aab5602d90ac19cce1ca170caf6e786c42e98d0eac4e15f2dd7a6c9cda944475

Sharing

Copy URL Twitter E-mail

General

Target
aab5602d90ac19cce1ca170caf6e786c42e98d0eac4e15f2dd7a6c9cda944475
Size 8.7MB
Sample261013-2dbq3act5w
SHA256 aab5602d90ac19cce1ca170caf6e786c42e98d0eac4e15f2dd7a6c9cda944475
MD5 026dbc8e73a8c7965b7ded1aadd916d1
SHA1 cebf22bccb0fe1259bf6d042cc8bc2130f54ae51
SHA512 b60204e7e1e6aca5ab7e351e199e4bbe05e5ba2216726fd1108c4c7dc64d6dd4158512d6a6ea5f1d11a641496b06bdd6457a4da5218a3c0ace2c9e60e7c3a805
SSDEEP 196608:Vb6jaE+P7BI6kOErbEN7/wiXIi18XRcfSzUY54I2XRcfSzUClHDyfzOJ7M6GQMNt:J4+Dq6hEnEdwi4g8hQq2hQIufzUAu+5v
TLSH
T19996338CC54FD7C8FDAE517C094935C26C5171CCB834BE6EAF01ABF49024B6A69A74CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Lertaro/Lertaro.App.dll
- Size 2.8MB
- SHA256 ec6ec26db77eafd26f8db4ce1d94cbbf759f1d38f8c92e4a69d5356c35d4c148
- MD5 b8c47fa4fd130856ee5a9462d6fbbb42
- SHA1 df4440949a22be09fe8f728cc2837d0941d61e72
- SHA512 a2b6ffe463adb241c12cb621b6f8db173580cbe78883e24b12c4412336bc8479c4d2d1a2bc01ae5c35807c1ab1b33a0a53713ac878c25a4c94583eb3fef3d878
- SSDEEP 49152:RRrgvbGYBfgnIOWXknBNeamCxQfe6Y7rDXTuUEf47jrdqKctkdJth2:TyfmhiM/2
- TLSH
  T1ECD58D1037E8497AC0AF0739943142625674EE4663C1FBEC076EA96C2C99F1F9DA43B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Lertaro/Lertaro.App.exe
- Size 473KB
- SHA256 1eec12d4ee24542932d542947f07e702f6ca66c16222d7f42f51c233ca69bf1c
- MD5 daa97222f457a34e76c8bd277fc44584
- SHA1 c118b01d34f1916027231785f11b856acaff4cd3
- SHA512 9b39b3dd8949bf8ec99868c9687e1d69793cc7e35108509adfbf21a86a60a50e01d2730b4f7e02a2915d1b583ed8bea9dbb5f8c333a1815d31dc9e311a0d820b
- SSDEEP 6144:5HRu7F1nQnB8KKuHbFfiUVPCXAplnnHHqCqo0P4p0Fl7RhB9SNdBDoIGAwMm:5xOF1JK4APCQplnRT0PgXGkm
- TLSH
  T179A46A12A25C00E9D0629B7CC5B28703A731392547E16AFB138E3D667E6EEBC5DED701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Downloads MZ/PE file
behavioral3 behavioral4
- Target
  Lertaro/Lertaro.Core.dll
- Size 1.1MB
- SHA256 2ecfc49c6fe0a869864dd0a099f4217c3d670f53b36e6871da8c4794e65e4ffc
- MD5 7156a2ccc270a4f73706c98fc22952f6
- SHA1 b1845e3a9ed47aafba8152a548678586f5344828
- SHA512 76ee3ad2921a8eafec344a0ff6abeda3079c00f1ba6347f84e801579813f2a9bf626dd39ac19e0da1f4ccda779fbd50c48a9c668af5859c9bdabbf7f540942ca
- SSDEEP 24576:OoZCygvMSCIGD1wyQKB4XD531RFKbg/NqqlGE2g6:fZqvMSrQxq
- TLSH
  T1ED456C8273F84A7BC9DF2739A830565DC7BBE1057692F74E2A48E4991C2338D4E447A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Lertaro/Lertaro.PluginSdk.dll
