Analysis
-
max time kernel
48s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
24-06-2024 19:09
General
-
Target
888RAT 1.1.1 cracked.exe
-
Size
38.4MB
-
MD5
554cd80e1b5fc6c7d296b23e4b400664
-
SHA1
550d2da6068683ae545c3ca8910ec37671764fad
-
SHA256
1b6148c640e0d63bfd74b9df003b3214dacf2aa678a7fce1075c25cf033e0e5c
-
SHA512
7b3dd3ea1e85dbc66d299ff31891127a5fe8995ac7cc0741896a0593c439677f3734f0b5f925353fe5b1773f24344b1f8c274d4c7eab158566444fd110a4714c
-
SSDEEP
786432:x/gwpv29voFFcTLKy1kwql+9l2+OZuhQZUmvhSawvb+GlfR/s:qq2aFWTLK8x9kxZbd4awj+GR/s
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 2 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
AutoIT Executable 4 IoCs
AutoIT scripts compiled to PE executables.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 59 IoCs
-
Suspicious use of SendNotifyMessage 59 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\888RAT 1.1.1 cracked.exe"C:\Users\Admin\AppData\Local\Temp\888RAT 1.1.1 cracked.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
MD5a3083356947cdfb053c7c63cec79e85f
SHA181d71adf137d5a8dff56843250578bb68333ba9a
SHA2563e290e256bf19f56b233c42f19397807a83bde6cc792d6ea2f6c615cfc92ec1d
SHA512820ac1ca3472f2356c7ad3c7443a431eea3f710679e6467f47ee8918e7c206767ff99401ced14dd3d012d930b1aad3225b9f9e1a7a9ee4303a8b204f05fdf766
-
Filesize
239KB
MD529e1d5770184bf45139084bced50d306
SHA176c953cd86b013c3113f8495b656bd721be55e76
SHA256794987c4069286f797631f936c73b925c663c42d552aeca821106dfc7c7ba307
SHA5127cb3d0788978b6dc5a78f65349366dac3e91b1557efa4f385984bef4940b3ea859f75cfe42c71f6fe445555138f44305531de6a89c5beff4bf9d42001b4348e8
-
Filesize
3.3MB
MD5ea5d5266b8a7bcc8788c83ebb7c8c7d5
SHA13e9ac1ab7d5d54db9b3d141e82916513e572b415
SHA25691ac4d215b8d90aef9a000900c9088d4c33d58c5f35a720a385a3f2d2299e5d1
SHA512404b35fca478a1f489ec1af7be1df897190d7deb0cd8139c2c89d68c24fa377d904cf0c5e30c09ab448d74d87a47aaa3a872bf66a9bc9c124f52798320d34e60
-
Filesize
748KB
-
Filesize
348KB
-
Filesize
640KB
-
Filesize
2.1MB
-
Filesize
38.4MB
-
Filesize
628KB
-
Filesize
200KB
-
Filesize
1.4MB
-
Filesize
12.3MB
-
Filesize
572KB
-
Filesize
168KB
-
Filesize
324KB
-
Filesize
640KB
-
Filesize
200KB
-
Filesize
36KB
-
Filesize
38.4MB
-
Filesize
348KB
-
Filesize
2.1MB
-
Filesize
1.6MB
-
Filesize
572KB
-
Filesize
1.4MB
-
Filesize
12.3MB
-
Filesize
492KB
-
Filesize
200KB
-
Filesize
628KB
-
Filesize
324KB
-
Filesize
816KB
-
Filesize
640KB
-
Filesize
1.6MB
-
Filesize
72KB
-
Filesize
816KB
-
Filesize
628KB
-
Filesize
1.6MB
-
Filesize
348KB
-
Filesize
640KB
-
Filesize
492KB
-
Filesize
200KB
-
Filesize
36KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
1.6MB
-
Filesize
200KB
-
Filesize
200KB
-
Filesize
36KB
-
Filesize
640KB
-
Filesize
1.6MB
-
Filesize
2.1MB
-
Filesize
572KB
-
Filesize
348KB
-
Filesize
324KB
-
Filesize
76KB
-
Filesize
816KB
-
Filesize
572KB
-
Filesize
2.1MB
-
Filesize
72KB
-
Filesize
38.4MB
-
Filesize
324KB
-
Filesize
2.1MB
-
Filesize
38.4MB
-
Filesize
324KB
-
Filesize
76KB
-
Filesize
816KB
-
Filesize
492KB
-
Filesize
72KB
-
Filesize
348KB
-
Filesize
748KB
