Overview
overview
10Static
static
10Collapse R...e).zip
windows10-2004-x64
1Collapse R...e).zip
windows11-21h2-x64
1Collapse R...ll.xml
windows10-2004-x64
3Collapse R...ll.xml
windows11-21h2-x64
4Collapse R...ion.db
windows10-2004-x64
3Collapse R...ion.db
windows11-21h2-x64
3Collapse R...es.vbs
windows10-2004-x64
1Collapse R...es.vbs
windows11-21h2-x64
1Collapse R...te.p12
windows10-2004-x64
1Collapse R...te.p12
windows11-21h2-x64
1Collapse R...xe.xml
windows10-2004-x64
3Collapse R...xe.xml
windows11-21h2-x64
4Collapse R...nt.pdb
windows10-2004-x64
3Collapse R...nt.pdb
windows11-21h2-x64
3Collapse R...er.p12
windows10-2004-x64
1Collapse R...er.p12
windows11-21h2-x64
1Collapse R...ffline
windows10-2004-x64
1Collapse R...ffline
windows11-21h2-x64
1Collapse R...online
windows10-2004-x64
1Collapse R...online
windows11-21h2-x64
1Collapse R...ressed
windows10-2004-x64
3Collapse R...ressed
windows11-21h2-x64
3Collapse R...ressed
windows10-2004-x64
3Collapse R...ressed
windows11-21h2-x64
3Collapse R...ressed
windows10-2004-x64
3Collapse R...ressed
windows11-21h2-x64
3Collapse R...ressed
windows10-2004-x64
3Collapse R...ressed
windows11-21h2-x64
3Collapse R...ressed
windows10-2004-x64
3Collapse R...ressed
windows11-21h2-x64
3Collapse R...ressed
windows10-2004-x64
3Collapse R...ressed
windows11-21h2-x64
3General
- Target Collapse RAT v1.5 Cracked(Source Code).zip
- Size 257.6MB
- Sample260522-nw88dshz2n
- SHA256 8fffa826434b5bc8af0801ae4c6dbc78aa162088173945d94b5084315b645568
- MD5 f11e28a013a166951e7e62c5f3c8e5c9
- SHA1 082f9f3fb64e668da21afa3c63199e076e491721
- SHA512 f3802b4075ae7f820df8fcd4c62bf4aaa2fbd8c98866c43cc594fd7a5b9be04809500f3e17c62bad09f93d7ec7ec511f77f2a485e582e90046014d25fc9630dc
- SSDEEP 6291456:cgmuDgD0OWy1i3BsjreRygmvgmGfY5YwGyDGRHOidC:cLAc0O2sjCALvLoQYwoOic
- TLSH T112D833969ACE5F8EC438B037FD5669AA0176B67CDD30E1195781602E0F7D3A10A31F2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Collapse RAT v1.5 Cracked(Source Code).zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Collapse RAT v1.5 Cracked(Source Code).zip
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Collapse RAT Source code/bin/Debug/net48/Plugins/Stealer.dll.xml
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Collapse RAT Source code/bin/Debug/net48/Plugins/Stealer.dll.xml
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
Collapse RAT Source code/bin/Debug/net48/Plugins/ip2region.db
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Collapse RAT Source code/bin/Debug/net48/Plugins/ip2region.db
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
Collapse RAT Source code/bin/Debug/net48/Resources.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Collapse RAT Source code/bin/Debug/net48/Resources.vbs
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
Collapse RAT Source code/bin/Debug/net48/ServerCertificate.p12
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Collapse RAT Source code/bin/Debug/net48/ServerCertificate.p12
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
Collapse RAT Source code/bin/Debug/net48/Stub/Client.exe.xml
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Collapse RAT Source code/bin/Debug/net48/Stub/Client.exe.xml
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
Collapse RAT Source code/bin/Debug/net48/Stub/Client.pdb
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Collapse RAT Source code/bin/Debug/net48/Stub/Client.pdb
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
Collapse RAT Source code/bin/Debug/net48/VenomServer.p12
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Collapse RAT Source code/bin/Debug/net48/VenomServer.p12
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
Collapse RAT Source code/bin/Debug/net48/offline
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Collapse RAT Source code/bin/Debug/net48/offline
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
Collapse RAT Source code/bin/Debug/net48/online
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Collapse RAT Source code/bin/Debug/net48/online
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
Collapse RAT Source code/costura.bouncycastle.crypto.dll.compressed
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Collapse RAT Source code/costura.bouncycastle.crypto.dll.compressed
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
Collapse RAT Source code/costura.cgeoip.dll.compressed
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Collapse RAT Source code/costura.cgeoip.dll.compressed
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
Collapse RAT Source code/costura.costura.dll.compressed
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Collapse RAT Source code/costura.costura.dll.compressed
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
Collapse RAT Source code/costura.costura.pdb.compressed
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Collapse RAT Source code/costura.costura.pdb.compressed
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
Collapse RAT Source code/costura.discord.net.core.dll.compressed
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Collapse RAT Source code/costura.discord.net.core.dll.compressed
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
Collapse RAT Source code/costura.discordrpc.dll.compressed
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Collapse RAT Source code/costura.discordrpc.dll.compressed
Resource
win11-20260513-en
Malware Config
Extracted
-
asyncrat
-
Collapse RAT & HVNC 1.0.0
-
uxorrbindixq
-
delay
1
-
install
false
-
local_host
127.0.0.1
Targets
-
- Target Collapse RAT v1.5 Cracked(Source Code).zip
- Size 257.6MB
- SHA256 8fffa826434b5bc8af0801ae4c6dbc78aa162088173945d94b5084315b645568
- MD5 f11e28a013a166951e7e62c5f3c8e5c9
- SHA1 082f9f3fb64e668da21afa3c63199e076e491721
- SHA512 f3802b4075ae7f820df8fcd4c62bf4aaa2fbd8c98866c43cc594fd7a5b9be04809500f3e17c62bad09f93d7ec7ec511f77f2a485e582e90046014d25fc9630dc
- SSDEEP 6291456:cgmuDgD0OWy1i3BsjreRygmvgmGfY5YwGyDGRHOidC:cLAc0O2sjCALvLoQYwoOic
- TLSH T112D833969ACE5F8EC438B037FD5669AA0176B67CDD30E1195781602E0F7D3A10A31F2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Collapse RAT Source code/bin/Debug/net48/Plugins/Stealer.dll.config
- Size 1KB
- SHA256 63837bde3bfb609d59002b88831786e7b0bf285a6090f9252c35af9ee3f75ff6
- MD5 ee37d8dde7f969b007430b18386ef45f
- SHA1 5dadec5c0ef36d2511d9e4943ea5a59462a657ab
- SHA512 76bde199f18744451eca542084de6819c1033bd28495c5a458be242bc00b4b05027de6358965c2357772216ec7afa55ef459ebe7b9e48bc5bd8baa60ba1f9d21
- TLSH T14D312C2196C87FA44F720AE23A7A6C25CBA903773C4C054DB1DE7A9B8F3595A5303135
- MD5 SHA1 SHA512 TLSH
-
- Target Collapse RAT Source code/bin/Debug/net48/Plugins/ip2region.db
- Size 8.9MB
- SHA256 5948907df4a4782d5954499b65ab011e257fc5775f81e0b8b4dea6fa10e6fcc5
- MD5 c8f4c82b2cbe02d7797dd6568533ae5a
- SHA1 92893bf95436d087b55ad3bc1ab6b8a349adc2d3
- SHA512 151ef56eb99cd29e02dd04b2dc19284597df2feedba1e1fbb6bbdf65f5f66fd2f9caffc48057ac1cb684270739ecddff6098b9b97b80ecfb98e277917f174c96
- SSDEEP 196608:ShLkNPFCZZwiJl1NLIsPA8fxvuIMzd/95UhS1nUzBPeXQtG:DP+Zw6NLIsFfskh1BmXGG
- TLSH T11096F120FCEB7A97DA638E38D0335B2BD771410A676680C9DBE5176EB33D64D402271A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Collapse RAT Source code/bin/Debug/net48/Resources.resx
- Size 17.1MB
- SHA256 b00bb37106f449417db0d3d9e4e73d35755e89fa9ce94582b74612bad93cecce
- MD5 f5881e9cf9d84fc36268f71a8f496c6a
- SHA1 4e12b92b28cbfd4895da48a71f82a4848b926613
- SHA512 0bce7d6e7a210744ff254ebdd6f792f85cd31c11a07d0581ff8c8722011d73a542b23e89dd628f3c1a19988ad145064af7a45acf0193f0a9c44d9bab0a81951d
- SSDEEP 49152:baQuFaQu+Aw2M3gzMVP56jtDLig9WRQZYnxNKQP60ot6DghhVD6R3Lr+SqMckGpC:i
- TLSH T12207BF366846FDB92334CDC29661ACA0FC2821179668C261F5CCE7B12F71DB8ED9C365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Collapse RAT Source code/bin/Debug/net48/ServerCertificate.p12
- Size 1KB
- SHA256 74eba079b36c835cd89af395cf53272c53351cd851efb140a8152410c4e2973e
- MD5 6ce85262afbc028314bdf6fe9aa718a5
- SHA1 b59fe71c2ebd80df9e3ba5681ff6e36c90c2f0a8
- SHA512 8ac1198de48c3acab03482958ccd5044561599373338f0bb9ff203c0d596b810143d420ebdcb20abd60a1383a08e70f7ddac6fa9b304a0a3a61aa06af030e6fb
- TLSH T124310B294CBA8439B1F3D5E40B4C444F5A64DA10A7B096BB20B721D81F316057C95771
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target Collapse RAT Source code/bin/Debug/net48/Stub/Client.exe.config
- Size 174B
- SHA256 b1677d78346f02aa0ffaff28c796ba8f292ff801ec1a646909357a8298e372d2
- MD5 29de2c28e23204909e646ee3489ce4ab
- SHA1 1f75258825661c5e0464414de06805fc57de6686
- SHA512 0cac4a63219b4f72e10bf2f9ec78a38a0e646028ca784b0208a380fe93e092ac6fb58a4d14f931765c99a352f314c90214e292504d843192fb2e5db9c5708d89
- TLSH T17BC08C1940E8BD2B8D328F27A352C926EBB0B3A2A0A4080CF02FA967073104D4247326
- MD5 SHA1 SHA512 TLSH
-
- Target Collapse RAT Source code/bin/Debug/net48/Stub/Client.pdb
- Size 24KB
- SHA256 4303bb9e48f0569d6f9b941b0c3dc45a91a3ca4c798215bbc46dd2718eb81bbe
- MD5 2b6c882c8a2da43db6c72c3507d445d1
- SHA1 b5d521d5cdb4a555814f1085cd908d0f96029994
- SHA512 6a3303831c79aae2715bbfd659d24e8590b61059c6056900f09b6fc392579d5429f68075d4c66d76f534391b3f0713df9a5b2bd35e709f2416cb48f1630dbdf8
- SSDEEP 384:ZYu/Ogv+OTve8TNkcYVWwr5pQQQb291pKY9ChrC/RvfszRnRvxiwCbs3tEKsX:ZYd4+4G8T4nQbk15vfsfZiTszk
- TLSH T1D9B28122D3C54B14CB12213960B6534AE778C5B19B0B178B22B4B7BCFCEBB907F66614
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Collapse RAT Source code/bin/Debug/net48/VenomServer.p12
- Size 1KB
- SHA256 c40f74c79715de4c5265dffd643d7bd5dda2caa09ca84e620bc78f7d27df51fc
- MD5 65efef16af8b2bb993e24ca1fdb3f3a7
- SHA1 e205dcc888582eb51d0ee9690d37a7b75138f715
- SHA512 29581484c44849ccd0ad9bd2c9058fc56f3589019baf4b833a5fc8ceea0e488a357639c92cbaf977f74d5f2d59abb2b8ee7a607cdc67c6c14592b4bd9c3a5215
- TLSH T1C031F70E62EC0525B873D1480D244D584E65FB012961126FD0B613DE8DB3E2A2F0C338
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target Collapse RAT Source code/bin/Debug/net48/offline
- Size 86KB
- SHA256 21b4173439bdcb6338d99a8f060b98426cca95b2830b62965a72c94bc6c77236
- MD5 829c84c8f69856aaba8dfad042bc1cf4
- SHA1 0c9e6169aa58542e60807405d12ac226888c282c
- SHA512 9a670fa71f795efe96bd61cad7e731ef9300e93c44b8109f89678b7db10bfebe386e694cdba28047c837d907ae73090252900ec0b315aa74509f826b3cf403ce
- SSDEEP 1536:QRRoZn71yIjszK7ugL1Fa6OdqZbDqmXOaWv8QsKSM8QwZIABlHp5:cRIT7ugxFzOdK+mXOaFQsKSzoI9j
- TLSH T14983E053E1739260113BC8229E8558D90D9AF96DBE0AE43F1037CE06BA73732D953778
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Collapse RAT Source code/bin/Debug/net48/online
- Size 88KB
- SHA256 c2cfbabf111d231fb2531b6c0759c5191fd91f767059790ff53aef87fab2280f
- MD5 4e642f0d041d6ef79d7701e599e4bbe9
- SHA1 e82bf57ee1d78070506d08b16d79991ae2b069c0
- SHA512 79064943187cf61fadfc315986c71cc500e21ee1f8b9e81c6978f4ae555fe492153ca7c727935004fd5b2f90b30f2c1d15bcc95cc25044e861e1309fdf4b4ca1
- SSDEEP 1536:NzrZcbrBsJy8ig8jPBlrUz+qIS8s/N1yg5ty0WwNHAzJvfvTyrzqAhlAeclHn36:NvZWOJp8PgIS8s11y4c0FAVHvTyrzbl1
- TLSH T12193DF02F61B635059B7DA25DEC954D04E42BDAE6C805A2FF01FDE157262330AB33BB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Collapse RAT Source code/costura.bouncycastle.crypto.dll.compressed
- Size 1.5MB
- SHA256 7a5ecddefb79248179900e0f8a601fe7a5e41116b158450f21ca33695dfb492a
- MD5 891a7ba65f8aa91c477e29a2fbd3df36
- SHA1 1aaaac84a9b17e8468e1ce9bffb27cd51f4699c2
- SHA512 07b0e0279d1ea259503a69122a12b3d8dce37f6471f33e3ea79f0cbe2a48173007b651a797709c92bb377a89699deacbad9f2d55f9590d9dbef3d9aed53db465
- SSDEEP 24576:juNKbuX0xfEN7EttygSFJ/1jrMHa9znOe60XGnTPF8Q5SwK4qjAcMI44H+DEhiQL:SUbowEOvygS7/1sHOqJ02nTPFdRPqxM8
- TLSH T16F65331BCEA73B8FB01094BDD4538D6990EF8AB067706F01C59BE61EEB49E508F9D142
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Collapse RAT Source code/costura.cgeoip.dll.compressed
- Size 1.0MB
- SHA256 6c69efe2fed875e478096a8e753de8c393ac19432a558b1df9e5b945c91d6e9e
- MD5 91e5f61b96ab7b3d9fbf5dd60a453906
- SHA1 ca5426cb3e24dd00b70550056ea039c172aeb608
- SHA512 a36432f2bb2f9dac3225cab3ea1f1078383e244fcd5b69d86bffa500dadf53f9451a9eeb9b5886ae85a5749c60ebd0fd3527d3be3dc0b86632534130806807cf
- SSDEEP 24576:LkvBaOvxJDEo9j7nb3zeMGeAdesVLImY8jCasAJMMd:L6xJfh3BGevsVLUeCavGMd
- TLSH T1CB3533E70C8F80874D2F82F4918F55AD69106D99C34FF28A33C6B2B876D51ACE169F94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Collapse RAT Source code/costura.costura.dll.compressed
- Size 1KB
- SHA256 74291771dd1f0338517e85182e062a96279f6e4ab8251502b8f7d1c33c6ce655
- MD5 786a1377c3a7d94f8294f48f1f20abbc
- SHA1 115046c4ec98cdd48f141f4d086dc6b896287714
- SHA512 aac4fb8b94af5eacbbaf65181e036005ab6a4285529ba7d9010261f15588854630f2804a6764c6e09f715d4bff0adaa22d94a1a7ce5d8369afad183b75ea8f6c
- TLSH T1C6310BB039414EC8AB93D2960D8777780C9B25E761F4F864D71D03A555687CAA12E087
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Collapse RAT Source code/costura.costura.pdb.compressed
- Size 1KB
- SHA256 fbaa489666a278edc8ba51a9963f48e4dfe4c2d7a02f5454543fb87510b5dc7c
- MD5 b5767ad39b384c21d677cc9e6955512f
- SHA1 b92a52dca7aa6ad26eb143896dff54534153aadb
- SHA512 8695fb5a7bae767fd05617bfbc36cf875b281ca7f006482cdf960b01a857b23eb27cf7dca87033e2dfa76341e5ca12e8929342c09dc52b8c1f9be3d50182b439
- TLSH T119312BC173034DA27E6084C37B48D5A96B8CFD63A317FC07171A96F06A74EC5D4249B4
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Collapse RAT Source code/costura.discord.net.core.dll.compressed
- Size 174KB
- SHA256 c070a12edd2871b9bd8af4c61bd4a5bbacc85e62eb2651b188de8a63f74a3135
- MD5 2547d76399a53c02ebfbdf4e06eeac57
- SHA1 fded87eac5eb3447f7c791f07f3029484bb89157
- SHA512 d4845e2a3e5e83f40a92d52bbdfc9cd6a10ee8db5560f3c6fba1c9e2c292a2e1488eacc4c3ca920fdb609c437c8d65526fdcc47d54f6e2f60a339e32b6515e69
- SSDEEP 3072:Vuhr4CJkcbo4qiBvhXbzXn0cnExnPnumoXhn3ntplpwESZ0iz+n1mKZ/1gOH6a7e:V8J7boqXf0cFTh9plWZ0L1Xpaa7e
- TLSH T1100412AF5892D31C6434EF1FE020BF2CEA2D94AA5DD870591140DDC2E58D287FD5A1EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Collapse RAT Source code/costura.discordrpc.dll.compressed
- Size 31KB
- SHA256 a9b862d8c71777d7573b006aa0da2a056b8b077295a4dfc66f642478dc7bf9bf
- MD5 8639acb9f14d4ea12a6f5fa361d70e83
- SHA1 7687caaeac2a33dabbd4b9cf87850513bbac0de6
- SHA512 c9f7494d6c583e0e43d5d8c09bbfbe1a0cc995cb577128a2f526bf7d36d90d55d030359ca1794b8edcaf8c36d9011c110b6aa1e00db891157b0de8172d830750
- SSDEEP 768:rbMB5VfKcU1P0tG67GbUr/GHfQiinag+EzLmp9D6XDL2jkKVomz0sELC:r4Gfitz7oUTGHQnafEvW9YL2IKJ4s5
- TLSH T1C2E2F196FA89988335113E2B603BD58869B4897C97FD16140F7EB31AB438792F7FC184
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10