0c8f565247adb4fcf5be16a263e452979c473c172f4e26fe31cc818bbe70297b

Sharing

Copy URL Twitter E-mail

General

Target
slinky (1) (1).rar
Size 555KB
Sample260801-sdzy8a1zdz
SHA256 0c8f565247adb4fcf5be16a263e452979c473c172f4e26fe31cc818bbe70297b
MD5 53745992a8d1d4213f5fb891ef08be79
SHA1 734805584786ad5ba2d5157f5e86b782e327ec63
SHA512 140d36c2399ae947ce954bc2dc0bbd58db3fc8d0afe88ee8388f1ec90958d5160a22aebff33f7ca74b7c1781ff102dadb6264ce5691e7d11d27a0c51cedc725c
SSDEEP 12288:2PQ4Ev4UVD5rwjeOlcCU9Pwi6MEoWEOl1RByfw2sU8bfs98I31Ts7oV:jBJ5rWelj9YiDnOzRw17BTs4
TLSH
T1E5C423B092BFEFD0F87B8B89EE1B86811A15E7BF026460E05558FACDD8913F349B5114
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  slinky (1) (1).rar
- Size 555KB
- SHA256 0c8f565247adb4fcf5be16a263e452979c473c172f4e26fe31cc818bbe70297b
- MD5 53745992a8d1d4213f5fb891ef08be79
- SHA1 734805584786ad5ba2d5157f5e86b782e327ec63
- SHA512 140d36c2399ae947ce954bc2dc0bbd58db3fc8d0afe88ee8388f1ec90958d5160a22aebff33f7ca74b7c1781ff102dadb6264ce5691e7d11d27a0c51cedc725c
- SSDEEP 12288:2PQ4Ev4UVD5rwjeOlcCU9Pwi6MEoWEOl1RByfw2sU8bfs98I31Ts7oV:jBJ5rWelj9YiDnOzRw17BTs4
- TLSH
  T1E5C423B092BFEFD0F87B8B89EE1B86811A15E7BF026460E05558FACDD8913F349B5114
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  COPYRIGHT
- Size 3KB
- SHA256 6af2199047ce21b763edb2d0c494a113a2c24371a545c17221f7c8ad66e605ff
- MD5 6aa4d2c892b1a12df6ecbd8408a10a73
- SHA1 370943ea0052b05066e5ac4a90c61fe565f43e0b
- SHA512 7f33f0237ee736daf5bf7e449aa3e9013d41a098db6fd06bd88c3e3ed58af831df4acafa401f705c36edb25293f5cc7834284de0237e3c5392ab4f7c994c93f5
- TLSH
  T1CB6173ABF35417A20AD302B7750558ECEF2B99FCB37904A63E5E805C2256C98533F326
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  jmc.txt
- Size 195B
- SHA256 63e677e13fbb51b6076e3a3f3a020907d65b4ce282a443dcb3fc554129409b29
- MD5 b211638519c96f73a94831679ba9072b
- SHA1 7d10fd57df03a2665bacee5d1ceb26becc06c700
- SHA512 bdd284ff255e715e1c8e95702519c3a94d4606839f8e1bcb36f238b82f2fdf044f4a01f61f02c0f90ebe2163f2dac8b288079591adf1b877ca378f2e349ef39a
- TLSH
  T1EFD0228F8A88A172140182852826B342CF3A7051200442824C6C44A7206AE7DE32742C
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral5 behavioral6
- Target
  jvisualvm.txt
- Size 180B
- SHA256 5d3f49e0fdaa05ee9e81ec111b39f5e7090c8479572658ecde40282c66096b0b
- MD5 67b46f78cd25d67a9cafeb6a99c535ed
- SHA1 8a218eac05367583b1508cc35b16a73868a8aeb8
- SHA512 b3ca2a44aa7dfcdaa617e826e1f0472db01786df354b2e0a9a7b9f9ac933fcbaaa598d7975a23135d1ebaa1ed9a205d7f0bd7d46c71fb9c35b8cddd39b126287
- TLSH
  T1B0C080CFC10C5572106547C0440673C1DB267245175453CD4C6E0157D046A99D35F96D
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral7 behavioral8
- Target
  sqare.exe
- Size 1.1MB
- SHA256 3b82622eae8d7377ffb1878868413cfaf25b1e53f8ee5c907eb6539b2bf0aa4a
- MD5 92604cfbdfb5e1f60eed0149729c2a98
- SHA1 d3d900d3f8b1b9bf7f947f0d8f2f98b38ebc7211
- SHA512 dd74ee4ba0078a74da4e1eaf2b3fd39f948c34fa68c7f0662f71bdddce7f873f44a10f987e9dce35e5ebe4eb67d08199775be6a5f6b5b6fdc9436fbc1627ad50
- SSDEEP 24576:NNo8PUrjpgt9TQrTRIbM68YZwmSJmKh3vjhkChq:NNot3pgt9srKo68YZwnmKVjht
- TLSH
  T1A7457C56BA66D0FCC46EC0B5C75A5673BF21B84A0B317AEB41D056383E66EE02B3D704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Reads user/profile data of web browsers

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10