5fc0f34f7c5f23ffa56c061be38d124d643cd41584775f11a8ff2bb5685d9c0c

Sharing

Copy URL Twitter E-mail

General

Target
KeyAuth 1.x UPDATED.rar
Size 6.7MB
Sample260524-xd2v2agy8v
SHA256 5fc0f34f7c5f23ffa56c061be38d124d643cd41584775f11a8ff2bb5685d9c0c
MD5 dedda53a517c4398266773f07c78491c
SHA1 a94be4fec5ed90b7af37ff0130a73fad0442cb6b
SHA512 21d55dc738b42438049bacd7e3019f2b388fa7386d8204a174d2d94809e078d7e71a3f9d081d27f98d55141756e68d247fb40021ab90d6fa819afe3ff6840f5e
SSDEEP 196608:kSFOd1BUhkm4VQTRqeUnT23HhdyVqcapsv:BOd1aD42TRpF3HhYZap8
TLSH
T1976633122B32FFF4D4904794D96F255CA233EBF69C42D873D8FC68883986A454E370A6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Targets

- Target
  KeyAuth 1.x UPDATED/NEW KeyAuth/BloodStrikeLauncher.exe
- Size 1.3MB
- SHA256 acf5d89583d2b5a167899ef5730058002c7c7d43d4abf8d4c6bdb668a0817155
- MD5 80eb27ba4e3edf6592596ee4f4e81a16
- SHA1 40a186264a0bacd1bb1faf7318eb154c9d72b175
- SHA512 41f49c37683020c9f0d361baa173f71089db960b52d8ad4e916483ac9e95be740f3c837465270bc62ab2f3cb482b4efc30e401d489bc4d0f9f6c2bce6447a59b
- SSDEEP 24576:8JB+AR1w7JxLPsbJ1/5HQ2YWzxYlocYwDO/SiwniODPbO+8R1w7J+:8JdR1wVFsdXtd8M2Cwnx7bYR1wV+
- TLSH
  T11D55BF05B2F545EED0B7827999A2EB2BF77174041B30C7CB57A006A92F72BD42DBA311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral1 behavioral2
- Target
  KeyAuth 1.x UPDATED/NEW KeyAuth/KeyAuth_1.3_Patcher_and_Dumper_v1.5.dll
- Size 865KB
- SHA256 529706eec3f50d2c1b9dfb85b2f007710f87294996a4a38d5bfa16224adc88e9
- MD5 db1c9c995ff0e089e31d331547bf3d9e
- SHA1 2bd3fd83054b32d8f3da1c6ec51d004c4eebbba6
- SHA512 c8ea3d40c0c60506d3456b3e6604f73b79f79addf5b8c0c115c6d0841533696850fb888d8dc0dc64648bf33fcd041de377997688cd7f1565d14227299e8d6126
- SSDEEP 24576:xhiTtH3iDdf1wTxKnq76hy4H/gXIrAtjMDDK:mtH3iDduKA6d44rAtjMDDK
- TLSH
  T18515CF1E2A856079EA638436C5C60351AE32B1B947306EFF01BEC3355E336E51FB93A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  KeyAuth 1.x UPDATED/NEW KeyAuth/Scylla_x64.exe
- Size 528KB
- SHA256 e6b99c1d90533d35db800c4cc695fab29f279829607706c258b8486740556e62
- MD5 d3d41a31d07b3c4ab4b90bc87921fc07
- SHA1 ba718a897c1ae7259b72b2d8b038c3e4c55b94a7
- SHA512 26779a07b649cffe884faeb8ce21b7d61ca611d55410d4caec1519420c1954c0c53d97959d0a583e8e9f3c62ad2b32023d900e5f80da617dc5e970bfd0f07c37
- SSDEEP 6144:6d9KNvZ68asTMq/SkEIuAHPqZrcRPJX7X89CZvSyhEzxZjTxOrQk:QINvjBtEIucPAcvKCgXjN
- TLSH
  T175B47C1673F844E8E1778238CA63CA17EB7274560760CBDF1694D67A6F23AD05E39B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  KeyAuth 1.x UPDATED/NEW KeyAuth/Scylla_x86.exe
- Size 447KB
- SHA256 9e201ab72c1eb90bcd8e755e3f26ea5b2adffdc7fb67961a638d0a2167434696
- MD5 35cef0926b285bf88b08e445f4d7436e
- SHA1 0031751deaadbbef73754f085a6ebb7cb6dcf5d1
- SHA512 270ebe2fe559782232842cf994829a3042f960a3f7b769a9ce4247a549d5facbaa65f7291aeb9b6e69ffd5e901610f149a7a9d977d39a9f9a4cd1fd968ff3e56
- SSDEEP 12288:jbqFD/dlOITq/3/Z0GIF27sKA72TALaXmljfuUdr1mYdEE:jITU4u1DGaXcPZ
- TLSH
  T111A48E10BB82E071E5F206705DB9CBB6593DBA340B3186CB73C41A7E6E246D25F31B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  KeyAuth 1.x UPDATED/OLD KeyAuth/KA-LicenseKey_x86_x64_v1.1.exe
- Size 5.3MB
- SHA256 93679af51f96edfa02cabea6801aba4484a90449745e2aa78afbd3e13fc1e070
- MD5 efab4965da18f638ba67ece790fded62
- SHA1 27687605909f5a885d78268a5fe0112723049581
- SHA512 66e86dca1427245f6ea454287012ece56d44315310b531dd625c2336b26ba4bef2e9f0c8c70649f7e8ec3c3181ed5080c0e72833ea9b43bd742bdeb08b2691dd
- SSDEEP 98304:t287e9Cg7HpxtbymElTE89gcTaqNTP3f8aPWIKz86PB3/dnDc5Fy/OIkvU:887ejpbyVlbD/evz8cxaFePks
- TLSH
  T1194618FA61B62002D94FC5B2EF3D86EEF655E4C4C79D63651234EF48002B5A9C6C2E93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  KeyAuth 1.x UPDATED/OLD KeyAuth/KA-MemIntegrity_x86_x64_v1.1.exe
- Size 351KB
- SHA256 b0080c00e9fbe13df87806bd20826eb9735a8b67f3f6aae58b3b370ed381003c
- MD5 877a111203c6c66509c6a946822050aa
- SHA1 bb88e7134729d0fa32335a573881f0bc73c298fe
- SHA512 2723aaa1c12e7c64617da1a543c22f7a92a7df42cd825b78585711aaa650b330bfe75716fd5924e1b5b3d17ece2e6c9c2d69641ae1cc2b5e4889eff8cbef97a7
- SSDEEP 3072:v+iP3g1kBnFMYuOiFUlTRqg2VeHeKj6zJW9HTfYCf0ctQ46YLQhruyF0gXgv:v+tkFMYViFUlTRzye8NWpBYRwv
- TLSH
  T155745B01F6806DE4EA6342394711F6B9D9A37C654370F90BC3A35F8B4ED7AC10978E6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12