Overview

overview

7

Static

static

3

Badlion Cl....0.exe

windows10-2004-x64

4

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDIR/app-64.7z

windows10-2004-x64

3

LICENSE.electron.txt

windows10-2004-x64

1

chrome_100...nt.pak

windows10-2004-x64

3

cursors/co...ze.cur

windows10-2004-x64

3

cursors/co...ze.png

windows10-2004-x64

3

cursors/copy_drop.cur

windows10-2004-x64

3

cursors/hand_grab.png

windows10-2004-x64

3

cursors/ha...ng.png

windows10-2004-x64

3

cursors/link_drop.cur

windows10-2004-x64

3

cursors/ro...ze.cur

windows10-2004-x64

3

cursors/zoom_in.cur

windows10-2004-x64

3

cursors/zoom_out.cur

windows10-2004-x64

3

icudtl.dat

windows10-2004-x64

3

licenses/a...se.txt

windows10-2004-x64

1

licenses/a...se.txt

windows10-2004-x64

1

licenses/a...se.txt

windows10-2004-x64

1

licenses/b...es.txt

windows10-2004-x64

1

licenses/c...se.txt

windows10-2004-x64

1

licenses/c...se.txt

windows10-2004-x64

1

licenses/c...se.txt

windows10-2004-x64

1

licenses/d...se.txt

windows10-2004-x64

1

$PLUGINSDI...rd.bmp

windows10-2004-x64

7

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$R0/Uninst...nt.exe

windows10-2004-x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Badlion Client Setup 4.3.0.exe

  • Size

    105.9MB

  • Sample

    240624-esby2szgql

  • MD5

    0003bd6ddb5cb55b983f588b9870e82c

  • SHA1

    8a0e508002b3f328e737adb9bdad0b236ebb3504

  • SHA256

    e5fba4935007b0c55025b8fb2b70d325d69b52bad874081678d4b9e5ac3aa809

  • SHA512

    2f882938016c7ab2f22a1b21858354b8cc4633e61eed1871da4d77d8ff96e248476bb4d23a326a80d8406b720002d05d6dadba458b09a5452e1331239dc553fb

  • SSDEEP

    3145728:Ocj7rmYEBshGgT2roh0SgtY0cIWDZns6fRa/6:pj7rmUsgTwoWS1IWDZns/6

Score
7/10

Malware Config

Targets

    • Target

      Badlion Client Setup 4.3.0.exe

    • Size

      105.9MB

    • MD5

      0003bd6ddb5cb55b983f588b9870e82c

    • SHA1

      8a0e508002b3f328e737adb9bdad0b236ebb3504

    • SHA256

      e5fba4935007b0c55025b8fb2b70d325d69b52bad874081678d4b9e5ac3aa809

    • SHA512

      2f882938016c7ab2f22a1b21858354b8cc4633e61eed1871da4d77d8ff96e248476bb4d23a326a80d8406b720002d05d6dadba458b09a5452e1331239dc553fb

    • SSDEEP

      3145728:Ocj7rmYEBshGgT2roh0SgtY0cIWDZns6fRa/6:pj7rmUsgTwoWS1IWDZns/6

    Score
    4/10
    behavioral1

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      15KB

    • MD5

      ba2cc9634ebed71cea697a31144af802

    • SHA1

      8221c522b24f4808f66a476381db3e6455eab5c3

    • SHA256

      9a3c2fe5490c34f73f1a05899ef60cfef05e0c9599cd704e524ef7a46ead67ba

    • SHA512

      dcc74bcedd9402f7ac7e2d1872fe0e2876ae93cf8bbd869d5b9b7b56cea244ba8d2891fa2b51382092b86480337936f5ec495d9005d47fbfd9e2b71cb7f6ba8f

    • SSDEEP

      384:Zhyd8Y6pu8ZaLf6Uksnw1g8BUcyHisUVb:Zhyd8Y67WGg8B/EiF

    Score
    3/10
    behavioral2

    • Target

      $PLUGINSDIR/StdUtils.dll

    • Size

      100KB

    • MD5

      c6a6e03f77c313b267498515488c5740

    • SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    • SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    • SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • SSDEEP

      3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v

    Score
    3/10
    behavioral3

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      0d7ad4f45dc6f5aa87f606d0331c6901

