394fe2b35a35c899b727d7c132e6b02871c43dadfa02a742f5b785e71c808153

Sharing

Copy URL Twitter E-mail

General

Target
Animal Population Scanner-41-1-2-14-1-1766221111.7z
Size 22.0MB
Sample260908-y3yeksxgpg
SHA256 394fe2b35a35c899b727d7c132e6b02871c43dadfa02a742f5b785e71c808153
MD5 c9cd7ee20cfd5d2d0b11ca774f7af3e2
SHA1 ef2c08a5a104adf3e7289484d55c7fd5d36898ab
SHA512 439bfa282ec6ecbf944c6d04d0831d777fb460c3d6325e2953439596f85a0e1b8b3d22ce6785fa9ebf894abeb71b323462d22e6a1e227058f8cddbbd84aeab17
SSDEEP 393216:ZlRltdSBG8cmGjCm5e4XATSxojxbJYKDCoRTdT6dXbrcCDES1Pmai:LLv8cVJi2o1TDCoRRGtbrcCRmai
TLSH
T14B37332AE1ADC932FC06421A82D64E1576FA708157B24C04A5EBDFF8537F1E24B947E3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Animal Population Scanner-41-1-2-14-1-1766221111.7z
- Size 22.0MB
- SHA256 394fe2b35a35c899b727d7c132e6b02871c43dadfa02a742f5b785e71c808153
- MD5 c9cd7ee20cfd5d2d0b11ca774f7af3e2
- SHA1 ef2c08a5a104adf3e7289484d55c7fd5d36898ab
- SHA512 439bfa282ec6ecbf944c6d04d0831d777fb460c3d6325e2953439596f85a0e1b8b3d22ce6785fa9ebf894abeb71b323462d22e6a1e227058f8cddbbd84aeab17
- SSDEEP 393216:ZlRltdSBG8cmGjCm5e4XATSxojxbJYKDCoRTdT6dXbrcCDES1Pmai:LLv8cVJi2o1TDCoRRGtbrcCRmai
- TLSH
  T14B37332AE1ADC932FC06421A82D64E1576FA708157B24C04A5EBDFF8537F1E24B947E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  AnimalPopulationScanner/AnimalPopulationScanner.exe
- Size 1.1MB
- SHA256 b38724f26d9573bb28ba0ad1006d3c01bba34a4e47045eac31d98467a3e2d3a0
- MD5 47f944a11f5c0470d92a47a97b20badb
- SHA1 7d3eb2468a1a768050f6d0bd122ae3095d9b0b9e
- SHA512 cfe2571a78611e8176e554c16c64bcf8a2cdae97d654fce6d0ea80430002ab156906ffe5ebcdeae55e07cc69fe69d2c6b51785e8d2ce1fe416a10368bc86bd45
- SSDEEP 24576:1M1GUvjXIkc0Lv/711oklTr4nsvO2pKwiu:u1TjFZLvDsklTsnsvOciu
- TLSH
  T122354A1DFBB14DE4C1A6423996B6E2ABF2F17406171077D732CC91253FA32E48EB9216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  AnimalPopulationScanner/License/DearGUI-license.txt
- Size 1KB
- SHA256 9f2c8127f7973161e82305f534c53e006c214d1f0e2df270e7faeb1da8ec927d
- MD5 f8a421b2fd3c6b8939a30a1cf335c844
- SHA1 beae489139e562bf49231c66be90116e48236241
- SHA512 293dc342b5a6997bd968b5b784d86bd21acbf71aef4b25a83c161aed071a3464e000e1aec3f8e1a77581f6a66e812d6b8c2b74f20239e7ad2688fa71e0abf967
- TLSH
  T15211861EB3510B62189A13605578A8D4B23FB25F7A5F2A85146DF241232A06CC5FF840
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  AnimalPopulationScanner/License/DeerIcon-license.txt
- Size 202B
- SHA256 b7f910a5428395aa69add0ced614c166edfcf6ad9d86a447c44d8e242051d4ca
- MD5 c93fdff0af9f212b91caf84cafef7da0
- SHA1 a6a3bbf43f7a0eace52ffcffa047da982d350799
- SHA512 129aee8f1ca026cdeec9af60c34aec080f3771f701706d863b3c729b2db86d2ebd4921b9be50b1186274c6b142add423ec8d0958cd07a9b77333463e2ee09bbd
- TLSH
  T181D022DC76A0606631E698B17928DAF7A583C1A48376D710A8B9496A02F2021307463C
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  AnimalPopulationScanner/License/Font ZCOOL Cang Er Yu Yang Ti_LICENSE.txt
- Size 515B
- SHA256 3a2833a17880f8d867e31a5495af2618f53b0844480e674f3985ff0be1912438
- MD5 cc5f84c7491701ad2eb02f2561552302
- SHA1 a0857e6f4b24cc83986f6efb156a48974690a5a0
- SHA512 d38d27dbde8b0fac42ec19761b4890e74af85583c11b51fa0aafe5c662faf944e421f4f91a5f0f76ee50722a8c55d2c695cff88638bc73e9cd9e9ae691fb7f46
- TLSH
  T13BF0C9074B0427EE348F4A42366CA2D8EB2698A2371886A237E4C40A1B8000B533BBDC
- MD5 SHA1 SHA512 TLSH
Score

