General

  • Target

    ATM Card Cloning Tools.rar

  • Size

    44.9MB

  • MD5

    31073bf6da752a9207e303244ea27190

  • SHA1

    f77362cebf28a4d87468a54aade7bb644bf3bff9

  • SHA256

    eb656f36ea8e175b316468e4c66d11c04bae1a622599ecdfe4564b2f6992beb9

  • SHA512

    9679567c449328964f6ca4168a635e249f50b90d4ef5e5b284cf5c60757cd467f6d1a49d15560251cb6527332a384ed0c6214d4790cda7b9939d65ca4ac636a2

  • SSDEEP

    786432:NrD1Jutmj/heYehhVhYYitSykwyzGoU85Ym0rvDmT4l:N3bAcAYehXheJ4Sf85gDDmT4l

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • ATM Card Cloning Tools.rar
    .rar
  • ATM Card Cloning Tools/IST/IST/411773 BOA VISA DEBIT PLATINUM.IST
  • ATM Card Cloning Tools/IST/IST/412451 CHASE VISA DEBIT CLASSIC.IST
  • ATM Card Cloning Tools/IST/IST/412451 JPMORGAN CHASE BANK VISA DEBIT CLASSIC.IST
  • ATM Card Cloning Tools/IST/IST/414720 CHASE VISA CREDIT CLASSIC (1).IST
  • ATM Card Cloning Tools/IST/IST/414720 CHASE VISA CREDIT CLASSIC 2.IST
  • ATM Card Cloning Tools/IST/IST/414720 CHASE VISA CREDIT CLASSIC.IST
  • ATM Card Cloning Tools/IST/IST/414740 CHASE VISA CREDIT CLASSIC MOD.IST
  • ATM Card Cloning Tools/IST/IST/414740 CHASE VISA CREDIT CLASSIC.IST
  • ATM Card Cloning Tools/IST/IST/415686 UNITED F.C.U. VISA CREDIT CLASSIC.IST
  • ATM Card Cloning Tools/IST/IST/420767 JPMORGAN CHASE BANK VISA CREDIT CLASSIC.IST
  • ATM Card Cloning Tools/IST/IST/420767 JPMORGAN CHASE BANK VISA DEBIT CLASSIC.IST
  • ATM Card Cloning Tools/IST/IST/426937 CITIBANK VISA CREDIT CLASSIC.IST
  • ATM Card Cloning Tools/IST/IST/434769 JPMORGAN CHASE BANK VISA DEBIT CLASSIC.IST
  • ATM Card Cloning Tools/IST/IST/444796 CREDIT ONE BANK VISA CREDIT CLASSIC.IST
  • ATM Card Cloning Tools/IST/IST/448233 TD BANK VISA DEBIT CLASSIC.IST
  • ATM Card Cloning Tools/IST/IST/469596 BARCLAYS BANK DELAWARE VISA CREDIT CLASSIC 101.IST
  • ATM Card Cloning Tools/IST/IST/488894 BOA VISA CREDIT CLASSIC.IST
  • ATM Card Cloning Tools/IST/IST/490072 JPMORGAN CHASE BANK VISA DEBIT CLASSIC 2.IST
  • ATM Card Cloning Tools/IST/IST/490072 JPMORGAN CHASE BANK VISA DEBIT CLASSIC.IST
  • ATM Card Cloning Tools/IST/IST/515676 CAPITAL ONE BANK MASTERCARD CREDIT WORLD ELITE.IST
  • ATM Card Cloning Tools/IST/IST/517805 CAPITAL ONE BANK MASTERCARD CREDIT PLATINUM.IST
  • ATM Card Cloning Tools/IST/IST/542418 CITIBANK MASTERCARD CREDIT PLATINUM.IST
  • ATM Card Cloning Tools/IST/IST/559908 UK BUSINESS TIDE Mastercard Credit .IST
  • ATM Card Cloning Tools/IST/IST/601100 DSICOVER BANK DISCOVER CREDIT PERSONAL.IST
  • ATM Card Cloning Tools/IST/IST/VISA CREDIT CITI.IST
