689142924242870f69af735feb480bc430c1d1bb701cb6ad94b99e8113343907

Sharing

Copy URL Twitter E-mail

General

Target
RadarPainter.zip
Size 951KB
Sample260806-bnbwpsbl8x
SHA256 689142924242870f69af735feb480bc430c1d1bb701cb6ad94b99e8113343907
MD5 746dcf804542059397f707503ef9e8a8
SHA1 d5a642013853e4a3a9692d6f85b4fb74ce18cf77
SHA512 5fbc62ce41ab7b6d3190a262368b7eecc3d5d9570a4e93068767c9a837d91abc6ac4a4e239032f2bacf2ac56d5fba6318289794141bfcf73ef1e306ba5f64f2a
SSDEEP 24576:S53wo6cujmX1KiyRSi0V2o+HrKkAQ3jbrMQ7jQK:Q3wTG2EyoiBAQ3IQ7kK
TLSH
T18725337C76388105DBE95E349BEA3A9C0A18ECC1034A95FB91878D51BD8572FBA7D033
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  RadarPainter.bat
- Size 152B
- SHA256 719e3028b89dd93dd71e34d7d8676bdc7ca9c7a86f15fd2fc566d7d54ce8028b
- MD5 37b75ef01b1d7569f6dcefec25385e7e
- SHA1 27f396b4c1579827246a88a3e6a39934405c8c4e
- SHA512 9de9506fc370cdc4c1096beaab70ee8d8a88edc41984e2579f5d908d3c93abcd1491794aab07066f2afaeda81b12a9b987b9449ad6a8598053b2fb73171d4592
- TLSH
  T1B9C02B12D20502933CF918484867984A3B0C017341A96F30A5F71513B8CF48C8C8E046
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  geo.js
- Size 2.4MB
- SHA256 ef8afd4bf8413be051ef157867b8299eccb6d2d68c9a2f5f4885f69fc0d3fcf5
- MD5 2f90c50e6b6151fea6143f631c93abfa
- SHA1 03f806f45c5c1263ccc9cf9bd99e2adf1094b1ed
- SHA512 47bd33119d3f35e759c183f633fe657c6f5a3969e281c7777ae543daaf93f6155b0aeb83661656545ec6c2b9550d0e397736b28aefadc5faa05cec3b298e45ae
- SSDEEP 6144:C78+DDk3pIYDNJUEmwC01QVMB5kkBYy6uW0jWNnHoR:C78LhJUf2QTydWkWNHe
- TLSH
  T19AC582CC42420AF5BEA8CFCC48E239BC159C91366EA35EDCD65D1DED1464FAA3026C5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  index.html
- Size 71KB
- SHA256 ce5b416ac830e480f03ed14eef382bcbef16581402f6e9604b8ac78f55e7ff80
- MD5 bf86e34dabab8c1c3c077aad8bc4e0ba
- SHA1 47af0d26773153591d519e968f0533f223b598b4
- SHA512 4859b114e8260f8bfced09a564a1024ee9318ddca4b74d74541a09264f8e67cbdd320cb73480c92de314dc0caf4b6b71047c497701287dd53b50959f9a685928
- SSDEEP 768:ME7A2Hn2CaFawP154C3wD1Pr/bsOiOm8ktWiVzg2lR1eA3LFqLJtJDh0v6Q7dc6k:M+4FP15pgD1bRktlD1X87c13VJr3GHoQ
- TLSH
  T13263F81422F62074433351B957D7E1167B29A0037312D9C8BA6C52A81FDAB74E3BFAED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  server.js
- Size 22KB
- SHA256 8c5f3673be17081a3f2060a101a0ca57001a7c2153893869d5bddf390f997f96
- MD5 a7a01900a6c37080d8bdb07897bf7201
- SHA1 ff6ffb254a27e199a20ad7c727b2a77e8e5ab092
- SHA512 ec849c3555ff369ef99f234de085d257e1f14856140d241c08b690f48df810577aefa3be87d90b79fd68e81f33d3c9931b5a9ce4a7b4b40d2111c62a8b4216aa
- SSDEEP 384:20Zn14rONgBAipnqEYTfHAv2y99fIlpi77ky+:2uMOmLlqEknufIlpi77kb
- TLSH
  T1D3A2A7051E7315581A23E0BE0B83E411D736F803F815DA84B65E66906FCA92CCA7EEDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution antivm
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  sites.js
- Size 13KB
- SHA256 3a45db2b3c06c332d486408033f09e287a0775dee640d999e062ef9e806adf1f
- MD5 d7b8f3ce5e0440cb9c97ebf795294fa5
- SHA1 657300b112101a5a2d80e06558f7832901b283c6
- SHA512 9a62b7eb39a10b2fe6d476c8dc70049ab7a5e1a78f5f5f4706ad24c3b009ca80b611c6ec3832664d20ab446543350c67879610e46005501a4d19cc0b46624972
- SSDEEP 384:RbVWtuVrh33qlzUvVxR0zUCltBB1MnE9VIFbfxwCVc8dFdu920Mdj0RDr3lvBns8:kf3iNfgA04T1a
- TLSH
  T10A5251CB6FA059ADCD84CD2B1D9B17FE3425340BA3C90D1B4070CEA498927BBAC6503B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12