d039f79ccfa0765e759e932d264b4c173da14cdafb575c75387dd7e41b29bbf7

Sharing

Copy URL Twitter E-mail

General

Target
mond__by_apexxx_sensei_dcly2hj.rmskin
Size 1001KB
Sample260815-j6v2asszes
SHA256 d039f79ccfa0765e759e932d264b4c173da14cdafb575c75387dd7e41b29bbf7
MD5 19fe6ffcfa628d81891f13144f81ccbc
SHA1 e6553a5f85399467a6ecf1c113b01175c0aae55e
SHA512 607490c220ba80daf80a7987d2667c8306cfd0791d2e3fb88ad4a6977803930c18aaeb6924039924aa205e5d219ab6518ce7373f50a3cfeb60556e6c68f1a25d
SSDEEP 24576:bQzOoxMbuDseTCUNgZyx2UlmJfVeWA7Dw9wvOPB:xbKseTxGMAUQfVEnOPB
TLSH
T10C25334AD7085BE2DB7A3B3351350B01964ABB8B8930283DCD6EDB7A8A11561C73CDD7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  mond__by_apexxx_sensei_dcly2hj.rmskin
- Size 1001KB
- SHA256 d039f79ccfa0765e759e932d264b4c173da14cdafb575c75387dd7e41b29bbf7
- MD5 19fe6ffcfa628d81891f13144f81ccbc
- SHA1 e6553a5f85399467a6ecf1c113b01175c0aae55e
- SHA512 607490c220ba80daf80a7987d2667c8306cfd0791d2e3fb88ad4a6977803930c18aaeb6924039924aa205e5d219ab6518ce7373f50a3cfeb60556e6c68f1a25d
- SSDEEP 24576:bQzOoxMbuDseTCUNgZyx2UlmJfVeWA7Dw9wvOPB:xbKseTxGMAUQfVEnOPB
- TLSH
  T10C25334AD7085BE2DB7A3B3351350B01964ABB8B8930283DCD6EDB7A8A11561C73CDD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Layouts/Mond/Rainmeter.ini
- Size 1KB
- SHA256 f7c9d2ef56795bf5a3bb0c73be080f43078a4becbbde96ca66bf28f830572d43
- MD5 e0d63c41308c9f3357285441a8e1c104
- SHA1 b206ffe9d9a63cd0318875af5863cf041c3e72c6
- SHA512 72a45d5d88d95a98ebfe809b0f24e2bcfcc414158f01a6a12fffa2caeda85b4e6456ab25bccbe2add1b73357a7178026c5e8483e0471fe05298724b560d681d4
- TLSH
  T1CC21C5631AE4442CB1B23B99EE79B6725B36FC98281DC05CB0D141048CF6A0269537FF
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral3 behavioral4
- Target
  RMSKIN.bmp
- Size 93KB
- SHA256 a28f7ed3cb1b34684d0a727aa681046f48d5a90fb0abd82843765fff820a1ebb
- MD5 641db6615d08d7814e138047ae114901
- SHA1 982563a958f7031242efae9f29595d2df2b9cfcb
- SHA512 c49805ce92160fb4cac4d9ccaa8e30dea53a8e38e150f3d8a4bc97de20a319354aeeb74894a7fed8270f4fc3cea0ffa5cbaf6284eeb2c6ca319b8dc780e796aa
- SSDEEP 1536:ee6OH188ZK/z/CVMdZKcUA5Bhg3kCuHLEz4DrN0chvZaBDmIDKi5NTeBsO:r1zZWz2aZrU4D5HLE8DvxafDKmS+O
- TLSH
  T18C93D7263E87DAC8DD5E1CF0C69D1EF904A7BEA4E210607B66443C2EF076DE57272294
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  RMSKIN.ini
- Size 126B
- SHA256 6a2ccb119f586b7acec3c2beda401999554c1eea58144896c409f04435796304
- MD5 e8c5b202dbb85b138fe139af84b19e0d
- SHA1 1f854ab5b00775891b79a19950dc0aaa426371dd
- SHA512 3270a3d80d5327bd7692969e2f6f73a7ef596534c3b4537d12bca7736a685c784736a94ed82f3d80a0c5d9ca2c978cc5605455092f829619c2c2f0a522eb24b5
- TLSH
  T164B02B00545004A8DF47580510667B00F243300A018CFA00600010A4C169C0F722C0B2
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral7 behavioral8
- Target
  Skins/Mond/@Resources/Addons/RainRGB4.exe
- Size 1.2MB
- SHA256 e4814bac41a57772534536f484bf0d527a555a3c22b53f70c92e35ca664f1cfb
- MD5 3612d6168b8c5f7c5eeea57d22e916d3
- SHA1 39c43a417616d61d24f376a64fd4404427944830
- SHA512 a8a47297498591995eb3918743537d735384b1ac661b651821bfa8b6eb907dd1af0d56282cf4a4b7a7b5176d7ba53f36a966fd5450883485b2fc769510b12622
- SSDEEP 24576:9tb20pkaCqT5TBWgNQ7au4/M0xEeLmXfHeYU/6A:uVg5tQ7au4FCegfHo5
- TLSH
  T1F945BD92639D8362C3715273BB25A731AE7B7C1506A0F45BEFD82D7FB920121421E6E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Skins/Mond/@Resources/Addons/RainRGB4Readme.txt
- Size 3KB
- SHA256 cf273303fb0557a03c0b800529e5da6b1681895a4126cba08d28e9399f0ebf0d
- MD5 8d5c3070b41ff278803468cbf45655fd
- SHA1 187fd09d7eeb38b7ca40f7423a84dd2e796f6408
- SHA512 b6373dfae20f4cbfcf5ca4f7de964672ffde73ffc217b856ee846dc24dc1e8685f87b077955ecea5f681a8aa7595a9bd3865d55a58428735cde32ac91572230e
- TLSH
  T1A85176676347133354D302ED671E22D1775911F8323752686478B73C360A9B692FAAF8
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Skins/Mond/@Resources/Empty.png
- Size 17KB
- SHA256 198551d2a3e403aabed9baf618536f22c6e00f96e2467d21bb9f8d291d2272e0
- MD5 16c40aeb7a73598e4b6f0c8ffd5d1664
- SHA1 ff4778184f35353fc1de65f0fb5f00a930e9c830
- SHA512 6c6774703c1064e3d035c01383f7e73f45f749917e7629bd4f90358828b30d5edcede046e9d3d866229cf47d6ca4f9c3e11a308183d1a6be4a7d737b8f792fed
- SSDEEP 384:NXE056GGqYxFBS68GkjBs6P07JoNkVJK/P6S4JwVGTw1vdi:5359Gqg58sa2JHKn6NmsTwXi
- TLSH
  T140825C9F71113DFB14D55591CA960891FA98824C6F03B818BADF2C54D88EEC0F39BEB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Skins/Mond/@Resources/Fonts/Aquatico.otf
- Size 15KB
- SHA256 c295c63fa1f3d14d2c7b6c36b75bb097b4743b3f7dac728812864d27e7bff1af
- MD5 e5520ea0fac2e7a07f88fb00d7cae41c
- SHA1 2472badcd2d0793866bc8a0a977cb856176c8bee
- SHA512 c35fa83902b20a07c99c8190af58a5e5bf5712f55a0293e653e46961f7c91f880c5374f21a00482b88bf9f850f75e500504cfaa7db07b8d199a3ff7d42abce85
- SSDEEP 384:gLZ/kh+YU9QDPtXmdBcyLMojqf8ZEmIL5RR/vrlPo4:wk/AQDPtXK/AojBumIL5RR/vrlPt
- TLSH
  T1F1629D6EF7A04742E7DF033149B287211739BD41C62BEB4DE8C8AD266DA21B07E2C754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral15 behavioral16
- Target
  Skins/Mond/@Resources/Fonts/Quicksand.otf
- Size 28KB
- SHA256 2c81dd94ebab720f768b88de0e4ec953a5528685b64b1b9a0902835f39facf83
- MD5 a1d3f9c43a9bb11db235cb6e8be77f4f
- SHA1 ccfc43aa80b53cf2df22f9dca0bc5174f3ee8c27
- SHA512 08d7b92c17d2e6b33537fece073c4c861327e763486464f756d4f9c496de1adc4c95c48fcaf1ccd82ea4a16106b3f8dc5a30907110f6dba3a950c4ec0605685a
- SSDEEP 768:DkRVXqJLHYD5NyeO/ydTMYTtPGDa8tIAXHpi4PwyXRU9d:kVXc7Ik+TMYTtqa6q4PwLd
- TLSH
  T12ED27D6AA08BB34AEAB1B53D07C1A33AEE2075756CFFD28604180AF7555C1075EECB13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral17 behavioral18
- Target
  Skins/Mond/@Resources/Full.png
- Size 30KB
- SHA256 c776ad3ee293cfa17f47eed04be214a9f3ef3f25bb49195634d0bed0c0283f62
- MD5 071bac8121374b525d75dbb95b4f7d95
- SHA1 fe2d327530330caf1283113e522260f0cf5feb4e
- SHA512 dc4965baf12cc90cb72ecf4817058d4d7465f73778133b2b4f22539284b0735c3f643a116eec84959e3090876315613b9d9cd43f96b83ed63f15770e63ffac91
- SSDEEP 768:835nwlrbB3QGDgGm3VNO68UlX09PuisRLv1ZhUXXjpo0/JjK:gSfgTIPQti+vbh4XjTK
- TLSH
  T136D2E00E9126CDB9552D3206399D015B93DE12AC0EDB0A7950813A5FECDDF1B7BBB2B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Skins/Mond/@Resources/Language/Language.inc
- Size 9KB
- SHA256 fffa125f736fce5c85ea68922ed54fa5739e3d10f69b5028343cae407a4830bf
- MD5 1decd8d6f08c6a739a6453f751f074f1
- SHA1 7be1815164f400eea8b3a0beb57d7b9171efaf14
- SHA512 9527ba030ab7c94cd35247fb9f5ecfffc6e2b95cbe42485fd7dd18229f218275d3e455a45637b880581a1a2a717ad7bf7e45844581f1fa590ae1353cae96e01e
- SSDEEP 96:r+1dGEngyW9FXoue7sOAKWAK6UAlV49Z90Xq3JzlgKk4++MAQVrA/MxU8I:S/GEgV8Ao4jSqfgZ4erA/MS8I
- TLSH
  T1BB22355EDAF90008B6F36B8B6AB61094CA37BD52587DDCCC12500E4E49BDA10ED21F7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Skins/Mond/@Resources/Location.png
- Size 15KB
- SHA256 50f2f742d790023369a0a3be197f289536a53182958842c786f5885562088ab5
- MD5 0bcf0c26ac011abbe4675076aa24c06d
- SHA1 824d0b9e765282b400436c5e70761422f73280c0
- SHA512 1b02b810b77ee76ba9033d9a5388f3580a799a47ffbebcc2806098e167091b69c908e945ac1f34dbb060983e2d6b1d6a07e3111d2755e3e212f4e95759aaba9a
- SSDEEP 48:e/6Mu+k29W8sEvPxN+Y9rB/vfqBCDBLq42LbCtsc5Nd7ec3ycKhtRVCe7:eSWkEWRmxNXrFktesc5LPyh3P
- TLSH
  T1B9728624FDF17668854EA6362ED524055C770B83CA41EC81BBCE4D572F12BAECC9F186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Skins/Mond/@Resources/Next.png
- Size 14KB
- SHA256 ec64caee7f68376a8f819bb909cef05fb2152317009bd1fdf4b156d874beb27d
- MD5 805a3f6df3810c09eee06d55b7a09527
- SHA1 f41ca6d932af291bdd75b18031d4a8e5dfc74995
- SHA512 a10db1cc0aabf4c027c3ea510cc98b4dee8521942174fae9348a33290621cc3d5e95894d8d2214613e773e40e0f83c95c30cf290e9f710ffda660ce4e0ec1da0
- SSDEEP 48:6/6fu+k29W8sEvktLtNxN+Y9SLBCoWsc53/762CCCEBDnpseBIRG:6STkEWRFtLtNxNXjsc5z6WDpb
- TLSH
  T100626165ACF23410B545EA322DE11449ACB30683DEC09D82FADC8D766F10BE95D2FAD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Skins/Mond/@Resources/Pause.png
- Size 14KB
- SHA256 11a58d697bcf8a3a8f275e2a30c2ca0f89b509b15cf46f996fbb9840ae0439b3
- MD5 9119dc926eb1a5c5a5bfaf7544903b5e
- SHA1 7306c56b8d57881236bebc357449d479bf9f238d
- SHA512 cb06bf5cd69219bc32beefecb628b5b8053fa532daef81146865f601646ce4408c5ed2a4f397bb5ae4792ab59611af2d19bda3f8ba20f29be0768b1c7f37ee6f
- SSDEEP 48:6/6fu+k29W8sEv8xN+Y9b/7/yx/PBCL+ksc53/7sdtlKHH:6STkEWRVxNXTzkYsc5zsdtaH
- TLSH
  T136626624BCB275A1A199A5322DE5280D9C730947D9C0AC45FECE4C2A6F11BE96C1F2D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Skins/Mond/@Resources/Play.png
- Size 14KB
- SHA256 4d53e42d1cf17681e6baa9b765851999727c0047bad02f66d554754dcd79c6e4
- MD5 3a8a2fc07c4ea2cfcbf1c89fc69a928c
- SHA1 a94fe7f3cec9a17bdf31fe9a35a769705c3f706f
- SHA512 9e3cf53492b3a2db61dcff626e30aa8add7353f43cf015f4d8244ff23d1eab0fc0c1d918bdfb844f35340a8e18d576f9f138df1b5fe5b44eafad0e0e81a9842f
- SSDEEP 48:6/6fu+k29W8sEvlxN+Y9CSr84Sr8QsSr8lBCSSrdlsc53/7NncbplLN+sgUExlVg:6STkEWRExNXfrarBrDrjsc5zNcbzB3
- TLSH
  T1AA628229ADB035E0E28AE5322DE62409DC734587C8818D45FBED5C6AAF00BDA5D5F283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Skins/Mond/@Resources/Previous.png
- Size 14KB
- SHA256 34ef8f845d5002df0c18fd1c647996259bb0df5c819599d28dd97de774357336
- MD5 3525bd92731f829060de1917b311a920
- SHA1 710d30f9e23a71ab3639d2bbb99c92c82955f9c6
- SHA512 b9c333203bf80f43793e76e6143ea43787fa8bbbf05d05f6348ec98ff39fbab138d5d7a35c9b8e1d2a3eb7b1b709d08be716ec0f6472860d8d83644a55410d98
- SSDEEP 48:6/6fu+k29W8sEvNxN+Y95rfrQzrlBCJUlsc53/7eoQM+Y3Cvrn/80OB:6STkEWRExNXlju3sc5zeoQG0TOB
- TLSH
  T1C6628225BDF23494A5AAD6331CD5290ADC334947CAC19C01FBDD4C566F00FE99C1F192
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32