cb022b3bb8a7c60f308ee1e48b84cb6ea290a2173ed302cdbc268868dfa76051

General

Target
coder-task (5).txt
Size 12KB
Sample260802-mexmlaxxay
SHA256 cb022b3bb8a7c60f308ee1e48b84cb6ea290a2173ed302cdbc268868dfa76051
MD5 f80338ae2c0c98033673fce67a31bdf0
SHA1 ca4d9a53c4632228b24415c3a9af9aabfefc2fbd
SHA512 97102c3274ccedfae13f45b94e20bd87d7145b28933766997b6623d0123ee5b9751a1428abd3fd01c7ecf3e80181cd3dab0f0f3ee20d0b7cfc0d0a472302868b
SSDEEP 384:lIPIL/SYTXlFTUdNuNeFRrSZyUKO71M7u7wXV3RkPo1Hd8iiTJi4XUuStqwj6Iu5:aIrlPAN92KO7C8Pc9uSt8bV
TLSH
T1FD52EAF6672932765D63826BF71232E2DF31D1E11B0661E0F0CE816D22970E7937BA90
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  coder-task (5).txt
- Size 12KB
- SHA256 cb022b3bb8a7c60f308ee1e48b84cb6ea290a2173ed302cdbc268868dfa76051
- MD5 f80338ae2c0c98033673fce67a31bdf0
- SHA1 ca4d9a53c4632228b24415c3a9af9aabfefc2fbd
- SHA512 97102c3274ccedfae13f45b94e20bd87d7145b28933766997b6623d0123ee5b9751a1428abd3fd01c7ecf3e80181cd3dab0f0f3ee20d0b7cfc0d0a472302868b
- SSDEEP 384:lIPIL/SYTXlFTUdNuNeFRrSZyUKO71M7u7wXV3RkPo1Hd8iiTJi4XUuStqwj6Iu5:aIrlPAN92KO7C8Pc9uSt8bV
- TLSH
  T1FD52EAF6672932765D63826BF71232E2DF31D1E11B0661E0F0CE816D22970E7937BA90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

credential_access defense_evasion discovery execution persistence ransomware spyware stealer trojan
- Renames multiple (6135) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Downloads MZ/PE file
- Uses browser remote debugging
  Can be used to control the browser and steal sensitive information such as credentials and session cookies.
  credential_access stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1