6ebd332226816aadf297156ee83eb6954d108d4f9223181bdb82f2d43e8d3bf0

General

Target
media-telegram-downloader-unhatched.zip
Size 571KB
Sample260816-gzdsbsbf44
SHA256 6ebd332226816aadf297156ee83eb6954d108d4f9223181bdb82f2d43e8d3bf0
MD5 8463a318ab2112926e477f0735924995
SHA1 d60e52ecdd70bc8192b1098bd107fb7addab76cc
SHA512 cae5483cda0a160fcf05fd57538b7f078852dfe9809f4d70a939c316a83a6313c930bf100622b9974323a24c6f88bc2071a39011da3aa3290e3707584b4a90bb
SSDEEP 12288:EdevMEkFmHkx6wlOMWROC/FTeHo22Qm7NzofOrAHmN:QemF4MQOC/gHozN7NzomMY
TLSH
T106C423195942D2CD83D43F7E8EC0BBA03E7990EBEB0DFA0416DA36917C95261B3D491B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  Application.cmd
- Size 30B
- SHA256 b0f0b6e38f77c518ebfaf691d729636d82cc59dc2a329d7454e11f74a2cb2d3f
- MD5 ca65f982795ea40cb241674afdf842f9
- SHA1 c5a1bd7c53b8e278c0be243269dc951104902653
- SHA512 e1c70febe324c2c3249731c904525a8e7aee622c1ace763e29f89bf0559d4e107a631fee398737384fd22aa6a38043598e50df2a85ad70f314681b53ca7bbf9a
- MD5 SHA1 SHA512
Score

6^/10

discovery execution
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1 behavioral2
- Target
  package.txt
- Size 302KB
- SHA256 830ec7352972fd1eb24fcaf72349ef9a27dd9f26f24552d6b68b87ffeada1212
- MD5 78d7a7e506019d2c63fd7ffb77ee7805
- SHA1 e1fe033a9a7a7fdc2eea87b460c28c4586eeb4ad
- SHA512 edc4bfed53e5a80491319c324d2c1b79ffdfd80330f012085405778a67bfe8449beacfbca9b40e8f420ee628b98ee82acc7854c675ceeaf595a0e92779c29965
- SSDEEP 6144:2GukR2OMCRLGJc9TzKIXRSunEmKc2dAn2ZgNxFtx:7u3OMCRCqAQEunEh5dA2A
- TLSH
  T12964F8D0948928D5FAAB8591DC62CCDA25BB24F1C74E168E4F0CF9F83608593D2FDD92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  unit.exe
- Size 852KB
- SHA256 bbd438d3d7a59152f1dd5e45bb8d22ee1c07f95cfe42cebbe756aaf4feadc875
- MD5 d56c0fe75c39022348c381b524a8fa75
- SHA1 129b0ddcc245b47bfe4de26bc4829abf2d6f0ba8
- SHA512 3d980b1d1dc022dc610bf32d842c6ea445c3cbffad23c43854143124a9e1f2f81bc3c1e0b29f8c709dea6da13c7af1b02e173253bb6a3de7dcc1f2a20d2043ba
- SSDEEP 12288:d628L2HCSGt4FMz4+PUlv2kyK5yB1Tazo/UCjTMnvKdsoFwhiHBjBZot:02HCSucMz4CYbV5yBtaziU0TcSNFPhL
- TLSH
  T155058E59A27401F6D9A78134C9569A4BD7B2781607205AEF03E06BB73F37BE11E3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6