de62ea807016b5b924efc0c42ed0c7c5c1eda8595f9485b75dcbb7b5c2835ce0

Sharing

Copy URL Twitter E-mail

General

Target
de62ea807016b5b924efc0c42ed0c7c5c1eda8595f9485b75dcbb7b5c2835ce0
Size 3.5MB
Sample260819-japjmsfm81
SHA256 de62ea807016b5b924efc0c42ed0c7c5c1eda8595f9485b75dcbb7b5c2835ce0
MD5 72a0b1218881dbdb1bd35d989b6d68d1
SHA1 f5aaa88c27d2d13d0d7eedfec66f6a514fab2203
SHA512 796556a6ce6a53ed56ff16128a776686ac9597d2e6b32d2e90a3305954b238ccb22ac44efbccdfc2dd190e3daee8badb8a39d3d69e55e8871d3fcc4e6bd7b573
SSDEEP 98304:dz2Sjg9+wpLm/BhfblNxxrKlttnkaRTeSfgivT3OW3i8jEh:dlkw5pNxRSttkyeML3J3vjk
TLSH
T1220633E0C6A04DB7C4E7D2F6A904DA6D489C7BCB8053A5F9AFF084D357369F9A82014D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Lertaro/Lertaro.App.dll
- Size 2.1MB
- SHA256 b74d2f966f42bfb61f321fc27fb7d0914b079872d1c1db64527e33188bbc31ed
- MD5 36dc9fe04f312610aa74ace43af0173d
- SHA1 0cb13d198eacbe91a0ee68134b5a5910a9a0d590
- SHA512 24497bbe3bf400d4f7a47249bdba2fa44394612730529fb338717fee8ef9859952e891b718cae68bd9101c0313bd851000d03fb9f0fa06c498b93e4e4338c327
- SSDEEP 49152:rJ+OuTMCOIOWXfs/tNmCxQKT3UnfYV7zBO/RhHx6+TU2nJW:thCyBO5hHxP7n
- TLSH
  T1F2A5D00033F44739C47F8B75A475478897B4EB0A9381D71D999AB9EE1C923839E092FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Lertaro/Lertaro.App.exe
- Size 264KB
- SHA256 c20104157b3bab5dedaa99988ccc2d7e020c671838ff134f2b8988a12527ac96
- MD5 948b222b54956065949c45dd79127164
- SHA1 038c7cded9d5923c9e52ccb0cfb77a71c40c0277
- SHA512 b2aae5e274e16937c736a19d29248deffc918275243988c4a8bfad0e81e726c3b9b2206e9c51551fc41159cc74d5d37f262952dfc60e5be8429185254b37f1c1
- SSDEEP 6144:BHRu7F1nQnZ88UuFACSr7zzASMxKl1uE:BxOF1Z8VO7zz
- TLSH
  T15E449E03A7A851FEE1B3D679C9A24940FB72785A8B71A7CF07504D7A0F667D09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Downloads MZ/PE file
behavioral3 behavioral4
- Target
  Lertaro/Lertaro.Core.dll
- Size 884KB
- SHA256 4db9ba74ab67d60a7f97ef800b2aead5192172ad5c1359275f65f7ca627e3246
- MD5 ac711a11f39364b285a8eaaed3889e5f
- SHA1 a1074e646d3570c9dd9bca5fe4913aeb4b8b571b
- SHA512 b11a370ff30cafc6df3f76a88a15d099be6aec1420b1d90e1814110ae77de6d1d8e5b284abd4a00884111423aec32abea12f145afc84931f4f71c4cac38ecb7b
- SSDEEP 12288:g0eAYqwp3xJ+12nvx4Og8Swu/ksaArJ+5bNroIipmN8xM:g0NYHpBU2nvx4Og8Sw3s/J+5JjiUNW
- TLSH
  T1E7156C9277F89B17C6AF57BEE431429C43B2D00AE6D1FB9F2A1CE4A41D173526E00297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Lertaro/Lertaro.PluginSdk.dll
- Size 84KB
