Resubmissions

28-05-2024 19:09

240528-xt8crahe76 10

28-05-2024 18:35

240528-w8gmxage52 3

General

  • Target

    Hamster_bot.zip

  • Size

    41.9MB

  • Sample

    240528-w8gmxage52

  • MD5

    c1f6b3778981f9f78db7cd981834cdd6

  • SHA1

    88acec27ab77872472c2849cb38e603c7cfef8c3

  • SHA256

    1dae2f77f68cd904437938939b9f20e92bef43e54b0886a4b13efd8599d8e2c7

  • SHA512

    9c7f4aebfbfa9904c8ba339f247238d8dec2c03f61e757ca7fe1a9fa11a77feb82db5f3a9206e0fb8677627b3331e81a4b5c4a72572cf518765267aa0c3f87e3

  • SSDEEP

    786432:Xj5k57drXaMmPXikbH+Uus78+Xz0ngxWeI1Rl5GowHWQ1YvwZMcUVv1m:Xj5kNxaMtkbeUus7Nbgrl5GtKALUVvo

Malware Config

Targets

    • Target

      _internal/tk/fontchooser.tcl

    • Size

      17KB

    • MD5

      cfa99c2d3f02ae6538809774699a9ce7

    • SHA1

      dadb7b3d1d9531710ba7d3025ce18f6f8149f280

    • SHA256

      4ee521f4980a5056077005b748717d91cb6b17342cdd20135962ab92a665b580

    • SHA512

      dcf54aaea439c986ae28cec0241f204bb5001de4e98c2e7a9c282f9e47747ad62e9b2cf6fbbac068bf1f1bb0aac866f85476e9ee79935ce1e3656f122c2d002d

    • SSDEEP

      384:NoRqdguMCeor/4VxgU80zNxWHKVozN5EaKdhsbyM:NoRqdguMCeor/4VxgUnzN0KSDEk

    Score
    1/10
    • Target

      _internal/tk/iconlist.tcl

    • Size

      17KB

    • MD5

      fdb839b85c4ceb34dec04e0ebd6a3c96

    • SHA1

      0fd8981093cc6ed9927d1dde708fece84b9c5e6f

    • SHA256

      07812124d27e47621af74fdb90c777d3219b02f657fc2f97f606c69ef9468a01

    • SHA512

      e65616b3f6bdc3910fc90e9710426370aa4b0a0d9eb6289871b9c30a98a2f2b5cc1e471b63203210aae89120f20f164a33e01da45bcccccec7bfc1ccfd70fac7

    • SSDEEP

      384:FNP8nO9Wo8k5NfQH8EsOy8WMdbffNCvHshPOw7jW:FNf8uNfQH89Z8WMdz1vDW

    Score
    1/10
    • Target

      _internal/tk/listbox.tcl

    • Size

      14KB

    • MD5

      804e6dce549b2e541986c0ce9e75e2d1

    • SHA1

      c44ee09421f127cf7f4070a9508f22709d06d043

    • SHA256

      47c75f9f8348bf8f2c086c57b97b73741218100ca38d10b8abdf2051c95b9801

    • SHA512

      029426c4f659848772e6bb1d8182eb03d2b43adf68fcfcc1ea1c2cc7c883685deda3fffda7e071912b9bda616ad7af2e1cb48ce359700c1a22e1e53e81cae34b

    • SSDEEP

      384:apDYV5Yupn5OcckwBv3HCpg2J8JvJBfWeZhXkz+WkHGowv:aPPkevB2JuvJ9D3XmSc

    Score
    1/10
    • Target

      _internal/tk/megawidget.tcl

    • Size

      9KB

    • MD5

      d83ed6ac2912900040530528a0237ab3

    • SHA1

      2d18e42a8b96c3d71c1c6701010fdf75c1e6d5d8

    • SHA256

      848258b946c002e2696ca3815a1589c8120af5cc41fbc11bbd9a3f5754cc21af

    • SHA512

      00b4cd0d58029fc37820c163a4ae1dead22fb5c767bdc118659eace26d449c362189611dfb3fab1ac129fabfec2ce853ea2c10d418fae5aeb91ddc9330ff782d

    • SSDEEP

      192:mvEEVwjVwqOpOLbkVAg/vyKEZ25YbKZbwrmQ:mvEEVwJwpALPgnyx25YGZkr3

    Score
    1/10
    • Target

      _internal/tk/menu.tcl

    • Size

      38KB

    • MD5

      b7daa21c1c192b8cb5b86cbd7b2ce068

    • SHA1

      ae8abf9017f37ccdf5d0d15de66bb124a7482ba0

    • SHA256

      312af944a276cdbf1ee00757ef141595670984f7f13e19922c25643a040f5339

    • SHA512

      b619e3b8be5ec4545e97b7a7a7f7fecc2aafa58438f9ca3819f644720cf5ff5c44da12ac25988570e595d97cad799f87d93c24d5e67a7a953b9f5312952fbeb6

    • SSDEEP

      768:NKJsO8O4IzOQjJwxzire5pKVjriecYyq4CpKgnP:NKJsO8iOQizire54lriecYf40

    Score
    1/10
    • Target

      _internal/tk/mkpsenc.tcl

    • Size

      30KB

    • MD5

      983c7b78f1a0ebacab8006d391a01fcd

    • SHA1

      7ea37474ea039ed7a37bfdd7d76eae673e666283

    • SHA256

      c5bdca3aba671f03dc4624ab5fd260490f5002491d6c619142ccf5a1a744528a

    • SHA512

      a006ef9b7213e572f6fc540d1512a52c52fec44e3a07846de09662ae32b7191c5cf639798531847b39e4076bf9dd6314b6f5373065c04f4fef221185b39c3117

    • SSDEEP

      768:+c4g8rSnBGzHsGK83Ch0x/0kmSq6O4+rNfPCpM2sEmqKys3pCJxi5dEaY:+c4g8OnBGzBK83Ch0x/0FSq6OnrGM2h3

    Score
    3/10
    • Target

      _internal/tk/msgbox.tcl

    • Size

      16KB

    • MD5

      217087ab6b2a8f9d7252e311d69c3769

    • SHA1

      09aeb2bc5b7c7f4ab3de4211d786c519ae0970f6

    • SHA256

      a07e3a3809ced3c6c9c1e171dca5ad1f28357734cd41b2b9dd9f58085b3d2842

    • SHA512

      6e57633c924bfc16d380c014c20dd24d5727e70d4843fcec4d7995b4db21941ea8f2a5fd6e5386df3364b6905d4d66b2b9595dc8fc70cff40a2d49a92a1b6fba

    • SSDEEP

      192:+haZOxBpK8uxGe4V88/wxY3Fxqipz4zz4zxxFzxT4OcErDxqdRRZeuC/Vj2CoopC:+hRWRG3FFjvsfCoopwITHzLHFHHAABs

    Score
    1/10
    • Target

      _internal/tk/palette.tcl

    • Size

      8KB

    • MD5

      4ce08a10cd9ae941654b8c679df669f3

    • SHA1

      f1288babca698fd18c3bd221e6ae6c02f2975aae

    • SHA256

      849b4c57e4644e51beaeaeb3ae59b7ff067e582ecd10f1b2caf6b6e72f11f506

    • SHA512

      0f37539da3540e9b1da7b0377e3bbb359b71db4271d63bc9501e95931b4e609e8cb91dc2f7b08a6452598d4a0d58c6a2034049a215000eef0f93a9963d003632

    • SSDEEP

      192:HWh/x+hFMyTA/CTzxFoUuliRLDm8pQrQlENPyF3o48M6C:HWL+MyTA/CTzvAiRqyEw3ok

    Score
    1/10
    • Target

      _internal/tk/safetk.tcl

    • Size

      7KB

    • MD5

      21a3ac11146ec26784c0e729d8d644d0

    • SHA1

      c7e0918e8692c42c1d1dd1bbcbfff22a85979b69

    • SHA256

      579701605669aadffbcdb7e3545c68442495428ee6e93c2d3a3133583bcd3d33

    • SHA512

      724ed83b989ad9033bec4211ee50e4c9e85b51054c518cdf7e02d0ed0416f636b9f38c0b0d29f8f4f7f465b77c7d2e01d0918d2c2c3fec4c7739ea982302fa2e

    • SSDEEP

      192:Eet0t8bm9Z+Yjo+j/YKOtOUOtk8XKUal320:EetG8biZZs+bIAUoxX0d

    Score
    1/10
    • Target

      _internal/tk/spinbox.tcl

    • Size

      16KB

    • MD5

      eaa36f0aa69ae19ddbdd0448fbad9d4d

    • SHA1

      eb0adb4f4d937bac2f17480adaf6f948262e754d

    • SHA256

      747889c3086c917a34554a9dc495bc0c08a03fd3a5828353ed2a64b97f376835

    • SHA512

      c8368f19ec6842ed67073b9fc9c9274107e643324cb23b28c54df63fb720f63b043281b30dbea053d08481b0442a87465f715a8aa0711b01ce83ff7b9f8a4f4c

    • SSDEEP

      384:IMpfyeKu9TzD0E8+9T1wqBaQKpiqQr7E32fnzXfWJU:IMpfyeKu9Tx8WODTp2zPP

    Score
    1/10
    • Target

      _internal/tk/text.tcl

    • Size

      34KB

    • MD5

      9ca5094ed6fe46620abf090bf8e2ae63

    • SHA1

      60dc3c2e3f69ce5b6db4f2b3a1f3c109d766bc63

    • SHA256

      ab88556e349f03baca2d8dc2121071a4f299db86f484cab2d9249ff4c7007564

    • SHA512

      0b0c20a754be744a7fa214ba06ab0744a9bc466d51f96310d97ea1e61119a8acfef24e6dc5c4ebdd2c126bf84ace74ffe622e9641c87e5a240dd13d1f7b5e6af

    • SSDEEP

      768:Rp4LaQDlOrqquMwIMyv4Et8avJLgmTGXs1bYMeNnnZl8n6KRD:RYK8aymTGs1b0xncn6KR

    Score
    1/10
    • Target

      _internal/tk/tk.tcl

    • Size

      23KB

    • MD5

      184d05201893b2042d3fa6140fcf277c

    • SHA1

      aad67797864456749adf0c4a1c0be52f563c8fb8

    • SHA256

      1d5e7518afc1382e36bf13fc5196c8a7cd93a4e9d24acf445522564245a489b0

    • SHA512

      291bdf793cabc5ec27e8265a8a313fe0f4acab4db6ce507a46488a83eef72cd43cf5815762b22d1c8d64a9eedea927e109f937e6573058e5493b1354dd449cb3

    • SSDEEP

      384:NJyxt+WaB9USY15gSgC3DbTbXLXKr3cIXyDAbK2LMGgtewT+3oFQRyH5bAy59HmD:NJItNe9USZblXysm7GgteoFQRYMESL

    Score
    1/10
    • Target

      _internal/tk/tkfbox.tcl

    • Size

      38KB

    • MD5

      670837ebc804e7b6e2f65f840bc508d6

    • SHA1

      2dd316487f87dde5d05f65f564cae4e1306ce662

    • SHA256

      3aaa66ae8e74b94481c3f6642634e78bb5d7892771e7c27b54dfa56ded0b2f3c

    • SHA512

      bb8350addf1a25c037dfd60a4afcbf401cacad2a370b60bd0ba0981d938c46394bd8d40d1e9a66f4e3c46fcc2a41cf688e78c4f1fe918b45e70d3e92d8b3d116

    • SSDEEP

      768:+oj+AqE9cn9tJNgDt0/vsKulXgo65Eh6pQb:+6+Zv/ggEdio65Ehdb

    Score
    1/10
    • Target

      _internal/tk/ttk/cursors.tcl

    • Size

      4KB

    • MD5

      1a799fe3754307a5aade98c367e2f5d7

    • SHA1

      c64be4b77f0d298610f4ee20fcebbaee3c8b5f22

    • SHA256

      5b33f32b0139663347d6cf70a5a838f8e4554e0e881e97c8478b77733162ea73

    • SHA512

      89f367f9a59730bcdfc5abde0e35a10b72a1f19c68a768ba4524c938ef5c5caf094c1bfa8fc74173f65201f6617544223c2143252a9f691ee9aaa7543315179f

    • SSDEEP

      96:DRYEqfLDxGmxGUetobPT6t6brv0q3O4Uxz0:DWEqTDbxdKobPqe5PUxw

    Score
    1/10
    • Target

      _internal/tk/ttk/entry.tcl

    • Size

      17KB

    • MD5

      7ffd7a32c7f8e234763e99e3357db624

    • SHA1

      67c67557f3a6dc8b240e85d46f6b733fee45a013

    • SHA256

      266553eb9eed333dd836ba96204ae008f10686f4f12c404187f1e01cab65d246

    • SHA512

      d18b73e44f37ed92b9fd7c1f6510285d1280eb5bc665b46996e538924e9d1cad63337279bf92587132c3aea497325a17cce671ea59537b350f6d921c25346f39

    • SSDEEP

      384:sca9Jzcyzf6yzwO+v+iPT3vKof8q3YIuR13a:sT9Jzcy76wiV3YNa

    Score
    1/10
    • Target

      _internal/tk/ttk/menubutton.tcl

    • Size

      6KB

    • MD5

      f11a76fbabf35e446a1200a5a7a6730a

    • SHA1

      4cbab3507c1ef275691c98620d2b5ceeb9043b3e

    • SHA256

      54663fbf524cad9d74ab1ec44b7fdde0b87f06e5347191962c97f51f714e29bb

    • SHA512

      95471d1519ae663ec7eb4639d847019e0c9f70dea2b0680d81fb8bbe7cd1ff643a3df5e06ca2cc54385be094bdcc64ab0f1aa1652f91d16c4ef7b68cb670371e

    • SSDEEP

      192:toMcJQkmcE6fNuLyiCzSLSRwgppdT3kXdpK3dpKkSH2tOTjvAG:tRc6kFbcH2pyXz+zO2y

    Score
    1/10

MITRE ATT&CK Matrix ATT&CK v13

Execution

Command and Scripting Interpreter

1
T1059

PowerShell

1
T1059.001

Tasks

static1

pyinstaller
Score
3/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10