Overview

overview

8

Static

static

3

KeyGen @RdpXL.exe

windows7-x64

5

KeyGen @RdpXL.exe

windows10-2004-x64

5

Mass @RDpXL.exe

windows7-x64

1

Mass @RDpXL.exe

windows10-2004-x64

1

NL Checker @RdpXL.exe

windows7-x64

8

NL Checker @RdpXL.exe

windows10-2004-x64

8

NLBrute @RdpXL.exe

windows7-x64

1

NLBrute @RdpXL.exe

windows10-2004-x64

1

NS2.exe

windows7-x64

1

NS2.exe

windows10-2004-x64

1

masscan.exe

windows7-x64

1

masscan.exe

windows10-2004-x64

1

winrar-x64-600.exe

windows7-x64

1

winrar-x64-600.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NS2+Masscan+Keygen+NLBrute+NLChecker.7z

  • Size

    28.8MB

  • Sample

    220908-sb6zraehb6

  • MD5

    889aa05d18de87b1cbd0da2beeafef78

  • SHA1

    cfe447b8ca28d39d2b05ebf545753e2e4f2122a0

  • SHA256

    ba15d38abec4911ee029dd02847ee89e8e0a42ea7f7aa9b18230b9463133a8fd

  • SHA512

    344642880c1f2ff6db48d4fc89c62bc5e4cf07c5134aa894fd55b3af35f71377b5d9602b0617ac294ef4c8bde96d66520567b05a23679ea9da3e2b017e016ed2

  • SSDEEP

    786432:TDCvlsOlBhyyr2CZTn233VDEw8xbWFGoddA2ddI:TGvWOFyJM2nmw8iddI

Score
8/10
pyinstallerupx

Malware Config

Targets

    • Target

      KeyGen @RdpXL.exe

    • Size

      2.5MB

    • MD5

      62b039b2af7bf5f6abf35ef903024300

    • SHA1

      4ae220e451482e839619c2e927752468e0eda8d5

    • SHA256

      83d7f6eaf7fe075503ea6a0bc726633c34595a6eae7edd7deab95ab4d4a66fd5

    • SHA512

      8abcf2fb422465fa578eb59e2788317ef88360551b675c964e03475a865e22dd4b86550bb442c1823fa72de059cedb438cac34538dcb291ccdb22fd34ee5433e

    • SSDEEP

      49152:45U/Jdf39XFINkWr5kkYe6TdOYz44rcaMJIsjOO/ry3X0EdNZgJAxGEG8CZaFD:L79XaH5kheKdX4cjuR6q6XTNTI58Z

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

    • Target

      Mass @RDpXL.exe

    • Size

      334KB

    • MD5

      7a6990bf78f3e2e835d3be85a2fea4ba

    • SHA1

      9e2760e0c13d56cb744262b4fdef67e17ee08571

    • SHA256

      37ff328175acd45ef27d3d339c3127a7612ad713fccd9c9aae01656dfbf13056

    • SHA512

      ba2b8cd80613bff44c1624d6a17bae797b81fb53979f6a901850dac5e824483513cd312ff8a5aaa9d5eb3cf5c825785a7a53965692d2fb6274d22b6e62f9735c

    • SSDEEP

      3072:eaxe0aX5Cw9Q56z456zB56zuIXk89V756zM:nanPj8X

    Score
    1/10
    behavioral3behavioral4

    • Target

      NL Checker @RdpXL.exe

    • Size

      6.6MB

    • MD5

      f794d41bd5843006837d87610667110d

    • SHA1

      b9ed0177c1e0a43ae06db39bcfc286e41d4e5668

    • SHA256

      bb0051be3e9db6d8299477ed7ff9d1d178d98513ab6d6d4f06b860bfe8cc229b

    • SHA512

      815a1459a457ec2346ee004c61f54d37c43f1c569d378b0258817d615f3c06aff549267a695958342306b248e655a1d2243280438c0fd3dce761dde84539e540

    • SSDEEP

      98304:Hlr1P9bFLyi1e+MsSQbbIRnRMoaUMnGt0QkTt2eaaqsszacnZrmtgtXRJK:HlRP3yi1nTcReoaU89vRlsDZrmtoRk

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral5behavioral6

    • Target

      NLBrute @RdpXL.exe

    • Size

      10.8MB

    • MD5

      8fd87240d8aafa875f27281c742632a5

    • SHA1

      bafb115cad58fea63ef2a95e876eddd361165823

    • SHA256

      78957058f061ee1521f4d764912388d138eab9d57a1f3f6618f6f50f8f2c43e9

    • SHA512

      272505e017302133306c551a5221aa9e7c322428c84f0cfb368298c3945de58eb1776fa270d30f522b7c12f936680b4936c6f18e4491fe5a35546e575c7684e7

    • SSDEEP

      196608:Vo77oOvM/lYe06PBSaqTLvgjn8Asdfc9Jsv6tWKFdu9CABMoVuCAsdf:Vo77rGlYe06Z7eYsdE9Jsv6tWKFdu9Ca

    Score
    1/10
    behavioral7behavioral8

    • Target

      NS2.exe

    • Size

      125KB

    • MD5

      597de376b1f80c06d501415dd973dcec

    • SHA1

      629c9649ced38fd815124221b80c9d9c59a85e74

    • SHA256

      f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446

    • SHA512

      072565912208e97cc691e1a102e32fd6c243b5a3f8047a159e97aabbe302bddc36f3c52cecde3b506151bc89e0f3b5acf6552a82d83dac6e0180c873d36d3f6b

    • SSDEEP

      1536:Vc4Kvp6PWy/6oU2cpzLWJst+cYsu0TXSkdlgNPldqxFktvVg49jvvck1y40sWjcu:Vc3GJQ56et+cT7SoeNdqbMfN7TId

    Score
    1/10
    behavioral9behavioral10

    • Target

      masscan.exe

    • Size

      232KB

    • MD5

      c50f3b0b23dfe5c66561bb9297bf7bbc

    • SHA1

      5f14241aea174608a7c85127fdad042d7382277d

    • SHA256

      de903a297afc249bb7d68fef6c885a4c945d740a487fe3e9144a8499a7094131

    • SHA512

      33c557c53b4f65cde67bc0f6a7952822d194e0da262aa7d44c1d527ed300043ad1c06002cd42e69ad98ad2c7b62aa98d66ac0aa211ddfa97dde3e737da3f768f

    • SSDEEP

      6144:9WQaNTimmz/EkPt1xeHP9mCeswbjnK6swOp9cL:vMTuz/Ek1eHP9KPf698

    Score
    1/10
    behavioral11behavioral12

    • Target

      winrar-x64-600.exe

    • Size

      3.2MB

    • MD5

      f23c099f805e851adca53df8f54318c5

    • SHA1

      a39b96f0b50cfef01b873b819f05991d37713d86

    • SHA256

      d61a8532f713407bd80a5099c818bbed391620e3891af00a68ef584e33be247a

    • SHA512

      c161d760070a133f249fba8730fa7268435b3c7f32f5cfa59ec228f3c7a94e915f0a201749e234df0314f1b436d8d46365bf1a7fc118a9b34e8f7419cb556b71

    • SSDEEP

      98304:vRCBfKEsFUweKrScGn3Wdiqaa9tZnuSkDGqRgajpx:vRJRSlWdijsZuSktjpx

    Score
    1/10
    behavioral13behavioral14

MITRE ATT&CK Enterprise v6

Tasks