dracula_stealer | 3b50e918c45225877473a3592bef1d80962072e4bf4c369d2ab41d543b41c2e7

Sharing

Copy URL Twitter E-mail

General

Target
Liberium Screen Rat 1.8 RCE.rar
Size 75.0MB
Sample260522-rb3rnafw4x
SHA256 3b50e918c45225877473a3592bef1d80962072e4bf4c369d2ab41d543b41c2e7
MD5 2988e1853262772057c27a7e9b562ccc
SHA1 7a7dea599890b698b27dbcd6d23b219cf5794a6d
SHA512 b20d0aa3ebf0b5f9c6c3496970c21021adc614f5c15b2c28ccfe8de87edece78f33be4dc8767b11bc15b97f497e47131627063a9f55c3a5ead8279e3cb59cb4c
SSDEEP 1572864:kUGaP//xXp/8aMF6J7syV35i/aJcJUWPsZfxxfdC+XS+f:tXZlAA35i/sFRfdLJf
TLSH
T14508333D1F059FFBCCF09819514EEDD271EBD58C45867B992AF98640185820CAB3E3BA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  Liberium Screen Rat 1.8 RCE.rar
- Size 75.0MB
- SHA256 3b50e918c45225877473a3592bef1d80962072e4bf4c369d2ab41d543b41c2e7
- MD5 2988e1853262772057c27a7e9b562ccc
- SHA1 7a7dea599890b698b27dbcd6d23b219cf5794a6d
- SHA512 b20d0aa3ebf0b5f9c6c3496970c21021adc614f5c15b2c28ccfe8de87edece78f33be4dc8767b11bc15b97f497e47131627063a9f55c3a5ead8279e3cb59cb4c
- SSDEEP 1572864:kUGaP//xXp/8aMF6J7syV35i/aJcJUWPsZfxxfdC+XS+f:tXZlAA35i/sFRfdLJf
- TLSH
  T14508333D1F059FFBCCF09819514EEDD271EBD58C45867B992AF98640185820CAB3E3BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1
- Target
  Liberium Screen Rat 1.8 RCE/NAudio.WinMM.dll
- Size 56KB
- SHA256 749a01ebbb5edd8b1a03c5263b04de6acadecf52e4cc84d7412bc6e93f180958
- MD5 faf1ba532964984a34d60674fbc7a5a7
- SHA1 0999178949de510a47d87de3b8a117a003c572ee
- SHA512 d23b783bfd55a09c726ba09d627dfcc6c22a6e7bed8a53dff72c349bbe6fb190afb574cc267b7bebed1540b0bf834f259b5d03b50e023881b3ec42a8b2b57f1f
- SSDEEP 768:cQFu51JOtZ+Wr3CJBTNoNfDhPrDVSvxu1tEMgGd8GbpDrXa8Rcer+7Ul:cQ8zvWr3CJZNYDhP9Svxu1tEufpDuil
- TLSH
  T12A434B013BD8427AD2FE1B3EA1F30A524731A8D6796BFB4F1598F1DA9853B8049017B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Liberium Screen Rat 1.8 RCE/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/Action.dll
- Size 34KB
- SHA256 cbea9d69dba26b89f76d8463a580aaf1759cd8ae4ad0f9b795438e67e5efb1ff
- MD5 42e596ccf83ec4e2eeca327ee39a8bd5
- SHA1 58e3aac4592b54b86492c777f6777cc1ee608ae7
- SHA512 ac2870982a5a939e0c05a656ba3f43d2ac594d7ab8d7509bebdb88f6e1884c4fa3dd4bca2e668435a69fa9aee314c3c8842c1b49d21b5aada3785482c3693fdc
- SSDEEP 768:DD9j7bLcWbEfB90FwY+jdFY/dEMKix0thSCBsFY/dEMKix0Gw:H9Pbhb8B90FDx
- TLSH
