388bff368dcee70294968f9eb600e7f5e17ac4f2224697c3a84271333847d13b

Sharing

Copy URL Twitter E-mail

General

Target
New Compressed (zipped) Folder.zip
Size 20.1MB
Sample260831-asle9ssfjf
SHA256 388bff368dcee70294968f9eb600e7f5e17ac4f2224697c3a84271333847d13b
MD5 aa3431d0b868b1b8a8398ff8fb655131
SHA1 9e34e7f7fe0dd4d0fe760e571997af954b2c8583
SHA512 3662e4fa054e4a887ab73b0ae2379f445dc8d48a3e4f0893d4dd137668614504676e75b2ab7db7d5aaa23d42619c226e0a33b20d8afe89e9bfca537e48662635
SSDEEP 393216:QwP8FZd4w54Ot01lRiiYTFpD/lntriiud3vWOP9T3MvLAAc7XfSHqwwZKOZxLs+S:lYP4woliRpzNtriiE/MvLRkXfFnKCs8M
TLSH
T1AD2733DA5ADB1E868D261EF2F9EC486C6786240033D95A3D6C0DFA0539DB83675C2CCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  ATKExpander_x64.dll
- Size 503KB
- SHA256 cd489ac53dd39b49023c6e8d3a48dbee7ef199932dfb197c0ac02e7d8880d898
- MD5 62b577e1330b1ba1152168e8397affa2
- SHA1 1f39d0e2a160c4a4fc1e00b14c4de022556c2adb
- SHA512 b08ae2f169c2a3f101f14fc688f7eb1fcfd6cf0373664310618c9cc8927426a0f6ab01b63a139f998430b95f7a74f9246f5145e7d58aabd0ac74dad1e0547535
- SSDEEP 12288:9yiJH3VjP4rnEmRO5No2CuUoohzCTaMnOJT:XPsnE3ojoTT/nOJ
- TLSH
  T186B49E0973A504F5D5B7813CCA979A46E37678550320D7EF03D0DA7A2F23BE1AA7A321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  JEW.txt
- Size 1KB
- SHA256 111aa772ae0dea95cb332005e0407872a357f12f39fa454bd77eb5443fc774b9
- MD5 52a9ab57d00563be64440b4c54ac77aa
- SHA1 2775cb54b227d016ceb183ff1c3f992befb7960e
- SHA512 afc45401bef695614a27fd2d5a562f15cdf5c62cd9f87a197cd1467f2b2856350b245f36dd7e7a8e8f1922a2dfcbe9b220ac24282fd376f2f1d5aa5d56c03190
- TLSH
  T146312636858A359956E1B30586FF9BCC3C2F43C72273CC8A9DEA98545A0D791A350726
- MD5 SHA1 SHA512 TLSH
Score

8^/10

ransomware adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  LOVEND_x64.dll
- Size 7.5MB
- SHA256 0b5090646337f51054f7256488f42b4ca8dd9af2b3b8fb160fa8e14b96164279
- MD5 6eed774497c70dd4922065577d61e251
- SHA1 80f77b183f75d36045fa8038546a4b4847adfbd7
- SHA512 51c4d46a156431bdab3928ba382d5e5d90f6cf8a9926410da0a076f220587cfe3ce0483cd4febea0e54353f9e6c8aa7b5e6e481e16304d6b14f9784a7a30d61f
- SSDEEP 98304:ynBQLW+HKhhSCG3VIpHI+QIzqUh4w5r+uh/RNDwktTn65G:y8IGKh9dz19auNjDwaTh
- TLSH
  T14576AD07E2A750ECC05AC178575BA522FA713C494324B9DF67D4AB352FA6BD02B7EB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  SweetDrums_x64.dll
- Size 11.4MB
- SHA256 5507036eb0f6d77e1af4795ddf7b2b2d6200d2a846832981dcd5a9e141cb1a10
- MD5 94548d0ffffe0e8b69e805efcc865ab1
- SHA1 e0235f0c422668e3deeb3c9925e363b2f2f1b162
- SHA512 ff12cb11d0004db935d10929b808462945181356ec79af6f0425b3293f4051df1281f172a0cd0ca2049703cae9ca15fa198f65d137be9ec9645823e286e36bf3
- SSDEEP 196608:wQCD6+nUqkJE1ppaIn0+XoFNf49UQ2UcKzkKjziwk8m8RcCA:3vQpH0GUSBXx2gN
- TLSH
  T16AC6DF07E2A750ECC05AC1785747A522EA713C494324B9DB77DCAB352FA6BD02B7EB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  basiQ.dll
- Size 5.5MB
- SHA256 eebd103815ec48039bf49dbac829c061483ca7d2cc7da1435233d197f3478a98
- MD5 3d7cb306f1c89ef91d637531a7381ad3
- SHA1 0354d33848e309edf1b3647b831450ecae204e03
- SHA512 02cddd7f002f3a76a754128eb27d2723e3f22fc288fb1b2400011db59c767487654751274d6382e95c978691f48e87d08a1cad002c8e9c6fc086686f6e6607ab
- SSDEEP 98304:rpgco30eP3pOPzDEzN+TQqR9C85i5Q6y5kMF1Dvbpyt76BPQ:Wn30Z4zNnY65MFdvlrPQ
- TLSH
  T104462381F2A507BAC8EFA03895A65A41F3313050171993DB27A2CE241BB7FE46D3F795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  rnnoise_stereo.dll
- Size 3.2MB
- SHA256 1d53e1c8d44c03767cfe7e64c33ffe0c13f73c34dfd70af9c1f1010eef32a9d4
- MD5 1cfc92f87ab1ab7cd4a5c554cdd8ee00
- SHA1 cb9b05766cc2e94ef71dab0d4a79460a18da8a98
- SHA512 03460f73b2fe39bbd673623a76585fab4a85091e3aa51d73b2fdb021a5507b3b98e9bddaed1366ea1fcc313c73ff88ef42f81e098c80ede1d1e2d29f608b630f
- SSDEEP 49152:55Dcb43EnC/FLIIRVfHBbkEHmp/F1gqbWHTY2BBBUBQ81fI58k6yK:H44NvmpbW82BBBUBQ81F
- TLSH
  T18AF58D8BB27905C8D07AC07DC687960BE7B234154365DBDF16A1876E3F27BE24A7A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12