d7e4dad76866a3f6d17733c5bc291e941e08c67b189a3afc2318e9252d2e50a9

Sharing

Copy URL Twitter E-mail

General

Target
22.rar
Size 1.2MB
Sample260822-xbchcsszhs
SHA256 d7e4dad76866a3f6d17733c5bc291e941e08c67b189a3afc2318e9252d2e50a9
MD5 b7ad03f3334c26b2c79221214e1d4e9e
SHA1 7adae63f756048a03570d04e9d55bef1ef5981f9
SHA512 48e02539df7174e7fd12a232a3d0327eb60dc89c6c2574b7c4403ff09835a73e4c29e93d9e77b03ee448ba24f68aa1a6f29f21e2794b67bc4d593b87013bd1d3
SSDEEP 24576:pw7L/gFtTrxFXgQXL1icaC7hwLfVunJ8Wy2ztlhIkeqCkHYs1FosRtxfQp:pM4rrxNJ1rb1k0i6xPeqRHYs19Rfy
TLSH
T1E0453307DF2444C4F875CD3DC97A970FB460CED5E091CA2BAE2ACAF69269A7074071A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  Debug/net8.0-windows/Guna.UI2.dll
- Size 2.1MB
- SHA256 3ac70532408b89159bfe235d4ed228faa03ae3fbd63ec6a82d895f287a3b0579
- MD5 b429ae86c5be521bc8ca3b164cec3acb
- SHA1 387560073ff5a1f2191abc6f75fc34532bbb6dd2
- SHA512 eae65de53da50708983ed8ebf9e1e3dd5f9aea95a354d272e199bb59517f62bfe35f0df7a37d81ab0423d0d6d29304fa70284c731bd54023e446b2c19bacafb1
- SSDEEP 24576:DgWuftU4WrNOA6sM6kXxMfNmnjk/c5NrH0UUoo2QkJXVSItH5ppoO0KzJ6nFwHQL:DA+NOpXm1mnj0cP+DkhMAiawnFV
- TLSH
  T168A5F9187D94E727D26BDF3395D61011E3F1E4532AB3EB0D26D367A8184378978823AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Debug/net8.0-windows/JHNM_PowerShell.dll
- Size 11KB
- SHA256 3fd1ec286b927d50049574006da22eabe13ca0f4d84a43b24fc3396f882beba1
- MD5 466750d120376f960d613c5444260df9
- SHA1 743a26ca519dda77f423b123dcc599f01b731fc7
- SHA512 f125f5cee81c7e272a2818a4d7ed46cbeb7dd3ace002feb9822cf55bd90e5e03cd899ef5adf3baf7f897518d081be70bdb1a51ad8fe6abee55390dbb73b2428e
- SSDEEP 192:WjB+xa0Ok+zHJcd6qPF6STkbvja2KGmp8CEoF8JJMH:Wt+hicd6qPFbCrKGwpGJ
- TLSH
  T1F632B911B7E48A35E5BE6F35BDB282141736FA81DC69EA1F15C8504A5E23308CEF1B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Debug/net8.0-windows/JHNM_PowerShell.exe
- Size 148KB
- SHA256 3a3ac7d29150412e7a3341c035f81f11ab220b6a4593015559d4f82e57b50f8c
- MD5 6b784b944fe08191eff96753f79dbcdc
- SHA1 c97afff51a01344d535366b68afd85ecfe83151e
- SHA512 9fca9252065188d849c2ab78a5bcab4cc10bb744c1f24f24da027a97be9097fe01d56fd56ea424bc6259ce9d2096fcfcbbaa2cc75f04df0d64c120236e755f28
- SSDEEP 3072:sqeXA/4yIg9vkNPNu6H6xCYOiVUE265fJa:svgvkNFNaxmNE/J
- TLSH
  T186E33B07A2A851BDE1B7D679CD924D41FB7378598B71A7CF03504AB60E63BD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion execution impact persistence ransomware discovery
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware defense_evasion impact execution
- Disables RegEdit via registry modification
  defense_evasion
- Disables Task Manager via registry modification
  defense_evasion
- Disables one or more Microsoft Defender components
  Uses the Powershell Set-MpPreference cmdlet to disable one or more Microsoft Defender components.
  defense_evasion
- Adds Run key to start application
  persistence
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  Debug/net8.0-windows/NAudio.Asio.dll
- Size 33KB
- SHA256 ca03780217139b37f7f5b6921d59defb8d24988315b16b167a77fa88caa7d00f
- MD5 eb254b04d63a9f03b77563243805f68f
- SHA1 b01c83ec51f7a6548d1babb5e5ff8d5b944965a1
- SHA512 af40c8b9753ebd5abdefad82597dcefc3e5272e917657e3cc7d7961ee8e0070c04f964df456eaa92c8ba832b1967f35ac57490fa2adab2164f323e778979ef9c
- SSDEEP 768:gehRrWpB5henf0HTYdpVCYKo9c1e6ttHjB6Ca:gehRr68M47hGtHF4
- TLSH
  T16FF22B71EBE88A27C92E2779B4F2040407B5F190F623E74F9A4C54AA6FE63594790373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Debug/net8.0-windows/NAudio.Core.dll
- Size 183KB
- SHA256 fcf493fc47a2f478a65303886b975fbdbf714cbb1f2d79f7fce97e4bb16b01a8
- MD5 48867f392b8e77dc06c062638c6fbd36
- SHA1 ccc0931e2cf3d6d79e24c1f28d9c96b40c131af6
- SHA512 b536e18c482dcf810ec30b9a943ec06e0ca4f6f2bd8f187b807a9a9fd90d28c4c2fb69bada4766c72e0b7942f5e7d40dd94b193ab01e68f666838698bbb473bc
- SSDEEP 3072:n5nFpdQWUY6GwfIGsnLRp2qr2eeY0nVuEtEVEOUkk6uSYsM+S76t:jpdQJY6GwfIGyRp2qI/VZtEVETtHG
- TLSH
  T1CE046D2963E84256E5AFABB1F0F208175BF1F4463037DB0E5D806AE92A07B11C562F77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Debug/net8.0-windows/NAudio.Midi.dll
- Size 45KB
- SHA256 f246e29921797b173b54229685e997a11f9cc388fa1e589c212328abd7a94ebe
- MD5 3f5c79100f4f7902114c3fcba275c606
- SHA1 cb874b2a2561239b5b1c30a49574229716f5f62d
- SHA512 e435b839a769572a251cb07238020f2496bef97949a3b3159e85c12327e4399a2adca67bb5b2a0606318ca9b5c7ea99bf013a431c72034ce51f9224721a4cf79
- SSDEEP 768:lwuDUaOqgwjYpA2kn+sbS+O/RXgQPODHM0Mx7YlEmmSFyaetiWvmYRMUQ6LUOu5+:lwuDU7fwT2k+sbRMZgQP6HM0Mx7cPXeN
- TLSH
  T103232915A3F8861AE2BF7B79FC7056100BB2B9867A32D74F0AD8686D1D237844C61773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Debug/net8.0-windows/NAudio.Wasapi.dll
- Size 175KB
- SHA256 618ef0e49d64e7a66dfe64bbf6ae81705b9d9683d8a9f321e5c3024d666bdf82
- MD5 278ebb79da14ecf8e0559530c2fda076
- SHA1 8a45f0400f6bc46d254120345fd5e39b6c9b71a1
- SHA512 f789600a820ff4286cb323c4f9dfb6b44001be9295bb24973308363a2668761055e807c7ebcb53900293f4be71c6b5ca328075c230b1ea8270f0d76e3ec477bc
- SSDEEP 3072:ZTo4k5xAt4T6awobjXGUHVUbLuh9aaWIiEKILT9rPr/duoSabKj5BIfgmFyjaKv9:ZTxk5xc4W+VU69aaWfIFzDoI44
- TLSH
  T121046C3537E88967C1EF97B4F8F2294787B1E0463A13AF8D15C45F256D13BA24804BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Debug/net8.0-windows/NAudio.WinForms.dll
- Size 33KB
- SHA256 b313f530227fd31fc2b6fa74547f4c8a964cde7696c07624dfc19b693fe9c468
- MD5 2da1307837dc63aaab828470701a2761
- SHA1 3d862f84328d8fba810da31fffcdfc53a8cf786c
- SHA512 503fa2ff0ccea1d51aa59c4f38a2d552626556b0cc692a699f15714b9af901d9e664642adf5e25d6cf5ce77a6ded59427dd1bd23e030aedb3891ae943629d2b4
- SSDEEP 768:+GRcd/kDtaVL9ugB/0p6oCPREb4DmHBRrne5:zaVL9ugQLMOb4Dm/2
- TLSH
  T166F21919239CC36BC67F0FBA50A611430336E681F552EBED6DC831A99EA37510761BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Debug/net8.0-windows/NAudio.WinMM.dll
- Size 56KB
- SHA256 749a01ebbb5edd8b1a03c5263b04de6acadecf52e4cc84d7412bc6e93f180958
- MD5 faf1ba532964984a34d60674fbc7a5a7
- SHA1 0999178949de510a47d87de3b8a117a003c572ee
- SHA512 d23b783bfd55a09c726ba09d627dfcc6c22a6e7bed8a53dff72c349bbe6fb190afb574cc267b7bebed1540b0bf834f259b5d03b50e023881b3ec42a8b2b57f1f
- SSDEEP 768:cQFu51JOtZ+Wr3CJBTNoNfDhPrDVSvxu1tEMgGd8GbpDrXa8Rcer+7Ul:cQ8zvWr3CJZNYDhP9Svxu1tEufpDuil
- TLSH
  T12A434B013BD8427AD2FE1B3EA1F30A524731A8D6796BFB4F1598F1DA9853B8049017B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Debug/net8.0-windows/NAudio.dll
- Size 7KB
- SHA256 c001e49d31497f608b14066b0f10304c0ccb7e3b9df9d5fec5cf3196f92961b8
- MD5 555d4c629b3d58d3d4314e2fa51d2f63
- SHA1 0aae01bac50a5abfe42a6cde715f391069fed72c
- SHA512 b3cde721761fe1210a5b31da4637ae6e501d489d3209a179669ad80c03e4ff717af81f82d130673080194e5f2f7a17fcd4891ac598aedca14c10c7f2b0904b8d
- SSDEEP 192:7HBYhRUzpGapaMW2Son1MRl4CAJj6GjSm8:7HCMzpGbx2Kvm8
- TLSH
  T1A7F1C739A7A4C237CA964F75E81707940374EB40DA57CF2D0D8CA09BE913749AB727D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Debug/net8.0-windows/System.Management.dll
- Size 72KB
- SHA256 f515ca5c944c332ab706ff0a7c2e53e66d0d9d8a663e9b2691b35129ee22559b
- MD5 1c71e5310151ce1e9a3a92797776bdad
- SHA1 fd452b874fec4a9dae61a3710fb32749dc7d701e
- SHA512 2a4f18c77449c2d06a3ab6807338f73b03b1faa332e78319829ba3a2b6fd98bb9a83c5e29b47d55e4ce7f0dfdcd8524fa592a0f3ca8ee09daae2894b681265a8
- SSDEEP 768:BrEP45HksbMU3se5c/0b/9nLZV1BCUkVoV0lP7H0CkkiSLJKdbY8Mtuo0eDQP9zu:bbz5wulNV1zkSQzHxkxS9yc8no0nzu
- TLSH
  T12773C410E7E88378C8E707B6B5B3A3214F74B5C52F22D61D292A611D08EAFC15765E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Debug/net8.0-windows/runtimes/win/lib/net7.0/System.Management.dll
- Size 288KB
- SHA256 a7e248c3e6f25f4673e2006fa77f4a4322a3c74c2652dcc395178329feb7ff28
- MD5 76e0aaa7182e77403bf6fe2af8d90f28
- SHA1 d013c5d649f9ebce5bee1c8b774f3290b1f1f532
- SHA512 8e161a375fe174d9b203c2a098c92aff411d8521eef133d5174ae7409c394157f7a067c2a9dfe3f76cb02acbed52c33a11579b9a1cbee75e4092e6487d1a7bc1
- SSDEEP 6144:TMbKUVLmD7HP9ab+T5sBFzPnQpEZFAc2Q:45VL2Z++tw92Q
- TLSH
  T10654195033F841D4C47FAABA903161958FB4736BA60EDF9E1452FCED1AF1B81960326B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24