f6d7f3d35845cf4bfbd70e0a4a71cec1ac82ca3ca696ec8bf22ecffdf130f5ed

Sharing

Copy URL Twitter E-mail

General

Target
IDIOT.EXE_20260720.zip
Size 370.3MB
Sample260801-mswx8ashla
SHA256 f6d7f3d35845cf4bfbd70e0a4a71cec1ac82ca3ca696ec8bf22ecffdf130f5ed
MD5 4668cacca2e17ac78262bbbfc9feec0c
SHA1 1fce2f5760949a6f4d092d2fee10c17f9bee4a90
SHA512 566af58b155a9ac6b677efcb3c3e87291a9d05ff463005d54ec601164299df9a1ad8b41e256fb6b02a626cf91fcd2b2b52597cd0f9bf99fb52fe4188ca68a1a7
SSDEEP 6291456:Qw7/waiLqkaTCZ6tCmI0Cxkw76PqzlFewsAE5sozOs12MNcAyuQDkfnGOiRIdv8d:+aCqkaTCZSu76osAE5zzOskMa9HkOOj4
TLSH
T1840933B830EF4A72F776BE3F514763916821533C65BC6FA8331062A2A5026961177FCB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  VC_redist.x64.exe
- Size 17.9MB
- SHA256 843068991daaa1f73ad9f6239bce4d0f6a07a51f18c37ea2a867e9beca71295c
- MD5 8da7373f3ec287fe1c3ad72a7b2922f0
- SHA1 46adcdfbe9aebe767657b7a802cc366f827ced77
- SHA512 c42c82cfd5eaa2165b600f6109cb14ff4308cdf4cff656a1375b4a933f1630bfe54c99c4d0fb9ed3bea4dc4e4fdaa3db8e7c58356cca07c2954f4c297757d62d
- SSDEEP 393216:rCpQ/hbBWGW1tkWSz61gUM0SOm53TgypRvlxoMtBpMw4OrW:rCpQpbQ1tBj1gR0SP53tRvlLpM2K
- TLSH
  T133173332A4742132F6F16437F968F1307E3CA72863D09D99D3C8AD99396488267F725B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

adware discovery persistence ransomware spyware
- Adds Run key to start application
  persistence
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory
behavioral1
- Target
  android_studio/D3D12/D3D12Core.dll
- Size 4.5MB
- SHA256 625bd40005b1c3708695d5256ecf230d278e6b8edba5a88af70f3d91324f3052
- MD5 8bed03240b764906c937c0d6ccd560ac
- SHA1 2a38a4d7116b9d067e9d24d7da2646e2fc9f61c6
- SHA512 6fce3c735a101794634c53fd622be20e69e75c68ba216d0caa0fb48aadf97ed55ceb6ef205a4ea22f405bf5e663638add2f489df720c206739920093479863a7
- SSDEEP 49152:+h38HT1tnrx7KGN6McyBTwbreXHYTNeZQROL+qgGVO9EflU7slMWr+IGrh4TeeYo:IMBxrfwNFrfau5e/H
- TLSH
  T1B1266C07BBA840E8D4A6C079CA6B461FE7B278654370E7CB169087995F73BE1193F324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  android_studio/LightweightViewer.exe
- Size 212KB
- SHA256 433487d0a135d5cf066bad35f4a92b45fe2549c2469a882dc9e557c1e1fe00c5
- MD5 93c13212f78aaabb52cf3e478cd2366b
- SHA1 ff8197c83bb50405792d3a29fcfd8dde62447a55
- SHA512 511d262f19cf4326275652353d52762c990dfd9bd0964fc8fadfb2dda7fe901422712bb609fb0d27cf0c4bb29195e203d688e83730a16faa4d57fba6c7cdad70
- SSDEEP 1536:lxEaFoBhPRO45Q7BcfPqiv1KLaeCzuRemga9HXmIrjws+na5WC:lOaeTOeQ+3qiv1KLFA6XinjC
- TLSH
  T190241717AAEC3CDAC13992B8B77783C1D72EEC8547A1D28F52D045918A3E5977A363C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  android_studio/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll
- Size 596KB
- SHA256 9af007ae922ceff72ab325ab1f0e007b022768647164e1b7a843f758c7ce3d76
- MD5 0c406e34adf29010fb8029d75294f2fd
- SHA1 8f8eeb0575c505bcacaeabfaa59b472a8f40d51d
- SHA512 865dc281f0ffcec99a3727687dc2435d6d7b997d780e9e5efd575b1710a997b15e659d0d2d298f9df5638cba7ba2403609494fcf52617aba17016ba7fd0d8dbb
- SSDEEP 12288:kOmNAmdeVH9Mwe9Ek/7jY4hOTBPyt9Ga:knAmdcMj9Ek/7jYSOT8v
- TLSH
  T123D47C56B7A402B9E577D138C6834B5AEAB27811572093CF03A897AB1F137E11B7F360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  android_studio/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll
- Size 7.5MB
- SHA256 86a5a4de6bcd74a637d63c96d822dc989d4ffaed6ef1c15c0e6e1f528ae6708f
- MD5 5b72826511cd04dd9fe787cfbe2d76a9
- SHA1 3d49cbf8b8741376cac41819bb5fad7ed63de924
- SHA512 eca8906c22f7c10c0d6dafd8566c62f934a206a665044a2501bfdda6caff741a6e9b440e25c4f9066f6979d146b1e3d0670d818d82e1c5d76df9c5765be22622
- SSDEEP 98304:r1JKQuu+DfvOtBQkSMDu0moP74cJGOlwo:r1JKQurDnOtykNBP7vJGOlw
- TLSH
  T183767C5E92660068C8ABC23DCB676B73D375700443306EDB46905F6AAF23AE5537E7C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  android_studio/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  android_studio/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  android_studio/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  android_studio/UnityCrashHandler64.exe
- Size 1.5MB
- SHA256 043996479f30c535c580c4286d517400ce8408ec9862fc86baced42c78c9d9c1
- MD5 d1a33b5a7ba02be0dc842d733b98acf8
- SHA1 91fb2f48daf351c70970264f14aeca94c38dd9b7
- SHA512 c79ced0a4a540452b94acf586d7184e1ba90d069e05fbf2724d216eb2a586ebdae013e19fc580d9d2f4b00c545b3a3ae249eb6efb9a1a8e53c56e0b9ea2e3239
- SSDEEP 12288:J/NwJLQR7EHx+MKliKXp1noJGu3cwLWAZ1AETT6XvhixIZYtqxz/yasN9tC/XEK8:OLVxx+PXpeLW61nfseXoxz/y/N9w/X/8
- TLSH
  T1E07549292D641DDCD426843ECB838A8EE2B1BD5A1F714BD717A17BA72E320D01E7B351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  android_studio/UnityPlayer.dll
- Size 34.2MB
- SHA256 a2022611884470ddab23927a3eb7bbaef3924c18972d30ba7b5330a8fd25bcc4
- MD5 ba608c76bd4496bdbcb212fb05902dfa
- SHA1 22b2af035723677b5504436d4bb24df396d66c09
- SHA512 0627a97236e9f375c0cbfb0d9df67587800e35ed3163d0c522557f170e4b4cca596cc781f40070c4eb97e13223533273a8a86fdd74813cb5d075c161d03e24d2
- SSDEEP 393216:NiZ2SGCdbTcHS1gbf4kYA5zOvX8xq2Z/r/IZYjgE6k09uzWvmu:N6If1iC/rIE6Bvmu
