04ca2aab39b05a7e1f94721e6d25f3df8ff9e603266ceac101329a4bcb724ee2

Sharing

Copy URL Twitter E-mail

General

Target
double_zipped.zip
Size 9KB
Sample260817-srynbacb62
SHA256 04ca2aab39b05a7e1f94721e6d25f3df8ff9e603266ceac101329a4bcb724ee2
MD5 d662c87265c676b4101b83934c2ab3a0
SHA1 fa0a58c99dfe55a0b14854044f75f2626c22ae88
SHA512 7b720ef8115877c5f7bbd5120fb44b8ae506535217f7faad6698da299742400207ed98dd01a2f93ed2e1e5899f3797ecd71c635634f5762f541147c629edbd78
SSDEEP 192:gSu88LBSvtCrq9wTQcE2IA755pcGqHjusOJlQaM+D+Uc8Oq4Jb4LOa1cgbw8p:H89SvtC+9zY5c3jBOJlQp8Oq4sOR8p
TLSH
T16A22BF8D90E9F23AE53AC2B0CE1C8579CDD98DE38722AD5B109B0D4519A27D348A7B17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  double_zipped.zip
- Size 9KB
- SHA256 04ca2aab39b05a7e1f94721e6d25f3df8ff9e603266ceac101329a4bcb724ee2
- MD5 d662c87265c676b4101b83934c2ab3a0
- SHA1 fa0a58c99dfe55a0b14854044f75f2626c22ae88
- SHA512 7b720ef8115877c5f7bbd5120fb44b8ae506535217f7faad6698da299742400207ed98dd01a2f93ed2e1e5899f3797ecd71c635634f5762f541147c629edbd78
- SSDEEP 192:gSu88LBSvtCrq9wTQcE2IA755pcGqHjusOJlQaM+D+Uc8Oq4Jb4LOa1cgbw8p:H89SvtC+9zY5c3jBOJlQp8Oq4sOR8p
- TLSH
  T16A22BF8D90E9F23AE53AC2B0CE1C8579CDD98DE38722AD5B109B0D4519A27D348A7B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  surgo.zip
- Size 9KB
- SHA256 900f42e62eafc1c3410a0d8b788bcad66a3dbdfc9a21418bb5e70d9fc8acedf6
- MD5 7f193c1b4abe8a3082c715bb9706d2cf
- SHA1 d3598ddb1f566e2560ef19597b9433d3d0587f81
- SHA512 e3d4581cae170b5116b4d926b0c2fbb64d204bfa8fc662dbd3ad4928b9c914aa87b073d48b774361b96d57282c2959e7fb19bd1dfd513d5c88effc3c9c19588c
- SSDEEP 192:dSu88LBSvtCrq9wTQcE2IA755pcGqHjusOJlQaM+D+Uc8Oq4Jb4LOa1cgbw80:i89SvtC+9zY5c3jBOJlQp8Oq4sOR80
- TLSH
  T1DD12BF8D90E9F23FA536C2A0CE1D8079CC985DE34322AD9B11AB4D4519923D348A7B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  surgo.docx
- Size 12KB
- SHA256 119d8f5cea30d3f56a2f0944ae9df831431019408d649cbff0262e729c22e7d4
- MD5 b44f2d4e05ff8211d72fc0310c9f54cd
- SHA1 4304da3d91efd4c6bdf362798b6652f4bc54059b
- SHA512 f07d5cb111212240274a438eb9ec90f93dd4a0e792190e0bbebdc05b75a462f1027c2dbc56536e1ffb99adbd5697ad576dae60f9fe17d33cac7e142eff5e7613
- SSDEEP 192:MDtmpXYyrv5bk8xgNAO7rr4FG6Gk72oBjLXZsRXOUJkFAivFAg:MDCXYyg57rr4FG6F7//oXtMAieg
- TLSH
  T1F5428DB7EA407D19E315C6BDD90A02F2F65F80435104A8EF0013B34A4E75A9B5ACAACB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  _rels/.rels
- Size 590B
- SHA256 e19238d7a71fa7a2490776252686f70e2de6238c87cd509b5e3a3cc07c2ea4df
- MD5 77bf61733a633ea617a4db76ef769a4d
- SHA1 9d7abf0ee4effcecad80c8bbfb276079a05b4342
- SHA512 4f1d48a8273436dbb710bb5f26bdbb701e6c6346511d6ac2e4c7f92db705fa1332e0a4ef9063dc0886e2e5b8b01ec209f8f99890957fee635177c41b09bbe769