6^/10

discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  AnimalPopulationScanner/License/FontAwesome-license.txt
- Size 99B
- SHA256 2e6c8068f04446d251e9840c0ad725ef08289877f945e142e3e699218446f943
- MD5 df49b81340040f741946957b104dc6b9
- SHA1 1d91dd31ef7921782b2eef6d114f2dff917a0b23
- SHA512 626bbacc8cd4a54dd332e951f197ac1052d4d98d8ed60291051f76c84e77efef81af893458ce03512c9809fa153a167798fc721bbc8be3ec9e59ee9e4233529c
- TLSH
  T1CBB0123F3D12D053139004463A8FF41E6C12A1042CAC9BC59046D0724150DA57682384
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  AnimalPopulationScanner/License/Zlib-license.txt
- Size 873B
- SHA256 00a060a426f32a0c2df6a9dbe1d85a6219e436882558732661c2a26ee3970ae1
- MD5 d5b94311b2b7a87b19548d785abb3633
- SHA1 a0a29508fb35ca80cf3c6e4138ad85896d3259cd
- SHA512 d393e47cad146664bd1f657254159295744fecd93295958b3f28c35decec5ef4ade15ace8fc019cad4656a90bb1e6e1cbdd44774029338d8c2eb876b186260ad
- TLSH
  T13C11995A379E837214F242AA3A498D85F7176EA5B74E57D9B06D808D3BAA21502304AC
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  AnimalPopulationScanner/README.txt
- Size 2KB
- SHA256 024be22d45a96e84c9ee2abb4eda8f438424d8018a266308fc4801af261f03bc
- MD5 70828bc5a73306e9a075c00d92594e3a
- SHA1 6be5ad21646846d1907b419a5cf5b26514671fd1
- SHA512 3bcceb8ef71c6f5850292a50382ec70dbd68de8fb222f090a2123398193dbb010b17850d32422a2296141537cc940e41757222ed5a7c9e32d3ed703a92c6b5f6
- TLSH
  T10B5153647F8563360177D055629D62C5E329D0FC233A4329782DD0497236BAA17AF8ED
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral15 behavioral16
- Target
  AnimalPopulationScanner/data/Fonts/Font Awesome 5 Free-Solid-900.otf
- Size 577KB
- SHA256 4518f21ee344c44004a830a3d5cb7a2f029464fcc8b7cc2d8da9b055cc8882be
- MD5 5d180322ea3475a84fb544d98c42243e
- SHA1 7a1859276b849c298cad1ea2715b862d8fc5d354
- SHA512 2082bd21cc6e3b48c3d9ff1a0318c5b17982074106523e2fb36ed1629be20e285722f5e74bd1db126690231fee3935d5fdd20f440868a28dcf98665ea71c49e2
- SSDEEP 6144:kwNsZMcakpSbGAEJi+eQsRtG0JVAiOGydZIa5yoggEkfvJAfA:kwquWMGAEJi+eQn0JYGyd+a5GgEc
- TLSH
  T1C2C4E742DD047521E9A00B0A0C8B8EFE3E377E476B275B856E5C3BCF444958E42AE767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral17 behavioral18
- Target
  AnimalPopulationScanner/data/Fonts/UbuntuMono-B.ttf
- Size 186KB
- SHA256 11f15c3a6bbd998a8695fdefb3475931c3789aa035d7546f2efe78e83b352f6b
- MD5 0734aff79a8af321fb865c9ac2ef3e64
- SHA1 ead7d2555c6a81f74d572447256f0de7368ef271
- SHA512 eaac474ed82d4323e96ff1911a737051c3007aece38c2f146934d19104e4d1caadf287ac5dd00850989ecbda1477a865056f53b6d0fa5f9728a49f06de9b6d19
- SSDEEP 3072:nRhUh/uQQ+maaA4uGoaJ+4spp/U9r7gPQzYRqhADKy/892E8H7O1j7nSDX:JqaA4uLaY/U9rMkAD9G8
- TLSH
  T17D147B077353D60DC2522FBD657203E69B85FF88274B436FD2886922E48F9D25C21BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral19 behavioral20
- Target
  AnimalPopulationScanner/data/Fonts/ZCOOL Cang Er Yu Yang Ti W01.ttf
- Size 1.5MB
- SHA256 67f4c70c1fbb6935dfb0923695bc3ab882ff9ee24ab2859fe08fedcccaaa75a1
- MD5 e1e23f943083ae7a8e33764d76d97a09
- SHA1 3fbf89bbbfe1f7ecfcca8dcd09b1e90f1773475c
- SHA512 5c3290656938cf7fedb1a98b8caf3f370503fc44f203e8dc1d10de53ccd57272fe79d233175e846dd653db6a21925f3223c84a9ce5ca237fef0b9093f27be967
- SSDEEP 24576:KTA0thAziZzM5LJd5vap6JPM+/eGkyqoFh63pFtSB9+SBt9CtrFN0+e0i28WrRF6:huCDylvN9dupd5b1x
