abb30b0a70e39de39ce0790c6c157fd04bcfb998705ec1672fe8070ff2d34573

Analysis

user interaction
yes
max time kernel
149s
max time network
143s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
24/10/2026, 09:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.bat
Size 9B
Sample261024-lsdk7sg15t
SHA256 abb30b0a70e39de39ce0790c6c157fd04bcfb998705ec1672fe8070ff2d34573
MD5 b0001c00a961b45a4d467ff7b0db34f9
SHA1 93bb6b09c9007ac568b39a77f4aa10d5dfc59fb9
SHA512 3930bbe5b8936800736cb965e98f54eaf1e18218e865441f2ceff9002b23210c35867acef6a97f7491765701cede7ef82182410931cecd83fa5d7b121918c500
MD5 SHA1 SHA512

Score

4^/10

discovery execution

Malware Config

Signatures

Drops file in Windows directory 4 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Panther\UnattendGC\diagerr.xml	UserOOBEBroker.exe
File opened for modification	C:\Windows\Panther\UnattendGC\diagwrn.xml	UserOOBEBroker.exe
File opened for modification	C:\Windows\Panther\UnattendGC\setupact.log	UserOOBEBroker.exe
File opened for modification	C:\Windows\Panther\UnattendGC\setuperr.log	UserOOBEBroker.exe

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4744	cmd.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FileCoAuth.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\.bat"
1⤵
- Executes a command shell one-liner
PID:4744

C:\Windows\System32\oobe\UserOOBEBroker.exe
C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
1⤵
- Drops file in Windows directory
PID:3372

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding
1⤵
- System Location Discovery: System Language Discovery
PID:2616

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BlockReset.3gp2

Path C:\Users\Admin\Desktop\BlockReset.3gp2
Size 460KB
SHA256 2c8870db83b959835c5f0dd147bd224fa14efa0f65161e09d907fbe9a83daf9a
MD5 1f99cc8604fdbe0959d926213136d279
SHA1 99d5f7d16d8196ef443e46e6095c0521594dacec
SHA512 a4388cdc2c61b6b90c0fc4866dde1b90309ac012ae009ffc3b66777413881c672c6c4d04eedd4f6b8dbd1be135e263365de87d0cf623c7e632c604081cf8541a
SSDEEP 12288:LVDA9upxml+cH2CnqaxmXGoJY8KauOBwCPp0dx2ILQ0Rc:Li70cWCn56DafauOBPmx2yQ0i
TLSH
T167A4232EF30D518806586AD8A0E3D7EAC26069DDD892627A25E90CC405539DFFFECDF1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CheckpointConnect.aiff

Path C:\Users\Admin\Desktop\CheckpointConnect.aiff
Size 491KB
SHA256 1c2430fe8ecf30480bc5ccf3dfd7cb1f394ba87cad4535b8b2141b4820eda843
MD5 3c62de7237bc553362e2e910906fa3e8
SHA1 8bb844d09ac603e5916bd9006f4db04a7b31308e
SHA512 ac4ed1b4a691c35475cffb275c2cfb8a154645df7292d052385c6de38957b6c7e9aca84918c47f312673d516fa086b2998171584bdd20e08a0b0518089e9f22b
SSDEEP 12288:Y1nF8dleZfFuzkZmDzfcVbJMNmPFcG3C4w:YlFwMdYh9yFcB
TLSH
T17CB423A12825B7949717F4B2CA00C2935FE343BAC9BEE452C52BD1F55ED4187F3181AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConnectNew.bin

Path C:\Users\Admin\Desktop\ConnectNew.bin
Size 737KB
SHA256 3e9b82d875f0ffaebfeb47dd94bc1563cb36cebcd2439683ffe592a8323c2163
MD5 35557bbca506df40cbdc5fb808ef349b
SHA1 efc7b0780133af052a7cd884c1c19dc1ebfba7d4
SHA512 b8ef011f97ce9f8322b51032bab90c3701353908a18fae9d92c77bc43598e1e445350937246a3c70c37f9ed1e6fe565eec92b1450281c06f8835827522d144a0
SSDEEP 12288:/qR2Qwj/6xitdLSrn+1qqXCfHxgl60I0TDLb8F5vkx6NGxWIsQoxMEpMM:/qQSY/LHqqXEGl6WLb8rvkxPGxvpT
TLSH
T117F423BBB090B1D7B717EC97B05AC4B0F897ED100F48619189FB573DBE139461914ACA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertToPublish.xlsx

