Overview

overview

10

Static

static

10

Predator T...t].exe

windows7_x64

1

Predator T...t].exe

windows10_x64

engine/cla...hp.ps1

windows7_x64

1

engine/cla...hp.ps1

windows10_x64

1

engine/cla...php.js

windows7_x64

1

engine/cla...php.js

windows10_x64

1

engine/cor...php.js

windows7_x64

1

engine/cor...php.js

windows10_x64

1

engine/cor...hp.ps1

windows7_x64

1

engine/cor...hp.ps1

windows10_x64

1

engine/cor...php.js

windows7_x64

1

engine/cor...php.js

windows10_x64

1

engine/cor...php.js

windows7_x64

1

engine/cor...php.js

windows10_x64

1

engine/cor...hp.ps1

windows7_x64

1

engine/cor...hp.ps1

windows10_x64

1

engine/cor...hp.ps1

windows7_x64

1

engine/cor...hp.ps1

windows10_x64

1

engine/cor...php.js

windows7_x64

1

engine/cor...php.js

windows10_x64

1

engine/lib...php.js

windows7_x64

1

engine/lib...php.js

windows10_x64

upload/css/index.html

windows7_x64

1

upload/css/index.html

windows10_x64

1

upload/des...app.js

windows7_x64

1

upload/des...app.js

windows10_x64

1

upload/des...min.js

windows7_x64

1

upload/des...min.js

windows10_x64

1

upload/des...ves.js

windows7_x64

1

upload/des...ves.js

windows10_x64

1

upload/des...min.js

windows7_x64

1

upload/des...min.js

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Predator The Theif.rar

  • Size

    8.2MB

  • Sample

    210716-d956wkzhqe

  • MD5

    acfb3fd9a6df3035f61f0d2c4aa92fc1

  • SHA1

    2eb807c990e4a8802b6fad09ae8e93bed30363da

  • SHA256

    b2da54c75bc68b77aa1fd4608711abac1f7d5a2e0cad9a39e75794b3218d78cf

  • SHA512

    fe5940c60bf00aa9f7a0daea15ef5f7679f1d5290399e8cf18cb73f7420717088c180c166e5d008df1271e198ad1ae2e1f91d664f4ccff4ad35719b463175948

Score
10/10
telegramrattelegram

Malware Config

Targets

    • Target

      Predator The Thief Last Cracked [XakFor.Net].exe

    • Size

      2.2MB

    • MD5

      f8df8488f2a0abb03b6fc03fa0c5d76f

    • SHA1

      5098b760e9bff46e836303f3adbb41551068f37d

    • SHA256

      c05350c96e4f3cc1536068dffed18756739c61923ec61aa86cdb989e032d9af5

    • SHA512

      5ea65eca3d71084638974f685353d467e588858c786a297568ae9b4e28a0e8f7e49ad967d9a4970661f742e9f52e32eb363705c0c4afdd68ff2f2aee2f1e1ccf

    Score
    1/10
    behavioral1behavioral2

    • Target

      engine/class/Requests/Requests/Hooks.php

    • Size

      1KB

    • MD5

      2c15a0a520b9a8976778a169ceebd919

    • SHA1

      b55339e6ca788b8afe92c256c179107cee803d37

    • SHA256

      5b9125bdfe8e4c8b9807ef7d93b33c31c7d445fb6f4948e2114acc269563f611

    • SHA512

      32dabea2783a8c188613f9b9f5c8c4508b7876773eb5d1f345e03bbca44335e1f2f68a555edae99127c47f8c6183b11f9abebd30f7b1bce6492f48c4143fc566

    Score
    1/10
    behavioral3behavioral4

    • Target

      engine/class/Requests/Requests/Transport/fsockopen.php

    • Size

      12KB

    • MD5

      1d21ee4a4f60ad1afc48f118483fb73f

    • SHA1

      fdfb56b74ffc66a4c93e103145635f861c167050

    • SHA256

      31281e71e9bcf327dc523a76f984a0108d2df66e7d88b747d4569adbc7c5fe50

    • SHA512

      3211aa236f0187c0114b7735a53bb96b5aad95b511f6ea637ce81c0ddcc161c1cdd1df5a177032449cb10fa1e77b179acab0ccc869c81d69cf7157a7337860d0

    Score
    1/10
    behavioral5behavioral6

    • Target

      engine/core/Exceptions.php

    • Size

      2KB

    • MD5

      1a6c88efd1e975ac4b502e8e30a2f2b4

    • SHA1

      87d1acd5a1294ec3f5d65705bfcc5ef04b5ed2ec

    • SHA256

      3e09bf597ee6baa83e28ad580662779b978d5a9965be14563b2eff3a2a3b63e5

    • SHA512

      91f833ea97bb3752f99a0950b47ad9accbac8cf893e5ddf1f7619beb324791e90bfe9b6f4f7f75e638ecbb9df9a638e1467f0a1cfc5190ee9bc2cd056a54d928

    Score
    1/10
    behavioral7behavioral8

    • Target

      engine/core/Request.php

    • Size

      13KB

    • MD5

      c93bd87d608b4d05453fae0d42b7fad5

    • SHA1

      c7299f7a3cb08bf93861e7f6eb38f710776f8af6

    • SHA256

      85bb190d927a5f1c5d305e48267fc21940d2b57e412f6cffadf18e525dab52ff

    • SHA512

      8787d361b8dacc0a573caf16dc81f65ddbe4e21024ecc81c4b57d4655f65c70f7833fbb78ea680874be5831cae648402be678b0f9fe2c68f9f28a982f9b723dc

    Score
    1/10
    behavioral9behavioral10

    • Target

      engine/core/Router.php

    • Size

      5KB

    • MD5

      34059d3807e0cc9bedda3d3a115c3971

    • SHA1

      31b7f258b74a59dd78e218ccde829647e2883cb1

    • SHA256

      01d0216e6fec1dfc93ee3152c896ad4850eabc05094ed811c6977dd2978507a6

    • SHA512

      4bb3f3428cdd9479029d2b934d084da6fd4d69268fae52e09021f055283296b9a0b44b81a64dd4d1ce9aa5de286ba4e0b69f6e985853a6ad6bdbc52f426f1e5b

    Score
    1/10
    behavioral11behavioral12

    • Target

      engine/core/encrypt.php

    • Size

      5KB

    • MD5

      ae66968d81bf8b3ac7f23cb07bac245b

    • SHA1

      eca9c294d3be8c2875efb494932a538a41c2581a

    • SHA256

      27c5d14e5de4ca8c7510627dd13e97c3b0f69b5d53f5b2b9fc03d6429885355b

    • SHA512

      2172de3596b73221725d4ffc10fe4b19bc751ea07d145ca8cfecac2f6a53211485e1087d8baecbae28387d6b695fe2da9a761be9f29defec49beb7fde584424a

    Score
    1/10
    behavioral13behavioral14

    • Target

      engine/core/getValidation.php

    • Size

      20KB

    • MD5

      49cc687d933ea54d4190a0ab04d7f210

    • SHA1

      6cd15cbc63f9ff92d1e9abaa8fcc88ef2ef80361

    • SHA256

      9715943eac3ad578889d04dcb7faf11ddeff9e9c5edf06c8eb97dc6214daa1df

    • SHA512

      a1bf6180c2a6fd2b7079f3000186152745eae3f02f09e3be56c0544711d270951403d3cfead4982a3b11c73d1fa1b78bd745ff686aae3a9b223f0bcfe9de6365

    Score
    1/10
    behavioral15behavioral16

    • Target

      engine/core/postValidation.php

    • Size

      20KB

    • MD5

      3b0b68fe3f78741a7efc1bccddff4727

    • SHA1

      96d09edfdd8b6f67fc64aef66b6fbcb68ccc9ca4

    • SHA256

      53b3819596deec414e1095e91c1f8556eea4a09404272d38ec14b538e9bcf8fe

    • SHA512

      dcac73e6bb1dc950db8aa3a072b2abc16e0714d832ab568fc4ce8054eab77bafddb76e8037ca9bdc62b8958bac347149b829999e9b21365579402e57c65bd8e6

    Score
    1/10
    behavioral17behavioral18

    • Target

      engine/core/uri.php

    • Size

      8KB

    • MD5

      e0fcc0f1f3928242ee22e12506c191e4

    • SHA1

      bdad12a1caefb5aaea4c13d7660e6fb386423cf2

    • SHA256

      513724f1a666dd8170b2782e108f8b9ed8078b3c7db14dc8ec1f229c986a12c7

    • SHA512

      1949318e9d4dfd217aac74334ebcc4a41c071e016129e8804a3de21645c6ad2bec78be67b4ff35e5188685ed9abff060e8bce5b457c2be0176fb760cc7e4a89b

    Score
    1/10
    behavioral19behavioral20

    • Target

      engine/lib/pclzip.php

    • Size

      198KB

    • MD5

      d786fb2f13786df165551ce18c190414

    • SHA1

      616cbd40c90fa43a42cc4cb147abf256971f021a

    • SHA256

      fa706550e977f0b7c19d6b5d182aa4ed6cf9dfea2b14846719dd05c4bbcaaef9

    • SHA512

      25bca96aa18814e1230f721591ce53324a9beda4505b690d2a993b89813b0f7d1ea7108aa26137c5f4579ff8f7bb7b4aff1cad258ea8ad8af8fa3d6bc2d40f08

    Score
    1/10
    behavioral21behavioral22

    • Target

      upload/css/index.html

    • Size

      123B

    • MD5

      6b37309700ffdd85eed2431b5dfd3bb1

    • SHA1

      2eaf914fe507a09f321684b8add29b94cee50db3

    • SHA256

      c703afa89e7517dd5020ac2960b7e14b44d4010ef02d5e0f6e34b9629935a3ce

    • SHA512

      79211ac08ef90a01c9ab0bbb2f2bc437b696c9f5b1193c1d98659428ea3ba5a1db7a6659d8b14f5c4184c577ef6caff456439654b84c986740e7a2a50bd92060

    Score
    1/10
    behavioral23behavioral24

    • Target

      upload/design/files/app.js

    • Size

      2KB

    • MD5

      1b79af73f521a501d3b788eba54a4375

    • SHA1

      61ca56596dd150642f3fc59d00ec0c244d0788dd

    • SHA256

      5cabcdd6bbe0db550606e3169e0376b1cc6a688e0af1210c1bfeef5f42c6437b

    • SHA512

      4701171c44d1d986fb7179dcf279cdbd38d0e08329215ca108cb9cc69f1c5054a83f6917d81ff83aee8984c7b474f61e59abe3afdf4f31a41d41c8c5a9677f88

    Score
    1/10
    behavioral25behavioral26

    • Target

      upload/design/files/bootstrap.bundle.min.js

    • Size

      69KB

    • MD5

      ef58fee438cd2da2c3b33ff6f1cfeebf

    • SHA1

      41a4836fc0253324e7e583905f47ba7194bac91d

    • SHA256

      13f578716138aaf01e3b930e863b46b6a0f33e77513b52c193c949fcf47b080e

    • SHA512

      53ce49ab8ecaba729e823bfa8153009d0c2d423a2f757cff0d03af428c6b0fa8f76867c30dba7900026e39d9d0c75b1e7ccf740fd28129242464647986b2dbb6

    Score
    1/10
    behavioral27behavioral28

    • Target

      upload/design/files/waves.js

    • Size

      67KB

    • MD5

      daec46621ce24bd483727b28f898e03e

    • SHA1

      3af899e7d14ae8b64e921b01942b808a1b81519b

    • SHA256

      07d7ceeece5addab399ec43c713970ae5935ac3c1053b0bca98cabd67a24078c

    • SHA512

      dd3661ca89c6eff4ce3c8c809004941f5c75595e6f90e22f898919105eec62773ed4a910e927536e6007de3cbce3485da7efc122f3639d2fd1ea0a8935e0780a

    Score
    1/10
    behavioral29behavioral30

    • Target

      upload/design/slideout.min.js

    • Size

      7KB

    • MD5

      4bb5425e886f09bd7c3acf6757a9aa04

    • SHA1

      7166ed307b771398a593fc3d4f1c5d93fbbe19bb

    • SHA256

      b7ecc9fe0f3f29720932349541d9e26ede1d95a0f173dcd7afff6834f796a9d8

    • SHA512

      180d5880d7bc3535375cc0cca1f513a5336a32c3d42fa56362073a3633944c0ffaa704c595398573fb64f8b9c37d70f7fe634665c8a4f64bdf0237953d31e2b0

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks