7db39951df5698d13cdb7126fdce8ffdeb521698ab8f6369aba7755e2c120bb9

Sharing

Copy URL Twitter E-mail

General

Target
Faktur Pajak.JPG .exe
Size 21.8MB
Sample260910-jghdxazemg
SHA256 7db39951df5698d13cdb7126fdce8ffdeb521698ab8f6369aba7755e2c120bb9
MD5 5d26f9bd04cd18129608f466ec7e8280
SHA1 c0deae43cbecc7e9bdb11061b8ba1f538b1bb128
SHA512 1812e638b3d3febb2f9ac9c9bf4334c27c5e724162f443c1bbb2eacc161fcb96ec130fd99a1be9b41f7fd8e76132b8a64be422bc5985bafa810b13c556056f4c
SSDEEP 393216:3y5mIlOWMNkbp97hJZs34yTguclOgJCet1n52RTm9V7NoNgc1:C5Nkk9fTSTHclFtPcV
TLSH
T18537C01663F800A2DA37527CE26B1719A23374152326A1DB3379F13C6EFA6D49B7B740
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  Faktur Pajak.JPG .exe
- Size 21.8MB
- SHA256 7db39951df5698d13cdb7126fdce8ffdeb521698ab8f6369aba7755e2c120bb9
- MD5 5d26f9bd04cd18129608f466ec7e8280
- SHA1 c0deae43cbecc7e9bdb11061b8ba1f538b1bb128
- SHA512 1812e638b3d3febb2f9ac9c9bf4334c27c5e724162f443c1bbb2eacc161fcb96ec130fd99a1be9b41f7fd8e76132b8a64be422bc5985bafa810b13c556056f4c
- SSDEEP 393216:3y5mIlOWMNkbp97hJZs34yTguclOgJCet1n52RTm9V7NoNgc1:C5Nkk9fTSTHclFtPcV
- TLSH
  T18537C01663F800A2DA37527CE26B1719A23374152326A1DB3379F13C6EFA6D49B7B740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

discovery
- sample from CS EDR
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  shared/05t758s5yo0q.dll
- Size 386KB
- SHA256 729d8da016206c763ede8723cc057cf0381e42deb6653061d33481883720daa1
- MD5 3c435578212865341f81f33759127618
- SHA1 f3c698e035d5e96d3e9731143ab5269a8f1f8bc2
- SHA512 4ebdf5bd4e239d0915a09601e9f6109c3915446d5f7d4918a9daa4d7ea387e751bf66a02170fafc3548e648ad5f1b39ca5ac74f098049d2eb371ea38e2ef4b94
- SSDEEP 6144:BK9XAT/2R6UJx66UYxopfoS9RD7gzuhZFhXJdyOdMpM2gKg0:BK9wTC68x66topfoSvD7gzuh1ZrOpa
- TLSH
  T199845A1DA2BC4095D46AC17CC95746B9A672BC288B4315CB10A0FE7D7F3BEE5AA74F00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  shared/Guidelines_2021-04-26.pdf
- Size 1.1MB
- SHA256 10dfbb2b997d61f62f685c8d2fbb43532f1b323b27507bdf70731858cc6f6e69
- MD5 e1f4cf45612a3c024859c4081b87a350
- SHA1 a243d39342951f45dbc399a24626be293bfc8e1b
- SHA512 3424a0421bb278d3bd2a9e5a4ddafe55f59763efc0e37930cf0d44b64fe90a3fe9fd0cc63464f7dccc900ab7d06656476d10820d29023c79023251a10a32c92f
- SSDEEP 24576:tRJYBIu5eiTOL3mijVnjRxoN7IyPgJv7o:tTUI0e6O1jVjRmJIy4xo
- TLSH
  T1B7358D6B67AD00E8C17AC078866B970BF7B2745543306BCF067686A6DF2BBE1553E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral4 behavioral5
- Target
  shared/Meeting Notes v3.0.docx
- Size 343KB
- SHA256 de43c79e2b4e8454a5a0f0ebca92b91851642bacd2f71f3bfe0c976a6948b55f
- MD5 a98f0a9063d3475662c62a6de4e4ac7a
- SHA1 feb281ccc7d0a7024228f72381af809e6bcf3098
- SHA512 c49d19c2d27381e5beb74c3c0b699a27e98ab6958c24bbeb258b47e82b54e60d50eee4ca89c6a1f38100e19b0bcbb434866e231d587a0cecf1423d2af151d0f3
- SSDEEP 6144:Axrat8VkhTfdH2B6AVA4+yzcvuuPRFXVLkj+2N0mLsQ5K39LGPhh:jwGdW8AVJzcVPvX0tstyL
- TLSH
  T1B27423C2A80A3652D2D9A837DD99BD07A10822A4B77313C7D419AC7293965DFB02FC5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  shared/api-77504.dll
- Size 3.9MB
- SHA256 446c1c35b470f23797802ec436502b2f7011820cbbfc72995b44095c77e519df
- MD5 27c60ea1ab495d5c4bbf1cd00f7f55c2
- SHA1 7e8d96ebe18992f4241d8ff47a24d91d41f086d3
- SHA512 50641ec4840347db4ec70c36c35d9d70637653e704930643046b4c3e8e39c0a1104b4c43df0fba112fbd2e73084b8e7fa909c8dcfc8a53734b82d96570d7777a
- SSDEEP 49152:ZgEr/Ybluil79UAmBMB3JH+UDmnosIScT9t03LNeJtMNIdNRez/ubrU5QJuwUySo:PnLt279eCJ099p
- TLSH
  T1E0165C6E2BEC41A6C17AD278C5AB4746E2717C262B7186CF0121A17E4F3BBD14B3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  data/sechcc0.log
- Size 1.0MB
- SHA256 44170463f5a3e55e136a50441d5f4398e7063fa7bdccfc5da987cee0f99181ad
- MD5 66dde1041e6ad615a00a19872f680cbc
- SHA1 e425211effb0f92aba5f65cb8d03a823a290630c
- SHA512 23aebaa32b56530a2800850ea2baf1f11dc1a252fdb0463b56ec91c4376bb2f7591ad547d32f35ae3c705fe344f1a74e8eebcfa33eefd3b632883588352c1cf2
- SSDEEP 6144:nUknaPLvsYAFdFg6gLQwvN0wf+D5qX9Aq334BMw8YFxHAdQ3i9VuyyjMvCoTZ5dv:Ohti+fceGlPKZdDN7aq8tTS4Vg
- TLSH
  T19925CF9BD6CEE36246E235E21A0D58D9FB2AA03C0BA5D53528FDD0203740D79676E3F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  shared/package_20240116_161335.msi
- Size 440KB
- SHA256 8e4495a4eb1810b4fcadfda78c655beb3949c2af08da6032e4f4ee07d251e206
- MD5 0c3593f7014b44993683257d7646f500
- SHA1 88a515c1c99a735005b812fbe901cbd376896c95
- SHA512 2a51900259c85629c7a79ad20bfff983bf8cd2b3406186270f1a4795b2459a9190240d7a13c41099937bbbaa9c7a084abe29802ffd4e4d99c3decb904eaabf72
- SSDEEP 6144:Rv2MeFRZp3x7uhKi6b+9NfG5CnBPPizT5BXw+3s3qUI:ROMeFRdaT6b8G5iPPOw+3JUI
- TLSH
  T142A4BE11B4C0843ADAFA09319439D630AEBDFE244B50C9DF9354B92E5E706C1AB73B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

persistence privilege_escalation ransomware
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  shared/sqlite3207.dll
- Size 958KB
- SHA256 c813a07c4c7c76892006106773cf0914ba7ae9a590a0a92c1d9761ed7aba3028
- MD5 8f2c53c30f0e57cf5f32c66cdf4953f5
- SHA1 a7fc90e49abb1c877450532dc27e9404964045d8
- SHA512 8d6d346a944a03d4a4116da564bc6f8c2ee0ade9adf5596efc548fdd81d5b1686b47fb9164f79772973ad8f51e0be02c71caa3d822181942c840aa883da07ca1
- SSDEEP 12288:bWDKQ3tGjk+eGt/d5+qM2YzStFFjKRiEHxSQu3XV6c4zNPObuilTDa/HsO:iDKQ3I9lX9m/xSXv4zNouilvIHs
- TLSH
  T1CF25089B11CB08EAE9ABF2F1376EBBE080174136161384C72B05D395F9312DF676BA45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  shared/v1cdwua.dll
- Size 561KB
- SHA256 241a2f99ebe30a69572ef893a37cb92a2d84162cab08c8408e5d844c6fa6ac42
- MD5 b65c2be8d43e4b1aa28e7c0e999f1f67
- SHA1 237398d7d440ec6e79a161083cf386ef79e18f0d
- SHA512 58e8c19e31f294da9010183f1db5a6a6da322b0093a786d21c3ce75840b2e1e64d1d45050fd59d3a4feef535357dfb01b2318476691aad54dc6cd2d80f142acf
- SSDEEP 12288:lZ1sWCCtTQW2JdJLGbKY4GzrvR6mPtST9hvVj1zrEWQ:lZ1sWCCtTQWodJLGbKY4GzrZ6mPtST9K
- TLSH
  T196C43A62C6EC4264F5E7383A853E3634A8EED5650B7081C733C1D9D8EC786D45A3AB4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14