2e3a5916ab0295006d3ca3a4777b55564b6ffe9eca182a468cfc2732b1682e7c

Sharing

Copy URL Twitter E-mail

General

Target
YSepetiDH_28_07_2026.zip
Size 9.9MB
Sample260930-phkhjsxape
SHA256 2e3a5916ab0295006d3ca3a4777b55564b6ffe9eca182a468cfc2732b1682e7c
MD5 50c0f8e4b72afe84baac00ba00d9b60d
SHA1 b243ed9445c5bd11fc05a030b58c9fc001410bed
SHA512 1f3ae19ff8f7f833f45e89d27f99111f5af1e26a52c935f476bb177080af2f36c1bbfb72a41ebc6d4aa95980601a9cfa7b84d8f02b81d7c261534f41791f9a4a
SSDEEP 196608:ntcLDTC6d/Twl2LtONwzA+ldtkFwt6hElLZOAGAPncwvKDaC:nafuQTwl2L0Nwh16WyAPn34aC
TLSH
T18CA6339E9F90EDCA7F3DA1794B34064CE896F4BD68490D4670E14571ADCFBCD2328886
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  ExcludeGenFromDefender.exe
- Size 3.0MB
- SHA256 3ffecb669baa188b7d8a1aca50dfc4b9f54cceb5e753d095c4512179e65f1fb8
- MD5 1105e5986e3ef427d3ef71161a8972f3
- SHA1 55cb1c1fd0c2b7c64525539ddb1cb43a33345563
- SHA512 a74e90555ed3508c6155fee4ade598a7298cd1034a30a6d0193bfcaa17092e2f4ce98149f76ae12315a9eb4afbcca17931e7838cb8cc84072ff0ebe5f1e5a223
- SSDEEP 24576:ZaJFxGwkHPhE982v0Yn1SsLdbKUC7Iz1Uv1KvsehB1SWOwLjh4rUkUALQErXt0CS:1vho0YnBh3SL6kxLUuy6aB
- TLSH
  T1A6E52822614C543AC8FA36F5352BAA6146FAAE512132794A53F0780CCE71547EFFA34F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
  execution
- Prevents Microsoft Defender from scanning certain paths by adding an exclusion.
  Uses the Powershell Add-MpPreference cmdlet to exclude paths from being scanned by Microsoft Defender.
  defense_evasion
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  FreeImage.dll
- Size 5.4MB
- SHA256 89fd43de843308a6f8b89573467f8facd65960e9d3fe57c536760059a1d4e0d4
- MD5 be2b6e27423c65995a8cc8e857f73443
- SHA1 1fc316e86ea7b1395aa764988d3424cf5c9f9206
- SHA512 97089423625b1a234e55bb73a0f573fb423468a2a86293fce92a6f88c48856fab3a217cc07306b3c176f8dd849412828c1c54b2441cbc8985d2c22154aeaf9ec
- SSDEEP 49152:Ghd0HhgBfznpmSWmQ0c28aE08eRbxocctahCEHqTTavB/cVrHM4GRlKsU:GhdegB7nS0PXCIq6yslK
- TLSH
  T1DD465B12FBA24DF2C89740B094BB7B27C96A9D740B2047E38B615A1EB8763C115777CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  YSepetiDH.exe
- Size 8.0MB
- SHA256 135f415892922a77174db11cd67d9fdfc29210ec1fb717174bd3559209a98717
- MD5 17893dff063709d8027dc40183220a03
- SHA1 780f939759877fd6681796aab0530db560c8ad23
- SHA512 e42ee217d2e09999f000fa29acbde92a1fd8367152ea956e5a31110543b5d270dfa3b06b91854729830cfd20e1ae8b533c1de3e214ba1b6cb8e1b33aaa3587a5
- SSDEEP 98304:WNyIAx0K8UEVGMuRiNkZadgJ+W5DVz95S6bCGdUVm3ApX4FY9OUoFeCvC0gf4+Ot:WwaWMcUVqq9GF9Fgf4+OqyG
- TLSH
  T101868E17B28C443ED0A70B35682BD679457ABF31BA22D81767F07B0C4F75A40AE1A35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  YemekSepetiDHStarter.exe
- Size 3.6MB
- SHA256 a20cbbb63096a61c63903552860f514a61b27c49872c0ebfd21c4bf6481c406a
- MD5 0f5b8328f693f986536396787e97f827
- SHA1 befd7e7d32fefe5fa9e9ca39989f83aa2eb83e41
- SHA512 15f397f457a9ce7219c4e66ef3fec2779b4741f35a2ab08bcb1eb5c1df50046bf42ed5818d1a6d924501ed205ee95202ab57e3bbec13ea8d6627d7384f9b7852
- SSDEEP 49152:N72lZ/k229DUycZeSRnvMiTAwZ6C35BluoaE4YKyT:N7Ka3MhDZ6CQbYL
- TLSH
  T185067C22B284543FD46B0B36087BB661A53FBB613A66C90B77F4194C4F36B40793A35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  libeay32.dll
- Size 1.3MB
- SHA256 5264a4a478383f501961f2bd9beb1f77a43a487b76090561bba2cbfe951e5305
- MD5 fa5def992198121d4bb5ff3bde39fdc9
- SHA1 f684152c245cc708fbaf4d1c0472d783b26c5b18
- SHA512 4589382a71cd3a577b83bab4a0209e72e02f603e7da6ef3175b6a74bd958e70a891091dbdff4be0725baca2d665470594b03f074983b3ed3242e5cd04783fdba
- SSDEEP 24576:RNaU+KpPikndiNfzN4jH3PlMQzMjYpOtJqTp/kqg1:PlUfzN4jH3PlyjYpOLqd/kP1
- TLSH
  T19555AD03A792CDB2E58981BE51B7977F5A379611432AC6C38BA02D51DD221F2633F3C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  libmysql.dll
- Size 2.2MB
- SHA256 69ca13c9192620dfb9e2f17fcf7b065f478230567a8aaedd9b7581abfb78bb82
- MD5 a90bbb897210ded5aedb07aec76ef606
- SHA1 63d3fdcf85ade8f77a7fa43a2e8da12b3a1a5822
- SHA512 528b18092075dbd575e3fef7e4f57ada0cc0f17a6f1dd3af14615fa9fb85b66a7b36aa80e21f081467e05976a59663ee9d87e2dfc763c0b2d265c309412689c8
- SSDEEP 24576:7056v9vQ75H/o3NGTsfmqtfkVfxaT8KWJRNGagfkG0:70EOVHQkT6ttfAxaQFJRJ0t
- TLSH
  T16CB5D061A3D38DB3E86BCA7D4079762EC622E250134744E33FB16EC9C5213E366751BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  png2bmpcmd.exe
- Size 789KB
- SHA256 7fb82634c6e5caacfdc9dbb19bf1254925ec5913b5ca439cb14cc1960f6ab78b
- MD5 478e50cdb5e3e3a69acc4d8035726d93
- SHA1 a0c2d5b52b1e703062895ab1dea7dae64ff6fdde
- SHA512 3363788021056deacb998cd1e6a17e98ce5cd59fbd5a589228b7fd249c932d76334b2f525eb7e28dd0c1f43bff1d6670442b3b00ccfad04e8def6a0dcfb20ac7
- SSDEEP 12288:UO3Z5V3n/BlxKDmJMsObIbVQB+Wd0NjsNEr5Ts92iP:UO3/JLxKmJxObIbV6+Wd0NjYEFT4x
- TLSH
  T1C7056B83F6D241A6F99A063064EF6A267B3037080735EBCFA995793D39712D1C871B6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  qrcode.exe
- Size 237KB
- SHA256 15f7c8c053c3ac3950a42095f2cc88eb5a7cc7eb905e7e1de17229f12650f6f9
- MD5 4d442b276099efc136941432a9ed5592
- SHA1 5e3f14ea0c577abf84f4dc7764f9e628c151a490
- SHA512 7c7a87820c9f5f350b9c7a3cae17c8ab3e01ad485f2d44586e7abb63f32f596c9ccd36b1c30764db665d20e99362e4a6a18b8ebf3325aeb58900e365cf3af826
- SSDEEP 6144:8mRNoqedSjhan6ZKIg1j69TBqKYAO3eAy:xRNoLn68Icj6TsKYNeV
- TLSH
  T1C7349E11B2D2C073D4F3023640EC8B37563EB626077599F7B7D85A19AE302D1A6727EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  ssleay32.dll
- Size 330KB
- SHA256 0a4031ab00664cc5e202c8731798800f0475ef76800122cebd71d249655d725f
- MD5 2117e31688aef8ecf267978265bfcdcd
- SHA1 e8c3cfd65ed7947f23b1bb0b66185e1e73913cfc
- SHA512 dd03899429c2d542558e30c84a076d7e5dbde5128495954093a7031854c1df68f8ff8eca4c791144937288b084dd261fbe090c4ff9a3e0768e26f0616b474eca
- SSDEEP 6144:I6MNzVTEz1LgXCpfoaDRQHojjYkARhcPL0U2pHGS5VdQ/TOEzrqArrpA1riT1PiR:I6MNzVgz1LgXCpfoaDqHojjYkARqPL0z
- TLSH
  T133746C53F79180F2D4825675647B6FBA3E3E6701436A8AC3EB601D6C4E103D49A3E39E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18