cdaa857091290bec7e524c9f3e1fb61dfdbb7cdbffeeb7ca43af191b50906b9a | Triage™

Login
Reports

Overview

overview

5

Static

static

5

ReStory.CE...9r.zip

windows10-2004-x64

1

ReStory.CE...9r.zip

windows11-ltsc_2024-x64

1

ReStory.CE...rowser

windows10-2004-x64

3

ReStory.CE...rowser

windows11-ltsc_2024-x64

3

ReStory.CE...ne.xml

windows10-2004-x64

3

ReStory.CE...ne.xml

windows11-ltsc_2024-x64

1

ReStory.CE...gs.xml

windows10-2004-x64

3

ReStory.CE...gs.xml

windows11-ltsc_2024-x64

1

ReStory.CE...eb.xml

windows10-2004-x64

3

ReStory.CE...eb.xml

windows11-ltsc_2024-x64

1

ReStory.CE...rowser

windows10-2004-x64

3

ReStory.CE...rowser

windows11-ltsc_2024-x64

3

ReStory.CE...ne.xml

windows10-2004-x64

3

ReStory.CE...ne.xml

windows11-ltsc_2024-x64

1

ReStory.CE...gs.xml

windows10-2004-x64

3

ReStory.CE...gs.xml

windows11-ltsc_2024-x64

1

ReStory.CE...eb.xml

windows10-2004-x64

3

ReStory.CE...eb.xml

windows11-ltsc_2024-x64

1

ReStory.CE...rowser

windows10-2004-x64

3

ReStory.CE...rowser

windows11-ltsc_2024-x64

3

ReStory.CE...tor.js

windows10-2004-x64

3

ReStory.CE...tor.js

windows11-ltsc_2024-x64

3

ReStory.CE...ne.xml

windows10-2004-x64

3

ReStory.CE...ne.xml

windows11-ltsc_2024-x64

1

ReStory.CE...gs.xml

windows10-2004-x64

3

ReStory.CE...gs.xml

windows11-ltsc_2024-x64

1

ReStory.CE...eb.xml

windows10-2004-x64

3

ReStory.CE...eb.xml

windows11-ltsc_2024-x64

1

ReStory.CE...ap.ini

windows10-2004-x64

1

ReStory.CE...ap.ini

windows11-ltsc_2024-x64

1

ReStory.CE...config

windows10-2004-x64

3

ReStory.CE...config

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
ReStory.CER.v1.0.009r.zip
Size 740.9MB
Sample260819-wpf72aswaw
SHA256 cdaa857091290bec7e524c9f3e1fb61dfdbb7cdbffeeb7ca43af191b50906b9a
MD5 cf860f378092c92ef4c1506f49669a1e
SHA1 179c3dfccc617f858572c213488d6f6bda367b98
SHA512 fcec6dc96326e4c9b55f261f51ff7cfda5b0b86a747cf3a2848ae4260c75eb8cddae42305d0d889d659ecab4a8c1e56d77f5ebb0cf96a41eb51c5f2e97e4ea34
SSDEEP 12582912:HYs3QzpMk8kOiZjoQ+yQHDFgQmh7vz3rNf1oNC/ERbi/XIfkmc7I7jYQAQNqwXiu:PQzYe2yQHbWjxf1KlgwMG/tNqMR0lnWl
TLSH
T167893398A11742DEDF07507AD5FBDD4AED90C0B5C2E110BF341AC29E1723FA261787AA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

adware discovery execution ransomware spyware

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

ReStory.CER.v1.0.009r.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

ReStory.CER.v1.0.009r.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/2.0/Browsers/Compat.browser

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/2.0/Browsers/Compat.browser

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/2.0/machine.xml

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral6

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/2.0/machine.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/2.0/settings.xml

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral8

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/2.0/settings.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/2.0/web.xml

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral10

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/2.0/web.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.0/Browsers/Compat.browser

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.0/Browsers/Compat.browser

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.0/machine.xml

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral14

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.0/machine.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.0/settings.xml

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral16

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.0/settings.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.0/web.xml

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral18

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.0/web.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.5/Browsers/Compat.browser

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.5/Browsers/Compat.browser

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.5/machine.xml

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral24

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.5/machine.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.5/settings.xml

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral26

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.5/settings.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.5/web.xml

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral28

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.5/web.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/browscap.ini

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/browscap.ini

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/config

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/config

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  ReStory.CER.v1.0.009r.zip
- Size 740.9MB
- SHA256 cdaa857091290bec7e524c9f3e1fb61dfdbb7cdbffeeb7ca43af191b50906b9a
- MD5 cf860f378092c92ef4c1506f49669a1e
- SHA1 179c3dfccc617f858572c213488d6f6bda367b98
- SHA512 fcec6dc96326e4c9b55f261f51ff7cfda5b0b86a747cf3a2848ae4260c75eb8cddae42305d0d889d659ecab4a8c1e56d77f5ebb0cf96a41eb51c5f2e97e4ea34
- SSDEEP 12582912:HYs3QzpMk8kOiZjoQ+yQHDFgQmh7vz3rNf1oNC/ERbi/XIfkmc7I7jYQAQNqwXiu:PQzYe2yQHbWjxf1KlgwMG/tNqMR0lnWl
- TLSH
  T167893398A11742DEDF07507AD5FBDD4AED90C0B5C2E110BF341AC29E1723FA261787AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/2.0/Browsers/Compat.browser
- Size 1KB
- SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
- MD5 0d831c1264b5b32a39fa347de368fe48
- SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
- SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
- TLSH
  T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/2.0/machine.config
- Size 28KB
- SHA256 e91782a27fa39fc6c1d6ee8b08529f5d35052310d0006034b878eb04b8f2af30
- MD5 5b791b8493c4e9a55d8c5ee522ce1cef
- SHA1 3fbcec786ac4b6e81b6d2f2ab288cf67dd6760f4
- SHA512 40c5d52de86c42512cc5c4863d14c1a374e95057de73bef11f7cb60f5445994ff5b979099f721e71853569dd5efbc373efba22107fca4a1e9a479589d4a10386
- SSDEEP 384:PbBtBtWR5RwRqrR2RN3RPfRaRvRyRaRIKbX/y4RpQXWBI43g:DuA
- TLSH
  T1AED203703609BDAE494227235C54FAC046BF57196BA86D0CB5FF625CFE2688B93032D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/2.0/settings.map
- Size 2KB
- SHA256 49c6160f9d54af4270a3b4e997fc4a8301f79b9e2070118fa46ddbcbbc44f9a2
- MD5 22c818a23169e12bd3c8587b6394c731
- SHA1 dd2be2dbccd34736719301aee92429d4258ea5a0
- SHA512 c1352e817e01277413a1790a94a4f979dc1b8333874fef28d735441c034c97bf8ce501fd9cd04c47d25541a0c1d54fcd4dd3bee9ac3e8fbde83ada9a1d2662d7
- TLSH
  T1D3511138F708B5F50682052EA45A94D243B6023FA779495C71ECC13D6F2684B83B32DD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/2.0/web.config
- Size 11KB
- SHA256 cf2b54339e069b9e42f7d6795eecbf562c50c1011f4ca8f65f578fe52d97ff92
- MD5 dc6dd6d8d1fc74e76c84b0b38dc6b1e3
- SHA1 574e4b24015852d45ac80dfce8af3c6fd4a4f09a
- SHA512 c835136bf7c203f7ae19c4aae5fb456b1d25b32e3664494be74b11cd9addf647cc256d47e1e5ba99a59638d714e9d43c6be732c2b6d6de60e77977e99bf5ec7b
- SSDEEP 192:wcedeaZSsEMYaWN5bs6yyzEVkEYEG/Z1f5v6CuCCrtQzPwkP/waeKjy:wp5YaWPs6/1zwya
- TLSH
  T10D32BD34171DEDED8B905A530420ABE162BF9B5A2744CD4CF1EF2329EB9548BE3611E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.0/Browsers/Compat.browser
- Size 1KB
- SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
- MD5 0d831c1264b5b32a39fa347de368fe48
- SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
- SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
- TLSH
  T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.0/machine.config
- Size 32KB
- SHA256 e60aec2c5115d65b3acb3c55ea21576dbd770f579166c017125571e46ae560ed
- MD5 32bf879734966ef6659d914a217691e0
- SHA1 7a9bca61e6af9ad720da1d7d24192637d9037886
- SHA512 2dac20c7daef07de93513366d8fd22eb10a6c5d62dd2142ed3b1c485d1b916afd4c8e93045e9badac6e902ed58bf937dbe19490a7d2b5c408ed185271f5115b9
- SSDEEP 384:PbtltttttSRtNRtcRtGrRtSRtBDRp5Rt70gRt2RtTf1RDRty6ugyunHMSeuWuGR0:7K3
- TLSH
  T129E2F1703609BDEE08432B235C5499C447BF57096AA86C4CB5FF725CEE2688B97132D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.0/settings.map
- Size 2KB
- SHA256 ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8
- MD5 ba17ade8a8e3ee221377534c8136f617
- SHA1 8e17e2aec423a8e6fb43e8cbe6215040217bb8a3
- SHA512 c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297
- TLSH
  T1DF511238F748B5F50682092EA45A84D243B6063FB679499C71ECD13D6F2684B93B32DD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.0/web.config
- Size 18KB
- SHA256 e38bb8cc68fe5b4edecdfd288d094b9e8ced7629039b2a347682aba0d8bd7492
- MD5 d081581e16b06480a5aaef8cdfb305ab
- SHA1 771648fadc7ed9a422b4bc26e38d854d066742d7
- SHA512 6312269cfd726a991e574b1da0c3b8a2978b248118c1610d4e8791e83f3aa6d42bdd1f4f81850eaa94c026d51e73c515971a58580cd9dfbbcadf9ba0584749c4
- SSDEEP 384:lJJuAr8F1mJ1ayCk5+H75YaW41DBWTwahst/tlLvSqwwU4FVXaS7L3nHIXYFXc//:jbEJX91Xbi
- TLSH
  T183820030472EDEDE8E522B9354208A9272AB575B33449C8CF1FE2365EB46487D3321E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.5/Browsers/Compat.browser
- Size 1KB
- SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
- MD5 0d831c1264b5b32a39fa347de368fe48
- SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
- SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
- TLSH
  T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.5/machine.config
- Size 33KB
- SHA256 ee950004b576fb28dc85f4b0435ed04bf96612de2e8b53be84d07afe85a0de6c
- MD5 25ff1ec49e3ac9285bd943cf036bd813
- SHA1 392e5ae6b3dad59418bda890952ee27a8b290e90
- SHA512 e4659f07893c8e6c737eed5711acd32c84bf595a6953631d960305434d3e40c73867f4d84ad0b62b167e3bd9631150dcdefac03a23198135a44d3a2f011f9b3c
- SSDEEP 384:PbtltttttSRtNRtcRtGrRtSRtTf5Rt70zDgRt2Rtuj4f1RDRty6ugyunHMSeuWuN:dk3
- TLSH
  T1BBE201703609BDEE08432B235C6499C447BF57096AA86C4CB5FF725CEE2688B97132D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.5/settings.map
- Size 2KB
- SHA256 ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8
- MD5 ba17ade8a8e3ee221377534c8136f617
- SHA1 8e17e2aec423a8e6fb43e8cbe6215040217bb8a3
- SHA512 c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297
- TLSH
  T1DF511238F748B5F50682092EA45A84D243B6063FB679499C71ECD13D6F2684B93B32DD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/4.5/web.config
- Size 18KB
- SHA256 c4cbddd4fd9347b58cc5a72b36dc4ba1ad2bb699e65869d05cd3fb9865f0d824
- MD5 5075af18fe1d2b5f9555d5cc68029814
- SHA1 56c4c47501664bc3bcd54be505cc3d9f7d0761f5
- SHA512 dfe8ed72b013e67c3cf0622cfe7d14ffde97a4d7132ca6690db5cf2d347f3535b475119b01984923ff6c3f39b8865f857c67ed465c3b0358e2fd06bb0dae0909
- SSDEEP 384:lJJuAr8F1mJ1ayCk5+H75YaW41DBWTwa6st/tlLvSqwwU4FVXaS7L3nHIXYFXc//:jbEJi91Xbi
- TLSH
  T12A820030472EDEDE8E522B9354208A9272AB575B33449C8CF1FE2365EB46487D3321E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/browscap.ini
- Size 304KB
- SHA256 4ddd50f31fb968f30bedefc253a46dc3f2890192d05cdaa9e0a64a056eee807e
- MD5 378be809df7d15aac75a175693e25fbb
- SHA1 2d5454e161de8a5b65910f27bd70d9d0ad8fa476
- SHA512 d0d181e806cbd2c016eb0a8786f7d9db877463eaac0195db4e891be111c9ed87491a1abcfa0d9ed7c2743e004e1f4a3f4789333d0b535e63358c672ae833c363
- SSDEEP 1536:D+dN5JLXlU4XteKJeYPMxBUm9huPj3bkeoO3cTKr0AzhjRzi0v5XfDlVlvr778BN:DYPEBOPjLkeOTA0AzhJMutEbbt0oK7M
- TLSH
  T18364FCC27495A47A9135DF3234F2D34957B39B9A8CBF9C4CD8628810DE61C0653BBAF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral29 behavioral30
- Target
  ReStory.CER.v1.0.009r/ReStory.CER.v1.0.009r/MonoBleedingEdge/etc/mono/config
- Size 3KB
- SHA256 5776169973a26a387b8b3e5c0f2301a7ab9a6dd7c7d3efa22a96abc47fbf8662
- MD5 67611b783439b35abfe05a97413bba46
- SHA1 52795ffda8b88701793acc05e87897bdba99a633
- SHA512 046dc9fe5cb46bea23668eb0d9742d32ddad30a6ee85c20839b68cb022f9e2ae6a38b87b9e267edb152b29420e3d169348cd9d3bcd4a7c7d82b3d50ac24b4748
- TLSH
  T1A971FB97F26C89F8B1702A6592FFF7DC41B380A0CD2E2105AE51D6021926F97C943EC7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

adwarediscoveryspyware

behavioral6

behavioral7

adwarediscoveryspyware

behavioral8

behavioral9

adwarediscoveryspyware

behavioral10

behavioral11

behavioral12

behavioral13

adwarediscoveryspyware

behavioral14

behavioral15

adwarediscoveryspyware

behavioral16

behavioral17

adwarediscoveryspyware

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

adwarediscoveryspyware

behavioral24

behavioral25

adwarediscoveryspyware

behavioral26

behavioral27

adwarediscoveryspyware

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy