59536b0262997355cc2f6e0f4e40abe68603244420a575a6e8f290b85415e3ad

Sharing

Copy URL Twitter E-mail

General

Target
Computicide450PB.7z
Size 88KB
Sample260906-zn449aserd
SHA256 59536b0262997355cc2f6e0f4e40abe68603244420a575a6e8f290b85415e3ad
MD5 1e67ef3bb8a39fe98338719e513d27ec
SHA1 ea776050dfce23d1ef2e788189b60ef0d07fa5cf
SHA512 f6ef4d18a0366d0c2bec70faf2b388cab660874490bd4b51f220cca047dbb842d7c308f5ea44be8fca09b3f636208b67ca38babe751a3afc4ea489a2c3267471
SSDEEP 1536:lWOJlLAaj2KbBSMilwHL+ehfdJzvLYr434PD3mP6+5b0wg2jTm2N7+z6GiaZ9xTJ:MYbwpqL+g1J3AxDWP6uvgym2N7+zDiut
TLSH
T12D9302AEC61463161E49F342D6569A905E30686CCABC70593685B737C7FF0F83431AEA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Computicide/Computicide.zip
- Size 4.1MB
- SHA256 774aa3444821da07c86a361149b16c9c10b54b562a5b9e4006f7e3153bbd1469
- MD5 9cd1d104870b0f3aeeb26852f5ae45d9
- SHA1 561de3c4d8199c4b53013c764a580a8f26cfc13d
- SHA512 bef45439aab567280819b56ba7d3f9da3871adcce17b9fca4e24bab0538d05e1676cb9865ecd9a04ff2a0298e29a69743f007bf7996065d755324ae103e0e3e9
- SSDEEP 24576:wlOlBlolnlaltlwlAl1lPlGlnlblvlClDlylGlJlxl0lRlZlPlclplMl8ltlclyE:o
- TLSH
  T19216025A4ECCA7EF4F514AE7A28A6DE007300051B4CCE86D267AB0F9BE052FD74A157D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Computicide/42 - 1 - Copy (2).zip
- Size 83KB
- SHA256 4c251904c9312c8618c151a59721e93778850db454950f1c39b8f8a671bf158a
- MD5 af7d8c933fe234c48fa3f2d0af21fd5e
- SHA1 af934c153ea9d70f34a84a65b8e823327fa6070d
- SHA512 16d7b4b1ca545066e646de161f93de80507b73beea48a80186cbcb7eb4136a45e633d343aefb3d63f197f92572230f1d99980b6a9edd7038e55bcc1c90df942c
- SSDEEP 1536:hGx8DKXE//ZhhCirFi2cwrGx8DKXE//ZhhCirFi2cws:h3DKXEHZhAwFNnr3DKXEHZhAwFNns
- TLSH
  T1BB83D028061AD50DEAC0C678F3FE425F5B322E675F6D96A5CD2D90869C14D803DB760F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Computicide/42 - 1 - Copy (3).zip
- Size 83KB
- SHA256 4c251904c9312c8618c151a59721e93778850db454950f1c39b8f8a671bf158a
- MD5 af7d8c933fe234c48fa3f2d0af21fd5e
- SHA1 af934c153ea9d70f34a84a65b8e823327fa6070d
- SHA512 16d7b4b1ca545066e646de161f93de80507b73beea48a80186cbcb7eb4136a45e633d343aefb3d63f197f92572230f1d99980b6a9edd7038e55bcc1c90df942c
- SSDEEP 1536:hGx8DKXE//ZhhCirFi2cwrGx8DKXE//ZhhCirFi2cws:h3DKXEHZhAwFNnr3DKXEHZhAwFNns
- TLSH
  T1BB83D028061AD50DEAC0C678F3FE425F5B322E675F6D96A5CD2D90869C14D803DB760F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Computicide/42 - 1 - Copy (4).zip
- Size 83KB
- SHA256 4c251904c9312c8618c151a59721e93778850db454950f1c39b8f8a671bf158a
- MD5 af7d8c933fe234c48fa3f2d0af21fd5e
- SHA1 af934c153ea9d70f34a84a65b8e823327fa6070d
- SHA512 16d7b4b1ca545066e646de161f93de80507b73beea48a80186cbcb7eb4136a45e633d343aefb3d63f197f92572230f1d99980b6a9edd7038e55bcc1c90df942c
- SSDEEP 1536:hGx8DKXE//ZhhCirFi2cwrGx8DKXE//ZhhCirFi2cws:h3DKXEHZhAwFNnr3DKXEHZhAwFNns
- TLSH
  T1BB83D028061AD50DEAC0C678F3FE425F5B322E675F6D96A5CD2D90869C14D803DB760F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Computicide/42 - 1 - Copy.zip
- Size 83KB
- SHA256 4c251904c9312c8618c151a59721e93778850db454950f1c39b8f8a671bf158a
- MD5 af7d8c933fe234c48fa3f2d0af21fd5e
- SHA1 af934c153ea9d70f34a84a65b8e823327fa6070d
- SHA512 16d7b4b1ca545066e646de161f93de80507b73beea48a80186cbcb7eb4136a45e633d343aefb3d63f197f92572230f1d99980b6a9edd7038e55bcc1c90df942c
