Extracted

• • Target

    AHK УСТАНОВИТЬ.exe

  • Size

    5.7MB

  • MD5

    44968ce1b7dcb66e85573e43bc809431

  • SHA1

    7aec81e4d366087eedc4564cb88cedb6062f5c3b

  • SHA256

    c78d5b1b5badb9608c666ff5c592329ebe59ae221266fed77a3dcd188900019f

  • SHA512

    92c20d7e645b513f865a68bd0e3c1948053183fbd40e59ac273784b498af1d3a4c81d3a24af2dc957df93e523fa9da1c0889968805de1eaa9e295e08b8945bc1

  • SSDEEP

    98304:9VFdwkzNzkjRNx7z43Kp44F6sFLT0RLTByc2vtlHXa7UJ73jlbMXS3I:b3wkC5U5AMBgcmKarjl4S3

  Score

  10^/10

  pandastealerspywarestealervmprotect

  • Panda Stealer payload

  • PandaStealer

    Panda Stealer is a fork of CollectorProject Stealer written in C++.

    stealerpandastealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

    vmprotect

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2

• • Target

    AutoArmy 2.8.exe

  • Size

    345KB

  • MD5

    e5c1b7acd55a073be3bea6b3bc8b7a7a

  • SHA1

    ec25473feed90abbfe3fac78a5d94dfd9d4be7ff

  • SHA256

    ca79e5c6de7eb76435f2fd41aaf2aa902f51b76d277cbf202261ecf087a9ab43

  • SHA512

    149af4ce5498b7602a5acf9a513e71046ca5091bec8481ea06dc1cbada842bf582cce78ff12b9f3a5dfb4bdcaf33da1aa95055cfec49fa6014d587f3609aae72

  • SSDEEP

    6144:4ArZ0lwnYdxaFAT2mQRc/CHThXTBfp1fTj3VCKKIOy7z:VohdxWA6mEZzhXTBfp1fTj4Yz

  Score

  1^/10
  behavioral3behavioral4

• • Target

    Инструкция.txt

  • Size

    111B

  • MD5

    0039ae1e08b2047c3b9cd056575944bc

  • SHA1

    b897690752a27b97842cd6b80d6b310953be0136

  • SHA256

    233386b43a7df4e9d76dcb474c31af92171274111b2a3302f90807a46f96cefc

  • SHA512

    0e2a6d3ce53035fa265e3ca8244fbd47a5f8eefe14465bdef3f1c8b892f8d07fc8f62b5ee373d4457758f16f5bfa19ef6cb245bfb08126c8bfa39de33569c20d

  Score

  1^/10
  behavioral5behavioral6