fda8a71c68319794f084053eb877477af4a0ba567f0b976561e5818966bdda2c

Resubmissions

19/08/2026, 00:46

260819-a4pbasbn5w3

19/08/2026, 00:39

18/08/2026, 23:58

18/08/2026, 15:40

18/08/2026, 15:33

Sharing

Copy URL Twitter E-mail

General

Target
bodysmith tales lobotomised.zip
Size 210.8MB
Sample260819-azvbratend
SHA256 fda8a71c68319794f084053eb877477af4a0ba567f0b976561e5818966bdda2c
MD5 007a20aa56a2ebd340e0b15b6031cb85
SHA1 b5412eef2c7a7754271737d7fc3509d0eedefcc7
SHA512 a5cd3f6f61cda65679d0bfd5861a27d142e626db70876364e4b07f43ee12b54e7beb4dd174a9d8a91e19849ff2357e8eaa8077cad32e0b7ca7adafa34e0337b2
SSDEEP 3145728:xySH/eK5I36AINuaT1k6xfuvxTeK4MRyEE9vvvKEa1j7HnGS5/03zcx:4SfeK5I36AIogk6xQITbvTaCi
TLSH
T1CDB833CED0A5390E54336479AA76664552F8821B8887DC3FBB3E07D9CCD7782727E248
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  bodysmith tales lobotomised.zip
- Size 210.8MB
- SHA256 fda8a71c68319794f084053eb877477af4a0ba567f0b976561e5818966bdda2c
- MD5 007a20aa56a2ebd340e0b15b6031cb85
- SHA1 b5412eef2c7a7754271737d7fc3509d0eedefcc7
- SHA512 a5cd3f6f61cda65679d0bfd5861a27d142e626db70876364e4b07f43ee12b54e7beb4dd174a9d8a91e19849ff2357e8eaa8077cad32e0b7ca7adafa34e0337b2
- SSDEEP 3145728:xySH/eK5I36AINuaT1k6xfuvxTeK4MRyEE9vvvKEa1j7HnGS5/03zcx:4SfeK5I36AIogk6xQITbvTaCi
- TLSH
  T1CDB833CED0A5390E54336479AA76664552F8821B8887DC3FBB3E07D9CCD7782727E248
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

google persistence phishing
- Drops desktop.ini file(s)
- Detected potential entity reuse from brand GOOGLE.
  phishing google
behavioral1
- Target
  bodysmith tales lobotomised/BodysmithTales.exe
- Size 19.5MB
- SHA256 d65a95d6e8b048eb611c05c3de9c75d0f86715e94132c6264a7d75ad99fcbb96
- MD5 79d1d0894d400b062f52d273346e8539
- SHA1 66516f61c976ae12611aa859252cc7e0ccd67e6e
- SHA512 ac6149ac6f74694077cd09356d842195c7b4dbf46b6612e5abfdfdd0d444e365933f73563af30a21eba73e430edba077c9cc6d5358dbea7c530f4c27dfd767a0
- SSDEEP 196608:TsJGOkZBHK+lbh+FgilyzVMP/Sp54z49vAR/kVGr19f:TsEOkZFK+lbh+FsQRcE
- TLSH
  T1EF274B243979C6C9C0B6E47CC566C3ABE9203D94C72887FB4570765B2FFA2E09936127
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  bodysmith tales lobotomised/data.win
- Size 15.0MB
- SHA256 64a55aba8dc4bb9eb7e56c92ee546f41c9e6f65a4b98024aa22cda6e48a5f3cf
- MD5 9335e3a9354ba1698c949739a4762ee2
- SHA1 f4d6c01455f8ac97eb6d4c73e6eaa832e73ebe91
- SHA512 53d6dab78e73dad1a8797d2febe25f21dba110dffe45fffed7847b75d9f660e92eebb625c1a1b225e0778ca270d7df868c9cc9880fb63acf47b5ac6deaebc3c3
- SSDEEP 393216:GedXQwYkfepf6ZSsPHgMsT4NjU7GxSDqhNP:35xfAiZnsT4NjUqSOhNP
- TLSH
  T1EBF64AD2F504E982CC555E394E67D9A847323D36FE55861332C0BB4F3AB3292EA31786
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  bodysmith tales lobotomised/locale_chs.csv
- Size 76KB
- SHA256 8061359dc56d157384221b1b94e7c4821f86c3ac6a053bee20b151d153087847
- MD5 c07d6c1439bbf8d497ca071159d24678
- SHA1 64142c306acfa77d10b9edb4be00d49c3f976d96
- SHA512 a63e2d49f494750b78b03de1092a38f907a62855d389980e04497c3e71268ce31bdf836955c3336a26eb733c8552bbcf41be5e5f1408908079e2db77066111b6
- SSDEEP 1536:0uWf62RZ9osfI7NPtuhD36PAYoKE46f9qguGA/Vyz7uUkvdCLgV0DeNH8rD7Xrz4:xWf62RZ9wEYoKE46fun/N4AJulC
- TLSH
  T16473D53E43E48EF71DE1E09D931A882A6118475A602A3EB9DE4DDD964FC17CCBF12631
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  bodysmith tales lobotomised/locale_cht.csv
- Size 76KB
- SHA256 604aee3544c0429b3c5876cb4a6c5d6c322cd21e8df8bcb5aae45be3aa1816c5
- MD5 662c05375057e6ad4f12cba52fe8ee60
- SHA1 b20cbec85b4d056b1319c91e1777983b7390ba17
- SHA512 27f922fdb739bfbb993ef17570ed22afc218694c70768b285b289b1b47060421256131ccf054c1195b9c02052b8e8eda6136cdd1f9290d67d2eb90cd6b70c097
- SSDEEP 1536:TWSeealFBFT3AU0uPLKk7+YW6527BK5t6XO/FFldeGbR6WSYyRg9gBeNlIjDLin8:TWSeealFB1nSBK5t6l2/2ENha
- TLSH
  T1EA73E63F03E58EF629E1E04D921B882655044B99546A3EFADF8CED974FD23CCBA12521
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  bodysmith tales lobotomised/locale_en.csv
- Size 81KB
- SHA256 f9c576903ec16a55de88e640efe0091ca3c91c7c7996254ba24cdb9a30ccf30a
- MD5 d6ad90ddbe3e31fd37451c5d895589ad
- SHA1 977776d5c903955141a98763ef2347967913b19e
- SHA512 797a10790b885c72a43ef0957723bf66327ea11eae8e59dafa3248070427b1ab8e670782b9726776afb19ab669805ad728fa4ed369a20f9b7082762c553c0f68
- SSDEEP 1536:Tzdw4YiIXfcE5tyhfjUSxaiYsIIa/zOv58OsR1Y41bSwGG8Q0oPv0G1878zhKhPi:lw4YixE5tOI/LOv58CwPcq/2lY
- TLSH
  T1EE83082F83C209B31EF9E00A710F9D69BB18813D53593D79E08EC52A5BD2A55F3375A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  bodysmith tales lobotomised/locale_es.csv
- Size 87KB
- SHA256 81ead1116e9810b413b89a0450c705262403308bd5ef2fdfea6629b034332a14
- MD5 d78fea753a946c44509c896570d8aea4
- SHA1 c5121aa33d274957fe877599e3d5e7825a2896ae
- SHA512 6e9a99afd4318f6fde310d99923c6c1005e5268bbdb6e0409fc3627cdd28c68a36b5ed2c243f49ceef317d7cde62b6e54ba91312315f144797ec4e35e7c59274
- SSDEEP 1536:NpL/ENk21oaiYHoPlGMNr+KfZbqM9vPo6AAeRlhuLsY2kUBtxErmsXrxohzM6YCL:/L/ENClBRwTTY2kUXxEu98pLJCnB3Qm1
- TLSH
  T15993F83F47C30AB319EBE249A107CE27F5484599620DEDA6D19ECF6A07C47C8F217998
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  bodysmith tales lobotomised/locale_fr.csv
- Size 93KB
- SHA256 bcdd3c02dfb5e92a7e5231a25d38ff369ac163c2a6819f9dde9e2c3ab8015e7c
- MD5 84af1a909a2b89e140d952973b531443
- SHA1 25913e58b7c1078fa76228993575833cee6712ed
- SHA512 a86b56b806c9224d5d545020455e654b6d2e4e772f272c68fd151eaa6b77d2ee7835db7b624d7e27b755d009f4a6e23e5e301bfa43ffc5c27d0f9374982c617a
- SSDEEP 1536:tFvwSC0FJ25lbV19o/B2Vq5PzPSSJKWjsPs/YmTwAMHRo8yJQ75Qk4uocnI6VdTb:D4P0FJ25lbVMjTAWjsPs/yqlPvB0fKQt
- TLSH
  T1A793E92F56C204B31EDCE1057613DE37F928815CA34DFEA4D5EECA4A4BC2988B357698
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  bodysmith tales lobotomised/locale_ger.csv
- Size 90KB
- SHA256 57a82d0734fc1fd925334f3dfb9714efafb1df7bb46c277ae694e65edd284c77
- MD5 c46d523163506fee8eafb874f30caec0
- SHA1 d33c643855dfd40776faa70d30078f7338270d7d
- SHA512 168db29e38ded842053ce9ac19ec9a9b3b6b546bd7d7c005d1a26d6f702fa7bb19e1678ffa68fe43e068b5646cb04ef76c8e7e22d5b1415e9283b7f4bf8f2ab4
- SSDEEP 1536:Def6lg0fQe1EuoP+nw3m9QOaIPiGU8QKIrBAPYeGDeI1HKlOoHg1QoZtH5Tq8erG:Deylg0fEOauiGU8KBAPYenxtumWV
- TLSH
  T14F93EA3B86C784771FDEF2183106CD767A0CE37983193D6AC19DC5274B872A5E2AE464
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  bodysmith tales lobotomised/locale_it.csv
- Size 88KB
- SHA256 1b213999ffd7b289cd5e18df0c4ce2c54922632e617937d1d5abbacf4f601cc2
- MD5 0ba395037c4cbece5c52027c97bc3b4b
- SHA1 e31698da407d60222ec7acf271daeec47adbcea2
- SHA512 af5d4ee1d7d93ec2c00908799ee02e554077be5d51a423a51874f924b28c2b8a1cbb8ac3909001fac5727d9c81225aa684f374a6736915565f1c01305c8e4037
- SSDEEP 1536:EUSp6vXoA2qeI9gwPnaPRLW2Jy3NrLIMu1dl2rTR31IBF6CxIkCROMdunbQ+ZnPm:JSp6vXoAY5WrLItvKdR9KY7xYYv77d
- TLSH
  T16493E73F46C345732DFED249821BC904B72984DCBB4A3D79D58E9F2E17CAA80F21A519
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  bodysmith tales lobotomised/locale_jp.csv
- Size 96KB
- SHA256 8db536cebf30b605816ff03156bcd2f448cbfb311952b9df93874fe2ddbb45d6
- MD5 8a65d02ddcf23220a4ad0780e7b6cdbc
- SHA1 a00fbec85eddd952c68460e4245da47e53e010cc
- SHA512 b6fdc82a35883a539d5329b0a616372f6c97e863f437debfd214b1c34f82ecc743c52dc2ee3c46fc5d914a0233b4b773c404f8f5c41c72a3017ebf94b4d063fc
- SSDEEP 3072:CfOIEWRgNGwLAYLPG2V99naMm7cS2LK/kN4J34tyG1:YGN7F9naMmCtk34tyk
- TLSH
  T16BA384BE93C44CF35EA0E252994E98B6B1289C4FE4563E79CD3DD8264B913CCF912871
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  bodysmith tales lobotomised/locale_ko.csv
- Size 89KB
- SHA256 ba93597f9f103d4157391bd38a0ee82bba1ad01b5b2713731ea164a47026f3af
- MD5 9c167121ed3f5ebfa596af0c0890a671
- SHA1 2e2f90dfa75c2fc9d8375be508cd50f8cc660d51
- SHA512 2875e06b1464156776d20ba1871e383801fc51f5639c94aa8c731a8d3d4a57c40e3fe6d5d596cde125f9b777512268144acd5c56d5cafed4f1bb93ea4f0d70b0
- SSDEEP 1536:SPNMtcxkZ/6OOTphphfFk43bM7an7F7br4+2dwxZN8co5TeJYkuJR+kWmnXY4Kxe:CNMtcxkZ/6OwpeG7F7br4+gwxZN8cK/3
- TLSH
  T12F93F9BE15DB04F629EAD444B655BE7593804A37AB8B2CA4DDC98C05CFC0D83A6077BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  bodysmith tales lobotomised/locale_pl.csv
- Size 87KB
- SHA256 15146b358321c851493dbdb80d5bff82cea8e83c501c38d02160036d6b83f782
- MD5 7130f3fb4435dd7ccbe5c1956ab60f02
- SHA1 ab365f0a4b58dd5cd09070f55a42ea7628538aa0
- SHA512 b7498e8dc3dde9edad06839c91dfa350ee7551b7a528638c4e72fc589c9352d5e7f946d9135a2a32114b96ab6fafa95176aa0f3a5c3297234ac1902bff691c5b
- SSDEEP 1536:ucMBCaVLPdoSyBm/Q/Q/tiKeIQ9B/abIZ+xLjM8KGHFXkq+O1V2+B54QM1o0Br/0:utBCaVLPIkH2O1V2+w4tDHGdg38FX/y
- TLSH
  T149931A6E42E3C8B71EFCD489E12B4E351E8D025D63197F6AD58FC81B8BC2381B227559
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  bodysmith tales lobotomised/locale_tr.csv
- Size 85KB
- SHA256 de366155c1ea189a0796d637ca16edc635c0341b57d9b7dcf4c6a1b4730f7876
- MD5 0d9552a87432f70082f65d34f51376f4
- SHA1 408cf92882df605bdc37f9b2e9438228c4267308
- SHA512 e981c00fd349e76059aee2ee7a232d1a36add36e594a57de4aef4e7a68d84e0f451cecfda9bdcffcca2364c3bc3d1c5409cd036d7450cb2a420dcd4862549768
- SSDEEP 1536:st4IhrB6vmu+8ZbdXx47jipEoXE6kb8OBK5hwbkbWmPkOQGx9St4QjcULE92y8pQ:UvhrcvmWUo8b8OBK5hwbJ8wuVXt0JfJ0
- TLSH
  T15B83F60E15DB687E1BFCE18F949A8C2AF85F0365A324BC67C54ECE125BC53C2A29751C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  bodysmith tales lobotomised/music.dat
- Size 151.4MB
- SHA256 793970e70495043988083591daa4266a33ee5d3df94944031d06a5615fbf874b
- MD5 93209cc9d257ddffa559d8a5c84a0645
- SHA1 093b19087925b6187a074245474893a972384e70
- SHA512 9f49295bdbf3bd53c2008acd1309a6365c460f1a3b64f72bc0e24c8ca3ebd1363ef8724ebd13904278e13d158939e2153d939a7e735b869da35d98a0047da4f1
- SSDEEP 3145728:6CJ4j0I+f3RAACr/U3fT5pgUK+gKfgMkl1dtzaqGYYYxAJs:9WIQ6NKKItlpaqGYHxj
- TLSH
  T10B78F161F4D34A45D2E78336AED01D500CEAF84CFCA9652F748ACF94B293310B56A7AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  bodysmith tales lobotomised/options.ini
- Size 171B
- SHA256 de987a1e598d0ad9f8c59ca74a804ff61e0204ebaf115985f9dc1e7d90969e37
- MD5 20122d5d56155f9cd81c4002d9b34f42
- SHA1 5c539c877cd746e51836942c0567b88514123911
- SHA512 ec350c694f4d7a9cfcb996d0e395d68d70b2882fc5d9d76932326316b6f59a3ac698fc25c39f293434be5dc1441c47fc5d5e1d3ee3df319666f071904fae3337
- TLSH
  T1A3C022489225D19A0028B04CD002044306820B080A3065B3F280E2029200B40880CCEA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16
- Target
  bodysmith tales lobotomised/sfx_ag.dat
- Size 61.9MB
- SHA256 ff71ce7d5cc95661aa7090cbfcfe2d8851f79caf5854d25e351f43c9d799a531
- MD5 700f1c8f3ecba5910a7bda6858955f3b
- SHA1 fddac79f2a24d97d91a30c1da10abee0ca129b82
- SHA512 a0eea6e843ea17dd3d37bcbc254e3a8ca6551b8f6d08d7ec483417ecd833888784c87e0674bc0ee872fccc3834e88ec103469e887d7a743a29e714441cee55d5
- SSDEEP 1572864:mMTbnQTZIJ1/xXPjJ9Zup45RZxSuziQ2P0r1C24NCMBRM:mMTbncZS5xXPjJ9DjxTp2POVsxBRM
- TLSH