- SSDEEP 1536:hGx8DKXE//ZhhCirFi2cwrGx8DKXE//ZhhCirFi2cws:h3DKXEHZhAwFNnr3DKXEHZhAwFNns
- TLSH
  T1BB83D028061AD50DEAC0C678F3FE425F5B322E675F6D96A5CD2D90869C14D803DB760F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Computicide/42 - 1.zip
- Size 83KB
- SHA256 4c251904c9312c8618c151a59721e93778850db454950f1c39b8f8a671bf158a
- MD5 af7d8c933fe234c48fa3f2d0af21fd5e
- SHA1 af934c153ea9d70f34a84a65b8e823327fa6070d
- SHA512 16d7b4b1ca545066e646de161f93de80507b73beea48a80186cbcb7eb4136a45e633d343aefb3d63f197f92572230f1d99980b6a9edd7038e55bcc1c90df942c
- SSDEEP 1536:hGx8DKXE//ZhhCirFi2cwrGx8DKXE//ZhhCirFi2cws:h3DKXEHZhAwFNnr3DKXEHZhAwFNns
- TLSH
  T1BB83D028061AD50DEAC0C678F3FE425F5B322E675F6D96A5CD2D90869C14D803DB760F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Computicide/42 - 10 - Copy (2).zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7
- Target
  Computicide/42 - 10 - Copy (3).zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Computicide/42 - 10 - Copy (4).zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Computicide/42 - 10 - Copy.zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Computicide/42 - 10.zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Computicide/42 - 11 - Copy (2).zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral12
- Target
  Computicide/42 - 11 - Copy (3).zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13
- Target
  Computicide/42 - 11 - Copy (4).zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral14
- Target
  Computicide/42 - 11 - Copy.zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Computicide/42 - 11.zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Computicide/42 - 12 - Copy (2).zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Computicide/42 - 12 - Copy (3).zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Computicide/42 - 12 - Copy (4).zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19
- Target
  Computicide/42 - 12 - Copy.zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral20
- Target
  Computicide/42 - 12.zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral21
- Target
  Computicide/42 - 13 - Copy (2).zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  Computicide/42 - 13 - Copy (3).zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23
- Target
  Computicide/42 - 13 - Copy (4).zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  Computicide/42 - 13 - Copy.zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  Computicide/42 - 13.zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  Computicide/42 - 14 - Copy (2).zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  Computicide/42 - 14 - Copy (3).zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral28
- Target
  Computicide/42 - 14 - Copy (4).zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral29
- Target
  Computicide/42 - 14 - Copy.zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  Computicide/42 - 14.zip
- Size 41KB
- SHA256 bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
- MD5 1df9a18b18332f153918030b7b516615
- SHA1 6c42c62696616b72bbfc88a4be4ead57aa7bc503
- SHA512 6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
- SSDEEP 768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
- TLSH
  T12E13D028061AD50DEAC0CA78F3FE431F5B322E575F6D9AA5CD6D90968C14D803EB660F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31