General
-
Target
Tic-Tac-Toe.zip
-
Size
440KB
-
Sample
240416-xztfsabh3x
-
MD5
6cc1c018a173961086e901c57bb9aa3f
-
SHA1
4afd651367507eaacfed3bdfe1ae805833136119
-
SHA256
64cfb57e5ac63b3b59c2302710dba7dad93d9b27d39a950ff5e6be4315b7cf34
-
SHA512
1e655e5a21315f66114f7891ced12b77a75d4e51f1daa0554ae6489077161b21bea99045842a430764c46c7755a666fec1b3b4a2d15c04925e51652c2ced1c2c
-
SSDEEP
12288:p5e6BDj54CtMYd8OyE+f4VypsWeHyhUNIDFQbsA+4ZlS:pM6BDjeC6KVbShTDFQy
Behavioral task
behavioral1
Sample
Tic Toe/TTT.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Tic Toe/TTT.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
Tic Toe/dnlib.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
Tic Toe/dnlib.dll
Resource
win10v2004-20240412-en
Malware Config
Extracted
discordrat
-
discord_token
MTIyNjYzNzczNjgyODYwMDMzMA.G6KXZO.KhvjpXnxesj0UFK2f4VA8aIK-hpf6VfhFGsAVo
-
server_id
1224114376949235764
Targets
-
-
Target
Tic Toe/TTT.exe
-
Size
78KB
-
MD5
bea6449a9c00cf3667941b6d9de42610
-
SHA1
dd771bee34b16935ff90b3baea5f854e8371b3dd
-
SHA256
161b52b3f8b209d6ef096dd464d9ab5a749846f5593ed4b9e3d03aeb3a7a9861
-
SHA512
8913be46ebcba2a7ce997a8b93caf80e5aa1878afd18c12191c6af6f388969970e625f8299dec08f2261bed5f00fd7408c542128d33d9139a72a0adcfbbd356e
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V++PIC:5Zv5PDwbjNrmAE+6IC
Score10/10-
Legitimate hosting services abused for malware hosting/C2
-
-
-
Target
Tic Toe/dnlib.dll
-
Size
1.1MB
-
MD5
508ccde8bc7003696f32af7054ca3d97
-
SHA1
1f6a0303c5ae5dc95853ec92fd8b979683c3f356
-
SHA256
4758c7c39522e17bf93b3993ada4a1f7dd42bb63331bac0dcd729885e1ba062a
-
SHA512
92a59a2e1f6bf0ce512d21cf4148fe027b3a98ed6da46925169a4d0d9835a7a4b1374ba0be84e576d9a8d4e45cb9c2336e1f5bd1ea53e39f0d8553db264e746d
-
SSDEEP
24576:WHjoaczZfdE55hHl0WQ/OO4yb99MANKtv7f2dcME:tm/BQWgww
Score1/10 -