Overview

overview

10

Static

static

10

Nuke Tool ...no.exe

windows7-x64

7

Nuke Tool ...no.exe

windows10-2004-x64

8

Resubmissions

12-12-2024 15:34

241212-szwtpaykhv 10

12-12-2024 15:12

241212-sk9f8sznfj 10

12-12-2024 03:03

241212-dj9y2sykfs 10

11-12-2024 08:54

241211-kt1axsznhq 10

08-12-2024 15:39

241208-s3rzxaspbk 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Nuke Tool discord-gg-kasyno.exe

  • Size

    42.5MB

  • Sample

    241208-s3rzxaspbk

  • MD5

    51817b9dcd9c193c3358f6b179d268d1

  • SHA1

    48711e49dd33723c12a2ba925d228b99ab297274

  • SHA256

    eacbb5f16c8e1315bfa69d3bb0ce318cf246cff642bbde43e6263fd34e0c399b

  • SHA512

    6a5b1ac87137fe7ced1c902ee331d2eaf38a6d042b836190abd1a6a9f3826e1141c86ab64557992e7c388278f81f8abd04e60027e790cad8713c374f920f6957

  • SSDEEP

    786432:gDEDi+G9pN2TxKFLyPnoVIXkXVGRG7dcuZaqdior4XXpf6q3loaU/fsc+KkeAhev:ggDi+RoFLyPno/AydcucZfb3KnqKUhev

Score
10/10
blankgrabberexecutionpyinstallerupx

Malware Config

Targets

    • Target

      Nuke Tool discord-gg-kasyno.exe

    • Size

      42.5MB

    • MD5

      51817b9dcd9c193c3358f6b179d268d1

    • SHA1

      48711e49dd33723c12a2ba925d228b99ab297274

    • SHA256

      eacbb5f16c8e1315bfa69d3bb0ce318cf246cff642bbde43e6263fd34e0c399b

    • SHA512

      6a5b1ac87137fe7ced1c902ee331d2eaf38a6d042b836190abd1a6a9f3826e1141c86ab64557992e7c388278f81f8abd04e60027e790cad8713c374f920f6957

    • SSDEEP

      786432:gDEDi+G9pN2TxKFLyPnoVIXkXVGRG7dcuZaqdior4XXpf6q3loaU/fsc+KkeAhev:ggDi+RoFLyPno/AydcucZfb3KnqKUhev

    Score
    8/10
    upxexecutionpyinstaller

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks