61d2ead3c725fb687d46d0ae4f5426b33dba84c68eedaf79fcc5a5783dca9ecd

Sharing

Copy URL Twitter E-mail

General

Target
BerV2_815679.exe
Size 13.4MB
Sample260822-ra17faztex
SHA256 61d2ead3c725fb687d46d0ae4f5426b33dba84c68eedaf79fcc5a5783dca9ecd
MD5 3154f6e8ecff33266c0eb7e80d7e6844
SHA1 5f02460488bc889c45d6217764318351f94c812b
SHA512 ff21d65640d54ec9aeb7f6fee2560e544d3f24a44e49ed1af25f484f49020a3b8e13b02b6774926f2586ba7e213e53a7356363ec7d24a869648e1fb47f42dbb5
SSDEEP 393216:iMeEI/RK9IYUuZx556oKz4qJdCzibm1fwY5Rbmu:itZ/UIYx556oKizib2ftXR
TLSH
T106E6333012F2D1DDD7AE0339F77E846B9AD5656B36287050226F8DA09C87F8483AD4DE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  BerV2_815679.exe
- Size 13.4MB
- SHA256 61d2ead3c725fb687d46d0ae4f5426b33dba84c68eedaf79fcc5a5783dca9ecd
- MD5 3154f6e8ecff33266c0eb7e80d7e6844
- SHA1 5f02460488bc889c45d6217764318351f94c812b
- SHA512 ff21d65640d54ec9aeb7f6fee2560e544d3f24a44e49ed1af25f484f49020a3b8e13b02b6774926f2586ba7e213e53a7356363ec7d24a869648e1fb47f42dbb5
- SSDEEP 393216:iMeEI/RK9IYUuZx556oKz4qJdCzibm1fwY5Rbmu:itZ/UIYx556oKizib2ftXR
- TLSH
  T106E6333012F2D1DDD7AE0339F77E846B9AD5656B36287050226F8DA09C87F8483AD4DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  res/share/batch/bat/Remove comment.bat
- Size 47B
- SHA256 65744e0959066f899173daa4487bff0b3bf6b1d95d6507deac1b2ea601254baa
- MD5 9c3773b7efae13bcdcb84849eade1aaf
- SHA1 d64d2fa4066e8c31ea14b39605b021bb9988f8a6
- SHA512 e6182ccd2bd950d4ac31b9c29317f5848119df269082b7be3dfca8ac769c491f9a1192cd64a84605ddde21fb4e6ed176368d9ecad4ee818f40111aa3422a12bb
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral2
- Target
  res/share/batch/bat/Set comment from file.bat
- Size 64B
- SHA256 eaf211bdd13f58c5ce57e1a75daeddbdc614725bae4e0d2e4b20601478d2db28
- MD5 16ff88a89fd3c7efd8270ac55b00705c
- SHA1 1618e587681e9ae5a60b2ffe319813574e3ce5fb
- SHA512 3dbe7006c438dea8cc19ee1148c3e0a6128dc38cfcc03597faf37c06f341734ef0a899e7d19694da79b24732b3aa91255036ac0cc279bb6f1d2b9476a8795e5d
- TLSH
  T109A00203BDC071F0D5006414CE2EB14F31118E154415D7E8A11014E89219F49409E3D8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  res/share/batch/bat/Set comment.bat
- Size 61B
- SHA256 f6edf372a2accfc4911ec2da84c2695e7c2fd82f819b453d5b90ae5192221f87
- MD5 3e7e771af9da721fdac3d3a060fb5dfb
- SHA1 a945666c5fd184329beea476608b9e05964a1b81
- SHA512 739cab456510241944bf91011558791359e66a7938dc893fe761a8ee20f11a581af540e027a1edbb41a74349b4c74c7562a00322d91b074e76ce83fadab75310
- TLSH
  T1B4A00217B5D171D0994029108E5D941B30514F140129F5F8A5C140E85219F0D006D7DC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  res/share/batch/bat/Test.bat
- Size 42B
- SHA256 2684eadf6dc3cc46a3ed781ad825a79f7f7af6c5cedb68b293e618a37be54fb2
