722b2cefb885fedc22b0849044a204406794d557ff045e6f58b1f09a15509474

General

Target
07082026_1603_05082026_Aкт cвepки.zip
Size 1.5MB
Sample260807-thrdbagp4z
SHA256 722b2cefb885fedc22b0849044a204406794d557ff045e6f58b1f09a15509474
MD5 4473a3fff4a66e214204d7fd70547994
SHA1 f55b537fe4ecedf5dec046a7782e7a18de0ef8fd
SHA512 f2be20f85edc538992b81901595408ae13a63795f093118fb1d1068a62071706b50f3885aea0c40ef8d07af4b360130a589f4dbedba45fb7c38e808628439d38
SSDEEP 24576:+Eb3Wm76zbRnc3X13spZCFzxgbwPZqLX7gdHYAujthHyIrDFGtDyok8O2B3dJ:+Ebmm+bVuX1spMzxAYqLrgdHYxjthjB4
TLSH
T17E6533C3D150DD604CB6C93AB6A7CE8E0EA87DA7D50211474BDFCD2D3B192AD34A34A6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  Aкт cвepки взaимныx pacчeтoв за период три месяца.pdf.exe
- Size 1.6MB
- SHA256 cdc371e508dbd43ef2fe37bcc84889c2e11b13a29623f656d8274ca81fae61fa
- MD5 cc2fd31d2f59fb88f9a14624ae6999a9
- SHA1 b40050b70e433642805294044578b653e2a6dd28
- SHA512 43f81b9b6f36df1fca268fcd4394f4bab332952a96e475edf7a500c3a4d691fce10da7f547c3474ee9039353b5b55c220181466d4f86a4980b6ee8b6903eb0cf
- SSDEEP 24576:v4H5Wmh6yXRarrxpx6zJuyHkWqiJaagLgi+umVUnjkvWcz7G3CIW73LJGJP+R3fl:gHkm3XE5+8yHaEQL1vm6CxY9+RuA
- TLSH
  T1177502F1A740C465D8979679D83BD6A3B823A64E9DA8091C2D82FF0B3E73347106785F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion discovery persistence
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  defense_evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Executes dropped EXE
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  defense_evasion
- Adds Run key to start application
  persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  Образец.doc
- Size 58KB
- SHA256 53941bab58471d39ef78032f9610b9c535e610fda368db5a055bcf2c83db10d5
- MD5 ec9af93fa447e8dc39748d534f3937ba
- SHA1 fea5ebada49bf3f48d370e440ec82914805db7fb
- SHA512 1482cafe440994eaa572d0c7c0a6dc71440a711830fdab64969f1548e3ef19e68ce4d1eba8fbd815dcc01ab43215a63dc98b58ebe8912137c2ff883c673fbb5c
- SSDEEP 768:Wkq9222l222H22259e222W222b222/5OoO:4j
- TLSH
  T12F43EF07BBD16F22F176C23694E6C7A01A93FCC1FFA9934BA19B3A2B28317551D07254
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4