d064eefc27c71fc8915e5cce8d20f635030f4654d917bc1c7ac3f7ad869181c0

Sharing

Copy URL Twitter E-mail

General

Target
winamp_latest_full.exe
Size 12.4MB
Sample261017-s5taraff94
SHA256 d064eefc27c71fc8915e5cce8d20f635030f4654d917bc1c7ac3f7ad869181c0
MD5 255323180ff262691f1ce6a782d943c3
SHA1 bb44ecfaa88bacf1669f0d662ffadbcc1ae616f8
SHA512 08f3221ccec0ab01f5712b09dac9b5fa2e2a1701cdc35e8ae1f64a9b5cb864225e9221162625442f2deee4febae1c2fd0dfe62f1047f17ba2cce43051c6a60f1
SSDEEP 393216:fdNH1gz1+ZUUG9NWpHYV6ohIBfqHts7UU2wPb:fdZk1vUG964V6ysUs7U/ub
TLSH
T1ADD63370B34ACD87D51209355BD1AA3A89E2AC290DE1695BE3C3BF0DFE325153B4E712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  winamp_latest_full.exe
- Size 12.4MB
- SHA256 d064eefc27c71fc8915e5cce8d20f635030f4654d917bc1c7ac3f7ad869181c0
- MD5 255323180ff262691f1ce6a782d943c3
- SHA1 bb44ecfaa88bacf1669f0d662ffadbcc1ae616f8
- SHA512 08f3221ccec0ab01f5712b09dac9b5fa2e2a1701cdc35e8ae1f64a9b5cb864225e9221162625442f2deee4febae1c2fd0dfe62f1047f17ba2cce43051c6a60f1
- SSDEEP 393216:fdNH1gz1+ZUUG9NWpHYV6ohIBfqHts7UU2wPb:fdZk1vUG964V6ysUs7U/ub
- TLSH
  T1ADD63370B34ACD87D51209355BD1AA3A89E2AC290DE1695BE3C3BF0DFE325153B4E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1
- Target
  System/albumart.w5s
- Size 38KB
- SHA256 c68698231754f25e069ca761d497b3c683f8166a81da076d33fc6d7489ac3769
- MD5 d7af4c04092842e5b4994ebed8bd05ca
- SHA1 391add7a9bb2fe52da52e436b8f9c3c4546ab9d3
- SHA512 d02ca853abf9006c5760fc9e447633201c1d3e00b997aa75eaece259b42ff2dfa3cd4e63a87e4ecce97ccf45e2d2c0dff90d3f310d4e53de9d4d1cf32fa8b4ff
- SSDEEP 768:PF+wWxv3gxPuN8wRJRvQU5r+0TfAOmjvRz3MEpYiTPx3/AL:K2MfvQU5rAOmlJ7TPxvAL
- TLSH
  T148036C03BB00ACB2EB5F0334798952796ABD7531BCD59193E727828D5A74303F6292E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  System/bmp.w5s
- Size 56KB
- SHA256 91a1c75cd2a4cdc4a19f15e8061084ddbd9cf0fb2b03cad6d85b568254f58585
- MD5 076b8084cb144b8e395dea3d3191a414
- SHA1 72015b308c80a5955e68d256748af263c5edeecd
- SHA512 7b960d176780e558e152c33a0897dd4f3aa5e3fe8fbfcc64eaf73785f53edcb96ff2143b2ca58499c98ac20f6c4484e6110b1880f2cf84cc5902a4607d505eea
- SSDEEP 1536:/misprkNt3MpGylZQiWuXSSIafIOoeJcxWAigamd7TPxvq:GpIN1M/ZtjRoycxYgamdfxi
- TLSH
  T1EA43AE02AB4016B0CAFE56302CE697EE613FB6310BD0D1DB6F2D46D98A617C275741EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  System/devices.w5s
- Size 51KB
- SHA256 a3df6c40e8cf6f2765cd1bc446bb16aae858407656c7239b920d0dedd135d049
- MD5 86f1ec62db6e736f27d9a2732115f81e
- SHA1 79a3e2f46db95b55e2c7afa5411dbdb9ba92285a
- SHA512 5f00a464e77da7dc731e41ab29215251355a71552de99c88e8e4b294890f2837f9008ee14be3fb1c2eade3ff3917172a8ced997852813c4c834ffb8fa758daf1
