Extracted

• • Target

    dolphSol-Macro-1.4.0.zip

  • Size

    350KB

  • MD5

    bbc77b899b1705b7f8c062d794cec2ba

  • SHA1

    203d41e93914efd9cb8d1dff0ea40f0b44563246

  • SHA256

    f5705d808d9f833f4de7d590d139b5e8b0d93af7be3231ac2d2124c305766bab

  • SHA512

    099e73515e091d07e5cb73df0e9ce0050dfa3e2914e9f24f6bd8c0597ea0921ca00dd706485eb423ecce7bf49486080e138c15a7d13cb69e468225149f0c013f

  • SSDEEP

    6144:TG0vJr2a8WVyE2GNNF8nuPLgkwUvlHI9bCHCBP8KkMWap54ZhPROaD3gN1p:TGOga8wXNNF8wE5tB0KkMWap5Orgzp

  Score

  10^/10

  nanocorequasarnot a rat lolloolooldefense_evasiondiscoverykeyloggerspywarestealertrojan

  • NanoCore

    NanoCore is a remote access tool (RAT) with a variety of capabilities.

    keyloggertrojanstealerspywarenanocore

  • Nanocore family

    nanocore

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • Legitimate hosting services abused for malware hosting/C2

  • Drops file in System32 directory

  behavioral1

• • Target

    dolphSol-Macro-1.4.0/.gitattributes

  • Size

    66B

  • MD5

    05bdb783ee6514c8c072e47680af8ff7

  • SHA1

    ba3dfe345280bdcc5e817bb02cf49b8b8d8e1c4c

  • SHA256

    1a1dbe176bc233b499d35a57db7513f2941c99ab9759f177830c9149be99005b

  • SHA512

    9e820d6126d62c0b89e380c69685f6668b2f131283f57e524f59492fa6df22844dda1b90d244d4a1f8aea78a84e65d47b1a878168c4e41001459a947ef275ffe

  Score

  3^/10

  discovery
  behavioral2

• • Target

    dolphSol-Macro-1.4.0/.github/FUNDING.yml

  • Size

    880B

  • MD5

    ba67690454ab22c3de6a8f5dbe1ec235

  • SHA1

    659bb731b2c7eeb903cda2c4c199a0fa19545f8a

  • SHA256

    8fcfa1e2ee335786666a831c6c6c2fbaf513c0b3dfc07e86f1a77f1494c72fda

  • SHA512

    8c778926dd37fcad14fedc35fb9d057e1e879b23afa2710c289e2926714e2dc031a744ab1d636a75af87e20bf5ead66c8433ce332759aaf251052a34288993b9

  Score

  3^/10

  discovery
  behavioral3

• • Target

    dolphSol-Macro-1.4.0/.gitignore

  • Size

    31B

  • MD5

    2d930d7a52be4103684fb480bf72c973

  • SHA1

    d19064239269b0e2ae302bda2b809d7caaca34ca

  • SHA256

    8c25502af1b3fc2e33e9d1b9b263158671fee745a74af5f9d1fcb8cbb488d3c8

  • SHA512

    775e758d0ede6386807d5a1587077ee3e684bb8744eec4154c7fb606f34ae1283e9136c3f5ce3e524faa6dab69dc862ce00b3756e566fd461821f35062b0644b

  Score

  3^/10

  discovery
  behavioral4

• • Target

    dolphSol-Macro-1.4.0/.vscode/settings.json

  • Size

    92B

  • MD5

    8d7cfaf419f64016c2b95cc47105221f

  • SHA1

    5c3651752e2a2448b85665ea47b869b99f34ad6c

  • SHA256

    e7cb6b38d3f0cd2191db59ba9d0c788bc3a56025a0cd0aee6db3a2fb38abb6db

  • SHA512

    10926ea7f1fb796f676de1e78f9a8abc7a6b490bc9617dc07ceaa8178389762d7361b2b7df1c10f806123f0ce4be0fc7a4a57f70921efb2bd9514b4445168868