    • SHA1

      48df0911f0484cbe2a8cdd5362140b63c41ee457

    • SHA256

      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    • SHA512

      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    • SSDEEP

      192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6

    Score
    3/10
    behavioral4

    • Target

      $PLUGINSDIR/UAC.dll

    • Size

      14KB

    • MD5

      adb29e6b186daa765dc750128649b63d

    • SHA1

      160cbdc4cb0ac2c142d361df138c537aa7e708c9

    • SHA256

      2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

    • SHA512

      b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

    • SSDEEP

      192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs

    Score
    3/10
    behavioral5

    • Target

      $PLUGINSDIR/WinShell.dll

    • Size

      3KB

    • MD5

      1cc7c37b7e0c8cd8bf04b6cc283e1e56

    • SHA1

      0b9519763be6625bd5abce175dcc59c96d100d4c

    • SHA256

      9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

    • SHA512

      7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

    Score
    3/10
    behavioral6

    • Target

      $PLUGINSDIR/app-64.7z

    • Size

      105.2MB

    • MD5

      b9399ad497cd6ea2176ab15b51d4542c

    • SHA1

      909484d62da4290f1b7098de314951f57ac34326

    • SHA256

      3044af208499d801fe204a5a5d6b59d5d63e73e8cada635dcd5df60f7c8efb71

    • SHA512

      f52af84bbf755d5b80947de1d001e8e95f3696f1577dfdb371fba08884c256712b41ef3020d13eaf50d48f1403e2d11a70e71a461d16393ea43b6d7012f13acb

    • SSDEEP

      3145728:Nj7rmYEBshGgT2roh0SgtY0cIWDZns6fRa/L:Nj7rmUsgTwoWS1IWDZns/L

    Score
    3/10
    behavioral7

    • Target

      LICENSE.electron.txt

    • Size

      1KB

    • MD5

      4d42118d35941e0f664dddbd83f633c5

    • SHA1

      2b21ec5f20fe961d15f2b58efb1368e66d202e5c

    • SHA256

      5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

    • SHA512

      3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

    Score
    1/10
    behavioral8

    • Target

      chrome_100_percent.pak

    • Size

      138KB

    • MD5

      0fd0a948532d8c353c7227ae69ed7800

    • SHA1

      c6679bfb70a212b6bc570cbdf3685946f8f9464c

    • SHA256

      69a3916ed3a28cd5467b32474a3da1c639d059abbe78525a3466aa8b24c722bf

    • SHA512

      0ee0d16ed2afd7ebd405dbe372c58fd3a38bb2074abc384f2c534545e62dfe26986b16df1266c5807a373e296fe810554c480b5175218192ffacd6942e3e2b27

    • SSDEEP

      3072:48Kzw9bpM/OO3eS2Z8Gb0+VRLf0ld0GY3cQ3F2DExm/KLQ2I:9Kzw96/xm8Gb0OV8ld0GecQ3mExhLY

    Score
    3/10
    behavioral9

    • Target

      cursors/col_resize.cur

    • Size

      326B

    • MD5

      23633a8dfa3548705f28c83ee9584d6d

    • SHA1

      be5dd224d071d965bc0411206cadf9b33ddb384f

    • SHA256

      d3b49998f6d1039bf8b65f73f5784653164804c72908a40a5cf8ea850978a0d0

    • SHA512

      5b0971bf5c7bc17ae746c88e4fe3f0342d9288f8feb3ebc106b6a031d62b48af8843af0079a18c7ffe4a2200e9d6d58f92f1d87987a068bbf8e4bf7210153782

    Score
    3/10
    behavioral10

    • Target

      cursors/col_resize.png

    • Size

      321B

    • MD5

      0723c45d9f82b0e31a1fee26b9b4f53e

    • SHA1

      5608c3c92d70c61f597d1f1d3aaa85e72ebc4dcb

    • SHA256

      6ef1e382e5e2472e8426a0f486ab51fa2216cdf929a3b737f78564a8ad57b1ab

    • SHA512

      326f31b3e25c11fee7c28040252b5eaf183b0380ef87033134ff032eca4d90a28eda08837af833e0d5c9ec06d7e63053f23c64d9fec5fda0038c27546bfc1932

    Score
    3/10
    behavioral11

    • Target

      cursors/copy_drop.cur

    • Size

      4KB

    • MD5

      f92d1851a489b0af7ab807a2f07ebe16

    • SHA1

      d97c9d7ab76993448f6240322140dd23c756b6c6

    • SHA256

      18920d4ab5cd0b654b1e8bbc33fe5278907514a1b227f701a16b9a3309ee87ab

    • SHA512

      b4494c8da0734ec69caec38324c6b3b91e898ad8b25c9d7dee9ca56c41cdec768c16efc10d71c856a0bc633ff22cc76cb01ee8ef887899e2486fb7f78b340a7f

    • SSDEEP

      48:aWmmgXgQ4fgQgABBI/Iv/G/vvZv/m3uf2H+vz/:aN

    Score
    3/10
    behavioral12

    • Target

      cursors/hand_grab.png

    • Size

      534B

    • MD5

      7be75a54023adbe7d6b48260e4e8d032

    • SHA1

      81f20b4e0ca495e393748e0054d9ba12b6179196

    • SHA256

      8d8b7205410e7d0e32bd6b81769d7853025f5a1b2235e93088fd327c039e6b1e

    • SHA512

      2724620cb131b175b22e405bad2c7b6f2b771cae8f8402d85933a93aad409a6d5d2c01a534ef4f10900130eec6e394b470c2451ebbae76a950f15c46229f80d0

    Score
    3/10
    behavioral13

    • Target

      cursors/hand_grabbing.png

    • Size

      474B

    • MD5

      ddbc22bda750215abfc73d75e1105b17

    • SHA1

      f8dc1196227d95b7630dc85a3543c6db853f65cf

    • SHA256

      0e6c5b2ec6b01b9a0c52dd26dafd1c969cf073c6d47e9db8e53fa05912f73cee

    • SHA512

      5d1a6e89a1a96988230cf30fb156c166e26fc832affc5e7eb39ef974e69008403d54463a4b4a40c55c0ad8eb90e438c31a880f613d1ff42fc966ec961d396240

    Score
    3/10
    behavioral14

    • Target

      cursors/link_drop.cur

    • Size

      4KB

    • MD5

      66e13793e687bdb92c09e0ae7964e194

    • SHA1

      71019343b1747c19503e935aff3c7aba1fb70541

    • SHA256

      49d5f9b95e9968ba54ef9457f89386fbb29d7492fb9db1af920fd3433aae4a67

    • SHA512

      19dedb36b972ab005f01deb6f1eae1b9c0609f3312fd3f70dff93285390fac7b535e5d181f4a7cb25bd4f5933538ad7ebf44154f9d6d3eb04e412144926c4143

    • SSDEEP

      12:m0EbSrSZ7SYMSvxIRcSuFSQ1SuFS829krc:mbbSrSZ7SYMSvxIRcSuFSQ1SuFS829/

    Score
    3/10
    behavioral15

    • Target

      cursors/row_resize.cur

    • Size

      326B

    • MD5

      70618f41c70238453a7d876bac5ab501

    • SHA1

      bbf033428d8cf562ac3347440848b1b3ed1b65a2

    • SHA256

      241ca59e728f9faaa3ac9c626f44f8387a04699ec1bc468ecdae04c53ae2df04

    • SHA512

      513dfa3e15b887f4e785da9dbe04cff591a4ae3bc6d5f4b14d7dbfd3695221f6448b0d67132dbf80b1e36d9fbc2d245df23c1135d4dfa33edca3706d23bc89a4

    Score
    3/10
    behavioral16

    • Target

      cursors/zoom_in.cur

    • Size

      326B

    • MD5

      77492cf358d8b12629399322926c93f2

    • SHA1

      8291ac3dad4e4f33183ccdfad7b92b1594c760f9

    • SHA256

      eb69f540be1e416b7346017da48deaf5ba2f2ee0af366c04f1e374351b651872

    • SHA512

      6c8652770a041084a88f6a535991224423c003ac2b6b5949b515dc03b0187fb4a6cfdf3f39a6279e103601d991e95139e6ef8352e68e5dfd85d99c078e0b4f0b

    Score
    3/10
    behavioral17

    • Target

      cursors/zoom_out.cur

    • Size

      326B

    • MD5

      48b46c3e0650d525e715cf9cfa6c67e5

    • SHA1

      1ae6e82c4aae58c7e1cdcb1e5e76ce8973f8774a

    • SHA256

      f3829987f7124f73facf282354553b6ef8d9b58b3b02384d92c45421e2443536

    • SHA512

      e154d7fa552bc78755e6451950a159044fa85f5cea4a6a3a19a88e451962b24bce52a1b46b4b13eaa6b55b2e8be4b9eba0cf16adf1d2200f73be7dd0681b19e5

