General
- Target S500RAT By WantHacks.zip
- Size 38.5MB
- Sample240720-1q1ehsxcqh
- SHA256 f9eace47e403fccd257952627a851f7a5405f42935c2b4565fbe3e42354dd013
- MD5 b641eab5c7d99d858e545a99f36ec4b5
- SHA1 ba7d9a5004a59ad397d21365ed61549cb28a8c92
- SHA512 fceb74deccf828d11f82a7fd624454aefa91e17389b39e98e17674daa4e016bb083ae7197628a8ba52145eceb7514d2899683077e688dc53598c95ddb5c68530
- SSDEEP 786432:t7UqhS1CzI+b5ck4MHc8RuboWJhZ1HYMZgUoRZXAEIy5sx5oKzn:toqhS1Cz3GkRc7sWhfqZQ+5snXzn
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Behavioral task
behavioral1
Sample
S500RAT By WantHacks/._cache_S500RAT.exe
Resource
win11-20240709-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
S500RAT By WantHacks/Plugins/Keylogger.exe
Resource
win11-20240709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target S500RAT By WantHacks/._cache_S500RAT.exe
- Size 17.2MB
- SHA256 02c370db69059ca56ef2346846ec0a23f4e56185a9c13f50a13dd0db894e2d0c
- MD5 22e3b5c6b876c3a3195301daa78a74c9
- SHA1 120e4286764977253acf63d7db8bb33880c3f8d2
- SHA512 ce3e51c28a87cdff9c6531b8f4ac321c91a8fb2b31eb0fd03b19da8aaea4d040c755585c488c3446a5cfb843b60a8c28998f3babfc3e2bce47d4e8d6af46401d
- SSDEEP 196608:ch0y2MuVNz+KorG0y2MuVNz+Kk0y2MuVNz+KN0y2MuVNz+KLiQB7Z0/slzLIEu:ydQVNIGdQVNAdQVNRdQVNfBd+2Lk
- MD5 SHA1 SHA512 SSDEEP
Score7/10Loads dropped DLL
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
- Target S500RAT By WantHacks/Plugins/Keylogger.exe
- Size 10KB
- SHA256 a17a5bf35d8b784c3111632ba7e0c30a2c1a9c2c95b549235affc16d6d055477
- MD5 4f846f2117c4eab285289b0090521b1e
- SHA1 e25287c39bad32159417c5f0bf798625b6beff45
- SHA512 fd946b5f7c3c7d32f226897283de7ba3b4a4ecc2919c363877f1258cd24ed1a52bce53af2fe4ef34c4ac30d00fc456fd4e1593b79c37f7c22211f2c4f6092e5e
- SSDEEP 192:irtmcuq65SoDxi4maEYbRzmEsLkjgv5JHT1eJYHcwY7fazB+LEi:irtlF60GE9rUhVsLF5p1rYydmE
- MD5 SHA1 SHA512 SSDEEP
Score1/10