- SSDEEP 1536:e+oQBtoP/GUs1JvfwZxhoZlPwaw7TPxv1w:e+oQBtI/Gj7fw6ZlPwZfxdw
- TLSH
  T104338D427B4080B3C35F02307C69757DAEBEB28A0EE08787677A576C9F61B43E916176
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  System/f263.w5s
- Size 45KB
- SHA256 1b18b6a3c03eb26eb89a2c5f0e552090a7073fe6db553622005081cc12b20bdc
- MD5 56f562aa73a4c3bfc542c43f27e62275
- SHA1 d5f4f448d58789b7140e06d7d401073931db9612
- SHA512 13da391b91d52197fd68c8a9f86db4a0ba0a60d3da7a95f7de0366d7e9309492c0a676482075aa561cde1baebfba1d8e32f390cfdbc9a456d55983207f10739d
- SSDEEP 768:e8uhz8/Uf5KBzOIsecP8iq6kkkkkkk87MhMEpYiTPx3/g2ha:s8mIzOdecZIT7TPxvg2ha
- TLSH
  T199236C40A7E08D32C52E03399CD397683378FD50AED2475B578977AA4AD33C27E6226D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  System/filereader.w5s
- Size 30KB
- SHA256 47ae2faa3fd9a92df816e43fe36dee412a1a95adc9c547f2bf4b54a3d1fb024c
- MD5 05fe16de167a516089ef3e96ad03f77d
- SHA1 c64357d9bfc7398110024cb13860d23d136b3a03
- SHA512 ad038ec5006bd3b8abf6a81ec851096fcc6a480fdbbff6c1f5271b8dc734c047b746521ee2ddf66ae4f914c943ab1db225b05b84481917f5f5b5f8808614f491
- SSDEEP 384:PtUIBK2vzU0du+Z6VvXxfGj01NxMcPHP5K3RRNyQH38E9VF6IYiTPx39JQRzvaVJ:PeId8+ZIZfdNOcPHBK3LMEpYiTPx3/d7
- TLSH
  T13BE27D62EF109C71DB3F0A3139D1A47E5678B9601DE1828727EE425C1F64383AF7826B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  System/gif.w5s
- Size 35KB
- SHA256 43f9cb8257a7f482f9039e8c4b86b15b5d5d03061e647ce75e2a95cd7386aede
- MD5 7f85166b45e3835e9fe933408795b1dd
- SHA1 65c400fb3528c64f2e85d651f7dcad3acda0e95a
- SHA512 d5009021d2a208eb51754a1ca77cb591b9618a7cd577bde5551d2a3133ad3a4271cf46cb8362109652c9ae10d3f2abcbc2029d9e9c35c0caff151095778dbcd3
- SSDEEP 768:K38l3WgROgVE3HM7iFO17uw1RSMEpYiTPx3/ZL:oa3WAOWE3HwiFU7u4RI7TPxvF
- TLSH
  T1E5F27D42EB2048B1E74F49757DD09D2AA93DBE523DE0C197B31B425D4B60383FF6826A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  System/h264.w5s
- Size 45KB
- SHA256 2141213600d7d2c9a12d98a324c8381ab7be8792ba57b7b6e68770adb1f40813
- MD5 66f906268252787285b860f8dc0cd68b
- SHA1 adbb65e3e28438896cb97fa1aa7a48e41eba44b4
- SHA512 0be66230cdb767d9c0b2e91503160a3be43b036e653da68ca748d103346cd121ca29890dd9fa986cdb61ffd7815633ec85a6dd4a322c31f9783ef0ab34f64f0f
- SSDEEP 768:Sr7hNOTgqfvkpst7V6+iHqUKAPWUZcKkS+rWiw9MEpYiTPx3/+:SrLO7f8pKRyvD7ZcKkS+SiwX7TPxv+
- TLSH
  T117236C52BB4008B5EA4F553428B54B7B9639B6A01FF086C37F68133A4FA13C26B7518F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  System/jpeg.w5s
- Size 251KB
- SHA256 df87f5df936c9da4ad87a50754bf42dd63dd58ebaf7cfa230ec3b6f5e111e0b7
- MD5 27b80a94170e65b0c9dcfb197c17476e
- SHA1 15c01f7833bd5383e6ef7bb2a5d46df67c338593
- SHA512 0ca7080b4f23ba1e120e9eb641931f50c71528e3a083f67f0252a6fb2ccc4a660dfbe8db99125fc271a81fd449d526d5e0c015b91d304f92049e714c3bbffe54
- SSDEEP 6144:HdwiYwAEEoe1AvOof2pd9VvvUsuojzb8H9rd1dp:Hdwpw0G2pd9VvvJ5zb89
- TLSH
  T1F4448D80EB9F16D9CD462571504EB97F5A342B2A0B34D5E3E2D03912F822BD3AE791DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  System/mp3.w5s
- Size 254KB
- SHA256 59f8c48f9130bd4fc475d2f3cac9700a550fbcb1cf346955777535e9ee61a9be
- MD5 dc512563b8bb0545b7420500d4d11af3
- SHA1 74f4eae887e33590cf24760e16e05a1ff4b73562
- SHA512 5940b675685103bec5eb7d752da6a6c65f52ed50b4c93f69e4a58a33d33736cbf40e3fac7aef443797143439165463d5a0c26c944bf278381616f73cdba28d4b
- SSDEEP 6144:M+FBsU1wpZzzA0/jyR3ZlGGX9trUG31SsCIf55eF3RGtBCPv:MSsbpZzzA+2nCA5cLv
- TLSH
  T1B7448D42F1D29AB3E9694D3C31667A2FBA385E048711DFD7A3902974CA412C25EFD3E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10
- Target
  System/mp4v.w5s
- Size 33KB
- SHA256 54630e2082c0200737951b4889e4dc1b78c0953b8938613b4ceda76e2e7f8f05
- MD5 90deb000f1b15d12fcdccbb2700148b2
- SHA1 c6f4ec45dcd849034858dc52f4e4f7a5fb56b0ae
- SHA512 3adb3673de921650788eefd1dc060c4a28298b1799a5a689c8f5c141f383d611165fcc56292704ca0119c252c00cec3c8bc5c022463e1f50a3060ad8979ad873
- SSDEEP 768:RHumjM/2KzY7N5gjdDxOf/pTa9MEpYiTPx3/hWe8:R9E2EEAjdDxOf/W7TPxvhG
- TLSH
  T11DE27D41F7505C76CE7F46303DE5A83A963DBA601DE0C3473B99039D0BA83826F6526B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  System/omBrowser.w5s
- Size 343KB
- SHA256 b4a0037022f1690fb53ebc5c5c6a7cfb0008507e4738be3e02204b7ed3b825e4
- MD5 6bfabe6e8a5c74da9bd03087a17f3564
- SHA1 b765d7b34cab266a568a53f4900c28cc8ed85e78
- SHA512 9c13da0745009d77a6f9de0604580df2739b72353655954878cdaa45b76d09cca02d17d57075255d260ff33547589074776dd21bb3e25ffec0f27a1391710ef6
- SSDEEP 6144:qiaz2RQfmpuvvZ1JL7sU2zonHANDg7hZnXzwuEcIUhf4FXrwm:bW2R0rvvZ1JX4+sKXHuFX8m
- TLSH
  T16C748D12B790D037D3B605312E2876D62BFD76B126F0C18BAF64AE0D6D61681CE293D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  System/pcm.w5s
- Size 27KB
- SHA256 a05041101eb956d84a55b53a0e706fa352f88329c201a1f3cc28be50c1d9f886
- MD5 1eaca7f7c932d282a57e3a7007ead9a0
- SHA1 57c2464f50ac115a7115de7f182e58d9aab3d14d
- SHA512 fcaea08ea904f765a7f3d0ffa7a1db569401c3762417c1734c03ed43cce5c239875d02fb4f3da1f323ecd61b860b4d0de19764fec7f63adfa3fffa658776860c
- SSDEEP 384:GAfZHVHTco1jTdzZqYrvM1esjhGUxojNOT+1NxUNyQH38E9VF6IYiTPx39JQ0i8q:THjDqQgemGUxWy+1beMEpYiTPx3/rXM
- TLSH
  T1A1D26D02F7505C32DA5F4A3039F5F936AA3AB9505DE1C2473B29935A0FE43C27EA426D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  System/playlist.w5s
- Size 126KB
- SHA256 103155f3da7c8709f910e44cc8e2766c56311295ada881b822d2a73838c265b1
- MD5 77609791383f1698436116376dc6602f
- SHA1 9a26796f529530f74deffe227cd30b0edbe228bf
- SHA512 548e92701eff43789fea86a8b58d11c40cfd0c583c1108de7395f397abc33d4985cca2a8a1a4033147d42bd31891a76b084e9b5824c272a2c40678bb846dd583
- SSDEEP 3072:BBP5HibkcbqcswziaNZLXv8DuxIXIeav1tR103PIchR3I7Afxg:BBPB7OqcREDKIXHIche5
- TLSH
  T119C38D337A549431C3AE02396D14BA55A7BFF971CEB592C3A718474EAEB01C2BD38613
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14
- Target
  System/png.w5s
- Size 166KB
- SHA256 049fc61bd20ac4f7f35793b17995e87125f7fe6fb030dd82dfb332a35fa60245
- MD5 dc8ab1f0b6d6465e9e7afe4edcaad9c4
- SHA1 8338f41c9e7a03a171bb658571f25f745e916cc5
- SHA512 563ed926e20a1e0b940132a9dfe4c8b44245beb9f4322f6a005ab2de0409a74213838210edf184d54d47ed3b644e8356d9ccf8b4c9c75d398f71ec8fb9802a16
- SSDEEP 3072:UOJUrXWljtcbv+pd1tt8WqrA0Pq2OO1fpWNTM8BRyHEuc6EozOzf5/fxA:+ri+r+pz6i2OO72FBRyku+ozOzxu
- TLSH
  T1BDF3C081FE4198FAE5920231A1E6577E1A35273E0339C9E793C4AFE49C523D1DA362CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15
- Target
  System/tagz.w5s
- Size 39KB
- SHA256 ef93ad573a472a8f3911c397561b30191849c82b272b58bad94ca3c2b6bf1aac
- MD5 7520160f5b1096cc86ee5914be0093df
- SHA1 4b36433e223dfcb9347e99c0a2dfe728f98e6d7d
- SHA512 d7822c45024b412d189efc79e4c95523062b670823924aafcf95d307424dfeed3e08f13854702e2dc855922e5163a8ab83aa1ce0219fd278bcc64867630f023d
- SSDEEP 768:nTIpD/f30jCG21nvE+23DjF/T8iuAiMfQMEpYiTPx3/c:nTaDd1B23DZ/TfLa7TPxvc
- TLSH
  T100038E219BA004F5F6B7853078D59C3B8B3C7E705DD0E183EB5A531D0E6A683BB2536A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16
- Target
  System/theora.w5s
- Size 69KB
- SHA256 e6df67b46bb761bbab7c35e15196b9bd460608d638fb98ab3dcf5cf6350cf97c
- MD5 e46065933226e807a1ee860c9470d589
- SHA1 53eb3063cd8c12b4c789f6fb45f0d700e04835a6
- SHA512 91fd91db1182e789bbd3bda91774966555c83b88cf48f4998f2afebf8faebd4cd91116eddbd3b84355aca55841a5c058f2ff474d9eb0c9ceffc9f89bd25f754d
- SSDEEP 1536:fFruV1w5h7LfsvhwMbj/RxvsftCKpWknUHylDJfgKqUk37TPxv4a:f14vhwMbj/RxvsTpWkUHylFgKq53fxga
- TLSH
  T110638E81FBEA54F0EC4A147D61AAB23B9A357B515B40C6E3D7C10933DE613C225362EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17
- Target
  System/timer.w5s
- Size 56KB
- SHA256 11f36ef9b88eaa687bfbde493b90eae06a6f343a3e62682bf30b2265f418c8cb
- MD5 24fcf1c33cda5418e211bb1140a1566e
- SHA1 f1deafcdb681e10cfc6e12dd8554adf698ef85cb
- SHA512 dcff03a2785b296455e6c16cba5e167e9d3fcf977844d59b3854c2bbfb6c24700bd2edd458b5c880845666614ef1c2165f6ac29b9321d3a58b65994f38b0c6e2
- SSDEEP 1536:Z376FBAXKEcIIdoT1cE15kYo4AmH7iwDoEKb7TPxv8+:Z76MXKrIIm5cERq3wDoEefxv
- TLSH
  T11F436D137A50C076C74E0330ADAEE569DAFEF2914EF083933F180B4E5EB5580BA66157
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18
- Target
  System/vlb.w5s
- Size 143KB
- SHA256 4f47745052851e444a31aa95c3a1bb9c39d4b2f44d0b90fd724bdae44e7b2944
- MD5 cc4d87252bbf40fa005ce8d63e441533
- SHA1 ee030d473fc1b48863fd848de99906cd9a7411f6
- SHA512 e6c3d0e73c019b5893be8c8da9afc55a22a9ffab85927f76fb7fb3aba712407e645a24a31d3732006691fb9b33b1f4dccca4e38232a7fbd7e8e1c01c3b86330c
- SSDEEP 3072:DbqJYrC4SmK/X5JG5v5lgFTVgK739c46knfxD:DbqJYALDG/+FGKT9c46K
- TLSH
  T1FBE3D602B6809AA2C529427998F7D3766335FD80DE424F8B73D4B71D7DE3260BE92394
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19
- Target
  System/vp6.w5s
- Size 170KB
- SHA256 aaba95e7649ca5ec5a4f3d2235e3da8c16c9aed7bc41bf93ac31552a959cecb7
- MD5 b1c9cf23f13bcbd52de0690322d43872
- SHA1 c4ea62cc877499327520001df8526d5dc35cb35d
- SHA512 4f6a22da8bcaa5bba359552d0c99a7b0c600feff1375a7f683f0238440fca4be88d026510a453d75e22d9b31caca20bc90cc7774ddc932eddc2e03e035594e05
- SSDEEP 3072:VDmoBIkXPGHK4WKHWWFmWhfF3J4sBJbTBJbWBJbDBJb73KEDJtdrnsdJ4nOfHHIm:oiWgOBJbTBJbWBJbDBJbLdrnsdJ4nO/r
- TLSH
  T118049E81E37288C0DD1B883988BFB39A797D2B64DF49C2D35A507A2DA4F93D3127111B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20
- Target
  System/vp8.w5s
- Size 521KB
- SHA256 048f4254b629b53268227789eac8f66e7ae49923066b0ba5ddb9de4ac48548c8
- MD5 926f5cd31950178fcfffd6147e1f45d2
- SHA1 21a7601fcc6550f4f51afd7e2423511e00ae4cc2
- SHA512 595782d4942165e71b399aeb050aedcd213b5f855af8dc90787da8640d91021a8097ca591222ec47956dd332496fdc3b202f41ebe788c7e472f093e729d3fa2d
- SSDEEP 12288:F6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwwwv:F666666666666666666666666666666V
- TLSH
  T1D9B48D92B0827412ECAD4CF186FF7CFB695D26396365ACE700E9128894775C86B30F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21
- Target
  System/wac_downloadManager.w5s
- Size 41KB
- SHA256 9b61e67b4ec0a23b47cd6dcbac977b14a0ceddf707356aa6600e8da7d05f1c1e
- MD5 a2414e10e84c083a41ace5451a7b73f0
- SHA1 45f80fd9473c7e62d8ba7a8f406f53fb581d3f54
- SHA512 cb63eb0127df511c6a5344b43fb5fd58701eb59463fff1d0cf0ed3d0174a7469707386d2998f166245501d6c3ad38db808c7eba2febc5cb798da07269982845f
- SSDEEP 768:zNNQQQfnVupJhJyhW4c/lhHysKmBlMrAnMEpYiTPx3/z:RNnQ/OJLyhqNhHysK8lMrAF7TPxvz
- TLSH
  T15F138D1227488876D72F0374FDDCAA25CABC76916DE182E33729039E0F963E2E624157
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral22
- Target
  System/wac_network.w5s
- Size 2.4MB
- SHA256 5d9c8988d693aa07d6ee4786dd0f5ce18596c8fe8dbc0be12c622e90d8458f44
- MD5 3957543085927fa091490d0207776769
- SHA1 0819e4afc9d7a8af36dfd0d657dc97afd6224f1e
- SHA512 2fae39fe77c1e909958b690a999aec41584ac56a39cf37144015193cadbe85fc75886f97b71e7668744c404ecf9b15c7d3983e2c7f03b04793685822378a7356
- SSDEEP 49152:bp2/eO9v40yIk88CK1zGzIWaaqNPRIy5z3PyRkn1O1j:bp2/FBQlAb7aIytQ
- TLSH
  T120C5BF07FB4285E1EDDE427912AB577E0D394A1C9728C9D38BA259ADDC325C1633F388
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23
- Target
  System/wasabi2.w5s
- Size 51KB
- SHA256 2fcefbca651857ec1eddbc3e582bc5aec40277dd4c00118290ac934a4a6eb09c
- MD5 e64e27195d6c298276d518c3bdbfdc9e
- SHA1 ecb372039808d0d4aad7a5594e71ccc36291f124
- SHA512 9139052d756c1553196c3d00fb534fd33fcdddde3e4e6292af9a6acc9eb2dc6fb48b47db2e3f25a59852ce68d1dbda05ffcabed777471ba9c2de8964156e8346
- SSDEEP 1536:DKDe39Ti17MwluMhrfSZLNaM7PBjK7TPxvYe:DbFi1RlsZLQM7PBjKfxT
- TLSH
  T1A1339D12771488B2D71F02346E246A39E7BEF8205DE153933F9583AF0F71AC25A79207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24
- Target
  System/xml.w5s
- Size 147KB
- SHA256 97bb43ec63da60aef22d74d90fe0e5ce8ee572297ea9e574a1ae6448fa56aafa
- MD5 91de47ab88d6c916a1ab699fe2f391e1
- SHA1 ec22fed17e9d43c81e422e9d4be4bde764cd3bc1
- SHA512 f680eaaa5e384096fa55aa607357fde305b7246837ec2591070f5f859ae8900307037be563736eb67545d2bca06b445ca31c4f42ac9ec46952755ddbda14a16c
- SSDEEP 3072:3gP5iDT4bhD6rv/iMWNpZxtQFoemOxwEuwHt9mspHtqhfxG:3m548bher/kT7vemOxwEuwXmspR
- TLSH
  T1D3E36C51BA83C0B6EACB0134246553768638BF6207FB46E76F40B4BC99237D32D757A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  System/xspf.w5s
- Size 34KB
- SHA256 dc640a235055beb7f41f1486cb93a1fe573ed409c2376a1d9045b7ff44ad4285
- MD5 fda8232f8f897b479f57b2dd36c161af
- SHA1 279db399b66ea3b0d9db02dd6de4cb27e17e24a0
- SHA512 1213e842b934344d8a652f5fbf0c49f840493c68eae9c4fb65cf77b0d69f0ad27a50187a76a4ad05f17d82728298df0b92245b0c6ca1d95544554bdcbcdb907e
- SSDEEP 768:i6jn/ha7B6S1dG7UpskC2FMPoMEpYiTPx3/zRaX5:i6jssS1dGQpskC2Cy7TPxv2
- TLSH
  T1ADF27C82B704683ADA7F557479D8D5269D3AB8311FE182D3B388432D1A603D6FE3436E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26
- Target
  UninstWA.exe.nsis
- Size 87KB
- SHA256 4b8c30e7176aff0dedec03cd6392cf8e3535188119de5e11019bcd628ff05719
- MD5 f342749c76ca36d382423f8ee48f74df
- SHA1 6c2a0eef6ae8131ef67c6cf12767d3d76e6f9a0c
- SHA512 fc206c9dc5498c8546bdf2aca3b31fdff9e5b537091ad15a4fb866205576899de2f685d3881d34720bf24ea76c9de5f505929ba6af417b6a781cddcb214937ae
- SSDEEP 1536:e2bU7N5NvUqDWdSkKu/956hm8zXPcesgVdz78ki7fXw7V11CQ8uhKH:7bUpVDMChm8zX5f78ki727+uhKH
- TLSH
  T18B93024E428CE774137609395CB4653E7259F02B8AD1042BDB7B98558162F7B8AAC83E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27
- Target
  fmt.dll
- Size 110KB
- SHA256 020e642a7fd1260415ad722c61a5ff54cae0da7818d0e5922318cdea984a2a08
- MD5 e43dfb3414b3ce1312bcdc6d2429de48
- SHA1 2b371025e4cdbaacf4085777f3f1de1b01ecb7d9
- SHA512 d8d39244761b12e9de1f0f78cdf93ead9f88c8f12461ce0c793c10a76d0d7a28cc8ae2a2ee151dbb39e681df3dbe6b5bc8c3de1879c71c420adf76117f7be63c
- SSDEEP 3072:Gz5zziRPCuNqoJhHpVbqjeuCfLQi4SjfxeEg:w5zzitCsJhHpV2jTqLQi4SkEg
- TLSH
  T19EB3AE20BB5284B1DE4D21BC5435577B473B61148F628EDBB3A8A7799C243E23E3319B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28
- Target
  reporter.exe
- Size 230KB
- SHA256 69247a011e63a72b83def3112b9cc6cc01f55434d48a9356dd595174c8060923
- MD5 5a609d5a56e7b1ebc116877289555130
- SHA1 08aaf7dd14e3a5c3a93b7594f5c14d05307cce2f
- SHA512 433d59ae441b7b32883a3544761f2b808adf1ae4e181a4720b353d40ec1427209411a95741d61a8b2fdc68679a4d516cfb1cd5582984ae1375db86258c65bcff
- SSDEEP 3072:hxB9Fdpym7DoZpTWgGF2saJzV+t/A6lg2ZuwDDqswMJpG71UMKszcGQLT8j548Df:5dATWv9Y5+t/AZxw/qiJp0UMRxD3P
- TLSH
  T1C2348D1176E08432D5630A3159F4DA715A7EBD305F609AAFA3C47B3F3E702C29625A3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29
- Target
  whatsnew.txt
- Size 114KB
- SHA256 17a5266d08a92e89c4d8dfe172b87cb2a5e1c22f95bc3a36a5144d4771bd38f7
- MD5 a8d88e6b05add489f70a3e2327f728e5
- SHA1 c970817c164c96696f5677b54f0dd5b30324323b
- SHA512 71467311c1a5d50b2e918d48006880d045b2ca3087fef4f2780ae3bb0ee075ed3959d2738ab57d0096a728927df60822e952369697ce5ad8194a41610b9e08c3
- SSDEEP 1536:pSGK8A8pOcSsz5Y6xfkfim/t8AxogCNYB9iYapsL28n4Ri0BbS5NTkeANHn7g2Ed:WWT5xfsyAwcWviIbSHT67g2oZv
- TLSH
  T147B3C739AC5F3231B6F314C65FB61127BA65B274236183F06CD9829C7321D28D27B9E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral30
- Target
  winamp.exe
- Size 2.3MB
- SHA256 addf561fcdc496c1318ddc3586352aa7f6c1feb684a9e8ffa285409beac5b446
- MD5 ebebc6e8f41e6c04dd661a14761d75d9
- SHA1 9762e726a682f54bd9606bf08867a6206a1a39f7
- SHA512 9493e6576fe94e4ee8aacbf10389acc21a0298eea07217c53fbfe6b87ba2dd010c9f0081c5574ac3e896720e7e9b4683adb2dcaba4231c6a9fbb738181081c3e
- SSDEEP 49152:oeZzeha8PFAq7ZOXPu+0etr6rlDEEv6l4xxxM444xxx/oo7:PZzeh3AqVMXrklYXqxxxM444xxx/oo7
- TLSH
  T1B7B52B125165C472F4A688BC34A9EDF2CBE72C68BF63E8877530342BDCAB9C169553C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31
- Target
  winampa.exe
- Size 90KB
- SHA256 89f8ac681f8478b21ccdd4a6d891c634dfd84b8e37ae6f93fbb69c836eda0f55
- MD5 eaf431f37ade6d6552772723d5cb2d56
- SHA1 8c6cc08e28a715dabe0f46ef15a49f808ddb3abb
- SHA512 fba5e30634450155ac4da9cd32c152257325faed52f687a831d37b8f1c43f06c265312855af7b2804a8f5bacbb7c261f51d80b5a1c4d1c5c8ccb49f9318eb51a
- SSDEEP 1536:Asa/pAQmWxVz7MW/UXFue/m7lDj7TPxvZ:AJJmy57eVue/m7lDjfxR
- TLSH
  T19D939E42F7909D16CA290E356AA2D7344636FC347D20814FB3D4BF6F3BB6346691A12B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32