  Score

  3^/10

  discovery
  behavioral5

• • Target

    dolphSol-Macro-1.4.0/LICENSE

  • Size

    34KB

  • MD5

    db95b6e40dc7d26d8308b6b7375637b6

  • SHA1

    b4d7662bb6b0b804c8fc94f7bc81f59dce0c36f3

  • SHA256

    605e9047a563c5c8396ffb18232aa4304ec56586aee537c45064c6fb425e44ad

  • SHA512

    6dbfcd77cdf7d1b8bede7d6c7b2d61943033da1bdd675a419af2f183798f7ece774fa9ae0b189d92200065704be2ba11fa0966e3f1d6edf9ffbb1b61cf60c73e

  • SSDEEP

    768:1o1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7J:1hcycsrfrnoum

  Score

  1^/10
  behavioral6

• • Target

    dolphSol-Macro-1.4.0/Main.ahk

  • Size

    65KB

  • MD5

    0f7e0ab3287b055042f9b09b2e563a89

  • SHA1

    cf17ba337d4489ca41b3ac81edbee13c5e52da43

  • SHA256

    c12d03958c6ba32edd29b24232975e453a264093fcd45dead71584f718a5e4ea

  • SHA512

    5d3f1704c4484a7bd59b106c45a9723c0203e52f42c9aa3eb78bb3869e610551d3bd60e99ecea94f99803d4dbb02554dd95f28a44a2d7aa0bf0441fd9ad4f45d

  • SSDEEP

    768:YUifXiM0QdowGe+uMDGR/2bV11vPwA5BtrBp8ZCoMoY4jxpI0BgvU:YjyM0QdozebkwWVtz4jx9WU

  Score

  3^/10

  discovery
  behavioral7

• • Target

    dolphSol-Macro-1.4.0/README.md

  • Size

    1KB

  • MD5

    2fd300ab72e6580c77d267ef1742ee69

  • SHA1

    7d61e6513d67f8346be1e1799823619e3a33aa67

  • SHA256

    500ff9b447822a5a7b60c29803bf48ab0b77f703b92ae5cda92d4616138e3e65

  • SHA512

    103f64943dd3435e3b4b0f071f0c884900efe7ea67dcb2bb82d91ad9ebe20e1da0271b32555e06fcf4be246f15bc6b4797859e70e62536de732741cb3d3f4474

  Score

  3^/10

  discovery
  behavioral8

• • Target

    dolphSol-Macro-1.4.0/images/auryn.ico

  • Size

    127KB

  • MD5

    d25b239f728617c3c6b41ceb0512ac8e

  • SHA1

    c7f858ca453c2d141c15d9965c763e682ceb4e1b

  • SHA256

    b49c39dc0f040c1b8539dff23b2a757103a8c723010348c69837052d2a41ed0e

  • SHA512

    0c100c4ee173f27aef2f160232f65ad86866bc865232b686be51a081725f7f83d1adb790d736acf719da4ca9f9916a8835a376405a18d0e57f73eeb6dc997fa4

  • SSDEEP

    3072:w3kvQ2g3y7WVMvEbCGJWCFCHTaCVEqJI0h:w3kI2amWV8E2GNFoaCVEqB

  Score

  3^/10
  behavioral9

• • Target

    dolphSol-Macro-1.4.0/images/discordIcon.png

  • Size

    10KB

  • MD5

    d74865e1094f5ac0a0e782875449ff66

  • SHA1

    3466cd8a13ba56833bc79aef606cb2cb2901c682

  • SHA256

    b2939df5a48f422fc9d62f270c182f07b5fd5a7a334478ea73af4fdb5eb12d3b

  • SHA512

    ac3f56552e2279dbff4101fb973e0e109dc79730050fdea3360a96c8888a634ebafb7b263303ec327dca1c1677ee2fc11d87548c30bc6ea87634d76e20fbe0b9

  • SSDEEP

    192:TbsBgjzwDr3L4MeSx5f15nbePguPVhnmsjq87R9oa3qxb6dX:TbsBgvwzTTbf15nygKVFZjq8R9oa6x2

  Score

  3^/10
  behavioral10

• • Target

    dolphSol-Macro-1.4.0/images/glitchTest.PNG

  • Size

    9KB

  • MD5

    2cae2cdb45d7fafb6342b3a6581a38c3

  • SHA1

    b64b95bea6863da476ce82ba1ae26675aa93bfa1

  • SHA256

    5e6b75ca1a6bb5a13d37a900f3eb0baa0193d538c0e88a68b7a7343c74ea0f1d

  • SHA512

    d4eb9118a67ff52784b577725fb0c8091c01eb03f741e9b9dfab05a0c40f1f14a2e1c2e340d05b69eab7fd0bad880163bb1d2ab97f347e56aa5b37e14bd454a8

  • SSDEEP

    192:OExbTCSrWAeLOmohUKUcxqzVjVoCNY4/qZ5XQ00OSvXkugpLW4:OsbT/rveLObhUKU+qwCNbC3A/OSvUB

  Score

  3^/10
  behavioral11

• • Target

    dolphSol-Macro-1.4.0/images/nullTest.PNG

  • Size

    8KB

  • MD5

    f4a67b0991d7721c96e9068ba42954b4

  • SHA1

    78fd7f7ac1c0bf05f0b9feed00b128e688ebc7e3

  • SHA256

    33836c5af14caa838444856a871bdf1908e3b60c29ca0f33d96734171949aa43

  • SHA512

    16cc90c0c9166bdec2b5ceff1c51a29b4c42844130516244a0e4ada3c22df1401c728720584b7c7541538f71d16ea49ea9052449a88558c0ab87606c304386d8

  • SSDEEP

    192:TV5wuMDG0aW9iy90PcQTnyGr2Jr3yVK9sOU4wwNYNO1:TD7MD3rzztRjRz

  Score

  3^/10
  behavioral12

• • Target

    dolphSol-Macro-1.4.0/images/pfp.png

  • Size

    17KB

  • MD5

    cdb24d9f72240335149d7e9b143719b9

  • SHA1

    b2f84080866467fe05146f6d67328ba374111f4e

  • SHA256

    e60d30f5f131b8d2e35fa46901c0cf232b499bef2762e3abc5148080067e5408

  • SHA512

    064428bf3160b49204c1733dac7147ff505228027036c6118cacfd0d5e6c487ebe15ed42125a9284d526bc2a9232b66d33dce80c7e0c63c579fba622766be122

  • SSDEEP

    384:Bk7aqbwjr5IBnXQ9ihhRaUCXE/D+iA7uYOZhSChtTlhcqgjITl575SalIwBU:Bjqer5IN7tCXVCtTcJjwl5755Iwe

  Score

  3^/10
  behavioral13

• • Target

    dolphSol-Macro-1.4.0/images/play.png

  • Size

    1KB

  • MD5

    37d3dff277b5ec0990eeefe484c8a604

  • SHA1

    5388492efdf36e436e5061347e82339d1611e883

  • SHA256

    4ca7e93cdb8255443dc191aa0268719cec1b84800d22e8a9a5aac12d636de00e

  • SHA512

    7955256b1d3a1394f3802663607b09899b3b1e3107e4e4c03b4d50c1eb42354c09fc9fec35e6914a24275abbb4e921ff0b4bcd9a3a1cd8d71fe28fe7fd91ad1b

  Score

  3^/10
  behavioral14

• • Target

    dolphSol-Macro-1.4.0/images/starfallTest.png

  • Size

    7KB

  • MD5

    e4b9a94bb3a47de78c7c2678a7e2fee4

  • SHA1

    d11e060df81c12be140fc893641ef3e46d2d1214

  • SHA256

    c31b52644649f18c2a672a84fb11346a0e7f2e1b2423f5232335b1247c00dac4

  • SHA512

    b92cf5d62f49693478ad9cdb14f36db63c992f3979aeff433b9fc415da6b80692d16aa77754e11ba44ecb81e437767b38c786fe508c923b58b62829aa1badbd9

  • SSDEEP

    192:/wyhGO09YYwVcaEHO7YolMIdV8to8RqdZH+8pGdfy3bK:/wDO02YwqQ9d2+8RaeUWy3bK

  Score

  3^/10
  behavioral15

• • Target

    dolphSol-Macro-1.4.0/images/starfallTest2.png

  • Size

    10KB

  • MD5

    a846c66b0feef9bc81238670f7f44040

  • SHA1

    a3ac864aa4613a39041733575ce388f92aa4f000

  • SHA256

    095b6890d9f4ecb6b27f1c642fa12def13bf92b705b7970ecfae54eeeb099eaa

  • SHA512

    ee21e2fa8418e6d39288d3f193447477739278a6ceea71a9e544ff9a5b2b1c626995642d40cc3781831304b6e3c31fe1a0f031e4081069239a7ea59d99c80263