  • ATM Card Cloning Tools/IST/IST/VISA DEBIT BB&T.IST
  • ATM Card Cloning Tools/IST/IST/VISA DEBIT CASHAPP.IST
  • ATM Card Cloning Tools/IST/IST/VISA DEBIT CHASE.IST
  • ATM Card Cloning Tools/IST/IST/VISA DEBIT NAVY FED.IST
  • ATM Card Cloning Tools/IST/IST/VISA DEBIT WELLS FARGO.IST
  • ATM Card Cloning Tools/IST/IST/atr from ist ist.rar
    .rar
  • 411773 BOA VISA DEBIT PLATINUM.IST
  • 412451 CHASE VISA DEBIT CLASSIC.IST
  • 412451 JPMORGAN CHASE BANK VISA DEBIT CLASSIC.IST
  • 414398 GREENDOT VISA DEBIT CLASSIC.IST
  • 414720 CHASE VISA CREDIT CLASSIC 2.IST
  • 414720 CHASE VISA CREDIT CLASSIC.IST
  • 414740 CHASE VISA CREDIT CLASSIC MOD.IST
  • 414740 CHASE VISA CREDIT CLASSIC.IST
  • 415686 UNITED F.C.U. VISA CREDIT CLASSIC.IST
  • 420767 JPMORGAN CHASE BANK VISA CREDIT CLASSIC.IST
  • 420767 JPMORGAN CHASE BANK VISA DEBIT CLASSIC.IST
  • 426937 CITIBANK VISA CREDIT CLASSIC.IST
  • 434769 JPMORGAN CHASE BANK VISA DEBIT CLASSIC.IST
  • 444796 CREDIT ONE BANK VISA CREDIT CLASSIC.IST
  • 448233 TD BANK VISA DEBIT CLASSIC.IST
  • 469596 BARCLAYS BANK DELAWARE VISA CREDIT CLASSIC 101.IST
  • 488894 BOA VISA CREDIT CLASSIC.IST
  • 490072 JPMORGAN CHASE BANK VISA DEBIT CLASSIC 2.IST
  • 490072 JPMORGAN CHASE BANK VISA DEBIT CLASSIC.IST
  • 515676 CAPITAL ONE BANK MASTERCARD CREDIT WORLD ELITE.IST
  • 517805 CAPITAL ONE BANK MASTERCARD CREDIT PLATINUM.IST
  • 542418 CITIBANK MASTERCARD CREDIT PLATINUM.IST
  • 559908 UK BUSINESS TIDE Mastercard Credit .IST
  • 601100 DSICOVER BANK DISCOVER CREDIT PERSONAL.IST
  • atr/3B 61 - 0a01.txt
  • atr/3B 62 - 0a02.txt
  • atr/3B 63 - 0a03.txt
  • atr/3B 6A - 0a0a (2).txt
  • atr/3B 6A - 0a0a.txt
  • atr/3B 6B - 0a0b.txt
  • atr/3B 6C - 0a0c.txt
  • atr/3B 6D - 0a0d.txt
  • atr/3B 6E - 0a0e.txt
  • atr/3B 6F - 0a0e.txt
  • atr/American Express Platinum from Banco do Brasil (2).txt
  • atr/Australian ANZ First Visa Card from the ANZ.txt
  • atr/BARCLA~1 (2).TXT
  • atr/BNP VISA CARD.txt
  • atr/CAPITAL ONE UK PLATINUM MASTERCARD.txt
  • atr/CB_Visa_La_Banque_Postale_Gemalto_CB_Visa_BNP_Paribas_France.txt
  • atr/CB_Visa_La_Banque_Postale_Gemalto_CB_Visa_BNP_Paribas_France_CB (2).txt
  • atr/Electron VISA Credit Card (BANK OF Cyprus) (2).txt
  • atr/FIRSTD~1.TXT
  • atr/First_Direct_UK_VISA_Debit_Italian_Cariparma_Maestro_Net_Plus_Mastercard.txt
  • atr/T=0 TUTORIAL (2).txt
  • atr/UCFIN_Italy_UniCreditCard_Free_or_Plus_VISA_or_MasterCard_credit (2) - Copie.txt
  • atr/UCFIN_Italy_UniCreditCard_Free_or_Plus_VISA_or_MasterCard_credit (2).txt