Path C:\Users\Admin\Desktop\ConvertToPublish.xlsx
Size 9KB
SHA256 5fa8d34de127ac2b34a225f33a79724de2200fc6859d101c0afd2fdbe44234db
MD5 5b846b40b7fad42135f6a40fc47e1349
SHA1 3df8b46d45826b3781edae4a62c8e1650faecbda
SHA512 c904333ac665ee1b726312afd8204c62e2493bad744bb6865ebed48fd4c0d110f4d42c1be5431cf6a814ba72c252eb1a83bc60dcd2b980bf13098daf9aca2209
SSDEEP 192:wc8mVE/OCN8xb3UdJfIbYUaFUlbVvevUqzQXpS0dp7E0Jaoi:wc32OCU3HsJUlM9z6pV1E0Jaoi
TLSH
T175127E59D671553DC63BC83E908B05DAB65E20808B037D87B950FA2E36412D717FF29E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DenyFind.eps

Path C:\Users\Admin\Desktop\DenyFind.eps
Size 307KB
SHA256 8d137e15a2c015647c81f35124b1baeb899cd1d97981e839e57fa70a3da7ad65
MD5 cf2ea277f71b44815c44baec0e81435d
SHA1 8da3921294457c45b9b57e2e72ff08f2ebf9644e
SHA512 5a8e1d90ee670d337dc55bbbfe1556a443cb4f506f0c56143849d12db1758cc16a7e4f628011e3363cf770b6e33cad86a734f61ecad295a46879cbf063c32405
SSDEEP 6144:lUNaIQlPOf8Ha2vAdzUzenJQlK+aV0EcUL2wF00N3FeaFfWj6:iQX6bzUqJQlTulcUL3ZFeOY6
TLSH
T11A6423D745936B63ABE892BE91C7E739D4E64E8A05B531C430F635021EA4FB2035FC89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisconnectClear.docx

Path C:\Users\Admin\Desktop\DisconnectClear.docx
Size 17KB
SHA256 cfe0039483c2cb12c114863eb42dc41e2867926979a1f445eeeff489c581b73d
MD5 21b55bd2135ccbc433b60b31c135e1fe
SHA1 39fead98e7a0cfb1dbd8bf48845084f5440bead6
SHA512 bbe36ea5095f3543e08d3555bbdb7dccc8f4b2523933e18a44c911c02e2c0dd28ca176c6ef2ef2e9eed5ba74d5fe78e2ca225f8e31d9377be6d1926eb1c63082
SSDEEP 384:aL0J7Z9nzWT0muYFAYQt/dNxt/ZtNNCb85IFH2ncFcS:pJ7Z7hRxllNC8It2S3
TLSH
T14C82B035CA019421C5A34A3DF01EB1F6FA0696037B15D48B268BF7DC5FB9D931B17509
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnableRevoke.001

Path C:\Users\Admin\Desktop\EnableRevoke.001
Size 767KB
SHA256 7c6536ac89d886f9b241a23ec42075cbe2bc75df5e7609a3dfc715890e4dd6e1
MD5 be57167b36703861a8bda067c72ceabb
SHA1 b98fe45bd2e22251f6f0539b8dd5a4382ffe46d2
SHA512 63afc8d3760cd38fe8a46c9b096d32b4c008f7b537794e968b7d740623dfb4a16beae248afb129c3c512492f4bb9eef39597764698d6818adf79d66312d7748b
SSDEEP 12288:YfgVWg16pTrikpQdofz1YUQUMV9ncNWQ6khj4Euf4z4VY+3bIewvf/zQ1l9tX+:Y4Vrq/CDcNkkhj4EuAsVY80ewvf/zQH6
TLSH
T121F433447106AF432A185A00CF6CB9E036CE6E3944F316D1985EA67B8D7D2137E7A4FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnterDeny.docx

Path C:\Users\Admin\Desktop\EnterDeny.docx
Size 20KB
SHA256 b07034b024cfb4f9ba581d917ca15568740de64301b444a148f0772a9d4a42df
MD5 3a8ee6b7772d5dfb907d8bbf5e4618b2
SHA1 9762bc6a5b971a81ca5f7d59bd304a452c548eef
SHA512 b5317fa2d702222e73a137bdd630154d7b64df884b51c6ceec4acf0f550a02c8eaa11aaa5065fc790a20677bc8281909b85e05be2b2a7cbc3210f8cb06d5d5d9
SSDEEP 384:aJM3HRgFf8Szawgpf/2s5jj/E/061pXYkdNxt/ZtNNHW4IFHdhP9z:aOzSzabGs5jjcc61pfxllN24Itrt
TLSH
T1F192DF79EC98A510FDD31A3DF41D31B6E03D0681BD03A98B311EBBCE97556462B831AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ImportInvoke.jpg

Path C:\Users\Admin\Desktop\ImportInvoke.jpg
Size 337KB
SHA256 c07a6a5e47f25577b9ad09ba1122d7cca3ba3b8f148d524a857c3c6859bba03b
MD5 20f505415f0a6fe5f9dca1d8cdbf6ad1
SHA1 080e7231992355defbf6e0b71690b2976743e924
SHA512 b3fb3f9ef73a687e2b26e058106fbcd76aded4f64653cf870cd1a664e4d6ea7fd442c0e9e4e7205965eeb4655ace9a3ec4ab43a38a3fa5d3067fe2e5d8bdb85f
SSDEEP 6144:0j+YGr73w+PQCHKMMSf2qzhxp+4S56UgsDF9RnLlIB5UKKKFs6lY2YF:3PVRMSZjpw564F9Bl4KSllYRF
TLSH
T1A67423CDB60EB46EEEFCE6941CD5897B0FD4B340A5790850DF166C286A078ED83EB502
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JoinSearch.eps

Path C:\Users\Admin\Desktop\JoinSearch.eps
Size 368KB
SHA256 f78e0c2195ad9f58e5c4d1c2b3be33b297096c2edc716f54ee9e39a9f13c7244
MD5 7d53dfb6c83db5253d240d913711aab5
SHA1 8cb22b53d76046372aace6dda4cff9952ad6ebe3
SHA512 04f2cc374fddb4158fd45ab9e4cb11dec5d5308641c9e9201329c827212c86bbf43d64dcb045716bd0073fbccbf35273bea126f29cec70566a5d590f179178d2
SSDEEP 6144:leJFMnR2+rZ3PauLAOcp0cT4bbzj13jXX2uAFHzonjYSbwLd5Iuk23K0BYb8sX:3n8+rwh0cT4nzjpj2plon09SupRmbb
TLSH
T1AE8423B332A8324C3588EF5FF6DD2261D4159A94CD67766A799ED0C71381A80BC7AB30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LimitNew.vsx

Path C:\Users\Admin\Desktop\LimitNew.vsx
Size 583KB
SHA256 95b22abd4d0e9c99a7c735f781a37c784c3778f6b5e28511bf519386a233325d
MD5 eb3d11a355db341bdb0f38b20982b889
SHA1 b29c5737defed05ff3e7789eb48e765a2107998d
SHA512 3477a5d0a5b5287344e4ac96b892bfc5850d9398015a9840bd60a75e8705141b25772503510cfba81baa0aaddf4b552ed54c486c86ded07bb570c41a5c3a3600
SSDEEP 12288:6w7tn8+u7Chab3FhGIx/HULgIAbPf+e8wlXRo5VfzObDMyKkMB:6w7t8J7C2iIxvKRAbh6fugyKJ
TLSH
T1F7D423A245B6469A18859B10C444E8E83859C69D851EE7FDC4FB0B018C7B7C8FDDABF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft Edge.lnk

Path C:\Users\Admin\Desktop\Microsoft Edge.lnk
Size 2KB
SHA256 fb7e36029256a626dd89b486358378ae7cea262912e90122f895e12be7e7b997
MD5 652ee4e54c1bf22ff6bc6d4895131ce8
SHA1 4baa4c09e69fcb71d9c528bf7e201ef755d46742
SHA512 56b5f98776eabb7bdd547cd7fb2bdb62bc481b783324ee5278358038fca35a585c778852405e5ec5f24084942aa5bdc702fd10c1168d602a3289b514de79604c
TLSH
T15641F2056BE60715F3F6DD72A9B32B21DA37B806E9184F1E04C442050D63B19D96DFB7
MD5 SHA1 SHA512 TLSH

Submit Download

NewFormat.dwg

Path C:\Users\Admin\Desktop\NewFormat.dwg
Size 675KB
SHA256 90c2271ee08538d87df96a4e5916dc2b786396d0bb8970bf72895eb2df857bdc
MD5 b713c0500bcfb18ae09e17b297c35a17
SHA1 08ad5d0ac32876b442f9cacb7aef7d85e1db8176
SHA512 ac828911dd788fa4a319aa700f290057b25441e61425c87b74a341be691de58147bbc652b13a6770df3c828721d75e3cfc8f1af47738db39df57bf8812b1ee18
SSDEEP 12288:hZkYXGUzfrmDLLQ/cWY6qQICnLROIjqZoVtq23+2+mwU/fm36ZJiKO0IFO5XAM:hZkdUzf+Q/HY6/IC1OIjq9jXU/fm+JiW
TLSH
T1B8E43386046DB329C5A771F6DE6BDFCF254301ED84D2279976414E02D2B2B3BA689C70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OptimizePush.pot

Path C:\Users\Admin\Desktop\OptimizePush.pot
Size 522KB
SHA256 c2cdce5d9ef55a7688031f1aa19064072d23d247caeb33d47ede081ece691ffb
MD5 d79ccb7cec32bbd07dcc952b6250fdcb
SHA1 cafff6755fecf592011d212ba1a2b79bdadcef58
SHA512 edeae031e997e041d1990b6a3fe55a7709014888b019925d4533b0ff2d39a326c84f5f5a7068666eb4e96b8be2a373263f3906ff08d0741dfab15b40fa44d0d3
SSDEEP 12288:HR6uxq9ehnkix3D8sHCbXDR/aaHCWMoZS7cscdSKRV:HxqC/x3DbGzfHZM/cdSKRV
TLSH
T131B423033EC56512A7878A6D4C2C8582959D71EDFDBFC8E938250E1DAC6F7E012366CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProtectResize.mpeg

Path C:\Users\Admin\Desktop\ProtectResize.mpeg
Size 645KB
SHA256 b8c608691d70d72b816358902917aa17811d94acacb27942734f49801059f556
MD5 725135f056e4ba5bb6dffe6af7dfe987
SHA1 197763a28769a3aa8b554e9b6f8e24d564362764
SHA512 05d7125af2c53a65baabaa729e402ea0780705803701e250b7238caab3b41bd5186f984ba96fa350d984c842a8e3ef3619f311f7e1d7ef4c30b6b504f0e8138a
SSDEEP 12288:p0K9buNi0k43IYp6HQo5u+Q8PvY2PB1Uv7hXpbkLBM8u:36k0lpno5uBKvY2XA7huBTu
TLSH
T1CEE4338B20AC9FCF94940B9AD736FD9BDCD4CAD125B801D50E12EF353866492879DF88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RedoSearch.wm

Path C:\Users\Admin\Desktop\RedoSearch.wm
Size 430KB
SHA256 b6c342bb4edf782e10c58057c8112689f7643eb576a0d87c835a2a87d8df73cc
MD5 2fe8c891ae7ddef5e97dc3058e4000b5
SHA1 8a7e2481024af7ec8d401d666518e9f686824214
SHA512 a7637ef2db4db074798d75df5b4659272f16fb2942a27d5e70e61887405f030175dc858f6b60fa59021da76bfa74d6616e934c66575c668de174d606db52ffd9
SSDEEP 6144:eJ17+CYLDmyO24KDv8I72jJVzncUfV6vyKHWaGomzPgouVduC2/wxglCt0OOv/x:eTYDmCkm2j0UfV6KK2aGo1Vujg3cx
TLSH
T153942348C27B83BBA061140D37B4AA1E53FE8B0E739625A48FD5B36D42DE37315EB814
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RedoTrace.vsdx

Path C:\Users\Admin\Desktop\RedoTrace.vsdx
Size 706KB
SHA256 1ddb7b086d74bcfb97743af23521e2ff4137557ce671fc760c3f705ed947f7ba
MD5 06e52c2fcaa99c42e67d403d17a6be8f
SHA1 1e18a4407d7a710d0d916cd8a053d472ce73dd7b
SHA512 cee2f967aa313ac514331b1f0277df21f54eb618da9811afde2e02b266ab596ba5f9d8d00cd883ddef57d8205b015c48b2d19517e0b5b4ac77e1e4e1203cf187
SSDEEP 12288:hs4pOgLLxoIjHwHosk9jnoxgAahLCVLZnWj4zJOz/EgvPZpJiLWFuyzoXK5T+n2R:lCIzwHhktnoHaRCVLoj4k7PDEaJzFa6/
TLSH
T1BEF4330C2242BFDC8C761E4C5F20A286E4A0D56917B501125FA75B2BDDFEBE62E7E640
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RemoveInitialize.html

Path C:\Users\Admin\Desktop\RemoveInitialize.html
Size 614KB
SHA256 2fd1870d34c6cd2785faed59674ed3b3850085c124f0be077d45046cbb4fce94
MD5 469050675101a81c6ac4518b9f2bb965
SHA1 71bcec9291649bb00909abc9688baebdc3f4d0d7
SHA512 045d9bf109712edce7e6ce3830e08902f1cf33571b040465b1e0ab821e5df4b50aa96c882c984068e3a1e567af012ee8099e308bd34f950514fa1b9b886e7d9a
SSDEEP 12288:lB5DnWr0ApkOwDHbxYCP1zHJPc9dUsq0XR06dfhco1s1++7p2:pLWIWwDb5P1zpPc9ustXjdfPOLN2
TLSH
T141D433C379AF11274B59D22DF3D34A42C2B62F641E618E4ACC98A7C7907978E6F187C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RemoveRevoke.raw

Path C:\Users\Admin\Desktop\RemoveRevoke.raw
Size 798KB
SHA256 fb066feb889af8b935151c0a3066163205b6a24aace13a2ba733f38570ce4fe7
MD5 0df92045a8202efe9a5c4b4140ac5a7b
SHA1 1194d693f1fd6fd3fb2e81529920dde83a5c5c6f
SHA512 d2260f45182ac45ba6d760f99c80130b957f6cde355c1c41e0f1537b77f9c23227c686851880692ea20f4591adc0de89d607fa4f46618732519b447533239541
SSDEEP 12288:ibotjIboTDbrCoM00cdzek4dqr4t24iOxEvJzKl3jRSc5PGfElIMvfdWWi/i/6:iUtj5Tr9M0Itq40tSoV4gEN4/F
TLSH
T1DF053362C8FF09DF7E42CB2BEBB25C1692458E31B7E56CB16016B3EE9C1B7441A4D520
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RequestUnregister.aif

Path C:\Users\Admin\Desktop\RequestUnregister.aif
Size 1.2MB
SHA256 29db91135a899aa79852c1bbd7c8c94ecc702b2172ee5ccaff78ee10f804b55a
MD5 e49707998eb4eb5f1a842a4631302118
SHA1 4fd26d5b6d615fddf2558344f19e48d01041c780
SHA512 9b313a484be4c89e98ecedcbca5c826ca629501640b75d606f712d98dfd5b96100f992f2bce487f12249ad3b7d7d769f464d75679e27747c154ef92f12ba9ed0
SSDEEP 24576:F00u0wX74TfRPqNfYXFc7/nkqphwXtxWa6QnseKOMG9X2qG:F005wX74L1CSc7sqputF6r6PG
TLSH
T1F3453353EE1E382F25256C4E75908B53FBFFC08A029D8F04D124EA53EEBE82995B51D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkipMount.pdf

Path C:\Users\Admin\Desktop\SkipMount.pdf
Size 399KB
SHA256 0066799a86b9c7c455578806646b57a7f89971ad88fb9aa837b9d8be0aa51737
MD5 bf057255364139cc1600418c38dd29b1
SHA1 2483f4cda04920fe8d89afcf49d1233a35048f5a
SHA512 b37a3e01a642575dd765b6d652a084b43023d61f1800cdccc163c77c761738aa7dcb5063f9447b1e1e31fdda79992e38b46c26337f58445db371284a018f8249
SSDEEP 12288:9PnpRf6GVQAni0E8xQLkP/SDE/M5oTjR3A2W:PRyGpi2akyLIe
TLSH
T1659423F68E30CC4D24D4E1D5660D8323EDB9E2B83E1EB7861F48694D274592B9E9B133
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UninstallConnect.fon

Path C:\Users\Admin\Desktop\UninstallConnect.fon
Size 552KB
SHA256 9c8960e97a7ce156bd7f919c8ca79cda46620c47b300eec7e70658fcfe316221
MD5 5a32941bf45dc7d97633629103226608
SHA1 70b7ea55e713e1485fcc9e2e1415195be4801467
SHA512 2cc898fd114a1d566e9c5145ae6426da8fe9b1e9fe882dcc7308c69068806429ae18404abf89659168fa63a4c7e043be75fd8089ab5acde0910c0f396e4011a3
SSDEEP 12288:YoYViR6V0cZr2G1xs0btB2E4/V4Gjh0vE9XqdZJgQ9zy3M793Wr1MWDDj:Ynt0e5s4tB2E0pX9aD/WeWDDj
TLSH
T109C423E74DBA1431DA36EB7A45E728F53CCEF23012B815F28334CB69D6D05DCAA65091
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnprotectRestart.pcx

Path C:\Users\Admin\Desktop\UnprotectRestart.pcx
Size 860KB
SHA256 4f04a75bc497412e3bc035094736df098b8aa80a4b082910b586baa7a14e490f
MD5 53b0aeaac37e40a55c32e3f59f75c532
SHA1 ee6cf9b21ebd8e6c9f01b26df87e58291664954b
SHA512 d87ce1e332de63f172d0fa7e493886307e955469fceb107673d1c9545bef14a46af5a72562c426d803cdf2905a01ebb9c508c8f7ef39f7ca8887233b5cdb753c
SSDEEP 24576:Ks3mJZXOJvjQPN8MqDd6ua1clUdsNuxhDYsAGmFMU0Y:KrAJbQlbqDd6uccCdscOFMU0Y
TLSH
T101153385114EA56CF1B3E05EF9234FA804135F35ADA483D0DA918E7DF29D42472EBE5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WaitSend.lock

Path C:\Users\Admin\Desktop\WaitSend.lock
Size 829KB
SHA256 6431c2930570eec7fb06b3c070198405b1e5371bf95c6589593d5cdab2aa8016
MD5 48d239d71f021dfbef49c39312efe251
SHA1 41b69d31b3db75e75bf22c686336d9b322e42047
SHA512 c77a3cbf80b7739d682f17035917984c0c071f0bcba8a2b07a54a72b8880ab479d4020b8b3208c7b42414040879cb080d9e25f747184741923c3ef5baeb39536
SSDEEP 24576:LQOLL9cfh1hNW3IwHorGgLe7Jy7GM99W63Q:LQOsh1hcvU34MW6A
TLSH
T15C0533F2C56FA691BD7CED8091F5FAC7EC983924229A308D72CCC359FB5914A1920D68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WaitUninstall.docx

