b6cabb63528573f614d1a574d6b266432179f61cc63010f9e7304191b9d53865

General

Target
xipher.rar
Size 14.7MB
Sample260926-1ddd8asale
SHA256 b6cabb63528573f614d1a574d6b266432179f61cc63010f9e7304191b9d53865
MD5 53f01cb98d0ef30ad4e50345b0015db0
SHA1 c30ac198bc6df7e440d9f93986eff486cb391077
SHA512 474770c14870f6cd1e9986e1a8279541191e202f81013ee3a4aaf14e4b49a4fd04bc8b04e36b462c90714980f36e7dbd75c758957c937612a9f6cac4c976f297
SSDEEP 196608:FbswSkXRGLhgFXGexZG+nid4vLlJxg5v181dzh2hj0pDBqqg/75la6KFnTvHgxsl:FAwThGLSkeCv4DWv1gds0fRg/ffwgCl
TLSH
T1BFF633F9F922932FE8A40C8B163E494B9A57D903F5BD5A0485E4F11A7304AF3C9895FC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  xipher.rar
- Size 14.7MB
- SHA256 b6cabb63528573f614d1a574d6b266432179f61cc63010f9e7304191b9d53865
- MD5 53f01cb98d0ef30ad4e50345b0015db0
- SHA1 c30ac198bc6df7e440d9f93986eff486cb391077
- SHA512 474770c14870f6cd1e9986e1a8279541191e202f81013ee3a4aaf14e4b49a4fd04bc8b04e36b462c90714980f36e7dbd75c758957c937612a9f6cac4c976f297
- SSDEEP 196608:FbswSkXRGLhgFXGexZG+nid4vLlJxg5v181dzh2hj0pDBqqg/75la6KFnTvHgxsl:FAwThGLSkeCv4DWv1gds0fRg/ffwgCl
- TLSH
  T1BFF633F9F922932FE8A40C8B163E494B9A57D903F5BD5A0485E4F11A7304AF3C9895FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution
- Executes dropped EXE
- Stops running service(s)
  defense_evasion execution
behavioral1
- Target
  CipherX/Sysinfo Cipherx.vmp.exe
- Size 15.5MB
- SHA256 b42c690ee8db1a349c8690f2d2b4e4d7ca110f632801e892b8deabffbed6caba
- MD5 6052feb72802651564e7ca16231ed598
- SHA1 a3bbba736271e15408932114bb3dfc6f3f44f988
- SHA512 6887f704c75b4613d53d45210ea99911f02b1239fb554bcef4a2ecf2fa9166d037eaa81b6087b15a6e7ea94be527429f7bb5d70c6b3f73da3e431c30e247f3f6
- SSDEEP 196608:zG6RNa8MfMje5/5Jcw6Hrps9zGvPMv7I6OwRVtPj0pR6dQ78PY7NCdlIc7mUhxZZ:K6r9ezRJeHrpR3QK+rYR6ECdlIU
- TLSH
  T1DCF612D13DD1816CC496C935E28A1BFDF0C679894DBA692FBFC648017631E42CCBA936
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  CipherX/VAN0 Fix.EXE
- Size 300KB
- SHA256 12b7d2fe5bf01b6b426a18f8549cab51405e401c103f20baa498ce6a315393c9
- MD5 f81d5ac752d074881067df0c338d053e
- SHA1 74cb5bff743d56d617c6b641b8365e0b7a64e43f
- SHA512 0a29cb9772776da4a347ef248717c52d84c3588b380d7216f2e365fea402a9aec8f2598dec45ad413c857b2e4452bf253ea6f1c4cc40c2847d8115e63f016308
- SSDEEP 3072:RGK+SXrRexFP1F0zfp1qD0heEzajWlUYYk5HRBXVrm1Gd8WfZ3hB17:dXrRhTWjUayJtH/lmEXZ3h
- TLSH
  T12364CF5871656179E0BF85B9AAB342D43835AC03F813825CB93DB38C0FB35A53A7A7D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution
- Stops running service(s)
  defense_evasion execution
behavioral3
- Target
  CipherX/libcrypto-3-x64.dll
- Size 4.6MB
- SHA256 5527ff18dd749687d886ef7f383463b6ce7bca66c773d6ff94f40190da853ebe
- MD5 2b29fefde1095bad70504c82d37f8323
- SHA1 2e2cff1ab2b229cbc0f266bf51a2c08ce06f58e9
- SHA512 c3d52300cad66daa405a4ca44d55708131f15e32a1948018aceae1e6345d56a7c8c130f09e2b035ec8442c4070a040f6f377aea44d9e714c54c673c0d68b7c6a
- SSDEEP 49152:EZ18MKT1dSmj2zdfzg5BBa3dETE/9by4L38dsJpzWdJLjijzeZ6+yzJBeMzwPLIN:uuImBBc8RKjuozkueq1CPwDvt3uFFZC
- TLSH
  T181265B6AABA81188E4BAC13CC1934617D2F1F826577097CF19A156790F37FDA2B3E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  CipherX/libssl-3-x64.dll
- Size 537KB
- SHA256 96dde73df4a2df72d5fc788e1ad99c6adf388cd42c2f874cf8d6a883a3654bf7
- MD5 5ae31cfaf71fb03d07a2caa4f5f80ed0
- SHA1 a9dec69c227ef1c6b3fb6c5296695f7f03fcd46d
- SHA512 8c571de5bf27e8ac83be213aa290128db95039dfeaa2fb80698e77ba0a2b3b6630b4aa08a3402585891923b162824b5227b28372a47c9a84de5f9fd0ba2b4f86
- SSDEEP 6144:LFPdnNGPhGpJbSOnhB6giIY2Nrv+LUAxb7lW519ivM01sQi7E:plNEGpMOnX6giIn8JWN8M01sQi
- TLSH
  T19DC44BA9B3B4179CD892D13887538613E7B6B4563370DFDB0BA48A790F23BD4263A344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5