fa9f8523053c0767c6ccb768f04eaeb538bbdcbcbad3c03592b76f593878e3f7

General

Target
SETUP_FILE_(KEY=2340).zip
Size 1.2MB
Sample260827-tkrrvsxfma
SHA256 fa9f8523053c0767c6ccb768f04eaeb538bbdcbcbad3c03592b76f593878e3f7
MD5 c5656ff4595cad44c1cdb2e27b1c0c77
SHA1 49cf3dbaae3615eab161518be0f12480988eef41
SHA512 dae42aba0229def60ca31e958c71f60cec3421b03f8f7942d9d5303f3dbdeb9576a369a6234d8c31301a6c3d02d0611a1f9491e507ab6d11d95ea032417a0bea
SSDEEP 24576:R3Aq5RXikuJ0Gvw5v1zaZsqyi8UkAb/v0qk95oAM/EXEIY:pA0BOfvw59zaTyZsTK+8Uf
TLSH
T1EC4533D96B8750BD2EC41A69A070D566F4CCAD582B093CE0D0EB637FF6CBC96E468305
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  SETUP_FILE_(KEY=2340).zip
- Size 1.2MB
- SHA256 fa9f8523053c0767c6ccb768f04eaeb538bbdcbcbad3c03592b76f593878e3f7
- MD5 c5656ff4595cad44c1cdb2e27b1c0c77
- SHA1 49cf3dbaae3615eab161518be0f12480988eef41
- SHA512 dae42aba0229def60ca31e958c71f60cec3421b03f8f7942d9d5303f3dbdeb9576a369a6234d8c31301a6c3d02d0611a1f9491e507ab6d11d95ea032417a0bea
- SSDEEP 24576:R3Aq5RXikuJ0Gvw5v1zaZsqyi8UkAb/v0qk95oAM/EXEIY:pA0BOfvw59zaTyZsTK+8Uf
- TLSH
  T1EC4533D96B8750BD2EC41A69A070D566F4CCAD582B093CE0D0EB637FF6CBC96E468305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  0PEN_SETUP.zip
- Size 1.2MB
- SHA256 16945638cd84de7c44d6be81d068153d5a002326d0b51ecaa67b63dfae967439
- MD5 fb3d5e49820d9fd513530e7935d45d97
- SHA1 8c5390d84380b37fd350616754a6e503a61a35f4
- SHA512 baf97f537c79962220df8783a7361ccb655ef13bf56f85056f30102ca197af001057c7dd00cbdfbac28e20d5676ac8997119d40ed634fdc39bcf170f00543de9
- SSDEEP 24576:G3Aq5RXikuJ0Gvw5v1zaZsqyi8UkAb/v0qk95oAM/EXEIA:MA0BOfvw59zaTyZsTK+8Ub
- TLSH
  T1554533D96B8740BD2EC41A59A071D566F4CCAD582B093CE0D0EB627FF6CFCA6D468306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  PASS_KEY.png
- Size 9KB
- SHA256 766d970c7ca1b2ed6004087a9da3ef323914fa5e5e3915994c020f790cb44a79
- MD5 45ea2e2985d30372d549f3261c9de1a4
- SHA1 6e4a420958d712eef04e738bbf8e385d60652e0c
- SHA512 7cfb57f29a06a6f9cf1777df8c20d618289f11537d5bc088cc22685a44b2d97d3f28d16ee4523f1936849d1933d28e7963e91af356f9824cca096c49fcdba69e
- SSDEEP 192:Ol4mmN19u/TPtzsCR9Bs1Zz/+qmpj0VePTVu+JYIkGs2BAowXw5:Qbm+jtocns5m1rPGIns8FX5
- TLSH
  T15C124C741C974BAFD2AA1438A57FFBD1253C09D344AA72ABC63C72C515E30D8D5E3A22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3