7097baa61f6ea82c08055603922b9ffcf9ca0d4c61f4e649228b1abface15c5b

General

Target
Qobuz.opk
Size 11KB
Sample260807-rdtxjafk2y
SHA256 7097baa61f6ea82c08055603922b9ffcf9ca0d4c61f4e649228b1abface15c5b
MD5 245c1e2d0c5731b52c80a7e2338b0fa6
SHA1 35d3d2fc52fa65af82f51ab47db946d83ee04837
SHA512 f5bd74771e98e2d01a112d8608f842bbfc459e88ba508a765db36a5ace6e59647c98be2b352177586f6963535a6baaa4877a946ac6a1a718b5e508fd6598e11d
SSDEEP 192:O2BF2xjha4Q3DdIZKIF66HkGxT6cuOt5WmNP3PyF7kyOOlvzwD1zEFCkPdbF28R1:JBEhy3DdIZLg6HEOt5WmN/aF7khOlYzm
TLSH
T1C642C01D91381458D7EE74B0DA868C34933C279E906675793C678E533D2F3E4769A181
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution ransomware

Malware Config

Targets

- Target
  Qobuz.opk
- Size 11KB
- SHA256 7097baa61f6ea82c08055603922b9ffcf9ca0d4c61f4e649228b1abface15c5b
- MD5 245c1e2d0c5731b52c80a7e2338b0fa6
- SHA1 35d3d2fc52fa65af82f51ab47db946d83ee04837
- SHA512 f5bd74771e98e2d01a112d8608f842bbfc459e88ba508a765db36a5ace6e59647c98be2b352177586f6963535a6baaa4877a946ac6a1a718b5e508fd6598e11d
- SSDEEP 192:O2BF2xjha4Q3DdIZKIF66HkGxT6cuOt5WmNP3PyF7kyOOlvzwD1zEFCkPdbF28R1:JBEhy3DdIZLg6HEOt5WmN/aF7khOlYzm
- TLSH
  T1C642C01D91381458D7EE74B0DA868C34933C279E906675793C678E533D2F3E4769A181
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  metadata.json
- Size 13KB
- SHA256 45d8ba067fba29f27a09d4449d14b712d0ec643f628afb2b8a821d7baad5b691
- MD5 0e1b76fa60ad3e9a102f36c811c00721
- SHA1 e4df813f6fb512e516b5eb98d11b6a54f59f7274
- SHA512 7491bf75b6d782b40180ac4e37239a8bae6b447961053dceacca2e9cf972888ea2a39bb458c40ed7b15378acf8a8823b4cf41e3d1742a178a4f490a7323eb7f0
- SSDEEP 384:LdpcH+dKDgyHYmgbJ+GgmnXd4uzb5tLDt7pTBi:wedK8mHGgKN4Ib5tLDt7d8
- TLSH
  T14A52C0B1152D98F01B58CA30FBDF16E22EFDF5D31A5082D035B23268E690966D0F8562
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral2
- Target
  readme.md
- Size 127B
- SHA256 980211b90d242937b239fcde03e25e22358b9c49e1cecec80a063561707f9e2f
- MD5 8a7e8357c5ef623466a255f37a01622d
- SHA1 dfaa822c00dee86eb93b9cc1fc518bd3c55119e5
- SHA512 f519e7cbb5f4035ee4672d50920f56f30038df99fe950231cf9410d944bfcab07b1c8dd8063c4afec72de527549d3e5d0d36c38e20dae7da2ab6e7fd4fdea520
- TLSH
  T12CB02B67B78595424E0090C001F094F9C0B13C2EC3F38C07C801310430700C0E870608
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral3
- Target
  script.loli
- Size 3KB
- SHA256 fa0caf202fe79c3e8f009e9b655977ef32aed705229c71af709fa0228b2600bc
- MD5 81c3aa03ceac94d203435e4dc6c0691e
- SHA1 2ea53fc68fd479ce61686f82e5bf459245a44e2b
- SHA512 bc0a5ff98177e44060413915ea2c88cff023b2b9b7f1437cd6b5b1ced49c4a30c4331f116eb1d8355e0ca64365064bcc724800e382a9a9f24e0e97ec26954c5c
- TLSH
  T1526142A8B483800FEC77C1B69DA3C84671368362199284917E68E112B9EE8BB973750D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral4
- Target
  settings.json
- Size 1KB
- SHA256 9e788d945284188069455d23f300d7ffd268fea193544eecf24c70872a012d52
- MD5 0293bbfec533da0eabe0347b78b31cc3
- SHA1 c1ac4127db6d6a2f6d18c1c21e05935b5c98901b
- SHA512 17cc88ce64fc40491ccae3f35b7cad3039b65cc4193317a1d78ecd5362571508ce13666e39c7489000678261321fecfcefe368a8524904b20a9e23565b97fde5
- TLSH
  T1A1314B35D8714EBE2AF92219E83A8383EA1487B717504C6B71FD190D1F335176686F8D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral5

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5