227b3d978a554a7b5e4174f8872b3d113319f7429ca2a9455f6c5a3a2f0e090a

General

Target
Notificação 137.0.9451.77.zip
Size 32.6MB
Sample261022-wyds9set3y
SHA256 227b3d978a554a7b5e4174f8872b3d113319f7429ca2a9455f6c5a3a2f0e090a
MD5 81ab5f401410f1e6332fe1946b438975
SHA1 2731762b6195a6995474787a98e9fbf41f30cb6e
SHA512 5acc2edbdfcd08f85b7a4bf56c49c2a9e25665159051ea833f6a4c034940b4b985d9c7450e7f94229799b5235529d46fd552a0604e54f899468b1dcb7287b11f
SSDEEP 786432:Jx6Y56HaTEvENC6t8BoLromIIKryqUyKW0Rr8P39X:JnaaTCKC7BoImHsXKV4v9X
TLSH
T14777334C7FC7E265E0CE7D6C2AD20100A4B52DD4D7C9DA2D99D60BE538839C788B2F99
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Notificação 137.0.9451.77.wsf
- Size 17KB
- SHA256 7036e1fddc6cfce884f38ee4438b41a9108c43fba3249155ed253894e1a081ee
- MD5 2a8a52768239404e102f4c7a89b21d1b
- SHA1 0e9801dd0982021d5325cef04d1fbac3b7610dba
- SHA512 093e9c330597576771ce19f9e5c1bd093b9696b2634ee1dff1071bf962f170951fee41e3ca810000483c02d42fa82c70448d80a9ef82e092efed7c71e1338d02
- SSDEEP 384:AdmthLA9uvCkDUtb37MOFzIB/fWejFuncAc1IwJAOusfzEZ/8/OhHolYPlRuNdN:AQthLb6kDUtb3wOFzInWejFrACIwJA7k
- TLSH
  T10982526BFB254B3983A7859C18A20C0CF4849763015564ECFA8CD5A84F4EBFDA1E56FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion dropper execution persistence ransomware
- Download via BitsAdmin
  dropper
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2
- Target
  _/R9QWWOB57Z34X6AJ/4NG93ZHKBAQFMT16X9
- Size 32.7MB
- SHA256 49ccfc82a358ce919122caa98641bc4a70a697678d9acae1ed6ae24f0f82bfba
- MD5 005c1573ff2fd57186ba8e606d82d6b6
- SHA1 54683bb887e2272902b01d75ceacbe2f89626c37
- SHA512 2d9f2c5d7c1d8eb41fb951b5a430d7cbf0222bb70abac61a23a8effcdffef968b86475ceb9fac4addc59477df1c91b9d82d32ae1162bb1425aae8748730d5132
- SSDEEP 786432:VHQQlUn63sLgFYVgz+9N8CYo4veue0GeW512tzhA:V/M63aKFz+YCV05GDMJhA
- TLSH
  T1247733057FC3D231E0CE6D7869920000AC763DE497C5D51E6DF9CB9D29B2AC788B2B99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral3 behavioral4