d7e68bea4dab5fbea63bf40c29fa61965978f90045155e404a72d8fc88adf9b9

Sharing

Copy URL Twitter E-mail

General

Target
fcff4deee7d388f452b6414065cee4e44adb5a5e5f5cacba3893a8d686a4fca5.zip
Size 2.6MB
Sample260926-vybs8syanh
SHA256 d7e68bea4dab5fbea63bf40c29fa61965978f90045155e404a72d8fc88adf9b9
MD5 5a827b7e5c43fb621061337141ed5736
SHA1 4d9ee757da4afa5453cb9d19d3e80d124bd7d745
SHA512 604ca860288335730e8658b3a1f381cbaa990b726a198365321fbba5c1a22c3f42a932c3b393ce7d4cb180ba20d98744f573076808ffacdb0ce5cc671cd57b21
SSDEEP 49152:+tERnSGGKr7ml9cJ09qFjgqCo7mijF3cblI+L4UTcK38KaGS5DJcn6q:+t6FG99cJQqFkNraFs5XL4UqKarFJcnx
TLSH
T1A2C5331CE76E2E699ADFA1D9251398DF9C4DC26A6E22C30B1B8080F015452B7DDFDCD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  mino(Copy 10).bat
- Size 135B
- SHA256 9d755d8cea2f881e21e6948a92c1e4b0a5e18402d3cf2fbcf4620c9419c0f40e
- MD5 65e0bfdeaa30cabd982e85541598a877
- SHA1 98267b930cc4d59555f4fcf82477282fbb41a6b3
- SHA512 1c0e919a02bede098ff31e3c3d05a3cdaa6e339ad1c2835d5c5a03e63884fe7a9c590af222cf655852821e99826abbdd246d1042a86744873411922578eed90f
- TLSH
  T11BC02B0D721C83F0420E1950CF500C3C152F53B4783608207C047703B3D2C28C110192
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  mino(Copy 11).bat
- Size 135B
- SHA256 9d755d8cea2f881e21e6948a92c1e4b0a5e18402d3cf2fbcf4620c9419c0f40e
- MD5 65e0bfdeaa30cabd982e85541598a877
- SHA1 98267b930cc4d59555f4fcf82477282fbb41a6b3
- SHA512 1c0e919a02bede098ff31e3c3d05a3cdaa6e339ad1c2835d5c5a03e63884fe7a9c590af222cf655852821e99826abbdd246d1042a86744873411922578eed90f
- TLSH
  T11BC02B0D721C83F0420E1950CF500C3C152F53B4783608207C047703B3D2C28C110192
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4
- Target
  mino(Copy 12).bat
- Size 135B
- SHA256 9d755d8cea2f881e21e6948a92c1e4b0a5e18402d3cf2fbcf4620c9419c0f40e
- MD5 65e0bfdeaa30cabd982e85541598a877
- SHA1 98267b930cc4d59555f4fcf82477282fbb41a6b3
- SHA512 1c0e919a02bede098ff31e3c3d05a3cdaa6e339ad1c2835d5c5a03e63884fe7a9c590af222cf655852821e99826abbdd246d1042a86744873411922578eed90f
- TLSH
  T11BC02B0D721C83F0420E1950CF500C3C152F53B4783608207C047703B3D2C28C110192
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution upx adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral5 behavioral6
- Target
  mino(Copy 13).bat
- Size 135B
- SHA256 9d755d8cea2f881e21e6948a92c1e4b0a5e18402d3cf2fbcf4620c9419c0f40e
- MD5 65e0bfdeaa30cabd982e85541598a877
- SHA1 98267b930cc4d59555f4fcf82477282fbb41a6b3
- SHA512 1c0e919a02bede098ff31e3c3d05a3cdaa6e339ad1c2835d5c5a03e63884fe7a9c590af222cf655852821e99826abbdd246d1042a86744873411922578eed90f
- TLSH
  T11BC02B0D721C83F0420E1950CF500C3C152F53B4783608207C047703B3D2C28C110192
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral7 behavioral8
- Target
  mino(Copy 14).bat
- Size 135B
- SHA256 9d755d8cea2f881e21e6948a92c1e4b0a5e18402d3cf2fbcf4620c9419c0f40e
- MD5 65e0bfdeaa30cabd982e85541598a877
- SHA1 98267b930cc4d59555f4fcf82477282fbb41a6b3
- SHA512 1c0e919a02bede098ff31e3c3d05a3cdaa6e339ad1c2835d5c5a03e63884fe7a9c590af222cf655852821e99826abbdd246d1042a86744873411922578eed90f
- TLSH
  T11BC02B0D721C83F0420E1950CF500C3C152F53B4783608207C047703B3D2C28C110192
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware execution persistence ransomware spyware upx
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral10 behavioral9
- Target
  mino(Copy 15).bat
- Size 135B
- SHA256 9d755d8cea2f881e21e6948a92c1e4b0a5e18402d3cf2fbcf4620c9419c0f40e
- MD5 65e0bfdeaa30cabd982e85541598a877
- SHA1 98267b930cc4d59555f4fcf82477282fbb41a6b3
- SHA512 1c0e919a02bede098ff31e3c3d05a3cdaa6e339ad1c2835d5c5a03e63884fe7a9c590af222cf655852821e99826abbdd246d1042a86744873411922578eed90f
- TLSH
  T11BC02B0D721C83F0420E1950CF500C3C152F53B4783608207C047703B3D2C28C110192
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral11 behavioral12
- Target
  mino(Copy 16).bat
- Size 135B
- SHA256 9d755d8cea2f881e21e6948a92c1e4b0a5e18402d3cf2fbcf4620c9419c0f40e
- MD5 65e0bfdeaa30cabd982e85541598a877
- SHA1 98267b930cc4d59555f4fcf82477282fbb41a6b3
- SHA512 1c0e919a02bede098ff31e3c3d05a3cdaa6e339ad1c2835d5c5a03e63884fe7a9c590af222cf655852821e99826abbdd246d1042a86744873411922578eed90f
- TLSH
  T11BC02B0D721C83F0420E1950CF500C3C152F53B4783608207C047703B3D2C28C110192
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral13 behavioral14
- Target
  mino(Copy 17).bat
- Size 135B
- SHA256 9d755d8cea2f881e21e6948a92c1e4b0a5e18402d3cf2fbcf4620c9419c0f40e
- MD5 65e0bfdeaa30cabd982e85541598a877
- SHA1 98267b930cc4d59555f4fcf82477282fbb41a6b3
- SHA512 1c0e919a02bede098ff31e3c3d05a3cdaa6e339ad1c2835d5c5a03e63884fe7a9c590af222cf655852821e99826abbdd246d1042a86744873411922578eed90f
- TLSH
  T11BC02B0D721C83F0420E1950CF500C3C152F53B4783608207C047703B3D2C28C110192
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution upx adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral15 behavioral16
- Target
  mino(Copy 18).bat
- Size 135B
- SHA256 9d755d8cea2f881e21e6948a92c1e4b0a5e18402d3cf2fbcf4620c9419c0f40e
- MD5 65e0bfdeaa30cabd982e85541598a877
- SHA1 98267b930cc4d59555f4fcf82477282fbb41a6b3
- SHA512 1c0e919a02bede098ff31e3c3d05a3cdaa6e339ad1c2835d5c5a03e63884fe7a9c590af222cf655852821e99826abbdd246d1042a86744873411922578eed90f
- TLSH
  T11BC02B0D721C83F0420E1950CF500C3C152F53B4783608207C047703B3D2C28C110192
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution upx adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral17 behavioral18
- Target
  mino(Copy 2).bat
- Size 135B
- SHA256 9d755d8cea2f881e21e6948a92c1e4b0a5e18402d3cf2fbcf4620c9419c0f40e
- MD5 65e0bfdeaa30cabd982e85541598a877
- SHA1 98267b930cc4d59555f4fcf82477282fbb41a6b3
- SHA512 1c0e919a02bede098ff31e3c3d05a3cdaa6e339ad1c2835d5c5a03e63884fe7a9c590af222cf655852821e99826abbdd246d1042a86744873411922578eed90f
- TLSH
  T11BC02B0D721C83F0420E1950CF500C3C152F53B4783608207C047703B3D2C28C110192
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral19 behavioral20
- Target
  mino(Copy 20).bat
- Size 135B
- SHA256 9d755d8cea2f881e21e6948a92c1e4b0a5e18402d3cf2fbcf4620c9419c0f40e
- MD5 65e0bfdeaa30cabd982e85541598a877
- SHA1 98267b930cc4d59555f4fcf82477282fbb41a6b3
- SHA512 1c0e919a02bede098ff31e3c3d05a3cdaa6e339ad1c2835d5c5a03e63884fe7a9c590af222cf655852821e99826abbdd246d1042a86744873411922578eed90f
- TLSH
  T11BC02B0D721C83F0420E1950CF500C3C152F53B4783608207C047703B3D2C28C110192
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution upx adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral21 behavioral22
- Target
  mino(Copy 21).bat
- Size 135B
- SHA256 9d755d8cea2f881e21e6948a92c1e4b0a5e18402d3cf2fbcf4620c9419c0f40e
- MD5 65e0bfdeaa30cabd982e85541598a877
- SHA1 98267b930cc4d59555f4fcf82477282fbb41a6b3
- SHA512 1c0e919a02bede098ff31e3c3d05a3cdaa6e339ad1c2835d5c5a03e63884fe7a9c590af222cf655852821e99826abbdd246d1042a86744873411922578eed90f
- TLSH
  T11BC02B0D721C83F0420E1950CF500C3C152F53B4783608207C047703B3D2C28C110192
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral23 behavioral24
- Target
  mino(Copy 22).bat
- Size 135B
- SHA256 9d755d8cea2f881e21e6948a92c1e4b0a5e18402d3cf2fbcf4620c9419c0f40e
- MD5 65e0bfdeaa30cabd982e85541598a877
- SHA1 98267b930cc4d59555f4fcf82477282fbb41a6b3
- SHA512 1c0e919a02bede098ff31e3c3d05a3cdaa6e339ad1c2835d5c5a03e63884fe7a9c590af222cf655852821e99826abbdd246d1042a86744873411922578eed90f
- TLSH
  T11BC02B0D721C83F0420E1950CF500C3C152F53B4783608207C047703B3D2C28C110192
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution upx adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral25 behavioral26
- Target
  mino(Copy 23).bat
- Size 135B
- SHA256 9d755d8cea2f881e21e6948a92c1e4b0a5e18402d3cf2fbcf4620c9419c0f40e
- MD5 65e0bfdeaa30cabd982e85541598a877
- SHA1 98267b930cc4d59555f4fcf82477282fbb41a6b3
- SHA512 1c0e919a02bede098ff31e3c3d05a3cdaa6e339ad1c2835d5c5a03e63884fe7a9c590af222cf655852821e99826abbdd246d1042a86744873411922578eed90f
- TLSH
  T11BC02B0D721C83F0420E1950CF500C3C152F53B4783608207C047703B3D2C28C110192
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral27 behavioral28
- Target
  mino(Copy 24).bat
- Size 135B
- SHA256 9d755d8cea2f881e21e6948a92c1e4b0a5e18402d3cf2fbcf4620c9419c0f40e
- MD5 65e0bfdeaa30cabd982e85541598a877
- SHA1 98267b930cc4d59555f4fcf82477282fbb41a6b3
- SHA512 1c0e919a02bede098ff31e3c3d05a3cdaa6e339ad1c2835d5c5a03e63884fe7a9c590af222cf655852821e99826abbdd246d1042a86744873411922578eed90f
- TLSH
  T11BC02B0D721C83F0420E1950CF500C3C152F53B4783608207C047703B3D2C28C110192
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution upx adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral29 behavioral30
- Target
  mino(Copy 25).bat
- Size 135B
- SHA256 9d755d8cea2f881e21e6948a92c1e4b0a5e18402d3cf2fbcf4620c9419c0f40e
- MD5 65e0bfdeaa30cabd982e85541598a877
- SHA1 98267b930cc4d59555f4fcf82477282fbb41a6b3
- SHA512 1c0e919a02bede098ff31e3c3d05a3cdaa6e339ad1c2835d5c5a03e63884fe7a9c590af222cf655852821e99826abbdd246d1042a86744873411922578eed90f
- TLSH
  T11BC02B0D721C83F0420E1950CF500C3C152F53B4783608207C047703B3D2C28C110192
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution upx adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

UPX packed file

UPX packed file

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

UPX packed file

UPX packed file

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

UPX packed file

UPX packed file

UPX packed file

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

UPX packed file

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

UPX packed file

UPX packed file

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

UPX packed file

UPX packed file

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

UPX packed file

UPX packed file

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

UPX packed file

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32