Overview

overview

7

Static

static

7

rrrr/HWiNFO64.exe

windows11-21h2-x64

7

rrrr/STRES...st.dll

windows11-21h2-x64

1

rrrr/STRES...40.dll

windows11-21h2-x64

1

rrrr/STRES...40.dll

windows11-21h2-x64

3

rrrr/STRES...64.exe

windows11-21h2-x64

1

rrrr/STRES...32.exe

windows11-21h2-x64

1

rrrr/STRES...md.dll

windows11-21h2-x64

1

rrrr/STRES...64.exe

windows11-21h2-x64

1

rrrr/STRES...64.exe

windows11-21h2-x64

6

rrrr/STRES...se.rtf

windows11-21h2-x64

1

rrrr/STRES...ic.exe

windows11-21h2-x64

1

rrrr/STRES...ro.exe

windows11-21h2-x64

1

rrrr/STRES...CT.exe

windows11-21h2-x64

7

rrrr/STRES...M5.exe

windows11-21h2-x64

3

rrrr/STRES...T0.dll

windows11-21h2-x64

3

rrrr/STRES...de.url

windows11-21h2-x64

1

rrrr/STRES...se.url

windows11-21h2-x64

1

rrrr/STRES...ms.url

windows11-21h2-x64

1

rrrr/STRES...op.exe

windows11-21h2-x64

1

rrrr/STRES...4P.exe

windows11-21h2-x64

1

rrrr/STRES...mi.exe

windows11-21h2-x64

1

rrrr/STRES...io.exe

windows11-21h2-x64

1

rrrr/STRES...yu.exe

windows11-21h2-x64

1

rrrr/STRES...na.exe

windows11-21h2-x64

1

rrrr/STRES...ri.exe

windows11-21h2-x64

1

rrrr/STRES...mi.exe

windows11-21h2-x64

1

rrrr/STRES...ri.exe

windows11-21h2-x64

1

rrrr/STRES...na.exe

windows11-21h2-x64

1

rrrr/STRES...oa.exe

windows11-21h2-x64

1

rrrr/STRES...bs.dll

windows11-21h2-x64

1

rrrr/STRES...20.dll

windows11-21h2-x64

1

rrrr/STRES...12.dll

windows11-21h2-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    rrrr.zip

  • Size

    181.5MB

  • Sample

    240523-ak6fgaee88

  • MD5

    9b2bd6f636e5c92484ab89b5f9ae8784

  • SHA1

    e7389408a90c9846754293272fa31bea10a925ff

  • SHA256

    301caf9b1c6aa0f71638c83bed495e38ac021fe468095ec487271e3cd5284101

  • SHA512

    7a4ee1fe34bdbdb4cfd7202714b890283e604b94f1b0caec6ecfde79f05583b26a5df012e6370599bcb9a4e31f58f151e5d27d66b5fd6166cc964640362fa8f4

  • SSDEEP

    3145728:jBuXLD4QsotSu64pl7bcjrtXP+H0s6XAJTMPGSQiAvMCVnxtDY:jgXwc64j7bcjrtWH0HXOMeSZAUCVxpY

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      rrrr/HWiNFO64.exe

    • Size

      8.5MB

    • MD5

      a34be5e96939181d11d1511c69463936

    • SHA1

      f57af338591ca0abeb9c59f725a2427a5f3fe324

    • SHA256

      2bc73de74d9787a63728adc65ac4992f5155c54a10198c6a8856f61eb50b5292

    • SHA512

      392f5b94dc0455e52dd6abb6e510dd3ac67439714ccf4e92f09f99bfb34a808d8a819f05488a2045df20cada727c3520b316bf9094c219e6b729404ce56e484c