  • atr/UCFIN_Italy_UniCreditCard_Free_or_Plus_VISA_or_MasterCard_credit (3) - Copie.txt
  • atr/UCFIN_Italy_UniCreditCard_Free_or_Plus_VISA_or_MasterCard_credit - Copie (2).txt
  • atr/UCFIN_Italy_UniCreditCard_Free_or_Plus_VISA_or_MasterCard_credit - Copie.txt
  • atr/UCFIN_Italy_UniCreditCard_Free_or_Plus_VISA_or_MasterCard_credit.txt
  • atr/UK Barclaycard Gold VISA with RFID (2) - Copie.txt
  • atr/UK Barclaycard Gold VISA with RFID (2).txt
  • atr/UK Barclaycard Gold VISA with RFID (3) - Copie.txt
  • atr/UK Barclaycard Gold VISA with RFID - Copie (2).txt
  • atr/UK Barclaycard Gold VISA with RFID - Copie.txt
  • atr/UK Barclaycard Gold VISA with RFID.txt
  • atr/UK Barclays VISA Connect Debit card (2) - Copie.txt
  • atr/UK Barclays VISA Connect Debit card (2).txt
  • atr/UK Barclays VISA Connect Debit card (3) - Copie.txt
  • atr/UK Barclays VISA Connect Debit card - Copie (2).txt
  • atr/UK Barclays VISA Connect Debit card - Copie.txt
  • atr/UK Barclays VISA Connect Debit card.txt
  • atr/UK CapitalOne Platinum Mastercard (2) - Copie.txt
  • atr/UK CapitalOne Platinum Mastercard (2).txt
  • atr/UK CapitalOne Platinum Mastercard (3) - Copie.txt
  • atr/UK Co-operative Bank Visa Debit (produced 2002) (2) - Copie.txt
  • atr/UK Co-operative Bank Visa Debit (produced 2002) (2).txt
  • atr/UK Co-operative Bank Visa Debit (produced 2002) (3) - Copie.txt
  • atr/UKFIRS~1 (2) - Copie.TXT
  • atr/UKFIRS~1 (2).TXT
  • atr/UKFIRS~1 (3) - Copie.TXT
  • atr/UK_Barclaycard_Business_VISA_Nationwide_Building_Society_UK_Visa (2) - Copie.txt
  • atr/UK_Barclaycard_Business_VISA_Nationwide_Building_Society_UK_Visa (2).txt
  • atr/UK_Barclaycard_Business_VISA_Nationwide_Building_Society_UK_Visa (3) - Copie.txt
  • atr/UK_Barclaycard_Business_VISA_Nationwide_Building_Society_UK_Visa (3).txt
  • atr/UK_Barclaycard_Business_VISA_Nationwide_Building_Society_UK_Visa (4) - Copie.txt
  • atr/UK_Barclaycard_Business_VISA_Nationwide_Building_Society_UK_Visa (4).txt
  • atr/UK_Barclaycard_Business_VISA_Nationwide_Building_Society_UK_Visa (5) - Copie.txt
  • atr/UK_Barclaycard_Business_VISA_Nationwide_Building_Society_UK_Visa (6) - Copie.txt
  • atr/UK_Barclaycard_Business_VISA_Nationwide_Building_Society_UK_Visa (7) - Copie.txt
  • atr/UK_Barclaycard_Business_VISA_Nationwide_Building_Society_UK_Visa - Copie (2).txt
  • atr/UK_Barclaycard_Business_VISA_Nationwide_Building_Society_UK_Visa - Copie.txt
  • atr/UK_Barclaycard_Business_VISA_Nationwide_Building_Society_UK_Visa.txt
  • atr/UK_NatWest_ServiceCard_100_Maestro_Visa_Card_–_Gold_–_CARDFINANS (2) - Copie.txt
