db8373433e1307993a0535de02f5c84e365b9c35a8e12c0c72f0d627180e64cc

General

Target
ransomware_app.zip
Size 5KB
Sample260916-27n89afd73
SHA256 db8373433e1307993a0535de02f5c84e365b9c35a8e12c0c72f0d627180e64cc
MD5 b1ae31f89a0c6ab8903eabff3d270a30
SHA1 98f924cbcbf79ed7d1c4c77c88efe4bda4a89f22
SHA512 dce20426f97b2a77b330d3212dbc5adf8bc51fb77d92e35856966e5eea7f1af16cb9110866c36774ba7b62595f6c3ac7854ee58219dbe688fba27afb466975e2
SSDEEP 96:tucHy1G8RmfvK+d91AoxoLS/XYt13ZCVYO8UuuMYW683+SSM5:tJHy1G8Ryp/HxoL2ImfgubW6mhSM5
TLSH
T142C18C845EE4EBB3EB28033F6C614943240301DDB9F7C3698450D65AABA709B9B3F54E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  RUN_DOUBLECLICK.bat
- Size 433B
- SHA256 ce86254ea37a69a435df717c6462b2470b81b1940ec44e8b7210ca48d4e95301
- MD5 f14fce53909a04768aac6fb0eec22759
- SHA1 d05d516ce84f2e21ac547f6feba8ad4aed09279d
- SHA512 78b5cd79a00a39095b6a52f2a40e432880cad4d09f2045cea7b2002ba1dbc91c2c2db02aadbbef3b9cc3e0041e40e5ea8fde5f62b035efb196fba15027a81a8f
- TLSH
  T140E05C8F3220738B721ACF4C580722C4311FF05789DD5E1E9D1EA179288F2B639CC141
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1
- Target
  RansomwareApp.exe
- Size 4KB
- SHA256 9dd3e0f8422e8c33909854a2e820c9c958dd874c20ff596c587d5c9df71316cc
- MD5 60442808b076bcd24e36f7c0ddfbea48
- SHA1 3955acadea8c95c91c411e7aa1b1728a7bb5b1ec
- SHA512 5089cb9d1af4de6ef219b12f2a6076685d6d625a043360bf542393434d4b53420406d2c9c50577986b8761f4219c7f53055bebeee3c6c02fc95edb8ba0c4356b
- SSDEEP 48:6fTfrVui3tsuAJRLxo7jhIBFc6bs7V6jCsXVYOulCcLgDqXSfbNtm:QrVui3tsud79M5HjCsgUcLg9zNt
- TLSH
  T1FD916601E7E8463BE0FB4B306EF3631263B9FB514977875E2CD842196D2666088627F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral2
- Target
  payload_v2.py
- Size 7KB
- SHA256 ba137b3b87b8b0be50c5e0f26fa60df9e3277701edde11b8fa443e2f66b125c6
- MD5 362da3a30e0192b20596eed2143c65e3
- SHA1 4150a651871237cb75b2d59ade3ca8d60f74f68a
- SHA512 dd66a79217ff8fb6d22091ce1dec2328f799172003492fe627b9bb6c60162eeac8bbbfab86321225c98750bed797c99dab11e284c09d986c2b22eff22cb88003
- SSDEEP 192:ZuKjPJlfJ7Qyql3YvzzoEfRhKTX/aPnZ4Ddp28W02s:ZuKDTRLjKePnGB20x
- TLSH
  T109F1A511DC1B28A1D2F2EA9C9426C4D1F2670313E9228DA7F6ECC7003F7A179D26897D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3