Path C:\Users\Admin\Desktop\WaitUninstall.docx
Size 15KB
SHA256 c00f2f48eccfe70f39aca8853aea2b68fd25239cfb9396236af34a167f88eb50
MD5 ad77c02e3b8623f73c1bbe06cccad2b1
SHA1 7d82545412772feb589a8a956745cca397a8a591
SHA512 3dbde903c86e77e7a33762027c22d48d831df71a125789d825eff6fe50a8f3a346da9d225e11464567b29926c43b2d7eac2f82688c739c756298b240d5455911
SSDEEP 384:aSEEm7wD+Sv81gdNxt/ZtNNqcaGIFH2QS0:3m8D+P1MxllNhaGItjr
TLSH
T1FE62AF7ED64219A1F6934FB4A01A23F6E50941013B82E9C7304ABBDF47A2F1747135EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Acrobat Reader DC.lnk

Path C:\Users\Public\Desktop\Acrobat Reader DC.lnk
Size 2KB
SHA256 45c67c22a026ea933f80c651be6995b984d792a3a6cc03169117a2b1383aac97
MD5 b12d833afe0e40ac1852176981f1187a
SHA1 837c81fa184ac26d6b3b63d8da86e80b377f0335
SHA512 b312f000cfbde75e313569943853c7feff158fd8eb9f78c906fd0c39793dfccda9c74b8eec93183d73e802f37f331f97abe3089df1528e6e9851b6ae7c46403a
TLSH
T15D41AF504FE71A46F2334AF79BF30A22A6627C50A2454F1F144842570EA37009899F3F
MD5 SHA1 SHA512 TLSH

Submit Download

Firefox.lnk

Path C:\Users\Public\Desktop\Firefox.lnk
Size 1KB
SHA256 e0ee17b3d1633eceeb41cba046de4b60703b567d98cef54f82f8518e4be662dc
MD5 3896a8a9772b274e32f748707eaa2085
SHA1 744c77ec3da88d811f4667ee3133cb9dfee1bbe6
SHA512 ae7c16491e7ff868d618caf872d5f52239b4adf143c5c54c777aa48371f68228577ebdf7f63054cf5bddbe32ff6d9ac62085f2adface3fe636844549ced3b13b
TLSH
T194119C0107FB4996F0F785316B7267635333BD01AB1E172EC08823D14DBA2288969F62
MD5 SHA1 SHA512 TLSH

Submit Download

Google Chrome.lnk

Path C:\Users\Public\Desktop\Google Chrome.lnk
Size 2KB
SHA256 130806bfa154e33f4d23f523e0be2d71136934e5e92312f38baee58aa0c75d57
MD5 1f30833da00adb939189d4afbbf47bee
SHA1 091adea8a93e962982f32c8d6692815ef2603617
SHA512 589444cd782b3d6d02e0b2882a719a68568e650e1230b1e4eec4b5fd018c597cfa0fc45f4397db29b6fbb09ab0fb625f56c0f03e0ad4c17d9393680857e2a973
TLSH
T15741781137FE1A58F2E38A326D333B210F7BF852D61A0B2EA08892450DA191549DCB73
MD5 SHA1 SHA512 TLSH

Submit Download

VLC media player.lnk

Path C:\Users\Public\Desktop\VLC media player.lnk
Size 923B
SHA256 5d3fa66a242db2fc65d72084d9e3fe70006e8b8ead4e0406d2f0ca5e72863e51
MD5 1f1de244fe3435aad421567ceb7760ca
SHA1 28a2f596d1a6c258619c06cb12ee32c2b8cd1eef
SHA512 1e1ef391625af86913131eb1e410c14f542f46983136061e72657edf386d067592f61fe8cfd37df1deb1375ec9a21e2addfd957354040e75c2b912a7cf5224b2
TLSH
T1E111D0401BA31F4BE3A789F16D360B204F73F4644A451B1E588C124B4E79248DECDBA6
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads