598f89ba17b523e2b1fdb88c5c14c4813ef9cc56b09c06a7c7b1b25add0eb351

Sharing

Copy URL Twitter E-mail

General

Target
598f89ba17b523e2b1fdb88c5c14c4813ef9cc56b09c06a7c7b1b25add0eb351
Size 1013KB
Sample260919-hrjjaacf28
SHA256 598f89ba17b523e2b1fdb88c5c14c4813ef9cc56b09c06a7c7b1b25add0eb351
MD5 4f14bcec027e3502fd886d55eced1954
SHA1 49f96393c73d8cdf519a9ccf1554f6e3da36b686
SHA512 f1d74c582670d88e876e4e01920a8ef4a059ea401a6bcae849f72135b9cdee4aa8effc4af9fd19d608e220911e49b3f1a972c626dcf7a012b54af516ad355666
SSDEEP 24576:06eIgs7jq9o/oYU8M9kA7+tEzUs72DoLDzk/Mvw4JCRG7Q:0runq9o/oP8WkA7+teUUzk/gJ4Gk
TLSH
T16B2533F9C61C3DC2C07A21FB28A053C36C57BF84902A537995625390778FE7BD29B1A6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  DeskMadeline.dll
- Size 442KB
- SHA256 0acad66a877ea6cb4698b010c303dc3eb91b2b50540d74566b1acef6a0b29a22
- MD5 1472d90caa00b65dac8731761ab2af15
- SHA1 129c58c78b0c5747487c3c58779099b90ee784a3
- SHA512 b133e939071b893bc8956b24270150c8ca65e879bca3787b16606ead96f355f99b6e8850442dd92e6efdce5d82efa9269c166d87a0cfe621943bc061a3a72b6d
- SSDEEP 12288:cwykMr8WgeP/dDoUBpVCFH4QsUypTKwuY2+72Ft1WEsBzbZIK:cppVCFH4QsUypTKwuYMoX1
- TLSH
  T14CA46D2533E41B79E67F0BB9E5B109A5A772B903E26EDB8C8CE590EC0572F50D804763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  DeskMadeline.exe
- Size 158KB
- SHA256 19c4dddd886b436d3f53e5fc8ecb192c211b12ad099539f992831769a1dab6f8
- MD5 249b45cb927d33aef0a1f5ec1408a8da
- SHA1 143637125530f64648b59cb03e38115b6affce04
- SHA512 94e91e44dc9561e369481e9d93d64b7b2642b7f5f86a2ed77229881bd72418fba412ccf5e01c1de4e692842fb8620249c81f518afea407cfe50cc6d7de9a72f4
- SSDEEP 3072:DVDxk88wN1nLVu7dL1Z9QnlX9rE38wm1VzaAT5Ru:RHRu7F1nQnZ88Ua
- TLSH
  T1DEF33B13A6A851BEE1B3D678C9924941FB7278594B71A7CF03504EBA0F77BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Downloads MZ/PE file
behavioral3 behavioral4
- Target
  SharpGen.Runtime.COM.dll
- Size 165KB
- SHA256 35282958014c210bfde28399c9fa3841b6d51f81ff1da23ad0edad985dfa5b0c
- MD5 299a84df282ae589cefa4e57b763e92a
- SHA1 de503add52dd0b2a333f2f0f42bf9cfa00788eb1
- SHA512 f7da03fcd1f5824600ea6da2efcf47550c955e50dc8235b6d3a75122bef5cf46339ea14050ed6c0ffd8eb0921e7467599f3e4053e93aaf15abedf3c85f7faccc
- SSDEEP 3072:f2IsQblPoGYsM16XSAIr214b0p2nIrm7yHz/aIdWHuA37p8oBA:fBdYsM1qSAEgkIq+H/dWOQz
- TLSH
  T101F36BE3FA0416B3ED0E8BBBAD92D1134AF092043D160B9E7984644B29FF6C465367D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  SharpGen.Runtime.dll
- Size 78KB
- SHA256 0dc12ab829852555ccc9d8193e4422cd4ca389741de0a54a189de8a1c9b6bf4a
- MD5 ea1fa5a866f551482cbc20263877a51e
- SHA1 770247eafcb3bc38bd66bec74add2d87bbcfa8bb
- SHA512 7e3b5baba529c1e104c30a622c4e23cccce5bb3a06a2b29ee51a1790e0af0e9bb75db302b9434c53feee4692d4761db390d269ff52290f80a4a843fecb64cd83
- SSDEEP 1536:G8Mbq0trigKyIg9Fs0936+xcA4SvJhurNpEjp9MIRp:xe9zIhMq+xcZSv7urNpW97R
- TLSH
  T144736D1927D89A2AEBDD4BB9E0F418568730F20671B7F32B654AA4F9580739C2D013F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Vortice.DXGI.dll
- Size 89KB
- SHA256 6e381eaab77257ee63c20a654a2ac51875bd38f24c5a7d44dd2e4b8e122e8623
- MD5 628005b2a18c88932bc3ec9421d530d8
- SHA1 ae5585683968585b982b97e096c316d8e5ff0df2
- SHA512 576dcb3f2e470c6bb8ef42a1db70e586e6eff97eb94c19113fd4960a462f8dabf161bd0c2b141bd283b1e8473a2a718ef121c10ab3665dc8cb8e957df764fe1e
- SSDEEP 1536:qq7h10q8ZTrqu8iMQIB/9QuolmqMsMg1y7eI3:qq7jivqu8/BiaqdxM
- TLSH
  T15F930A224A899786EACF5B3AF9B28185C3F0D3059177F35BB48460E12D933D4DA27673
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Vortice.Direct2D1.dll
- Size 522KB
- SHA256 2aaff537d7e5db301ea8336685af8283640a8bea4bc63adfa1290af1fdd8e759
- MD5 f9e9f5b37529f4c015c947560b7c0d5a
- SHA1 08d082a07aaa62631354c6d5ebd5ec9a44e9d520
- SHA512 25b522947eb6821b5ecc06d57925aae38c25f0c602a19d79a24ae5690b8ce167a514c56ac7e36256d33b19cb245faadfb0b726ab05aa2db4ede20e4597d8ee2e
- SSDEEP 6144:3QBNdpAaC7o3TYIMwy8keFNRlIBAReigEyPOZ4g8qKhBOTr766YDznGVI4kJYjii:3EdeRlwLpihDEbP8qKhB+2GVI8zAC
- TLSH
  T1B9B418456BE4CE8FC98F72B5E092C559A1F0C7149673B30B80BBD2791CC23E65F961A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Vortice.Direct3D11.dll
- Size 344KB
- SHA256 ead89d0f9c475527abcb373c10b1d04c2bfa727070f126105430040b525ae2bc
- MD5 1cd669dfaa756b911335e302a46f6d0d
- SHA1 02e4abc7b459307dede3d9348c89165562954721
- SHA512 3c2c5eac547def04be4d89de90b6fc2f6d56dd3ad270f9f7d49833bf67c59b5fe990f94d7a1569ee44dc2a5184b7584280b741e27d4aeecbe4d523b2842c609f
- SSDEEP 6144:TQHD8orssEZaZhiOvtnEcZPIW3+x67DhB1LdU3nFU01U:MGOBf0k8+K
- TLSH
  T16B744B02AA9DE623CA4F52BDF0E2980743F0D818565BA74714DCC6391FE37E4AD1A7D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Vortice.DirectComposition.dll
- Size 61KB
- SHA256 6448f03c54a5c064ab3c18e49109a1fdc9b34707b80ae1925a5ff35f37e75ec4
- MD5 70ac58bf92486e4a3202d2010ef5482b
- SHA1 adea592c610adb823ba77c83ed7c79bb242b86be
- SHA512 0d6b156d6ffdd0640694cd7512936a3177b54369c5355fb411d6f6f18ec29ca812d99302eb1310d26c4e936d3d1e5112368846ed722e3bddc60de998b70d9ec3
- SSDEEP 768:HhuHsok2zZb7LTcPfktEcKc72fpPsa40oMVht:oMW5mkZKc7epPsa4g
- TLSH
  T12A5384562786C713DB9D0DB4E9A55708F7B4D215EE22638EC6C408FC66833EE0B526B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Vortice.DirectX.dll
- Size 356KB
- SHA256 100b3a02ea5fd5bb8db39c24dd58dead5669fa5a46d1ebcd61d4a9d82f812c12
- MD5 8eadfe86b2479290631a0d274fe78460
- SHA1 3bc07e1087cc2d0d90023682f6252e4cc0181c26
- SHA512 79ec44fa156ed4649d3d91fa643a6ed8319c242cce4bd58976da3e7e954937a634aaa627b8ba89ff8110347ffa6237ef0eabb3e92e4c518775de1f33b9e6a56c
- SSDEEP 6144:PqTB3u/p1fYOUSwis+iiXyg4sUhMdlSUB0JFJUzqA48diD:P2F6pB+Kyg4sJRQFJUWA48y
- TLSH
  T1AC74381BBF040423EC7F3E7B5DA8490BA6B720049451589D3E4F93AC54CA698B9B73DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Vortice.Mathematics.dll
- Size 121KB
- SHA256 944622612d0c9f658bb92ff29036e5a9b12db9daabddae68e5fd56655a72f446
- MD5 04ceb0fc908dbf005e694437f069bfa4
- SHA1 b18b95e6683342860300c33c9d7f59dd70e0479d
- SHA512 a997af0ae2383606986ec8e20e3edbe99f57578bf71ef4a82757be5230dd300e459f7bb8a2b13a4f9ff52518e71303da06796ddaa197f9ce14c551cdce5fd569
- SSDEEP 1536:Vuj/rdacgcCw84rERKRf4F/ECRq/30Jp9aHOgXkzRi:Vuj/rdxgbK+KRf4iCRqsJKFR
- TLSH
  T15FC3F8152B9D9B3BC6AF4ABEF4940C25D334E1A7A733F3E7068940F85483785A8096C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20