- Size 129KB
- SHA256 9cd3da4d7e4b6be01b44bdbce2d8b7070de6a7c99e76bdabe27e3f993358d10a
- MD5 a6fd0c6610c998f89ef3f88e31df8872
- SHA1 e53f55922c33c2b8a80484a77c04cfc9c4820306
- SHA512 bc36ef38df854b8c6d4106dda8354fc0a5a630e935e39b028708d62c54ea8f01f3a5be65c6960f01a82e666ffb9c9c61b30518303a9d5cae027dd53eb49efe15
- SSDEEP 3072:wEJQCOPEoeBM8cwavDEggala5n5htAgx3bcTO/neYuL1srVlabnean:wEJQCOPEHBM8cnhgaijAgx3bcTO/nPgr
- TLSH
  T144D36B2033AC876AC7DE8B38B4398955D3329F0A6013DFAB6E54F9ED1C6378516017E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Lertaro/Lertaro.Service.dll
- Size 340KB
- SHA256 d7cc811c114e31c9ad7ee8436bb3ae910e3e3ec1b5981fe6af8b7b8c8ecf763d
- MD5 5646492fbeaa00889a467feddf1692bf
- SHA1 ecda482c23e276ff176aae955bc56b61c7187fff
- SHA512 3e17767e594eb8881a92b0442fefa4ac9b51f49a64b2c59e437eea4ec74a4ce802afa822bae050d64ff7bf9d0b213c03bc20712323c11982aa8d24dde87a7485
- SSDEEP 6144:hiZbFfiUVPCXAplnnHHquqo0v4c0Fl7RhB9SNdBDoIGAwMm:1APCQplnZT0vHXGkm
- TLSH
  T123747A16669C44D0C8560BBC85B2836306317A2155C1AEFB27CE7C67BD7DEBC68CEB81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Lertaro/Lertaro.Service.exe
- Size 472KB
- SHA256 5e11c547f04071dc0b6e94aede601550379423097ff06b0364aec25c8aa3ab47
- MD5 089b523f42eca418775e64304bb4fdc7
- SHA1 1a11b6cc6310047e5e762d9ae037f55d14cafc16
- SHA512 ed2b074b60852c5b56db5bbf5ecc6a2d5c948711da743e33e61a9b862f4030a26f7b7ad0c2341467d6f6f2c6fb54acd06000d83860158ff03cead1cbe112ae07
- SSDEEP 6144:EHRu7F1nQnB8KKWAbFfiUVPCXAplnnHHqCqo0P4p0Fl7RhB9SNdBDoIGAwMm:ExOF1JKxAPCQplnRT0PgXGkm
- TLSH
  T1A7A46A16A25C00E9D0629B7CC5B28703A731392547E16AFB138E3D667E6EEBC5CED701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Lertaro/Plugins/Lertaro.Plugins.AnimeThemes.dll
- Size 38KB
- SHA256 065075fad3f2d752780fa4f852c77839337f89bcb19da3fba3e467c649762b6d
- MD5 05bb018622e0d3fe2d33ea3b6071d28b
- SHA1 f1bcdbba1806958d5a7d5afde176c35d98fa3fb7
- SHA512 5230a725f86bfd899923746306baa41dd9f8d214ee953c3bdd66c7b40f16fffdc69f4626993aedda3d60da82d85a10381755c5b42f210fcad41f915b9e889708
- SSDEEP 768:AvYB1Ix+TEHjzKhLJzjzKheVN8faUw+KRzyQVuejzKhp0DX6:kUdUjzKhL9jzKhUDjzKh1
- TLSH
  T128038519A0E9C5F2CE3B04F2E1B11A81317C7E7A9E114D66F9CE321C7CA15260DB6D6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Lertaro/Plugins/Lertaro.Plugins.AudioDeviceSelector.dll
- Size 38KB
- SHA256 53461dc2e4fc7de99241119718e7399d86e1623e11280c7d6a59160837587ea5
- MD5 974a92a66cc59935d5e5148d77064b77
- SHA1 bb298a307b3f1d0c69037bd4391f0c668bbff719
- SHA512 8d48b9ee09bc837cf4631b4e6dbb3fa8e3efeb21b7d2bad140ddc947a133ed0037f1658d203e60a1c371d9b79a2186aee690be215d2ab11a91468596e8765e94
- SSDEEP 768:B66AMxmPH+lUbzh9vjl/mFuaGK+rKMSs2wli:B6bfXh9v1K+rKMSRwc
- TLSH
  T17803EB6972D46B33E5CF4EB3BCA540C263709BEF401A9B0C669854259D2FD013B62B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Lertaro/Plugins/Lertaro.Plugins.AutoCAD.dll
- Size 15KB
- SHA256 38b4b26cc1eb42a197116ddd0beee91e38cd3359522166814ceaf172fc0fcc8f
- MD5 0b5a47f3dbb914608f6f2716ed243975
- SHA1 5728a3dbb294aeeee6cd4d4eb7a6bbb4e0d6f99a
- SHA512 1806da691c592e66c1ea4a74a46938b273eac615db96689a934663bfef8e5290aabb59583da368c72d71297cd97e18ce68a866424bf94941a9fef08f91afa759
- SSDEEP 384:VrJBT/M26VbYa2DiODcMscM887wWTJ3S+E6D+AH8jLQOG4QYo:VrJBT/6bYauAP/JwWT0oiS
- TLSH
  T150622B44F7C84139CABB03B9659B0BA273B1EE15C966CF5B08AE503D1C53B571322B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Lertaro/Plugins/Lertaro.Plugins.Bandizip.dll
- Size 21KB
- SHA256 56e7da7b9995d8705ed6f8093bc1f563c2a3399ecdab3cc06a4601e80639c561
- MD5 c83fc98ec2f7ce3a4bea0fcbf18abdc6
- SHA1 651c36993b22e8dbc2bc07424c6f5d1b952fa6d2
- SHA512 746ec7f4ae2146bbb5290c3fb1efedc9f721d0c1a3f2af6efdfc8337a7280e48992dc6b2ec68481ade681a916b773e067a0a2481b017b6e38b8fe3f7cf65d058
- SSDEEP 384:o9g6JQpYfdVL+mbjDQYaa6hs+MMSLVrjEkDAVUuvwCdKjUUY:d6JQqf7HDUamlvwCkjUUY
- TLSH
  T12FA239B076C6462BCFEF0EB9119A128272B5DF318717DF274EAE70191C233961236766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Lertaro/Plugins/Lertaro.Plugins.BrowserData/Lertaro.Plugins.BrowserData.dll
- Size 59KB
- SHA256 7e43d7e660165d606392b4980e91fea66b34d2fec54971c56198677cbcf54927
- MD5 1e44c7ecc3946eb67834e89d376ab7ec
- SHA1 4a702b48550c9e3a1a5d6c8517bd714d2b08f9f1
- SHA512 7342941a5e8e328e8f1ae178240883a45a5d5cfdf43968b7921fca36b35f3548b63c311149ea5ef8691149393c3fcadd68328449a39311ebc365cfdabc051c1d
- SSDEEP 1536:1a0gsYZtS0Pbw0Ncxi8/9nveX5uO29IX9QurX:LAS0PVN6i8/9nveX5uOa+H
- TLSH
  T13653190923DC6713D4FF3BF16774D0613932EB468676CA0D269F60080A2BA592F65F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Lertaro/Plugins/Lertaro.Plugins.BrowserData/Microsoft.Data.Sqlite.dll
- Size 173KB
- SHA256 b98d957462be432895b00dccca012d3c127e118d3d4262418014b92c7bbd66cf
- MD5 51c88ec46d02e5fcbbae32f7efc816bf
- SHA1 84a39e0cbedf0865db4392fedbce618e1ef3bd48
- SHA512 d4bdcd07b9dbcdee78e093bdcb464059e104e535d97e4a64231549afc3bb345c2b497a0b09bcfd8444f1eb12e23d14641144dca3e9c71aa8f21d0dadb584fa58
