85559d665fad0f646f9bc0daf44824821beadd58ca0046d12ec541a56f34488a

General

Target
Animations for background + search engine.rar
Size 3KB
Sample260802-162brashmh
SHA256 85559d665fad0f646f9bc0daf44824821beadd58ca0046d12ec541a56f34488a
MD5 677ef7892b80bcfb3e2073f2b93c1f5c
SHA1 972acfc047c36febb3c681ce7f6dfe115408a7f6
SHA512 3759f7e376494ad539263e7e3a86d902c8e6339c649158b63daa3c9978cdd27412d130c67285fd9d9d57f7c0d4b9003a0a602d51d000db806eb5559e72e63cdb
TLSH
T11A616CCCAF793341BF499AA1E4DF81C5698A7021A44E988FFFD38D8421909562D046E4
MD5 SHA1 SHA512 TLSH

Score

8^/10

Malware Config

Targets

- Target
  Get dependencies.bat
- Size 5KB
- SHA256 cb7c637f0b319714f2cabf7d40f378b1b579e7070d73e263d97f68cc9a511d0b
- MD5 50bc3cac5cd5bf81aae849ca6d05bdfc
- SHA1 b4260368ffef0e461cf120a87a87dcf19816a9f8
- SHA512 715d14007711092d5cfef64c842956dab48505a9ad904e35f1bc51b76f63c552f168f3002d514c72624f2a893d6196410282ec72cb9bf66c85ce002f975cdeeb
- SSDEEP 96:HzsrkWAj9BuqOyreDCoIFcO8tlOUc4SvCrHtmL:skNRBdheDC5/OOcbHu
- TLSH
  T1A9B1B7BF388672258BE3C1E7AA391A53FA0483CBDA105D8D70E0516814CA7C197FB89D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion dropper execution persistence
- Command and Scripting Interpreter: PowerShell
  Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
  execution
- Download via BitsAdmin
  dropper
- Creates new service(s)
  persistence execution
- Stops running service(s)
  defense_evasion execution
- Power Settings
  powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
  persistence
behavioral1
- Target
  Installer.bat
- Size 874B
- SHA256 81c3266475403e3e168f06beca364126a72254bb131bbb5113a8e2d5f413426a
- MD5 c14ed9eb48bb0701147fcfe1784fe6d6
- SHA1 abbf7713e0ea240e269fe17de3cfd093dfa8568a
- SHA512 645b452975b4f3e6c0baa4c7bdf0112b5010c57522edc042a8a2f7b1b2c4e0f44903a8f18d68e551647f6fa695160a015db5622b968b8937942eb79b7ee2fca1
- TLSH
  T1AF11C019AB9EA170949A85A026AD66BDE30592C74327CA951E6370CD3157BCC121F3E2
- MD5 SHA1 SHA512 TLSH
Score

6^/10

execution persistence
- Adds Run key to start application
  persistence
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral2