be58f8d38c07eabad06723e9c96cbd8641bafe4f35552f47313d469b5eecbed7

Sharing

Copy URL Twitter E-mail

General

Target
Release.zip
Size 543KB
Sample260912-z5dcvsfp3s
SHA256 be58f8d38c07eabad06723e9c96cbd8641bafe4f35552f47313d469b5eecbed7
MD5 bb3b89a78363f3d9adb5fd8fc3e5259b
SHA1 a4edd39b9ae43a3481ccce60f5455a935aefbce5
SHA512 598177298e39b84beffbcc192d9ccf471f65233cf7f240ef4d464468fb35562b1fd09d8ed4cbe40b65cc243c79276f4ab21a88bb89e5127516f93f8a9724eb98
SSDEEP 12288:uZ7o3ZLUhJ4gYRQWl4hM4FFAaeVZujDIxNGzVt8i:u4gYHOFY4DIxABb
TLSH
T1B1C423AADC51388FDC4F32B5897F9E6584B7D0145950041C5AB30A28FCDF438BEA76B6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Release.zip
- Size 543KB
- SHA256 be58f8d38c07eabad06723e9c96cbd8641bafe4f35552f47313d469b5eecbed7
- MD5 bb3b89a78363f3d9adb5fd8fc3e5259b
- SHA1 a4edd39b9ae43a3481ccce60f5455a935aefbce5
- SHA512 598177298e39b84beffbcc192d9ccf471f65233cf7f240ef4d464468fb35562b1fd09d8ed4cbe40b65cc243c79276f4ab21a88bb89e5127516f93f8a9724eb98
- SSDEEP 12288:uZ7o3ZLUhJ4gYRQWl4hM4FFAaeVZujDIxNGzVt8i:u4gYHOFY4DIxABb
- TLSH
  T1B1C423AADC51388FDC4F32B5897F9E6584B7D0145950041C5AB30A28FCDF438BEA76B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Release/Release/Max.exe
- Size 138KB
- SHA256 b4bbcfd31ccce482ae9989b95503608fb624c2897c3a29d218521f64ce1a2da9
- MD5 86ca1ecd369876d5e6d072d20cc4fbec
- SHA1 f5b10996fc28d0c4877458072664c24ed8d208bb
- SHA512 0d60a7e738edd6cee8ab986cf1a4fd10e7fe754b04facd8075a39011bc0d4e9fd4404c22e93af88705bc862339d918a5d4d219d934b42627d39e09070038e833
- SSDEEP 3072:Czmai+PaG1Z1r07Eu75KAGwgk8L+2n7NNumO52EfZG1:m1i+m7D73GvleVG
- TLSH
  T109D34A57B3A631F8E1378279C9960602F77378365720ABEF0754866A1F236D09E3DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral2
- Target
  Release/Release/PC MELTER.tlog/CL.command.1.tlog
- Size 816B
- SHA256 6b9f1ad9dcbbda5a95d40942304d3411f27f6f3500639c7884ce49a0c2aab5eb
- MD5 195f5bd287100d58804b217b94f3370c
- SHA1 b143e60af45476ca53d699c97ff608faaa1c5357
- SHA512 01662de34d1567df44cb1a4f319d7f09f839425cc1b7e425e5818edf13738d97d48f1539180b8f75ea55a8bab31d5a7bd87c5bf2fba685f4f5aa287c15133ab7
- TLSH
  T1CF01DF2062FCA18BA3663ADD9FEFC05B8AB4F2B58973422F503046075264D04EE14B72
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  Release/Release/PC MELTER.tlog/CL.read.1.tlog
- Size 44KB
- SHA256 11cba2111ca9e1e9cd065b71f64ebfc3718e053c56dd55fa00ed112bac34860a
- MD5 7085c8137d3d6b791687c3a9080257c5
- SHA1 044e014f8e8a9a9c89b8a69511c16feeeb950278
- SHA512 980147e0a7493b5a911ea0ed0343a2ae99862af97fa8d0286d7f12e6ecf0f04fbfae6e6ce580014ca9e1594d2cbed59ab9b71a09f56f062942e2a3caf857581b
- SSDEEP 96:F07RrBMXOu2Ysze3AYvkymJdmJZmJUosesgjMt8ssHx1OwNj7r7XPrtrPr/Mr2VZ:evxNFrDRD/ovgKXFarwA384LUA
- TLSH
  T1AC13371870EA23482313B2C6DBCFA95BD727F2B8D63B576F2194130303916175A96FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  Release/Release/PC MELTER.tlog/CL.write.1.tlog
- Size 324B
- SHA256 d55dd4d26a9ef6448b6b7c367f7e79bc8f2fd5a9cfdb483fdec23062728c51eb
- MD5 da74b31dbcb160238d178f3aa0fd5d4e
- SHA1 ae8ed0d1e708c056ec8a359307f0bdef5d0c93ca
- SHA512 2f3cc5ecc91387295a5b52dc028ce8e48d455d1fc0d78c2fab8f6a864fdebef477c270bcdffd8f52f1cf6debd5367d44c5c01be96a5f7c8bf95396ade0b4107f
- TLSH
  T120E06736D0EDA1CB874A79D29FC6D168CBE2E2B1DE56133F60448243B2C5C15C5087F2
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral5
- Target
  Release/Release/PC MELTER.tlog/Cl.items.tlog
- Size 101B
- SHA256 1b89fb0cf05d310712077ca476cc999f30e7f30090d816b0dc13b0258b0d14a3
- MD5 4e72015d03214c49709ca537ebbf6175
- SHA1 b5fc77fce42f275ae815a32ca9f6cf36e6826459
- SHA512 f4eb79cb9d83e1a98b61240fd9ce6eedaca834aff0bde12642a290c0339d27bf2d2a58afdb02f81ba06afb8ad1196c2ee02d10628e08a0ea212a0e9e92291d4e
- TLSH
  T187B012F72031DD1F83BD24169F1E2DC5D0511CCA1471712183F18566F51041810CB807
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  Release/Release/PC MELTER.tlog/PC MELTER.lastbuildstate
- Size 306B
- SHA256 96644459ab9ea2663bbd9d9742668f1e57ed8f4b5fd3d14d0232630e8b30d596
- MD5 51c9c98167facfb745d2789c3c37613d
- SHA1 ff87b2353e1c75d55af974898eebbacf0294b807
- SHA512 a0de79ad9a3f1a1d80bfca906fb778a088e648f56b68aa03cc6691b529f48f5b1b9fb4f7bfdf0c7aaff712576a9dea017b643b4de47710a3d944449a643731a2
- TLSH
  T1E2E0C20C76C0BCFA51F66531C18D118D53BCE2491836714CBFF1414DEFD980E10AA236
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  Release/Release/PC MELTER.tlog/link.command.1.tlog
- Size 1KB
- SHA256 be25079a0c055fb67634418908fc6f98c31645a2a3e4b4b3c8ebe8b6cd8d9069
- MD5 cd51b0c47337fdbd6a1ed758debc8da5
- SHA1 fe58420685d6464b66f43d45b5471921072683f9
- SHA512 99c1b5413c381ba914cb652cf93dc7faae1b1e994a97f6c33bcd0de8c28ed5fcd9f847977a6bfcadf7deb118da5ac354f1c68d04a84dc35fca097419906f85ca
- TLSH
  T10D31C135B0EC719E8706B9C68FEAC079C7B6BBB5D63A073F1890858F5356842EA01731
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral8
- Target
  Release/Release/PC MELTER.tlog/link.read.1.tlog
- Size 4KB
- SHA256 616af727c71fe6a7644e7a2c15e9570b420f30010de806b70eb6c534dfdfc964
- MD5 b87b1e68d494185a009bba1c9926b9dc
- SHA1 328bd58e95c7142e553ac5d9b078e71f3569a361
- SHA512 21a469fe5e44028fb41e425255dbd3109b0580198ba13fa25b5aee0f7ed1410401d2dd71fbd5cb3cf8c1984c27e012e1e4c36a28d17a9e3132e237bb23814b38
- SSDEEP 96:FCZAwtl9tY1dtPpML7RrmNHTMu6PKCgAkv:+7VWv
- TLSH
  T15CA1AD3970EA324A470AB6C29BCBA16BD713F674EA2F133F54C1438703925179647EAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  Release/Release/PC MELTER.tlog/link.secondary.1.tlog
- Size 184B
- SHA256 5cf5560167541f3f18354aa149353791c75d8a115abadacb0953acb00bcfe500
- MD5 e9804afb4094c7b7a8cd0c6dc846b13e
- SHA1 71a6b608747ba8a6aeba4f830f7a319208c8de2d
- SHA512 74de6879ab94ade6589ae5c7361c0140ee8d47298449b039755dd573d4ea7de0136e862bfc61eb63e9a38b712b9898ab3d7d290d826edcb8efc021008e3642e8
- TLSH
  T1F8C012E931518C0F27BE1C629F1D7ECAE1406E592121991587F09155B08758B81CBC43
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10
- Target
  Release/Release/PC MELTER.tlog/link.write.1.tlog
- Size 242B
- SHA256 1cbaafa6ce1fbf702d4880a9afc8681193c70a0ff652e867ab20d91a5952606e
- MD5 1e5d1e015320fe6e299e2939077b11db
- SHA1 0f812969803e4c7fc80a406c08d18bbfe9ed2792
- SHA512 7836d320863738c4ebb47a4ad125467808a4854ae648b42f16fec0510744c91bc4e7595c077d37e3e6120b2455a424b1eeacc68f423eb9e81b7a1e9a4e98b059
- TLSH
  T103D0C935D0E8B18B870578C1DFC1D024CBB2E6B1DE52023F24408603A284815C508271
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11
- Target
  Release/Release/main.cpp.obj.dt.d.json
- Size 35KB
- SHA256 e774d0bacb5351325e1266f49d39ee45704c2b032be7f46cd962e7d38f175974
- MD5 3f91ba33a428bc1ff11e08cb284762f2
- SHA1 b53286f2c37e88be5322d397d30124a884944b6c
- SHA512 a94196584c01612ec157c51904521a586d4e1e105d1abe46794e6a6f2a39b49393c2fd640a755c592a8dce7417644bba324f52800361dce3e29efd1de1c19b78
- SSDEEP 96:oXafC7CdGlQYdFPtxFHi2RP/+S9d9/vAGGAg1JEdcU5fdJIocmrVNVEc01hbrFVf:oX73FHipGNLyDkGAkgWkW/
- TLSH
  T115F24D1BDAB9C191C921D58872815D0BE048EA4F27B00105FB6E546FBB96CFEB6CF4B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  Release/Release/main.cpp.obj.dt.module.json
- Size 333B
- SHA256 9b7691d90fbd5389f59e3bc7fe3f32a5d5c1edb8eddd334497c6bdd376928b21
- MD5 0ee5ab10716e060698b512a1c7f06405
- SHA1 6b3f269187595db2f958ac5a8db23439ff7c6553
- SHA512 1fb1564267781cc5b4e637d910f48c6726e72d43dbee7dc10f64814e0262a5ce1a96e84074d91fa5f6f7326098218ca77368c89516740ab5a7ab8bd4e24b0a12
- TLSH
  T19CE01735D6684EB322B9AB6DFB968601E0528B9700A0692FB8BC74C90F33061604258E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13
- Target
  Release/Release/main.cpp.obj.dt.module.json.command
- Size 3KB
- SHA256 2dad0bbc4e8d921a37ca01f664a2a1c5ada2e028d1281381f28028a93dd3d37e
- MD5 ec823574a08ba9da5a74e1d8ce11a760
- SHA1 fff2550b09497cf050f47972964bd3e7532b6121
- SHA512 c6c54bf726eca56c7e036e97af39fc92ecf06ee4d1e76261c58c5e985a5918c9f3750028799f2357c1c57def831abe6d0ddd2496d3b108c47ca9b5d9bce4cc5c
- TLSH
  T1A471E91426FE5298F3F74F4979FA49275877F4669D39C39D80210B8E0922E26CD30B6B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral14
- Target
  Release/Release/main.obj
- Size 1.0MB
- SHA256 7397bc020052447c23df624bd3300a2978b735a4cb130b86d59dc134a0ffd4a3
- MD5 f6019bf3a1723477247b7613894f2d87
- SHA1 00063dd3a9d5fffdaab43193c2747995690faf26
- SHA512 e872345a1cf4d63d2955668ad9d13328368e816b86292eff43b4e19475f4fb29f962e8d5bdfe5535005a57ebfdf48fc0f8eb8f0232423a00747c5b0e5c7481c6
- SSDEEP 12288:dpk/IhBav0eozxrix1eQZpVlmQ/yH3DPtqBbrLPjm31an/TxGLX3aTFsZmlN0EB5:dpxhBav0eSriuQd0VHzITxzBiBYB
- TLSH
  T11225F96141B4C747E97A6E71E05A0B2E7B91C89AF910EB43823FC51F1CA83DE06E7176
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  Release/Release/x.iobj
- Size 301KB
- SHA256 b586083d623af0e2a0959c12f7b7109ea322b1166a65e0b14909569241694ab8
- MD5 141c3d501a2e511022f8150859166059
- SHA1 bb6ca5f3f0b5568f3a683e11bfc3b46c690dc39f
- SHA512 3da4343ac771080c7a66e628cf1c11e1b53850ef7f02dda6e626e56b43b7d4bf15719f859879ff89fe9d9105e08aedd906f5d1fa8f0bf2b33dd9f31d6d6026c9
- SSDEEP 6144:rn6Aq0PKjud7pn8HgX6p4XhnupMGsw0wB5Hnua8PwChF3p3+tPyuQGSu6+I:GA1PKAcgqzurw0wXnua8Pjj3+tPyuQGg
- TLSH
  T11464B612A6D98E22ED2663B4F2834D2DB3B5FC037B1F9343624BA1175DC73C86A5B491
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  Release/Release/x.ipdb
- Size 103KB
- SHA256 70f4b14b000d7dc71943c97e8f848ca51df1d18ecd8fc758e6f09b567a3860f9
- MD5 5af56c06002a376e5099a6ae185dc845
- SHA1 db0fbfcdd5a9e439df4b646aef2e0485229800d1
- SHA512 b44aa691f2ef7faa8fc00601493cb17341c678db132a849cae3e4ac50eb27c6724fe67f4369cb8fc29cae5555e0191c5499c5c605eb7f6ab666d02e4688d07ba
- SSDEEP 768:+1+J1fnhhRupsksG2/nQ8fzNrS57zrlmrX:j9nhOpsksxQ8fElWX
- TLSH
  T13CA30E6673C6CE33C419123148D7AF62B7B4E9421B279F0773B65A2E1DB27A1BE015C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  Release/Release/x.log
- Size 361B
- SHA256 1d35e8aa1af508d3835f49183faf3be5dd1e074e8aee48c1b30a4714a1c410d3
- MD5 e41dbfc6bce67b4e427b4af05f0946d8
- SHA1 911f8671a27832e627eed1d5907662b7816e3510
- SHA512 820480182d489342f42271f554992c9ae1bcf903e56888441027b02014ae6da6f71b28a6dfc9b557b5dc79418325dc43a60bf071d6e1a90986db19483125056b
- TLSH
  T107E0C0B8241E7D69A17B0968B2CE2CDEF135D0123B018314B38D4189B723C1C83A2C9E
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral18
- Target
  Release/Release/x.pdb
- Size 412KB
- SHA256 7ffa0add47ef9892d2eda78465cc5f019167d35769584f866f2af6bf0321e607
- MD5 d7452f70121f78bf5c7d216309afd006
- SHA1 e3e038dc5b31fdf03a13a504f39f9b59a51cb9bb
- SHA512 8699bdcdd1413827b768e6cb0af990e5bebe24e1cc17151b98924d05152748a4a5e1567fcd6ad096625c5afa1d379fa0f95dae7612f99f0fb3626fcfed60ba25
- SSDEEP 12288:vDrI6JM2ugtmEGEM5KH+Gm7TwQhx3aWolFmg+FXqU:vDrIRgAEGEM5KH+Gm3wQhx3a9lFmg+FX
- TLSH
  T1E594E662E9529E23D44E5339D00A1758231A5F4A93CE3BCF4186B1315FFF3A9AE3D681
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  Release/Release/x.recipe
- Size 303B
- SHA256 b0a242ec3b30b319107a4d6eaa34a4bc5887f34972a7d48e721099dd6822c7a5
- MD5 d78b4b583b748b8c159aa023ba7e31a5
- SHA1 e8aa8f358d4bb9ab4479e3b5bc744a317302f899
- SHA512 648fba4f2dbaaa0c1326c6260e34358436dd9d2d4ad74fe66ec2e9a5def70692675671e3b6c66325be174e1a70c3515b40faec096a8db05ca32b9945be4704fd
- TLSH
  T156E08CB65880F446A7B80121A22D5EAAE60AAE8305300C603194CD6B1E5300800838A7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20
- Target
  Release/Release/x.txt
- Size 62B
- SHA256 65548312b808d036760c896242d3a6c7a72c0e864a46fa578ced5e2e14469e6b
- MD5 0d389983ebd1c0009969105456e494fa
- SHA1 09b44e7f6dbb75ec90d80166a0a11e6d154fed2a
- SHA512 62ab3a9f66116ca0856d334d50d9a43d58152a6f24e02445cd61119fe4a37da1e91764adba225075a0ecdc9cf3e272788203ebdd00538a9c29a8ae8a5f01fc8c
- TLSH
  T173A002F671119D0F43BE18229B1D3DCA915159091521951547B55524B11141D41DBC43
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral21

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21