Overview

overview

8

Static

static

3

чебур...VE.bat

windows10-2004-x64

3

чебур...VE.bat

windows11-ltsc_2024-x64

3

чебур...NG.bat

windows10-2004-x64

3

чебур...NG.bat

windows11-ltsc_2024-x64

3

чебур...TE.bat

windows10-2004-x64

3

чебур...TE.bat

windows11-ltsc_2024-x64

3

чебур...ZE.bat

windows10-2004-x64

3

чебур...ZE.bat

windows11-ltsc_2024-x64

3

чебур...RT.bat

windows10-2004-x64

3

чебур...RT.bat

windows11-ltsc_2024-x64

3

чебур...rt.dll

windows10-2004-x64

1

чебур...rt.dll

windows11-ltsc_2024-x64

1

чебур...64.sys

windows10-2004-x64

3

чебур...n1.dll

windows10-2004-x64

1

чебур...n1.dll

windows11-ltsc_2024-x64

1

чебур...ws.exe

windows10-2004-x64

1

чебур...ws.exe

windows11-ltsc_2024-x64

1

чебур...ce.bat

windows10-2004-x64

5

чебур...ce.bat

windows11-ltsc_2024-x64

5

чебур...DE.bat

windows10-2004-x64

3

чебур...DE.bat

windows11-ltsc_2024-x64

3

чебур...et.ps1

windows10-2004-x64

8

чебур...et.ps1

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    чебурашка-запрет-v0.1.2.zip
  • Size 1.4MB
  • Sample261027-va6npsfv3p
  • SHA256 09c5a745cbec286d782f97c7ae2ed6226e8fd259d87ef358fc63b354cd668aa4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
execution

Malware Config

Targets

    • Target
      чебурашка-запрет-v0.1.2/AGGRESSIVE.bat
    • Size 1KB
    • SHA256 2f0d940bd022bd5ebca996d31978684cfc0bc31a572b6f8346c573ffed4a41d2
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral1behavioral2
    • Target
      чебурашка-запрет-v0.1.2/GAMING.bat
    • Size 1KB
    • SHA256 6bd5edaed053fb3dd685c8b9616ba51a540b320a2b92811973633f3c0096b7c4
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      чебурашка-запрет-v0.1.2/LITE.bat
    • Size 626B
    • SHA256 2cf40d26722a1a86dd8cad7dea873fafeb982e73f183929e6fbfd49007b86e53
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      чебурашка-запрет-v0.1.2/OPTIMIZE.bat
    • Size 1KB
    • SHA256 892cee9b9a260d8cbbd25f3565f5bdcae8e44f5c90b6c1a550f65cab68e2dec7
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      чебурашка-запрет-v0.1.2/START.bat
    • Size 3KB
    • SHA256 4cbd0433ca4868e149bc947a08cb52c1d0f641c3be29907cf4f51a335a148c86
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral10behavioral9
    • Target
      чебурашка-запрет-v0.1.2/bin/WinDivert.dll
    • Size 46KB
    • SHA256 c1e060ee19444a259b2162f8af0f3fe8c4428a1c6f694dce20de194ac8d7d9a2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11behavioral12
    • Target
      чебурашка-запрет-v0.1.2/bin/WinDivert64.sys
    • Size 91KB
    • SHA256 8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral13
    • Target
      чебурашка-запрет-v0.1.2/bin/cygwin1.dll
    • Size 2.8MB
    • SHA256 103104a52e5293ce418944725df19e2bf81ad9269b9a120d71d39028e821499b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral14behavioral15
    • Target
      чебурашка-запрет-v0.1.2/bin/winws.exe
    • Size 199KB
    • SHA256 affb4f69d2ea302a7abccd5325d81826e140ddae014f1e070bc4a6c0dd555188
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral16behavioral17
    • Target
      чебурашка-запрет-v0.1.2/service.bat
    • Size 20KB
    • SHA256 f28381e4dc15ee2775d5f3835cd1be90ceb41fee78ca5522dd58aed4d4ed9f1a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Start PowerShell.

      execution
    behavioral18behavioral19
    • Target
      чебурашка-запрет-v0.1.2/source/SERVICE_SOURCE_CODE.txt
    • Size 20KB
    • SHA256 c8c4243daea78902f7f7a4a51daa263ada366e54f82bf94ab5b2f25450133374
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral20behavioral21
    • Target
      чебурашка-запрет-v0.1.2/utils/test zapret.ps1
    • Size 38KB
    • SHA256 f31ced248fee999c780d1361d2a244ff2a63c7feb57f5678176367ef5d2b0e15
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    execution

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    behavioral22behavioral23

MITRE ATT&CK Enterprise v16

Tasks