- SHA256 2ba0f70c5c5587fa1fcd86f4a3a4f784e6627ec59a60467a8fe60f0ec879b7e0
- MD5 b1d60569bd1d4d9dd45251c7f520ca02
- SHA1 57fb84eeab2023085790b6c554e74c6d1772485e
- SHA512 d45521f3255132644b419bd6e9a42d1afcbab437691a7478c4d3f6687b204bb7a334a6f06d802f194215aaa542da800470f4bcd807bfe198079342be48862108
- SSDEEP 1536:NByjccHDoe5f61pcY8jXJNI+3bOOzy8c:zoJf61oJD3bOOTc
- TLSH
  T13D834C1567EE822EEADE4739F5704FA50331F24A2022EF5B5F58B9BD1C633C956006E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Lertaro/Lertaro.Service.dll
- Size 19KB
- SHA256 9fee11ff2df8c829f8b4a72ba1c857d7ffe64f3e746b101c060cd4865c6460bc
- MD5 88ebad4c8183dc9eb5282b2c9f3b075e
- SHA1 5eb8db272465f18d1cd39072ef2b088e872529aa
- SHA512 dd61e1ad9a1badacb0e5321d369aac7ddef393912a6903d4317390946c6779e21ed1f8852982e08ced6af25b37253c345612a7e7a4856985dcea34e59ed36447
- SSDEEP 384:1jyeeUo3RmcTdSDjUg7q2cege/vFy7CvalD8Kv:3boBmcAxDs7CSln
- TLSH
  T17892B5056BE80B75F2FF5FF4E9B206014E71BA165C35EB5C19A8108E0D72F8998B2763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Lertaro/Lertaro.Service.exe
- Size 158KB
- SHA256 ac6ac640e7da118cf2df4ca58dbe72798e274af865a96b8f19ea508097bff8b2
- MD5 32e4403c17005eebcfdb8bd8bcea9d68
- SHA1 8bca2127c127896fbb950f40767efb3e939ea806
- SHA512 97fde00726391e910629e9297f2933e42786d183151cb33a7099a467870f21e593aefc09295c453743388b7431fc87607a59a862fa718b5314db5d1072bd237a
- SSDEEP 3072:IVDxk88wN1nLVu7dL1Z9QnlX9rE38wm1VzaAT5ZT:kHRu7F1nQnZ88UW
- TLSH
  T1E9F33C13A6A851BEE1B3D678C9924941FB7278594B71A7CF03504EBA0F77BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Lertaro/Plugins/Lertaro.Plugins.AnimeThemes.dll
- Size 38KB
- SHA256 2323972386a500e79877c92af37f57c76f29bc92c55fe4132128f70726da786b
- MD5 c9f20d550d79582f5e7ce2c7e7c2e512
- SHA1 1682b359b05bcfc7abe9d6b4e2a5ea1f94d9c5e7
- SHA512 fe05ad23e7e18b4e23e75345622ea45c33ca37645b7b6f8fec1ee5e3b9210fec8a6b0879f3d54151571e97d86fcf991743bb5cc19f2427e83dbcc4344dd689f0
- SSDEEP 768:rvBUTwHjzKhfpjzKhyZ2XpAs5P9ah9NejzKhwqjuEH:7aQjzKhRjzKhJjzKhwW
- TLSH
  T14303B71950ED85B2CE2704F2E5711980313CBE7AAE114D66F8DF361D6CA25310EF6DAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Lertaro/Plugins/Lertaro.Plugins.Bandizip.dll
- Size 21KB
- SHA256 cf5e9d595374b7e023442af8ef8ce6d551133d3aa2eba698c2d36a6d51cb9bf3
- MD5 f741f116abaf2f31a6b139ad42e6cf96
- SHA1 2f4e542ff06a3edadfe3280e3485d1f8b8c557b6
- SHA512 a95097e9f59e95f949957ae579c423c6800e443c2548a72e969d2a753292431153a8529d307639647df83a59bbb1365106364003405b5ee2156b11c7677430d7
- SSDEEP 384:HHSdsk3GOi+ZK6+HhYaa6hP+MMSLVrjEkDAqOMT5RL3aPLxC:SqtgsHJa3VMT5RzaPLx
- TLSH
  T144A24BB476C78927CFEF4EB915AA128272A1CF3587179F57197E60190C3338A0272B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Lertaro/Plugins/Lertaro.Plugins.BrowserData/Lertaro.Plugins.BrowserData.dll
- Size 39KB
- SHA256 5d14a99d67eb013c09bce192d4c5c518f3d35fa190af66984b2c352c82b9053a
- MD5 188cd663b40adf6b83b6d59709d8c325
- SHA1 e39c96ea2bf34063c0cd556e8768cd58c94b5505
- SHA512 18743064701d51b1268cf27375f7913d987da0bed2f99a74398753bb586e6f57ac4f011704b95877c1e796943a0584b319d862814252446d95e51dab746abe10
- SSDEEP 768:7ZQ+TUoL/xlMr1qR8xqxVj0EQubdEHrv/8uUNfA9Nt9Rb:O+T/8IR8xqxd0EQubdEHrvh9Nt9Rb
- TLSH
  T19F03F80A279C9703D07B7AF1EA34C465393AEB4EC575CA0E397F600D0A52A586F05F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Lertaro/Plugins/Lertaro.Plugins.BrowserData/Microsoft.Data.Sqlite.dll
- Size 173KB
- SHA256 7841927435be066c58a41d498fd067dcf98bf567985526472260ee092a18ab86
- MD5 19441ecf9f5d9471258082d520eac3f9
- SHA1 ac92d93ee120d1ae65f28c449bacb292f8d5f93b
- SHA512 a59552a30e0c494afab6b7f453ffbe6bf13a14b826f38ea6e24c778b0e4d208e0f8580a787564a0b02c06ae62bbb109fb5dca71f31ee0c72828879412b2751a6
- SSDEEP 3072:KPo1U7KHI/FRmHsGP8ErzqWLvVtly6NGBSilr7DSILSAQSIgdGSCrOa9m:+omLmHsGPpGWhrZN43IvSC6H
- TLSH
  T13F0449B4139C6543C7FFCE3270B96C820734AA4BD5D2D74BAE40E5B93923745AE8129E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.batteries_v2.dll
- Size 5KB
- SHA256 e83aed1d42d8ae806abeb02f0233a477275b82b5db92c92aa0c243255ab6a793
- MD5 82242113978f51d8fc2f3c5ea535fb36
- SHA1 0f48690939731cd4d21f52d91ed4315ec1cd2b40
- SHA512 369595a6af9d44617af4d59c0e0b06fd56c29745ee1671d1b6adb45eff8bf9b34ca640a8a42e3a109fc8645c59ee2c9851e11d8889b4929c958fb9144cce731b
- SSDEEP 48:6DxasBaMe4HQj6cIcU1N4zOuSOiWKVebobFZAA+/ynaImsDULsnOVjKU64:2aMe4wecI/Yz1SOx1oXAA+dIfDbA
- TLSH
  T1F6C19665E3D7522BF57B5FB3BCB206019370BA61EE33AF2F8D41424E5C225588A14772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.core.dll
- Size 50KB
- SHA256 1e18b89ea319bffb633ea5698d8958cdaae3de8c5ac855353c7c6ad292795403
- MD5 97ce537a5473b3ccc4e873b1a2397147
- SHA1 689be53e8cb4d0e4f7f1a9b2dea05f8716055e45
- SHA512 7746d4095311a844469334078fca80d33ee4e4b717be04ae3af62a39f6e216e477025889a74ad1c4e89074e25fff18cfe224b9e4e18dba53b5861d5ed694523b
- SSDEEP 768:6XptZis0cewNbQoWf8kYYt8mFI37khpDFj4cfT1o2d9P58zGks4JnXT:6F0cew5Qbf8utJI3IzFUYrPiza4VT
