7c9ca5914228e53bffd3961b77156e493a13a3e3b19b28063858ac787ee0191a

Sharing

Copy URL Twitter E-mail

General

Target
data.zip
Size 4.8MB
Sample260823-e6w65sxwew
SHA256 7c9ca5914228e53bffd3961b77156e493a13a3e3b19b28063858ac787ee0191a
MD5 17c55247ed024452a91edddbdcd60507
SHA1 ecc4c6844b3679e1f83b7773e7a720b6946f5ca6
SHA512 ddef5e31d0a04529fabbb70fcfd03f4139f5c8bd48d3435b8d8e0b865140848cd6fb954f2cdd27f3a390167c94ede8ad51dbd3650bd620feb380284e5f739321
SSDEEP 98304:6YICKHmM7phjDMvGORqF3kNnyulAch/GKe3Ag4sDBjZ8ofG3TQiN:UHvMvvc3KnjuRFfDfBWQiN
TLSH
T1863633B5B6D12840C22D93793228E76DD74CEA3B1EE97DC9150D7B85FE1D00AAFB2811
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution ransomware

Malware Config

Targets

- Target
  data.zip
- Size 4.8MB
- SHA256 7c9ca5914228e53bffd3961b77156e493a13a3e3b19b28063858ac787ee0191a
- MD5 17c55247ed024452a91edddbdcd60507
- SHA1 ecc4c6844b3679e1f83b7773e7a720b6946f5ca6
- SHA512 ddef5e31d0a04529fabbb70fcfd03f4139f5c8bd48d3435b8d8e0b865140848cd6fb954f2cdd27f3a390167c94ede8ad51dbd3650bd620feb380284e5f739321
- SSDEEP 98304:6YICKHmM7phjDMvGORqF3kNnyulAch/GKe3Ag4sDBjZ8ofG3TQiN:UHvMvvc3KnjuRFfDfBWQiN
- TLSH
  T1863633B5B6D12840C22D93793228E76DD74CEA3B1EE97DC9150D7B85FE1D00AAFB2811
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  data/.OR5
- Size 332B
- SHA256 85b56ff21f17fcece01a656540590be72cc7fe23ce3b07673119b80c96a2f399
- MD5 cd2d2067ec835f97cd7699291e042f4c
- SHA1 628163c18aeccf806b4226b53fbed00434ea9ba0
- SHA512 070964177512d45c31ed2bf3201227cb7e2135a3b8c4276bda019d010d33faad3272103407c67dcb42f6958845b0332621111d891919d46bdf0896415f98555d
- TLSH
  T1A3E02D880A36CC2B0DFF82606E080167E0C0D0C23E177B80DBB9DF4B84FE983A9600A0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  data/XS50bzfygLi9.o4
- Size 10.9MB
- SHA256 ea594e2b760f86714465e5ca971f9606d65a63c411a546f16eaf6c80b90c5995
- MD5 097cc1b229b0b40a1f7792346d55d2a8
- SHA1 14449dec568212a8e20d97c1d54b3f1fab210b8c
- SHA512 7fd7de6251b524995538951afc4dd88ca91ca49357d771223ad9fefdcbaef10a3e6ecf9618f54febcf69288214dcd65e3d2f52777b3af1a7dbccf4c740d1ad39
- SSDEEP 24576:zB9URtiS8jBsbzGeIpfxqgFD7UeYZTqJHxe+0LhyxYhY2cLswQQarSMKnkm1z8D4:zv7e+HYhY2cLKh/zKR
- TLSH
  T15BB6E999BF87B4C0C7654E8289E62F9CB9C336BEEB15147C45204B352E70A71E53ACB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  data/cache/bytecode-39.rpyb
- Size 366KB
- SHA256 9eed55f3e9d203f49118cfbfa0f761d62d18e99973d5af4b1ffd46a442411a20
- MD5 ad707fbd1c10ac3c5c3f4aae38d16fb1
- SHA1 e1ccaeb17950362beb4160e9e4596eea464e94c4
- SHA512 73f7c0f77cf0adee54f0d6768646d1c57f57e220fdd1d31d31c240de258b8a1fd864e6e0bf48b268e541a1389544ab9e9527e9b987621e9135c8b8f4860384e6
- SSDEEP 6144:iad71GRb0EejU3yfiFE2DzbuJ014QsEel0Oyl0JewbTAboC/7esQvlpYseioW/Fo:ia4peoAyJzbuJ/RE+yUewQboCVQvlpYB
- TLSH
  T19F84230988C710040EBC87A97105FA7CF15C6629A3EB637969E7C6F5FD1E8662D62C0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  data/cache/py3analysis.rpyb
- Size 69KB
- SHA256 bf513e0b5c6b7d5c69aa264b2e57c8c4a67a0d2002016a3029059f7c04543eda
- MD5 b1a8986eed365047d2517190f5eca0ee
- SHA1 0657d65036668181dd3b9e8a9557227455de8295
- SHA512 b84fd32f9730bc82a1a5b9b44454e6cf1a69215e72854ba07c6c84bf7c2388208650526c952051698c25eef0a485f008b74a70c796294f3b3e1368705a464113
- SSDEEP 1536:Y6KDNSwqoiXumM8GEszg1CR24NjF7Z/hIkFMR22AsMNRSi6xEY3NRa:fK4FJumM68gsjFliwugQikL3NRa
- TLSH
  T11F63021A82497B3BB414FEBD7AD6DC44C524F6C03EC603A39F58B98852E4DA03656BE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  data/cache/screens.rpyb
- Size 125KB
- SHA256 d6742209b7b4609a06fb3f13344612331338d432927d273191bffe602558036c
- MD5 230d25a45b4dec57cd83da09668f0c38
- SHA1 b527437a4585ae0d86a632bdb2d4a02d6449e25c
- SHA512 0bcbea7f3c4f7896b9e10c93df93b0719a4a2c44ae1b10d44824660f849d244f9e48c5ef8640e223745c20aba9fc0b269aaf4e78dc130c2bcc9eb3545566f756
- SSDEEP 3072:Z2epl/0KH70Jp0soBzVtiE58qmgbIclyRldkm2wZ6EL/bb/qHaKN:Z77jHIL0vBzbiE54gbyDdkqL///qHaA
- TLSH
  T1CAC31327BA3C584858A47C5ACE81AF9A06E04C0FE68FBB4B41867C9C9C1F542FF50DD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  data/cache/shaders.txt
- Size 415B
- SHA256 b29c3b8b163159918009f4d5633f71d58cf8c66d8ec431a99d34a14b77d25bbf
- MD5 64148caa2a9a339248e130795fe22299
- SHA1 4b7666b12074071cc0e9a3a37f72f7b2a1ba8328
- SHA512 22e5040fb394f6d92501cbd2d470011506922623c2a8f0fd3487033485fb01b6455a95ce6fc7e8b6786f3112f7add6e9fd2c509df53d0d633c600df6f805017a
- TLSH
  T196E0AB65AE2844E6E0F825C90EF18A9C39F7AC5603EFA8FC95C357E1830934504A1DB6
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral13 behavioral14
- Target
  data/gui/bar/bottom.png
- Size 1KB
- SHA256 114f5c8c0ac70f7159f85ce2fe668a07ee014671789c742ae14196a865c1403a
- MD5 621cee6f9970f4515fc4af46e83c8d3f
- SHA1 3976fdb58df342eea08f5dd78b1419d8d8fec54b
- SHA512 4a8e7935a69cd2f6a181d97ecec966c1f0099ea715d66f0f426ee50fa18c45a0b1b046a850e549d7556ccb0432669e8ccdb6f46bde309c9723798f9f7c1d3956
- TLSH
  T1D521DFEEA7391FA09341ECE550706AF3CB0E1311B6FDB86C6487A7705A479275049771
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  data/gui/bar/left.png
- Size 646B
- SHA256 c45f52dc68d4486f08f16bd996337cc3fbd56b02657edf93e75bcf39eb27cbf4
- MD5 6db3c1c1fd30a01ccb2fb8a1e1eb47ee
- SHA1 643b7a0ebd76e146c68bd4ba646fa8358381eefa
- SHA512 44c1335716881f30a401a12c00805960f0917af2bbedb3691a50c98e143713fe7b5545d17495bf8b64f1bdb19a2ae1bc00631785c6753037ae70c033aa4928a5
- TLSH
  T16BF0AC88C704D53772182191B1851BB380212EBFB820DDEC46C3391F06C3FBA2C74C61
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  data/gui/bar/right.png
- Size 1KB
- SHA256 7eeb38dee46373d86cef333062bf389596751ef006c8410e2c0b75e3a2a43a3e
- MD5 39709d8d6d062d89e05fc13ecef3a89c
- SHA1 a7e5d8d003ac1cf5010c5e00e2f9fef34469453b
- SHA512 b94eb352b0a5cb75f0ecdcf8029479151e7de3295de6f3c06055cff630cdcf18500483790d0d11a7b4efab5e1255cd86b75ae62610ace8e08cbfdf4c9cf8a539
- TLSH
  T155210384D248DF3721645061B1C645F1E4101F6E741CDA9986C3350F618AFB62DB5F92
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  data/gui/bar/top.png
- Size 1KB
- SHA256 70f31de3d4fe96f3fd5034ac0129a955289def2098a270248ed249f9c22a8b7c
- MD5 0fd11b12372cb60a21c6184743b8f699
- SHA1 3f7826d3d103618559a067586a8f99461eef3129
- SHA512 6eae19188b19c56578302276c85f6c5a8eddaaf5f472e56a9836a8b905f30306c8337edff75e413f19597d56366e06aa91893ae9edd0408b2bd91554b796ab9f
- TLSH
  T12D314AEE973D2F509344DDA96131BAE3CF0A3310F9FCB49898476B64098B5239189770
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  data/gui/bubble.png
- Size 7KB
- SHA256 8691396f6ca7e42cecaa2f09128a2b1b66398e51af390ea4429f52cd4715eb4d
- MD5 10282e623e60139965e2737d626b0e04
- SHA1 da51a1b45dbfa370efce54dbc403ba4312e64dd8
- SHA512 a3a716b290f6b8bb7287c492e7ade133debe4b1a610ce1d794f8245b06f48cf1c4ed5009ba51ffac886968ce5449f6582bdf4d877a55ee4e1177b5da5f76a25b
- SSDEEP 192:vzR3KblGhHiG+WsElhnJ3mD3SNnt5ucmt0zc6L:7R68hCedDtOSJucc0zcA
- TLSH
  T174F19E16899DC266C7B480E14D846B12DE714E381AFACFE29CCC0D53CAB0D0B97594F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  data/gui/button/check_foreground.png
- Size 221B
- SHA256 199314aa061b1113aeda6b9b4c950874cc77868a335188b4dd9a1cff6f01ccdf
- MD5 a6f2d5652c74d1d7a57028f2bd86f08c
- SHA1 ab3eb25f20a9d206e0d6b426b90514ca218b8285
- SHA512 d1598fa61f2ec1ff5c2b74554aeff0f1ed7d79a9b37e83de0fe2ed81817105ba678735e368af27edaec16922d7284cef147ffff098b8ef611f9b2574da5fec74
- TLSH
  T1FBD097EB1E525C3CD2DCB903836B0D80C0B0C20020A72814400CC17A9242A02800209B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  data/gui/button/check_selected_foreground.png
- Size 290B
- SHA256 9d85c40b079c26ba1b8393e275514fb62784fdc686e0f4a9f56057b4b0511d91
- MD5 3293962d4eb258d7557650fddb638c9d
- SHA1 265719d38ca6dab508ec966e9babff11c99392d2
- SHA512 b4569d5f88ef563a2a65b6acdef890e7c6af36bc62ae72fd1e69567bdbc94ba82c293f07a5c4322b12766d48999753febf4f249168cf91e133a6d6e4e16a2d0b
- TLSH
  T194D07D60D8E29621510063A3DB789F50F820B294C35057230C6F746DD006609C15638E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  data/gui/button/choice_hover_background.png
- Size 2KB
- SHA256 58a516a72429b17a78319ac96f3b32ab6dd85f5d0f1f7ed78f8d39c3d23233b4
- MD5 02c47378c8600f297a9d1e444d0a1b78
- SHA1 92567850ba968e5d9d6c25ece26c579597028c2e
- SHA512 b2b50a47ff1cb7a9801385e3dd744b1325aa3f7508318fae3d43d724783fea9fb24812d70f6484de88394ae238c967d0fe2e47cfc5de2e7580534580c66d0ec8
- TLSH
  T18241FA81E794447731860111B119895341891CB7B868ED0D16CB7D3F8B7BF399EB1F03
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  data/gui/button/choice_idle_background.png
- Size 2KB
- SHA256 5fab5939c555fb4d99bf12097a74b0649987891cf634e939d388e0d1858baeea
- MD5 77d03ffc144f642b4e4f53efa15226f4
- SHA1 847c8011d499d521305a42814721d82caba17497
- SHA512 c32337ec489646db39622904e3b1f65e7729df9faaa45f0ca92799b94259066d058e127095b62af6ea32d47b523748cf9fa8376f217e0a6f3b5741a876683b84
- TLSH
  T189513E01D31A05337A546968F4A620A7AA429C33BD01DC620EC77AAF2353F3E6DF2D52
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32