  T1F2E79E82F241D940C8166E7A8D26DAE54333BE5AFF0653173084BB2F7DB71C29E656C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  bodysmith tales lobotomised/tg_fnt_jp_0.yytex
- Size 707KB
- SHA256 8ecd22a1936b4ff007c8f372f97c7e3a095af73eb370f10ad8652e2d9a2089d5
- MD5 93ba80e8acad0bfe47e634d874028a75
- SHA1 baf10ed7a188f25b6990e68f68ed3f1c0e6b8f91
- SHA512 e13b9b7463d2086c0497c1eb16d479bf91fb02db370ac9b5f3b129e9addaeb909ae1556ec82af14362c4cdd7e54c62707600538f20900cb9e4f835ccc1097b0b
- SSDEEP 12288:sblkAqxB8zZuB1mZA05Ak7vATI3FlOExmhP9xvH9Qse/zRATX6yXpCc3l3Cxpas8:StqszZJZA03MTI3H8hP9xvHasee0aCTM
- TLSH
  T1A0F433BBDBE3A5D6C20E1643E12DD352E83F7DA9A6922E03C9578CAE51105703131F8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18
- Target
  bodysmith tales lobotomised/tg_fnt_kr_0.yytex
- Size 351KB
- SHA256 a17b532d22f357e762016deec7d1295493d648387dbb6c9c27328647d9a63145
- MD5 c0cc5765169fab0f7b3672c3a5efa440
- SHA1 0b66c59fa1434f1c29acb2bde44b311d7c900771
- SHA512 5f11e24c454849708a5d7ada1080d853027e3b2563dd0479a696bc80e4b5c3283e5fa0dc4cf142b11ecfd5dedb3c6afe46584543c6e689bfdd139eedc6105b26
- SSDEEP 6144:CB4Bs7tisKUmJM1Qx1P1Yxm3ql5EBiHaR+n+eIsUokHcOxMri+Zk1fkoZO:bp1JMe1P1Ygql7o7sUok8Xri07oY
- TLSH
  T1237423EC2E719A2791C82897EBF6447B32F3D51DC39ECC287E76CDA75C1840ACA84591
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  bodysmith tales lobotomised/tg_fnt_sc_0.yytex
- Size 879KB
- SHA256 198bfbb4a127141cad07d8d44b24807e65f2a3b0b222c7f73553185d7510536f
- MD5 b616969b06d87988289615a4ac1f3cc4
- SHA1 6e09d69496cbe5e9d88b478e0701afef277d88a6
- SHA512 ac8dd7c7d8bd87212fc868b287a8d03ac46e4f6ea895021c74e6f8ff69f6968ec1f7cb47870a945d02d38da3a281118f3390e24d4a50cbbc50c58b6e88f328b7
- SSDEEP 24576:T2ON4lWq2OLCaJchTuPbjMu/apCU21X2uGDPlHQKoP:7N48q2acQku/a8pGDPloP
- TLSH
  T1011533747078533ED46F0F524EDF4F3D2253AEEAD6AA3B00906CB91611D62A25DEB843
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  bodysmith tales lobotomised/tg_fnt_tc_0.yytex
- Size 940KB
- SHA256 c5fc417cd3971412c573d5e9ad8de984bdc199ba617f48ae71d8270c59be71fb
- MD5 48d253078c02d59100457500e741d804
- SHA1 4202e03e4ebb05121682ea249f67360be1cda17f
- SHA512 7e77d11c7d1b0efc333ac59515d15a3fd56425319ca7d07a7e08c60c7dd247d3aac93c4cb22f2a9d4a3ffb168924e580448aaf564156cbdf8f3212d0c97bfb8b
- SSDEEP 24576:zonUSI3Yih/ztPfBCWr/KfRNwdhkkJtRp0qrTyo:zoUSI3Yiz1BWJq/tfbTb
- TLSH
  T1A72533D66DCD1AF87EFF087068A718F80AF0C83A2DC799912DA39B5144F926D112FD25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  bodysmith tales lobotomised/ui_ag.dat
- Size 3.8MB
- SHA256 b9b87ec75c79a2774a87f576037de330c2723afbe960776d37cbf5635fcc5526
- MD5 2d126ff3296b65e7f8f0c672b4edde7c
- SHA1 362cb29bf355a29a0a5eb09f3196bc9f3c014f4c
- SHA512 e62f82d8dc79bd51c641e69f8ca4a0f3ac592ef2334a811d16bff304f762b2e02e67718b744b886f7685a59c909f0f00a398a799207c043c2c09503175e527e1
- SSDEEP 24576:6uKFVdnRxSrfl/FDGPhxWZ0MPqF8H2cvbiCVmmTSan5j7C58ypHE:6VVvxAFS/WZdqF8WebJmmT5M58Wk
- TLSH
  T1B7167F93F342C900C81A5A3A4D26EBE54332FD59BF0A57573084BF1F6DB62C29E256D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

Detected potential entity reuse from brand GOOGLE.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22