9ef145f1caab30f1adf5d3cc5c5d1fd75f7a9ec4bf4323656f6b89cd231957ae

Sharing

Copy URL Twitter E-mail

General

Target
Shhh_v1.1.3.rar
Size 11.2MB
Sample260811-dkpphazwdy
SHA256 9ef145f1caab30f1adf5d3cc5c5d1fd75f7a9ec4bf4323656f6b89cd231957ae
MD5 6cf9f0d833f8a6d0768e8ca2e5102681
SHA1 fc580eac13dbb5d654024610f5228774cd84b361
SHA512 98f14e4bd8fef6d499c5e11b3a68c95594716070f7d90378826b6999a96051b97769886f35b5b2758d9792c01902f9e8a73b759e6fa470e7ff6dd1e1ba7ccc9d
SSDEEP 196608:LJJU7MRW1zocNpIyM42scihf/rbjijEf8n1aQOVpiSvpQ4BRdXmTkSWoV4H4UNS:tJE1MVmckH/O4knbOiSvS4vpmTd4I
TLSH
T1CCC633948A6DFC3E670DC9B1FE9A80F235D9253F1E169F142344183C3BE47A94A751E2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Shhh_v1.1.3/Shhh v1.1.3/Add Keys.reg
- Size 1KB
- SHA256 c5968e38980956edd0370e92c4c4a7fbdf294be6fb3320013b4e92d6cac0ac7e
- MD5 0638bda5960806871b478ea5a9884d6d
- SHA1 ae474f3c752606fbf07e4efc7e39bfd96f348a0b
- SHA512 d3ee009189cb6312d1a37517fb5ccb1df5550473ee0aee6b65cfc24656955fc22824c3e7bd7678c296b314b211ea0f48caed80d099f9f8f9a0df70e9d190d45d
- TLSH
  T176416D2316E5718D36A328C5DFF5D864A332F6A59209DA9F22F00E0F58E25044601FFF
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1
- Target
  Shhh_v1.1.3/Shhh v1.1.3/CGDownload ｜ Ресурсы для Компьютерной Графики — копия — копия.html
- Size 6.9MB
- SHA256 48a09532a2f3d2408ff5f6265722c1ecd54b5162b45562fac2bfdc6c65ba6c43
- MD5 2083e29ebf5a21d64af50db3fb9fd1dc
- SHA1 89046ad691d00cbc2a36cce4672536194868080b
- SHA512 5ecdb748511a6d70682a73a9f330a4912602363c2f5eb2377b2c39481cb130ed58192295c0aa3a9d95360469726fbc1b3f321d31d03fd7e12cc199d16cd828a2
- SSDEEP 49152:fNT2x4EWDEOeV44+4N8FUN884N8f4N820N8pUN8wwN8TpITgje91NevRlRYgp21z:l
- TLSH
  T1EA7623319E033C1917F88BAA60FE69DA1EBF4317A90181D1E4FD2F494AC576122EBD1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  Shhh_v1.1.3/Shhh v1.1.3/Winextensions.lnk
- Size 1KB
- SHA256 36b7ea60f9620e6c3e989d4a5f9360d1d049c6540ff19b9d9720a5b0ed082767
- MD5 17473addf30c66e81418d78800f91926
- SHA1 1b528568e277bca638fc4c8c11a5ef1caedfaea2
- SHA512 829f7c64a9fbb0fa96e6ab177d4cc687cc766a729a6e3153f4459d7ba6b196aa4c2091865c25e09f5a49eeb72d2aa039fe537618aaf39988d4a692cb80ae6954
- TLSH
  T10031F0100FE60196E0B7DA75BAE251027B31F9942B260F1EC0C802480CA2A05E43DBFB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/CSXS/manifest.xml
- Size 1KB
- SHA256 a4e1ffda65e860efc22606a0145de828f0abad07e7d2add9a066730cf304c1af
- MD5 73fa076ae805c1ac3bceb8cb8a48d768
- SHA1 356c6a6683faf310e4e29ce21edcb43fca46c3a5
- SHA512 cd621f7f3118790db8b69494a28948e76a2c0fc133ff82cd205267a5a1b5fb62bc0d77b5bde903b39b8d85f562ed147d311488eae7bb4832472b77ec4074b38c
- TLSH
  T13D31A29C82F9A761F0548554EBA920193FF1C2A7205D5248F1EF67350F9BE6853E3760
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral4
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/META-INF/signatures.xml
- Size 6KB
- SHA256 64b66a4d30a5ffad87ad113321cda29ef2f1ea8ebfd2a0f0caf0ac85b48da403
- MD5 1fc48dc72de2ec18ba5bdbcdb9f51e0b
- SHA1 52ce94e2fafdc0dd0163acd8e9241773d3f4ca2e
- SHA512 d539e7935d71b064983f10f8951b1d76e7d9f76e6c008de08ac07dd504666e88ee04d301aee83e96983cbf1b14210dd9c82d6673936eb04122b7ce4595b65f67
- SSDEEP 192:dBg5FIRvAF3mgWH5ms5r8nGePmU8AFYmpoynU2PyQA0EpVmpBl:3g5FIhAdmNZmSgGsmUjFYINnU2PyQA0L
- TLSH
  T195D1903C88DDA8417236E9A92FB3C74568CAB77784AD6B154EB01A1FF440CF19069A3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/bin/ffmpeg
- Size 9.2MB
- SHA256 6f24fa76763984676312ee87d2ecf7e0ef3a982efb563cd9ae837b46c3ffb3c0
- MD5 b6e57c6084f843c6aa8b505f1487c145
- SHA1 36c9edbf0f3002e9c02ac2155af1cdc344e3156b
- SHA512 1e7338673265e459268583b70ab63d29a243419a8aee7123a65afd9830ffe3218726548194c064ae7c9698b4570195f6e25082058949b9f35c21619037060563
- SSDEEP 196608:sk2risHD+8MmAu2fuxT7L/egiFk2fqFvW:K6mAu2QThiFk28vW
- TLSH
  T1CAA6D143F65D583AC68DD23C8E8EDA2372657C404232936B7E127B1C7D75B90AE2AF50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/bin/ffmpeg.exe
- Size 4.6MB
- SHA256 f5f76d53ecee46a494cc8fe4eef82417397408297f60b034dd0edfe4e55de3ff
- MD5 dfb134d837ca817d0ddfcef0e890c805
- SHA1 f27b9c938690bd1f479dcb3a9b42c78089a2fbca
- SHA512 816cfecfcf74f935506f53ad0abfa37daae6a55077488667ad81ed660f996d573da9cb18fc8a40b412634f90f738bc34f6cfe7c8c8ff6d68980346577a34d6bd
- SSDEEP 49152:7p4PcDDgYmavEvwfh3KIm4h5r1cQi01WKwiMPNWqomkRgLzOjMTxKUP4NXSCX42I:7B2uh3j5+QLKERykMTxKbXSCo2fqjg6
- TLSH
  T11B269E03F3A145EDC57FC230879AD723BB71B8580634AA2B1A64AB253E35E509F5F358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/css/style.css
- Size 19KB
- SHA256 a85187a6fda32b451109afe060777c8e5a0be3bf0560af32dfa92d4e8b12ee8d
- MD5 d28cfae74e5afa0ee95d317b54c3d4f2
- SHA1 c682d9934732363cf17c0cde3b6ad100dd811669
- SHA512 efeefecf91e7a6f17b022b284a09dd2c26d95bbf618879811879c13df1c237e0fae159b44fe4b3537030355bff7d8f2201d6e1c947507c0595bb148358f7bb4b
- SSDEEP 384:fsCcEqwn+C/WWFAQcgi7WNTe4j/hA83b8jqqcz:fsCcEq0qKcgnNKeSqqcz
- TLSH
  T1979274B1F264913B7813DA5526C5BA8E3118A853D87787F8FE5AA014CFC34F71A62B48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution ransomware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral8