- MD5 5f7e7bbc30ab5aa7fe33ced6a7f6bf53
- SHA1 0f4b55bc28dd328aa075f945705207e067067f38
- SHA512 b43c4feb4d858512525f9c59c06b981272beff09b31a96f352f504ca08c5cd58b2800be04dc6dae0b3e58b3a76e72ba21e59a325d2c78777a0553551bd783d8d
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral5
- Target
  res/share/batch/bat/zippex-reset.bat
- Size 42B
- SHA256 443befca948aaee53e39908fdcb1676a791d4ac42c834bd939bf5854fcce6a40
- MD5 c7a6f9e95d434b8f6f319be5720237a0
- SHA1 6c52b3c5cfd74761c2834b788751d53825229c85
- SHA512 607c650e1ca273023d6871bb3a9f59f3ab8e59139fcebf6f7dca330b67e8cd2bda79a52e661cc1d3741a667c6b6e7ecfaaf40d7a69154893a26963c69207db04
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral6
- Target
  res/share/batch/sh/Add to 7z.sh
- Size 62B
- SHA256 11d6202e690ee4aa634e147ba390aef05c43b00c8e4bd8c4163d80f8c41a9af7
- MD5 11e4db5d0464498947afdc9bca222baa
- SHA1 715d11f0fd1896180800f170f8cea873815c9c8f
- SHA512 c40c67f9a803ad6a59200baf4746adcee2610142cc1417e34f1143eaa6875d30e13440abe38d13363286c29c32524d74c6f7415464f8a469947518217d693572
- TLSH
  T1A2A022300030322B023CC30800B88C2003200CA3B3820F3A000C033022CC020800C0B8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  res/share/batch/sh/Add to archive....sh
- Size 67B
- SHA256 fe698a3fad231c564e6c48c4b798a639ceca1b504936d354ca8b6c0ec0d0cdb6
- MD5 f6e444dddfd51c9b07b30e9b118cca50
- SHA1 da6059114e876efbaf4d0f81e8f43da063f99d74
- SHA512 c4c761f6ad2463d59f42221d12adb6952072a6dc93bd45eb643b9df004c24d55fbf95848cdc9e38cbd2bc06cc85fe79f12fac1e93352f012565e2cd223f68fe0
- TLSH
  T10EA02230A830322B0238C308003ACCB003200CC3B3E30F38000C033022CCC2300080B8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral8
- Target
  res/share/batch/sh/Add to brotli.sh
- Size 66B
- SHA256 10393edc373f91b65883f3a5f19cb7e4b57e00a799f5f5bd08ffa215201fa889
- MD5 2e99f0e45262534f933eb31e15173a1b
- SHA1 82af2b1da074bb47fae0096b52b45515b8855fea
- SHA512 90a7869474d8d4d8fa489153ee3bbe2467b580fbb95ee7af53cbbfd21cbf8d878748127c938b47b51843d1442a5d1be1864a862452a47b579b5dc2b566188d3f
- TLSH
  T18FA0223020323A2B0338C30800BC8C2003200C83B3820F38300C0330B2CC22080080F8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral9
- Target
  res/share/batch/sh/Add to bzip2.sh
- Size 65B
- SHA256 ecb0b98b9bd656fa96b564d1127365b455ebb48c1de451f989916e17bcc0fea6
- MD5 c3d21b82d00dc7ac9d59c52f48610c3c
- SHA1 db5d9adf1cdbf91612c66e5ce10b1cc13f9d51d8
- SHA512 9f7e637f2f037dfaebaa5b030c47875306782f1a97164b1368fb8fe3a8349f55a8c94f8f54bf55b33210d0ce96f543a7ef27983a37b0cfc4ae4f6bbfd971ab51
- TLSH
  T166A022B0003033AB0338C308003C8C2003200C83B3828F3C200E833022EC020000A0B8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10
- Target
  res/share/batch/sh/Add to gzip.sh
- Size 64B