- TLSH
  T151F022C4D4B99F33FF414730A4B6B9A37A7198E243F2890FB951198DB408CC6260B782
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral4
- Target
  docProps/app.xml
- Size 709B
- SHA256 62f104dda5724e300cee0fe507d6a97a836214f81d8a5fc674fa66fbc8da24ed
- MD5 3a4db4015d7f5778ab5b1e818563f583
- SHA1 ec7673260e38e1d762bad7aa01330416942375b0
- SHA512 cda135fccd109e07575d8bb8d17656f4e55900d13dfb33b490ffc43203d5aa2c304c105af387ed6c2b706bf23e6620a2fd8c2b4cf6c39b813e5ea118cad31328
- TLSH
  T1AF01C0F4C045583D96C0065865E28452EB7000CB88EB0C4FFBA98D8CF0A96CC10CE772
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral5
- Target
  docProps/core.xml
- Size 629B
- SHA256 00542165465dca957cce206049d52dd114be39c5a9b96362925ffd6fcfdd6100
- MD5 437473d300073b7fa9a519cebc953a4c
- SHA1 df098fb7a63c0065b81d330fee2feff23e523f85
- SHA512 ef1751723b898ac274c56d5ca7303cdf967b6e5c69e81b2f2c108196357926152b58fb8888fe299d026b5afb787281d54cda55180e1928f2c52c668e3024067d
- TLSH
  T1DEF04998D0615C6011479DC65AFA9B4B924B71CF49D04293B6C0CAAFF457A863164AC6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral6
- Target
  word/_rels/document.xml.rels
- Size 953B
- SHA256 31f4f4ee74f68d76f77375e997b1974e20ac41c8cd527fcbc9551a548a330939
- MD5 eaf7ba11a428830d5013f067e2224313
- SHA1 5d7ce34aa09f8c72a32469e613c3397f8377d361
- SHA512 f519adc43ff1c03201afb0438822dc14c3afeebe8417d142ef25db7bd09550123385283aa75836e47456588d0a11071bd73aec4ecd26f39e5708c7acc926bf3c
- TLSH
  T1E9115BC6C8F99F13FE815371A972B923327589D203F2550FB922244A7548CC2B257BD3
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral7
- Target
  word/document.xml
- Size 1KB
- SHA256 88559c500290870f30e2bf406a38fc99f44fbec94ac1b73211c12d56c59d4691
- MD5 f8f199461f494d5a598c3255114609d4
- SHA1 653dbf7cb4284837a718aa4c6c29fbbee0928323
- SHA512 f5cc7f2f35f74b7d7497171895e07e83ae953a8bcc6f1339d9be67af2b43f5569043353bd259344d30e075bb692cd9569a97a358bfa4856c3d8a6dc55ec02d0a
- TLSH
  T158317CD7E5844E475B41D4A479F0AA03776019E701ECC4BAA8EDCD4DF491AC6B5C13C6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral8
- Target
  word/fontTable.xml
- Size 1KB
- SHA256 e6f723aa9b8e747f9ddb43fbc5e5b91d673c49a8af32c6d3431cd077ead4cc36
- MD5 519a14b61b22de715d888ff5f1696e85
- SHA1 13a5f2fd94d71a9f4fa8db1d1a1a6ce285eb85bf
- SHA512 818e43c466ee007cc7d63899a516fb467374c1113515a0516001157a533b4d49bec6dde36fb0839756a6862fe7aa53a5edd6d12f1f0a82534326dbbcbf4910de
- TLSH
  T16D2165E3C0873B0CD9C06561B6ABBB42D7F8709B40E40A8B64A05BCCDBC89727656B80
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral9
- Target