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/fonts/OFL-Montserrat.txt
- Size 4KB
- SHA256 8b7141c03fa4f8d44e6345d5d4931709290f0f67875e452e95ac1fd3a027802e
- MD5 2fdec60339ef243dcaca42a0c7bce717
- SHA1 c6e5a0782514a498ac406c73aee2c0fe4170188b
- SHA512 f6700c3e1c2586e597f89408fffda3aa29d79340104f720e903f157f0163997778efc81ee43e3212b8605ed47fd5003dc38b3258e9cd851415beb0aa5fbe00ef
- SSDEEP 96:44nH6UibMxxUDfGkKnjfRU88f+BktjVKvR1wyQeQHDZo9:PrsMPZW88f+XvR9QHt6
- TLSH
  T19491A72A3F4423B519C0D256E736E9DEE21A512D33AB69C9506AC16C23E6D2803FE290
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral9
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/fonts/UFL-Ubuntu.txt
- Size 4KB
- SHA256 2f0015108d68627bd788d313f529c21ff4da2c2c42a5e1f3883acc83480f9002
- MD5 325a1a9029112a2405e743c7f816427b
- SHA1 81e5605d07c08e95048556f1795931cc038d01e6
- SHA512 e8741b4341085ee2da8f6b2d150cb171f63a4879a701f80d02bbdc06190954e219cf6f75766e449d3ac73083501bb614d8aacfba764219a8816ede9d88900fb7
- SSDEEP 96:LQ6G5KM8iasjfEa8ETySbFzegHM9QcnH4qpPXYImOQHbZoR:LLZ68EcggQcnYqNthQH1I
- TLSH
  T1F1A1982A3F8813B514C0C265A235EADEF72A526C33A79AD450BEC16C13E686943FF570
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral10
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/fonts/montserrat.woff2
- Size 37KB
- SHA256 06b16db7a969135d48d38c49183be7fb88d4452e2a3011957c7851941f4e4879
- MD5 311d352d93230ece04b34eaa8ad10d08
- SHA1 a5ec54920b589ebe2af3bc3bb7754a476db68abf
- SHA512 c6958d434bd827914bdd132b294209f48d84c4f91aa09ac6476fcaf9ab1cb5e70da6721c9ae2cfe350fa8288fab2ac10208e4a7d2c385a746768048bac0a631a
- SSDEEP 768:J1K3v4RM1yf6cH/Ca4EOAFVnQZ1haUKUKAJmosEc6wcTwL/bjf:m3gq1yf6XOQZP1GEcaTwjbT
- TLSH
  T11B03F1B385431CA543842F3397CF967CC978FA55AB843B885823ECCC14AA6ADCDC0764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/fonts/ubuntu-400.woff2
- Size 34KB
- SHA256 dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c
- MD5 4a8b9af22b314f408f66a17f71e28908
- SHA1 6b5600d84c178cd28b23b583bbcaa4eb12efff25
- SHA512 17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74
- SSDEEP 768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML
- TLSH
  T1E3F2F1D39BEB766C5E3FA89C32B3D2653969580430737119B0A2674842E274C56E6D03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/fonts/ubuntu-500.woff2
- Size 29KB
- SHA256 428ec293d3b79af16abdca704f630c6c951744f572eddbc80e970bc9a94a33d2
- MD5 c6bd3f0bf07f006f394988f7ec53b24d
- SHA1 1ed27190e58308bbc4f0f14339c9672e841ff42a
- SHA512 c60a4f61b6c53f44c53f3c58e19c67ecb04f01f21656ebc27e4f8f26288e75367ea598420086da791f0e840e14b5979e3a773d32748a39e688ee1cc563e26e5a
- SSDEEP 768:LvTtYZduSuUagqNr6VTkl6yuwBNFOHqAr5OO8t7:LvJaBt9qNr6V4syuwrFOKXO2
- TLSH
  T1E0D2F15CFEE3912E549BCD70BEFBCBC08C836D251CD579AC2ECD424649A78883909667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/fonts/ubuntu-700.woff2
- Size 29KB
- SHA256 3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7
- MD5 9418887ae687a640730a62da6d5cef56
- SHA1 c82ce6b645275be73a81d3c9027f540c0add912f
- SHA512 c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487
- SSDEEP 768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI
- TLSH
  T1BAD2F160971A7D67DFE1DE267811EB4F43AA36DF0F515A4918DA35CC231E38920B43E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/index.html
- Size 7KB
- SHA256 28def8e1e7119a9be7e5db558bd43d2d8a66def005994ac4fd8edfa087b8753a
- MD5 01dc10a1a9f90ca004c0814fa0384cf8
- SHA1 8153a8b73b12170e60d9c9cd3cba7f1e786aa3a7
- SHA512 449e20eade74616a283ed642a691e767ef19312e51b7605d0997f0d180b396ffe1371e9c0e194801ec1e8b57aab84463131b1f3c57daf81fc0d4dc1c5d920be6
- SSDEEP 96:LCx/RqCyuIbwS3jTGVB4SZIi39J4wD6IfMsPcJYfDE8PUUzaW1+PsHWrh5oVVYEZ:LCx/UCKOZIdwG2gUdJWSVk5gUqDua
- TLSH
  T1FBF1BD7094F809B3515346CA69E56B0A39D5E207D78E620476EE57F00F8BCA6EC0B46E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/js/cep-guard.js
- Size 1KB
- SHA256 9d9f0215566f61f7967fcb0a87662089c189bb3ccffe831806145418d1424158
- MD5 48356997951dff2b336fa4e0602482dd
- SHA1 2d71afed682ec3ae5765ff6b00239581fcbf1d37
- SHA512 312c3352f73dbc6b904da2f3460e05691a7cc0232e86d35441034ff914594dc89f2f571f9e511ea089cf589852e66eae7bddeb9a5d0e1608afa73c6f89e203e1
- TLSH
  T17521AD26E9DB10B06CB3A036577F6F1022B391730119C5C13D7DEA522F3192AA858AEC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/js/core.min.js
- Size 2.9MB
- SHA256 0ccfd4f4d20299adede9db0f9a94dfc1972d8d9ae2164672f596b08bd995b1c4
- MD5 8113ba52d8312b02d5d2c62506470938
- SHA1 0c4084421ccf2b78acb7c7a6d9c21e27ac79e178
- SHA512 1baa43e799c274572c1b4d7d5faae3826b2c7ce3514e61a3399892e59a181fa558fe647cf88e7afa4af643ce66635a78b7ac0934c316c4c78808fb31c24d929a
- SSDEEP 24576:T/2vbACXo5AdVOFhRMWHZo6+Crek7RzLdPPaSDMImYEiQ87O1enpNzY6BblUZkE9:IRUFheIT0LMNnEKE
- TLSH
  T1ACD529B13B80BC4E13175F66732B78D5EC1D195B1916814BE240BC6166E8F3BEAE8633
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/js/csi.js
- Size 1KB
- SHA256 23ff0fc42e9974b69bd8139f7e5a7ce804b622ab1a21ab1411ec070e835967e3
- MD5 cff8f360ba2029d7564511ddc7eac0d2
- SHA1 6b712c8bd49b04dd1f8f9f6edc634febf6cad3ea
- SHA512 4332e1aff4f3e937f6dfd31f5a08bd9d93a55b549295d4e2f5cdf0544159e1bb4401d91c277c91fcd3f220c19feb16fe7bbf2114f079c6664db00eb0d3bfa0a3