  T1BCF2F800B3E85934D1BA4B7A8DB21A15DB36A546E873C60E3B8C408C1BB3A58CE75F75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/AntiProcess.dll
- Size 14KB
- SHA256 8066c7bee32598396fc2ee27b2acccd1ced4f3b8d514d2c948f8b1c9bc0ba8ae
- MD5 b12ef46f5e9aa23f605d44057e9f786f
- SHA1 9a58d49f6d6e832751cea64c1101d9677ff40d74
- SHA512 33132ea044d37ac67a4ba1ebbadcd0ac2e64a989215aca1e41aae6566776f15f26e4cb2948ebda4072c254be0e581b9e9e21349d8a8fbe7d603420c8b3bfdabe
- SSDEEP 384:KJBAqb/bok08LI/jzUhufBq2DYvqS9yXm0jV9aTt:Kh888/jwQfRUqE0jI
- TLSH
  T18B62294843A49B3ACEE956BAE8235744D734E2015D63DB0F3ED170D2BE43BE789122E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/AutoRun.dll
- Size 357KB
- SHA256 f7884811c963a0b8006f282c121278f39e113e2a1fa8aa2d093e4acdc95c7b15
- MD5 c422f2256dad3fa20dfc3701ce4aae96
- SHA1 134490ce82f68a49dd9f45e27b825c463f03abf0
- SHA512 d7e69874f1a6b168de15205f2c9083c2287e0df4257ad990860abcfba1b0a2c90bbad144cda2d4cc493cd0874a598bfbb44ff867d3bb956c8615cfe12a108fa4
- SSDEEP 6144:2tsANPVlFHG7QU9V1X7E0AEfRdq6sLtMwNEamxkUu1t:9AOn1L1AKOMIWxkUu1t
- TLSH
  T127744B11AFE48237E9BF17B5E4B303100BB5E589E56AEB4F599414E80C63309AD173AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/BotKiller.dll
- Size 30KB
- SHA256 0dde28bbbb46d8c01df4b87f4b61464ef0f5cd3bfdecea94827dbb705e83dad1
- MD5 eccc551411ade52f5a6a3ecd58cf941f
- SHA1 84978d2345f0adff632d4b62f67d7225dd531a24
- SHA512 6dc88b5378a6a86575b4ee87c5ca2e932ab6705bd8765fa9c758cf95f4a0fd2aab5b0b71a0b9c3d6e040df43f26214700f6f1f0ccbaeee88e5044678946b9821
- SSDEEP 384:C86kQx3XemLsg/UP3EJABSt3+QbdiDc3DMqcZamJbSPzDCFyQa9aOWs6t6pQbrm0:C8TOXz2P3Ek2+yiD6Mqclb8AYahbaIv
- TLSH
  T1B6E2C618A7E49A28E3FF4FBA647252048730F1524D53DB4E1BC590DE18327A6DA35FA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/BotSpeaker.dll
- Size 14KB
- SHA256 3df26ae2d03f6cc7732fdc9d1498d8c26f84504327dd57178b778d43f7a1c20d
- MD5 4fb49f039d8c3bd89aeda2c63e233ccb
- SHA1 f70cecb45e08f82d8d9b71f39e1d0a708a0733ef
- SHA512 e3a2121f9dd0bd0efee4f999ede4fe87280206bfb9b896abb7d9b41a9f0748d89757228d702f2a71a720d805db7e78a0c4c97caee09268836bc375d321b6f429
- SSDEEP 192:2RlXXmgxQ8wbwlpaFuC+yYYJUT8kUD/4pHc2gPi57lL+ry0gOeMlvOv8RL:QXfQ7sp2Z+yYYJrkK/282giF6gbv8RL
- TLSH
  T18352C609EFC59B32DAA957BB45B28355CA34E5085C03DB1F7CCC21E5FC06BA92B601E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/Camera.dll
- Size 98KB
- SHA256 8856c385a682e8ee00209b6c9814d977efa7c9ec8577d4d87c1c097ba510c7ec
- MD5 15fe64c0625fad772e585b6329da4c86
- SHA1 6ef0b30954cf9f8b9d6e5e461f61ba0ed905a552
- SHA512 83f25fe8a2a943ca4afc133e2b0727865d593494991957b5d4a0f990434353c621c04bc192ba94fd2a2ae08925b532399c17069adce7b3644b7f334fda8c71ee
- SSDEEP 3072:VCCQQCCc23F99bb99fLgUsOOMMOOQOfVkBmQEQIpZL+S+Y37ikFJo:VCCQQCCcw99bb99fkpOOMMOOQONcpIpH
- TLSH
  T1CEA34B9167B8C563D5AF57F5A0B74B164B70C203A603F7EB19B424F82CA37411E222EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/Chat.dll
- Size 47KB
- SHA256 adc1426293f7d18f179b564cfa228cd7b7246580b24e6f6fc0eb18628dba9ebd
- MD5 5659d95536342389a8265d29b11fa0ea
- SHA1 e85d8f444564e2fa9d0b8fa29ad33c72eab59c09
- SHA512 ceeac539e9cb09a6b249f84b5ff139e43db6c8ea8dbceb24fd84bd5e1fd8d08c5f65821988fbee279631862226ab37740b406e3676f4d88f7179aaaddd4ff799
- SSDEEP 768:oqVJNCa72NLlpjnGFsT+5asw+rBdNZTgM/Bc6909D+ETzYwLgec1:hV2aWTiFw+LTc69UD9ztu1
- TLSH
  T162230910B318CE3BD6BE0BFEB465126103B5D316BA43DBDA5DD5109CACDB3868A141EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/Clipboard.dll
- Size 13KB
- SHA256 9a5c5c1014b569ff92eac1f3a809559145095c8e83b22e53b9277676837499f0
- MD5 cb96674be57d0c8d38ac31d3550e73d1
- SHA1 e6f9429e1bd47bdd684ae06e24d83e451bb52f0f
- SHA512 2fd6c7c5864fb06dd3a717a1ec7f6a966bdd9675118e87d188d8f63fcc2780edb2815f7d19bb44d0ce6897a59bd1413df116f8a823b3a6e2b65606d82a7f0838
- SSDEEP 192:2pR8sh0G3FrPpaHHS+r+g9kA8nH/4KNl6mMBqAZ2YFVvYCDdEbCr:FsJPp+y+rVkA8H/LGfLvYyEOr
- TLSH
  T1F552D905DBA05F31DADF95B794639349C734B1116843EB0F2CCC44E0BD5BBA826326D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/Clipper.dll
- Size 15KB
- SHA256 7e20a585733f71f441872c02ffd160e3484f1b9a60b2a07a886630dd7599b1c5
- MD5 b33db4b62a906fd1ad36c8238c19721e
- SHA1 c4cc18121c768d0249c8b6182d3568c35272cc8f
- SHA512 38a3b0240f2c3e47ac90badf9d8968b9dea4582d707b9d85e8ea1fb0b1f3e3ebb582693a26729814629744d0b45dae09549aa51d140f8289bcc78bc013bcf9b9
- SSDEEP 384:jN7IcTrT3d/c+I+c6kJ8ep/RItSOglOpg:jdIcTXNk+I/6ep/CJg
- TLSH
  T10B62FB449FD0DA32D5F903FAD8B3A3898634E5045C03DF1F2DDC08E86C5B7996AA25E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/DDos.dll
- Size 113KB
- SHA256 d02b2d970960070ebd41f931767d50eb8e6fccbefcd35ede140b8c2ecff02522
- MD5 14c3eea78012239274b57df062d9afe4
- SHA1 01d17f22e71234a85f84558e177ac1766db4bb12
- SHA512 1ba35e03b543536b4b3a44d79309a010a6d8add5c6679baab9ef1f1587bdb460aaec9f726674529faceaf8e00981a993f6004f9329ab3ba7bfaaf734471969f1
- SSDEEP 3072:gshGcFjKyO+bwqlWj/RxfZwqWHDgAwlq:7pfHXwl
- TLSH
  T1B8B3A314B3F04319F2B7177DF8F55116AA79F645FC32EB8E2469031E08A2B009986B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/Desktop.dll
- Size 778KB
- SHA256 44608a47639bab323d4011ca80eba806ecec75ad42f1122bd7969b520f94750e
- MD5 0691e527028bac9f5c145d73a708bfaf
- SHA1 39e420b3e9a3e71fc1123a190eec5549df3820f3
- SHA512 9e019fcab4116a9e03b88c16c5b1354328fe5fc1efa882e9bebd8c0ae46b56b889f5f8375fa03824a7860d75fad3bec10edd00c5cd8ba50bf312209f671b46a9
- SSDEEP 12288:eJqOo1aiGeJ0MRKI0xRt0HgmtI8pHuE4po8U5BAst:eJqOo1aizXRgxRtA5BA
- TLSH
  T1FC0529C6CE642F26DC0F6A7F74A2651382A1D0900345734B5BD117AE6ACB3A5CB1A7CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/DeviceManager.dll
- Size 14KB
- SHA256 9b2d7839829e7181f7e99eb9f1aa88428f70840d57666be16974b32d525fcd27
- MD5 6aee6af63df9181248c6306a968bc41f
- SHA1 d361fc63141cf1ad88c7dd56cbb3527ec38c47bd
- SHA512 3643bffeb2a6b4dc6f63328fea885b3713d6fbbaf25448748ada8eedc6cb3db24df73d5b130828f37290de65cbade3871f34f9f72015d72764cbf202a26ee02d
- SSDEEP 384:s5yzPdtmpq1+C/OkP/1ksPnmOq/wWeaDD:s5qt6y+2P/zvgDD
- TLSH
  T1A262C545EBD49B71C6EC42BB98B243598635FA456803EF0F3CCC54E1FC12B9C6A216E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/Explorer.dll
- Size 499KB
- SHA256 36fcc6ae1ef727bdd87fc9eda49459231c7d6e9fe8167adb01f9a5d63ff00483
- MD5 6b710265853aa59e53b57d1ee6865354
- SHA1 e728953fb7e3cb184277f6337f24b58452f9477a
- SHA512 9ee218cd38cc1153b936f2431c7d4ae2ef75ed2c4da9a7b6d688fc26e0e04d238fc0b17cfa747adabaae5f288baa280cbec289cdd91b7d73374576c2cb76ace6
- SSDEEP 6144:n4nSNHQs2dP5yGtSV41QJDsTDDtUMle6ZjxLV/m9HVJksDjJ5RIUGZ79:j8P5pS4YsVUCe65fm9EWTJGZ
- TLSH
  T128B48E006BD8CA5BF1EF67B6D0E39260CB71B423A97EEB4F5D8014EE1D1234099157AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/FileSearcher.dll
- Size 15KB
- SHA256 a053ba1b74531161f49813c047c504741e7b64639e748958a98e71106a715757
- MD5 832afc9b5e77b9e58c138e0b3f606038
- SHA1 78a2676fd59ad00f854176a021e7e49c903fe65a
- SHA512 2eb3d1362fdc03fe2baa86b923c235eb8bb901826058fc1aa0c8c05344f6bce2f5b74fd86c4ad8ec9966205836e6a0f03b2b5aa4cdea0453d417773865143149
- SSDEEP 384:aoZuGc6BX1PIphh+5P9U9rkdg/22nGxfpGHzdqX:aoZuDiXVQz+52adg/+xcHzdqX
- TLSH
  T11E62E708BB81D730CA6E56BB9DA343454634E2099843DF0F6ED844E87C42BED5EB15EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/Fun.dll
- Size 48KB
- SHA256 60375212374e77e54296e3d01432d75c2ca8c954a7a32c5b13ff510f4eb18f1b
- MD5 6b0e2e9ddb88342908ee1b6865a8f7db
- SHA1 14c8614576df69d3e84781614d3529bf91b45017
- SHA512 c4f0f37ed24536379d2c350c5e688436c2fbcd0957b69a601c3f651251ca26e28d8fb4dc7c3202e2dc4fb68c942b28d904b645fdc861f53dec9601040478a564
- SSDEEP 768:uzhlKS4g2amhVK/6cCGI0TYX/dj+fnIpX0/isVuhaY8XjCg6:elAh/c52X/x+fnogu58XJ6
- TLSH
  T114233A4273F78622C2BC12F6D4731315D63AF286B843FB6A1CCC25A648727C49A257DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/FunAudio.dll
- Size 17KB
- SHA256 ce88f4d5db58ec97e9a416164f913cceb0ce2ecfdc753716e4c66963e8a10a42
- MD5 7a8e11c390bb9fe768de44926daa443b
- SHA1 8a3e1b0b92d4e06bdad812a34c8bf8ca44a85a61
- SHA512 110d32e5ab39e2ee352d63f7f72b6ad7a8c6c1d0045e89dbd8508bf571638dbc5295cdf918933b18163e6af84a88eb07149479525ea6b48b609d42223ce97136
- SSDEEP 384:E+U/G2IcUjDHx7cGNHWDHyB6nnWodIZlbQqu2Jh/hS:vU/G2IcWHx7cGNH8HyqYZlbQIvM
- TLSH
  T1C072194863F8CE35D9AD06FED833070993B4E5026803EB0F2AC970EA3D56B9559617A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/HVNC.dll
- Size 38KB
- SHA256 97a6a60716f0a11f24d11fc57f0dcb158a52224d5c0ccd4ef7cfca185bbfcd02
- MD5 ce3d505b0d36e9afc194f0965cd00001
- SHA1 350173b55442a81f04fd254d7bd8166268f32066
- SHA512 fb9717a7a068a6a260f11ed7c95b26e145fce032e6edc8238da4d5ea27a37b4178f4993fe614d52f4e567a655b174502d399e10a4c0ebd7b27dd405788ecea53
- SSDEEP 768:KaSbanA5GcWJ3NgIp+K11F/nahnCxcNJQ:FSYDJdgw+KtuLQ
- TLSH
  T123033B41BBE79220E6EF16B2E8734334873AF1432902E70F1DD911D15A97AC56A287DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/HostsFile.dll
- Size 13KB
- SHA256 b348e72116846fdcc842568e8be2dbffc66909f2d8e60ab8fc1a86f5db105c3b
- MD5 aaa462cc35531b473b86459d324ba5dd
- SHA1 2c86a3710a8512712a8f0bdc103493b13f525758
- SHA512 bba13b1a900da923471b03fdd99a89ea79b1a864d7434232a82f06e83615c6868bbc1de8ee1d82352d0dd210064c45316bddd260872e20f1657b5f4f39a1ed94
- SSDEEP 192:zxy4Ny7DBrrbFv+4paDwC+v17Pk5D8JLA/4o/Lw0g74RAPlCO1l9:g4g7DBHLpql+v17PkF8Js/1TNg8RQL
- TLSH
  T115520A08DB954B32CAE94BBB6463934A8638F505AC43DF0F7DC440E1BD4776D5E222DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/Injector.dll
- Size 50KB
- SHA256 0b3c14f744a14f865f340ecf2d084a97935ac2a04a7c157864cf8bf650115546
- MD5 e274ec36b4366a95d6b47f88f589e1e4
- SHA1 e9f9e33f47dfcd9593d04bd54386893b0c84b5ef
- SHA512 d5360ed74e7652a30d29265ab09f4798b448dcd168d2f1e4f2e90de4a7343aa75bd939742427f28ed19141751097788eb4a00ffc0d12f58ca321c1819fa1588f
- SSDEEP 768:f++WUCSr/j67GvsEsp4bc7+2dMLaIEZyjL7PIHADRDl/BYqbeKP:m+WfSry4nsycq2yWvYAHAdDlyytP
- TLSH
  T1A1333A64B398DA33CFE94B7A40B70F08537462565D42DF3B2DC0B0966E22A96CB53F91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/KeyLogger.dll
- Size 17KB
- SHA256 26f94934c6cfc681a21141733321731c36bf1c817b04b37abb1d489feabc08f2
- MD5 dc880151115ef17a179d85e76523a27f
- SHA1 be96e34a9d7d0cc65831d5fd9c3900ec12aeb7ba
- SHA512 e0f29506b1259eee2d52bdcb3ba270d38e576a1a9ee6ac37275ebc0e7fdd0e8ce2a9cc37a33a713921f487c44129c68fce60a1bf4757923415aa992bf1a4619a
- SSDEEP 384:RPdRa6BDsKBFwXcrI+B+TnOAeR/LQXmmlxp9hn00HcUUv:zRHBwKocc+B/5/DmRo08Uk
- TLSH
  T10D822948A7D4273BEA9D53B7A4734346A734A2017C03CB0E3CE904E46C467F56A627DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/KeyLoggerPanel.dll
- Size 13KB
- SHA256 d7f9a87bcb82d196fb9c140fd85c82caf1fb496ee69a79fa2f8995a5c43801ec
- MD5 23b70511b288c5a4b3b3fdbcda2a970b
- SHA1 b0621dc37a2e59430cd998baaad720446d4d4437
- SHA512 dcb03256b01785d4f8d32376e7c0423fbaeb4eefcedda4444e9c8535e1f929127f723af7d1e36b9dc80e8996d618ec7270fd1fea2e64cec9453a54356fc7d6f5
- SSDEEP 192:Vpm0OZNpbyJunOqaltJpaDBE+mFTk5sopp/4obTOLSU3lf5fKKvR:rc/byUO3Jpqa+mFTke0p/1HO33lfj
- TLSH
  T19A520704EBD04B71D9AD56BB95A3838AC634E1066C03EB5F2CD441E4FC4A7E86E727D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/KeyLoggerRemover.dll
- Size 6KB
- SHA256 8296a9b44d486858b9afac1bc2c64153c5f768d293217d11f93365abc23a0718
- MD5 c0e89c2c385a81a97a5b04b1a4f40254
- SHA1 1615c4c7050ac0c7f455bd3a0a8f3716f14187d3
- SHA512 472f294df8d88c5802361f7d324ad89614f4bef088be96847e8065dfb071c0c1155df4af4cc92947db04cd09117ac0c130e1f845b6379b261b539e8eba1f26b6
- SSDEEP 96:YK3+wVn3Nf+725gMy/4Fk5mxnKEHM4ZpM3DrKwh:7+S3Ng22My/4+5F6nTEig
- TLSH
  T1E9C1B812B7D85732EC628B32CCB353514674F7A8AC53CB6F28D4010BFC2665586B2FA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/Map.dll
- Size 13KB
- SHA256 4e8247a474ece468fd0ce7b066f499a79e51bba66c27f7e8c361cda70b772b00
- MD5 5e7e9b9a046b82deb631b194116170a0
- SHA1 70a92128529152d64db750367699a3c973c68fab
- SHA512 6c9b84bbc0156acb965a440752da8de92d92b262f1cef10ce07b8c4e70c447d53465e141d73261312e954854a7d280af7e30e98472a8d4b8664614a7a830718b
- SSDEEP 384:9ZM/XGl0RpqT+edk9mX/1lolCj5uUco/Ha:TM+l0HQ+rI/olsaQHa
- TLSH
  T15152C508E7944B32D6ED56FB99A3E34A8735E504AC43DF1F2D9400D4FD037AD2A222E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/Microphone.dll
- Size 509KB
- SHA256 81b0ac1ba56879bb502fd7708c48fb552e34d6f5859622b805665ab9b86ee7ec
- MD5 efff8793d48bd3cbf56719b474eb126c
- SHA1 302d1cb529635c670b929fba734d0b3940b65779
- SHA512 842e730851dec5a6139f33c3acd332fd07e8c2907f0a5b6197b6edb8c0b66a94d7e3502c0151b4e46a79133dad4783ccde2c8244b261d4f4a5278e12579a1dd3
- SSDEEP 6144:OJrr8vmnEA5XvPZW/7wPS9rUVXcTksUo9FvQGNAZpXqcdjhjoF2phUJMiSF1:OJP8v0XjP4UVX2k5QDegihjRUJlSF
- TLSH
  T1ADB46C217BE09D27C16F33B3F4E20E2747B5E589B657EB8B448016A92DC37529E107A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/MinerEtc.dll
- Size 24KB
- SHA256 33f95895c63a64a82598a0c41a9a5288d9a1d44cd30e49a1b03844728a910a90
- MD5 b69990043e275d9c84a78c88dd29176d
- SHA1 ecee7948c0381348a8164e507860af5ebd391f4b
- SHA512 e8fe7247f7954737f3a9dd6e765dcd248fdfee679f5bda7b4732f62582babcbfda22cf352a0c6796763f83be1a4b86809c34cf396a3241745474ea93706380f2
- SSDEEP 384:iCXdbUGngLXIY6xmWQDVE9hnd6k0ZLvDB6MFzDs/Klykm6civII4A4d03lLFlK:bIZYtm1Gz+r6/hjkvIIKmpC
- TLSH
  T186B228007FA9E3B1E2EC47F3947387094B75F0065802EB5E1CD860F92DA77D896626E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/MinerRigel.dll
- Size 21KB
- SHA256 9220f75122b9de44ddf33bdfbe389d3067ec8d00a16b9b139718e5614b06add3
- MD5 a79b3eb83af787c67331428423f2b4f2
- SHA1 718b391be5066c65749b64201339bb07e153eecb
- SHA512 9a005e3e17c82a0958358812a3e15cd15ab266f2bdb9f81c71d445d7e64723ec4027d14b3f977a18b9c355d1074e6ed1cb735532561a969789962b417914026a
- SSDEEP 384:EhudgZf7rfP0W7f916dJkgC7azDHL6ncHDB5B/8lTNFhMG3H+am8jDQe0wlXlRB:ER7LMi97gvHZJ/EJeaDMxy5
- TLSH
  T185A24A04BFC55332D2EE57B6447353068AB5F1069C03DB0F2CD930E96D6AB9C96127EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  Liberium Screen Rat 1.8 RCE/Plugin/MinerXMR.dll
- Size 26KB
- SHA256 c833f6d927a64fa52e8ab033ddd488e366908589d8532cb8cfa0027388a9f3bf
- MD5 885acf2d6bf3d089274dd273eac4fb0a
- SHA1 f599b729e578fea96677283df1fffe8e8b049493
- SHA512 ec63056740abe16c4df3e80912c724ebb172c23b46eb650e303ff9f6de62d763da7c81ee2426214e62cd622481fda8701512d81b3f00ee953cda8b54e055a113
- SSDEEP 384:gZ2dJIu+8Wzy+YlxmffwDvehwd6k0zLvDBiMtDy/flykmXSlekYlypAm/miGwKE0:FROyznmwjdmr8/AjJplAAbi5KE0
- TLSH
  T140C25A047FE9A222D2FE47FAA4B357194735F0932903DB0F1CC420E92E577D899616EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30