  word/settings.xml
- Size 2KB
- SHA256 fbb6edbff76e49d0851dc038c092a5603d8a752d5048f6df84438306368e60ac
- MD5 0acd45a4f0cddc7414e2eb48af59f144
- SHA1 54c4087ea03a646956e2ba722673103863a49f0b
- SHA512 358b6060c3064e6ad29409ef9b4e7393ba61708f9a3b666c9d4fe673e6d61166c5f3f3bf3f962e79e10ef9687513f523f51767211f4159128c624380b42841f0
- TLSH
  T1B4410D82CF07088D274282B4E5D593027FAEABDF02DDE0D9E8D14D1A53E2DDB21A9F51
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral10
- Target
  word/styles.xml
- Size 14KB
- SHA256 8ec7ca3b62dd913c49f4cdd744c757c4ca926cb6d8de5e955734f0cd9ce1a990
- MD5 e385545d1af6366db424985084f7d142
- SHA1 8c279b102ce7942bb6b89427d5e7ccf7efb6bb79
- SHA512 9ea092eb6e1a607d7d00e72f503bcada6d9620ba099e37d3d5de4d46f65f27a6d432b4d8b9ca1419d41261b82f59f7e5cc296ab2b78a5addb76b8247fc45d839
- SSDEEP 96:v1mmmSGzcFiDF7pC33+41lcWb7yPWsi0L:v1mmmlgyhpCH3Pnnd0L
- TLSH
  T1CC623B8D70399B8EC3A296D5CFBD8C412F3B72339244912EB1D3FA6434C3689C966079
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral11
- Target
  word/stylesWithEffects.xml
- Size 15KB
- SHA256 00c5cda7671bf545a8c97312f14b2b8bc0ee7fa469b36c25ee158c8a5c1c1568
- MD5 c48d8469816165905c276ce8cbca908f
- SHA1 5c7cde0803adc5d695d8c0088efcd5b8f7fec75f
- SHA512 9ff40932e9fdc059c829518ab22980c7cd3f222af97a1df73eef58c8c5f8a6be1881fc7f85a07147510086fc16c5abd107c28b527ddc1ee8b081ae9577283805
- SSDEEP 96:8sc6mmY+bzZliSfiZo3cFiDF7pC33+41lcWb7yPWsi0L:/xmmY+ZsHyhpCH3Pnnd0L
- TLSH
  T136623B8DB0399B8EC3A29695CFBD8C413F3B72739254952EB1D3FA1434836C9C966079
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral12
- Target
  word/theme/theme1.xml
- Size 6KB
- SHA256 488a401645c6030b741d7e912aa55ad9ec6b219d36a3247332454c0de867b827
- MD5 20e1680d6d9ec94fd162d075012f077d
- SHA1 03b98c08cfdb22af09d3c22cc78588d5d371db97
- SHA512 dec8cf1911fa1419d6dad397209e002afd492f99b91cce288758f163e47aae02da02cd8a8e60def18c615aa32ea4bbbb02e99fba6d0deba8cea6581dc1f01b68
- SSDEEP 96:xLM8pu68FNk/VmWHS95EUmMFNk/VmWHS95EyDatpvm9jOLsEO+hOyYvbcZXyMm:xLM8po/U/1xyMm
- TLSH
  T174E17DE0EFA5CF18B7443B3032A5F1A05955F27A0648BA1CBB8731F14187AEE1C6579E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral13
- Target
  word/webSettings.xml
- Size 428B
- SHA256 2de8631b2a69ae54c962af917bb57a9ae06949e606da5088f256b866df8cdaba
- MD5 cee6069bd7a22315bb5b328a3ad3b498
- SHA1 cdcd7fab65a876c957d2901dbb1e1942647d3cc5
- SHA512 f16b27e85b66441f099df52a637533b1bfdc663c6c2283da616e97a2f72b51f771c71a9f0d3d5bb22102539950c409cdbd07a63ae985ac60f07a6bb9116843d8
- TLSH
  T1EDE02BC6D0C94D229B408A64B9F5B503772018D701FCD9A3A8E18EDEB4548E12788B85
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14