- TLSH
  T1C32103495CA73200853163617AD3A904F672E67645169180F87F91079FB29B9076FFE8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/js/i18n.js
- Size 29KB
- SHA256 80d2710da5bafac4cba54f65ca15bd4ef7a28b435d9cf6f337ee79118f57e2de
- MD5 a61b85c26a37ca791972f1a9b38360ae
- SHA1 449bdd51acf3e14cd438d90917aa49311369f4ca
- SHA512 ea6c639306881835bf0d3f61e741541bf317ce2da7dfc2c96730a4950a79efb7e47ab601e29b558c1a9ba9a9aaaecf567b3df354eeb47e66d13ba11fec42ade2
- SSDEEP 768:QKtH2dUaKCeWPxpvb8L2L7J6Xc3AleRQcUUcWY01qdac6qGAY77:ptW6ahnpvb8LHs3AleR7cMqd2vX
- TLSH
  T1DED207DB7C85202752F2414AA2229F96F208078756284273FEBDD39D1F374B991F99E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/js/license-aesp.js
- Size 3KB
- SHA256 c955ed4bc4cb444e31d4e7f9d699d7813039a5d215914f908cd67eaba33eb54a
- MD5 c75323f136662493225fdd11b515a4e6
- SHA1 6727466a78653c7c5353379404e41a13d1d9f910
- SHA512 4b5bde350cdc6d5fc82d4a4bd63126751b3f2fa134ffeca41f678ec70bd7eec46cb998f8be5d9dfbbed0a8f0daf10445ecc1eab2d2f9263b3a4f39994f8436e0
- TLSH
  T18A6147D83DD005852F925357653BA0D8E56E95EFBC45DC4F812198C0FDAC527ACD1B70
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/js/license.js
- Size 2KB
- SHA256 c7786653a9394fbb5fd4bdc5ce0d5d7b1d3a45b6214b5c7c663a525bfc296638
- MD5 ac96fb87ef5a01ed17a4a0883bba15ac
- SHA1 8ca1fe29293fa762dd213a88839e0d7dcd592f72
- SHA512 7641d3578528e331198c0dcfc78cd2d1b71ad44c436681acda4e0a44786e6974a85763a9930bafd1ccd8bc91f1b0bae0da5015ed74f0277eb7046efbfe1ceb0c
- TLSH
  T1E3510F8A3AC52CD457D30BFA651FE5C6E87DAD033D99452BC100BCD07A94324C68AF75
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/js/logo-shhh.json
- Size 41KB
- SHA256 24211148c0a2458ffd9e645dd3098f75825c0763498825f19744de6d209d08a7
- MD5 199f12b1735a495375e3cb581ac61b28
- SHA1 faeace8c57f6460a7c095033c50f1879daa4a0ba
- SHA512 918df6ea3ec4ec12609c2452630da33fb5e6e799d770e1247eebef39cbf2ff6bb7ac525c00b551e84e5e4f826b7b1f7b13e5aec61f9532d910c2b887e7a44bc3
- SSDEEP 768:avWPWRGx3c7W07WS7WFQ7W2MF3c7W07W27WrQ7WM:avWPWRGx3oW07WS7WG7W2MF3oW07W27H
- TLSH
  T1FD13FB86C66101BC9721AEC2CAE771909EC4E15709C98DBCFA7C7D2857B85EF4331B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/js/lottie_svg.min.js
- Size 236KB
- SHA256 c9cf6870d0cc66451d2d653063ddbf6f16b3f579425d7b6122c48987211385ed
- MD5 1e7954c91bd73c3fec5c03f0aef9dde0
- SHA1 22ab63ae09b314a1c4048c6d7a96d8c9a6cfa353
- SHA512 65f98d4c20e3c2f1dc501d10ae14586fe2be34ef9e5e33502a8ec819de80031d1d5a51b87445eb937eb001d932ec8c4cdb50be5718d64fc00ed2cb99297b5f21
