General

  • Target
    extract this for surprise.zip
  • Size 1.4MB
  • Sample260826-vf28gazycs
  • SHA256 2ae5fddc624a97e20a534474d67f617601a667cb1c4da94706c2aa0c724fafca
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      extract this for surprise.zip
    • Size 1.4MB
    • SHA256 2ae5fddc624a97e20a534474d67f617601a667cb1c4da94706c2aa0c724fafca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      extract this for surprise/zip bomb lol hehe - Copy (10) - Copy.txt
    • Size 54.1MB
    • SHA256 b169dd556ba19492723cb897918a599fff42f1eab638a2d1029ab3caddfa711d
    • MD5 SHA1 SHA512 SSDEEP
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      extract this for surprise/zip bomb lol hehe - Copy (11) - Copy.txt
    • Size 54.1MB
    • SHA256 b169dd556ba19492723cb897918a599fff42f1eab638a2d1029ab3caddfa711d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      extract this for surprise/zip bomb lol hehe - Copy (12) - Copy.txt
    • Size 54.1MB
    • SHA256 b169dd556ba19492723cb897918a599fff42f1eab638a2d1029ab3caddfa711d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      extract this for surprise/zip bomb lol hehe - Copy (2) - Copy - Copy.txt
    • Size 54.1MB
    • SHA256 b169dd556ba19492723cb897918a599fff42f1eab638a2d1029ab3caddfa711d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      extract this for surprise/zip bomb lol hehe - Copy (2) - Copy.txt
    • Size 54.1MB
    • SHA256 b169dd556ba19492723cb897918a599fff42f1eab638a2d1029ab3caddfa711d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      extract this for surprise/zip bomb lol hehe - Copy (2).txt
    • Size 54.1MB
    • SHA256 b169dd556ba19492723cb897918a599fff42f1eab638a2d1029ab3caddfa711d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      extract this for surprise/zip bomb lol hehe - Copy (3) - Copy - Copy.txt
    • Size 54.1MB
    • SHA256 b169dd556ba19492723cb897918a599fff42f1eab638a2d1029ab3caddfa711d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      extract this for surprise/zip bomb lol hehe - Copy (3) - Copy.txt
    • Size 54.1MB
    • SHA256 b169dd556ba19492723cb897918a599fff42f1eab638a2d1029ab3caddfa711d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      extract this for surprise/zip bomb lol hehe - Copy (3).txt
    • Size 54.1MB
    • SHA256 b169dd556ba19492723cb897918a599fff42f1eab638a2d1029ab3caddfa711d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      extract this for surprise/zip bomb lol hehe - Copy (4) - Copy - Copy.txt
    • Size 54.1MB
    • SHA256 b169dd556ba19492723cb897918a599fff42f1eab638a2d1029ab3caddfa711d
    • MD5 SHA1 SHA512 SSDEEP
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      extract this for surprise/zip bomb lol hehe - Copy (4) - Copy.txt
    • Size 54.1MB
    • SHA256 b169dd556ba19492723cb897918a599fff42f1eab638a2d1029ab3caddfa711d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      extract this for surprise/zip bomb lol hehe - Copy (4).txt
    • Size 54.1MB
    • SHA256 b169dd556ba19492723cb897918a599fff42f1eab638a2d1029ab3caddfa711d
    • MD5 SHA1 SHA512 SSDEEP
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      extract this for surprise/zip bomb lol hehe - Copy (5) - Copy - Copy.txt
    • Size 54.1MB
    • SHA256 b169dd556ba19492723cb897918a599fff42f1eab638a2d1029ab3caddfa711d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      extract this for surprise/zip bomb lol hehe - Copy (5) - Copy.txt
    • Size 54.1MB
    • SHA256 b169dd556ba19492723cb897918a599fff42f1eab638a2d1029ab3caddfa711d
    • MD5 SHA1 SHA512 SSDEEP
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      extract this for surprise/zip bomb lol hehe - Copy (5).txt
    • Size 54.1MB
    • SHA256 b169dd556ba19492723cb897918a599fff42f1eab638a2d1029ab3caddfa711d
    • MD5 SHA1 SHA512 SSDEEP
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

adwarepersistenceransomwarespyware
Score
8/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

adwarepersistenceransomwarespyware
Score
8/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

adwarepersistenceransomwarespyware
Score
8/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

adwarepersistenceransomwarespyware
Score
8/10

behavioral31

Score
1/10

behavioral32

adwarepersistenceransomwarespyware
Score
8/10