- SHA256 50f0bf6e59aa2c771c111e3a527788af404b2f88ac46a78944d259c5e39bb927
- MD5 9284443b808ba1e671b0a4d985a2da37
- SHA1 384e7c1d8bf3fcebc89e307f6d9dc9f3463113fd
- SHA512 b8b65927cc1971f69cbd37d0fa95576e61b0ad6404c41375f947f2e3c6a38acc3d5081b289a5f453f1ef9878ca436642b712206886d92941e811257fca67324b
- TLSH
  T1C7A002711570776B4238C70C15398C6157654D97B3975F38545D833166EC661445D0BD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11
- Target
  res/share/batch/sh/Add to pea.sh
- Size 63B
- SHA256 035f165c6061cf8c9918670ed0748cbaca879dc3c6cc113f4e79659a7f831ef4
- MD5 11551769546c7d196eed4c3400713b0f
- SHA1 93e4f11d6ea0faabfa0dd12b4ee11f6f71172c75
- SHA512 7e97b7f8710025985036371132b96b0860881212ed963b5ba7c404f68bd99e2da59a255da85812e0081d0da9e843afc6f0608f76dd8c4504cfd50b28abd801ad
- TLSH
  T188A0223000B0322B223CC30800388C2023200C8BB3828F38000C0330B2CC02000080B8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral12
- Target
  res/share/batch/sh/Add to tar.sh
- Size 63B
- SHA256 9dfba4adba849a0bdae3e573428f9bec9b66394734414d9a46b9e8c1189ef106
- MD5 3f78b48052f5d38412395a510006a7a7
- SHA1 39c719b8d2640ce99f86ee1ea2474e3c1dc4149d
- SHA512 1ffffad13a72b469eea54efe4110d49ecfbb5c9169226592e0ce498566cec0cd41f81a779f2c87524622f015d3598a8c64cd291e1502b2c1ac67e071582bb745
- TLSH
  T1ACA022300030332B8238C30800388C3083208E83B3828F38000C033032CC02008080B8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13
- Target
  res/share/batch/sh/Add to wim.sh
- Size 63B
- SHA256 5ea8521e04b99dababad8af28a97469087ba07b8c4215445233c9e8bc39cb6f4
- MD5 68962de8b3e0da8c61667a8e44abb4fc
- SHA1 58722f2c120af7e322b5f7dcb593558eb3cf7c0d
- SHA512 383be1148701f64e582ddd99080ba29957e9f1808be3ca2da8432e571310be3d294b4ea8facf014db919dd8674c3a052e7d1002f79ff83349f0385efc0c646a0
- TLSH
  T1B9A0223022B0322F0338C308003C8C300B200E83B3820F38880C033022CC03000080BC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral14
- Target
  res/share/batch/sh/Add to xz.sh
- Size 62B
- SHA256 cf960d048bf6dddc5e5a582039280cbd0b70c7112eba079ca5fe0d1aee2e0152
- MD5 ada314ab218bc149c1d9aef344bde211
- SHA1 04c564aab2941884b978e07616a7e04fd5b13211
- SHA512 4f413ea1b10faa4b59c4108a7ecfb141cb4d3f6d78bae977cdfc01763b751d0fc2c0c58eddf5e8507c39b05c41f2bd1fe88037bb251fbc5a8bb96d376b5264d6
- TLSH
  T127A022300030323B0238C30800388CA003200C83B38A0F38000C033022CC02080080BC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15
- Target
  res/share/batch/sh/Add to zip.sh
- Size 63B
- SHA256 c0c90cbc505076dada01c75cb3d1a594faa14e8e1a1658a96bbafe5a66bac40c
- MD5 aae73e409e3cc5d95a307a6e0099b03a
- SHA1 d632055ba504b15bda41f4419ea1bf22b69d0def
- SHA512 74710b375ed58e7b3ac426aaac6d0997ed0cfadf4e556363638f6f4102b603a6941eff5bb7cb6060f9b6d6651d22939453a5a7a21557a3defa555febe32b63c5
- TLSH