- SSDEEP 3072:EzUOIj8SqbmGbpJGDm/6oxf/W8xc9EjyM1FF7Dl:E0j8SqbmGbpJGDy6uf/W8+MJ
- TLSH
  T198342A997254643805C541A9903F0907F632292E246AC45CB76CF4EFACBDD8E32BFB79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/js/main.js
- Size 139KB
- SHA256 b7f6c3f6e702b2085e6bb2a724689a69d6e0b50c7af648cedc42de09f4aee67b
- MD5 8d9cb45e681df3097bba4a34b5f3f62a
- SHA1 03a6ccec60e563d20442882fac52544507d42c03
- SHA512 91fea1cad28f4cab6c0ca3fe4945bcd9d75f6cf0123956f5844e7a1900910f02b80e67e4a7e967a5a2efbf790732a9c822f3f307046e693856500cb951e1ab8e
- SSDEEP 3072:mqizQudPZWQbEjr/wKT8vjmEXRC5ysjlroj4RVQY6vdfoYmrxaC2ZJMfJ3l2qdt6:2z3RWQbEjr/wKT8vjmEXRC5ysjlroj4M
- TLSH
  T108E3D7043AD0744D13CA1F3B362F74E6F69A186F6844494B8506FC7076A5A27FAFA933
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/jsx/host.jsx
- Size 40KB
- SHA256 09279fcd198e25e337bf0b085d614ff026793e6e798c30f19c6c9bc198669722
- MD5 3180c00b88ea9e2bc6ccfbcfb8dbda71
- SHA1 907aee3bf2fe3233dd1e1991c7ad4f9445f4c337
- SHA512 d3ea58997f39b32ea6c929f435e94a4862ce938402154c235551301117f2df2cef9736e0083e2e097120c0df2e9887cb322ef0d0c51bac00c5a965b56f2ef22c
- SSDEEP 768:+5ChaabIAIQMijK0dnN1PlfKdbxi+ivXpdVe7yjxKULIp/NV0RPbmAeYxJX8/uBB:QztkZnEg+iNaytKW340b
- TLSH
  T16813554F6DEB2026B65321391BEF6405B6EE9903224DEFE4B86CB2545F9046481FDFE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25
- Target
  Shhh_v1.1.3/Shhh v1.1.3/com.noom.silencecutter/presets/Shhh_WAV48k16.epr
- Size 15KB
- SHA256 357c4cbffdc9f82d5de42e8548cf57b4e9802d79c2336688bf2783250137e8e8
- MD5 e4b813a801a670af5f83a33f341224bc
- SHA1 829bfc353ad2bbe9ed5a8c278d9ca33070b1c535
- SHA512 c16925e08c12d8b4fa72e381dba2d5088c7ccbc15d1240c8920acd52b86ed0d10bd9034eb540b6e622c883c7a72a3520a3ce5dc163017f1c0eb4771f99d593d9
- SSDEEP 192:L0f6HNfUJVFDLkBnqnVk90lz2N1Aogl01PK:on
- TLSH
  T114726D1D3E8EB7D4C1D6C17F0AB389B0597B0EB232509129EC32A23B136EE492517D76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral26
- Target
  Shhh_v1.1.3/Shhh v1.1.3/install-as-admin.zip
- Size 1KB
- SHA256 2804891d683079be24183a4f1378fcabd2558417a913810a6acddd74bae4fab9
- MD5 56924a1a1410cf381424ede0bf06a1c4
- SHA1 e74d5226390601dce53423dc98392d1a79efece3
- SHA512 aa30a43ae104cfbc25581808b6e98a6b4e0f77a30996c3eb8d7365f8e6d3d67e59a051a64ca0801a7ca3f4d057d0a01eb7cf4dcc894398c201495c9e066da80f
- TLSH
  T1DB21030CC9D28224FEE6E3F70C0B0583F0B052E823857093508668397ABE5D3AC76547
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27
- Target
  install-as-admin/__MACOSX/._install-as-admin
- Size 765B
- SHA256 1f7d1139c5a310988381c3b5d77464c1676041b387db0a2aa335f674067cc1c4
- MD5 c5e93a70e2e3a2e921a743077299235f
- SHA1 81e49e8187058bc860aa73f4b81aa14eed285734
- SHA512 3ff760229ded40858a6f9f09a117f62aaed79a881ead4299ebc8b9088d0cb86baaa097b870f2b6e1e8af786f5956d1509045bff2e8654fb6bfc23e0920a5a25e
- TLSH
  T1D401DD8C13D19E42D98406FCC6C8F6547160A8F9945BEA6BBEE8C8201E84E103BB17D4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral28
- Target
  install-as-admin/install-as-admin
- Size 750B
- SHA256 280cbd4b0d8fd191738a29c142c1293d0050a4d081ceb63853e0e92341b2673f
- MD5 5ff3eea4e7e0f076cff6501865b7ea1b
- SHA1 cbbdf70da45bdd5a09d3da8f727ca9a03ef7a15d
- SHA512 ea34737c9e57ba1d41f3956c963913fb5a83baef04b9b1c1ebd0e5cc2d3d93cf5339a67407467e724998bf6e6f493b5d74653c18a8d19d9ea55c1f59af0ebb84
- TLSH
  T11401758BA68D5824CBC8CAB07654C25C705BFB4DD118F788A147AD475C2D13CC0502C5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29
- Target
  Shhh_v1.1.3/Shhh v1.1.3/read.txt
- Size 1KB
- SHA256 71800afe2f92081baf635c59ef0ca46b993cbfec7aefd5d200209a399cde1e84
- MD5 676940161fe5f0e04a740f90aee4294e
- SHA1 f6d186bbfcc03e1342008ac3720c2d7cfafd9e47
- SHA512 c5c9aeddabcc3a83d6db558ad4fb27535e275f4ff301a36f8125cb84484e9333a5864317129790e212e601b504e866d85dc0495a23c74c80722626a074f916ac
- TLSH
  T1F121218B075FAA5CAB02D547E188B029D25700FDF789B59960F0177E34F1334966D64D
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral30
- Target
  Shhh_v1.1.3/Shhh v1.1.3/Качай КУРСЫ CG бесплатно в Telegram !.html
- Size 434KB
- SHA256 fb9cdbde832c9e6ed5cccda5b105e937ad1671c6d95e6563519d332b924400da
- MD5 71ff5970387b176bad4c0ed490abfc1a
- SHA1 87a4fa47ee30f03a2445c50949e6d22c1dd1d17a
- SHA512 8c477023c64d7d8a63862d6656f07cff8753e4e0db4e17648318495488293c271cb05339bb6e1359d7b8fb8a17046bd684eb3dcef2f166246d308adbdb20d1df
- SSDEEP 12288:1OTNccbx7rO8cWtVH6oZgunjOf5cohxIZyc:IxvugnnQdhWZ
- TLSH
  T1FE941A3699CC77E11338EF6FD3FD1E112A59C491AC511E69A07C0EB906AFA4C398F198
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31
- Target
  Shhh_v1.1.3/Shhh v1.1.3/Присоединяйся в Telegram CGPerec !.html
- Size 423KB
- SHA256 718da194e426adfe5c6b73b5fc71b756859d1622c2a71a7932b3f273065e7254
- MD5 dae20a9b16f26ad046362d5e944d0651
- SHA1 44eec3ebf03dcd59e2cd88ae8946bebf8ca88ce0
- SHA512 492c9bd64ab0c858bd98327c813c320a5dce630d3e29f369cfd01b47179d821bce597193987536aa96f385379567feac5dac6f7a6679acd935e31705f3a420e5
- SSDEEP 12288:ef5cohxIZbOTNccbx7rO8cWtVH6oZgunQubS:8dhWgxvugnnQB
- TLSH
  T1DE94193699CC77E11328FF6FD3FD1E112A49D4A1BD421D65A47C0EB906AFA48398F188
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32