- TLSH
  T11D77AE56A2B841D8D47BC078D65BA91BFBB13449073096DB52E04AA86F33FF02A7F750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  android_studio/Watchdog.exe
- Size 8KB
- SHA256 52444c8251441632753e054ba6b9206d6a5f3fa67e20c5cadeef68bddc06c4fc
- MD5 f7b8e58559e7586013c1195cb8847cdf
- SHA1 1e88586fa3f447ef15b1dfcbad87e8a15d5510a7
- SHA512 4e83be6c710b737edbcc9874174808fb80bf8c1c2f57ee32abe0c57dbf0b0468f60303d462c66e300bf38f2ad3fe0066d7e63e67f6ee6aed364cfad05c48665d
- SSDEEP 192:3zpfycBZanBAKFwEiO1vU/2gw0spN8AELr:jpfycwBAKF5iO18+1Zp2hL
- TLSH
  T196F1F809A3DD8932DCBE0B3758B71B2013B8B3025DAB9F4E36D8D55E1E237801195BA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  android_studio/android-studio-quail1-windows.exe
- Size 652KB
- SHA256 e8f505dc6454797fdc52cf8935f4e9797799af3561f7b9983d5f3225bb8c9a6c
- MD5 b0c4d1e76a62c292e85f155a1e51c7e8
- SHA1 fdce7adb9f13ff79803503d2d1ad5e601fff00cb
- SHA512 50773d0f426ef77912f1c965f79b3ddb6bcc34bc13b1348fda99263f21401626870247cc8b510e59ef5ee2c8e2d1af55e92256179bbe568de45fc231d7aa72d5
- SSDEEP 3072:HwazAjvuMeUwZPRyYzK4mHcUIcLsk3sRSjRoP:QaMjvuUwZpzUhLsAYSjRo
- TLSH
  T1F0E46F86A150C8B8D8660A3DC07215F48E27AC7BDA5CD75BDAE27D213EB31C13D2693D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral12
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/Assembly-CSharp.dll
- Size 87KB
- SHA256 a2359c736dc1e65787d671c0336d1ade6abec85f3964ade2c8fb61d6ef03894f
- MD5 22161ab5d0e55fa6f284b715a1dbe556
- SHA1 cddffd1058abb2fca8afe9b6d7d6ffe4366b505c
- SHA512 4eec2be9427c7aa00710c11757d39c64866be6f74b730c61952d6a02c7ad56fc6c1d892bf48be791428b33404fe69777fc2ee55a896065c90bfc95e5b16bfe8f
- SSDEEP 1536:b2R1Rir9bNCODoh8DeUxAZxnb0SQwKbV+b3oDq4sD9pga7iD21ixZllqp9ObUeqy:b1DDxAQf/xvUy
- TLSH
  T1C593276037EC8636E1FF9BBB617606050375BE036632E78E5989A4DE09337D04A117BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/Mono.Security.dll
- Size 235KB
- SHA256 618009319dbf3ae374f9b5dc0d0522e1e1bdd172200c120a5471747b7991a584
- MD5 7def7ed5d6858fc30d186418769b3721
- SHA1 8d69bfbef1a2d90cc5745409d7a817ca6f72421d
- SHA512 e4327d25e1f6f5026c4d023639044c2416140128dcfa656ebf25bfc54d58a16bedb54eb86f11f975a121bbbf827f5782d2d99bf2650ff63195032d5a848f8937
- SSDEEP 6144:rUjTQ70cnf8MoVRxS9iJdBF119RJXG2yW+Q:qEiH119RJX53
- TLSH
  T12F344A1863F9531AF6EE8779D4B15019C3F4F50BB9AAEB4E5C8282AD1C027918C41BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.ComponentModel.Composition.dll
- Size 251KB
- SHA256 0c3e81771a5fe9657bea02887996de72606c3cb247e4fbe413f743f40e2af244
- MD5 40f620a74d28e56f8649a6d9bb25610a
- SHA1 300d4092035c43e0f43c2548bc58da93c0ba54f6
- SHA512 35df297a5c98a7f5e77c9b8eadeb55ad94e55c5e7a574889d6b9b8f86a4b4626d8d7ceb460bb9847e92b1535e6dfbeb65df443a0e0ab6e40b50dbffcda10a0d3
- SSDEEP 6144:tkwkYfxuS0ZNORl1X1XYZGFU+22kUgUlAwU5e81hXJXee4jsURlXXMAX8O33iEP3:tkwkYfx8ZNCxL
- TLSH
  T10A44281533FD0366EAEF0F78B5B480148BBAFA06B95AE71C2C8951FE091379499117B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.Configuration.dll
- Size 122KB
- SHA256 04907729e87a101e62d3a5c93cfa16688bee745d05440d6daa0c541964be27ab
- MD5 66df027efa647f9ee850c5c6906fac3a
- SHA1 e6c852bcf82cd3db7d6427dc84ff07d4b57f6fba
- SHA512 23560090376e4be8fff6d36e09133298c8a0d642b8665e68337aa7414f5e08541f823f44132b5d8a15a18bf148862f6296b8b8597e4b0e5fe935c7234311289e
- SSDEEP 3072:7GHTFkizuGCOE/htnREcacWown5WJGL0MIe4gNe:7GHT5+H/33vJm
- TLSH
  T125C3F92563EC872BE2EE177EF8B515110FF1FA0AA436D74C5D89B0ED1827B804662367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.Core.dll
- Size 1.1MB
- SHA256 a5e7d47313da0eca0b92a901a30498f5e970916faf63b70b74dd62b09760ed72
- MD5 d9b55597f3cd95e489c7e78648bfc630
- SHA1 0f77396d5112c253197edb6f768da159d8ce7199
- SHA512 e334cf4b537eba5bc70187344f6f6c86a617002d05f163defc473f4af9e44259f667562149e0e1f36657a549974e9ca37a16536b2151606958175ab7b8c2be4f
- SSDEEP 12288:+WK8Xi19FV57751umv0RX15PgLdfJ18VjjvM44hvetIX6e+LxHzR:0l/umv0Z15PyC9vMNV1+LF
- TLSH
  T120354C01B3EC9B27D5FF7776A4B442A007B6FC46AB3BD78F104891A95D56B008D887A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.Data.DataSetExtensions.dll
- Size 29KB
- SHA256 498f14c37d83f946a47a79e01de777e62f269ee9c3820f2026b59ab1c1b9222f
- MD5 8c2c067820f8a65bc2ce9083d67c85a7
- SHA1 e3fd15a78ccf82a64dce5be2504751b1301e3bbf
- SHA512 776c193a2b103262255ec2a8e875fe8729bb915671ce60c8e32177ed94593730c0467a22701c6a5f6ab3051504cfaa0d2b9abea0068abeb70757cbfd3df99909
- SSDEEP 384:BEAjm7aELetOdc8l4LodMqokNv2Y2rsFKOlIcMYOxxsnRbli3ESmMadMkrVr5UhH:BcZC8Ll4LiMXkv2Y2Mcdrsj5Q
- TLSH
  T1BCD2C915D3EC4311E3B727B57CF951868AB2B913AD35D79D288E23CE18127804D62B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.Data.dll
- Size 2.0MB
- SHA256 427478545ce66b632414ca838088ea073f250ed16b21c70005f48cb571350e47
- MD5 2d303cc63c1eb12b0812489917224a26
- SHA1 bc68b585cd7cafa64000a9a1a2eece9c6ad95e44
- SHA512 e7601709ff16578a817c3f93a383df13a888e897514524af1002fac0cf750b1e4fc93b2f11905aa07c3d3681597b86a3ca24a344dceada644024b42da322624e
- SSDEEP 24576:iTy8NQuznGO4TiWB1V0Nt8OZUuhHwjpj5zuctRoOB4MbQ4cggyT:Yykz74VHV0MOZUsgoOB4Mbi
- TLSH
  T1A9A5185077FC5A16E5FF2B31A871101567FAFC16EB72D38E6508A17E1C62B508CA23A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.Drawing.dll
- Size 478KB
- SHA256 e182e688223acedb8135227e8fbff17d5ed22f47f81141aa9cb96ef1ab9926fc
- MD5 a36cf6a05a337efcaf1c2e331dd108a6
- SHA1 69a93e6d652e4eb76ac9d7b2accd48f98db3fc80
- SHA512 5a3fabbae442beadb72c8d435b59cdf76b0827a4bf945eb7a504f1d95155625913a306e730a742168a4d73963da15c3dea09ff6f97ba4e1ad7cb48500780b925
- SSDEEP 6144:WHutOmSUsXjt/z5B4CqvhOgEGKPx+Jg/NY7c/nENZ4k7cheeEh:WOtOmVsXjt/PicgEN/MGq4k
- TLSH
  T152A44A1077B4592BD5EF2B38E0B24968A631FC076B26E75F4681B62D1CF2B809D417E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.EnterpriseServices.dll
- Size 43KB
- SHA256 84af394ad863e31407eb2b9555ca7e96a9f1966630f5d7f0eec54f0011f6babc
- MD5 7a2e074d4014bb474d80f5a7da025b35
- SHA1 85ea5a84dffafa4ff7752e9e9c2bd940d8ba2b14
- SHA512 b5ec6e322b0457911aae5b79ff7705753898dd5ef88fc70193abddf72b1522c0271b07d91429e3a37c42af40d61adaf04a4c945a519db0a723ece3fe3daeb28d
- SSDEEP 768:WT7LlB8tFJutlA/kUTr8yI32JVmugdQfwGHZgm5S:I7BBk8tlA/kVy7JVmugufwGHZgm5S
- TLSH
  T17C13D51043D48B7ACAFB4BBAFCB342264676BB026F37D3EF2605D2994E4374C4412666
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.IO.Compression.FileSystem.dll
- Size 18KB
- SHA256 2730d2a27f9362259a406ea14727e5f0a71bc21a6825be94f8623a84bd9f9c79
- MD5 942bdd2d2c33a816701aae86ec82c8a3
- SHA1 9b448861ff71c5fed9a2bf6720bfd6f601dda3d8
- SHA512 ca38f875392035fcdaf15f06eeb118b05d34f1595c481161706ce26cdc60150fa798e602d59456c49267c033c42859c006898d8373af48900b45736fc0659845
- SSDEEP 384:/PQA4DgKGRwrtLsWZRbli3ESmMadM1vz2a:/oA4D/J8q
- TLSH
  T15482602493E44315F6FB4BB4ACF7428686727D13AE36C79D298A135E0C227884D63B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.IO.Compression.dll
- Size 112KB
- SHA256 80421a67b4162a5f1b4aad6a8327c6d1fb4b04dedd39dae14a770b812594fae2
- MD5 7730f4f7ef9ea3a55d57d1358eb27e46
- SHA1 8b2d237010dd154174a03d5ccf650b4f48910a2f
- SHA512 18fed3d00271c0664854de9576d27b897f0abff80969962c3bf8754a259f56640c5cf4a8d89c29238339de7ab488bd17d049963550b30682805ae9f9a68ed0f5
- SSDEEP 3072:0/J3w/nNoiAvsJ0c4gY4gbcRiuT/+HuVB:0x3wPOffq
- TLSH
  T1EDB3391863F80757F2FB6BB4A87506510B72BD43AA3ED78D394459EE1C62B808CA1773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.IO.Hashing.dll
- Size 49KB
- SHA256 ac7ac3e83805b0b621c48b90543dc733c9a89106835278618357d6187e3da74e
- MD5 7964e7ba1ebab8f4ff1e4d26c0d9b83e
- SHA1 1d080de9c4471a931218c8ce345d72693b01b862
