Overview

overview

3

Static

static

3

MerekV3.08...10.pyc

windows7-x64

3

MerekV3.08...10.pyc

windows10-2004-x64

3

MerekV3.08...ts.bat

windows7-x64

1

MerekV3.08...ts.bat

windows10-2004-x64

1

MerekV3.08...10.pyc

windows7-x64

3

MerekV3.08...10.pyc

windows10-2004-x64

3

MerekV3.08...bot.py

windows7-x64

3

MerekV3.08...bot.py

windows10-2004-x64

3

MerekV3.08...t__.py

windows7-x64

3

MerekV3.08...t__.py

windows10-2004-x64

3

MerekV3.08...10.pyc

windows7-x64

3

MerekV3.08...10.pyc

windows10-2004-x64

3

MerekV3.08...me.dll

windows7-x64

1

MerekV3.08...me.dll

windows10-2004-x64

1

MerekV3.08...rek.py

windows7-x64

3

MerekV3.08...rek.py

windows10-2004-x64

3

MerekV3.08...t__.py

windows7-x64

3

MerekV3.08...t__.py

windows10-2004-x64

3

MerekV3.08...10.pyc

windows7-x64

3

MerekV3.08...10.pyc

windows10-2004-x64

3

MerekV3.08...me.dll

windows7-x64

1

MerekV3.08...me.dll

windows10-2004-x64

1

MerekV3.08...rt.bat

windows7-x64

1

MerekV3.08...rt.bat

windows10-2004-x64

1

Resubmissions

23-05-2024 01:46

240523-b7cmcahd57 3

23-05-2024 01:42

240523-b45hyshc65 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MerekV3.08_Lite.rar

  • Size

    6.0MB

  • Sample

    240523-b7cmcahd57

  • MD5

    f2bd1f51b61709643431a7b76fe711d3

  • SHA1

    6a2b399f69060f506b57e9086cd885f5a97e53b3

  • SHA256

    98b52813707d4293c6150cd7e602240ad1ca266807c3c7225f2a3dbf6de7a13d

  • SHA512

    473bd23c632b6153e670b0576e56d842eef2fac7efd2622c6205e478c41d34f525dc50b7ad7a7f6c62e131d6d45ece2f982bbb15291b3aff8262a0f95400396c

  • SSDEEP

    98304:/1nBT6FapjeZ+FOT5YFUbnppHpMlr5QwlUPwR6KF8IlSezJZQIDb+3wrahHR/w4a:/1nBXqZ+MlsUbppH21lU4R6KFjxVZHz5

Score
3/10

Malware Config

Targets

    • Target

      MerekV3.08 Lite/Merek Aimbot/__pycache__/keyauth.cpython-310.pyc

    • Size

      19KB

    • MD5

      03913d5dcd09637c06deba35d3cf8ab6

    • SHA1

      3c49ea419bcd02e50a5102e60387d09a079b7d57

    • SHA256

      f97e0981bbfec62065e9101300ab345f2389c6b94606a2ea655b8c38e11aa575

    • SHA512

      8be7da1ba56dd7b2e62e7f4db6d96fa0ac04bcddb231c36a79d3cdf55a5af5f5808b1604ee5552943665cb39298fc1f9c163f796284c8268606a8782f688a8ba

    • SSDEEP

      384:8PZGJybYD3edL4xzhmp2Ugcem86Rv+dxbpqYSLDYmG0iLnOVy:qjNk7mp2GeX6RvKbpqYSAmH0nCy

    Score
    3/10
    behavioral1behavioral2

    • Target

      MerekV3.08 Lite/Merek Aimbot/install_requirements.bat

    • Size

      38B

    • MD5

      4dcef1a00fab20e9bc78bf6604610423

    • SHA1

      dd6713f82e6b5db2b228ff82df9c02f8cf66943a

    • SHA256

      951f2e24c2a3f7ec40b2c8b12b984c72c1c98acc6489ec33d8f0f065ef877130

    • SHA512

      3cc1cab42b3d3827298449976532da31468fcc2533769a51c96d3b1276b132daee2e2cd62f1c1bacae804786c44fb55f98f9b2de1ca9b124b2130bfa2f5a7cc6

    Score
    1/10
    behavioral3behavioral4

    • Target

      MerekV3.08 Lite/Merek Aimbot/lib/__pycache__/aimbot.cpython-310.pyc

    • Size

      7KB

    • MD5

      1600e4aa01c3395c20c32e50376a8eb8

    • SHA1

      6097a7d5eb71bf374d4b9fd78ed2f4f7497fece8

    • SHA256

      fb3ddedf915a53ca980945bf47c19919ca9715121cc962de3d04fa11be5b5d87

    • SHA512

      8dc852cd6f7edf15d6efa07ac8887ce0c3cfc597fc2bae351acb289b69538dee10b3a320754068a2e04c074df8355a1a5f6ed260afc1459d3b181b1e7831287e

    • SSDEEP

      192:MwL7DLzlxs2eNKSLcJm23DqHpQguEANeLIvjS+zQWe5mwH+jD7OW/NZO9qGP+xO9:Ms7DLzD1eNKSL4yMND/G+KWkq6+09

    Score
    3/10
    behavioral5behavioral6

    • Target

      MerekV3.08 Lite/Merek Aimbot/lib/aimbot.py

    • Size

      34KB

    • MD5

      04e7fdcd4824b4926faf0672c6184669

    • SHA1

      32dfc09985a2a08e0902fa32167a3792ea5a84a5

    • SHA256

      eee9a338a1c8abdb35f2bc3dec224e803f7392625590369c361a177206a9dd1f

    • SHA512

      bdff9f007288bb62a6ba8b8c4ad4ad5abd81be1e5258466a9e762591dd679280b29d11c0c79912721d4de5473f72cc4e53467ed0fa774bd3148a06b8152e16a9

    • SSDEEP

      768:RS7dB1VkMpBJhcY3ZNBIHNNgmTns+2YxxM5L0s2YfuIb2eQETf4swoK27:RyvVkM42u7guxM5I7aSeQEfGoD

    Score
    3/10
    behavioral7behavioral8

    • Target

      MerekV3.08 Lite/Merek Aimbot/lib/pyarmor_runtime_000000/__init__.py

    • Size

      103B

    • MD5

      e45322bb879c8ca2c6dcac9d8c66ab87

    • SHA1

      4e26a2b067cbae277fc25459aed46817c794a259

    • SHA256

      17253fb13b525a9a8e05dfea22b5f3e9e8ea940c064d5a4e0bfaa4be5185e849

    • SHA512

      8051237cf4b7b5251c7f10d31235aaf0530ba2a185dba1e98c71b9b893d69799bf3a306eb87fe7deca9574d0b10dcde3e911e0c4351b6225509d95261a06dabd

    Score
    3/10
    behavioral10behavioral9

    • Target

      MerekV3.08 Lite/Merek Aimbot/lib/pyarmor_runtime_000000/__pycache__/__init__.cpython-310.pyc

    • Size

      220B

    • MD5

      c917cfcc16b413ad58515a5e5f9ff77e

    • SHA1

      a52dbe156d972392e37f337721b74142a10cef7d

    • SHA256

      7b15cdbb393aa4deaf74f5f5abc9e62215affe7794c7a7d9cdde03f48979d65f

    • SHA512

      53a38fb820c99aa307fa7b4909e51f2e073f345bead2cc301b345df95894f73795f7b15772a20b72375e55e53d7453887863c2ede50e490587656a5554bfcf03

    Score
    3/10
    behavioral11behavioral12

    • Target

      MerekV3.08 Lite/Merek Aimbot/lib/pyarmor_runtime_000000/pyarmor_runtime.pyd

    • Size

      606KB

    • MD5

      b8cb359bb73f04649a44977690015f8f

    • SHA1

      e2818b2ee489fedaa73bf89daaa0dc8f46a752d5

    • SHA256

      d3dec52a1ed5b870eb1611d7568423d9ca4f217a55557d1cfd6670be2d743697

    • SHA512

      b6739ba0c6f27e4d4056b128459895c256255a1f8b366f81d1cbc880b34e1183b042636c1b54cd1b342c976a627942ff36d8659d8724e87e489870ca221d6c56

    • SSDEEP

      6144:ro3QJHSlKc3eZXdctt7fUoP4ehy57mBTIK24z0JPvk+8M3m1TnEYPuVZQcU8aVQl:ro3QJylKcuFdcj7fUoPnkQ2SnEPGjm

    Score
    1/10
    behavioral13behavioral14

    • Target

      MerekV3.08 Lite/Merek Aimbot/merek.py

    • Size

      21KB

    • MD5

      5037cac6fb4a4bb0260d61b317611d57

    • SHA1

      aba4ebe6397e2576c3ce3569b89e3d81352e996d

    • SHA256

      e3798dc43a1b3c5e7d6855a2a467e273ef69ce557f572ab68b1c41a709324165

    • SHA512

      3494506f2e49b51b3515306381ef006e9dfdc9910000ff074e361dbf0c5d4e4ea7486a1ff492f35223bb6470ddbfe6c7f311a56da3e140141e9262054042bc8d

    • SSDEEP

      384:tFJSQ5xC/MKSkF6gWrx9mrdPjznal0qWMbYuKWvJeh7O5zytvLA7RvjO+K:tWYxC/MK3F67rxgxQlWMbYrr7O5sDA78

    Score
    3/10
    behavioral15behavioral16

    • Target

      MerekV3.08 Lite/Merek Aimbot/pyarmor_runtime_000000/__init__.py

    • Size

      103B

    • MD5

      e45322bb879c8ca2c6dcac9d8c66ab87

    • SHA1

      4e26a2b067cbae277fc25459aed46817c794a259

    • SHA256

      17253fb13b525a9a8e05dfea22b5f3e9e8ea940c064d5a4e0bfaa4be5185e849

    • SHA512

      8051237cf4b7b5251c7f10d31235aaf0530ba2a185dba1e98c71b9b893d69799bf3a306eb87fe7deca9574d0b10dcde3e911e0c4351b6225509d95261a06dabd

    Score
    3/10
    behavioral17behavioral18

    • Target

      MerekV3.08 Lite/Merek Aimbot/pyarmor_runtime_000000/__pycache__/__init__.cpython-310.pyc

    • Size

      249B

    • MD5

      d3e5b4624b88222a80ce902d642512b5

    • SHA1

      095fe2817f3c46b7f7ab3af4345d73b8602baa49

    • SHA256

      6e20dc7956b7c03cdca4c8ef8eb2712f8316bef41b39e186ee5f46867ddee4b5

    • SHA512

      dd90fc47dac3774fec8de3f09f988db33e56b198de5ccae05058d3568c63a90fc09def9db241c5a9d5226acfdfe0657efcfb289054d899cb0eaff59c4e34adae

    Score
    3/10
    behavioral19behavioral20

    • Target

      MerekV3.08 Lite/Merek Aimbot/pyarmor_runtime_000000/pyarmor_runtime.pyd

    • Size

      606KB

    • MD5

      b8cb359bb73f04649a44977690015f8f

    • SHA1

      e2818b2ee489fedaa73bf89daaa0dc8f46a752d5

    • SHA256

      d3dec52a1ed5b870eb1611d7568423d9ca4f217a55557d1cfd6670be2d743697

    • SHA512

      b6739ba0c6f27e4d4056b128459895c256255a1f8b366f81d1cbc880b34e1183b042636c1b54cd1b342c976a627942ff36d8659d8724e87e489870ca221d6c56

    • SSDEEP

      6144:ro3QJHSlKc3eZXdctt7fUoP4ehy57mBTIK24z0JPvk+8M3m1TnEYPuVZQcU8aVQl:ro3QJylKcuFdcj7fUoPnkQ2SnEPGjm

    Score
    1/10
    behavioral21behavioral22

    • Target

      MerekV3.08 Lite/Merek Aimbot/start.bat

    • Size

      22B

    • MD5

      37c4f262dabdf01445d615d1354fddd3

    • SHA1

      e044e64cee96c0dc2ddadd1c2b9e422869f85498

    • SHA256

      165ccde119e16783475aefa4915ac1f7e251fbbd4c37be85cad3fb2fe87cbb73

    • SHA512

      bf8bf1826f1ef8f6669d099f0177532fe9128e3b02ed22c338085e6338c3c8b0d87cd7a4dac49e56d43f9a21dcdf0ffc21d408efbe96879387468de05b5a16b5

    Score
    1/10
    behavioral23behavioral24

MITRE ATT&CK Enterprise v15

Tasks