWa6m4ys:aQkPNWMs
- TLSH
  T1A575AD4AE26A11E9D9ABD074C656840BD3B274420F14DFFF26E08695EF23EF5167E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Autodraw/libSkiaSharp.dll
- Size 9.1MB
- SHA256 4157658aa5b75683e01953df4bd5cd1cc9ce313f4eed026d5fce31f80f4ed7ca
- MD5 0c8068859d2a240b9faf5c51544fe666
- SHA1 f8a24d7918f1151f8d10dd606c73e5cd530e30f1
- SHA512 53d3c4d4f2d9cf24f6c97924c4ec33865e7a7bc8aafd39b0b65515395fb6e14525da435017e6e943f9dfd00a8ef319b880b73197772fe814b06ceb32f9185fc3
- SSDEEP 98304:h8a8BnJ0P/lYHXQyjSXGl5yEcl0WbG8KIqccMk/wH1bHL1:V8BGP/4SX6RzLh/
- TLSH
  T14AA64B03B66B64ACC04AC474934B99666D2038CA0B35BCEF52C5A5393FB9BF42F7D215
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Autodraw/onigwrap-x64.dll
- Size 593KB
- SHA256 3bd109e586f3e05cd32eb1f5a56853ba16098ca7505570850530b9cc708ff88a
- MD5 aaaaf795444771595819c5ccf400ccae
- SHA1 b6c1cf2ec9985284373f21fc14ba19cd2ac7d2e8
- SHA512 1de26de3566e8eedf0ff9c145c1cbbd9f3169bad2cbe2fc939a01517c16220d3a189f9b6a94293ad72549577ebc1972a67d94adc490030114e6819a78f0c46a9
- SSDEEP 12288:4eiwJjxVJiHqdBw+7/+rytknQVHVn2sl98IpU3AXGXG89B911ZS:tiCjxVJiKdBv7/qlq2slIWKXS
- TLSH
  T1CAD41843FE82CBA5C1AE41B4C896D3F68276EC411B118B8B2754BD277D233A55FF9218
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Autodraw/uiohook.dll
- Size 636KB
- SHA256 b191bbdbf7ad7c085383690ed392ec5bcf26282946c23aa5fd78336555a59c37
- MD5 e957f912c11c93aefde7fc5bf97d005d
- SHA1 9f8d9210e9970779476a81ffc6c76fdefc9802ab
- SHA512 5b21969ce0eba94a231944b93f1068ce48e422e830d94812ace31c60614545adc238edb852980e4299f0799e2aa2cce03f514d48e04c3113397c21c48218d2ba
- SSDEEP 12288:kbZxdPGsSV//SmGAqXwA0RTi+90zT4vc++Z6gZ87JLYNX3Jo:kPp8Vunu
- TLSH
  T12AD48E6677E81296D077C13EC5868B69FBB1BC140321B7CB01D041A9AE27FE85A3F725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12