26d9d9e86733d24edaea17a6a054c3e35e77882da4149529071e8724e637f0bd

General

Target
Clumsy 04v2.zip
Size 805KB
Sample260810-bk2yqasvct
SHA256 26d9d9e86733d24edaea17a6a054c3e35e77882da4149529071e8724e637f0bd
MD5 1e1f2dacd52b6f6d1fe95dcd35bc6b84
SHA1 1eb2574c890034ee877868426633670cb3b1bd71
SHA512 e43cec0385ab9b418ba9c6f9c6ecfa9e00264f7038ef51345f40a0d8f1f3cc7f6372d9e050685b73eae72778c633ea625da9d3691d495bd793a5ce094260f848
SSDEEP 12288:/a0EOqDBrL4AeFW4ACtnxx/bSxl7kAnK3fZVZJuYZqza/3dGUlVGb1kAnKS:/appBI5FWTCtnx1SHVnyXMGhGhVnF
TLSH
T11F053375B4F64F9A34B7CE6394D27ED88A78DA4702BF43DA528DBC0433B86375698024
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  Clumsy 04v2/Clumsy 0.4v2.exe
- Size 1.4MB
- SHA256 dd41f3d77e423bf3b2e3a469ec890372ca4647d5843291dc55e30746f6a2c2b4
- MD5 2a42dddc0631ebb3a9a7d830f5bc2853
- SHA1 68831ccbad832ff75644afb00702d74a6b71d557
- SHA512 558387db89030592ea8542ecc82307e838422b457a60d7a779f0955e42ba52c0eebccc82bdbfb3da408078d418dc559013e0dc50e84b607cb7ab71379acb1770
- SSDEEP 24576:odQOhDsVixFXYnb6mjH7gRqH9RcEhqsUst:oJYViIb6mjcR0cE0sUst
- TLSH
  T19965E692B181ADE9C61571F449A6D3722234FD844622AF1724F4BF373E32993EE46B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Clumsy 04v2/Clumsy042.dll
- Size 15KB
- SHA256 e3237a2c6dec23693c8caac03e5defea1c0ee9e2458fa323e3fbd50f98943194
- MD5 9647da9541e8c2bac64722a6c027db0a
- SHA1 dc6802d81ececffc51de206b969dfb9d7105bc78
- SHA512 a9ee4b27a4ff678e05f3ffc65fa29c4e25c920f194e63fcea27a5cc221d68223b4355ba3ae3f45209b0647fb92fdbf2f800778848670ff2fd3aea745af9b0d23
- SSDEEP 384:EHGiP0PYf9pHuGvATXlQRNq/EbSKxcneWuDlE:E9MQf90GvQXlQveEcehD
- TLSH
  T15162F806F1D3E87FC24EC5B695E72332B8A07CD0B2653FAE6485FA316D80F61642995C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Clumsy 04v2/Something00.sys
- Size 37KB
- SHA256 208c092fe77f161c5a313b916d73fa7f6d10dd289bab8bb5dfb3d59aacb27f25
- MD5 3bd5ac2e9d96e680f5dbdd183a58c47d
- SHA1 83b08cb5e61c7b37bd710ea01196a26fc8f38610
- SHA512 6cccd7971f423f72f5dbd01a83a2d27bb2bde63c4d1f5e127d77cfa0df85c289a2c3cd95c110ce38b58b9ea9a49aad18ae50f352ac6b21740d0294f771fbcb78
- SSDEEP 768:R5VorUqgJs3/KtdrbYiZdNSRUYjbMUYOUaCdHUZ9fdCrYc:vVorUn9cRUuILLd07fdCU
- TLSH
  T1B3033B22A3F01449F9E3CA7456F69362EB31FC826720D7CF039590494F66BE5167A32A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  rr/DBKDriver64.sys
- Size 88KB
- SHA256 5c3e7bbb06ebb134bed7b1231fdf3139a2052cbe5e8c8418e54237933b51bb4e
- MD5 ae66b5b024e79f8b158bbedecd75f71b
- SHA1 72abf8ea3b82eff3c7da99500afc87670bef9c82
- SHA512 cc3657299118b7bb6537bff4ec0389b97d6ef5b351db5fd023787a64ca6b98062c6fe06a9dff8aca82fd0cb4532d517509b2e36247fa0b9de3116203b2e3ab47
- SSDEEP 1536:7ovgCRgYL/h//oJJw5AdPtey2AyWpdsimpxpWXixv6W:74jmJJsKle9A5pdsiypgovl
- TLSH
  T1DD935C46A2E201C5F9F6C97895B59253EF31FA91AB22C7DF11D0981E4F21BE0BD78321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  rr/P diddys invisibility touch (1).exe
- Size 731KB
- SHA256 9ade12cfee43cd43e82c88296502870960a9df1723336c55f9bd51dc21c8e88f
- MD5 cc45171089cc1c28356732b3e7acddf7
- SHA1 6c36de5a78f716446b60e995f829925292b10bc0
- SHA512 a9de0f67a225591b119bc0e05d609d0e6de750ebaaac7a468348c0ffd6579eba46463f773e7360c0148a7567367ad5221f3c7d0d2d791362e87dfe48d93afe59
- SSDEEP 12288:x/FpM4JMnAriXP7M2uOz/XfH8UdG/WE5G:x/FpMfnArwQ2uanH8Ud+
- TLSH
  T13DF47D676170D1F8D515C039234798A2AB61FC990721BCEF056176302EEEEEA4F3F629
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  rr/Pdiddyv2123.sys
- Size 88KB
- SHA256 5c3e7bbb06ebb134bed7b1231fdf3139a2052cbe5e8c8418e54237933b51bb4e
- MD5 ae66b5b024e79f8b158bbedecd75f71b
- SHA1 72abf8ea3b82eff3c7da99500afc87670bef9c82
- SHA512 cc3657299118b7bb6537bff4ec0389b97d6ef5b351db5fd023787a64ca6b98062c6fe06a9dff8aca82fd0cb4532d517509b2e36247fa0b9de3116203b2e3ab47
- SSDEEP 1536:7ovgCRgYL/h//oJJw5AdPtey2AyWpdsimpxpWXixv6W:74jmJJsKle9A5pdsiypgovl
- TLSH
  T1DD935C46A2E201C5F9F6C97895B59253EF31FA91AB22C7DF11D0981E4F21BE0BD78321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  rr/Sigmav123.dll
- Size 46KB
- SHA256 d43662b0fe5dd54a628cad601023b5ca2e0f24bbd7064222363f1520e5b6a400
- MD5 1de8466dfbd3fd078389c61537eab64a
- SHA1 9f1b04174f40ae6520d7e2cea3c2f4f808427dd6
- SHA512 0b6e5afe10b0896cbd16301a601c340484084ab9dfdb9bf9be37b90f445e1354bd74e23bb2d1a59732de52167db715ded990c5cb91753db48c9a7100187ca733
- SSDEEP 768:itSVluu2agCfRSB3QEw2VWHxWYuaO6JXtltdUGwhqWB8TicI:bUZWECHxWDABdSyTic
- TLSH
  T1A023C703F64251BBC568C27083AED3526E22FCC66354FADF829FF7952885F42DB1A509
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7