ab5459337e5d228371dbd5555b5b8eadc261f6f5e483cc47f77a76ddb2be052b

General

Target
negro.rar
Size 52KB
Sample260802-c8631scj2v
SHA256 ab5459337e5d228371dbd5555b5b8eadc261f6f5e483cc47f77a76ddb2be052b
MD5 e4f28ce267ce458a103e0456b2ab1036
SHA1 a3ab9ee080329229e33893ba2253c7d2e9179477
SHA512 e55641965ab7fd5b31eca3cf28348cc6ef96c1cd8f594ebc197648826365bbc76350bfd634a397120aec60573a38a89aed023f399b4677f94abf31027d3aea42
SSDEEP 768:uLk3Ev915WVZAlKgG2s23YFYo69rdyun4p7IzRrJoZX5JfWC:uL9vv5fY2s2YFYoBun41IzlJWbuC
TLSH
T1AC3302B160190C91ECDBE7498785D2EABFEA4907D4DB13599BF02C8D68E313E47B0B60
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution persistence

Malware Config

Targets

- Target
  negro/evga_kdrv.sys
- Size 38KB
- SHA256 33da2ce240b4559cc6e847d56c5fbeaa3d644ec160841920ea0a098dcee28d0e
- MD5 8dc9504fb5eda1a354971bacffe61ccc
- SHA1 da66b66dca5ea8689db903ec23e98f2c881de6f8
- SHA512 e14750029d50b55f0077ff171cf9882bc8d4a65f4642640cc49dcb6cf168c20b6af3a1d50ca0b3e6b1eff218b26cf64ac92f448827ea76616259b2482c47ad1c
- SSDEEP 768:5tYCFfVj/gom4cTTOiIcm03AiljoyGfhPPKgDz3aCIB:53j4M03myyRNFIB
- TLSH
  T1E4037C52DBE84882D9B3DA3052F6D627BD34B2835620E7DF012DC5950F62BC5AF2E325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  negro/kokoro.sys
- Size 5KB
- SHA256 a986abaa4725a518960101410d77ba1b56e3ec4e51d7ff4bce76e98d2b8c430e
- MD5 325ed9a0320f07bac4956ef23a050da8
- SHA1 066772b9393d893ddfb01b93c4792cf02c5bd597
- SHA512 27e4bea56386353d9aab4e1dafa279b88482baf018cd84e25a1c22133b0c286b3e71b563072ce05e0c1c630cf948b7f95e17bf9782b6a03a73900c4e428b40c3
- SSDEEP 48:aorC+NvowSAdQbUdsDraNDyVyqEhIhLATAoy5R1h6:LDXd0ksD+NDyVbf5D
- TLSH
  T1BEC13150753284E3E11A80BDC9864958B3B9F05027515BDFD84861654A46FDEBE39E83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  negro/notorious.exe
- Size 75KB
- SHA256 6fa7946a88482a4c2d7f35fe04d4ed401a658f280373e6791f934e00040c783f
- MD5 60e271ea13f7288a1105250bd52142e1
- SHA1 cac4249509cd79927505ff358f19a66a58f206a3
- SHA512 c745529d9b3fbd5e7219314964a7cc3763cf009749c6adb0aa0100ced1a62e1996cf9328d39bc0315a0eb58062fd7f330bd2b063d6a14e3bda6088cd2d044dd0
- SSDEEP 1536:NUwDrFKri0DnFAv9oBe5b9d3pbUT1da6dXf:vrsrdDnk9fnK1dNdX
- TLSH
  T15A731916DA56106ED26ACAF8CA534C01DF73BC8717A5B7CF63801CD60E66AD45F3E602
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

persistence
- Sets service image path in registry
  This determines the executable launched when a service starts. It can be used to establish persistence.
  persistence
behavioral4 behavioral5