Overview

overview

8

Static

static

1

KellySolve...10.zip

windows10-2004-x64

1

KellySolve...10.zip

windows11-ltsc_2024-x64

1

build_go.bat

windows10-2004-x64

1

build_go.bat

windows11-ltsc_2024-x64

1

install_modules.bat

windows10-2004-x64

1

install_modules.bat

windows11-ltsc_2024-x64

1

src/account_info.py

windows10-2004-x64

3

src/account_info.py

windows11-ltsc_2024-x64

3

src/auth_intent.py

windows10-2004-x64

3

src/auth_intent.py

windows11-ltsc_2024-x64

3

src/bot.py

windows10-2004-x64

3

src/bot.py

windows11-ltsc_2024-x64

3

src/combocheck.py

windows10-2004-x64

3

src/combocheck.py

windows11-ltsc_2024-x64

3

src/counter.py

windows10-2004-x64

3

src/counter.py

windows11-ltsc_2024-x64

3

src/custom_solver.py

windows10-2004-x64

3

src/custom_solver.py

windows11-ltsc_2024-x64

3

src/dashboard.html

windows10-2004-x64

3

src/dashboard.html

windows11-ltsc_2024-x64

4

src/dashboard.py

windows10-2004-x64

3

src/dashboard.py

windows11-ltsc_2024-x64

8

src/generate.py

windows10-2004-x64

3

src/generate.py

windows11-ltsc_2024-x64

8

src/genera...ter.py

windows10-2004-x64

3

src/genera...ter.py

windows11-ltsc_2024-x64

8

src/ip_int...nce.py

windows10-2004-x64

3

src/ip_int...nce.py

windows11-ltsc_2024-x64

3

src/main.py

windows10-2004-x64

3

src/main.py

windows11-ltsc_2024-x64

3

src/mingw.bat

windows10-2004-x64

1

src/mingw.bat

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    KellySolve v2.6.10.zip
  • Size 81KB
  • Sample260620-tls2bag19t
  • SHA256 645d2b44045184a8f16cf0f1f6111070244095c08635175efb2bba0ad9743a62
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoverypersistenceransomwarespyware

Malware Config

Targets

    • Target
      KellySolve v2.6.10.zip
    • Size 81KB
    • SHA256 645d2b44045184a8f16cf0f1f6111070244095c08635175efb2bba0ad9743a62
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      build_go.bat
    • Size 243B
    • SHA256 199320acde8acb06ae870ef6e492c0595ff600b43a0db369b037b3e6e4e3722a
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      install_modules.bat
    • Size 256B
    • SHA256 f525df7516213b4b80fa21586134d728dbdfec5425dbe8532d0f8c7b23771910
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      src/account_info.py
    • Size 26KB
    • SHA256 c2ed57b0862c9c993e45e8bb738ec68b15b379b3080f937fc8a9398a45da7f8b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    behavioral7behavioral8
    • Target
      src/auth_intent.py
    • Size 2KB
    • SHA256 c22d8b70d01e074ce138ef459c271d88942edca0a8a01ec70d386cd14077b0ce
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral10behavioral9
    • Target
      src/bot.py
    • Size 35KB
    • SHA256 ad4fd6c8f88216b6086f4fbd6aaea5f903646b12287f798460f72357c27475bb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    behavioral11behavioral12
    • Target
      src/combocheck.py
    • Size 577B
    • SHA256 a4193a237da0caa8cadbad5ed235a7205d1d97a622671131dd2b318ff0a8e6ee
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral13behavioral14
    • Target
      src/counter.py
    • Size 209B
    • SHA256 63c0f7f4b93798d07875ba7f63761a2685c8df22972540e43d4c6d8c3d9d3b17
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral15behavioral16
    • Target
      src/custom_solver.py
    • Size 17KB
    • SHA256 702622e9f7f92f35fde047fc480df5499d66211bcbcfa912981c4052a1438ff2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    behavioral17behavioral18
    • Target
      src/dashboard.html
    • Size 38KB
    • SHA256 b4b212e09e910824b2594be90081427861e1d84dbc81c35ee2c4a19159961dae
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    discovery
    behavioral19behavioral20
    • Target
      src/dashboard.py
    • Size 3KB
    • SHA256 89e453ff7ac76b6ffabb55ae7c25f0f9be82bf9bde88a088d1733841ae0d2f9b
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral21behavioral22
    • Target
      src/generate.py
    • Size 6KB
    • SHA256 af0e4110b549a07b5fa1a45573793cc12e8b2f732507b30e0406d2e77d8b5873
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral23behavioral24
    • Target
      src/generate_counter.py
    • Size 249B
    • SHA256 93f9fb44c37d667f66db6372396a94958617f0e145074267606900ddaa4945d7
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral25behavioral26
    • Target
      src/ip_intelligence.py
    • Size 779B
    • SHA256 b1b91610fe137284597cad49034b744a685bbbb48549019dba9cd0506f2c1e7b
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral27behavioral28
    • Target
      src/main.py
    • Size 16KB
    • SHA256 b72e62a24b145154b6621ab67bb7752a395af2a0f8e5aeea087f147a7b8d55a1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    behavioral29behavioral30
    • Target
      src/mingw.bat
    • Size 87B
    • SHA256 25e8514ed05e880e3241fda965d56ef6e5736f03eeb30b5ad30b7396b1eed601
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
3/10

behavioral8

Score
3/10

behavioral9

Score
3/10

behavioral10

Score
3/10

behavioral11

Score
3/10

behavioral12

Score
3/10

behavioral13

Score
3/10

behavioral14

Score
3/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

Score
3/10

behavioral18

Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
4/10

behavioral21

Score
3/10

behavioral22

adwarepersistenceransomwarespyware
Score
8/10

behavioral23

Score
3/10

behavioral24

adwarepersistenceransomwarespyware
Score
8/10

behavioral25

Score
3/10

behavioral26

adwarepersistenceransomwarespyware
Score
8/10

behavioral27

Score
3/10

behavioral28

Score
3/10

behavioral29

Score
3/10

behavioral30

Score
3/10

behavioral31

Score
1/10

behavioral32

Score
1/10