    Score
    3/10
    behavioral18

    • Target

      icudtl.dat

    • Size

      9.7MB

    • MD5

      224ba45e00bbbb237b34f0facbb550bf

    • SHA1

      1b0f81da88149d9c610a8edf55f8f12a87ca67de

    • SHA256

      8dee674ccd2387c14f01b746779c104e383d57b36c2bdc8e419c470a3d5ffadc

    • SHA512

      c04d271288dd2eff89d91e31829586706eba95ffbab0b75c2d202a4037e66a4e2205e8a37ecf15116302c51239b1826064ed4670a3346439470b260aba0ea784

    • SSDEEP

      196608:GEGwSv9AAQ48yTliXUxR0rHa93WhlU6tgYLu:G4KlQ4xliXUxR0rHa93WhlU6tgYC

    Score
    3/10
    behavioral19

    • Target

      licenses/aperature.license.txt

    • Size

      1KB

    • MD5

      1837a1eb671079c67ed2724719588c48

    • SHA1

      ed2c02b395fdeb3b56d0d4258c677a1329e78e54

    • SHA256

      ca1baea19e60be57dccc08a4cd82e75eca24ca683980cb1ff212824a964fd6b6

    • SHA512

      1df4217f219e0826c07d8bd8ebfff17d2cf34691c3450c23f84edf2bb35886bc6244b1897cfcbbc6b47f4c70e1c84a698bd48177c2fbb2f2154d2c005305e506

    Score
    1/10
    behavioral20

    • Target

      licenses/autofriend.license.txt

    • Size

      1KB

    • MD5

      318bceaa1151b1b6bffabad8dae01498

    • SHA1

      c776fc09a2e25058149deb3bfa163c0053860a90

    • SHA256

      ddae5748ee219e263f4239460d07d38a10852fc1f6693fe2765e28037783dd88

    • SHA512

      60c8960d6fdeb04711f6aa2713a66b05d3f7008ee33c4d762fe30f98f266b81a6c198a68aa0ea73bcd1ff4eea88db56ccd1a680c11db4ebfc444896da6b80a7e

    Score
    1/10
    behavioral21

    • Target

      licenses/autotip.license.txt

    • Size

      1KB

    • MD5

      5b0b97f483331418e30c469af896d87b

    • SHA1

      3e0ae2526e0f2809c81d524b8507fb64fc2bb4ae

    • SHA256

      09716796eb67471c518f3f4e567377d5ea5179c36e10bc0b30afe1261b770442

    • SHA512

      5882826f7f2c9921d5c309aaba79ea30bf57f95816058b2f1c26c3ec9848c8dcdae91d58512092dd7647f41f74f57975aadd9d048e18d8567dd3ed8a5b28b12b

    Score
    1/10
    behavioral22

    • Target

      licenses/badlion.licenses.txt

    • Size

      9KB

    • MD5

      a2ed77a24bd53e33a3fd458d99e9be0f

    • SHA1

      07af4fb75f3122867c9e3255ad6d1e11fca88808

    • SHA256

      803a15fe94c8ab1f4adf1a62fa043d414d3e4c1281c74cee57e6976474bbba05

    • SHA512

      8649571f5670a36e7fd011e533c394b0f28f51045abcdcb3928d731f02366cbc286b88cb4463d86e07e92b967d81cacda74a58f658843d89669045530324524d

    • SSDEEP

      192:J5M93+w4iqlQtEC52VNZs93wVSIRnfCnb4l7DX5hDtn:jRwztnsVNZs93wSIt/xXfBn

    Score
    1/10
    behavioral23

    • Target

      licenses/caffeine.license.txt

    • Size

      11KB

    • MD5

      0ba5044c64ef53cb0189c9546081e228

    • SHA1

      c8bc7df08db9dd3b39c2c2259a163a36cf2f6808

    • SHA256

      49bbe9114e49214df2ccc324cb3ac8d1d1aa1c3a0947f94c286765e86647b32e

    • SHA512

      a7ce8c7f21c031e4e6d037f4eabe8b200b8f1470731c05ea86028171f2964310dadc5def814d2d65164fbd23d720ecfd4d479ff5e269e519c787b4db96c7724f

    • SSDEEP

      192:qf9qG4QSAVOSbwF1wOFXuFJyQtxmG3ep/7rlzKfHbxc+Xq0rhlkT8SHfHj:kOu9b01DY/rGBt+dc+aclkT8SHr

