2409723a670a51d4571c5eaf39da37bc62ebae819bae50f0ebe9727422b7c359

General

Target
2409723a670a51d4571c5eaf39da37bc62ebae819bae50f0ebe9727422b7c359
Size 8.8MB
Sample260922-kpsqaaxvbz
SHA256 2409723a670a51d4571c5eaf39da37bc62ebae819bae50f0ebe9727422b7c359
MD5 e54a8ebe9ca4f35f54faec0d64f87551
SHA1 31841fb8b527e2236dfdc2f6b5f15d7cf26e294f
SHA512 c34e5083140fce08e869fe2583a8ce0b8ceb7baff0eb123d33e147e8099dcc1cd7b5d1467f97acf62d9048681ee6b581275e830410258a9d4cd13a42f6fee2cf
SSDEEP 196608:cxQOk3A33bh4ryuvcquwH64mWLuUJWiSUkiEHwioRn3JrQ:u4yuvX3a4pu+WbYWwicn3O
TLSH
T1239633C5E0E5B132E9EBE96F9B97C4B0326326DD509A4EE8BF03719A34046F1071A57C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  WinSCP-6.5.2-Portable/WinSCP.chs
- Size 1.3MB
- SHA256 98172e234073b124d1f5295447f40884620fa3e0aafc508d3ea16ac36b932315
- MD5 e65435ff053b792d25d6eea76338f181
- SHA1 3963c1b1fbf021ba0df92d61dfec8602c38c9a2c
- SHA512 09ced3019dbd92b69d497d111826b04e5610d43e0223db6fc12074093b49cf1c4b674c1e86102a4c179f2343b7540bd8cd20f031efb0dc3bcf33a920bb913977
- SSDEEP 12288:pTgBA2QlG0evDvYdwdjBvoZk6Othx5TN6tLt40TxsJmYmP:pTSz0kAdwdlvoC6OthTN6tR3xs1mP
- TLSH
  T14D551B0DF7A06D30F1AEAE7616F705A649336F40C5F0954DAADC9C0A28725A8C5FB387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  WinSCP-6.5.2-Portable/WinSCP.com
- Size 276KB
- SHA256 26944561e8d39f99c2cf7ac4340244f52dd111eefc7392d0a3c551e33cffaf44
- MD5 3436e9fb8b3134d2769163ee4d23832e
- SHA1 ceffd0a2c89e932c587c4b010eafbc7193e74ec7
- SHA512 fd2d93efa2023b69618a73168706df742ba0be31818cc869422c81499c85cf516cbb86d5c5954caf750b159b577310035e1c33fb2105b430fd0cdf02fa172f57
- SSDEEP 3072:M9Pfr2MY0+VKMjD91J7IMtpYS93NmcIQV/LSZKYtzNKUR9ATqEaNr3DccqWARLRe:7B4I919IMtpYS93NmjQ5veNbR9AsA7M
- TLSH
  T1F9545C13FBA5C935E01385787968A773A8395D349E8880A3F3D49F1DBEF52C0924972B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral3 behavioral4
- Target
  WinSCP-6.5.2-Portable/WinSCP.exe
- Size 22.9MB
- SHA256 8a2135da4e3679a3541c644ed426c7753d9bc36b7142c3dc8a6a3efff818e277
- MD5 1ddf18d304286b35b8b3a54fbe448e21
- SHA1 de15768eec7b4fb041e35970de212dc889d71bc0
- SHA512 acb8c8c507c1aedbd65611da3465a04dca7061362170614f77a893aa804f1c78a70ba774d7e4d96eff5d9da007c3e007c43d2bfaa4b40b1f2da2b8be9b2db0d2
- SSDEEP 393216:ces9w5KbDxKIvwSIQDcc0sc0qPq9AZSxgl2VrFB/f:ces+5o90UBZrF1f
- TLSH
  T18737E5036DB0C235D34B26B15B79AA700A3DB9345D1372F2EA9CDE49DBF1790592322B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral5 behavioral6