cbf950891859ebd4dbf315ace2db8d5d9827fdd0a29f9ca8364b4fc3ee163d91

Sharing

Copy URL Twitter E-mail

General

Target
Void-Nuke-main.zip
Size 75KB
Sample260821-m8ptvaszcs
SHA256 cbf950891859ebd4dbf315ace2db8d5d9827fdd0a29f9ca8364b4fc3ee163d91
MD5 62d5794ea24e773ecc583f41bad63b89
SHA1 9613102e3c25414284e917f8601c0995448bc4a7
SHA512 678ae4e596e1cc34d1b0bdd65ebb9a7a37c507e854acc37b9eb64611b6ea906a704b06f37c1995a20bd764462993ec6ce47bd9fc7daa4375000d4330ace5e747
SSDEEP 1536:hA2vPgb18QfdufhEyUXthlWC+THl0HjehQKbVFk8wdJ57k+/kgTGT:hRQ18KdeStUayCJ5ZFTGT
TLSH
T19273026A891ACC42E11A375AFF4B152477C42928E32EF93B344A143A3EB575251CDBCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Void-Nuke-main/main.py
- Size 52KB
- SHA256 a66e4f92f316decc83a2dc23fdfd0443743298d2ed3cc015fa017c261f36a519
- MD5 6f522a553838a66968f292ba49a0cc46
- SHA1 9857868edf9e0929150b1fd339a3c9d2c6358c4a
- SHA512 841ec0403fe868cfeaffa44cbf4534e4d2cb370a2c541c11d6ffa462b7f8419b5a12a34494aeb5490215f401b88b40576a208ff8d9df75dbe601cbd57a44129a
- SSDEEP 1536:gNMdcAQV5xH4erFTTpysK31ozkD+HYwUwVxeUaP4P+DtwxOlGB5ODggWS:gNMdcrV5xH4epTTpyt31ozkD+HYwUwVA
- TLSH
  T1073361318C4A61229532DC1D48B6AC11F35C3253E9385526B9ECA4C5AFFC534EEB8EBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Void-Nuke-main/python_installer.bat
- Size 4KB
- SHA256 dcf91485a3bc4aeacb7624ad8d343d1c266980b2094f49455fa3a502c070b02d
- MD5 4f31ac0b42feb3428c352af017835ad5
- SHA1 fb5e1946364f156d4a210c60c44ed5bacd65d0ba
- SHA512 6108e51c07cb35f2efbc493480da39548ee829a7ec6155c370de21a2375f8cb4b1fbee7b6c480764978be9f276b7274de43d8220ee1ac0670af510cd17f8975a
- SSDEEP 96:SnXBF0XkzDdaRRE3HHFul/viMGNzQcydKiMJmIrjN8N7U:mZzDdaLqul/vrGNEdK7VXN8N7U
- TLSH
  T194A162573C28D47062B4C6AA5D9D4162F78693D309016DC936BF80E86F163E623BE37E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution ransomware
- Downloads MZ/PE file
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
behavioral3 behavioral4
- Target
  Void-Nuke-main/setup.bat
- Size 108B
- SHA256 1e1e029ebddd4a22cc6f7a9552ce241785debbd6eb30e884f295f64996362cc1
- MD5 135cc021096adb7045649c5d640e19b0
- SHA1 b9f0c1640c18df001a6f59c9f0e22e66edd402ca
- SHA512 89a4e319b4f42950eaa94c0b493a8d29a588345558622c9644003e3d67a94ce27f95af3aff9e0f52b20e10ddbd398b1fe56c04d4f20ca7f31ebf2105a349c087
- TLSH
  T1BDB0920B0021C1BBAEAE4A3A184A52C0A2860140B835300236AE5CB26857E62A40324B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Void-Nuke-main/start.bat
- Size 40B
- SHA256 40802ca59426d3ebe1cfb3909dde469b625b66d994499dac4d36fc79850eb9db
- MD5 3c6b34942cc704ad089e4653e9543ff6
- SHA1 f8f1adad9a5b4e2ceb8386ca96167ce75d6f7f96
- SHA512 e8a429408fc881699fa1fb794dc0225d199f6242ddf923e6c6de5f5f8a2e2f12b952c1305912bfe04c1e3a1b862aa425b2ace69662df967ab51b0bb6d403bf68
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Command and Scripting Interpreter: PowerShell

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8