2d4c6a43d7ea17e3b0700072aa82e837b284100ca3ef6616a47e06225015df44

General

Target
Release.zip
Size 54KB
Sample260802-c8ptqsbr81
SHA256 2d4c6a43d7ea17e3b0700072aa82e837b284100ca3ef6616a47e06225015df44
MD5 0d16be6ce1166cc5d31e12657440db87
SHA1 d9af3a1b3927ca399f44cf3862bce1d250f2b138
SHA512 b7a216f1779687119ebe6e0374fef0df2eafe69f954ecdc46f6962a796cef56df3941224815e0dc45fe32991e505bc816551f30d18c2f56d5c7bfff208630363
SSDEEP 768:VQJwHJWQogirv47tERAOxQYyfA8s7hWAI+eoMzXsOsJyu8tl2Im87PPXjyOTehkw:V0mJNojM7ylQYwgeR8OmX8tlvLTynlX
TLSH
T169430225D10C14D5E5D63732B6BFEF6F96A8F7402C949498B48B82936C32E2F428E7C4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution persistence

Malware Config

Targets

- Target
  Release/evga_kdrv.sys
- Size 38KB
- SHA256 33da2ce240b4559cc6e847d56c5fbeaa3d644ec160841920ea0a098dcee28d0e
- MD5 8dc9504fb5eda1a354971bacffe61ccc
- SHA1 da66b66dca5ea8689db903ec23e98f2c881de6f8
- SHA512 e14750029d50b55f0077ff171cf9882bc8d4a65f4642640cc49dcb6cf168c20b6af3a1d50ca0b3e6b1eff218b26cf64ac92f448827ea76616259b2482c47ad1c
- SSDEEP 768:5tYCFfVj/gom4cTTOiIcm03AiljoyGfhPPKgDz3aCIB:53j4M03myyRNFIB
- TLSH
  T1E4037C52DBE84882D9B3DA3052F6D627BD34B2835620E7DF012DC5950F62BC5AF2E325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1
- Target
  Release/kokoro.sys
- Size 5KB
- SHA256 a986abaa4725a518960101410d77ba1b56e3ec4e51d7ff4bce76e98d2b8c430e
- MD5 325ed9a0320f07bac4956ef23a050da8
- SHA1 066772b9393d893ddfb01b93c4792cf02c5bd597
- SHA512 27e4bea56386353d9aab4e1dafa279b88482baf018cd84e25a1c22133b0c286b3e71b563072ce05e0c1c630cf948b7f95e17bf9782b6a03a73900c4e428b40c3
- SSDEEP 48:aorC+NvowSAdQbUdsDraNDyVyqEhIhLATAoy5R1h6:LDXd0ksD+NDyVbf5D
- TLSH
  T1BEC13150753284E3E11A80BDC9864958B3B9F05027515BDFD84861654A46FDEBE39E83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  Release/notorious.exe
- Size 75KB
- SHA256 6fa7946a88482a4c2d7f35fe04d4ed401a658f280373e6791f934e00040c783f
- MD5 60e271ea13f7288a1105250bd52142e1
- SHA1 cac4249509cd79927505ff358f19a66a58f206a3
- SHA512 c745529d9b3fbd5e7219314964a7cc3763cf009749c6adb0aa0100ced1a62e1996cf9328d39bc0315a0eb58062fd7f330bd2b063d6a14e3bda6088cd2d044dd0
- SSDEEP 1536:NUwDrFKri0DnFAv9oBe5b9d3pbUT1da6dXf:vrsrdDnk9fnK1dNdX
- TLSH
  T15A731916DA56106ED26ACAF8CA534C01DF73BC8717A5B7CF63801CD60E66AD45F3E602
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

persistence
- Sets service image path in registry
  This determines the executable launched when a service starts. It can be used to establish persistence.
  persistence
behavioral3