Overview

overview

3

Static

static

1

S3LF BOT.zip

windows7-x64

3

S3LF BOT.zip

windows10-2004-x64

1

LICENSE.lock

windows7-x64

3

LICENSE.lock

windows10-2004-x64

3

RunApp.bat

windows7-x64

1

RunApp.bat

windows10-2004-x64

1

afk.py

windows7-x64

3

afk.py

windows10-2004-x64

3

afk_data.json

windows7-x64

3

afk_data.json

windows10-2004-x64

auto_messages.json

windows7-x64

3

auto_messages.json

windows10-2004-x64

3

auto_responses.json

windows7-x64

3

auto_responses.json

windows10-2004-x64

3

automessage.py

windows7-x64

3

automessage.py

windows10-2004-x64

3

bot.py

windows7-x64

3

bot.py

windows10-2004-x64

3

config.json

windows7-x64

3

config.json

windows10-2004-x64

3

requirements.txt

windows7-x64

1

requirements.txt

windows10-2004-x64

1

status_rotator.py

windows7-x64

3

status_rotator.py

windows10-2004-x64

3

tokennn.py

windows7-x64

3

tokennn.py

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    S3LF BOT.zip

  • Size

    11KB

  • Sample

    240814-rtlwvsxcke

  • MD5

    0a8cde3c0dbccd5e4292315e9fbe384a

  • SHA1

    70af443250f498f9087b45527330ff85af1c116b

  • SHA256

    2795153f640f44d5fd12c73aa5291f29f3448bade08565e5e326c07184c594c3

  • SHA512

    030a8a01d958cd37ffc28d7c2c27d3c42d90074b35d9ad7260a04fd64ebd47454249d3829ff229a8f24eaaf6829bb533494f572e9de01074ebd1ff2b9368abf8

  • SSDEEP

    192:4HxfJ4mCW/GVdPT9hIXjBKExJZRIgoh5oZU3ZbekgVPDGcPgBwAH7V:4HTctLWNKO3Cj/o8ZbeXtPgp7V

Score
3/10
discovery

Malware Config

Targets

    • Target

      S3LF BOT.zip

    • Size

      11KB

    • MD5

      0a8cde3c0dbccd5e4292315e9fbe384a

    • SHA1

      70af443250f498f9087b45527330ff85af1c116b

    • SHA256

      2795153f640f44d5fd12c73aa5291f29f3448bade08565e5e326c07184c594c3

    • SHA512

      030a8a01d958cd37ffc28d7c2c27d3c42d90074b35d9ad7260a04fd64ebd47454249d3829ff229a8f24eaaf6829bb533494f572e9de01074ebd1ff2b9368abf8

    • SSDEEP

      192:4HxfJ4mCW/GVdPT9hIXjBKExJZRIgoh5oZU3ZbekgVPDGcPgBwAH7V:4HTctLWNKO3Cj/o8ZbeXtPgp7V

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      LICENSE.lock

    • Size

      1KB

    • MD5

      a4f846ce4481e7cb946a08610e7cbde5

    • SHA1

      69e2f86acdca28ba7b28ce0812157837f0e86560

    • SHA256

      1ce3fe3a80da4796d3865d6a6f0a8de7b96b93385a035e8319ca5021822fcb52

    • SHA512

      2ee64fa07a3b3dd23d74932c653d349edcd4eeae0747aa2e19cb52826fbbcfb7872cd4fc0f17967b35fab4c88444bec6e63804663ba6c2f189dad139f1b3a9c0

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      RunApp.bat

    • Size

      284B

    • MD5

      e0af156b3fa5e4337a9efc52ed546cf6

    • SHA1

      cf1ab467a724c9c116bdbdb9817acb9db3e95fad

    • SHA256

      48ac7cfa451e9e7e23a987b495a45e026322047fcc7db9c273ff38e4c030f37f

    • SHA512

      d706839ee5c647993ab57ed99908b4b159e77d87ac9c40798a59a517a87152bbb0a34373b2ef87237310fc63efa1d9d8bdfb39199c7394ecf7ad5fa5e1de5c34

    Score
    1/10
    behavioral5behavioral6

    • Target

      afk.py

    • Size

      2KB

    • MD5

      cf09dbf80cbe7642a045f9bd077883dd

    • SHA1

      d869f10cbe4c29d3d821b82b279de4accddb8bbd

    • SHA256

      a2ccb45af3cb8b0492c2fa3e650ea05d52f5d49ae0f30a1f1a5529c64bdbabf1

    • SHA512

      41df19dc68cad2dee897a9f29abe7509c796e8e2f223f1f16908bcf0949fc4776a34ff84b5fde8cc5231b85b919972f51eb5d993694b109f87f11e088ce66dc0

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      afk_data.json

    • Size

      2B

    • MD5

      99914b932bd37a50b983c5e7c90ae93b

    • SHA1

      bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

    • SHA256

      44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

    • SHA512

      27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      auto_messages.json

    • Size

      2B

    • MD5

      99914b932bd37a50b983c5e7c90ae93b

    • SHA1

      bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

    • SHA256

      44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

    • SHA512

      27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      auto_responses.json

    • Size

      2B

    • MD5

      99914b932bd37a50b983c5e7c90ae93b

    • SHA1

      bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

    • SHA256

      44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

    • SHA512

      27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      automessage.py

    • Size

      3KB

    • MD5

      4de6baf8791574cd541aef6e0dd3ca36

    • SHA1

      960aa24a7efec53665ef892b20c24e884edce823

    • SHA256

      33d3bedf34de9f2c976e9eb5cee6516581c25504907ea6abab32b7294867f385

    • SHA512

      b26cd501997d990198d5fdbb4b67027a24accfddc3b6ddefaa1d0b26f2e39648f65f9294ffd651f03ac724ea40c027f1b940348127e5f815b54a62760bc4c004

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      bot.py

    • Size

      25KB

    • MD5

      e46dbd4f29a2a3c869396b3626b8bb2c

    • SHA1

      b992a50d5924d1d92439cc048c73d8baad801d6f

    • SHA256

      00fc07da8b27f0dce6a748dc444dc63657d55810b2b5493bd8b3499c61860375

    • SHA512

      ccb87214e6aa3781d9d206d199412cc4a585d0d1fb956b097f0db4d2335fa75a3ab1fb9f639a54eb5303f06550bc60fda0f0eccfde57c261e55cdbdb74af31cd

    • SSDEEP

      768:4WI71s7FR/QmJyL+7L+7KzdizTwVbojh0Nh:4WI71s7FRo7+3+ez2kbbNh

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      config.json

    • Size

      250B

    • MD5

      b11e59e64824eae1ad8f4931226f39bb

    • SHA1

      d19ab3856be1735e5974d6f813a62c5c1afb2ce2

    • SHA256

      ac709ac62e8a2d28a84b2473ac35ff7779dc6dc6e1ed3339ba6fd88e89b14797

    • SHA512

      86498e71aa238a371400444f94018efb391da5c28816b71cf6123f3ff169b11bac1605ed9cc73aa51cd227b7af6aa78d6fa447fbbfc63cea08f58f58aca8b5e5

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      requirements.txt

    • Size

      98B

    • MD5

      98a097a203e707d336e7be9b7fd7fd94

    • SHA1

      57ac47044b127f4f386af826bcb8be2cde14ece3

    • SHA256

      1dbc6a348459e900cb2ff33bf9e44ce109d6cb9010becbb4003f8aec365214be

    • SHA512

      90a46e1ee6a777a8bb76d4c926002082c6ae544a3164cbee3ce0944905c70037994d74298d39bce94a72d17f3ebf7fcc490140cbb15e3bc02ce66944e6cc8166

    Score
    1/10
    behavioral21behavioral22

    • Target

      status_rotator.py

    • Size

      2KB

    • MD5

      7f57bd611cd652b29c2dd04dd9be2839

    • SHA1

      49e0728b1e911957be06fa4fcffeab3a86d793dc

    • SHA256

      b021e8c5f37415c8cc17c6b35c49477e23196d1d37bfc02b42bf2c0f9c9cf4f8

    • SHA512

      0302e370b5c929a962a9927c3b63d3499c620c7b6715c09df4066fbd60b5449112d394b226aa0d851588e7d4e561cbcd3f77522819615cefe72a1d9a059883ad

    Score
    3/10
    discovery
    behavioral23behavioral24

    • Target

      tokennn.py

    • Size

      40B

    • MD5

      d80806becbc4a5960fb65d417e1e8e71

    • SHA1

      b07f3d37852230cd667f57ec728b907b003c7770

    • SHA256

      547d171e481ee1996fc4aa9909f1491efa1e2e30960f9ebf68cf7cd96195965a

    • SHA512

      9ee335000fff6a981212cf557cc7571687d81a526ab1f6eca0c68958f6a5aca8a7090627da53f84a6c25cb6ca75f239a12f5a43840e40f1011ea24bd4493c9cb

    Score
    3/10
    discovery
    behavioral25behavioral26

MITRE ATT&CK Enterprise v15

Tasks