    • SSDEEP

      196608:5zHkNBnpJBjR6EgUGylYSfgsALvb62SbyOfZZ5YrS:Bq3NGyzACbvf6m

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

    • Target

      rrrr/STRESS TEST/KarhuTestMem/x64/ramtest.dll

    • Size

      100KB

    • MD5

      e3bd5f4617b4555c0f3bf438269afbf2

    • SHA1

      942649ab63c93512fd605108b8a697e1d6f558e2

    • SHA256

      211b664f2af6d199b99b8225e2a3ce402b86ecd9cd4b11d20ff45fbc43f31322

    • SHA512

      1b47721bdec0ae8b58eca48b8b5f530e9676f582afc82bed23c4fdfc4ec06c3e14816f267e450302d9c12d7f4df6396373524d90a456597f96e5186b2612da7e

    • SSDEEP

      3072:vwaYse87GOiwOVaoFlaW8x/8yyH+LS/WDH7fTlvEA+g6eJ:vwPLOiwOVambxi5J

    Score
    1/10
    behavioral2

    • Target

      rrrr/STRESS TEST/KarhuTestMem/x64/vcomp140.dll

    • Size

      151KB

    • MD5

      909eb7f2b7454e340112c1e6fc9f7cbc

    • SHA1

      177218bd81df5b7b6fe7d0b2727457c5325d4367

    • SHA256

      35df17d1b5df6d74a807823ce36330a8ea4b6f6bf8572f4e06bee4bba54bdf5f

    • SHA512

      be3b6c32b2ad74eede1d7d66758d593488f438f8c7a5cbfb3b5042812048ef878c2ba7b7f192a3aa33498510208668332956d9c30e8799b77219ec5dbe270280

    • SSDEEP

      3072:t0LAXoja58fDgNh2IQquKFBiwGNs9NShUOU89h8IwUJRBl/StMrM:ya5SgdJLwFmNiJnl/BrM

    Score
    1/10
    behavioral3

    • Target

      rrrr/STRESS TEST/KarhuTestMem/x86/vcomp140.dll

    • Size

      134KB

    • MD5

      be6843ea43fe9b868585f80ad09fe293

    • SHA1

      ba4d9c5bdfd97567c6d7204c34d5db59724a8bef

    • SHA256

      91e8f731d23924d7434a9a938b71aa2acf51f3bb4f3d28b6eb74e9307f9a7639

    • SHA512

      2905ed96384f7b34fa345427bd9a8ba81d0647c1cb3bcd5dfb8562debcc9e2138df38bd2282949b25b798623dfb9cd158d1e82f45951cf938fd9e4c93b1f32ab

    • SSDEEP

      3072:oralhL5TDvgJIXfUhmsV1cHdA6HTjWTRBl/bSHoUna:3tjIIXH1H8nl/+IUna

    Score
    3/10
    behavioral4

    • Target

      rrrr/STRESS TEST/LinpackXtreme-1.1.5/LinpackXtreme_x64.exe

    • Size

      112KB

    • MD5

      0f7452fc9575d1cf0ba9a9364bcd3fb8

    • SHA1

      4a3e6e2e87a07bef65b621a455a5448c33518ea9

    • SHA256

      41d9a37f5a4c1ef97b193e6a06427e06053c2d87d1df29fd4a158bd2bcb97ee5

    • SHA512

      3cda5e3950bc18866f46bb6c52ef6df7cbb154bb7f8e981ee2684382558cdd68316fd311cca96c01e37ced7c07e0ee808f6180e5c998437c0ddb0b18e3d7ef84

    • SSDEEP

      1536:jeMPvdUsN7YOxJIzwpRwnwhSidMyMebXtLW:DVT/xJVpanLP3Qt

    Score
    1/10
    behavioral5

    • Target

      rrrr/STRESS TEST/LinpackXtreme-1.1.5/binaries/x32/linpack_amd32.exe

    • Size

      2.6MB

    • MD5

      b3a5f5777b6422d480e069c27873e90d

    • SHA1

      4e5dc4a642edce773b3cf669a758cb768e24432b

    • SHA256

      c1a620ff8f371c3010f8ed8f4d1b3ec2223f76266041cf3c8b90f37c29f3490a

    • SHA512

      ef3942f71a677c4223b8fe1c5cfff129e5ce9ac13b77629bdd19b92d1b1748a7fa7f794c2fa0e03b182d1f1b2fdf262a0f929f7590d564b3d089e24de3840705

    • SSDEEP

      49152:LUgZ8tK1uvshojLr1lx3rF/ULuHH3nKDhES/d/ha4fwKBLixUPWDQ:L7ZJuvshojLr1lx3rF/4uHH3nKVES/dT

    Score
    1/10
    behavioral6

    • Target

      rrrr/STRESS TEST/LinpackXtreme-1.1.5/binaries/x64/libiomp5md.dll

    • Size

      1.6MB

    • MD5

      b2a54c42e1f426538d9c5cc1b52fd9b7

    • SHA1

      3521cec2161e2eddab37355285524f2f33c24a44

    • SHA256

      d92009e06d491f27e39748c5b2386ea43c7dd2e698069c20c8bb3a79b46d0377

    • SHA512

      7051acbe81e4857b7bb41f52cedd575c997ee804c3462b9914225161b56307567ca0b4ef3be8798a64e8758811aa857495ba88545b108ab3d4621ff6bf578752

    • SSDEEP

      24576:La6WGXXB6d7xthwb6nN5fN2YDZ1WilfYoOrRbiXB2BYkPnRW7k43SzK:LalGXR6X3DDDfYoOtbiXB2BYARW7kbzK

    Score
    1/10
    behavioral7

    • Target

      rrrr/STRESS TEST/LinpackXtreme-1.1.5/binaries/x64/linpack_intel64.exe

    • Size

      11.5MB

    • MD5

      7ea80285e7e976b296e80159425af90f

    • SHA1

      618881b402300ebf6d82a5c739ea548b18d17e71

    • SHA256

      a6ed1d8c5a158e6809b3e8c4124ba2a44714df1e069ab9a1c42e4b1ad18b00a5

    • SHA512

      d6242919315689490aef5b3cffe95a2fdd4bda837f66606986aa237d1a6b0d2ecd4f3646169e8c0ed3cbd28c031ba597a17ad60b8a1d134db4db60401bfbf79d

    • SSDEEP

      98304:n2stq/d5gzJkHBfmfF6FVFpZVz/oTFq2sW/:n2stq/d5gyBfsF6FVFp2sS

    Score
    1/10
    behavioral8

    • Target

      rrrr/STRESS TEST/LinpackXtreme-1.1.5/hwmonitor/HWMonitor_x64.exe

    • Size

      2.5MB

    • MD5

      012f8e7571a92ff83b1a9c8741039efb

    • SHA1

      7fd511019d3d6dd5770a5ae3c10c6bbb54937540

    • SHA256

      f675b35d4d4d7c8287c0bbdf47f6a3d229ea81be5c361f4d3b98dfe28ebc73cc

    • SHA512

      469c53a9dd2ea02673a0ed53996a13db5faf738b30c4fe0879da0bc477ac5e070d89f05ee82a81d4ef6ca6e41b3deab446a4f1b559859f84f302473cde5d87c5

    • SSDEEP

      24576:ZnIREMFl2x2fSkDfSlz+vM2hTtiBNXLbjtA58pJ2Gx+fhau/g7wYjRiA/WA/eFT:ZnIV0x2f6gk2haZ/rx+cuY8

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral9

    • Target

      rrrr/STRESS TEST/LinpackXtreme-1.1.5/license.rtf

    • Size

      64KB

    • MD5

      59c409d66e53c20f9f90974bbd40c0c7

    • SHA1

      4ba551b08ff2ac9158f3ae303cbb05ea57afe178

    • SHA256

      abcbc0eafc403aba3f475587c1d77953526bf3f5de0067fc8e60e50e4789c9f2

    • SHA512

      1bd4d5d26a711445c110a24be8f59308cacaae17af1ee7b07c02831a08342090d9665c3236d781e4e6a1e3adfd96b298aae5787b937cec9289a5f23842ae9c1e

