33a98b92bebf8b97c4148422714bbf4f2a0a5f92dd2d703b3d029b63bbf6bc1c

General

Target
DarthFN.zip
Size 12.2MB
Sample260808-ctme3afr6w
SHA256 33a98b92bebf8b97c4148422714bbf4f2a0a5f92dd2d703b3d029b63bbf6bc1c
MD5 9a69d49a97e2ca1e07039846af4096af
SHA1 eb8170898d158a1c4585acf92276efd7620e5505
SHA512 b93809dcd695d12eb6432f8e5b75b2fdea2da0ffec92ca1f1ad494cf8d7a0b4a0cb223c7f6655cc83120a37cfa4a2ffbad9040f0477491e99847d4f2c378ce15
SSDEEP 196608:6FRMhE/ujdFyn14mYY6/jUtVvD53CcXoLKpgoxgDdYD/Bgx2joFINdVdBUc:MRMhEW/y+mu/g53CIgBYDJo2EyNdVIc
TLSH
T1C8D633D9E65A20B3D2F962B14532901AACCC446CEA90EFC7A2D10D57227FBDB5DD43C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  DarthFN/DarthFN.exe
- Size 146KB
- SHA256 dd9729a2f62a8c742aacce3ee721df1cbd1ce549477decb3c64f9ed6dfb9c1ee
- MD5 301a5357ec4151273a737a57a211c7a5
- SHA1 482fe3a0f2e701c69f40134e71faf5c134cd1fae
- SHA512 db8bef0960722e0372e1af2eb8057ba7640dc140d5710f301c2896d997fb1222c645e0b3b7a5a138b8a0fd4a1a316cc71f305b9a9170d728a4851f2abfd76d89
- SSDEEP 3072:QhK4Uay3XrQ8habqgp9pC9Z6p5uf3C6k0xuZ04ntfxmhBuGEL/:QhK4XycqgpfCup5sVxuZ04uhAD/
- TLSH
  T194E34A43B2AC00FDE1BBA3788AA21906F7767859477197CF0390C56A1F67BD09E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1
- Target
  DarthFN/Microsoft.Spark.Worker.dll
- Size 62KB
- SHA256 4674c82b4f6086d56e0a74aea72a268de453b94153adf591bb321a9faca5ff91
- MD5 fc5770e46d2ba46b53bfa6abef195876
- SHA1 da857c91ab8d7f839e94584ee14a5d98f6927886
- SHA512 5dace24959fae55c3126ade840a7a35e2508e165e8a2262b1f3efe9f9a917efa4b3e0a49fed39c687ab6f6b19cd95aa8662108569d73aa5dfcb4ea218401f8eb
- SSDEEP 1536:brLKvAu6oRsrqcQCnwwR1KQyT94xMQhmP8Hzs:vlu6oKGCn1R1KQyTUM7P2Y
- TLSH
  T16D537D0023DC8723D6EE2FBE54F120000B75A71B6962EB4E6D85B59E5877F858630BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral2