15d6e412dbcb709f6ce1f1cf7e49f0af01574acfe198fbc38931207779866802

General

Target
voidnet_go_agent_triage_package.zip
Size 3.6MB
Sample260802-2c2absysdv
SHA256 15d6e412dbcb709f6ce1f1cf7e49f0af01574acfe198fbc38931207779866802
MD5 f69738aa387a893579bf04c528050fe2
SHA1 becda2980234527213fb2dbb147f61711274ee25
SHA512 1a1d3f23ac59a6ed0d6f338e9371794cd3773efc4d83cf69d500cc199730abc5c0e25caf0d6f6dae3ce9636932834b2a3b492ebecba4bf97cb20b29cefb9ea57
SSDEEP 49152:dww3CrEjmXBPNA1RN5LccKxzgR57nlmNTbB9/ZdJUwv9b2EyKLl9hmVYT0Zo:r3rSA7LIxI574NTNFZvUG9O+DhCYTko
TLSH
T1CF0633D11508255FBBB9317AE3BA7414B3AF9DCA239244DF5DE3877980AD060D20F89B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  voidnet_go_agent_triage_package.zip
- Size 3.6MB
- SHA256 15d6e412dbcb709f6ce1f1cf7e49f0af01574acfe198fbc38931207779866802
- MD5 f69738aa387a893579bf04c528050fe2
- SHA1 becda2980234527213fb2dbb147f61711274ee25
- SHA512 1a1d3f23ac59a6ed0d6f338e9371794cd3773efc4d83cf69d500cc199730abc5c0e25caf0d6f6dae3ce9636932834b2a3b492ebecba4bf97cb20b29cefb9ea57
- SSDEEP 49152:dww3CrEjmXBPNA1RN5LccKxzgR57nlmNTbB9/ZdJUwv9b2EyKLl9hmVYT0Zo:r3rSA7LIxI574NTNFZvUG9O+DhCYTko
- TLSH
  T1CF0633D11508255FBBB9317AE3BA7414B3AF9DCA239244DF5DE3877980AD060D20F89B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  README_HASHES.txt
- Size 828B
- SHA256 3813e5a65ad2128c5313de8cd26035b067ab20af475e13155e600cde4d56e8e0
- MD5 e8403324122b95584d31dade41b04d09
- SHA1 791526fea488da7a28ffb85bfd0c05d5d2bde2c4
- SHA512 55b3c2c78654872ed5809183296b1b3717cf819b0126858e6473d236e83661148bcc2aada8909337b04d1fdcc5643a52c97d1fb5a4ba43b72dff745ae65b5e98
- TLSH
  T19D01C088753F600477FC134831BB2DA33113D3652B9488BE6928B9650F5133D4E26449
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral2
- Target
  test.xml
- Size 4.2MB
- SHA256 265a5087e0909b8bb2fe6c4d6a210f25e49f22f4648cf0e20460b351bd4346c0
- MD5 0b02861b92337989c5f36191dac5848c
- SHA1 17cfafc520fc16678944f9316dc0542b108f1abc
- SHA512 96b4559a7bb214a9b82c98b1f3b1e44afb9d2078d7a69db9db21fdff93ae503360e3168fd920a0edb6da94f48621802c0d11660655752d1b59e912527db774b0
- SSDEEP 49152:vQZpjv5e9c5BS2K8ABIRl1JbYyov8wVDGTUOuqp1FX8:n
- TLSH
  T18D169E734243BDFD3FAD3D41A0413E054C6C7A0B6664C299BF8871BA73A91A89D6CD78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  voidnet_go_agent_7fae417f.exe
- Size 3.1MB
- SHA256 7fae417f9d7d74b33f8f0f62ad6cc508de60ff83a8a42bcd9ad7c38e4db507ec
- MD5 896816a12988cd4268c1b1a63ce1073f
- SHA1 1e2678ce2169231a3b0a1124efc9e55a739a8ed5
- SHA512 256ff1b87e13e8e839c4ef672326869d893b3ec677ae94e4b66c4780a3b423f4bc115b1210d7115e65b80c2bcc21cd7d09cd50d9a8df255602b62b76c128217c
- SSDEEP 49152:NGZGa9q5I+U9ElC99P3G64jV1jSeGue5/Js0hIZzCzkYU3YNeb9CpPKeXcTfQIEx:NGHg1i5rEHiYU
- TLSH
  T19DE59C037CA109E9C0A9973289A71292B774BC190F3667DB2E50B7782F737E18D36794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral4
- Target
  x.ps1
- Size 1KB
- SHA256 6efd6e187dbbef4d7f9e3392a5023db7125c8922e057b2ff95ad7f066897e3f5
- MD5 4fb85d9336d58df68912c442baf1d6e1
- SHA1 e656bc4c96b3e30fb9abd01b9793d69be50f3a85
- SHA512 9a64e35520a7abbaa855b23f59b5452643dbce4a2fdf2e1b84d678fb6f078a0166daf0268eb495b831e6542feae2c951b7bcbf2f9fe9acce8f4ddb5d79e748bb
- TLSH
  T18231B51A251E10B4E2D04AF0DCDEBB4EF729C21CC0514864F05F80C6F5209E95E6D799
- MD5 SHA1 SHA512 TLSH
Score

8^/10

dropper execution
- Download via BitsAdmin
  dropper
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral5