General

  • Target
    YoutubeDownloader.win-x64.zip
  • Size 51.9MB
  • Sample260820-ysngmafe79
  • SHA256 9e328b306e42d41544c0adf0fb908d987e8d8f28a980ead214e201c0957e4033
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      AngleSharp.dll
    • Size 942KB
    • SHA256 ffd86f090b2dec5699a5d2ead65e821dcf9579541c97e787633374e15ea213a9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      AsyncImageLoader.Avalonia.dll
    • Size 42KB
    • SHA256 69a11d9ca38a56b7f9cedb859da09be44a2fd60832c113aac01fcc9b5949d0a9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      AtkSharp.dll
    • Size 299KB
    • SHA256 b6786684ccb865d668320d6d81acdd4d065f3eec3a5775fad81018fc2e1ecb79
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Avalonia.Base.dll
    • Size 2.0MB
    • SHA256 ee267f25db7daeeda7bd1fcca3fd283a865e33614f096ada744339b870e9dda0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Avalonia.Controls.DataGrid.dll
    • Size 359KB
    • SHA256 1bfdd2660a7447d40f1f7116da32581282aa6443f5e306e0496c8cd6d824b239
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Avalonia.Controls.dll
    • Size 1.0MB
    • SHA256 c91948f555efc3838ae42d22376833c4699ef2828395d63192041b8da754be87
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Avalonia.DesignerSupport.dll
    • Size 205KB
    • SHA256 a8fe42b4561ab7750e34ac2dac04116da3ca6f5a8639844782863a1393244116
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Avalonia.Desktop.dll
    • Size 15KB
    • SHA256 76ddfa340f008d96a903235b78e8d1f2b06cba025bce686e52edeaaf028528c6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Avalonia.Dialogs.dll
    • Size 239KB
    • SHA256 a5d75fceec334be26530e35021b6ccaf3407b85b8fb18b8370909262a0f076d4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Avalonia.FreeDesktop.dll
    • Size 196KB
    • SHA256 a9b397c0e640e6e4d57922163f31766f5c290572c4923004266e868dd731ca0b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Avalonia.Markup.Xaml.dll
    • Size 86KB
    • SHA256 594b7fe2ec4b492246c4407725e245043f16431c54b5741e10a74f900ce8ca5b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Avalonia.Markup.dll
    • Size 64KB
    • SHA256 6b6e5540ebf9274587b704f6b3a1bcdae6d40e23d52eac10347b4f134a7bad04
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Avalonia.Metal.dll
    • Size 15KB
    • SHA256 e310388da9cd1400919a6d5d639823c1e4c3214d0c56e38d1366717c7606ed6f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Avalonia.MicroCom.dll
    • Size 15KB
    • SHA256 b7e91f7659b0ee746d2788fe6e0fe6b3ff006a216014ee02d5f5563b9f944a83
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Avalonia.Native.dll
    • Size 329KB
    • SHA256 025089c74e521f3803050d2f5f37882084e7eb362c120fb706d5e28dd978c5e8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Avalonia.OpenGL.dll
    • Size 113KB
    • SHA256 07d0e3359ebb7f0b6281a16637e25f303fcdfe10e47a6364fcf476826ab26dfe
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

adwarepersistenceransomwarespyware
Score
8/10

behavioral7

Score
1/10

behavioral8

adwarepersistenceransomwarespyware
Score
8/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

adwarepersistenceransomwarespyware
Score
8/10

behavioral17

Score
1/10

behavioral18

adwarepersistenceransomwarespyware
Score
8/10

behavioral19

Score
1/10

behavioral20

adwarepersistenceransomwarespyware
Score
8/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

adwarepersistenceransomwarespyware
Score
8/10

behavioral27

Score
1/10

behavioral28

adwarepersistenceransomwarespyware
Score
8/10

behavioral29

Score
1/10

behavioral30

adwarepersistenceransomwarespyware
Score
8/10

behavioral31

Score
1/10

behavioral32

adwarepersistenceransomwarespyware
Score
8/10