6ea94ac6c7ddda7e0998720d6de0dc3001de93e40e0451b91f1c8578344dffed

Sharing

Copy URL Twitter E-mail

General

Target
Nameless (11).zip
Size 25.1MB
Sample260620-l1lxjsfv4v
SHA256 6ea94ac6c7ddda7e0998720d6de0dc3001de93e40e0451b91f1c8578344dffed
MD5 e835023ad21c3cd8774ff210c951a404
SHA1 2e342d76f2c6ae5fdf3f7dd37f0c4373a0ba0de7
SHA512 b9f4bf0426c5f2545bdf9c9cd313f49118ff68ba6fb9fd466d984579998f07098c16ea4bf7325dba35f8603ed73271d14ce03520e1f293b4372cb328c95426b9
SSDEEP 786432:zMqvpqUipJiwSfkOXyddVOOSx9u+ROnrEuYqc5:oqvuCFfkO8VN09b8oR
TLSH
T11647339C80666182E623FABFE4795747975842CC863CB276D43C7890DF8329EB705B1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Nameless/Nameless-Rust/ext/imgui/custom/font_defines.h
- Size 729KB
- SHA256 48ef009fde933cd5ee94aeb8f6b18bc0cb77c069cfddb625e37ebd265948146d
- MD5 0a0a1c0240bb1acbe78ac6723085763b
- SHA1 cd11063b4c1e5581d262712280cf164c9e18a1fe
- SHA512 4534af912a0660e2010cb9c5c9c028222d8ab59d83438d9fb73c1a284234b9da6f333092f7a7060fd188c9cbe7b3d91091dcf63a58853c7800b60c45ce8c12b3
- SSDEEP 12288:xu1W8xxE9dCGbE90oIBtRXZDvgjU3qylVwWtZeB1LXRpuzsCjqzOm9LpoukgWI8+:xu1WYy90GACogRXBhqylztgBMOFouFW6
- TLSH
  T1EEF45A6C9DC611D465F4F47B8C9E9E4F800A99B709027EBCB81E4EAC1C111AB55F2BEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Nameless/Nameless-Rust/ext/tbb/index.html
- Size 901B
- SHA256 288f34b700d04c00c5a6b615d814ec733cfec16573c6bc16cf33dd7ff863c122
- MD5 313914b5ed07f6e8aa9a2a68026afcdd
- SHA1 587aa0e131e22ba9d4419b0c85f52de6e7e66edc
- SHA512 6452dd75d7e31f957cfa207a17e9e39e2dab248528a580386e7e284008765e1f18bdf0762e57e5f522da3fcaa35870fc4a3074c1fa3b7082f43c41dda0abfa06
- TLSH
  T1CD11D09D364D318F18812623A72584016C2A564F1146059D211C47A0F87AE2D12FFF2E
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  Nameless/Nameless-Rust/ext/tbb/internal/_flow_graph_impl.h
- Size 15KB
- SHA256 0fcc3c75e9372aa7dd24290c05566b746f2fb62514aac59e28cd69bf513f6b98
- MD5 37111cbda605671b29cec745fb5b6260
- SHA1 5d6a1a42fc2b112d6c870889f3f05733bb3302bf
- SHA512 be0a8c1e174fc9b0806aae325e248a6f298a6940962f7522e4a79f25dfda066f6449d4cbcaec50f5abfaf372b1aace176ddd30248edfcbe78c30f8468a973595
- SSDEEP 192:dX3HG56fMJcQrcvFom7yAAW0bRAfwqI4I43LoZ/XeCwlEJs/eEAGwm1gtbRm2KIE:dXtQ8GpEA0mXebW0gPM
- TLSH
  T19C7292289AE6CA7150667645CBCB90422676E41BE717C86CF5CCC2BCFFD21B442E1BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Nameless/Nameless-Rust/generate_icons.ps1
- Size 1KB
- SHA256 f9202b74fb443c106c1cf3c98b78e81461f4b4e177e10e22a4c246770f0db4ce
- MD5 67e3e9f7db0973a37e2de5a5edbf78b0
- SHA1 284690e52e10ec53c3b7e7e22f33d0e9d6293d95
- SHA512 5573f171803154fa1b84e9fb393fa65ceda73628f264b1c8714d31cc8abfaf018926f7eea384ed1d41749b14bf7fd684aed965fbe68696ffa665049bbd28080b
- TLSH
  T10741CD317577E425238177CBF6A4B024781A143F2E14567CFC9D02DADB7A569D8D2930
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  Nameless/Nameless-Rust/src/Core/SDK/config_system.h
- Size 27KB
- SHA256 360d1eedcbd1118e4f021942469019f25ada9c526d9cee03ec4769218073d901
- MD5 a017fbb29c930f507bf20397f0b20ca0
- SHA1 585820b12ca2778c1735b47df8487c8f54eeabdb
- SHA512 183c202ff8be675e58fa56bce442fe90beafe6668ed515392682e64c2c8bcfe613e82dd7daf8b9b0a3846800271731d4c2551f90c6c990f6a54a1f902be65100
- SSDEEP 384:8Q17UweNG6bSTc1FeLhLH/iTWWWg44xEtceWEl4Ba8ukU53:8QlU7NdSTcyLhLXWWgpocesawg
- TLSH
  T137D2D04A8153F46A34976A268F573E271A0060A393D0CBE1B2ED939C7F46518B1C5FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Nameless/Nameless-Trace-Cleaner/main.cpp
- Size 27KB
- SHA256 264620b92b2a56f9a88cd2d8038b6ff056179ddf6b58665cbb9705dfb1b4c772
- MD5 177adc81906353595627cd10c31552e1
- SHA1 ce6cf3efa72c917bd171c5a70efbe8818537a58e
- SHA512 f00a29700dd860d0d0d22f4feac489525c04a6eb2208a967878acbaa79ce79fcdee59946fa1b3cdab7597893cd9d54af4a45c1efac85a7b32c8ddc53a6c3f3d8
- SSDEEP 384:aDWuzeVebTmKUaTFiG/hVjgNGPL6K20yi0+oxE8RPHVioJ661t:gWuz7Caxz/bjgYPL6K2e0+oxEYDIa
- TLSH
  T1FBD2C857DBF7A5100462E5666BC7980134819A1723A8DB75FDCF07486FC473E82B82EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Nameless/Signed-Driver-Loader/kd/include/intel_driver.hpp
- Size 4KB
- SHA256 478d43faa2c6a01728187ce210232c2d5fdea74dcb78f8a7fc22022ce52977c3
- MD5 1098f18d502f4de08d48e425c22247fa
- SHA1 02fc409406d74acc7c2a7a3bef07f47e22028ec5
- SHA512 28485b184bb77aa2843a923cc1350903ca0a88380f5c2526646467687c42cbbba0cb8d840ae7adf5bae0827ecef6be1f443fbf054604568b24b4585fcf0d733a
- SSDEEP 96:Thu27caTAj4i4P4CN4XBdHvCGV/twMgsvEUGxd/ME6b4B5B1BC8:ThbYaTA4FiXXHvCGptwMgsEU0/T6QC8
- TLSH
  T13FA18789E69CE88732B301BA474F516CE07910B029D60CD2E76DC3B46EB75EFC556C2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Nameless/check_serials.bat
- Size 1KB
- SHA256 821614ac5f7901c1b6b21b1d5d1a2eceb4b971974d6e7961bfccd720fbc35b77
- MD5 24ed3ddb95d24003078b2f2a1c26c5c1
- SHA1 ef514be61ebed89e3c381a5a6dd3b3a1b21cf08e
- SHA512 678937c0073d75f3b91439bedfac0b9d8de106b2e74947175b2dda39a381aa2d2fd150ca55e0567ad8292b267b1b85078a07c1107782b34fa2fa7f185d9438ad
- TLSH
  T174112711779CA1267DA675685C21A2327C58A2B6C2334F6F603ED53E0B23B84F7ED809
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15 behavioral16
- Target
  Nameless/clean.bat
- Size 809B
- SHA256 fb39417cc3cbcce556df7c4b7387889c6a7af4f56fb989de8d781d0810100509
- MD5 978a0dccf306f58277433654531ab733
- SHA1 8bbd3806d4868544826251186e6c3780345b5364
- SHA512 d01e6354d4ece15b087bc4552957cc85cbe5c6888ba67007317a480020e93fb717b60c5d88665ca8ddaa703f4de3dc1825bea355515cd1445caf9455f8a18a1c
- TLSH
  T110017B24B490502316CB9197CF946D84BA2C00CF42091D9E75CF42FEAB16BED62FE6E1
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Nameless/organize.bat
- Size 1KB
- SHA256 a38c7e422903768719786977a565ac4d89fe250a3e6dc178742a0997ed85b6f8
- MD5 eee434a6de716fc590145e46668288ec
- SHA1 0ea7e2fca9aec1a674ef2afa94437d8fc8be805f
- SHA512 9e6a434e848dfe92ac4d09548ba8f059255bbdf5b4b5c19a21aec2345830a9c65e2902443b96fef0fb6438400f4dd251094bbd0310d514af7e2589eaad4d66ed
- TLSH
  T18B41896328205000140DE2CB4C279455B89AFFDB4675DAD0F55E0DF953179BBA3F979C
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20