  T121A0223002B0332B0238CB0C20388C2003200CA3B3830F38000C0330A2CC02000080B8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16
- Target
  res/share/batch/sh/Add to zpaq.sh
- Size 64B
- SHA256 12f552f032c79fb10d1d307793b537ef9398c515b32d34e5ea1adb823f630d1f
- MD5 23261185a0a9a0ea4069837773666097
- SHA1 98ec149c4b33c7757735385ea52bb1531a946e9b
- SHA512 a44cb2782059acd5c3aee0a99ccb8569b5879b08ecd23ed5e2bd3e94f507d239d36ae221003205591e5e13468e89166f14c33f794373e3b48fbd48c99889a0c7
- TLSH
  T12CA022302030323B023CC30800388C2003220C83B3C28F38200C033022CC82080080BC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17
- Target
  res/share/batch/sh/Add to zstd.sh
- Size 64B
- SHA256 92cab87ff87caee9eff33941899a93d2538866a1a777f5dd11cd691574846db2
- MD5 5eddd649fe13acd5ee5c868b38db6f80
- SHA1 3c0d67106685c6133d3710588d2518193db22dc0
- SHA512 37685b7c4cafb1b52cd3e99b50633a93a93fc8d4f9d55eac32ce61f2a4cb87e42bc07d56d7f501dd31e25af56e65425bd8d154acff82279e3f0042fa76b1b78f
- TLSH
  T154A0223220303A2B0238C30822388C2003200CE3B3822F38000E83302ACC220020A0B8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18
- Target
  res/share/batch/sh/Convert.sh
- Size 67B
- SHA256 45d7a2aceb805d27be95ce1e6acd88dc6a5b62d51cefa93d14496713ece3deeb
- MD5 f5398d88544a02b1cef0c303b69f3cc5
- SHA1 a13baad66f138d4541ba413f4e210e3fc6468c4f
- SHA512 47a0db256b115c6603fbcb2449dd1b949c4c01713d31a940c185dfd585dc137effe7ae5100a02463de7a3c24f2679d268b7e232da452db3867676b38ca935270
- TLSH
  T17FA0223000303A2B033CCB08003A8C2003200EC3B3E20F3800CC033022CC02208882BA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19
- Target
  res/share/batch/sh/Extract here (smart new folder).sh
- Size 66B
- SHA256 f8540fa7b4114f357d99c309b407b67c8d0aa604f287741960e704dea753c296
- MD5 3130ef18f954024a24dde633ce7215e5
- SHA1 2b2cd9620582808f047553131982759ed37ac4d4
- SHA512 8c7015c3f686c097b48e6a3c10605d1442320a42cf7fbab6d89766dbb251b17f1291bb16ffbaa7ef5833a51989e8b0d2f1068090cc74de52191e93b6fe10906f
- TLSH
  T145A01132203032A20220C20802288C20832C8E82A2C20F20A80C023022CC02008080A8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20
- Target
  res/share/batch/sh/Extract to Desktop.sh
- Size 67B
- SHA256 2ac7903953f470dbd08a9c5ceeb335f0dccf965bd448b1a8fc808b5fd13af305
- MD5 cd9c427e29a8d28c0cfe65daa3f55434
- SHA1 8b761ef2c3319ede26c4c521aeaf6c6516897a3f
- SHA512 fed0658eccac26d15d41537c9761174cd87b977920148cade9d428592a1d1816b87a72dd7881a5370d73a90f4147630c973baf89d10923d6c75547b78efa42cc
- TLSH
  T1EAA0223308B032230330C308023ACC20A33C0F83B3C28F30A08C033022CC02008880EC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21
- Target
  res/share/batch/sh/Extract to Documents.sh
- Size 69B
- SHA256 19d62217794e9313b2ffc1536bac92f11bcf49c83dd60a2d4b0510f0698b6f25