- TLSH
  T11D758CE207D47AB2DB11FE7D8902E446F28FD2119B864B81CFED1B159432B854EB1EB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral21 behavioral22
- Target
  AnimalPopulationScanner/data/Icons/Alligator_frame.png
- Size 10KB
- SHA256 6d696f8bc5733cd26416149a54d4bb8154cfa953f5c1c36e29ccc89bfa4a7ab0
- MD5 ced6a188bd9831b0027e9a652b3c0ca8
- SHA1 b44e2c356dd992b6f04f9c921db9ac20c8b871ac
- SHA512 73598ce0a3d46791492d9550d0e0c61a0252f250a9f82049805ccf48610f2accf14173993607de55c28df9ccd2d156dedc2840485144cb4e7e1eeff6e8176d9f
- SSDEEP 192:a/F9Lz784eXV9k3X///F6clQkxvlkar1H/rq7zRGH1TbHc1W:q937h0VG/16clUar1HAgTbH8W
- TLSH
  T11C22B09BB68CCE71F28FC9B93598162B6B5D506402818CBAF11375725FAE4AF3605030
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  AnimalPopulationScanner/data/Icons/AmericanMink_frame.png
- Size 7KB
- SHA256 37ba0f20daeadf6277682159091785c963d1892708aafc6af48ef7536cb4fcbf
- MD5 abe9340db4f3a93144e726ffaa5c6328
- SHA1 33c5f0746dd5468e0c116f1168206340c8d0df01
- SHA512 ce7ff1ccc1636ff450c4c7429ccfdfabab2c1b52905a2b2d515aed18e7cc53641824e390fcbd179d87175e0a113455d0ff28a2eadff22b240be57bc2940e8abb
- SSDEEP 192:pSBqYD0YkfrsgLPAhrPNbF1XwyyF85lcRpdRNMm:Q0YD054gLP4Fwyr8dRH
- TLSH
  T14BF1B0DD22E4D7D4093BA1A04A5C544D9DF7CB80DC85A639482C6F027AF473A649E733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  AnimalPopulationScanner/data/Icons/Antilopejackrabbit_frame.png
- Size 9KB
- SHA256 4cd4d6e4142f130f9b285893be70a1d372af2550cb6b661333fca7552049650a
- MD5 6cdd39d02c9c1a003b83deaebeef124a
- SHA1 ebfba259b438ca2a874c53784b0ae26c9468c137
- SHA512 c8283cd97c2edefdb80a881be08603750388f59db42112a838baa56c3056ab4abc93a89c766d481faeae6ede455babdf6f8ad1971dd5cf049f1f0a62bb467ff6
- SSDEEP 192:NchbReYgITlcPepFjGGxOZ3NwS9mSWLqdug9k:25RVgaO2pFlIZ3qfSWeduX
- TLSH
  T1AE22C177342AB6445716836B7631B83B92462597796D243C539A20D5CDFF1E20C10B93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  AnimalPopulationScanner/data/Icons/Axisdeer_frame.png
- Size 10KB
- SHA256 2ed97c52003f34175341d6a9d548e8c8fe7ee2097c99ce014844b856f808cbdc
- MD5 5b111b7b339408ea07ecc921e022041e
- SHA1 642f2fabffe9bfc8ab60beb102b190929dab0e4d
- SHA512 9d9759c54cda6e815f558aa1f9072366771abb08b0b4defe3bfb1d8bb2fa9074b1b5136f524829faf007a64da0331879f6036933867a43296607e5fdf4e18452
- SSDEEP 192:hMx2acoPabiPeJzyYNZfI6I3NL/PCoyBJdR1THJT0THSHAyeKVZvuQXa4C582:hM9Pu9dO6CNrPQpay+KnWQXhC582
- TLSH
  T10032C05BB0CD7F54A03C01ACB2CA1D4CE1B752DE447EF07A68B5EFB340554B2A5A0EA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  AnimalPopulationScanner/data/Icons/Banteng_frame.png
- Size 9KB
- SHA256 7019d5df46f69c5587987c745d8ecf4b63c84711a50a1eb181d251daedbf2f8c
- MD5 1c41f22731caca152536f7ec5e2b82a1
- SHA1 3816bf49b62a7568f66e73216af43c5211590b20
- SHA512 680e89cbc2b4f67c62bf4b2c31bc1add0d98858371b6cc933e4a0a36f4c2eb3d4f04d5c11f24663e8fc925e62c92cc90e4cb9a965bb8a67ed347b33480518a89
- SSDEEP 192:+pkYhhwQ4xvPtlw39DCIG/mzG3bDRVcHd2jrRZXyAgmqtqe7Pb3l:+uiKt/wN5G/Ru92JZEm0db3l
- TLSH
  T1C812CFB19D902B88E4479C5653B9C402DFB78D077C37ED09A62470F649D9D8F4B142AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Enumerates connected drives

Checks computer location settings

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32