7278ff7a9e905fb46b62f52a3835fcd9c809a923a741d246aa8b5d245988dfad

Resubmissions

19/09/2026, 10:25

260919-mf68esy1hy4

19/09/2026, 10:19

260919-mcl33seb293

Sharing

Copy URL Twitter E-mail

General

Target
fc050b436c44af7a6ac959b4dc1e0cc5.zip
Size 2.8MB
Sample260919-mcl33seb29
SHA256 7278ff7a9e905fb46b62f52a3835fcd9c809a923a741d246aa8b5d245988dfad
MD5 4e2a1a095309ee1704d628851aa64958
SHA1 9e9ca917ef8f5cc58937434572064f6760d1ff83
SHA512 c00306bbdc60ebe59b3c892ae579dc553697b9db6589fcd45e6d0a07787a15862f9b84d666d86ed084b823501a5e4f545d7538a851ad2a963485964315dba7e3
SSDEEP 49152:t+VgcMjcg4EO2YPUYqWNVc4U5JjA0g1KLSnjVyL6jd+k6BhZuMktdozjNSJ1d:MVgcxlrqcVc4U5VA0ZLSnZU6jZkbzkTX
TLSH
T123D53344E7B1A49BC147FAB480A87FBFB044193D339187AD679A7F4117426C4AB2E21F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery ransomware

