5963260ab8a16a88b0ca927b469d83a28920e87c4ca2cd6dbcd7a7f3c2170bcb

Sharing

Copy URL Twitter E-mail

General

Target
Luxembourg-Swiss-French.zip
Size 128KB
Sample261113-lwt3csts2j
SHA256 5963260ab8a16a88b0ca927b469d83a28920e87c4ca2cd6dbcd7a7f3c2170bcb
MD5 de0657a06bd5241c128d6446a08c00c6
SHA1 1c12ea27c379f01a768db658a21c317f82f14553
SHA512 8cc6a7e3b22f112a8ec9f7480bf8091661e98e453427656c115205e07b56e74cfdc95fc6e89e88a8d9711a45dfb14bfd53774c7ddd247539d0f69caeed448d75
SSDEEP 3072:IOGfSWmNFZDZdp0pD6R2urs11w634PiSxP65GSs1u:IdKFTldM6R2uYm6Qfu
TLSH
T1D4D30269D3C0BEC1C1BBEB7E3A789EDEE95223415627B5490A1D03F6C1562C5B900BCE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Luxembourg-Swiss-French/amd64/aqlu.dll
- Size 7KB
- SHA256 de2970c5119038a5bb6eca0bce2a5f58b8772cfc29d0d464882edcd100e41d9f
- MD5 a72e89afe2bfba00a96ecd7fdbb2b72c
- SHA1 522f520c22d71294e9e12aafdb3aeaa780085167
- SHA512 64dfca60c6d5e6c413535ad8a2f8f0b1ef8b68564a1429de261a7a44a407acf1b3251fe723cac577325d08786b9c23e811e329d1e742f6fb982271f6e06db570
- SSDEEP 96:xifDX6s1+fpvRaVlV2tl3Mt54OuH4h6gcl0GT/WWvP8vv:0bX6s+RvC235ONTA/WOs
- TLSH
  T100F14004EEF4908DF2BBCA38A9B75D26781AFD224032CA5D1180152F4D7B3455F5AB3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Luxembourg-Swiss-French/aqlu_amd64.msi
- Size 128KB
- SHA256 329aaab9293d0a5cbb8e8f4c2a84c0ec8c021b3a569ae5b2d14ed86f542a8c17
- MD5 2048e5caf6dcc83f07fd7ca458c2420d
- SHA1 4feaf7def55df642e1a2861ce03257fdae8fdb65
- SHA512 ff0a0a4abd131a371642fd187527d62e4222a5e3a02f3ab2de49e28a7b5b138d6bfdc2ebafe6908979e90b69c19f5ea738b03b2dfe682d815798f9c040d74b23
- SSDEEP 1536:yx8fEfvIjLBjvg2g+VXJ3lIMW10i2AinCNu0Vy:cjXInVvngCPIMViG
- TLSH
  T154D36D0777448333D5C20232452FD7E29F3A9CA84B728513A19EB26D2DB2BD4E6B72D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery persistence privilege_escalation ransomware spyware
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral3 behavioral4
- Target
  Luxembourg-Swiss-French/aqlu_i386.msi
- Size 128KB
- SHA256 8c0aef28463a14c6caad05473a35fe1bd6eb2e2a23c529e1b5f2f3857842af0f
- MD5 726e5ca14c69b6b1124ce53a6de2cdad
- SHA1 745eee4ab508c098b48b8ae65b39efad3c841497
- SHA512 6d5909fc193e25d66d74a8678351f38f0c07e1d3dcb21cdc68c35bdf82d2d5625a5b27a98d02f65fe0a2040ca41f3910c892c538bc5fecb663731e9943c3e7b0
- SSDEEP 1536:Dx8fEfvIjLQvgg+VXJ3lIMW10i2AinCNu0Vz:1jXInQvggCPIMViv
- TLSH
  T17AD35C1777448333D5C20232852FE7E14F3AACA84B724513A19EB26D2CB1BD4E6B76D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

persistence privilege_escalation
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  Luxembourg-Swiss-French/i386/aqlu.dll
- Size 6KB
- SHA256 9e1267e512eca8531e193416e5b862e0692741511fc3cdafc90e3fad93b633de
- MD5 8fb5c6f102508892cfcf3d150780af45
- SHA1 c9f96dfc90fe8d1c68aa4ca8f80dbcda0dac402e
- SHA512 ebfbc938183c5c1df29851754a185ca71d5f6216e0d8843ea88f7b3dbbc9f8efe6670de5922de9ec41ffca246e97db55c1b835a5a27ecd4af577bf2e7246f900
- SSDEEP 48:q2joAAgyncRaarbIIRMaMltvxMSkO3HYcW3W3jHk+oWURvE671rDE082SsqJiy8j:Mcoa/2tl3K32QlO67VEmH/9n
- TLSH
  T19AD15180DFF5805DF2FFC63C59B661266863BE2291F2CD5D0580195B486F600AF1EB39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Luxembourg-Swiss-French/setup.exe
- Size 67KB
- SHA256 d75f3530e538227d297618f4dd401e08ebb76f4a4b6f49a80adfcb0e260437ca
- MD5 06d4479b76c418343445cfbf8b43b067
- SHA1 971cd6211de5dda55738f0ca1a3af5ddbf130fb5
- SHA512 8ce784629950c0891104564a88b2d8c56a6049d5b251cbb68b7f0d6596ab80324c65431a6da19aa87e6f4e101f00e9d22c072792762f7a0a8cdb29d209058f3c
- SSDEEP 768:bb3so/NiW2QNJHea1PPGzmSn03wVuvz7niEDXTe+7mL62dmXYwDoCAeMqEoVW0eR:v3n3GzZGbDaGg62kYwDoCAexEI6f
- TLSH
  T10F630652E64A04B5D9F2433EE9432A01FE66517F424133077AFE849D2FFB114836BBA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Luxembourg-Swiss-French/wow64/aqlu.dll
- Size 7KB
- SHA256 258af58643817c39ecbf804b36396cc35302d50390f18627c97f1afd3d2df484
- MD5 57f8c576cd08044807d421e35822be25
- SHA1 75496dd5d1a473313c6898552bf03f17797cfe7b
- SHA512 63bebf1d8982936a34eaef6479d3673b324d14c4ea36042b8af35f54394606b5933fcfb557f61bbc8175d556f5b3489d11803a019d08048af1d94fd0056d2be6
- SSDEEP 48:qyNoAAgynkyarrIIRMaMltvxMSkOt8ah69elmnVwI4qq6Nk+oWURv9a671rDE084:2PaP2tl3L8WtlmiS1ilO67VEmu/WEX
- TLSH
  T149F15300DFF4A17DF2FFE63CA8B25226B853BD2241F5D95D0180199B543B600AF5AB3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12