70b9534c64a414ba2eaf66c759da8c31b13fa27c0a0621b34ff03e55921ee126

General

Target
RV Top 6 entre +300 startups.msg
Size 179KB
Sample260828-x8m1csstht
SHA256 70b9534c64a414ba2eaf66c759da8c31b13fa27c0a0621b34ff03e55921ee126
MD5 4d5eb89b960263439052fd1a72aa1f50
SHA1 0d36659a351c8b4c8a23f1937b90813971fd9d3c
SHA512 701cb065541ad98426bfbddb2490728032272a36015b5f62086a959f3c83ccf831ef6106987f36f8fd2e86add21519c5b7d844b99afceb03d85251c675c90b3d
SSDEEP 1536:yBDYNJkp1Gojj1WXXfWVWxbUXL9KU845/jOfXqZM5fHUaubpmB4GtjvXepJaHd2H:yRGzUb9PdZKHUdajvXepJsd
TLSH
T1A004D81436FA0219F2779F3589E354639937FD92AC359B5F2185330E0A72A41AC63B2F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  RV Top 6 entre +300 startups.msg
- Size 179KB
- SHA256 70b9534c64a414ba2eaf66c759da8c31b13fa27c0a0621b34ff03e55921ee126
- MD5 4d5eb89b960263439052fd1a72aa1f50
- SHA1 0d36659a351c8b4c8a23f1937b90813971fd9d3c
- SHA512 701cb065541ad98426bfbddb2490728032272a36015b5f62086a959f3c83ccf831ef6106987f36f8fd2e86add21519c5b7d844b99afceb03d85251c675c90b3d
- SSDEEP 1536:yBDYNJkp1Gojj1WXXfWVWxbUXL9KU845/jOfXqZM5fHUaubpmB4GtjvXepJaHd2H:yRGzUb9PdZKHUdajvXepJsd
- TLSH
  T1A004D81436FA0219F2779F3589E354639937FD92AC359B5F2185330E0A72A41AC63B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery spyware persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  image001.png
- Size 59KB
- SHA256 ba826ec4ddf89ea8eb41a2ac1b4974bd4a4c56fb884a3fb3ee782ef6b885fd10
- MD5 2bb25bf9d16324c9513a871215aca552
- SHA1 3fdf6191bacf886036b31cfe1742616fb4ffa1c2
- SHA512 976b75a8a6e5dce6a442c31a16d7beab1b0a38d16e9d41c20745e501f872f1728122741536bd484241ddeac21edb6aeff015e7d62ec83f7173d14510ed4abe62
- SSDEEP 768:2Ff4ZMiqnflRBZVAL/z2Vub1Hmucl1eC4GaHw8gF3DSiUZIj3HE3pJa1/AMupStL:pZM5fHUaubpmB4GtjvXepJaHd28
- TLSH
  T1284301820DEA4C3A1677220BB43BAD3E3F359B615DABE7130A51712F3459F55A3A8348
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  ~WRD0002.jpg
- Size 823B
- SHA256 cb0628092ddea96bb040221b5c793dbbb792a67d0621bdfba170c07374d85801
- MD5 2c1b060229a914f2a90a8c7e3be6eb40
- SHA1 03d8fb85556edf397d8afcafc0b13f11ecbde50c
- SHA512 b69bb43b94be309fbe7266f0da6ef49667f171da1eae9019cacc717ac132ba673b45c895a6ecaa08880a8b1474a884b0225f688ef8ec6a56c9104ef89c12cd06
- TLSH
  T14401AC1A9B56D350DF1385FA15172D62D1CB5B823E946A352AA146AFCD10CF4C4C864C
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6