9422365acf6002368d3752faa01d4a428adee1fe902fce397d024dabb4e009b3

Sharing

Copy URL

Twitter E-mail

General

Target

Oneclick Tools.zip
Size

564KB
Sample

250101-2skbra1mgq
MD5

d2be90c23063c07c5bf6e02c9400ac35
SHA1

c2ca99de035c17ba9b7912c26725efffe290b1db
SHA256

9422365acf6002368d3752faa01d4a428adee1fe902fce397d024dabb4e009b3
SHA512

13935887c0bb2006e65c0fd65cd625ac467d52425cbd084b21ae7246a1b97ed2a92916fa62fabf561e2bf0d610aa3dc4fd7e945d86d37280d8eabf2a0b46909e
SSDEEP

12288:SNRCQ0wbQDG8kjVy9KhxHu7G6h4AbKuZXDPpR9s8Z+:SNRKVkMUTHu7pdz+

Score

10^/10

Malware Config

Targets

- Target
  
  OneclickTools/Amd/AMD Bloat.bat
- Size
  
  364B
- MD5
  
  4f432879f0b02c48301741a208cd1309
- SHA1
  
  12f08180a3e9479e3ede245aa7904b1c85a61d37
- SHA256
  
  0617bbd07889ed453dffaf7ccefd7bbf1f092ca6dcb1d9d354efab231f8d385f
- SHA512
  
  9971d9076b038cd453e70b90cd408802a7ca4279ce1fc01395dcd9a341bca3d21b7d37491a1525935456816a20aba889586c6594da2bdcb44bba601627e1eedf
Score

1^/10
behavioral1 behavioral2
- Target
  
  OneclickTools/Dcontrol/dControl.exe
- Size
  
  447KB
- MD5
  
  58008524a6473bdf86c1040a9a9e39c3
- SHA1
  
  cb704d2e8df80fd3500a5b817966dc262d80ddb8
- SHA256
  
  1ef6c1a4dfdc39b63bfe650ca81ab89510de6c0d3d7c608ac5be80033e559326
- SHA512
  
  8cf492584303523bf6cdfeb6b1b779ee44471c91e759ce32fd4849547b6245d4ed86af5b38d1c6979729a77f312ba91c48207a332ae1589a6e25de67ffb96c31
- SSDEEP
  
  6144:Vzv+kSn74iCmfianQGDM3OXTWRDy9GYQDUmJFXIXHrsUBnBTF8JJCYrYNsQJzfgu:Vzcn7EanlQiWtYhmJFSwUBLcQZfgiD
Score

10^/10

discovery evasion trojan upx
- Modifies security service
  evasion
- Windows security modification
  evasion trojan
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4
- Target
  
  OneclickTools/NSudo/NSudoLG.exe
- Size
  
  174KB
- MD5
  
  423129ddb24fb923f35b2dd5787b13dd
- SHA1
  
  575e57080f33fa87a8d37953e973d20f5ad80cfd
- SHA256
  
  5094ad359d8cf6dc5324598605c35f68519cc5af9c7ed5427e02a6b28121e4c7
- SHA512
  
  d3f904c944281e9be9788acea9cd31f563c5a764e927bcda7bae6bedcc6ae550c0809e49fd2cf00d9e143281d08522a4f484acc8d90b37111e2c737e91ae21ce
- SSDEEP
  
  3072:XVLC09ymR7sITY17jR7h05cDnxngU9yInRU+Wi+StbaoJLQfo8BuA6N3ls:XT9yO7sITYNmYnbyInRU+Wi+StbaoJLR
Score

1^/10
behavioral5 behavioral6
- Target
  
  OneclickTools/Orca/Orca.bat
- Size
  
  3KB
- MD5
  
  3f9804cf3854d5c1e336870a487cb8c7
- SHA1
  
  ffa2298677dd21d93526ed39425d269a3ca5638d
- SHA256
  
  cffdb0f5c379fa9e714befd6028a5bd56e69751f1edd21d35858569d85937f2d
- SHA512
  
  469a716264bfd0db2ef7862b95f26438a1ae934d5fb17fb6648ddd2ac46c9a46a05303d3471f6fe9a875b8c010478fec34fcb11a0494b40f3f9a28229577cf6c
Score

1^/10
behavioral7 behavioral8
- Target
  
  OneclickTools/Timer Resolution/SetTimerResolution.exe
- Size
  
  137KB
- MD5
  
  29446c868a831614e6304dbc4159fa41
- SHA1
  
  3ce2b1e65ac65736c637bdbf6f9bfd642a54729b
- SHA256
  
  62418c793aca2d4eb5413aea702884cfec5048d27cb5d18fc1b3b029766c80bf
- SHA512
  
  b7b3e8f3d672e107fee23ad41f51c1fef7717487db82bf7e47534f2ab48615502b30ebf1788dc0c71b21caf1d908edf6561ec3a0ee2d31b1e9060b8521973569
- SSDEEP
  
  1536:knvX69yPilkEs4mVs588WHGF3jmVUukpT+RuoDgcTlbbJcQDEqnOU6gl0:knF6ls4Us588WHGFT/T+tM4VCU1y
Score

1^/10
behavioral10 behavioral9