c9438d7cb1070da08cc5d8d953920b4c947990d28f0a5e4606602b3252e56c93

Sharing

Copy URL Twitter E-mail

General

Target
Keyfilemaker-BTCR.rar
Size 7.1MB
Sample260827-bckdpswwdx
SHA256 c9438d7cb1070da08cc5d8d953920b4c947990d28f0a5e4606602b3252e56c93
MD5 36568ccbd369e37fc10ce84e9e150051
SHA1 850d50b32a6ffab1445e205dbe934f8892999e65
SHA512 410f69a7a13d5004b25cbcc139339dc12a6b3eccdeb8b4f7165d6fa85e07eb17761b9b1679c2d88011ca20cbd389508ebae9e0404292971528ba721a198f2387
SSDEEP 98304:0MINW8p/f9rrJ6Ov+sRQwT1hdpljQS76nvy1lMf4UjO1nn7bL41:tIow/f9USFevy1lMGnXL41
TLSH
T1F5769E03F29181E9C06DC074835BA637FB32BC8D4525B2AB6BE44B622F66F506F5D718
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  Keyfilemaker-BTCR.rar
- Size 7.1MB
- SHA256 c9438d7cb1070da08cc5d8d953920b4c947990d28f0a5e4606602b3252e56c93
- MD5 36568ccbd369e37fc10ce84e9e150051
- SHA1 850d50b32a6ffab1445e205dbe934f8892999e65
- SHA512 410f69a7a13d5004b25cbcc139339dc12a6b3eccdeb8b4f7165d6fa85e07eb17761b9b1679c2d88011ca20cbd389508ebae9e0404292971528ba721a198f2387
- SSDEEP 98304:0MINW8p/f9rrJ6Ov+sRQwT1hdpljQS76nvy1lMf4UjO1nn7bL41:tIow/f9USFevy1lMGnXL41
- TLSH
  T1F5769E03F29181E9C06DC074835BA637FB32BC8D4525B2AB6BE44B622F66F506F5D718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  BTCR/Keyfilemaker.exe
- Size 5.8MB
- SHA256 5c3474c48610ff22457f1a73773e56a14846021ac4dd7f85cd8925ce658d28b6
- MD5 47eb3c352626e7bcb22f7cc616375c53
- SHA1 bdde6c23cb86e6d4391afd25a6b8b253d7a05194
- SHA512 271f634acf5fed07c76d29f555503082aa6092d202220fd848fc1a8dd2863e8289887095cc5cceafccee013bb82a73391e56f622ed71116061413e7b58701ab5
- SSDEEP 98304:iv+sRQwT1hdpljQS76nvy1lMf4UjO1nn7bL4:2Fevy1lMGnXL4
- TLSH
  T12D568D43F29181E8C0ADC0B4835AA637FB32BC8D4535B2AB5BE44B612F66F506F4D719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  BTCR/btcr.1.png
- Size 767KB
- SHA256 d2d3da65a6886578e1344f5c13f359c7dd9f71375db9ea4f8fc1f124dddc2c4d
- MD5 d4112785b384f73ee7aa835e009ddaf7
- SHA1 d2c2881187765f2d1b1e4f2e76075e24cc6740e8
- SHA512 87f9f46ffa2e0caf721ef0f8a4fd702e4c39fd6b3234eba06ddf98a74621ab8a6a9e52fd67f7749b7e4601e96f6bb2ad30fea2d306863e098889202a0e3069f9
- SSDEEP 12288:EE0rzBOfGuL0ZcknHdeMZcXrNW7Rt0XwDQde8sUOpp6/1eGE8/NxXGKm62ugCN:EETX1G9eMKXrNWCIQwbUOyrEmm62K
- TLSH
  T11BF4F016CB10B87BB05506613A43859790B80E7B7194EE4AAFE7796F5B03FB2ED31E04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  BTCR/btcr.2.png
- Size 491KB
- SHA256 9eacaa2258fa41e3bc11f442b716ca3b6a77d17f077282f1e05b6f80f5fb5771
- MD5 1d4ba0b92e58b485480baafe5882799e
- SHA1 5f843851c1eb5fc5ff4c53a021aa982ab308c720
- SHA512 d87bbc984c361ecec32f30583e5b0987d1987bd6bb78b12b6c709f7d3f7927cff42c8bb4ca09c30ce160fecdceaacb2ec7d55b93dd8a44fba1a43733ebf814fd
- SSDEEP 12288:u23jzKqEkri9oAM0pppisrzOp6823uQu+/SorlU+I:uvqpO9tM0vgC+681H+6EUn
- TLSH
  T1BDB42303415F29379F4F867DE46DD22AB47132F168A7505ED1E2C8F053922AE7CAC92E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  btcr.nfo
- Size 13KB
- SHA256 606c91c4539caaa3bba39ba4fd42ff9a5b2c9d8396ab82dc720ae132233f87ae
- MD5 0f5860e3a59c9ae5257f1cdab0556a62
- SHA1 3da03b5fc8872cc1ffa122a38f6b01f6be256c7e
- SHA512 f70bda185d553f7404ad4e7bc2af0a51d2cf2c7b913df526629284238bcffea7525c8db8d7e167136126a4963fa6951d5cad0587c463502e276ca783315e99fb
- SSDEEP 96:mIjrEVzGeg/4hb4VGOkJ0fjW7JPg/ZZezKbBzrpB0L9kYaNa3VCuo:mtTWG1J0bii/ZZEuB3NNx
- TLSH
  T1115257129226FAFEBA31D6711E540255FE95AC5F073937E0306F8122BF37D9601EC629
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  file_id.diz
- Size 715B
- SHA256 835ef28dd200e004485a9b5adbef0baca26489d8e359baf77436e94355385780
- MD5 16f00cfe93f723ca76b73e54414e4f26
- SHA1 f28d6ea50edf79f1935482d4a0bd4f12eedc8068
- SHA512 022c1f89cea789086b16c9a7282d51d54857defeaba2e257f34a2351131f3f44b90dcc3c974b8377ba0d120f3b1eca2c3272aaccf1035ad584c7a723a3f7d5c1
- TLSH
  T19701F9681CA0D2131D1DF7FA074BF62CE2442411C309C6A3B76E2FD9AB42751160F88B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12