c68c727a565790abd67a5286e980815478170782d793eb1b24947f9c6737e3b0

Sharing

Copy URL Twitter E-mail

General

Target
WinZIP80.rar
Size 2.2MB
Sample261029-wrtadadw2v
SHA256 c68c727a565790abd67a5286e980815478170782d793eb1b24947f9c6737e3b0
MD5 67a332f32ccdc668e9eaa18d43c7d9c6
SHA1 b3371433502450603c305e7ae51b68f802e31de7
SHA512 1dbb4ca84ede28345a794a4f8b5692dfbebe8a894b96932f4f8f607550ac97689d9a64f718020c193ad11d7b763dfb836f97c09b543e68cc9b02b4c65ac75427
SSDEEP 49152:RGBfWvV96yzCdxx+iNWeigk0F1dySA/88m+vkKq2HjtRfC6fAmJK:RGBfWvV4yzCdxx5NFzHdOG+lq2H5Ra6a
TLSH
T1F8B533CF0172DBC47894FBA9973DCD043473BBD8FC28A8616A6B1D0315B8167867A636
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery upx

Malware Config

Targets

- Target
  Key1.exe
- Size 3KB
- SHA256 5560142728ce4d75a703d5577b09bacc105022dcf7d0e2a3691116369faa0a64
- MD5 2f6fd8528f144e325e05430dfe2e30f6
- SHA1 01c363b4e056352f341329240de9d2e56b74cfe0
- SHA512 9ccbe5b03673e6890144a177e67f3c5331f5e222de8904b3fc1588be47220dbdfb741f993b5ea09110c8e9550c6e2f59ba221c65b4508d461c977a85e212ae3f
- TLSH
  T15661B6C9BBA60A63CBDF023E071AAC6137A8624043BC6FD64DAD91DF79CD345896C604
- MD5 SHA1 SHA512 TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  Key2.exe
- Size 14KB
- SHA256 623182e0fd8b5897bbc1958970cb2697e3362780751b23a12a6d286b8fd74227
- MD5 43d51b9dd66d57a57622f4fda39e3fca
- SHA1 edbdb78f7eab5c656267a11b68c76976490e6f15
- SHA512 fb606eaead5eeaf64f9633c53e78b606077c3a8eb34fbda500e0f27639b2f83d39e14b2a73ec9b2d9dcd9f3627d5ae3c393b57d5d3aaa6d490ddf507ff566dc9
- SSDEEP 384:eYITI7t/T2KjFlmSreggT76qHXhr6+N9PfBHyndTQ:eYI2bTFlmSreQq3sOxCM
- TLSH
  T12262BF37FD1087FBD8CA12B08096F52593295C758175C2CF52F4186B2C68C68EDAC3AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Setup.exe
- Size 1.1MB
- SHA256 790ce78f05a97b590552d350063a830e11891378981efd0f41d663c3ebee19bf
- MD5 3a9975d3a693418e785d3dba401e23a5
- SHA1 0e52ebfe2a3f861a67e296d1be86d537787405e8
- SHA512 9101871637c8929bd4d2ea5b3f4f301740a25c58cf583abb706df6915715d3a1e1d53bec7aaddd3ba9377559de0613223fc01eb90437642ab22b3451173e7bb0
- SSDEEP 24576:aGqn++MsJsAbvGo0mwJ/2b53C/DvPw1k5Z5mvUyGself8hc:aZ/MysADORJeS/jw1k8UyGFd
- TLSH
  T18435239A6483D2E3D06D15B999E09D1A8B35CD972522CBABBF06F4CD9F766C00D3301B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  winzip80.exe
- Size 1.2MB
- SHA256 d59a38dc0d9b42400fa18a1122fd0b9c02b550926c7f910f79a6ae7aeb64a2c3
- MD5 d4455019d3557811d1a52f7f8d775adc
- SHA1 7f04b466c5d5eb6ee2af0fcd4d36f4076dc84dbd
- SHA512 4fbdb81de3c6fbee5654a2999bf1ee85e84e8b5b5d0b9016b1ef9a3a4c9bd53f2bd35b9edf5ea33b5e8efc57c5481fd9b9c185423302d61e9c4cb7d7af7ed128
- SSDEEP 24576:AhfOTzScFPT2x9Bmthy9OVBCEogzo12UCglybcXYW3CGfNOuG:0kSWPQ9kts9u1rkEMlTYrGq
- TLSH
  T12C453321A2D24176FC825BB0AF71B6A7D33FB5A092943C2FF5346C7D09C97E92A10746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

UPX packed file

Loads dropped DLL

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8