Resubmissions

29/01/2024, 15:16

240129-snmrmsebam7

29/01/2024, 15:16

240129-sng66acfb27

29/01/2024, 15:15

240129-sm889acfa83

29/01/2024, 15:11

240129-sk3npaeadm7

General

  • Target
    Dark_Queuebot_2_1_1_1.rar
  • Size 116KB
  • Sample240129-snmrmsebam
  • SHA256 96dbace7c5d636a62634f50bba7097e7ce1af45e279e8d2c7947bc40aa418e1d
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Targets

    • Target
      Dark_Queuebot_2_1_1_1.rar
    • Size 116KB
    • SHA256 96dbace7c5d636a62634f50bba7097e7ce1af45e279e8d2c7947bc40aa418e1d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      dark_queuebot/index.js
    • Size 12KB
    • SHA256 f029066fb75a9a6648cb75f6496547bac29d5635957d65d71fc9ecaec0d300cd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home/add.js
    • Size 3KB
    • SHA256 cc6b397dd8d64751bd6e867ae7d653626952df9470ca46d3aee4cf46dd0e80a6
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home/addVPS.js
    • Size 3KB
    • SHA256 b990b4efb6388063b2fc1f91b1590c13805d79fb04149b3d9650eadd9d70eb7f
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home/addclaim.js
    • Size 2KB
    • SHA256 253675279f3773b64506ec6462d087bae8318df1a6b18c46ac36e8813357432b
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home/check-token.js
    • Size 4KB
    • SHA256 38807df90725cabd2e7d0d9bf95e6d857e99e015888a62de7da4e64ca2e81263
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home/check-vps-status.js
    • Size 4KB
    • SHA256 a0ce4dd768ad70127f9eb644fb8ca5b22416aa01dce76b57c5810a1ab427b9fe
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home/claim-lifetime.js
    • Size 4KB
    • SHA256 b44c9e744e8ace7d739594272b61325d37c9a7b2a6bf4166d33f2f0505154434
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home/generate-key.js
    • Size 11KB
    • SHA256 0b4b8bbe8a8d6d9e16c7a92ef7060715dac10ad112f67211e1cb6d1ed836a79c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home/move.js
    • Size 3KB
    • SHA256 d8ff669824d5be56e089d248e603029d8ca363311e2f8d8b0d001742400374ed
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home/nitrofoundcheck.js
    • Size 2KB
    • SHA256 9641c0da162304b4ae69f617ea5964b303d8cc165eb739dba1936428042def69
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home/qr.js
    • Size 5KB
    • SHA256 c5a8348651f176f0b7e582475dd376edc52915fdf0cbf5c1a9c6d508dd6cb088
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home/removeVPS.js
    • Size 2KB
    • SHA256 c6e2d61e6f8ce098124c530c33fe8169826cdbc38b1e2924853613ae9c07568a
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home/removeclaim.js
    • Size 3KB
    • SHA256 09147560c7c1321455900f7ecbc235fbabfec831c75887b1465f5648dad19a13
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home/restart-sniper.js
    • Size 3KB
    • SHA256 4a37e0c01c2274267aa3c893d1ab37af0c4aa8ed5780bb31a90b81976f136266
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home/setup.js
    • Size 6KB
    • SHA256 e3e29f6b06dca68c4573efe2165dd4a9278e7ba9250bd8a914de244c67c52516
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home/stats.js
    • Size 2KB
    • SHA256 2fe5d6928306dde3b0249db851c1cc763ff6d1ffba02f19ddffc2626b9c7a65f
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home/update-queue.js
    • Size 1KB
    • SHA256 358c63b7c863a9842e75f7640f832920778e7a2d20ef9462cf828e8416160285
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home/update_main_token.js
    • Size 2KB
    • SHA256 a62889c4caf6f33d1465af383ae61510e2785df9c8579eda8ffb1bedc0a8626a
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home_new/addbalance.js
    • Size 3KB
    • SHA256 3a9730020142e2dca59542e5262afd0e99ab003d3f95ed1de1372760917320ea
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home_new/addpermission.js
    • Size 8KB
    • SHA256 39a47a8ed78c9a967ba8c5bb2a7be972009e1d9246f41bf1d3b97ff1579d2ab9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home_new/addusers.js
    • Size 3KB
    • SHA256 a2bd3f004c1e5a4d4645448d2ee6c8f85d5e1d139efbeec59e7ba361be6300d7
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home_new/checkservers.js
    • Size 3KB
    • SHA256 88ed58b61b1cc8b0a1facd530018b17d6e1f3f9147a7d34b3688a537ef68e618
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      dark_queuebot/src/commands/admin_home_new/removebalance.js
    • Size 3KB
    • SHA256 eecdbbdf0012001c869fc6284970bd1ac745e1cb632558e44266f367f5866de1
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      dark_queuebot/src/data/code.png
    • Size 2KB
    • SHA256 acbfdff1e326bfa5f40b1c8ce8d06bc9a403782d6a17936c13b5f269e5fc8434
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      dark_queuebot/src/data/credits.json
    • Size 6B
    • SHA256 7b89b83551ff94293ae093b25ac820524cac2e2e37da37047a4a8ed2132981d9
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      dark_queuebot/src/data/guilds.json
    • Size 3B
    • SHA256 8eb95bcbc154530931e15fc418c8b1fe991095671409552099ea1aa596999ede
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      dark_queuebot/src/data/keys.json
    • Size 7B
    • SHA256 2511e27f6a55723a5ac338206939300f676e82bcb0d98c47c65fdcef521fdc61
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      dark_queuebot/src/data/lifetime.json
    • Size 4B
    • SHA256 f8a5a26e3056eb6fb06deeb3dbccfd88ae74900200c98c70b5966bbb7ec9d4de
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      dark_queuebot/src/data/queue.json
    • Size 6B
    • SHA256 f1632ea82f9437bab32e55ce244ffdcd1f54f563a45c310ffacf82541ac15c0b
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      dark_queuebot/src/data/servers.json
    • Size 235B
    • SHA256 fa497b9ae02f89d60514d950633f6c9cd1a44c240d09d947d1019ce5a17938d0
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      dark_queuebot/src/data/stat.json
    • Size 166B
    • SHA256 dce0b13d186568d4f3407931fa80d833c9ed1b1a2dd30675f794d04e0d2878b7
    • MD5 SHA1 SHA512
    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks