Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

• • Target

    DoomRatBuilder.zip

  • Size

    13.0MB

  • MD5

    3c276bca2ec2bd57e202054f656cf9f1

  • SHA1

    286d6f2cfe420316d334dd6b3fe72ee722baad6f

  • SHA256

    74cfc057cbfeb17b52c02abd1628a732f88509ae3bdcf43acd2621fc89e64bce

  • SHA512

    1fafba85fcfe24433d0540c92fb3d8569b5fe70e9ef8d007bb0b34d793fe0cffe6b1b546fdbf46d0a085e3a7d2b91f3567128dff2494a24c1d895249d9d62d60

  • SSDEEP

    393216:y2Ms95kubaxzRJ80LBRszNZ88u3RNu+xTmXleTi5:yhsPba5RDtRsRZ88ERPUXh

  Score

  10^/10

  asyncratberbewblackmoonblankgrabbercobaltstrikecybergatediscord.gg/scamalertskoiloadermydoomramnitsalityxworm6defaulthabbo anti vm apt group backdoor access banking trojan bootkit malware botnet controller clipper malware crypter data collection upx packeradwarebackdoorbankercollectiondefense_evasiondiscorddiscoveryevasionexecutionloaderpyinstallerratspywarestealerthemidatrojanupxworm

  • 6bXW8llvSi

    SKIBIDI TOILET SKIBIDI TOILET SKIBIDI TOILET!!!!.

    adware anti vm apt group upx packer backdoor access banking trojan bootkit malware botnet controller clipper malware data collection crypter

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Asyncrat family

    asyncrat

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Blackmoon family

    blackmoon

  • Blackmoon, KrBanker

    Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    trojanbankerblackmoon

  • Blankgrabber family

    blankgrabber

  • Cobaltstrike

    Detected malicious payload which is part of Cobaltstrike.

    trojanbackdoorcobaltstrike

  • Cobaltstrike family

    cobaltstrike

  • CyberGate, Rebhip

    CyberGate is a lightweight remote administration tool with a wide array of functionalities.

    trojanstealercybergate

  • Cybergate family

    cybergate

  • Detect Blackmoon payload

  • Detect Xworm Payload

  • Detect discord webhook

    This file contains a discord webhook.

    discord

  • Detects MyDoom family

  • Discord.gg/Scamalerts family

    discord.gg/scamalerts

  • KoiLoader

    KoiLoader is a malware loader written in C++.

    loaderkoiloader

  • Koiloader family

    koiloader

  • MyDoom

    MyDoom is a Worm that is written in C++.

    wormmydoom

  • Mydoom family

    mydoom

  • Ramnit

    Ramnit is a versatile family that holds viruses, worms, and Trojans.

    trojanspywarestealerwormbankerramnit

  • Ramnit family

    ramnit

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • blankgrabber

    Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.

    stealerblankgrabber

  • Async RAT payload

    rat

  • Detects KoiLoader payload

    loader

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Modifies Windows Firewall

    evasion

  • Clipboard Data

    Adversaries may collect data stored in the clipboard from users copying information within or between applications.

    collection

  • Executes dropped EXE

  • Loads dropped DLL

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Network Share Discovery

    Attempt to gather information on host network.

    discovery

  • Obfuscated Files or Information: Command Obfuscation

    Adversaries may obfuscate content during command execution to impede detection.

    defense_evasion

  • Enumerates processes with tasklist

    discovery

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1