- SHA512 242799126b9d54774a54458fed5b1486324e08b53d2b23bd9a428a7a8c84f9b6213f53b60c2d8e81a16b75aceddecbd579495571d4c836d6da86d5a30319d38a
- SSDEEP 768:O4OmDRTgI8Px8K6efD7SBJxq08CY2KCu2F3xppbOJ5tj/1igFdPBWS18R9zN:dNBfq0ZKCRBppwR/1dPBWXzN
- TLSH
  T18F337D0673988337CAAE49396075A5164F75D3A73602EB5974C994752D033CD8A323FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.Memory.dll
- Size 4KB
- SHA256 c4f030a2cba7da7cdcf493257c24560e203d355904aee490d645a935842f834a
- MD5 dc68c8815bb99c40707580880fe08055
- SHA1 b95f369bddfa1064c82caab82579373e5f2d93c8
- SHA512 8c1d6c01d5b01e48ca99ab92805ad25324b3b89105de923060b3210eacc7cb7c361c2dcc86a991872329de56e37daec608c58f32a273028000162703ceff2574
- SSDEEP 48:6B+ltk5L4mlzfsyG2RMT+OMfpOU7xeepZ44SasnzeFk5IhefCTv7v:DtMsmlbM+OSv3oeF401
- TLSH
  T14E916510ABFC4336FDA78BB26DB786810AF57EA0ED7A9F0D09851019AC336645631732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.Net.Http.dll
- Size 120KB
- SHA256 3cd3ac19050d5031c13644cd87958ad8029b79ce16c7747faf3d0542e7fb45a3
- MD5 47a5c20237cfc6622daf39855c65bea8
- SHA1 ffbb8227684f45b174cf496c6bb565873877a990
- SHA512 81153de356da3b74f0265ceeaf212ed901617bfe0e5b23667446ee0d5387cf1b99f1b45fd51d954fb1facb1d680c0f0605da8434ab6deebe0d852c0e6ebbd2a1
- SSDEEP 3072:kaL12qTuf3JSsjMP+P9YPU6tLD7SZf/rD4miR9eKRN:oV3zK+l0+kN1R
- TLSH
  T192C33B5497AC8B3DDB9F6A79F03802A9E7B2D6073213EB5E5908F8F814537C0D9116A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.Numerics.dll
- Size 116KB
- SHA256 ac9224b32355a09f09b706cab568384f64cf8116825c5911cef1e13221c61c38
- MD5 55aed8deec2fbc93cb8b8c221562a60b
- SHA1 7eaf7e395b14b349666e1de617a8b3fb9bec28ee
- SHA512 06972a568c051ec7c70f8558b15021e86fd09a372a5d19b62deb692c7cfb6323d6f5931ccd18a21908ace0f4250c374524fc49ec180c12b5e21ea8c825d2f676
- SSDEEP 3072:mMfI6LW44qVSJab8CbEJCuZzmLw5351p1bxO:pbduZycxHx
- TLSH
  T120C3F76C9FAC8A57CBFE09FCD8765D0AF770B4125723E3EA184845350893B57A886387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.Runtime.CompilerServices.Unsafe.dll
- Size 17KB
- SHA256 01748200f2400c742aa689f1f5101bd6298efdfd92c00c18f4fa473847235ba9
- MD5 93ae20e877512f420abb5b2d8ebe1446
- SHA1 802bce64836f3efd2f74ebd0e767ce341cb021a8
- SHA512 2c8b7cdad056d03b51356ad3361b431600c8674e49a182274fdc481ba817042e7a3be85e6a23c7f2052561f22c81e91f33f992a31c5e48e1e31029132f3efbe1
- SSDEEP 192:6fwP+RIb2m0XysErFbbfVrx9lWB2WhWOL8/pCuPHnhWgN7aYWHkW/5qnajOBQ84:0dyb2mg8bbr9lWB2W9/uPHRN7UFhlsQt
- TLSH
