89130c894be8070cc19892d66ac139cfb53fecf83eefe292a6a318b180dc8502

General

Target
MultiTool_1.39.0.zip
Size 15.9MB
Sample260810-2jx69abj5t
SHA256 89130c894be8070cc19892d66ac139cfb53fecf83eefe292a6a318b180dc8502
MD5 511f707120b10d09df1656ed809457a4
SHA1 6423594bc565fd9d236c317abc6f17936283854a
SHA512 9526489a3f0f9533bf323da32c72035f0281846422bb7415bc85497fa24b660867918f26f1761362fc887080297b16af87ccae8aec6d1ae90addd8adccd7162f
SSDEEP 393216:Q95fvhy5JvmxbF7tQj2tVO4Q04+alfl1LpQRbs0jMggHJD3dwJXS1e:o5fvY5dmxRt02u4Q04+aJ7pSbscMggHi
TLSH
T139F633D86B8E7DCFC63510A984B7542462B05412F77FB29A7261C4B7E1A863C8C87C6F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  MultiTool_1.39.0.zip
- Size 15.9MB
- SHA256 89130c894be8070cc19892d66ac139cfb53fecf83eefe292a6a318b180dc8502
- MD5 511f707120b10d09df1656ed809457a4
- SHA1 6423594bc565fd9d236c317abc6f17936283854a
- SHA512 9526489a3f0f9533bf323da32c72035f0281846422bb7415bc85497fa24b660867918f26f1761362fc887080297b16af87ccae8aec6d1ae90addd8adccd7162f
- SSDEEP 393216:Q95fvhy5JvmxbF7tQj2tVO4Q04+alfl1LpQRbs0jMggHJD3dwJXS1e:o5fvY5dmxRt02u4Q04+aJ7pSbscMggHi
- TLSH
  T139F633D86B8E7DCFC63510A984B7542462B05412F77FB29A7261C4B7E1A863C8C87C6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  MultiTool.exe
- Size 14.4MB
- SHA256 698e4a013417a80cfb4a5ad22679aad0a4e9b8094d11c62d44e059867b8ccb6d
- MD5 6ab3e79cbc4e8c6f7e4d1c444d986a9c
- SHA1 be1f1faee9db28b1cebfdac9bf230fbaf160e8d4
- SHA512 9f6dbf19db3c005e445ace904487b41de334d1e6773563971786736b9d98eb7a1f3caae4cdb4b27b1ec2cd36911c81c6754bccb63365331e20c847b3b0c8f2d8
- SSDEEP 393216:FGSNHz8gzpzz8ez8oz8vz8Mz8oz8vz8Mz8fcEtu/IOvz8:F3NHggzZgegogvgMgogvgMgzEg
- TLSH
  T171E623C2A4A44A35D1FD797AC7EF00C417B3696B6E38D18C6BCB25D909228276D13F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  MultiTool_Data\GroundTypes.xml
- Size 2.1MB
- SHA256 8e461c88b49bb56ab1fa95cf6b8ca6735c287f72821c0001fa605a21b823edf3
- MD5 e7ee8bcc1e12a22396a857a8c9d1f946
- SHA1 7494555f2ca5befc35c1fc2a876f910e02ff6a84
- SHA512 a22db1bc82655d26d4c047f649139a278fc917ee0801c9d98dfbcfb10cece653358e0adcfa34aaab0fde9344e1deda5c2edc81d1f15d3c02af51b94a7e9fe81a
- SSDEEP 12288:l+tfXItC8HDhH1htPV90LcMer7ktc2EfOy5Vi3VQ/6EtHw/m8:l+tfXItC8F9fOy5Vi3VQ/6EtHw/m8
- TLSH
  T106A501B300E8EAAC2C2B5CF697127F26FF1191F9CDB1568E804A43ED65CB505162C7DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3
- Target
  MultiTool_Data\Objects.xml
- Size 22.7MB
- SHA256 41a300e96a982819aca4338f303f37d4670e8d7b9b18d5bc91061c4af1c2d72e
- MD5 bdf924889400ee9d8e7e2edc33ac57b6
- SHA1 ac72b6fc23e97bede7e2be17dd4a18231a878c43
- SHA512 03edf19b56ce5d4b4b4f94837df650d45151cc6364de2b3468cf0b27e56dbae75171dd1cad1c051255cd26082fc6391c9ca3f7da6bec307b716153d0e7884e91
- SSDEEP 49152:WAgGrXUK+vfNBJZ5Z1ZBZ1ZZsVKY2R2krM9uV3Y1RG3RQnZR2kYFf+Vshk5x736U:OfuneFGqWU9/h1Q
- TLSH
  T1B337733521DDFAE95D2757FA5B287E99FE2491A8DD70E3D8A12AC3DC00CB845801C39B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral4
- Target
  MultiTool_Data\version.dll
- Size 313KB
- SHA256 2250fbcf8f31db5856cb474d949d3fb19b7ba54cf805e5b090942dfa60e35347
- MD5 8e1934456f6bae7075233026ca91efb8
- SHA1 2ca4788a18acbe6ed23169e9621b52c01b3a4ab8
- SHA512 0c71334643cf920f2d82acfc986c38fba95b02ebde5dbda4e44b3ccfc4e40bf3b8f73f1538169172f6c973bba596b8e525162d414b5f74460cb50fd2b7ab5029
- SSDEEP 3072:KXEr94caYN/bbl8MK7aDaB5OZg3TgVfVEwrkUMRoT4Y5ueFCdt5HuaoUJzEBy802:KUCcl/HCrIrVfVEGCWlgyaaUsQD
- TLSH
  T189647C16E66510B9E477C13DCD431A06EBF2B86587B0E7DB13A04A9E6F237E04A3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  MultiTool_Data\version.txt
- Size 10B
- SHA256 cc4dcb51649822912b6cc8834d29b2e59e1268e495a4021ff8f95eda856bca7c
- MD5 2c975d9fd7ba023c37b5e07aa6ceabe5
- SHA1 0dccd3b26bc1d821c3e4701dec6711f7f9a495ca
- SHA512 8adf936d201a4909614393b2c7ea71ce0d2820e72eaa5228d907890fb7e26de34b2b31aedf2420032c8f43ab58118d243b5e12e32469d86ca7e1870014fc64ef
- MD5 SHA1 SHA512
Score

3^/10

execution ransomware
behavioral6
- Target
  README.txt
- Size 136B
- SHA256 49f5dbf6bf47ad9b059172683b4abac0e79c55d495402b375077619eb0183dd9
- MD5 03ec432043bd431a0b29035ff2bf18a4
- SHA1 3755792cf54f6ed9f6a4832544b09d19b492d6d9
- SHA512 0d730719452f1128687cad49cfe60ef1f5d751d37fdab2ce231ab435ea6589be5531f984b8b34726a8fb63f9cf00bccd0b9b35aaea968b8a78d2492e43de2e7b
- TLSH
  T149C02B64788F2287254156B0E06630E0480CD41C03FF4801CC0690BCB02E36B03430AC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral7