e4d9af1699c920d21b9b94c6ed0484500427c9a616fc8da575ac4a18f38702a9

Sharing

Copy URL Twitter E-mail

General

Target
guns.lol-username-checker-main.zip
Size 87KB
Sample260623-vmcamaew6v
SHA256 e4d9af1699c920d21b9b94c6ed0484500427c9a616fc8da575ac4a18f38702a9
MD5 978bee6abb85c9c9b2fe92a661bab9af
SHA1 5e17d17ef974aec8ad551c982361582b53499c0e
SHA512 c0aadeed6df223fdc90a69e8ece107dc87357fda4f325aa8fa8ebd6cffbf6469f1667545491659ba0d0d56dc2c219f9a1c4eefa4f4d36d9f1cfff155326c9f6a
SSDEEP 1536:CAprEIMsb9pYHROVlZ4G10HD6SQYS5B1bbDmZO1pUASgL/8:CTsb96MVXduBQYCBlmZO/NI
TLSH
T1A59301388A53BD20F5F10D77250E0E89695181840FACB731AABE57A6CDF15D4AEF324E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  guns.lol-username-checker-main.zip
- Size 87KB
- SHA256 e4d9af1699c920d21b9b94c6ed0484500427c9a616fc8da575ac4a18f38702a9
- MD5 978bee6abb85c9c9b2fe92a661bab9af
- SHA1 5e17d17ef974aec8ad551c982361582b53499c0e
- SHA512 c0aadeed6df223fdc90a69e8ece107dc87357fda4f325aa8fa8ebd6cffbf6469f1667545491659ba0d0d56dc2c219f9a1c4eefa4f4d36d9f1cfff155326c9f6a
- SSDEEP 1536:CAprEIMsb9pYHROVlZ4G10HD6SQYS5B1bbDmZO1pUASgL/8:CTsb96MVXduBQYCBlmZO/NI
- TLSH
  T1A59301388A53BD20F5F10D77250E0E89695181840FACB731AABE57A6CDF15D4AEF324E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  guns.lol-username-checker-main/LICENSE
- Size 1KB
- SHA256 0e81fb1fffd45e02580af06dc19cd575e096ddde32ef4b31b87fe8f132a09b9a
- MD5 ebd73d2fac31fffb8447fd737c638caa
- SHA1 fbfb3d44025fd32c75fc03afd33b1de0fbfaff4d
- SHA512 c4c818dae14c8f8de52e762ece787b5ff4d269a57838aabcd09dc85372f97a983ab16c4128c89804e333b3ed6944d4460f10acac5150e4adbad53c48491c8952
- TLSH
  T12E11821E72500B6228AB13605578ACC5F23BB25A7A5F2A84246EF345232A06CC5FB840
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  guns.lol-username-checker-main/README.md
- Size 2KB
- SHA256 7a87b73bdfcc3659c6d473b7711cb61a228f2b1ff7cc97a76f95a5ebfc6946af
- MD5 0b8a83ea3e7f57ce809561c39f695ccf
- SHA1 7814b7c038376908c358b51d153d0aa87560ab08
- SHA512 95ec3f846a59cbac22a7fe753890483421b41b622167d55929d58c72f4b5d65f455030da3ea6a46f714a4f704d147fd720b3088ece4088e24d89cbc9a191e1bc
- TLSH
  T17B51C85B520421DF1FF60496744F24B7EF57F06CDA530424C47E802DB9494B686BEBB6
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  guns.lol-username-checker-main/customlist.txt
- Size 98B
- SHA256 f86d8b00e8866ba827d2c5e4b03ea265015ef4053539df499187fe025b030593
- MD5 8f571186f5dac8870d3e60ab8ed0dd50
- SHA1 88e9add0f35253e88c110a3d7577df32c5549f06
- SHA512 4cbd7a332b06a7bccc29f59b0842a8656b59353a46374ecc92b952261a2d4aa6db0c9ecf0165aa7b1bf57de6e64bbe38da293b5a19d46bc11ddb2ac986a1f520
- TLSH
  T180B0123703F2456B60063151001A13529000A02C03402B90F7E50182EFA5013BD06613