  • SSDEEP

    192:YC2wgw8jrwVN8PpgqoAIkxIL8kWlK/49h0SmOR5ipZ/c99qwNmOVB4Sus39:E28iqmqo7k2IkCKAYSmOR5w/c99TmE4g

  Score

  3^/10
  behavioral16

• • Target

    dolphSol-Macro-1.4.0/images/testing.png

  • Size

    27KB

  • MD5

    d28a477b69c0458ecd0824a76083cfbf

  • SHA1

    bd87ada7be6caca30848694457f755273f23200b

  • SHA256

    40d95136a9a167300ac2a27dfb1e110c5d32f48ddaab2f3cdf49910720b6dcac

  • SHA512

    45aec7e8f090dd5496698c1dfde4ebf05b46747d13e5243c0cb4c1ba9469fe095cba353425ef863e192f6bedbd91c7ca6ee69c4763c109e127e071a6aa022968

  • SSDEEP

    768:DAe3IkP2s/VMzkkbbb4NjkWRTpnM00rnwIa+u:0e3IPcFmbCkITpMPw8u

  Score

  3^/10
  behavioral17

• • Target

    dolphSol-Macro-1.4.0/lib/Gdip_All.ahk

  • Size

    363KB

  • MD5

    9c036b8bfa22514aec966a60a29434fa

  • SHA1

    3bd9611edab32fe94673a36f8691cf04ec40ca47

  • SHA256

    18d57ae8004f992446eb0797a573da3a8d1dc5b90c7828ba2e6444a5b67a78b0

  • SHA512

    bb7332e775b8fd708c04ef02dc4967f138a004a9f2271b716a5faf5b3d2214a184e0d5b6ca8af0c9b91b10f0e42f04ef285a1c24e9dc55817414249146bac976

  • SSDEEP

    6144:kKTL7iVhmdfL5iNlnzZi2fMmAZPu8veCvtOfKY2PigmUiPNaW9rjH7BDXEx7vMl9:Rpmr5H4vMZV

  Score

  3^/10

  discovery
  behavioral18

• • Target

    dolphSol-Macro-1.4.0/lib/Gdip_ImageSearch.ahk

  • Size

    32KB

  • MD5

    191c3509d32d129f37826f7e3f6ede8e

  • SHA1

    db9c14736b94d9f52a252a4c609b3ea65a467165

  • SHA256

    95fccd335519ec57830f6f8222f2b48cbdf0b7744d742e9c74171d6f79b3931e

  • SHA512

    30e93814573b71073d0a513e60d6bc32df4512cb713ca9b7a98c910b711d2d0e363fb285e593efdd8dd862f6565b8c0e4c52a9f7c6c3b4c95adabe22849c7871

  • SSDEEP

    768:4CMiVHpkNlGP4qwFMJx+xfLIYWD5Zan6lgZw:4CMitpkNlGP4qwFMoNcYIIw

  Score

  3^/10

  discovery
  behavioral19

• • Target

    dolphSol-Macro-1.4.0/lib/colorRead.ahk

  • Size

    2KB

  • MD5

    5be8f3d1c27b1347b323aca256011ed4

  • SHA1

    fd9871ee5744086c864b73d398e88b456cef53cf

  • SHA256

    4dc92ed33d90591a621f573425e3b81ecb35e3987d8f94e1612bfbbb7a63fd95

  • SHA512

    73d739108affb42c8f5757144a34109acf15d3eea53fd9aa56406e0deda9e71fe99e14f210b2e08d72caa44c74601708ff4cbba053aa31e5275f2bc4c48c8611

  Score

  3^/10

  discovery
  behavioral20

• • Target

    dolphSol-Macro-1.4.0/lib/jxon.ahk

  • Size

    3KB

  • MD5

    8975b7321fdc4d296d0e975444220d36

  • SHA1

    c1cb3f564d85e7735b22b3c18c7db2653b08baba

  • SHA256

    0f71c8adf92189357bc831960204590a8f8d8d3cab69a11efe69a70e674da35b

  • SHA512

    6c2729170c5c3182f5614dee77289e0cd07710dd4ac7bbf3bc7f992e7515a771b13ddf0a223c773f700e5e34d34afa6142ccdbe3d190f6773a954a9ffb864c02

  Score

  3^/10

  discovery
  behavioral21

• • Target

    dolphSol-Macro-1.4.0/lib/ocr.ahk

  • Size

    8KB

  • MD5

    d74b13295d42dad8ac8de6391b2dc02a

  • SHA1

    81cd2ba13191a5184c3afdea02bf310216003f7a

  • SHA256

    4d8f4ec1bc0dbbf2007ecd6b645808ed57568129e0edb4e0b5903b7ea0ec6ee0

  • SHA512

    ddb991c712c09fc28b455ba9979a482308c96cc927193fc4c5752d4ba71c77e67bfbaeab65e2bc50852243e0f04d5dc63fcc2794374319d0b2ea5004aed91207

  • SSDEEP

    192:c3ek1PLVUgrLJMPm9X6xUbkeKEokOdGPiM:snTZqUbkeKEoWf

  Score

  3^/10

  discovery
  behavioral22

• • Target

    dolphSol-Macro-1.4.0/lib/pathReference.ahk

  • Size

    5KB

  • MD5

    195693c1cdfe602edb856b45dbae7f64

  • SHA1

    d136887ef84d6ff4d8e13eae0cbc63d870277ee7

  • SHA256

    c29fa629669e065d9b2f1a32573c4e62befe3fed3e0087d13589fb3b490f9143

  • SHA512

    e7b477e54f597abff584b71f20479810f65962d7fd9ca6bebffb63ed90e2a10df9bcc35f5632a50d89001ff6eade44257cbf10a6c04befbd911b4ac342df1c99

  • SSDEEP

    96:ntd2xqMyMQTBB3zhLWZp/EJ+L6ThcHlJliu4DA4YzHr6jlol51iYo9x4sKAyZ:v2xqMyMQTBBDZWb/EcmT+H/lftLip7bC

  Score

  3^/10

  discovery
  behavioral23

• • Target

    dolphSol-Macro-1.4.0/lib/releaseClone.ahk

  • Size

    1KB

  • MD5

    ec419ec1b3b9ee06828d5444b2aae72a

  • SHA1

    c039da07aea08286c82a685708528aae53a32083

  • SHA256

    98af6deeb97e858831b686740ac684460bd508a5dc22fb536e10526d38f1cfcf

  • SHA512

    d0b18a9169aad397322e3147d61acc3be5332908fea1224945c98918bc8c033b22fff29e30b474b6b0e3cece78e326935f4af8599658f17f2739d5b8f45f2c4a

  Score

  3^/10

  discovery
  behavioral24

• • Target

    dolphSol-Macro-1.4.0/lib/staticData.ini

  • Size

    7KB

  • MD5

    60db96ddb057dbb9466534e8e88c7484

  • SHA1

    8af1407e53998149e7a8a8dab7363e4c09dcd1b7

  • SHA256

    c0de783cd9c41d97304eb152abb9bc70b56a32cf001df5656eba18df594269e4

  • SHA512

    4440ac9773503ec6f5d8b7a657adc5afa186cd730d83894254ec288dfcb14ad11ed86981aea36b0b7361913964b088ced570ac3fdfc03f283fcb91fcabf3bdd9

  • SSDEEP

    192:u46uu6pztLkiwNXHnXGODiW2yZC269cYhSz50+p4YCkFW+ymgNJzY0lmaN9Xihjm:h6uu6pztLkiIXHXGuiW2yZP69cYhSz5g

  Score

  1^/10
  behavioral25

• • Target

    dolphSol-Macro-1.4.0/lib/staticData.json

  • Size

    12KB

  • MD5

    3743d4e4361e9e8fe52b05d40c2e5696

  • SHA1

    673d653f59d4aba9399629573bd010df87787898

  • SHA256

    b99e0669e40428ff495675ab32c71fc3e4dbd1e60f851e8b40221ef94e28b2a3

  • SHA512

    4a5b57adbcde0b6fdb76f9bcb914061555a8ad9b18bdb68b133b0f1c5666092f8508c98dcb336d8378cda0e6f80edab9ec9d64936640e84266b44064b51815ec

  • SSDEEP

    384:JW7W0gG5ZUpK30j9+ocCf/RGLzk9i0gJKKDC5Kp8//tDy9Xhn1L81bQQQWBORc/Y:AW0gG5ZUw30j9+ocCf/RGLzk9i0gJKKd

  Score

  3^/10

  discovery
  behavioral26

• • Target

    dolphSol-Macro-1.4.0/lib/status.ahk

  • Size

    21KB

  • MD5

    4ff9f618bb6068635221b4950a11a5a6

  • SHA1

    7f520892c3147e0a8fb7f417e60ae0297c26b3e5

  • SHA256

    132f3daa1ee44d926f6dc3ed1ae6d2e7f532f22574a681b99af463ea208dc4dc

  • SHA512

    133ae444e89fb1c60e95410dab620cac0c703bc47310742e485c12774d1a3444d5e06a06b3df3177186d2b1b4c220d88c8e31bb97b72b67ba830b415f6c33e8a

  • SSDEEP

    384:Z9iJf+P/bNwfMwysbc09awjCcFhXFd+8BbNsd9p5kGpVsp6adrfb:Z9i8NuMkbR/jCEJGsp6MT

  Score

  3^/10

  discovery
  behavioral27

• • Target

    dolphSol-Macro-1.4.0/paths/doObby.ahk

  • Size

    1KB

  • MD5

    fd6657f10197d95bcf3118959e6eab62

  • SHA1

    67cf23479ebf94eef4e1d2c35c4a10a140cb7836

  • SHA256

    99d4846950a191a4ccc73835ee13e7d1c2fecea3bd4d32c75af4e9a7184763d8

  • SHA512

    780ae353b3aaf52df4f22b96579d17ad0f4dc9051ecd554da8ec0639056442d7ab7957ee77f96552fe61fa0838e3380fef79b1bacca615bea7e255506b1a087c

  Score

  3^/10

  discovery
  behavioral28

• • Target

    dolphSol-Macro-1.4.0/paths/initialAlignment.ahk

  • Size

    242B

  • MD5

    eb080d020abc1f9e6669b682f7ea2573

  • SHA1

    d2d1134db8a3fcef59efcf18f2da070e2ad3d568

  • SHA256

    3877f8a6ab94bda3c6a8ae6d33ad9ca9abe1a87129b3a47be222c9ab50f424d6

  • SHA512

    104eb54206aefd6a165a7301be25367249bd3116f2855568c7b1454b50ce506ac299feeffcf8c53650788a5a489a98d766886778deec0aff1c3c2dfcee8caa67

  Score

  3^/10

  discovery
  behavioral29

• • Target

    dolphSol-Macro-1.4.0/paths/searchForItems.ahk

  • Size

    1KB

  • MD5

    c52c8886964840d20a8a56059702d1f3

  • SHA1

    8d55d8cf9e329541e0951eb88402004a9306a9e4

  • SHA256

    7b887c0d8a1a0a20e652e5e56d6116fb53157202f8d36e2d9e4abc2368f3fb1f

  • SHA512

    8845ba6af37887600b837782467fd38a3cf395c6b96889776037d28c025cffb8b2b757eaed907770822b10be8726d744d77e05c74608332b79bb508ce85ae6df

  Score

  3^/10

  discovery
  behavioral30

• • Target

    dolphSol-Macro-1.4.0/settings/config.ini

  • Size

    214B

  • MD5

    a61d91e3c2c62b5050d40c6d0f5bed65

  • SHA1

    d03177911a8bf258cefc3544281c7084af2faba3

  • SHA256

    9e9f3d6a8c1feed96b934a0a04b0351cef08d224433993a0edf80578b41a99ee

  • SHA512

    f9bc5e7cf9cfbe083ba08ecc82b2e2caa35f5fda9679e517cf05dfe60700233c52f139f210b76a3d8f12554d431adf03e82009886318355d329780b5fb0d2ee6

  Score

  1^/10
  behavioral31