7da0dd15012ade4ebb3acb6f282d16991a759b19ecaaa68ff3b5ff795cc64c8b

Resubmissions

23/06/2026, 11:33

260623-nnw8vsct918

23/06/2026, 11:32

260623-nnc5zsct9v4

Sharing

Copy URL Twitter E-mail

General

Target
hitboxer-windows-v0.13.zip
Size 1.1MB
Sample260623-nnw8vsct91
SHA256 7da0dd15012ade4ebb3acb6f282d16991a759b19ecaaa68ff3b5ff795cc64c8b
MD5 c02109d173213069134a0bca6751d9e4
SHA1 4aaa23f35be5c4221536e0b86353eb4ac6d6d260
SHA512 5d763e1a539c21ef3545403f8585382f45e409ffc717b28ffa99127d11dc865da2add592e6678f1fb602a5ea9d287c8fcd00b6cc40e938ea019d9e087b08340f
SSDEEP 24576:dcjm3hJuWYBi5ST1GWfA0dY6WSAar4h/H3ahvzMCNh/:dc6uzZbo0+rUO/H3uvzd/
TLSH
T16835336D8C1DB1C58BF3870586CCFCDEA88FA599D0AB6D8656438031FAE441961EC39F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  hitboxer-windows-v0.13.zip
- Size 1.1MB
- SHA256 7da0dd15012ade4ebb3acb6f282d16991a759b19ecaaa68ff3b5ff795cc64c8b
- MD5 c02109d173213069134a0bca6751d9e4
- SHA1 4aaa23f35be5c4221536e0b86353eb4ac6d6d260
- SHA512 5d763e1a539c21ef3545403f8585382f45e409ffc717b28ffa99127d11dc865da2add592e6678f1fb602a5ea9d287c8fcd00b6cc40e938ea019d9e087b08340f
- SSDEEP 24576:dcjm3hJuWYBi5ST1GWfA0dY6WSAar4h/H3ahvzMCNh/:dc6uzZbo0+rUO/H3uvzd/
- TLSH
  T16835336D8C1DB1C58BF3870586CCFCDEA88FA599D0AB6D8656438031FAE441961EC39F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  LICENSE
- Size 1KB
- SHA256 3a051b662d27b2237c271bf7f02372f2080cce45458028524bfce8fe44c29c78
- MD5 3a406b30482095e060efcefba455898f
- SHA1 ea2d322a96618e8776b0b3b152f488c5066f4fa0
- SHA512 0422fc4a6c483f81b93d7bf0322d784c263aa3ba59c569c22c476b9b2599c8ed3ac39b2fd5b531dd6ca7e26c3a9c74337b18c4fdc5b389f8c3527c87237cca93
- TLSH
  T16011631EB2510772189613A099BA68C5B22BB15FBE6B2688206DF348533A46CD5FF808
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  README.md
- Size 3KB
- SHA256 79c15f8540160d3b1fdbbd36fa6da051205e1a438fd54ca7d8c42f54d4b64445
- MD5 346f10aa03f2607a7dd7f0dcf4d33c3e
- SHA1 a11c506bf18c09ede18ca53ee17a0b0d1da7f658
- SHA512 44d7ffbbdddfc1a48cce2c132f290a8c2db6e2e736abb95eee287117508bb61efd69b9df31467f18ea47652694a72594bae9dd9a6b59efccf5dfe16ea9d9ea5b
- TLSH
  T11C61965FC74B02B609112163760E7AD6FB19C07D7268B5A43854C20C332EF66827ABEE
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  data/Hack-Bold.ttf
- Size 310KB
- SHA256 5bbf531eff7f8a0c2559c9a0656718e2828a012a9b1f60b5f54006d59a4de8d4
- MD5 67bf8301130ac16bb1b0fff12bd181b3
- SHA1 28b45407cfdb0e9c5ea5797b5963e01c18a2c269
- SHA512 a60f07f6d41261134cd2ffc6fa5eab188aa18df4a6c342c92752fae761c30953c96cc279756b1a26151deb1d10bd658426f2c7cad0f0c5324609a9aa1c9e869b
- SSDEEP 6144:QmQulzP/7hWY99lUT4ApYfzwYOPXAp+HMlNEt:6AH7w9sApYZOPXAlPEt
- TLSH
  T17D647D47EF49E615DE2A2E75157C030753A6F820572B934FF00937B8CE971F20A926EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  data/Hack-Regular.ttf
- Size 302KB
- SHA256 15f55cc0c85a2988d2b4b3a8cdb5d77fdfbaf319e1bb5309d725db9818fb7125
- MD5 d9ab192896af1ab48c760f3368842b79
- SHA1 b1cd50ba36380d6d6ada37facfc954a8f20c15ba
- SHA512 37df95790d2f9d6187cd37df94410cc6d55d5e9cae6ac2ae6259ceb86aa48c6e15c0228f572915b63b864a6b8b7ff4007da34376d12b113e79894cf4ea3282d3
- SSDEEP 6144:au3VllnBl9HTWDUyJnBta7h+5AUUYfzezwYrYbJ8p1EMRh:HlBTz0BBtIh+KFYfzmrYbJ8DRh
- TLSH
  T131646B47AF459209DE272E79156C030B63A6F9119B2B938FF00937B8CEA31F109472DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral10 behavioral9
- Target
  data/LICENSE-Hack.md
- Size 3KB
- SHA256 738984af0258a2ef762ddc69e8f26142459bc5ec6552bf05d4371a56eb6e089e
- MD5 11ba09ba55f685fa62816e781aa411ea
- SHA1 a3ef613cf47a1e6718f8d578f6257867475c777d
- SHA512 1b62388cd846c7bd90d080541f7cad69a65d91eb8665fd6037153cd1bcc41d56b90e5a4e0b1faf99836fafbabae5ae9531c2a275209ee3c7557d90327904280c
- TLSH
  T1CD71D86F7309037314515355D6AFE8D0F70AE26F773B2A50606EE10C63A78A892FBD98
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  hitboxer.exe
- Size 1.7MB
- SHA256 7ff5a5657d63da6d5880eddfe53aba53b3ac39c2a44af3744d4e9c31894626bc
- MD5 cbe21c7190b04e1cfcde071ef5c98a28
- SHA1 a19fce18979b553078850843a7e8c65c9331bc85
- SHA512 a8aff315ee200db024a9ffc6ff419eedbfa962ac26cb55a4478b476e311aa207835a198ffb79232e1da745c50166a6fb3a6a909e7618b59188af56161657c2bb
- SSDEEP 49152:WfvCL9sD49oJKNomr6Wf+q1HrsFvEWVa3S7XJ4Tcr:9L/31gvKTcr
- TLSH
  T121855D03F25250D8C46EE2788266AA2EF6317C4507242FAB7A5C7F199F73B906E3D750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Checks computer location settings

Enumerates connected drives

Checks computer location settings

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14