Malware Config

Targets

- Target
  coinst.dll
- Size 64KB
- SHA256 2761685da8225d921d931593cf2f0176922ae5067c66405599fdeb5196fcc267
- MD5 6f70e4892bf39ca40f4e8722c9ab9b3a
- SHA1 70ab825855d3ec8a755c2e57893f9c81997565e4
- SHA512 84d4543cece3d79786ac47100ed6829a9794854f1f476149a1ec6b130ce5a782c30536dc5766a8b7cba884317f13f3433ae10b24e5058c345f30651bce02ec66
- SSDEEP 768:bGGcWehIoXJ39WTWoIYP8yGgtJ7HQXylSIa5N9iYlmDDl4Kp/sIK:GJmTWoMgtJTQXZ1sl4Kp/
- TLSH
  T174539F11B6A2C2F7C79902B129B24F3B977DBD110BF148439F65DAEC1D715A0E23A287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1
- Target
  coinst.exe
- Size 148KB
- SHA256 0d6315f2b49d9f669f834ceb7260d3e881528b05fc70aa83444a85d0d8ee68e2
- MD5 36089584fc093a8512f427733a798c6c
- SHA1 3060acb62b9842555e08323b6f89ff062e350025
- SHA512 ff276f2a9891a36eff73a55dbef0e73e05de609e3a8e7f06df674e6b75fed820f7a8d995dc031ebdab2261a4cd3e44954a20cb2556798619b44826486dbdd80c
- SSDEEP 3072:/RckF/viMQJpfXcujOR+3x5kvn8Uv5LU1UcvlebG:/qk1RcUujORKbqBb
- TLSH
  T173E38D2239D6CCF3C26502708D644F7EB3BAE8340E724587B348974D9E769E5C92F266
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  itdrv.dll
- Size 988KB
- SHA256 59b1a2acb1cb7721a99b8f07a5bbecb195348045cc52fafeaa3a34f6c970d673
- MD5 6ceada3617db385ea3169e419dfcae53
- SHA1 6449982d6b574516f79938246f9686617550b771
- SHA512 da089510bb83dde7e4787ddf3bb38344622985d307a05feae1e73c5b8dd0552bb044c3479c81c3ba289b09adac4c88ef79a893a572fdffa5156a3a4e2ebff631
- SSDEEP 12288:wO4Gltgri/HGFDXlj6/ujVSiRIbnRhh3LBa+6cToOGE2z4UO7ksDWR2:wO4GlCG/mNx6Gjtezh3LucTovt4UO/s
- TLSH
  T1EE258D23EBC07971D8A72570D22B363491BBF416C33966D7BB0D4AD9A831BD29E70346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  itdrvbg.chm
- Size 34KB
- SHA256 1098010f3cb3ab5df734a5efa41633bcefcb37a3b2ede24b347f089a8fcbcc3e
- MD5 a7e7121d85ffba2cdb427139cacaec3e
- SHA1 0f349cbb7d637baaafff1c41758ff005650227ec
- SHA512 e4c76a951b6d17eeb778ddaf5862e8fba2c9bade09e7fa0d113699322e723deafbae34c6aa1c547ef68229462f958fa98130fe077ea9f2af5c27136175a34366
- SSDEEP 768:JzKu9hgj3IsuYWOdtrTlWOdDqObt1JDcb3yYHC:JzKu9hkIBUthOObLe3U
- TLSH
  T1F2F2D08E6D305130D4E84F333ED36BE46A18AD80D7F6B1243F0EA27584A6B29C5D49F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  itdrvbp.chm
- Size 34KB
- SHA256 e55b0115ad2a6564c9bb8a0f92c01eb3aa728b6ca3dfe1700665b259af5d0af6
- MD5 f47b52420b03df0614ced7ca948c33d9
- SHA1 8c39c565d1400c69eb68c5c7475e3857d2c70657
- SHA512 420096e08317780252a46e5667fcd4fcc0fd4f8fabf446552c07c8158c4df035600a5cd4b12aa52e79ee2de6d21d02a9e9de4a2ed1956006a665adf4bdf583e6
- SSDEEP 768:X02U4EnZVs8gGA605rl7ZII8Z++DuMZUqXq12:X0CEHs8HIqpZUqXq12
- TLSH
  T1C5F2E04E1E305066D8A44F3A79DBA7E63101CCC0FED7F543262E9734BA9A7085B705B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  itdrvcz.chm
