a8b4180693cf17b2824e373306e3ce35940983c0bde20eb1796c088bb21b63f9

General

Target
OpXOyuApWKTlFzrV.zip
Size 10.3MB
Sample260808-tp2gvst1dz
SHA256 a8b4180693cf17b2824e373306e3ce35940983c0bde20eb1796c088bb21b63f9
MD5 742a9a3c03b8b22d2cf4ca3435a5e9f3
SHA1 a888148e0da0934b3b93b18e5a501256c46a9d75
SHA512 b27efed24e5e12f1eaef12cc486a9870be2e3d066adab43040a33a94440a1c435194ce52e075baaaa5ab82fffedb82d754008fcbbf75800d9b6a4d96229487cd
SSDEEP 196608:qVjdBoD3Y+gV0Uou/QnofD9zv/7Ltz6wdHXe4w0TRTTNvH0+JQgVZ1Ch+yR8ZYKU:qVjdBoUHVxZ37LtzPduV0FTG+igVZ1Z8
TLSH
T134B633B63DAAB68C9B0D771651205BCBF3D317A40BDBE8356698767306337A21F23640
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Potassium.exe
- Size 23.9MB
- SHA256 d4a06aed70cfddaf747e6d2564bed581d4686d854d4771b199ef1ec6c7b3dfbd
- MD5 2bfb8df7baeb371440bf440257597b44
- SHA1 880241dae0058f349a8ad3c187e5c363f7dd94fc
- SHA512 a0bb1296ec97c33d396bb30881291b8a9e4048b2fb84fa770c06454c17e5825c2a5dbfa9141c538316a3c182b20854652cdad390245a9c42ebeb77fea2ce0e12
- SSDEEP 196608:yypcOkyIBA+fBR1FWEOzp7lSn00KJNTTH1/Q+K3QCJG5nU4NEDC07M9:yypcH3Ai14EW7lS3KfTmFACJGBU4nP
- TLSH
  T1574729257A5A996CD05BC074838B8A734A7130CB1B35B9FB549492382F7EBF42F38758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery trojan
- Downloads MZ/PE file
- Executes dropped EXE
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1
- Target
  autoexec.lnk
- Size 1KB
- SHA256 006d6168d27c62c347d1b5c3c493f9d9f47d4f24998cd1ed4e6af55386d2a745
- MD5 a2f6abf50bc9a739d90905aa42153343
- SHA1 4bb0b291fd763628bc10770ed2ca015bae3d2380
- SHA512 d898517c1e201b2b32c2765aa4486bea8190275f12cefa2a93eb44658d693507ecc81f7e27450507e3b392c2f9640d63d3d341d5b1b20677d62ff68d8b172a3e
- TLSH
  T17B311F1D5ED51720CBB988B617AF2306E76324527BAA4D2606448A4E1A22542BE58F1F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral2
- Target
  msvcp140.dll
- Size 544KB
- SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
- MD5 bc88b387cafa556068b5c5d6ff3ccc8f
- SHA1 b370eca8fa727e46cf61d834fcc956698b02e1fd
- SHA512 b7aee12e1bf86027e3c42ae28f6f6fb34dca81c1f5af6983ea4aac559f2fedf945956a381f529c553d71bc83cd71dcbad12266fad86c944f17f63db92b8ca95b
- SSDEEP 12288:tdkDYbKloU7/7mozO39V5WZyhNFdQEKZm+jWodEEVLa69sU:tdnGoU/7m/V5WZ8dQEKZm+jWodEER7N
- TLSH
  T10BC41A27F74A06B0E195E3B8A1838702D7F1BC598322E3C752EB955D2F573D0A63B690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  scripts.lnk
- Size 1KB
- SHA256 00ee5ac203f530c285231a8d1055764ae6bc6056812b2ff6b2b400c13eedb4e1
- MD5 368718555cd69e85c33ab66442815cdb
- SHA1 8e2eda2fe3c0a6c853cd471e17a271883f87c42f
- SHA512 3e235efa55411fcb8aee573ea8a81298302ebb0003ba20a42e81cf2cb79d7969cd684e009ca2d4e03610225705c9f28e70933dc33c2be16a2683e2d92a536359
- TLSH
  T18131325D9DC80F31C5F58C7757AF2706DB6054627F9E9D260E94828D1E22A02EC54F1E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  vcruntime140.dll
- Size 121KB
- SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
- MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
- SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
- SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
- SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
- TLSH
  T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  vcruntime140_1.dll
- Size 48KB
- SHA256 1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093f
- MD5 cd1b08f4930b276ad78853580b76b5c6
- SHA1 a0330279d3d0d47f19ed984726e25260b547a228
- SHA512 6bcdd6b16d815d72dc7efd6a2352319ece102f3b7d85c648286e4b3b594b7670d61b7e05c580fc416421e1a1622b38737b1e90080171384e7e2cd5e37ac71225
- SSDEEP 768:g3oZYctpzcx0pdESASv83Tw4DYEOMg9z7NONRds9zb:kc6wk3TgEqz7N6Rdkzb
- TLSH
  T140236BE4977C4082D8ABA870C1E6EE17BD38F7A61B10968B07A5D14C1E537D1AB3D31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  workspace.lnk
- Size 1KB
- SHA256 24ab09465ffc09f89917a776325062f23b679456a0d36799b4cab65242f7dbd4
- MD5 4cf25c84d3e866e83709df8a6601df61
- SHA1 89258dd5f24a2d681702e950f491f200fe4d0941
- SHA512 760096b6983d8b9276398e216211b858835e016e7e348838cc59af4f1d3927652cc61d2fa96ca3847dc00b820888516ea76d4dfa7612cc426e14ff26f1e1fc83
- TLSH
  T1C231351E59C95E35C6F6C83527DF370AE73450A5BF894D01419081491D329C2F854F1F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7