    Score
    1/10
    behavioral24

    • Target

      licenses/cairo.font.license.txt

    • Size

      4KB

    • MD5

      5a540f4d98fc81713b81aeadc530c6ed

    • SHA1

      273c8a98fc1b2709cfce81d7f6960b63326e5485

    • SHA256

      17b90cece30db64934b7299fd76b033a3774c8a990e78badc74c59a5be8e0727

    • SHA512

      12b5e3d50da4d0aef2badcf784554257e7c8dcd9f598acca500861c1f0bb4686fd238c6ad8c2259b5047140e10d731e928490fa474577b7d847d387c9c07d702

    • SSDEEP

      96:FW+bHiilxwnEOWOKajy4vyviXQaGYBC23zCdZuKy0iQHZoG:zzl7hqyvaQ1+3zCdyQHZV

    Score
    1/10
    behavioral25

    • Target

      licenses/chromium.license.txt

    • Size

      1KB

    • MD5

      8694b4a605dcd105b40d081ad09f0f46

    • SHA1

      6666d31977554cf9d1558cbc63c339e8b07e3c94

    • SHA256

      73392d01c89eff27363d32973ba9fdce354b4bd82f90192bf8773174e358538a

    • SHA512

      17c5eb20d00902789d172c78379cc80b0c77696f3d2e076af79a056d537e2a0d68a0066a8fd132b3b7b20186dba509b1833128c2f082f2fb97058070336baad6

    Score
    1/10
    behavioral26

    • Target

      licenses/discord.license.txt

    • Size

      1KB

    • MD5

      f8cba3d1a6a62d09224f131fd3054008

    • SHA1

      661a941700833f7229cb17d206f1d25e23301a2d

    • SHA256

      cc981e3b2afd06ab5a1cdab7ced3cbb8a69145b5e2388485b806f6634313ff4f

    • SHA512

      4517c0046d156c67f3d7fb37e5985904de476cdb75ad7114eeb2fefd9957b67b07ef1cff02cae1ea37503e34eb0d7cd0bdba03fad5aadeaf6d070855e481edd8

    Score
    1/10
    behavioral27

    • Target

      $PLUGINSDIR/modern-wizard.bmp

    • Size

      150KB

    • MD5

      52ff52eee3b944b862c11c268a02c196

    • SHA1

      8d041966e6fba10aa5e10ce5dc1dc5175f11b2fe

    • SHA256

      2079f7a3eba60e0d9ee827a7208aa052a71b384873b641de5e299aeb8e733109

    • SHA512

      2861ae5a06f8413810947c08994f4c0da54a1acee8c4df72cd8b03a9503b26e5512809f8d70fd584239b04a651e7329a701bf7ddcee2dec2c2e14d05ae74f220

    • SSDEEP

      48:EWQsvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvW:ER4N4S/992/zDmrkVIe1ULo2K

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral28

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      466179e1c8ee8a1ff5e4427dbb6c4a01

    • SHA1

      eb607467009074278e4bd50c7eab400e95ae48f7

    • SHA256

      1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172

    • SHA512

      7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817

    • SSDEEP

      192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc

    Score
    3/10
    behavioral29

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      ec0504e6b8a11d5aad43b296beeb84b2

    • SHA1

      91b5ce085130c8c7194d66b2439ec9e1c206497c

    • SHA256

      5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

    • SHA512

      3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

    • SSDEEP

      96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr

    Score
    3/10
    behavioral30

    • Target

      $PLUGINSDIR/nsis7z.dll

    • Size

      424KB

    • MD5

      80e44ce4895304c6a3a831310fbf8cd0

    • SHA1

      36bd49ae21c460be5753a904b4501f1abca53508

    • SHA256

      b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

    • SHA512

      c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

    • SSDEEP

      6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck

    Score
    3/10
    behavioral31

    • Target

      $R0/Uninstall Badlion Client.exe

    • Size

      275KB

    • MD5

      8bf61f4211bc13645e961fea305b305f

    • SHA1

      71ef14c74e65fbe4d33474a3eda84c8624294a9f

    • SHA256

      9c66f90c5c634c90bf4c2eb45c6655aca761827a29931cbd4521ee3082642037

    • SHA512

      15487ad2443d4e1c26c1bacaf83a49706a4953ab59a3c673aac7f72599fe9562ad773ee24b154d4fc147c0ab6bf64fbb36a2a5f74d3767a5160fa413c2cec865

    • SSDEEP

      6144:Y740I5HQg+VxvhA6M7V72Ua8T2t0EyL+ya62:Si+Vds8CLRKJ62

    Score
    4/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks