General

  • Target
    core-release-x64.zip
  • Size 135.6MB
  • Sample260819-mvx83asclg
  • SHA256 8c67ef26560fd1cd62932c1db6d5a7e748b3dba403f8e444f5bbeb2fcc4c5d4d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      core-release-x64.zip
    • Size 135.6MB
    • SHA256 8c67ef26560fd1cd62932c1db6d5a7e748b3dba403f8e444f5bbeb2fcc4c5d4d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/How To Setup.txt
    • Size 485B
    • SHA256 289d7fd63b98894a9789a148a094b6205c579680ff5b2699cb4937661d330cef
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      bin/lib/app_11.dat
    • Size 661KB
    • SHA256 12cd09f8df7cc82f28435f765763f70d5019c8a126a783be792d4e732c4107b3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      bin/lib/app_18.data
    • Size 661KB
    • SHA256 bbc707395523657107f89e9070f4c387561aa4ee5b1b203deed26d1635ab8400
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      bin/lib/archive_123.sdat
    • Size 559KB
    • SHA256 b8ed9fde794d57c917a5d9e0a17dd88e0e015f565fa2b6a9413cc2b4f30d33e6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      bin/lib/archive_125.sdata
    • Size 533KB
    • SHA256 a3d284d26820e753b898524fcaa85731850c0de651e4d458a9f224c423f609f2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/lib/archive_13.dll
    • Size 825KB
    • SHA256 fcf7646f364cc533941ae301cae7506b30210160cc95fc7d6f07480c7d56a01f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      bin/lib/archive_14.sdata
    • Size 605KB
    • SHA256 ae1578555dfb34f3cd483a5a8bea62e6549cbbebf67ce11863a6fe5dbc3c6d93
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      bin/lib/archive_49.dll
    • Size 545KB
    • SHA256 759761105d64df2218ee9c09691e3707c9162d6dfdabc2c01716607338ec489c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      bin/lib/archive_58.data
    • Size 801KB
    • SHA256 a633408488fcd6041b34b7f1199c3516a71fe6e5d82b5e9add64af48f4d7e813
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      bin/lib/archive_60.000
    • Size 589KB
    • SHA256 5795f95263e6700944bb9ca0434801b5ec21c536c02672679d16f8889e6f97c0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      bin/lib/backup_93.dlm
    • Size 666KB
    • SHA256 082fcfb2977b02cd7216256aea1adf09423881ce88160f65d2029650158db7b3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      bin/lib/base_126.sdata
    • Size 819KB
    • SHA256 ac399f23acbc4232909f92dea223283f37c887b620e9a37a9fc101224b236398
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      bin/lib/build_103.sdat
    • Size 679KB
    • SHA256 1ddeccc9cb69b5d4874f7883d11132692d1798f4a9217ec5a115a805ede657a1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      bin/lib/build_128.dll
    • Size 820KB
    • SHA256 ed9dd863bae1f3afa3d962c841c259cd24b39f5067a026b8308dbea3b21f23cd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      bin/lib/build_55.dat
    • Size 761KB
    • SHA256 72175f2be974b861eda133f835819ee947d753c05205881f2512dea52d1957a5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

discovery
Score
3/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

execution
Score
3/10

behavioral6

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral7

execution
Score
3/10

behavioral8

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral9

execution
Score
3/10

behavioral10

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

Score
1/10

behavioral14

adwarepersistenceransomwarespyware
Score
8/10

behavioral15

execution
Score
3/10

behavioral16

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

execution
Score
3/10

behavioral20

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral25

execution
Score
3/10

behavioral26

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral27

execution
Score
3/10

behavioral28

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral29

Score
1/10

behavioral30

adwarepersistenceransomwarespyware
Score
8/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10