General
-
Target
1v1.lol_Subz.rar
-
Size
257KB
-
Sample
240723-km2v6sxbrh
-
MD5
646c0bcce5a1cbba02e12555e4ba0c3f
-
SHA1
406d1e749f77b331c0c5cbc4977002c89704dd8b
-
SHA256
11879aaf810fdacf73f694015e4b75ab1c68be8eb372b76f1c03d8b21d0dc1b7
-
SHA512
16953b0c223f258e8d4e00628d3f018a665eab36708092cc8a5dfbdc5ec821de2d719f04489ff595459e9c50cb3dda66ab4bdb69eab570ef88c1205c12b52012
-
SSDEEP
6144:wi8zD7uZ30sTaWbUBHTWWapGp3RdVJaEgLU1XG:sH6Z30sTaWQBzEMzdVNgLU12
Static task
static1
Behavioral task
behavioral1
Sample
1v1.lol_Subz.rar
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
1v1.lol_Subz.rar
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
subz 1v1.lol/1v1.lol.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
subz 1v1.lol/1v1.lol.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
subz 1v1.lol/subz.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
subz 1v1.lol/subz.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
1v1.lol_Subz.rar
-
Size
257KB
-
MD5
646c0bcce5a1cbba02e12555e4ba0c3f
-
SHA1
406d1e749f77b331c0c5cbc4977002c89704dd8b
-
SHA256
11879aaf810fdacf73f694015e4b75ab1c68be8eb372b76f1c03d8b21d0dc1b7
-
SHA512
16953b0c223f258e8d4e00628d3f018a665eab36708092cc8a5dfbdc5ec821de2d719f04489ff595459e9c50cb3dda66ab4bdb69eab570ef88c1205c12b52012
-
SSDEEP
6144:wi8zD7uZ30sTaWbUBHTWWapGp3RdVJaEgLU1XG:sH6Z30sTaWQBzEMzdVNgLU12
Score6/10-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
-
-
Target
subz 1v1.lol/1v1.lol.dll
-
Size
534KB
-
MD5
adc0f36cd8f487777b0b8cb3655898e3
-
SHA1
53ee41917ca35864c53118686f7b1b739c808248
-
SHA256
1d6e0247dfe3ed6a2b772394bfb432caa3c571a1405febf84580c484b06520cb
-
SHA512
083176a94835bd469542510d848cad64ce0583b7421f69c7eb9d5797d36fd9c523015745683963061bb9446138ecc64523d7bb21a0540a7fde00df0a94fd2e3a
-
SSDEEP
12288:aVHDyIjIMYCuk17b4fvLFWUn1ZuPuktwED+3:oeaIMMkFMfv8Un1Z93
Score1/10 -
-
-
Target
subz 1v1.lol/subz.exe
-
Size
26KB
-
MD5
865badf073378140dab7511b0dee0afc
-
SHA1
2ca65cda56aab2753204606d21d8432101bdc97f
-
SHA256
b8f42e6dcd16829517d25a55184fe6edfdcf47307242650a3f69af70e03eb080
-
SHA512
3c856db4b91f9e65f74862d3495a9f29b1977cb34afb48d0e613a9822c7bfd0b47e29aecf2cc901f8c6c7c1d1814b8b7d37e00e3de20781d1a84b85a75f8cd49
-
SSDEEP
384:befEpBwVQhGtxOZrX9qKRypUPa9BejCqttp2uYxSI8Vn9UKeQ3DDmd5G:C+QgXZi9Iuu2uYxS5UKl3nmd5
Score6/10-
Legitimate hosting services abused for malware hosting/C2
-