- SSDEEP 3072:ZPo1U7KHI/FRmHsG08CrzqWLvVtly6SGBSilr7DSILSAQSIgdGKCxFm:domLmHsG0DGWhrZS43IvKCi
- TLSH
  T1070449B4035C6543C7FFCE32B0B96C824734AA4BD5D2D74BAE40E5B93923745AE8129E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.batteries_v2.dll
- Size 5KB
- SHA256 1ee3c6ff4d39171690d6ff6f84b4d876ed038ca28e39bb6e74995f52d2aacf8b
- MD5 490b696311f4231b4ea185037f14cc55
- SHA1 13d2acd8fac09fd21fde551d9e1bb1a3c468b1ec
- SHA512 469057350a35ea475382f5b3557c0d779f1b1420cd97f0cf6b872a411bcef821696017c218f1a1c0e56507a12603e5ce7c1167274582a4ab06fcb7d247a91197
- SSDEEP 96:9aMe4wcBcI/Yz1SOx/K9hENAA+dKmDbw:02HoSkNAApK8
- TLSH
  T112C1A861E7E7823BF57B9F73BCB202014334B921DE23AF3F4D81421A5C225589A24B76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.core.dll
- Size 50KB
- SHA256 b72c9dfe1479a568d6b84e249eaf949e76c757888f8056fb6ddb9c0480e0dd25
- MD5 ef29daf8897d26c6c518b4c76ea8ebb6
- SHA1 572deaa7c06253ce66ffa28550a43c04b68604c2
- SHA512 f4f6c8de29f0b9596c97c813154c908536978899d0a25cbc40ded05786bf34371d84127aa27b173addad74008eeb8ef5f0ac7a5ac01d7415388421df6ae2771e
- SSDEEP 768:NXptZis0cewNbQoWf8kYYt8mFI37khpDFZ4cfT1o2d9P58zG+2s4JnXqrZ:NF0cew5Qbf8utJI3IzFOYrPizDP4VIZ
- TLSH
  T1E433A43187969A29F8CE1770683E0185E675C51483F7DB1BAE94E4742E323CB46A21FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.provider.e_sqlite3.dll
- Size 36KB
- SHA256 6d6cb90de643c6b4b15f973d1e304f7dd91e8bf053c35013e4ea095d85b53655
- MD5 d07c2bdb14875d31f90eaa75d3270d11
- SHA1 b3d8325cfd85908a1d6606471aa6198e7d6553f8
- SHA512 4466b3d6b85629b49f24ee0926d7205af063703893d0514d164760c918d34e328f2cb8c8a210e44ffe747696883339ea54d72fc88fac2a408a4bcf42bc76f275
- SSDEEP 768:PgIQUpZmdWSUpeWRKMFgx5HCJW0fm+aFIkPI/7jaxqJqsqiWv70:oI+UKAfm+aFhPI/7eqq7T0
- TLSH
  T107F276D6974F6A38E19C07327C730E8992B8D391FB731717AA53D339ED626884D403A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Lertaro/Plugins/Lertaro.Plugins.BrowserData/e_sqlite3.dll
- Size 1.9MB
- SHA256 6ad8e149f8ce3ed3716402b4b3a2268ebbdc7b64391b5fafed747e03bb1b9418
- MD5 69c328fa39ea2c7fb76f924420b81fc0
- SHA1 af3819d6a91ebb518de7099a6bf7046725aec165
- SHA512 8f51a2c904e9732afa8ceb182cbd6a511aca9e387a276cb828cdd232242dca08e6650737ab7338656229ccfde734ec8eb15e351e56f0243f81a71cbfbe46d160
- SSDEEP 49152:InpyOe5K6DJRA7oTIYPdAKM0hIOKc2qUVrN4Pg:KcdAKM0UTqPPg
- TLSH
  T1EA958D47E3B900ACD567C27885175717EBF2B0051725AADB52A08A652F23FF21FBA334
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32