- Size 35KB
- SHA256 5998b7a592d2614d624a1b4ab066b294cebbe83d2d86ee68fd670140acba115d
- MD5 03964a10a132c088d023a8fcb71340c4
- SHA1 ff34b767eb7cab66c13989f9d585ce48ae3cbdef
- SHA512 fd2a0200a436a2dda1b8e23e81bae921fad83a3e2e26ba52e1b485d3fbc3c7a6906c014d9c2dc1e878977a3e51a63992c49cc772d8bfcb019eb32aca6258f2d7
- SSDEEP 768:2nxKMHnhZ9b2aYU9sKMFrwO51KLDQbhplSKBg2NnkA15oS:2x1H/9b2ktM+ObmEb9I2NnkzS
- TLSH
  T18DF2D0482E044335FB615F376EC3AF89A6369841F109B5861C7EB73840E3B19B6582B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  itdrvdu.dll
- Size 400KB
- SHA256 09eba25afaa70d8794590f8b8ae431fa2f7ef6c113b7dc69493043043cb27f0d
- MD5 b3b11c9bf4cbd959243c59024539f82b
- SHA1 08639acc79d341d14ab33fb73a6441c36b0c9c07
- SHA512 3237f8496504eb54c168e670851e6b6e8edc2bc3cb30e893d50f7221141769803b30dfc070219337b4d20fd281f14db59bec91526b34da06eff338371bb2f397
- SSDEEP 3072:YfjubBQFZEhn4JdX66O8cu3fknGLs3a6BRa6Faa6Ca6YBxAkfnVI8fVlug+KI67L:a9FZEh2XlOg7sRsBGkf/9lugpr
- TLSH
  T19094FA11D7D17A25E5773A30D16B3B30C26AF43AE726D38FB10E85D998326D29E60336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  itdrven.chm
- Size 32KB
- SHA256 d19ab054af55ad8342bb62dd05df9e673fad49eb74f73bfb3001d6fa46f8adb6
- MD5 7124fff9933a90214e8596f275d50cb8
- SHA1 0df42e617cc628b35b87df5af77628a9930985f5
- SHA512 d2c10de595407bff8f3d2fcb50683920c588d32e412c14d24b76a187fc27fa2c4d2ddb4b7054ac8163a89d9e9431f171813f1e184eed8f8351d3e26009b6768f
- SSDEEP 768:zw/tWXmpgudCSzymLee/6/749rQNez5D2iwE:zytWXmUuK09roW5D2iwE
- TLSH
  T198E2D18B3E75C336D411AF735EC3A3D56794CA00A7E5F6022E0C5239859C36C5B746BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  itdrvex.exe
- Size 52KB
- SHA256 d7332c375be154b8e4ea13ba9326ff03bcc7eb30c3e0b0ba62886ad18e9cf867
- MD5 177bfcaec6ee885b8544184d0e5aad9f
- SHA1 cd3cd4cac5f884417a9ed0c798e4063e476f95e5
- SHA512 baa6254f6688148ee91a0a94baf993ee3cdb579edab3d6557bf23ff7a617a21ee3dcb2dc1de52bb207421fb0f039dc91dad3965b29a54190e02dfe4d5ccb8dfd
- SSDEEP 768:Wh38olTHNzrhhJaklEv1bHnAIYtXUE1DiAjuxSNeZnwltkAa:WhM65WbgIqXdDZKSMiltM
- TLSH
  T16133180A7C938033E0024CB58BD586C15FFF5C1336E3A67FEF9405595AE229C59AAAF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  itdrvfn.chm
- Size 35KB
- SHA256 e2b16adc29f4c78181c0c0c2c98f49f32f2a43a63de3b5d62a2802245a7ecd17
- MD5 ae67c440c0476582a5b0eb01ff7efd33
- SHA1 2b90c5bd72e07601bae7db4c6e30eb799a2589fc
- SHA512 e15db91397f0a7e72c5b0a15199faa8540a6a7ba191ece71f3f0ab3f0357c6b16121ce213f4d82537368cd6f8318d1fe8bd51f091737bb0796fd8ffddc9730e7
- SSDEEP 768:sqEmsuN24EWPojviikjh00rC0J3u1YAnMG8wuivSm1Krg:sqT24JQOikj1+05bAnMG8PivKrg
- TLSH
  T173F2D0BE9CB05569C4555F337DEBBBEB14844A25DED0B191B40E723923E03EC11A53B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  itdrvhb.chm
- Size 33KB
