897117e6f8cd49bbf7b4f0d0aa7741151f266b6dc4474e172b5d3fbd4a537a4a

General

Target
Insta%20Money%20Latest%20Bot.rar
Size 5.0MB
Sample260817-cdvfqs1eqa
SHA256 897117e6f8cd49bbf7b4f0d0aa7741151f266b6dc4474e172b5d3fbd4a537a4a
MD5 acc51097085b13d4c80672480ccd09b9
SHA1 6f856cf9d2d4b87d509a848f61f89a742065797a
SHA512 8d86ba6511ae835a5ee0ecef4ca861910091bd256e77ecd3f7ec0ba8004bb9f35a20d8aa81b30cbe2aeee7b9a433b574fe7957b07dfd1eb8df81b0223447ce24
SSDEEP 98304:zwa33bq8vLEQ8OqE9J3kjZ47iB8IjwMLl1GL4CYWETh9hCR8A3Nxj5tHl4:zwa33WuEQ8G9qjZPRLmLSh9hC8
TLSH
T11436336F61D8476E34D056E8AA271024C2EBD5C62382FE24D131C576C6B2DC69EDBBC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Insta%20Money%20Latest%20Bot.rar
- Size 5.0MB
- SHA256 897117e6f8cd49bbf7b4f0d0aa7741151f266b6dc4474e172b5d3fbd4a537a4a
- MD5 acc51097085b13d4c80672480ccd09b9
- SHA1 6f856cf9d2d4b87d509a848f61f89a742065797a
- SHA512 8d86ba6511ae835a5ee0ecef4ca861910091bd256e77ecd3f7ec0ba8004bb9f35a20d8aa81b30cbe2aeee7b9a433b574fe7957b07dfd1eb8df81b0223447ce24
- SSDEEP 98304:zwa33bq8vLEQ8OqE9J3kjZ47iB8IjwMLl1GL4CYWETh9hCR8A3Nxj5tHl4:zwa33WuEQ8G9qjZPRLmLSh9hC8
- TLSH
  T11436336F61D8476E34D056E8AA271024C2EBD5C62382FE24D131C576C6B2DC69EDBBC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence ransomware upx
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1
- Target
  Insta Money Latest Bot/CleanControllerImpl.dll
- Size 8.7MB
- SHA256 868b9ae320893804b68bfebe75800f4f589c7836f2120885c8b741fe1fced220
- MD5 c595fbeae263dd38cd95966bf85aab55
- SHA1 9cad83fa15d36f9becb83434f28f6c294a30090e
- SHA512 160001e14cd2d31eb90b8322e91237821e6b0495304350b92882fb5f650e6999cfaeb8ac667c876c3ab7c5d4b33064251b813b1a0f7a45126280a281480204b3
- SSDEEP 98304:twqljKdBFXiDq7BIRIEdoPJGmoiAU/tGizZUaBoV:dFKdBFQq7BHcoPJGmo3U/tfeB
- TLSH
  T15D968E1676E400E8E4F6C278CE678503EBB2B8550731D7DF0690966A1F73BE19A3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Insta Money Latest Bot/Insta Money Latest Bot.exe
- Size 700.0MB
- SHA256 4ca03bb7a95f6a6a2a531094277c440a5dfe167e55b5de3e365e2b72ca5b2962
- MD5 ccd16a74a874e38e16ce6430c307c293
- SHA1 22df5ccca0e24a7143c623a869c7acb5b80f7fa2
- SHA512 3e2d34de096b0c399005617b72eea1f7c0f0b755fc010992a6cf87864842c4092381f79380d961d7b01dcb7e3d923482b419ed7929274b624a02a193a2460e81
- SSDEEP 1536:glsedG5OyNzbtweGBfTH2pMVH3L9ikKGRp0cgotE7RbCxuf+Uf1lPLB926eD12C:giFOyFbtkVP5Lk6p0cfARLfnjeJJff8
- TLSH
  T178790247AE63E2FECA313A321C4FD49016EDE83B41B8976B4370F5BD5D64A946A00398
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence upx
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3
- Target
  Insta Money Latest Bot/e_sqlcipher.dll
- Size 1.8MB
- SHA256 1af140a4696ced6246df6513d6210317c6e4e7da55c24cac8b6e8357d9f770fa
- MD5 46da86eaee9f54f1544fa317bf4d07b4
- SHA1 cf0ee479aec0f5098692340bbd8463bcc4160a06
- SHA512 5ea9516c6e74a374ea02d485eed2c09855ab324731d8428fa92a6ae4827874709cbe649d5b6d6120c5d358b16afe3eb85abcf21c873f25d6f8396302954407fd
- SSDEEP 24576:NOAtE1Tfv9L8Y4D2OyiNilZmD0PgZCYyx6A8YuA7x/PME87BA2sufiXc4:N8tdy2OgmDGdxGYH7JVtc4
- TLSH
  T123857D0BA2B900ACD8A7D278CA17970FDBF174151764ABDB159086952F23FF61E7A330
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Insta Money Latest Bot/settings.json
- Size 161KB
- SHA256 8521700f4958f0b919fb6770584a0bc25b64fda4e347e95d156e9da2a1ee3eb6
- MD5 72bdb4cee75cf77ef4ff35a7fe81fe7f
- SHA1 25ecca37d7ec3aba23da4aadfce98010b7d02c6d
- SHA512 8f4579edbde1944248fa2de49541092c153c5f5ec2f7ea5f6274b39d0d25e456c3c9ebf4a4a6b46efeb34ee8c8772e90d146d088cd14b5fa0999a4bc57392891
- SSDEEP 3072:ZAYOgjz4Y17/y/4D15f4Otk8KSQG3a58AZQDq/Yb31BHPHsOZlmuMt9LR:ZHGYdS8v3JAVYb3rHPHFUuW/
- TLSH
  T152F313F105795BBF164289C47090252CB41A8659D872F94C08D71A93DCDAE33BEFF6B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  Insta Money Latest Bot/utils.dll
- Size 1.2MB
- SHA256 153db5b04b487099fe45f0a96faa077d2230f0c132ddbedb5334f9bdcb779093
- MD5 4784c4f0d07907861701e3941835ae8d
- SHA1 6c6f23d1537ea5cb37c3a56a2e34f0ca75e88fa5
- SHA512 20c9c22801d242c71317bc7d0d2453c42dba93ee6a780dd412b6ddac81585e0f8663fa7db234cd20ebdb2d2e4c7742f7daa73f4d146dabc4a10921a92d244bc2
- SSDEEP 24576:h0hlSv7cEYMQkrSsQkHTpOokYc+YSP2IzHR57jcU21jqJjepi2xKxi:h0jYcerSMTeYcoXcD+JCpzxKxi
- TLSH
  T1F44533467DDB077546690A45148B6CD06003BF58E6B4C0F2CBE97F7FE90A344166A4EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

UPX packed file

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6