  T1C08249198BD84617FC237F34467CE506FE3CA3966813A32B2545F27A1CD73C66A21A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.Runtime.Serialization.dll
- Size 912KB
- SHA256 1152ef687dbe39e0ccb6b9a68f6501004415a729072df29abab3bc7c66840217
- MD5 9a5e07ec995afe6a8eee09b5cab4dce4
- SHA1 b8752977c3beac2bf542d3cab43a4129b5d9166c
- SHA512 dd056df3e2328e061bd158d7c04c99ef50561a25ce9d5de3819904bf320a0e545ed7a7e74da4ab42ec1fe7126850b5792259552751b0918f81b7da3bed606c3e
- SSDEEP 12288:zh+26AYt1HuyRsfrVEiqvpb3HfBtvRAvLywvKLLP:1G7u46rVf05jAvLywvKLLP
- TLSH
  T16D1519107BEC961AE1FF7B75A875056407B5FC2AE9B6DB4E0500D52E2CA2F508E903B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.Runtime.dll
- Size 12KB
- SHA256 e0a7334b7ba419aaab6bd3bb6992d693e689341a9178172c9bf99c2aa6a085bd
- MD5 77d74adcdea84d53a1fbe89e79737c1e
- SHA1 de72b6101ef0315d0f2c9934bf63ec7512dfceb5
- SHA512 39d2531540446b3d86924916e4ecfb207bbbbb06c2e94435182ec3529e0c63f17ca0cf8c9058e1c40f2bacd0df38df4c69189baa621c3d9eaf576859bdcb5bbd
- SSDEEP 192:ZdVy1T7HyKkx2LZtMW/rW6g/9xw+JwzecV:py1TeKkxuZtMWC6g/HX2LV
- TLSH
  T17A425173FE84D3F3CC9B47B29CB361D602F376D8087B597A10058A46785A53B4632BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.Security.dll
- Size 312KB
- SHA256 2101a4dd4475285f96b1ac3ba1715a52aa8067690709e675cc49a9eb8ed901a4
- MD5 b35b07db016927b0e9668d91be1d92f3
- SHA1 f6c6671da4dd29133aaad37ca5a015912ef88133
- SHA512 90857ea3acdbb5b16a2c677baf526c2442e7be8d9443ac263b8f30f4ac4fe54e99f1454f1f2c7ad6499df2428464f49efc67dcca6df191f6a769be349cf9ac3f
- SSDEEP 6144:uNr3/s+xs4Lp7kUMkcdVBY+mUKW492F0GeEe3F93LzJuEtd8bO5ZM:C3D7kD3MU6AFsR
- TLSH
  T1D86438197BF8471AF6FF6738D8B101044AB6FA17E97ADB4C8D8091AC1862F419950F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.ServiceModel.Internals.dll
- Size 210KB
- SHA256 888ec94a59c127854871b76afa49fdcefdf723c0f0b6fd78e87f73a8495b63b5
- MD5 075bc23dc1ab53ef3634718816dfdca2
- SHA1 b7f777d679b6471cb7d87ae5c7555dda72b553fb
- SHA512 cbf71a00ca3b96b097a9bf47e07b8b93e9494a975891c546c767b0c379ef32a787c53778df0b311a0c2c460f7ccf4570af1514030d48b5d95bcb198aedaf692e
- SSDEEP 3072:tFKLhN1rwHw3iyOC/s3IT+btv3ygtAomaAlgFzf/jVk9Jk2jKZ+hNVtUXEamhDZ:P27OC/s3ICBvjAomaASzC9Jk2VD
- TLSH
  T183245A14A3CC0B26F6FF4B76FCB4689146B6F502E4AAE74D7D8061794833B90C651BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Adds Run key to start application

Contacts third-party web service commonly abused for C2

Enumerates connected drives

Checks computer location settings

Drops file in System32 directory

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32