Overview
overview
7Static
static
7AMPLv2013....PL.exe
windows7-x64
1AMPLv2013....PL.exe
windows10-2004-x64
1AMPLv2013....eq.vbs
windows7-x64
1AMPLv2013....eq.vbs
windows10-2004-x64
1AMPLv2013....ta.vbs
windows7-x64
1AMPLv2013....ta.vbs
windows10-2004-x64
1AMPLv2013....05.vbs
windows7-x64
1AMPLv2013....05.vbs
windows10-2004-x64
1AMPLv2013....11.vbs
windows7-x64
1AMPLv2013....11.vbs
windows10-2004-x64
1AMPLv2013....114.js
windows7-x64
3AMPLv2013....114.js
windows10-2004-x64
3AMPLv2013....s54.js
windows7-x64
3AMPLv2013....s54.js
windows10-2004-x64
3AMPLv2013....er.vbs
windows7-x64
1AMPLv2013....er.vbs
windows10-2004-x64
1AMPLv2013....nbr.js
windows7-x64
3AMPLv2013....nbr.js
windows10-2004-x64
3AMPLv2013....83.vbs
windows7-x64
1AMPLv2013....83.vbs
windows10-2004-x64
1AMPLv2013....el.vbs
windows7-x64
1AMPLv2013....el.vbs
windows10-2004-x64
1AMPLv2013....re.vbs
windows7-x64
1AMPLv2013....re.vbs
windows10-2004-x64
1AMPLv2013....ut.vbs
windows7-x64
1AMPLv2013....ut.vbs
windows10-2004-x64
1AMPLv2013....bj.vbs
windows7-x64
1AMPLv2013....bj.vbs
windows10-2004-x64
1AMPLv2013....tu.vbs
windows7-x64
1AMPLv2013....tu.vbs
windows10-2004-x64
1AMPLv2013....u1.vbs
windows7-x64
1AMPLv2013....u1.vbs
windows10-2004-x64
1General
- Target 421aad7304f78192ecea26a231a8fafc_JaffaCakes118
- Size 4.8MB
- Sample240514-tkknjsdg6t
- SHA256 8de3d77e83980d334f3d30bf7c1607965117bca41a9776126473ffde7cfa91a1
- MD5 421aad7304f78192ecea26a231a8fafc
- SHA1 f1fd25f5bbdabf99d23156aca3da465bcd83fc50
- SHA512 e5fc921fe2f9f9e0fb816bcfc3fa4a62d6a9e8889c0b75e17bdb60b13775a43cd1d1f1e797cc2a6bf895e58bc447898f02560b26256ad75e2dce32b20f6ef299
- SSDEEP 98304:hlQHXchGonLKnEAFQV63G+rNbIrqBRCFIcqefIhqdlI633jthZg2D+4i:LeXPoLKnEAw63F4qBRCacqesqw6333Wj
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/AMPL.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/AMPL.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/chemeq.vbs
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/chemeq.vbs
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/gridneta.vbs
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/gridneta.vbs
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs105.vbs
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs105.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs111.vbs
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs111.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs114.js
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs114.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs54.js
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs54.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/ljcluster.vbs
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/ljcluster.vbs
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/rosenbr.js
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/rosenbr.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/s383.vbs
Resource
win7-20240215-en
Behavioral task
behavioral20
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/s383.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/shekel.vbs
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/shekel.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/steenbre.vbs
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/steenbre.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/cut.vbs
Resource
win7-20240215-en
Behavioral task
behavioral26
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/cut.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/dietobj.vbs
Resource
win7-20240419-en
Behavioral task
behavioral28
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/dietobj.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/dietu.vbs
Resource
win7-20240220-en
Behavioral task
behavioral30
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/dietu.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/dietu1.vbs
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/dietu1.vbs
Resource
win10v2004-20240426-en
Malware Config
Targets
-
- Target AMPLv2013.11.08.Cracked-EAT/AMPLcml/AMPL.exe
- Size 379KB
- SHA256 0f795660647d97c2ad449374e78b631feefe10dbb6f6e569fa3e1644c9278bf1
- MD5 17dae1ae7b267815a50d9467ba3811e7
- SHA1 9f184e8ac38ee720d036ba3b95bd98c783d0cbbf
- SHA512 6bd8f355356c1671010bae4b7049371a23b02358fa547c8b639794d21c8b42d7ac0597ff5169a36f03c53190483f2f5f6bbd43ea9d8c13dee475c2219c79c880
- SSDEEP 6144:T1hNspSeeK+Q9wBRsVbShHgKj1j+QeNy3Ydm7DiZeEKSnY1aVjxFjM1k/t103A7Z:QSef+QUgbSz+QeCFBS0WFjH/9X++PZoS
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/chemeq.mod
- Size 5KB
- SHA256 d3a92dd5efdad5b850fb04cf31072a823205dccd96279f8b974ba31ebd001842
- MD5 c73559b3efe374e1849f919ff5038560
- SHA1 5ee0b32f9357f625aaf5de80d316e2f6fe5a1b5e
- SHA512 d1c2ee941f8a2f93da6ec24dc1aee6d25c3e364d1acb3d40a49b35cddc74aa00e7288b38dd100062b95d554eceb76d91071360ad41f250ebac5656581864f97f
- SSDEEP 48:nrajOyapzJQzaPFP2LiLiiQiiziieiiZiisiieiiziiQiidii0iihiiiiiy+iigs:2iyWzmoT0ViNy5
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/gridneta.mod
- Size 3KB
- SHA256 b792950c4349c288109e1db6b204af2c1ec3eb8728498bf993dc11451b7b951a
- MD5 316f7f679f1faf519734fa94814d15cd
- SHA1 d190a10b095633df0ba6a6741b470cfa01191226
- SHA512 926c69a51f64eacf69c63628f0dfcf5ec92fe5a3d9298eb8ff63ef38fd93730eda401ba44e3f6502a0ce3ad99e4b2521c92c6968215779ca1933968bac191977
- MD5 SHA1 SHA512
Score1/10 -
- Target AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs105.mod
- Size 4KB
- SHA256 bc009af850867219596cbef0db82c3d1b301f06a0d44f46d67c12436aecf4d66
- MD5 fb375b13b48a187f100857745bac943a
- SHA1 82b9a32d28decdece6d6fb87bc146fb6e08872f3
- SHA512 652589734d172b9d7cfd3551d9e9dbb98be8f009ce926be8efcb516a9fa67387fa60409ded73aa3c1a681150c1f88cc5b6094a1ff5f124220147848f1f8810d4
- SSDEEP 96:LnYCuIhLC8zcCg9ZBTNLNmUPOmMmmucXVfakzEs8:02hL7zcCg9ZFPmUtMmmHXVfPzEs8
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs111.mod
- Size 1KB
- SHA256 ae2a699a3bef0fb8fd7eb25b2c57e3b76fe590ece535818484b1ea9d8d78b8fa
- MD5 4fc51a3047ac0a1e34a437150f93b41d
- SHA1 1597a9191cce6466c8c66e7a78866bffe2c825ca
- SHA512 4eb8dc333b6a68d830c2461ac5e174cec758d9a5a27948e9a78eecee60e5dd50584cb3912b4f17e6a00ba3847dae3a0ff4b90201708b96aacc1eab55cb05bb41
- MD5 SHA1 SHA512
Score1/10 -
- Target AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs114.mod
- Size 1KB
- SHA256 7c05bf7128660ed423605ef015e4096e0e44b3961dc5972ac6ca35943e4cca54
- MD5 45e30cf63194152593d3a23edaec4d66
- SHA1 c5a8634925ebee060d14277480aebd5b8a48380c
- SHA512 7f0fc3541f7ac809ce469726024bb65796d0401f406e2d0b2ff4588b4cec90df400a3b4d57497b2655773463b465aa25f4366b262c66014c16c22d8f3378c8c0
- MD5 SHA1 SHA512
Score3/10 -
- Target AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/hs54.mod
- Size 1KB
- SHA256 f86ba249671b4654faf7846495abbf68cd54fc237fe99782f673b907eb327ea1
- MD5 5adbdd82658e6af1bd75fccf4079a688
- SHA1 94db620d3e74d2e9e32fde5c3ada4e2724388b6b
- SHA512 afcb030e8b72b1fd7a77c4c60c7c4627f682ae23bdf5fd0b0673f7caa242ebf3494185dde772b93423961d754dcf3a747fb8f7bae15fe6f843940762b486cab7
- MD5 SHA1 SHA512
Score3/10 -
- Target AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/ljcluster.mod
- Size 901B
- SHA256 e779687d323a864635c51cf7e02db72f19f28263fbcfe81bc8214d1ee566c47b
- MD5 ec0614a882f675fb0425969dfba04052
- SHA1 58c6d088dd07b300bd273096ce13ad716775794b
- SHA512 40d2d404238aad2cc6ab89f72e46201b52d1e5eeaf080e2bc55ca2cf625666d8019136f1e80520d4ca14b4a290ca2b8eef0fd1212a97277491fed5d6cc97800f
- MD5 SHA1 SHA512
Score1/10 -
- Target AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/rosenbr.mod
- Size 722B
- SHA256 48aff6674c704a4826f9c57f63693c596a387c896fe781ba0bc8ac8251134bcc
- MD5 08d113c0bda5c63a5862a80542874c19
- SHA1 d3af11345faac6e8cc056f4c04862de61a9b33f5
- SHA512 290d896eb6501f0b5668b330157b3f2bf6626be925fe9bdf06c555cdfdfdb2dcc4e11f0e2ceaa8be2c0adb1573df89ea39f259a5943090c3be371f8f3a63b32b
- MD5 SHA1 SHA512
Score3/10 -
- Target AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/s383.mod
- Size 1KB
- SHA256 cb83eae41c728107613b2df790c1bbca39b7231092d4ab26fcac5fba960f887f
- MD5 62ea39dfbc1e6f7c29f9e7784799fa10
- SHA1 7bdafb2647610d5cb8d33e65d3c88dcea7f6dbfd
- SHA512 3ed0d5199e4ffeb8b513da2d690c94190da3e35258374fdd0d1a870f83f2d0205b20820a3b7f287996e8f4fee3c7c098523512be9080c18a4fc5c56ba238f084
- MD5 SHA1 SHA512
Score1/10 -
- Target AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/shekel.mod
- Size 1KB
- SHA256 5061b263ff4ed614bdd85092a2d0c1af35430984b42f3d7421488a3575774fef
- MD5 3408d1a38d3d99e888cb4c3d6a21035e
- SHA1 568eb76fbdff6bbb7b38ca092c5e70ae6acab7b6
- SHA512 407eb560cb50097d050f52cdcb393a1fe61a9aff7a59a3414d2aa80f840959a0d67769c94cd5213d225197896e0adb6079800c64947abdcf9806788fd921fa91
- MD5 SHA1 SHA512
Score1/10 -
- Target AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/NLMODELS/steenbre.mod
- Size 3KB
- SHA256 e2a059ab8cfc49839fec3be4f11aeccba7208c31d4540c2d871fa2cb2016dd09
- MD5 812ff86fd6d47160fd0d4a5e2e95a344
- SHA1 f8ff5e9448c0b58b2cfa74d2d1ae788d88426cc3
- SHA512 aa8ce47801e7a27d1246ba29f6d49345a007630fe518ad4110937e9c5abf45d89d4544ec785abd5771a2cea2abb29ee845ab6748534a154fd0a03e69cca527a4
- MD5 SHA1 SHA512
Score1/10 -
- Target AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/cut.mod
- Size 1KB
- SHA256 c1a16615f30f4702524ac668cc8f8cfe098b7e9df48187b16a1172794f16b8ab
- MD5 a56a0179288fff26a80b77f1d9085040
- SHA1 025f5297a10ef00d4e0cbf4fa5b7584ca6b55700
- SHA512 511d74b385bb305e1922868baaaa9ef3488528b76554f7a9a655a79330a2419e31e6f3d37b897e2ba99912f2f49bee61de62cb678c04073006a91fac0d07e76d
- MD5 SHA1 SHA512
Score1/10 -
- Target AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/dietobj.mod
- Size 785B
- SHA256 74b9d3a2427e641a6d621874994a646546ab44a41df61bbfc4766988aa8f9d14
- MD5 1b3d996287708d1f77248b97fabba83d
- SHA1 7354333b0297d74b46aa78f28fcda0e081c58322
- SHA512 f36cfcdb84c1c6f01ac12c09009e6d0370687066f11cf7cef56e229d31b7593e9c3386fcb7ce4694a3c329b87b513608e9af9bb99a1ad2792d34e779231e9586
- MD5 SHA1 SHA512
Score1/10 -
- Target AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/dietu.mod
- Size 665B
- SHA256 b0c7501e8b4a258bc249d94ba34f8c0efe5671fd9757df0048108021008cbb8b
- MD5 af572968fe0e45fffe6241a405bce2e3
- SHA1 a86f5c69b6b4dc59c77fb5eb48489a8896db22e8
- SHA512 7bee64f0e1691dec1b59a71d53f5f35a9dca2e0ed715da172f4202ec096de6c72baf30c28c9d199a2eb7ef53fbd244175d59e1227ba249b2fe61629467918397
- MD5 SHA1 SHA512
Score1/10 -
- Target AMPLv2013.11.08.Cracked-EAT/AMPLcml/MODELS/dietu1.mod
- Size 678B
- SHA256 8c2cea8b07a593964d1c55cc99db33e636130ac74d3d2bc67e35286056e39e02
- MD5 ef4367e8a98e6b29ce5ffc267f8b6e64
- SHA1 d656300593c0ae64c0c6a65e507ee4f7979f9118
- SHA512 322d9521980335ac51f6bee2f71f06e01eb6ad054d09a085ccbc0f862125ea0623565ce0e51740c2bd7451d526d527d27c4432b8912e40668caca6cde81826b4
- MD5 SHA1 SHA512
Score1/10