Overview
overview
3Static
static
1thorse/.gi...sample
windows10-2004-x64
3thorse/.gi...sample
windows10-2004-x64
3thorse/.gi...sample
windows10-2004-x64
3thorse/.gi...sample
windows10-2004-x64
3thorse/.gi...sample
windows10-2004-x64
3thorse/.gi...sample
windows10-2004-x64
3thorse/.gi...sample
windows10-2004-x64
3thorse/.gi...sample
windows10-2004-x64
3thorse/.gi...sample
windows10-2004-x64
3thorse/.gi...sample
windows10-2004-x64
3thorse/.gi...sample
windows10-2004-x64
3thorse/.gi...sample
windows10-2004-x64
3thorse/.gi...sample
windows10-2004-x64
3thorse/Rem...se.bat
windows10-2004-x64
1thorse/banners.py
windows10-2004-x64
3thorse/enc...ode.py
windows10-2004-x64
3thorse/get...ass.py
windows10-2004-x64
3thorse/get...ass.py
windows10-2004-x64
3thorse/ins...nux.py
windows10-2004-x64
3thorse/ins...nux.sh
windows10-2004-x64
3thorse/pas...ler.py
windows10-2004-x64
3thorse/paygen.py
windows10-2004-x64
3thorse/payload.py
windows10-2004-x64
3thorse/updater.py
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
thorse/.git/hooks/applypatch-msg.sample
Resource
win10v2004-20221111-en
Behavioral task
behavioral2
Sample
thorse/.git/hooks/commit-msg.sample
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
thorse/.git/hooks/fsmonitor-watchman.sample
Resource
win10v2004-20220812-en
Behavioral task
behavioral4
Sample
thorse/.git/hooks/post-update.sample
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
thorse/.git/hooks/pre-applypatch.sample
Resource
win10v2004-20220901-en
Behavioral task
behavioral6
Sample
thorse/.git/hooks/pre-commit.sample
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
thorse/.git/hooks/pre-merge-commit.sample
Resource
win10v2004-20220812-en
Behavioral task
behavioral8
Sample
thorse/.git/hooks/pre-push.sample
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
thorse/.git/hooks/pre-rebase.sample
Resource
win10v2004-20221111-en
Behavioral task
behavioral10
Sample
thorse/.git/hooks/pre-receive.sample
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
thorse/.git/hooks/prepare-commit-msg.sample
Resource
win10v2004-20220812-en
Behavioral task
behavioral12
Sample
thorse/.git/hooks/push-to-checkout.sample
Resource
win10v2004-20220901-en
Behavioral task
behavioral13
Sample
thorse/.git/hooks/update.sample
Resource
win10v2004-20221111-en
Behavioral task
behavioral14
Sample
thorse/RemoveTHorse.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
thorse/banners.py
Resource
win10v2004-20221111-en
Behavioral task
behavioral16
Sample
thorse/encrypt_code.py
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
thorse/get_chrome_pass.py
Resource
win10v2004-20220812-en
Behavioral task
behavioral18
Sample
thorse/get_wifi_pass.py
Resource
win10v2004-20220901-en
Behavioral task
behavioral19
Sample
thorse/installer_linux.py
Resource
win10v2004-20220812-en
Behavioral task
behavioral20
Sample
thorse/installer_linux.sh
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
thorse/password_stealer.py
Resource
win10v2004-20221111-en
Behavioral task
behavioral22
Sample
thorse/paygen.py
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
thorse/payload.py
Resource
win10v2004-20220812-en
Behavioral task
behavioral24
Sample
thorse/updater.py
Resource
win10v2004-20221111-en
General
-
Target
thorse.zip
-
Size
6.8MB
-
MD5
b4a56bf440bce94f0b512e5133cf4aaa
-
SHA1
f5a7ec31e741db4b115780214577275184487e4f
-
SHA256
37e75479a1f81340df1523f38b37926b2376ec00972223e1087e56a5c73ba5d0
-
SHA512
25add5261fa686104a6278b82930115836219253b3af18861734f05dd3c9735bc4e09d3544f2a982c5a150dc4377ab4f0ce2ccaac6367338750ca8c5dae2ed74
-
SSDEEP
196608:0kTIivhoh9LGbsVqWtgKKItRweLe/GQCIi1KNj25tzm3Z7M:0MJvyrGeaeL1e09mlM
Malware Config
Signatures
Files
-
thorse.zip.zip
-
thorse/.git/COMMIT_EDITMSG
-
thorse/.git/HEAD
-
thorse/.git/config
-
thorse/.git/description
-
thorse/.git/hooks/applypatch-msg.sample.sh linux
-
thorse/.git/hooks/commit-msg.sample.sh linux
-
thorse/.git/hooks/fsmonitor-watchman.sample.sh linux
-
thorse/.git/hooks/post-update.sample.sh linux
-
thorse/.git/hooks/pre-applypatch.sample.sh linux
-
thorse/.git/hooks/pre-commit.sample.sh linux
-
thorse/.git/hooks/pre-merge-commit.sample.sh linux
-
thorse/.git/hooks/pre-push.sample.sh linux
-
thorse/.git/hooks/pre-rebase.sample.sh linux
-
thorse/.git/hooks/pre-receive.sample.sh linux
-
thorse/.git/hooks/prepare-commit-msg.sample.sh linux
-
thorse/.git/hooks/push-to-checkout.sample.sh linux
-
thorse/.git/hooks/update.sample.sh linux
-
thorse/.git/index
-
thorse/.git/info/exclude
-
thorse/.git/logs/HEAD
-
thorse/.git/logs/refs/heads/master
-
thorse/.git/logs/refs/remotes/origin/HEAD
-
thorse/.git/logs/refs/remotes/origin/master
-
thorse/.git/objects/40/5351b99b2f3c4b1e7642c83bc02b3a0c5a7e2f
-
thorse/.git/objects/47/3530c42cc33f60ad06075f353926b4b8ffa94f
-
thorse/.git/objects/86/df1e6c06a067f9e61afb36f96ed5a042be9310
-
thorse/.git/objects/90/cfc5ead89789aedbcfdeb24d692e2499d62e92
-
thorse/.git/objects/ab/6b0a90f941cdff3fd8530010bfdcb47874ee2d
-
thorse/.git/objects/d6/353929f5b93ed96aa75a56c4477c6650a10c4f
-
thorse/.git/objects/d7/ac65592cfb47a8f9ac2c5fa6f241862c0b71cf
-
thorse/.git/objects/pack/pack-dadc2e07aefa6900f7392365e53e09746515ab30.idx
-
thorse/.git/objects/pack/pack-dadc2e07aefa6900f7392365e53e09746515ab30.pack
-
thorse/.git/packed-refs
-
thorse/.git/refs/heads/master
-
thorse/.git/refs/remotes/origin/HEAD
-
thorse/.git/refs/remotes/origin/master
-
thorse/LICENSE
-
thorse/README.md
-
thorse/RemoveTHorse.bat
-
thorse/banners.py
-
thorse/encrypt_code.py.py .sh linux
-
thorse/get_chrome_pass.py
-
thorse/get_wifi_pass.py
-
thorse/icon/accdb.ico
-
thorse/icon/chrome.ico
-
thorse/icon/doc.ico
-
thorse/icon/docx.ico
-
thorse/icon/exe.ico
-
thorse/icon/explorer10.ico
-
thorse/icon/explorer8.1.ico
-
thorse/icon/firefox.ico
-
thorse/icon/m4a.ico
-
thorse/icon/mp3.ico
-
thorse/icon/mp4.ico
-
thorse/icon/pdf.ico
-
thorse/icon/ppt.ico
-
thorse/icon/rar.ico
-
thorse/icon/txt.ico
-
thorse/icon/wav.ico
-
thorse/icon/xlsx.ico
-
thorse/img/1.help.png.png
-
thorse/img/1.version1.4.PNG.png
-
thorse/img/2.running_script.png.png
-
thorse/img/2.version1.4.PNG.png
-
thorse/img/3.added_registry_for_persistence.png.png
-
thorse/img/4.rat_saved_roming.png.png
-
thorse/img/5.report_from_rat.png.png
-
thorse/img/6.getting_notification.png.png
-
thorse/installer_linux.py.py .sh linux
-
thorse/installer_linux.sh.sh linux
-
thorse/password_stealer.py.py .sh linux
-
thorse/paygen.py.py .sh linux
-
thorse/payload.py.py .sh linux
-
thorse/requirements.txt
-
thorse/updater.py
-
thorse/version.txt