- TLSH
  T15833A53587969A29F8CE0770A83E0185E675C51483F7DB1BAE94E4742E323C746A21FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.provider.e_sqlite3.dll
- Size 36KB
- SHA256 a00aba80bec4fb6d5db8cb938c4e8290df7fe10b84d46bf57c90facfc2dc719a
- MD5 e302818c9fec95db40eee277aa27788d
- SHA1 18ddf5511774646ca1cfe0adf32dde265ea48d66
- SHA512 468c24e81b4184791da8b70aa6b5a148be4f59a134d4a60cf61abbe38a52f4977e5a03d76b752f11f22cfd782893c224243142b01736d48ad4629c865e2d8f40
- SSDEEP 768:YgIQUpZmdWSUpeWRKMFgx5HCJW0fm+aFI4PI/7jaxqJqPqiWvX:VI+UKAfm+aFtPI/7elq7P
- TLSH
  T191F265D6974F6A38E1AC07327C731E8992B8D391FB731717AA53D339ED626844E403A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Lertaro/Plugins/Lertaro.Plugins.BrowserData/e_sqlite3.dll
- Size 1.8MB
- SHA256 aabf85d7a8b416fb15203cb754fcfc9858c8f1dd3bbc7eab82335f6c362ba0d6
- MD5 c080941acc96d6127a60aea18ecaf2fd
- SHA1 13d200e90df0805ac2dba96af5487012fc9841e7
- SHA512 593ded3aea4204a5b887b5c0615dc3d9fd43eabbd728bd5a81350233d31c31942422b8ed092342edc26852d8f39e5076f80a9eeb033fb8781cbef7c557cfde39
- SSDEEP 49152:YIc/cOKjSrEUOFLlb+VAC013+sEoxKQwmJg:IcHXV+VAC013tkk
- TLSH
  T152958D47B3B9009CD8A7C2B8C5175B0BD7F174051764ABDB15A08A692F23FE61BBA334
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Lertaro/Plugins/Lertaro.Plugins.CoreExtensions.dll
- Size 625KB
- SHA256 506a5d11116377233f2a55c02d1f6c6d523abeb80dfa5cfaf4eea8328d0e958e
- MD5 0884e390d6d0efd99060749f74d1ca78
- SHA1 ff191fe8277589cac9f134dc87b284c0a0e0eb4b
- SHA512 61a974e45a1cf86289a717066b2d2af0a06f9d44eaba137be5881d0ec63d24f1a3a59bb85497728f8d53164bec299ec8a25846c38fad7eca24125a83ecf20745
- SSDEEP 12288:A4v2aEQ5TDguOEKLxhC1HhQtRKndKq370J+L4utWMYu7OhoNHKcAQ9:KaEQJMuOEKLxhC1HhQtRKndKqr0buUMH
- TLSH
  T1ABD4292F26C409B3D47F8772BA455A8270244F9FE5315E1F78BF80091C82E6E99D1BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Lertaro/Plugins/Lertaro.Plugins.CuratedThemes.dll
- Size 119KB
- SHA256 bf4e03e90c8249f8fa3e8da2a68e2cbf8b63513b5f55363119e350cf0c263e74
- MD5 af27b03438258507a300dbd2a503322c
- SHA1 e240f9fb535c687123d7878fe13cd9bd506900da
- SHA512 66ca068fcb524801fe1c61769288288b0d0d84bbfdea1583c1c20ad7a481bd2e14244937448a7669d85fc7749c38babf48e2e74a8a935ee41ba40dd9adf04a2a
- SSDEEP 3072:YrfsaAW7ZiupJnkmVJP4992apaqximp/:CsaAW7ZiupJnkmVJP4992apaqxi
- TLSH
  T1AEC34FDED5E8D2F7DE334833EC614940553A6E669D130A07FCEF2628BC9100A4D5AA6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32