bf54aa0c29541d0fe3ea82e51962e168bf4690b61007b776f2716e87ab3001de

General

Target
linou free temp.zip
Size 6.9MB
Sample260824-yff7saeh22
SHA256 bf54aa0c29541d0fe3ea82e51962e168bf4690b61007b776f2716e87ab3001de
MD5 8f70fc2f24fd6147d6f6aa52ee4126b7
SHA1 967bbe03d0c41035483b1b38b93a602349548b3a
SHA512 c59ad432d0f9a0a4ff032811d41f0c898ff7a900bd177691f6d3dd563c763d385554dfdcaca476e93a11ae1961b5b0d6f9e45ae0c91219a42cb87f4195522d4d
SSDEEP 196608:7wjOzU+m/ONlTXv41rG1OgsU5LBZVg32w:7wkesL41rtgL5LB/gx
TLSH
T1EF76333B053E7B5AE43638219152BB8979187C3F9CD204627E2CE6E6955B5B804FC3CE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  linou free temp.zip
- Size 6.9MB
- SHA256 bf54aa0c29541d0fe3ea82e51962e168bf4690b61007b776f2716e87ab3001de
- MD5 8f70fc2f24fd6147d6f6aa52ee4126b7
- SHA1 967bbe03d0c41035483b1b38b93a602349548b3a
- SHA512 c59ad432d0f9a0a4ff032811d41f0c898ff7a900bd177691f6d3dd563c763d385554dfdcaca476e93a11ae1961b5b0d6f9e45ae0c91219a42cb87f4195522d4d
- SSDEEP 196608:7wjOzU+m/ONlTXv41rG1OgsU5LBZVg32w:7wkesL41rtgL5LB/gx
- TLSH
  T1EF76333B053E7B5AE43638219152BB8979187C3F9CD204627E2CE6E6955B5B804FC3CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Release/Linou Free Temp.exe
- Size 675KB
- SHA256 e72f694d6777e1588f8c11bf55d0231df1aa9e83bf0e5186a4534f792e4db202
- MD5 638ca4eaf2b3d6e85b491831eaa07cfb
- SHA1 c350f6c31ec31b74ff20a7d42116369a90c7bada
- SHA512 20aadca0e5f715835aa10f3aded453a10d5501c6724ba5c27d9625801c0c0d397036d43ea97587c5c7400905903e9e930ea72fcfd194930e0e500455f201acc0
- SSDEEP 12288:3yU7vs4Fsi1eF6HFi+LuBua81amQI4bsXU75esUexmSWcsduz8fwb4A05dUSor7d:3yU7vs4Fsi1eF6HFi+LuBua83QI4bsXq
- TLSH
  T156E46BD9921C45F9E666C63D88566A4AB2F27C5F43A0DFFB33E00DE01E1B5C4EA39640
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Sets service image path in registry
  This determines the executable launched when a service starts. It can be used to establish persistence.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  Release/launch me if you have dll error.exe
- Size 6.9MB
- SHA256 a4bba7701e355ae29c403431f871a537897c363e215cafe706615e270984f17c
- MD5 49b1164f8e95ec6409ea83cdb352d8da
- SHA1 1194e6bf4153fa88f20b2a70ac15bc359ada4ee2
- SHA512 29b65e45ce5233f5ad480673752529026f59a760466a1026bb92fc78d1ccc82396ecb8f07b0e49c9b2315dbef976cb417273c77f4209475036775fe687dd2d60
- SSDEEP 196608:bPwMcp4zKAKpCPhD5nsF5GBAiSG5VtJFeHi:0McAWKJsF5vib5VtTeC
- TLSH
  T1EC76333296645127D1F20973F810E2207E3CB12D7F1044A3A794EEAD2EA95E667FB347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6