0ac89fa2ad1d7d4c410f8d6cfaef1cfa6873a61261678a5ba4035adb88f21292

Sharing

Copy URL Twitter E-mail

General

Target
toolsupdated2.9.proc.rar
Size 3.5MB
Sample260822-swe2rszzdt
SHA256 0ac89fa2ad1d7d4c410f8d6cfaef1cfa6873a61261678a5ba4035adb88f21292
MD5 68650668f73c1d786fb334d5c1f53f56
SHA1 a38db3a2de6224dec53ca3850256e5aabcfb8d55
SHA512 a7a9920fe101705dceb5d3ee39ff40d97787e24e6cf69c5ff8e6346541df6a987da722e9fb6dcf912a665bebadd9f8c8c198834ca1eebcb8871fb8e5d66a75c3
SSDEEP 98304:PY+GAqmy+NH6VHCeyvrPDqZYU3h2s7/YNK+B:PYK+AeUU3dYtB
TLSH
T1A2F5332EA7448FD6793A61243E64E35F341BDC7B47231BDCD428DB84A8DD468E9AB013
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery ransomware

Malware Config

Targets

- Target
  toolsupdated2.9.proc.rar
- Size 3.5MB
- SHA256 0ac89fa2ad1d7d4c410f8d6cfaef1cfa6873a61261678a5ba4035adb88f21292
- MD5 68650668f73c1d786fb334d5c1f53f56
- SHA1 a38db3a2de6224dec53ca3850256e5aabcfb8d55
- SHA512 a7a9920fe101705dceb5d3ee39ff40d97787e24e6cf69c5ff8e6346541df6a987da722e9fb6dcf912a665bebadd9f8c8c198834ca1eebcb8871fb8e5d66a75c3
- SSDEEP 98304:PY+GAqmy+NH6VHCeyvrPDqZYU3h2s7/YNK+B:PYK+AeUU3dYtB
- TLSH
  T1A2F5332EA7448FD6793A61243E64E35F341BDC7B47231BDCD428DB84A8DD468E9AB013
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  AlphaFS.dll
- Size 359KB
- SHA256 837f2ceab6bbd9bc4bf076f1cb90b3158191888c3055dd2b78a1e23f1c3aafdd
- MD5 f2f6f6798d306d6d7df4267434b5c5f9
- SHA1 23be62c4f33fc89563defa20e43453b7cdfc9d28
- SHA512 1f0c52e1d6e27382599c91ebd5e58df387c6f759d755533e36688b402417101c0eb1d6812e523d23048e0d03548fd0985a3fd7f96c66625c6299b1537c872211
- SSDEEP 6144:QDyJst+jyCnzLp9hvHsPvPvPvS2JQvlojidPp:QDyJsvCnzZf4U1d
- TLSH
  T11B7429202BEC412EE79D263EE4A16516A776D1C5132FBB89744C9FF76C8738D86012E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  BLTools.exe
- Size 2.0MB
- SHA256 dc5e70f6ef6c705034aa4586af024e098edab5d8faba9479ebab93bebf342c13
- MD5 36d3297bef096e9a591cd5ddcae0a516
- SHA1 79788a7368058a2aee23e81cabfbbf9eaefdb346
- SHA512 ab1d9ecce0d54af0bcedc10b48d9ead2a5a9b00ed162291fe1b0621198fce595f21617f8ae8c5c80fcd81f2d05d1399cbfea710d236dd7439feec899a383cb5b
- SSDEEP 49152:SYzR0wFhlMv6DSdsHXgzSq0Xll2JE0PF:SkR0wFrNDSGH8Kll2K0t
- TLSH
  T127A58B12FB14F512E23D4A71D0A940F786362C9BF44ACA4B38D67D8F36B27415D2AE93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  CookiesCreator.exe
- Size 200KB
- SHA256 a61fe2cf0e51860f3bfde5b6159f926748f7d2d0b7b397831bf695f63cf99106
- MD5 aee127951627898ff120d3f4a3ada964
- SHA1 1da0e77703872601b7cd6b74a5696d286a7545af
- SHA512 221f166ba5dd946a51301bb254a433f76c6d9cdd616d8bb3c07d88a32e3be845d348975ce0166e0a004be25d696acfce84573676f52eb79951f897302ed13866
- SSDEEP 3072:C/lXPYzLKksPnCWBxfI+ieRR0bC9BxfI+iek:mCCxQ+ieRuWrxQ+ie
- TLSH
  T11C14C75739434BA2CA6CCDB1601F40F203617D7BDDA5C6A9EADCF2D909223C1B50EE69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Extreme.Net.dll
- Size 121KB
- SHA256 8a6518ab7419fbec3ac9875baa3afb410ad1398c7aa622a09cd9084ec6cadfcd
- MD5 f79f0e3a0361cac000e2d3553753cd68
- SHA1 4314bcef76fddc9379a8f3a266b37d685d0adb79
- SHA512 c77516e7f5540ecd13fa5d8cecfce34629acecd9b5a445f5f48902c9e823328fa9a6694ecaa39f5b6053de61c2b850c2d87df25357548afaad6ec37eb3e5e355
- SSDEEP 3072:bdoECIgjBibgp2tBqL0Y++ruXqMG4ih3lbpMqc:bdoECIgUrG
- TLSH
  T10BC33B6C67F80E1AE2AF57B9D47042408739B60AA20BEB1F1D5874EE1877791C901FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  License.dll
- Size 5B
- SHA256 04cc5b3b49a7e9e9b6c66c7be59a20992bf2653746b5d43829c383fb233f88fa
- MD5 b08a5c34cf0a06615da2ca89010d8b4f
- SHA1 626a77d86d9d12d1772f788cf67c8e77fd9f797a
- SHA512 5dce742cd0f649461b08f8f8018e0fa39ef19e813a74a91f434a15754a4fa8be83096e8fa49cf1828ac011220b7ad3724e7e4ea9cce7937a3168169d8e561b2c
- MD5 SHA1 SHA512
Score

1^/10
behavioral11 behavioral12
- Target
  MaterialDesignColors.dll
- Size 295KB
- SHA256 b5ec30c93b1d2b4631ee2b178750ec92e302e2e331090ec9783981b9572354f8
- MD5 5c108c4da6d03f0fa2c3b4dc7890cb52
- SHA1 48af67b6166068b6f138306bbd1157c7583c6e73
- SHA512 48d055610eead361809bd839c66ccdca1d5e0d9dffe15af9d15afa106ee7791c8b17acb91f2aba5cf3dda2997b049bcf70b43c3b56b8b01f1fc7bb845ce6c91b
- SSDEEP 1536:wr1In+fq1fDfDemxD0EsXpGX0EOAcTtU7fKoVxbzQcV:G1WB1PerAjOAj7fKoVxb1V
- TLSH
  T11354755C1250E0FED813567A5838359972277A36AB948F8AEEAF71FD8C1600B4F331E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  MaterialDesignThemes.Wpf.dll
- Size 9.1MB
- SHA256 344e2cee979e979932f504dc76bd75e97ae1ff46caa3fe2795adfe0a866347f7
- MD5 824cbf63999f954aa1747f79586a4d3c
- SHA1 5f1cd6346a45024bbbe09e304c12b6f6bf227d5c
- SHA512 d36149f7cb5ffc62dac6bb4521105d09fac988de567e181fdca4f23e5079aca5f4292e1d314f797f1a597263ddac0210060cb71c111565717e3a288a47770c51
- SSDEEP 98304:PW8EOPXJDntBksKY+ND3WyA4+TLVei10vMzPv8/4C8B5XVS49Xzy83IiEcJMrCRM:PW8lnJ45/9iD54+V11bFv4z
- TLSH
  T100A6B72CDD05A727E2B7C164809E0A1BF1A2856AF5395F0E70CB1B693247A433E85FDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Microsoft.Xaml.Behaviors.dll
- Size 142KB
- SHA256 8e77a1dd5e2df4d4af801376cc3428b082eb49fcb6e647b933967fae12ad9d5d
- MD5 95f46f34c099421d917d5feadbb33edb
- SHA1 3d1cb9cf59000012734901a35baeb3d9c1dd5db3
- SHA512 c9c9f72980316c68ad2a8dbe2c6c563c0deddfc9e845674d0e2f5313a0ae285d60a755e2ca04164f78b37a36521259307b3eb7d43f5ec9a9de5507bda7e4c1b8
- SSDEEP 3072:lN+EM1X0WlL9JAn11M1dXcGkOsizI35rCj8SIP:v+ll79in1h6
- TLSH
  T10DE35BA553FC8A2AD7FF0636E0B011144631F797B923EF4D1EC4A1BD09A378166126BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Ookii.Dialogs.Wpf.dll
- Size 103KB
- SHA256 285aa8225732ddbcf211b1158bd6cff8bf3acbeeab69617f4be85862b7105ab5
- MD5 932ebb3f9e7113071c6a17818342b7cc
- SHA1 9ce2d08bc3840632092325abcc8d842eeb8189d4
- SHA512 6b6086cff7b916c0c4536e3c7cba4ba17d6c4be2e4a88a5877be852e197f1f9c9c120d1295acf2b4277a9badd8cfd229ef3c1ab2049d0aeec22d3033be156141
- SSDEEP 1536:qgoPBGuyAy52V+gtTLq6ZUc68h8O0SB/XBboIawHUPV5bKLh8sm6b0gl:qgwBGu2IV+ghd68WOxXBbx+5of
- TLSH
  T181A37D36335C4BB9C9DE0EF8E91555998330E9442267EF1B8885B2791DB33518BA32F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  PresentationFramework-SystemXml.dll
- Size 8KB
- SHA256 c2222139c832cf3827122767072f7dc888f3499bfabc0ba4f60e31a44fd5c451
- MD5 df76602772b6e8b068ff808c4150fc64
- SHA1 a4af669e11bf185be865d8629ec9498ff75d081f
- SHA512 ed9ebac341547accf3e0d8c73b381b8dbc3393f8de47046c032e2a7dfffa965495b126baf5b6ee7c9460088e25734eb7ec2fef790f5bbeeef93e589a490fa907
- SSDEEP 192:0y/Rs7qoQh3vcXP+dKsY1tsbCyo+hCkPd2JCWfDW:0o4TG3k/+StfyoMCkPd20WfDW
- TLSH
  T1D702C716B7E88237E8FF1B72AD36924021B4A710B917DB095E80924EDC372904B73B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  SMDiagnostics.dll
- Size 47KB
- SHA256 82be741e31b0c14d7d58af55a6f6afb802545f6fd2e84b813bc70b1a61f32508
- MD5 19c5bfde8f37ae18d239985b01d0e32d
- SHA1 b9dca60a3498984ee6f5687324df54785e555810
- SHA512 9c4597eed270d4440a525c3ce63bd449c0e40b3035b3c0f14b10d527a5c54e9bd411eb49f0ad3a187a14982aa15f1862b65e765461455058dafe83c6101a4c64
- SSDEEP 768:GV45cPVwlDqB8XZ1wqumY7tNGJ+5Qm8tHDOMjqDxKR:GS+VDB8XZjuxGJ+5QvJqDK
- TLSH
  T1CB234D1067EC4727DEFF07797CB6B09009B5BA1265C3EF2D6988918A3463BD04A63727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Settings.ini
- Size 3KB
- SHA256 2d8ea31ac3c89cbbabbb6985748ecc915ad42bacb8ecce524de20899ce4d65e1
- MD5 da3ee416f4b08e66e14dd92940846d17
- SHA1 8d201fb2931e937698825dc08b3420b9ba9c5240
- SHA512 034a6f174bfb662b5b4727fde519d97b4025c908b5b5374d5fe55a77c9b0def44db51a3104c3f79dffd0c74a6ae7e13ca6a260c8dd67b7f84510107650377665
- TLSH
  T18F61091C3A3F9D4037CB427459C08E82DACCFE9D8E8A36067379A69106D67B2307B472
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral25 behavioral26
- Target
  System.Windows.Controls.Ribbon.dll
- Size 717KB
- SHA256 db48e241e68be9089e3951ed62ec5ef0cc0976c9eb75a5012446da0e5368fb3f
- MD5 747335d0f0bf35643934ec98c8157b9c
- SHA1 07c906189a1970278f6ffb00da848ec13c079811
- SHA512 e2dd45d8d47f6cf30960228448e65ee6f06e836a200afbfd355cd9b27a86250be7d109cedb6832e6c5711a27cd28542cd95833cce3eb22a5642ba63caeaedfe4
- SSDEEP 12288:I4Hw9HSNAqMDcnexymWQvEXlzEOIF6HX6w:I2S4nexymWaEXlzEOIF6HX6w
- TLSH
  T1B2F45B0033B08B71CD6F4BB5D410750C9676D1629AE3C21619EE6EDC6CC7F894B9AE2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28