4f1bb49a7d8d738a5c402085657bc17b4285d0d3bf0eecd676a0cc66fe7a3482

Sharing

Copy URL Twitter E-mail

General

Target
private.exe
Size 2.0MB
Sample260809-pghybsen3v
SHA256 4f1bb49a7d8d738a5c402085657bc17b4285d0d3bf0eecd676a0cc66fe7a3482
MD5 b59881318fa980e8c8e4dea2ddb659e1
SHA1 b02dd697710f1e28cc3e62e1dadbb4da789d0254
SHA512 4621903acd8696df0e81276b702e7725dc1bdd1347580db20f46bf1ed1d55ab4fc0edb2ef1eda3cdbc1e9b527445e28f1192880e70e1e460c982a07be0058a70
SSDEEP 49152:aDN/j4depZ+BhQOLUWC7MdkqXfd+/9Ao04dwteeY9keOtVKUAVbqv:aSsMdkqXf0FOA
TLSH
T19BA57F7C73D55D10FAFC52B49296EE51F120E4830D56A51C2C8F3A82A6E1A836ECF19F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution ransomware

Malware Config

Targets

- Target
  private.exe
- Size 2.0MB
- SHA256 4f1bb49a7d8d738a5c402085657bc17b4285d0d3bf0eecd676a0cc66fe7a3482
- MD5 b59881318fa980e8c8e4dea2ddb659e1
- SHA1 b02dd697710f1e28cc3e62e1dadbb4da789d0254
- SHA512 4621903acd8696df0e81276b702e7725dc1bdd1347580db20f46bf1ed1d55ab4fc0edb2ef1eda3cdbc1e9b527445e28f1192880e70e1e460c982a07be0058a70
- SSDEEP 49152:aDN/j4depZ+BhQOLUWC7MdkqXfd+/9Ao04dwteeY9keOtVKUAVbqv:aSsMdkqXf0FOA
- TLSH
  T19BA57F7C73D55D10FAFC52B49296EE51F120E4830D56A51C2C8F3A82A6E1A836ECF19F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  costura.dll
- Size 4KB
- SHA256 41bb464ac7c0d192641077e44a59d7d89860c3c620a59961f2fc4a4be47deae3
- MD5 501981c7fc457d59238eb99780efb615
- SHA1 f1f25c01f6acf33bdd62c4f82d3ef078e76f0906
- SHA512 5921d0662add6c8aa075106878cc56335ccbf059d8bc7f359fe9e02a52ec657c3e5df1c718929564c09f205e4bd299b086f3e7424141f5e55ed0d756f65ee1e8
- SSDEEP 48:6F+lni2qJfjVRPGwzCo4MhTN0KDdilETrVsH4/QWk1qyFVT2IbG:7g7KedGEiYIWM2
- TLSH
  T1F791A51097A8477BE9BB0FB6ACB3534A4275FA61DC27CB2F19C562172C123180A31F72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  costura.pdb
- Size 2KB
- SHA256 89b13aa6efbc0b04745a00bb5fcf05b7a4e3537095bde974ed3490a9cf582d17
- MD5 34b42a5776a3ad022b429124d55e576d
- SHA1 6c6000a5eaf8579850ab82a89bd6268776eb51ad
- SHA512 c24bf10e1d95a07fcd65c1f7841d2d4bdf25c5db02f5f4912286c8d6c077fe8bd3fc564cb249cb4ae01aed10889f25cc22a48bd9698499ed556560d0621a64f4
- TLSH
  T1F35193776F04C291ED9884B28513DA492B3047127602EE7AE9E51B05CCFFDF8077286B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  newtonsoft.json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  robustdreamworks.dll
- Size 36KB
- SHA256 64aff8eff0a741d0299ca8bf2362096d2958d7a7e061cd48788937bbaa4a448c
- MD5 afd4aa5b058eab0ebd781e2b04a8d6ee
- SHA1 bb1ba7446ad3de79a17c4507811593b989e15ab3
- SHA512 237ddeb302a62f850b0dee63976f2a9911a8d5520c1aed42a82458ba733f6f09fe5888fb3815cb0810d057d5fa86a9506ecc7133ea07cdf7c1c7475bd0e97295
- SSDEEP 768:RqQfF8DoIFfL+449HgSfNM1OA3n8pBwnQeY6:eDoIFz+R9pfNM15Znf
- TLSH
  T1ADF21851576CC237EAEE5AFDB072501227B0DA213386C7AEBECEA16C895371D12107DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  robustdreamworks.pdb
- Size 145KB
- SHA256 829a7f41402c1dd785d721c28f3ad659b0c25dd5b8d3b466679b1c5a31405ec5
- MD5 d29223ada19073352baf826458a0b6ec
- SHA1 844639535025829b825635a5583b21309a770e69
- SHA512 b29530d7747903b3145d7a53a4a3c7debfd1588a8533e3d082eca7896f888462075f41fb8c7d7c8e9ac8ee927ee24aab488be1dc47ca8e7aa16676822af5c30a
- SSDEEP 1536:lA/RYmHcJyCiaxAQUllAEbqw/wF/sllAAw:loH5ZIEbSb9
- TLSH
  T19CE3746BBB50C631D864C874799B4B5D0634E9C8D782578FA356F02C3EF33A92D8B264
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral11 behavioral12
- Target
  system.diagnostics.diagnosticsource.dll
- Size 34KB
- SHA256 d22133818a30313e0becf010d78a556a56b34ea361dbd33588c9817631fed540
- MD5 8d9df432109f1cfdd86723b5f171e3d7
- SHA1 85dc92edd4b0049ed9049e075c4def8a3d64e43b
- SHA512 5c83303934eecfa61c43a071d29c98e5804d37a5dc7f7b035772d6a168b0c5e65dfabef20b46214e65493c4bda44831cafee83615498fbe9e718c884f4650edf
- SSDEEP 384:iQobG82oiaPaf/gn5LQ0+0zdQUv2CtyW8fiFISWbW9pWJbWivT1Nq0GftpBjAvnC:nA299fI5dxzL2CC11vimvnEBBNFT
- TLSH
  T145F25B54EBAC8953DEE71D3062A4D9423A3AEB936C10C25E2699E18D0D83BD1EB11737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14