- MD5 7c4da36e8bc9b9a4dc24084ea1d2e9d0
- SHA1 78c95226c9a70fedc1d5cdae3c801e2e1ae761a6
- SHA512 1f48420c8482c0893328e50f99ce1471ad86fd93fa116ed8fd440faf0496523f144646bdcd6e0cd1f5f6adc8fda8c4e0c05bbe0791ee15dccd59b7a382dbdb75
- TLSH
  T14AA022B2203032230330C308233ACC220F280EC3B3832F30B00C033022EC82008080BC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22
- Target
  res/share/batch/sh/Extract to Downloads.sh
- Size 69B
- SHA256 0aaaea1a329c834ab330c735af020a3aace372b4bb5831887b42b73fd809d599
- MD5 33f44abd121feaec8d172a2ddedcf304
- SHA1 875aa80d1941cd73f1d0d127ffae94c0a41407e6
- SHA512 6826b887d8a74b4f6e27e4147a814f0c2ae2fb7eeeb2a46db6a2d77bef3898986c007d2c3214f8b77b38503e3fed32ec5ca484943c01684f1c082797384e3d9e
- TLSH
  T19EA022332030B2238330C30C023C8C20032A0E83F3828FB0A00E0330B2EC0200C080BF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23
- Target
  res/share/batch/sh/Extract....sh
- Size 64B
- SHA256 42f7372b5679f7d539d82868349961d793b15648b8050c9b36c0f39192dcd004
- MD5 5d9e7f2233146dfc643068d116c48362
- SHA1 ed360a8c9ac2bfa919e06c400f3eb6142625f139
- SHA512 d6f5878f112d858a5f364fd255e46950a6c92ed8d633ca3e94ee6a1d4df82e0f51d8e793073a5a7a90ae838f613863bdc8fb88c33df6e7587396503377bf4999
- TLSH
  T1D0A0223200B032230320CB0C22388C2023280EC3B3830F30A00E03322ACC0200C080AC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral24
- Target
  res/share/batch/sh/Open as archive.sh
- Size 73B
- SHA256 bbe7b00b1009595ec8d20a4906c28da6531411579c8496f4ea3b2cf3e84f8b66
- MD5 c2de791ce1896edcc9c059492a72a4b0
- SHA1 082acd7e709f7eb4b50b357119108bb6235e9ca9
- SHA512 2324cfef27212e728ff83dd2b2eb1906585125677055fdc153615c044aeef8f9ba8bd24cf3db180010acf04c11b719f3e932dda7ed27b0a08886d237adf4c43a
- TLSH
  T1E6A011B2A83033A202208308023A8C3283280EA2A2A30F20A02C03302ACC82208080A8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25
- Target
  res/share/batch/sh/Remove comment.sh
- Size 69B
- SHA256 fcad5f68eace22e3922fc89c273175564eb49558a0804d853aa616aac6cb86df
- MD5 2776691f34ca5cb0d87be960b748903e
- SHA1 09d9f100e81533665c1dda1bead3d6d6886bb3c8
- SHA512 6b766f397d2c3dfc395a1f48447e8806561be0fa3659708ef8f266b1223a9c8651d8591f02567ca99359a45b9b189e4c659d20e40220902630aed1aa31b90666
- TLSH
  T114A0223002B038030220C30C0C388C2003208E8BF3A22F38008E033032ECA2000880EE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral26
- Target
  res/share/batch/sh/Set comment from file.sh
- Size 85B
- SHA256 46a988642b71e5866b3cec7aa70774b3b6a2294004f87be0ef92e9a541bc5417
- MD5 5da90a5b93d9cd12572e5051c5051e0b
- SHA1 a06552343e44adf2e20ade163f622fd26e74911d
- SHA512 bf6ed22f50c0b09288b0f0ff364ac3d19353e3128e76e4fb1230b230da4e4cd2c29fd529f95dcfb73d09ad5a06d56b048d62249fba67b74e777551c490c8fe32
- TLSH
  T119A012703CB0307241109308893CDC1213708F57A2524F3C100C02B011DCE11004425C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27
- Target
  res/share/batch/sh/Set comment.sh
- Size 83B
- SHA256 d39df576f43d644fa5cdcf5fbbcd328ef6dcf10b8322eff35ac221c1c95db944
- MD5 d41a232237f759e5c10222ef8be7837c
- SHA1 ba2340b4602e358ccb81eb89ff8f6aab6cd76c3d
- SHA512 b007e6e90cc07fe03ccc227fc5c21d5a83f13b7ae18664381c720dc1130a9c7a0474e8932ac7d655b2318f161d0199342b35cb5f1270c965afa8b7ba71f36581
- TLSH
  T14EA0123024B130524110920409388C6103740F5662667F3858CC023021DCB12001416C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral28
- Target
  res/share/batch/sh/Test.sh
- Size 64B
- SHA256 875a2fef94b14ff1a01aa7f8c130a56c4ad978422d4bba8e1a7bf7b22b3c728c
- MD5 0a283fa1419017aa26ca23a7781f1f9b
- SHA1 7cd5c104f2dc70a11eb9facb82f811b412ac8523
- SHA512 b489b72a232f59e09e21e01f75435fac70e4962f85d446fd80355d7c95b78654da97ce7865c6a871aaf7b71ce479eff37dcede7d6941ff980814391dca87c497
- TLSH
  T15FA02232203032238320CB0802388C202338CE83B3A30F30B08C033022CC02008080AC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29
- Target
  res/share/batch/sh/zippex-reset.sh
- Size 64B
- SHA256 e97a45f454d877739453f32e8d12fe3b7b21152693c589dd3724cc5bef85be16
- MD5 bf99e62b0c5422ad86b210d31feb6b26
- SHA1 ac22830fff3f32e9497cc61982dba92a608c8495
- SHA512 062407e1cc8cb47991477963d10bc861470fae1e6f8bcfbd3d294a15082fcf52ef637268d167b1579c92e05499f751c37a389a7e7c38063b0c23884edaae119c
- TLSH
  T1D3A02230003030830220C30800388CB003200C83B3828F38008C0330FBCC020000E0A8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral30
- Target
  res/share/icons/zippex_seven.icl
- Size 224KB
- SHA256 c33ace4f7046c171bc809301661ee3cd2d64e81eedb97ee25907f50a8d382bb4
- MD5 aeae594ba218d2dadba678a22089bdc2
- SHA1 4512826bde391877a805e192e194b71866078990
- SHA512 9114af18c92534e54ee62c2691945b43e2c18bb53589b0047e0b01e2abde52422ce1b771465d8380d813c5814c87250db21901eec1f0362259efdba41561ff22
- SSDEEP 1536:hHHHHHHHHHHHY3333333MHHHafP7b7UGs:9Gs
- TLSH
  T1BD24E6DC683CB977E8B60E76561BF42345167E0EA5FDE8450101BC7BEAF4B12989E0C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31
- Target
  res/share/zippex_help.pdf
- Size 1.4MB
- SHA256 619bf041a8b9a5cccb0f51dd51e078c8f0770c9ff64b40ed0f697a0142567cef
- MD5 18059b444a8531dae209c74ce08591f6
- SHA1 e14e1dd8af3cfd1692a53f4bb1bbf65b1c86451e
- SHA512 6999d1dbbc283e92adf7a12d171571f4afda17e89454216971f52d0dbd0568d5da17d69cb6abd71c743b6b2293e472dbbf69e12c5894058d64e829cbb3a1de0c
- SSDEEP 24576:XFkYXzNjxT+KrzGZQsTM+PUqIyEsKgAMx2MfeWWUmlTKhb1llbllCaAX35h3CVPW:XFAyz2lMAGyEbdLPnvCVg/
- TLSH
  T19D65F1A7D881AA97E85841B8BD3F3D7C0F3F3686E4C439EB04350F86AB909454D899D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32