    • SSDEEP

      768:S1Oa5zTdxYLIfdHWmmkDGXtG/dbjfsPMpyzhpk2qqvybdf9Y7:S1HTnJy3kYvybdfK7

    Score
    1/10
    behavioral10

    • Target

      rrrr/STRESS TEST/MemTestPro 7/MTPclassic.exe

    • Size

      36KB

    • MD5

      218122db664e3f0b4fd1b4a8b6172913

    • SHA1

      38745e2727b78006c7d75e83d08cfdf8f7529146

    • SHA256

      6e04f21605aa86ef3ea167c3fd7a4bd53ec48a84a51f5f7d0c2e706869cd5d18

    • SHA512

      96d3c7c9701a96e2b6a6b6d974fcc372b56ee4f194e58d28a98d2066a24585e987662bb330d606fd2d2fcc3eccb5d04138e2950df7cda84f0c648e273de6e3a5

    • SSDEEP

      384:PDfUKCwlVXsMd7j6bcL+i6qiB1JFdyFOmxcYdKk0Ne9y/jKDZ8:DrlVXsMd7j6bcBMjd0vMLNuy/k8

    Score
    1/10
    behavioral11

    • Target

      rrrr/STRESS TEST/MemTestPro 7/MemTestPro.exe

    • Size

      28KB

    • MD5

      0e94221fa450e5ce4998be96c006da11

    • SHA1

      f34af3c823ca0f07c44be866944e38b61737f1f7

    • SHA256

      698d5c5b0fbdd9061a174d93f247eda082f290807725ade5521c134126de571e

    • SHA512

      938b46130b53675942f3368b869e812d0f595e89e86bf0560c7cd3858449d1e78b10904a53e1a1f081053c1c4a5945aebb3b1a504065d45f04aca48bacf0813d

    • SSDEEP

      384:ElYJ2uhHh7bHzyV1Z+ezhB0jKD2W/CBhVMJP35X:ElYwYHtTyLZhzhB0ahn

    Score
    1/10
    behavioral12

    • Target

      rrrr/STRESS TEST/OCCT.exe

    • Size

      192.2MB

    • MD5

      a9a9253cd5b5b54e0c4b434a67ea56cc

    • SHA1

      8fedc00b0d5a60d41864bd2f8f9314d6bb46f5a9

    • SHA256

      bb40fb58fa5f7780fc765039398a95d77bd3448b10931d579d5bd0be197b09b2

    • SHA512

      f2293cf609f7ce621494b0664df3cbe2bdeebc627a0c754d3cec7a473cf21d57c46e020a5ef15c2c2297aa5ce25bd7d3cc03c969bddbd7864d1027619661ddc3

    • SSDEEP

      3145728:M54SLCn/NLs3TXbCMU/Jj94FiQw+qWhMF8x:M54WCn143TXbCd/JyFix+9MCx

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral13

    • Target

      rrrr/STRESS TEST/TestMem5 v0.12 (Many configs repackaged)/TM5.exe

    • Size

      32KB

    • MD5

      c5cd49bcf5fc17944383d387638c955e

    • SHA1

      13122d07d828637943ca7e8043f77beca4e76928

    • SHA256

      b7ed4b39de012e88ec9ad7f21b0ac68a4e863fe078b5c54857a16d37d480cc21

    • SHA512

      7bc066b43804dad6b346c375efae121c6047ae37cbf1238b1e54ebd045e90daa55cb0f9db239c9d1ac6bf31bb7a48558658ef70fe3c0492cea278de0f5cbbdc5

    • SSDEEP

      768:0abgunPJRyK4QjjuWnXe784mX3XUVPrRG:0GxPJRyKPuWnOwhX3XUpRG

    Score
    3/10
    behavioral14

    • Target

      rrrr/STRESS TEST/TestMem5 v0.12 (Many configs repackaged)/bin/MT0.dll

    • Size

      12KB

    • MD5

      47f6806d74205f0ece372d96d0634ea3

    • SHA1

      21c3a60a648615317421be93432697253a3c7ff3

    • SHA256

      3ee244962c2683022c3bcc78d1a869e755516bbf4d2c1123a8a55e47655731ef

    • SHA512

      bc9803bf96682d587c3c64d9f787eb6567c5bb238c84c04e31d2729e125a8ebb61afe9f8af05dcff4f5af139f0dc6c2bffb4ca16e65476563aeca92c744bbd61

    • SSDEEP

      192:qLT8KgmRoz3BP4nhf2gfI82Wqs9SrAiPZhKgwTYHQ7:qP8Kh2zK2MkrPPZhKgSf

    Score
    3/10
    behavioral15

    • Target

      rrrr/STRESS TEST/ThrottleStop_9.6/Basic Throttlestop and Undervolting Guide.url

    • Size

      69B

    • MD5

      dfe444e8face1305eeb4e7b6b5dd1e41

    • SHA1

      62f4e419f89a0148c4568fcfc2f75204ba21ecf8

    • SHA256

      3b7c6dc5b098f03fbc1d5a4b3b8be4e0402fa06ba87deb9877ef21cf2b4cce9b

    • SHA512

      95742485e653219ab1194950557ef21724f60d63f8c547f30af59417ac3ad41102ababb58b60d25aedea4662b46f34ba188b3a6e491ece92df4b472f111dab56

    Score
    1/10
    behavioral16

    • Target

      rrrr/STRESS TEST/ThrottleStop_9.6/The ThrottleStop Guide (2023)- How to Lower Temperatures, Increase Performance and Boost Battery Life.url

    • Size

      87B

    • MD5

      1bb10caed5c67634137fc5ac3245fec5

    • SHA1

      1bfe70c22f8e961565acb520af951439c3c41bb9

    • SHA256

      445d886856eff318196266a5381091082ba7bf190cd33ec2dc1f8d19e3d18177

    • SHA512

      e0989e5301c42cfa6d5466d28d2f195d3a5d4f0bc55c679ad4d866ac761aace2702fcfce02161b1cbf719a63bb99509366157fdda00b50a15a4c51e711374e30

    Score
    1/10
    behavioral17

    • Target

      rrrr/STRESS TEST/ThrottleStop_9.6/ThrottleStop - TPU Forums.url

    • Size

      84B

    • MD5

      c0bf6816735135e8b8bc7e177f75c302

    • SHA1

      6f5f0842cd6fb3ead2c01659f849a94e381b1917

    • SHA256

      b2687dca2103fdbd393af0551c3f9dead6d990a24a5605f42a5086d5574928b6

    • SHA512

      d204fe8046a2ce3e2950506bfe915b749a772b17ca96e172ac21c3c9a586543f88cb43a05808022652e414f513034109c0f46daab398c29ca67da0baa97e535f

    Score
    1/10
    behavioral18

    • Target

      rrrr/STRESS TEST/ThrottleStop_9.6/ThrottleStop.exe

    • Size

      3.8MB

    • MD5

      bc9be951bbed1229cab7ecbb77885cb5

    • SHA1

      a777a87ab40e5adfac7048aaccbcffea0cc0a555

    • SHA256

      77dceddd336cb2a00289159525b834de16a3c006fd9dcd991b232d2b10346997

    • SHA512

      ce8c7de8e137b7b04effb83066c408087768ab176349061b99330791f20858674ae90c76583ff1f4add8db89dc25ea416efc1677de56e16a85818439180be2e8

    • SSDEEP

      98304:ZC4lhpdW/ZmB2FbUe7F5s8dQWZ7juZoFxrI99WN7e:ZCYrgIODuWFxrI9Wq

    Score
    1/10
    behavioral19

    • Target

      rrrr/STRESS TEST/Y-CRUNCHER/Binaries/04-P4P.exe

    • Size

      5.0MB

    • MD5

      cf0170c31598d4ee0a587223c4088a6b

    • SHA1

      61c6e80ae75ddc57dc697a309e378d8c81842862

    • SHA256

      a8f37789efaa8a44e77ee023ce4eaf74c46e06e65a9c75827dc9f3b5557d8077

    • SHA512

      7508690c27c6ef2fc2f6b1310190959aa6993b36bc23f6fd8fc7bceff8b6644526b02d6bb99e6f58c75749565a0d769060e3de24be5e9fb56bc885171b7ca398

    • SSDEEP

      49152:fnq7p8KcH8OebFa/A4Xqy8i/jnvhH2b7O8An3e3oe6Hmbmepi+o3zmh3nMYj4TFX:/hvV2NXNuoe+GfY5KPm4j9rW4LV

    Score
    1/10
    behavioral20

    • Target

      rrrr/STRESS TEST/Y-CRUNCHER/Binaries/05-A64 ~ Kasumi.exe

    • Size

      5.1MB

    • MD5

      85a5ce70db81b0b10e0366d61d9c7057

    • SHA1

      278a3f7df4b397d9a44c304f596f0e5519ce5f5e

    • SHA256

      a5d1bc5f13b6b0bd25fbc90a5afd50ae2c6fd4e5e7d97222f9044d77bd43dc82

    • SHA512

      8ec95f5e347df4f03d799618e06ab3dbf547a425b28d92f3938b47367e5362aece61b9e731090027536bf9a3f6d37bc3d3b24a31ba49765d6cbd54339a5831dc

    • SSDEEP

      49152:y4AAFyGs7vAZ1J6ttMrEp1ZWOC0oTqwz5WLuDlPORigiP1ELfl+6WvBfm+T7aL3k:Y8qvLjTgalheB

    Score
    1/10
    behavioral21

    • Target

      rrrr/STRESS TEST/Y-CRUNCHER/Binaries/08-NHM ~ Ushio.exe

    • Size

      5.2MB

    • MD5

      e454a2604a4dc8f131298343d1919444

    • SHA1

      5a46a9b3facd1947bf8271abbb1e903126d1dd69

    • SHA256

      fab3331fbc8721f4e1cb4e5db36161298b261310d581ab1ef2c20199160c67a3

    • SHA512

      eee4a09773d7c94cdc0998b0b1f880947de9e062c92130ea0b099659e4f013ca053b0f06ebb3a641b6a341a259b6fed532d3e1aac4f22096eac8c3019507b262

    • SSDEEP

      49152:wU8v4RG8CaIbSZBal6LtFS7WPlhPfB2d2IBChtVrIKO4/T89Jli2iMQpdtkUzM40:sA8+RqXH9L5TfN/hJ96

    Score
    1/10
    behavioral22

    • Target

      rrrr/STRESS TEST/Y-CRUNCHER/Binaries/11-BD1 ~ Miyu.exe

    • Size

      5.9MB

    • MD5

      4a1748a709846514af5efb760a7d9d39

    • SHA1

      e001454d97ae2367429ea33741b032b72c409db6

    • SHA256

      32d92df4b0df19689973375558d67d254538ab2c477baae5f40ac00b449a2967

    • SHA512

      c415da639bbe521763eee62bbc44fcca2ec9902ec8cef6b8bc3899bcc53ef3e81fd3203dba522d97608cf11d6efa1700a40263a4ca8e5d96199e97e1e5188291

    • SSDEEP

      49152:g9zCtHtksFuq4S7fpLgeo+gl3GpH4AKWK4C42Fml8o/L9fHflAWi75Skk7VAB:FVtk/l4Wmp96tk

    Score
    1/10
    behavioral23

    • Target

      rrrr/STRESS TEST/Y-CRUNCHER/Binaries/11-SNB ~ Hina.exe

    • Size

      7.7MB

    • MD5

      5146364d37e0e5b5554c117e1243e605

    • SHA1

      8091cdde753d586a0782b2a6f65e602f436814c4

    • SHA256

      85da20d30ac54f662befeab0624d974a979dd6476bc0af15486faf1210636618

    • SHA512

      a3bd953341d1a06e7d48daf7300dc4cea996daec5fe47f0a1eeab54b042476361d28905e17dd306c5b0c8356a71d171c063811c97a20c12d7c0584f64ea026f7

    • SSDEEP

      196608:yEZ5HQaTjEqPfM4krly2y+M2e5xbrA5O:yEjQijEZly2y+Mj5xbr0O

    Score
    1/10
    behavioral24

    • Target

      rrrr/STRESS TEST/Y-CRUNCHER/Binaries/13-HSW ~ Airi.exe

    • Size

      8.0MB

    • MD5

      605687a096d85cc60b4b6bc76afc50b7

    • SHA1

      cbb6542b299f8d81ff4ac9a2ffec418686bacd32

    • SHA256

      c722746eca355771fb9cd00fc0d328e2708cc04f3797810a65c6556be4defc78

    • SHA512

      cd5cb707831466218132d74400cf799a43b9b5f2f80f87ffd1beba671652b81809178734b0440e5a5d40767039a3dc0b683d413116bc76c33f45ebc4c1c5a7fb

    • SSDEEP

      49152:ZsE3rpZN90IzYw8smqr1L9SnmK/gpH5fBPAQkuIWdDl92g5RbSVKS4VOT/SOzdU8:R37RzfXBrPbHYQB1Dl920HVUIAi

    Score
    1/10
    behavioral25

    • Target

      rrrr/STRESS TEST/Y-CRUNCHER/Binaries/14-BDW ~ Kurumi.exe

    • Size

      8.0MB

    • MD5

      07861115436283907ea6abe86fa54599

    • SHA1

      c0136c0b95cca588f2717d641316508855a0e446

    • SHA256

      27db992f58b0c37cd36eb507e59e0826731e60210bae00bf0cb65e6255b20f96

    • SHA512

      fb243b738f082a3a953c55cba677c04c36ecb461230466f6411c7b247e458e16d106fce772db8228c6251e89ec514e4813bdf8e027aaff7052a26ca565a81a4e

    • SSDEEP

      49152:yS+F7vLBXjA/oZXxKPWnZKi6XL42fphQkyCO2aaKO4b1J0Q2P49oXvTw38BG5Ni0:v+htjA/o9avvPQqaaOd9t5Zr/Q

    Score
    1/10
    behavioral26

    • Target

      rrrr/STRESS TEST/Y-CRUNCHER/Binaries/17-SKX ~ Kotori.exe

    • Size

      8.6MB

    • MD5

      dea0daa13d2032d38b6655981f482807

    • SHA1

      9eb3edb78a75c84b855c925d47f32a311b6228b4

    • SHA256

      98b5af156e6fc4f5e0a235d89f33c58d205970941d38646a6324fb61474645cb

    • SHA512

      982734e477157a9b6a8e847361cc7c4f28865497385d71da565982a4262a2e2843c5ff5321682f432a6651b6678fc5f11e556cc9fb1746930931e33adc968495

    • SSDEEP

      49152:Ze9PAZZuLjDOv2rcHnEvXlnSYrsLC8rN1Gxrg4GHGATHzmpdeXhF1rgE5RT9r3x7:qPAjcGuIYrUCvpg4BiGd4rzgmt

    Score
    1/10
    behavioral27

    • Target

      rrrr/STRESS TEST/Y-CRUNCHER/Binaries/17-ZN1 ~ Yukina.exe

    • Size

      6.8MB

    • MD5

      085d5379149adec814e7168c2ae3b352

    • SHA1

      f480ff4bf237e1b502654a98320565d3c7a15944

    • SHA256

      03d456e6920b326b72c9f17906e8ffa8f09c6e7fd74d16272f2d8b296d1a91aa

    • SHA512

      89f1d32060e678119e6c3c467d24d01b1e0ce3b3621421a6fb3a4d48324102aefc18e1d18614213129f10eb699a186c5a45b9df4fc960d3f29094aa9e4e19065

    • SSDEEP

      196608:PqDNS3+LjXjrBLV/rqnE2uOYKGeo4ShQLs22aT74:PiSEjXjrBLV/rqnE2uOYKGeo44QLs2DT

    Score
    1/10
    behavioral28

    • Target

      rrrr/STRESS TEST/Y-CRUNCHER/Binaries/18-CNL ~ Shinoa.exe

    • Size

      8.5MB

    • MD5

      9a16c9b89393c19214af8c2b4c6f2504

    • SHA1

      849ba42644b3facaa306dca0c2b4364d91688b1b

    • SHA256

      8541abaa09151b74ac1d96c5972f7eaf45a0fb2134c7d8ed2968465357faf26f

    • SHA512

      25d9b1b8763233bf92cd3b7dabd816db7df9f2c3743c3bfae71b6f653c2eae65a2b731197902b5736d1a8a92f27b37c7f86fb5eac60b54502abde9305d6ca1da

    • SSDEEP

      98304:n1cNvHJb+5DebIpL7wYbZC6boC6/5KyOg:n1cNvHJb+VpL7wYE6bo3U

    Score
    1/10
    behavioral29

    • Target

      rrrr/STRESS TEST/Y-CRUNCHER/Binaries/IccLibs.dll

    • Size

      122KB

    • MD5

      2e2ea3b03069ce100d827a8dbe74e8c7

    • SHA1

      073ac7cde64a38f8e276f7ec3d7f9f12f32a396d

    • SHA256

      4e587a2bdf0faf669f210c4e2a5f4a5cce1c86830f610aeae0a6fb355bf8ddc4

    • SHA512

      51038a327319345dedf00c19604a7890a6217e3681f5d70384add8dfed1231b7d23452288834a7790797d8cd309d24a7f9979927a65011d56f379f9c590ac3e5

    • SSDEEP

      3072:4HmQx6YOwF+YANlQtMYHtj3u8THOS7EeyP8LHeR+g:rxprYANlFYHt7u+EpRo

    Score
    1/10
    behavioral30

    • Target

      rrrr/STRESS TEST/Y-CRUNCHER/Binaries/cilkrts20.dll

    • Size

      306KB

    • MD5

      a6f3567e4946e166a36d377d57d33205

    • SHA1

      919a19fb38c290857efc73ca14028f96adb4ff8d

    • SHA256

      d9365c1a83c21801aab3001ac47850b2677ce72e722a9109ab176ad1a60f3890

    • SHA512

      baf89c2eb8a7af27c4a0599845bc315c5d338a2b794386fbc4bf0b36e5134867fc8141cd68f50b142698ab4ad084d83b76da1d576328fce572eb9f30b042203a

    • SSDEEP

      6144:5H+wbk9W+DQs3kSFGOTxuiudcuSkXPW8VnZUjvUvmkbQ9+H:5HyM+Ms3kSEPM8VtK+H

    Score
    1/10
    behavioral31

    • Target

      rrrr/STRESS TEST/Y-CRUNCHER/Binaries/tbb12.dll

    • Size

      976KB

    • MD5

      969f6c89f17d21ba7d2416deca106a0d

    • SHA1

      f78c56a10d17bc41762c1eb17231fce8e60e4d5a

    • SHA256

      a5fa44028bb7295ced3070d8abff961ada676987133122eec746e0ead30e2c14

    • SHA512

      f19a085c7a9c6b354c04cd1bf281fefa7efafb51e55528920f29a76d137bb8575314c656119e90839a71630f874caff8c9d80a6995baaf4f7511d907953372a2

    • SSDEEP

      12288:rD31BCIFLIYP1nmNu2V0fXJyXDtcWolQ6XiBmWBXp:rD31BCI9PBmNuXfZyXdL4iBVBXp

    Score
    1/10
    behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

upx
Score
7/10

behavioral1

upx
Score
7/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
3/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

bootkitpersistence
Score
6/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

upx
Score
7/10

behavioral14

Score
3/10

behavioral15

Score
3/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10