Overview

overview

10

Static

static

10

Toolz (astro).zip

windows11-21h2-x64

10

Resubmissions

01-10-2024 16:24

241001-twvynayfpr 10

27-09-2024 00:57

240927-bawzqaxamj 10

26-09-2024 23:29

240926-3gqj3awfpc 10

26-09-2024 18:54

240926-xkc59avhjh 10

26-09-2024 18:38

240926-w945lavbqe 10

26-09-2024 16:26

240926-txsvpazdng 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Toolz (astro).zip

  • Size

    161.1MB

  • MD5

    103e93f9408f4195f294dc1aea765604

  • SHA1

    6e25051cb67851af85c1df5d1b91a90321e0957e

  • SHA256

    110fd83bdeee1785c51b4ae919ea9aabffe74dfd9014a42577bb5ede476ea58a

  • SHA512

    99dc616c28b3389bf4c5b49eaa5cb2f91eaeb0c9a22147a5da5bbe9e1dc061410f90ebc8e0064a4a070faba40448b551278cc578fa8dea638f9e45a27cbcdf56

  • SSDEEP

    3145728:sZparHZgZR/+0kZSi9vkbRNjX8GXKXaU5OgTbt+J7y+rL58Nj6m+ctQ+xhZJZSrl:6oGZp+0kut2OgTIJ7y+rL5oxaNb

Score
10/10
stormkittystealerium

Malware Config

Signatures

  • Stealerium family
    stealerium
  • StormKitty payload 1 IoCs
  • Stormkitty family
    stormkitty
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

Files

  • Toolz (astro).zip
    .zip

    Password: @ReverseEngineeringLab

  • Toolz (astro)/888 Rat v1.2.6.7z
    .7z

    Password: @ReverseEngineeringLab

  • 888 Rat v1.2.6/888 Rat v1.2.6.exe
    .exe windows:5 windows x86 arch:x86

    Password: @ReverseEngineeringLab

    c4540f421523fe2dc591e50be5ad7d0b


    Headers

    Imports

    Sections

  • Toolz (astro)/Anarchy Panel 4.7.7z
    .7z

    Password: @ReverseEngineeringLab

  • Anarchy Panel.exe
    .exe windows:4 windows x86 arch:x86

    Password: @ReverseEngineeringLab

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Anarchy Panel.exe.config
    .xml
  • Plugins/0guo3zbo66fqoG.dll
    .dll windows:4 windows x86 arch:x86

    Password: @ReverseEngineeringLab

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/59Zp7paEHDF7luJ.dll
    .dll windows:4 windows x86 arch:x86

    Password: @ReverseEngineeringLab

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/CjETR6GpGXqM.dll
    .dll windows:4 windows x86 arch:x86

    Password: @ReverseEngineeringLab

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/EVa7gBMKoaHmLC.dll
    .dll windows:4 windows x86 arch:x86

    Password: @ReverseEngineeringLab

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/FBSyChwp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/G3nl0mDcABnDuZ.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/KNTmoSnG.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/PK0TcnqTGFagQTS.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/RssCnLKcGRxj.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/WkUP83aP9CABpi.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/eMTYbTz0gueNs4.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/fzAgyDYa.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/mGWHaG2Jn.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/mML6WKMqdxjDGA.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/oYsKwDG.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/rNXXgmX25s.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/sJ88z8tsg5XzK.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/yL9x34D8X3oO2P.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/zVvPGvK64uLS.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/zVvPGvK64uLS1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Toolz (astro)/Borat.7z
    .7z
  • Toolz (astro)/DarkVision Rat.7z
    .7z
  • Toolz (astro)/LOIC_2.9.9.99 2.zip
    .zip
  • Toolz (astro)/Netflix checker.7z
    .7z
  • Toolz (astro)/XBinder V2.7z
    .7z
  • Toolz (astro)/Yang nitro gen.zip
    .zip
  • __MACOSX/Toolz (astro)/._888 Rat v1.2.6.7z
  • __MACOSX/Toolz (astro)/._Anarchy Panel 4.7.7z
  • __MACOSX/Toolz (astro)/._Borat.7z
  • __MACOSX/Toolz (astro)/._DarkVision Rat.7z
  • __MACOSX/Toolz (astro)/._LOIC_2.9.9.99 2.zip
  • __MACOSX/Toolz (astro)/._Netflix checker.7z
  • __MACOSX/Toolz (astro)/._XBinder V2.7z
  • __MACOSX/Toolz (astro)/._Yang nitro gen.zip