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral7 behavioral8
- Target
  guns.lol-username-checker-main/gunslol.py
- Size 16KB
- SHA256 416af6b7bff97079ec07134e138ef9f339e46222f9d44d30634d8fde5df610ef
- MD5 5d55b2bc5c97b21292d7497b243e0bdf
- SHA1 5eb60a9d4199414bfdd3f07ff0d7c13f25ee7bc4
- SHA512 8c3c92244ffa92c5f2e4677a07ac77ef056364b12b899489e8134b6d6bef8011bebf8395bab1c7cb3a13a9efb2ca4cfa2b3deba5fa771900b3dcd82eae70fc78
- SSDEEP 192:hTl/lSXQyclXzALayObCbr2yvcHEInB/wfwf2/ukVb1wZGK98LYMxd0Zec:PdjlX0dObDccHRB/0W6CCdM
- TLSH
  T1B972B8129800142BD68744B72C57E0527B92E953562A1879FCFC82B4AF8A73DC7F1BF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  guns.lol-username-checker-main/images/image.png
- Size 99KB
- SHA256 f710b6247a14b9b162e49ad96d72294bfa5678c8e440b096ad1a1475627f490d
- MD5 15d4c9c8cc64d29108d501bfd76dddf2
- SHA1 5364e244b23a3632ea140eb2f7594ead082e9bec
- SHA512 5821d4e69849a5bea2a4a71797f6d2268109676ff7d6dca239078d620193324596e32c93daff5d76f457ff0777cbee6745d7ac1a8a3bc487f328fbeaf12c7d77
- SSDEEP 1536:vlMzI78Fw7/gJViFOSrSs0I/HT+mpiP2ePtwZ8AluKwZjnx5a:KUwFwz0VEd/SjlPtGLwZXa
- TLSH
  T124A3F14A11F3D8465E5FD07518AA6F0FEC27AC888CD902B9F975236CC91FE1D609DE90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  guns.lol-username-checker-main/install.bat
- Size 63B
- SHA256 698231c7316d122079596f82f5f1bb98d2caa9780b107379a14dfffa1280f838
- MD5 56233d0d721f244c81136fa362571224
- SHA1 efd74d856e17aeec0166cd6a4d435fd6a2cf3979
- SHA512 ecf5a39113715823e487cd212cbcdf53512fb3f5ceefbf3dd823ef5e29c7aeef4e97afeca6b72cb6a385081af075e2877676bbe7e68eafe2d57b58c9bd5a27cd
- TLSH
  T14FA0222F0A8020B0B88A22E2808300C3220BC00F20208A0202EB00C0C883802C303203
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  guns.lol-username-checker-main/install.sh
- Size 108B
- SHA256 127b2bb7ffb5ddd30fabb437265b215c2db336f81b7e022751372fd985f78936
- MD5 bb6842c4c7d7d252ac2b4a0822c3b954
- SHA1 cd5ede5194fd3103abe8d0edbb600cf834434f92
- SHA512 aa496c1f117d2df7be49e6eed2cb9f69cb19b53425643c3bc2b8c389f0726c413eb0ed793f5d550c8d831db76b8b29d97fc613012c9c26e76825836f312e3b9c
- TLSH
  T1C9B012C832E0B173750C13BDC70304D33C43F01726140850848786E18293FC4730A3AA
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  guns.lol-username-checker-main/requirements.txt
- Size 61B
- SHA256 2f06371cc33a3fce1b06ee78f2c53fe2cb8ce898e65897b8041e3a44f66049c3
- MD5 266a4195331774256a9e61623f2efec4
- SHA1 3b51f59612d41d50e025a32786cc1c9616899af9
- SHA512 70bcbbbf6b7d7f2eb73178ab10a4d3901071ca01097687a8aa6c7f933c8cac3b5e01d73c1f5c685aeab9100cde969ce48cf8a7fa3456a5f6718a8cc49b9a0a89
- TLSH
  T11AA0029346140B9398E38E9A48769500E4B2752E3530B594226D75AD110F6C1525421C
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20