  • atr/UK_NatWest_ServiceCard_100_Maestro_Visa_Card_–_Gold_–_CARDFINANS (2).txt
  • atr/UK_NatWest_ServiceCard_100_Maestro_Visa_Card_–_Gold_–_CARDFINANS (3) - Copie.txt
  • atr/UK_NatWest_ServiceCard_100_Maestro_Visa_Card_–_Gold_–_CARDFINANS - Copie (2).txt
  • atr/UK_NatWest_ServiceCard_100_Maestro_Visa_Card_–_Gold_–_CARDFINANS - Copie.txt
  • atr/UK_NatWest_ServiceCard_100_Maestro_Visa_Card_–_Gold_–_CARDFINANS.txt
  • atr/UK_NatWest_ServiceCard_100_Maestro_Visa_Card_–_bonus_–_Garanti_Bank (2) - Copie.txt
  • atr/UK_NatWest_ServiceCard_100_Maestro_Visa_Card_–_bonus_–_Garanti_Bank (2).txt
  • atr/UK_NatWest_ServiceCard_100_Maestro_Visa_Card_–_bonus_–_Garanti_Bank (3) - Copie.txt
  • atr/UK_NatWest_ServiceCard_100_Maestro_Visa_Card_–_bonus_–_Garanti_Bank - Copie (2).txt
  • atr/UK_NatWest_ServiceCard_100_Maestro_Visa_Card_–_bonus_–_Garanti_Bank - Copie.txt
  • atr/UK_NatWest_ServiceCard_100_Maestro_Visa_Card_–_bonus_–_Garanti_Bank.txt
  • atr/UniCredit (Italy) UniCreditCard Classic (VISA) credit card (2) - Copie.txt
  • atr/UniCredit (Italy) UniCreditCard Classic (VISA) credit card (2).txt
  • atr/UniCredit (Italy) UniCreditCard Classic (VISA) credit card (3) - Copie.txt
  • atr/UniCredit (Italy) UniCreditCard Classic (VISA) credit card - Copie (2).txt
  • atr/UniCredit (Italy) UniCreditCard Classic (VISA) credit card - Copie.txt
  • atr/UniCredit (Italy) UniCreditCard Classic (VISA) credit card.txt
  • atr/VISA Credit Card (National Bank of Greece) (2).txt
  • atr/VISA Credit Card (National Bank of Greece).txt
  • atr/VISA DEBIT.txt
  • atr/VISAGO~1.TXT
  • atr/VISA_Gold_VISA_ORO_from_the_Spanish_branch_of_ING_Direct_bank_Visa.txt
  • atr/VISA_card_issued_by_the_ANWB_the_Dutch_national_Automobile_club (2).txt
  • atr/VISA_card_issued_by_the_ANWB_the_Dutch_national_Automobile_club.txt
  • atr/Valid_accounts.txt
  • atr/Vanquis Visa cedit UK (2).txt
  • atr/Vanquis Visa cedit UK.txt
  • atr/Victoria Bank (Republic of Moldova) – Visa Electron (2).txt
  • atr/Victoria Bank (Republic of Moldova) – Visa Electron.txt
  • atr/Visa debit card (2).txt
  • atr/Visa debit card mBank - BRE Bank SA (2).txt
  • atr/Visa debit card mBank - BRE Bank SA.txt
  • atr/Visa debit card.txt
  • atr/Watchdata Brazil CSP v1.0 (Banco do Brasil) (2).txt
  • atr/Watchdata Brazil CSP v1.0 (Banco do Brasil).txt
  • atr/atr fr.txt
  • ATM Card Cloning Tools/arqc_gen.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ATM Card Cloning Tools/bp-hcmd.exe
    .exe windows:4 windows x64 arch:x64

    d64536245940c089a721d93392991ceb


    Code Sign

    Headers

    Imports

    Sections

  • ATM Card Cloning Tools/bp-tools.exe
    .exe windows:4 windows x64 arch:x64

    da938ffbe9af23ddc0af0c8b44623e59


    Code Sign

    Headers

    Imports

    Sections

  • .data
  • .idata
  • .ndata
  • .pdata
  • .rdata
  • .rsrc/BITMAP/110.bmp
  • .rsrc/DIALOG/102
  • .rsrc/DIALOG/103
  • .rsrc/DIALOG/104
  • .rsrc/DIALOG/105
  • .rsrc/DIALOG/106
  • .rsrc/DIALOG/107
  • .rsrc/DIALOG/111
  • .rsrc/DIALOG/202
  • .rsrc/DIALOG/203
  • .rsrc/DIALOG/204
  • .rsrc/DIALOG/205
  • .rsrc/DIALOG/206
  • .rsrc/DIALOG/207
  • .rsrc/DIALOG/211
  • .rsrc/DIALOG/302
  • .rsrc/DIALOG/303
  • .rsrc/DIALOG/304
  • .rsrc/DIALOG/305
  • .rsrc/DIALOG/306
  • .rsrc/DIALOG/307
  • .rsrc/DIALOG/311
  • .rsrc/DIALOG/402
  • .rsrc/DIALOG/403
  • .rsrc/DIALOG/404
  • .rsrc/DIALOG/405
  • .rsrc/DIALOG/406
  • .rsrc/DIALOG/407
  • .rsrc/DIALOG/411
  • .rsrc/DIALOG/502
  • .rsrc/DIALOG/503
  • .rsrc/DIALOG/504
  • .rsrc/DIALOG/505
  • .rsrc/DIALOG/506
  • .rsrc/DIALOG/507
  • .rsrc/DIALOG/511
  • .rsrc/DIALOG/602
  • .rsrc/DIALOG/603
  • .rsrc/DIALOG/604
  • .rsrc/DIALOG/605
  • .rsrc/DIALOG/606
  • .rsrc/DIALOG/607
  • .rsrc/DIALOG/611
  • .rsrc/DIALOG/702
  • .rsrc/DIALOG/703
  • .rsrc/DIALOG/704
  • .rsrc/DIALOG/705
  • .rsrc/DIALOG/706
  • .rsrc/DIALOG/707
  • .rsrc/DIALOG/711
  • .rsrc/DIALOG/802
  • .rsrc/DIALOG/803
  • .rsrc/DIALOG/804
  • .rsrc/DIALOG/805
  • .rsrc/DIALOG/806
  • .rsrc/DIALOG/807
  • .rsrc/DIALOG/811
  • .rsrc/GROUP_ICON/103
  • .rsrc/ICON/1.ico
  • .rsrc/ICON/10.ico
  • .rsrc/ICON/11.ico
  • .rsrc/ICON/12.ico
  • .rsrc/ICON/13.ico
  • .rsrc/ICON/2.ico
  • .rsrc/ICON/3.ico
  • .rsrc/ICON/4.ico
  • .rsrc/ICON/5.ico
  • .rsrc/ICON/6
    .png
  • .rsrc/ICON/7.ico
  • .rsrc/ICON/8
    .png
  • .rsrc/ICON/9
    .png
  • .rsrc/MANIFEST/1
    .xml
  • .text
  • .xdata
  • CERTIFICATE
  • [0]
  • ATM Card Cloning Tools/config.ini
  • ATM Card Cloning Tools/jcopenglish.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • ATM Card Cloning Tools/jcopmgr.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ATM Card Cloning Tools/pyApduTool.exe
    .exe windows:5 windows x86 arch:x86

    2962da585c964274d70856b8bd7aca0b


    Headers

    Imports

    Sections

  • ATM Card Cloning Tools/x2/Bin.db
  • ATM Card Cloning Tools/x2/GPPcScConnectionPlugin.dll
    .dll windows:5 windows x86 arch:x86

    51f482122a4539ad8067c7a3a24dcede


    Headers

    Imports

    Exports

    Sections

  • ATM Card Cloning Tools/x2/GlobalPlatform.dll
    .dll windows:5 windows x86 arch:x86

    ceff59b9ba519e82e18f92798bbffd55


    Headers

    Imports

    Exports

    Sections

  • ATM Card Cloning Tools/x2/Master Key Algorithm.txt
  • ATM Card Cloning Tools/x2/Read Me.txt
  • ATM Card Cloning Tools/x2/X2A.exp
  • ATM Card Cloning Tools/x2/X2A.lib
  • ATM Card Cloning Tools/x2/X2A.pdb
  • ATM Card Cloning Tools/x2/auth removed x2.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • ATM Card Cloning Tools/x2/bins.dll
    .exe windows:5 windows x86 arch:x86

    eff288c73326a0f72de0d33711dd5d7d


    Headers

    Imports

    Exports

    Sections

  • ATM Card Cloning Tools/x2/cardtemp.dat
  • ATM Card Cloning Tools/x2/mac.dat
    .zip
  • src/MacGyver/javacard/Applet.cap
  • src/MacGyver/javacard/Class.cap
  • src/MacGyver/javacard/ConstantPool.cap
  • src/MacGyver/javacard/Descriptor.cap
  • src/MacGyver/javacard/Directory.cap
  • src/MacGyver/javacard/Header.cap
  • src/MacGyver/javacard/Import.cap
  • src/MacGyver/javacard/Method.cap
  • src/MacGyver/javacard/RefLocation.cap
  • src/MacGyver/javacard/StaticField.cap
  • ATM Card Cloning Tools/x2/mac2.dat
    .zip
  • main/javacard/Applet.cap
  • main/javacard/Class.cap
  • main/javacard/ConstantPool.cap
  • main/javacard/Debug.cap
  • main/javacard/Descriptor.cap
  • main/javacard/Directory.cap
  • main/javacard/Header.cap
  • main/javacard/Import.cap
  • main/javacard/Method.cap
  • main/javacard/RefLocation.cap
  • main/javacard/StaticField.cap
  • ATM Card Cloning Tools/x2/sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    12baaaec299bc9ff52d20c16e4d0e96a


    Headers

    Imports

    Exports

    Sections

  • ATM Card Cloning Tools/x2/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    fd348b107c9a12537c4d666dc366ec5f


    Headers

    Imports

    Exports

    Sections