- SHA256 b974a0712187c7f6416e3ca5a7c8dc4ca3ac159b39d12f25ab00274c6368d6ac
- MD5 18abf11711a8ce2b8594247289b03909
- SHA1 b5e52010d5856f079caed78b00351ab824d24285
- SHA512 95ec4f768e04ca51f93bbc423f73e3b5bd25fc020f1de4c18527a66ee9b3483c615e5128188b8b23ee1a8b7ea68d5cbbb72ad9901d58734cf47fb665f941adb8
- SSDEEP 768:QJAr1s5frYJVmqPmtasc7YVqS2fp18lvuR/R:QJYWYOqPpsOYVqXfh
- TLSH
  T141E2D06DEC74EB76E0120F77A9FB1399470484495B6AB142191DF4B9D0CEB2335A1CF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  itdrvhu.chm
- Size 36KB
- SHA256 1df23b5f76c55fafbcc86dd4707a2744144d3f614e2400ebed4cb1157447fd9b
- MD5 0a5cc89ddc125cc6d3e18539438827d5
- SHA1 638070ace6c036c8bab63e9bbb51a220fe1332fa
- SHA512 fd0c90edc20ed23a52970f2c1668386769851e03c46bed56331fc5971fd61059b08d01c4c4de0d25223a0097f821116c23744be619c9ed8326ef0f0e32471b5f
- SSDEEP 768:GD8wdC809Tpgesag3GLIN/vZj7YfIfnOM4:GQwZ0/gesag3G8NJjMAvO3
- TLSH
  T12CF2D04E5E204BA4C8112B3B94DB37D6675AB823EF12B00D070EDA7D71F531CA5E46B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  itdrvlf.dll
- Size 68KB
- SHA256 997e0fdb3f80859c0c08c9424a55d1d236994408ce130fc43f9394450604fbad
- MD5 b4fe97c34c05384048ad63b822a32ca1
- SHA1 5b4ec39ff47ceefa6a698e89802c2e44aa808175
- SHA512 bcac4a4d6454821acfb4717210922f1a7800be635c368889050115bf5e09f04d2881954af50f420de57d5a82d450c747785ab6e828e7755e7b986de3a956f295
- SSDEEP 768:KNXUncKg2YO82HFTHz6YjnXU1HNFLEoWGa28DJ3B+E8g9t/:Kan/1YerXURrJa2wpcEjt
- TLSH
  T1A5632A093853C0B3F0054839D2C587D21FFE6D137BEBA46FFFA6064949D1199A1AAAF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  itdrvm.dll
- Size 304KB
- SHA256 dce6930c3e9a98a0834cda7654d9c1e2860fac462404f0104c96b21034f4b1a8
- MD5 33aa93c2a746d48bc552e48a52f2e00e
- SHA1 b4a9fe72c682ea617b0f7bdc4cdf0133d4d13a78
- SHA512 a241549dde849673cbc207f4d2499f10d4c86eaea56cb845b268c5aab9b12a94a5142bb19d21d6e3eabc415cd07210c3fcb52708345f7688a0a57793a767fb1a
- SSDEEP 6144:4xWr4HKvALXldPpXmAwLyTHzCxNrYSedzC1dtm:zA5NNiOTT
- TLSH
  T11964B03D61828136D3FB0F36743E8E5F76BBAC018BA955AEEAD43B6859F00444EF4152
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14
- Target
  itdrvo.dll
- Size 212KB
- SHA256 5bc557ce7676879a3bd967848638c38b2a4a4a196ede017d643fc0e84fb2755e
- MD5 41a92171cf287cd614046f6819868b84
- SHA1 29528d1ebf1c3bd1e84ccc00053633ce56a4b3c7
- SHA512 90bff775025864c84bcb2d70a6973dd819cc142b26ab2d8830e872ca37aa0e7b0a2338afe1469c0282cb9cfb244194de3f119e4daf75875966e8daab6df8a9d4
- SSDEEP 3072:I/SbQr8N/+nF8yqLBYMLLdun31R1aNLRtFdbAttc3T3:2LYNsNqLBhLL031RaLZd8c
- TLSH
  T1E9246C1132C2C476E2BF133A49A7972867BABC519FB6D24F7F907E8DAE301558E24311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15
- Target
  itdrvpc.dll
- Size 19KB
- SHA256 60f9c924a011b9dd8e870aeebc3cdc7cb8e07fab0f28448fbf4f99f42e408251
- MD5 dd0da53d125f6bbfceabbafebd70dad1
- SHA1 571e087a5c72545c5b8f6a7a8465b6f8a1060188
- SHA512 6d961975c6b77670e4f1a8e8f100693b98bbd7be5057f509e09354d25fdc15b504da0fd1b170b8cad7782284647a77b633f4771344e01ffbe166bfd79aabc1f2
- SSDEEP 384:b1sOVnZDpTBPRceEyY6OJImUsnzx6v950YODHWO89bMI8xNMJoLk0:buSn3BCDyY6G3nsv4bDWOkMIkMJOk0
- TLSH
  T15B9208D3FAA58452D97696B068642D0533B25E6000359DF74F041F4F29F8993FBBAA33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16
- Target
  itdrvpo.chm
- Size 36KB
- SHA256 e95e7548c0f1f82ab2036bffbe3cc60856153ed3f7802bfdb1b00c9107d5d4a7
- MD5 af89c46ab25aa08db9d94518f4245e72
- SHA1 7f6a8359f341b23b694a7b4e1d31334f3887d167
- SHA512 7185d604a4132ce366a8e3e8925c9136c97491d5ea81cce3c6509901f16ed9297c30ac2f059361d10905c20e60b8e86ddbb41dc47e4505d7b2d1eadb1a837fac
- SSDEEP 768:244wUrlcx1WA3mVizstnPWWMCejdicz/8kvQLhQuIhf:24f6iWA3mVizsBPWxCejdCB1sf
- TLSH
  T13CF2D04EBF3192B6DDE14FB77DE73509A2289C413BAE709A105C707412F57299321B71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  itdrvpp.dll
- Size 14KB
- SHA256 d4d652958d7489eb715035d36b1e4c3c0624c1d3bb21e061fb84829560e4d0bf
- MD5 e30b7e95b69f3516b4d4c426813b9233
- SHA1 a74b8ef529930a8cc352849b6fe342cd98086fcf
- SHA512 61a505b1b8aba6d0a547e17fa5c0145290d006c0dd026b3296fee4fd00a4da5eeb4eeb34d14b181065d065667867753d63318e00581c3795c89c73998718dafd
- SSDEEP 384:gzUmuvPOq2JhHKkxek8kYeYX11ysMBWg+KY8Y:Jmu30x1YtbQ68Y
- TLSH
  T1F862847E9169C158DF74A8DD76A176D0C2B351A233A084FF3D0ECB544B825B6EFA4308
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  itdrvro.chm
- Size 34KB
- SHA256 cedb540abe52e8cc8a0431bd2271f0b0f4f932d19d000b04dc30d03477a49fee
- MD5 1c71432a1c68701fedec2be494c81532
- SHA1 89272408f5d151f9449dee9e63f51cac77fc6430
- SHA512 582bb6ba6d5b0e666226ffd990eb668c1af9d13cca0bffa841b468f20ae5aeda7885afba5160d920833120e1a40d7dfe7ad9fe7d46eb9a32cc1a6c1e35f1c493
- SSDEEP 768:HeqZAspmoHYVRH+vHatYBoG0wCTFE5mdBjMA:HeqrpmN+Syx0S5oBAA
- TLSH
  T16CF2D08C2D2183B9D9441F779ACF3A4F9921AD248DC3328D183E943D66CABCD9230E35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  itdrvru.chm
- Size 35KB
- SHA256 f8cf1e471ad24a40ebd425c1e31929afd043d393b059cd8cfa3db061c6601df8
- MD5 48e926924d76a695dd6edc924d546c25
- SHA1 4b9b8f120bedb1ed0c5ca4a2f748963bcd25d1c3
- SHA512 902d884ac37dc7b751db9db14c0823e8b7b70ff0d1eb1360f52084d077b0b692374c6e97fc36bfa6b41abf4b51a63d47cf8f09e9a8f76bdd20c1fa083a3f4267
- SSDEEP 768:dKyfEk4anbRqYRPK1aertbVtKX41cJKqab8eZxGu:dKyEvanbRqYRPK8exQ48emu
- TLSH
  T1C2F2E159DE20A6B4E5DFCF335ED73B801210A90166A3B2093C5CA476C1D635C16EB7FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  itdrvsc.dll
- Size 520KB
- SHA256 8b1451fccd09ffc7b7882c0509edc0b183bcdbab3826040ed12305252301bfc9
- MD5 5abc8d4eee59f4b3b45f7476b526e2b2
- SHA1 45fa5130fa69fb21482fbbc045afafd7dab7cfc2
- SHA512 51ce4cd8c263fe2bc14e2a8cde064c2ac2672c1d4857f49a4c9e44ad503b5fc8f5f400683ad94b9a8da1e59a138db7e0a5017428b8acd5da3ad599b91b3ce9de
- SSDEEP 6144:fq9DSNNWyhYjUgK2l5Ol3VxYcezA8MtQzLO68iy9Pfwu88oretwWbYgI49OREzL:CcqGaxl5ObuzA9QzLOlx4/bx4vF
- TLSH
  T159B4CFA0D5D640F4EF1F1CF4194B34768A7A6FA70A16B1A3EB1CF9938C72A41C936607
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21
- Target
  itdrvsf.dll
- Size 524KB
- SHA256 fa09c18a0059a5ae5fefbba0795a458ce11072aec62ff4030987ac4721389dd4
- MD5 15c688ed90f53d549668b122a7cf7e39
- SHA1 e8b7ccc6475171a6b1690c7bb7d00608ac889d69
- SHA512 74ca66dbdf8ec87cbffcf50f4a91f213655e4b95090851b9b44844ed0bdacd81f7621ba4838f98beeabcb783ebd27848c739e157fd7674097e2a10aca6a52c7a
- SSDEEP 3072:tGb+c/+WWRQGvZpg1iI1pVtNPsUifEbRbUSZavO+u8lyoRwN:tG9/+WWRFkbz96ZGD
- TLSH
  T184B418F3F8B9A9A3F72B9438602AF238829954DC9314C0DBB055FA2555337C0297DB5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral22
- Target
  itdrvsp.chm
- Size 35KB
- SHA256 6281e96f89f895e5f5fb46dc91cce88195c16d3697f9c3bd0f9c74002146a02c
- MD5 a54215501d879eed7e214ab8d472b4f0
- SHA1 1bec3df83656faa0e581b4b2d63fde182de93a47
- SHA512 ee8311147cf97fd954b909ff310ac5147e9c705d2d6a5f61b70a357a48f4cc01a64f808b4a7a6abefca775632026d0aef02dd94bdb27637c9e0fcbe7a622d399
- SSDEEP 768:4MMFPa4pO0XzdJTGrLgNSCYEDEvpoY8u1y89Z3qRV4R:4MMFRpOgTGrLgYCYRpoY8u139dqz4R
- TLSH
  T178F2D03F8D164364C0B90F3FAACB1BAEA4B095028DDCB515711DFC30A96E3AD16266B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  itdrvtk.chm
- Size 34KB
- SHA256 ab9bd61948aff8c4433d1c9c49685eaf6359e5dcf61e54ebcdee4ab5ad639175
- MD5 a3dc8e90e5059bd88d003ec38b6a245b
- SHA1 c815297bf43d6deea90bc05f3bbf034e9b91a297
- SHA512 a051ae176aefe5e344276d4f23348d7df0e41b3787a97651e4e85d004c7d0da40bd1f5e1379bfdaf05cd3e69c22dce2b49fc04679b89dfaa10ba3c2c1042af4f
- SSDEEP 768:4atkXwyCebNTXDlBDnz0N107bybF2SUJ95lG1fPew78Ri:4atuwHe5TJBD410AFn095lGf7z
- TLSH
  T175F2CF5FAE10A238E8956F371DD32B6F9C168C1113E97D56357DBD3A54E6B0E2008AF0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  itdrvu.dll
- Size 944KB
- SHA256 be0d62bb3d5b00340f5a9dbae9d41336499d5302594ec951b6abe1545beac125
- MD5 58030bf0770d7e2db15da79fb7a08214
- SHA1 a09ea92638ca2cee1f35751a60435b8818660323
- SHA512 e662d887d3c5a8a9232bab919708ad4547660bf6a2712b132cdb7d0a126e9233803862b8b6b3d32ff62b036d12900a913d0c40f2113ad549d5d49454a9b17484
- SSDEEP 12288:Missm3yt0ZIqb8p4OUR9CA2nrbyhbmQf/9T798ctlC:Mlsm3yyZIqb8Cr26/nZJg
- TLSH
  T1D1256B01BFD9C139F27E163614B6571B1A7A7D915734CACB6A147EAF2C30AC25E38322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  itdrvu2.dll
- Size 1.2MB
- SHA256 845827e354d3bc3b3a75e21f732bc0089b1bdb4a22de733d005e30178cbb4767
- MD5 c9e38e55ebf83d867e67007477090c77
- SHA1 257f74437fa0caf5622ea1522ae0b78cb066e3a7
- SHA512 3693e70268a2cd0cc61c4491d136ea494a31ca1725a782d6a90d30e04e7b128064c3f7c36a7adbcd3c9fd91674de2cd816107099b8eb2e79bd2810fe8989d9e5
- SSDEEP 24576:HcuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuBuuuuuuuuuuuuuuuuuuuuuuuuuub:8uuuuuuuuuuuuuuuuuuuuuuuuuuuuuuy
- TLSH
  T1C255D5D1B100D990F53E8631E5399EF816013DBCE6A12AAF78C47F2E3AB3252751791B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26
- Target
  itdrvum.dll
- Size 1008KB
- SHA256 2b70754bd51130bd6534f87fd54088c535479ba250b569679f010bf9b5af8b36
- MD5 7c60d451d2b96a99f1ebcbe90a4167d0
- SHA1 6e59bf4b7e6e49fb23791abce44fb30e93568a73
- SHA512 fe1b2f51cd8e6afc66cfcef98f36d46534108e5dc5522285f8a1abfc83a214ffddee6665317267bca18441e3a60682e022e46623974303852cec616515ee3bb7
- SSDEEP 24576:dJr8MD8SbunKPIdn42KDmbszWfFWhZkdg1DSD:pDPbunKgdn4LDONdg
- TLSH
  T123258DA01647A2EED4424A7CCDFB7376C7BAA425C73582DFFB10669864113921DFA30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27
- Target
  sxp3ml3.dll
- Size 23KB
- SHA256 de35e91e8d4e8e46673a1ea2b4bb614bff678ce4d9d5b76f065aa7ad5a8bb236
- MD5 c45a0a76dd1e22418be888c20c6d882a
- SHA1 f1c3657afda2621896c1775737cd4da06bd22789
- SHA512 801c453ac2664b1f275b7d4755eb22152d9e222fb14c929d62d606347a901d9bb40e8edd5fd6b721a1f5f435486052bbaf0d630739e6e24ffe46984fcc30ab36
- SSDEEP 384:5gYyQW4Zr/aCYlHoTj8z7bEXrdMHDSCSUQf9uWsh2/oAlOFmAf25XX8L8c:CYNXr/Y2Y7bEXrwDRSjf97shpPf25X2
- TLSH
  T189B2714063E99134F8F25AF05DBA51754A7BB8713B31C89E405086AEADB1B83CDB8377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28
- Target
  sxp3mu.bmp
- Size 23KB
- SHA256 0865d77535a0bb4caeecd5de6d047727d45e50cad294a0ea8d5d381538171160
- MD5 6af77ac31c9eb375b0691693070c3153
- SHA1 87ce921f9bbc3d9353a41335758eef9b4e7b5189
- SHA512 3575864021217a6b4f2da6971e475fa478f441a4f078fe9943377ef024a9864368f2493398c1d5c73817d32590df1b84bcf7521713a02abe743198fb83b9328d
- SSDEEP 192:f7iuHhl2fS3SooQ7G2YIesI6GN5nLImRtgNZ1g1krKGBU4fY5ymC7t:f7iG+HWDwiN3q4fY5ymC7t
- TLSH
  T10BB2EF25662618EAD7F98FB068A66A0C2065AF431348461D2DD3F8DDDFBFC15108E9F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  sxp3mu.ini
- Size 6KB
- SHA256 6323a7c228bf7a32dc78a67d8f281c6452774325050cbe1566df97f7557725c4
- MD5 e8363e4d0ee8daa1eb8364039172cb42
- SHA1 62aff0a4c9b1ded33e01034c6c683ac3601b56d8
- SHA512 19b352202de66270eab1d4d19bd0e5f65cd6cc6dbb6a7bcb3ea5fddc6142ac5e5fc3d4ca9e0bffdd88e4e33ad2351df1b96d45fef54f3aeb0859e5431efaf668
- SSDEEP 96:nkQvk+QGqr4HBZ+YywyJa8HNn4LBIdpG5wa22uJHhcBc0Orxd:nFkH7Vn4FIAl5uEBc0Or3
- TLSH
  T1BBD156F3A2D70B4EC55A6699EE74064B31CBF4D324D6581F274A088E1CEAD37607E398
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral30

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30