3c644b4034fc303ff0769854183180fa1e513bb2b642b58c45b832b7f81c95a2

General

Target
AskAdmin.zip
Size 1.2MB
Sample260924-m43vxaca53
SHA256 3c644b4034fc303ff0769854183180fa1e513bb2b642b58c45b832b7f81c95a2
MD5 e46d880581450a605cfcea1ae209e4ac
SHA1 3a8b16d0449936fdc15f089a6422bcb0e3e33aed
SHA512 80060fe755816aa2d6771a5fef610b71c07734ce257f05e88b2f65915a10a1319042d58e86b73891c20978b2b3a3b8db6a2f47882b8c97dd40b3d064bb7e9d03
SSDEEP 24576:F6xFjuU+P2wW1rsWsRYmXH0X48rNcmeL50HDpjeiGDF0PP46g9Seq:FnU+P2wmcBH0o8Vx0D9Bq
TLSH
T1585533280937FD63D03BB1FCB60574B655D9ACE4BA9322DDDECA4A0877C52174DB082A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  AskAdmin/AskAdmin.exe
- Size 908KB
- SHA256 52a9286bc9d2198b2afc010eefa8174b25e4b02692ced9b52a478401231c3d96
- MD5 0d35b53f59b0c4b06580558492423356
- SHA1 b9a4c850abb7333da6f03db7db856347bed69748
- SHA512 c0841ae73ddf4aaff6a976b75d36f59d519d314e52c315d37cb933f22f3926770cab161672fdabe24a58856438971455c296e63ec8b63125d8ee6f5a09f21346
- SSDEEP 12288:+aWzgMg7v3qnCi0ErQohh0F4xCJ8lnyyQXZL96cN4Df/vNSszYtc73HQ4:JaHMv6CArjVnyyQRNOSszYG3HV
- TLSH
  T15815C012B7D680F2D9A338B0297BE327EB3575194327C4DBA7E02E779E111409B36762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  AskAdmin/AskAdmin_x64.exe
- Size 1.0MB
- SHA256 e295a16c6d19c0abf6c8efd4607fbef1b02c3d9355e6b916e02eaf3373cccaaa
- MD5 9160af5eddffde462fb728b262cbcf49
- SHA1 b60cc50ba9ebefb5e459527f255d91a6b9d6d983
- SHA512 26e592c62bcd46c5af2a0efc900464db81321390ed92536819ab48d012610fcdf78051f3c114fcd7b42852e961459219e1b8e4bc54aa0a8a3280fb510c37e6f1
- SSDEEP 24576:B2DW/xbiX2YIbiQsu3/PNL6QNHyx88k4295Y:B2EmXvQsW/PNGQ1gKi
- TLSH
  T13235AF59F7F444E4C47BE1BACE46C22BE2F1B808577597DB02A04E6A5F23BD06936321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Drops file in System32 directory
behavioral3 behavioral4