bf99a8f351601939a05492bfb68f4e4ba8babbb20290b5aa6f4bafdfb39404f5

General

Target
ItsLeoV1.0.7.zip
Size 170KB
Sample260624-pymb3scv3m
SHA256 bf99a8f351601939a05492bfb68f4e4ba8babbb20290b5aa6f4bafdfb39404f5
MD5 241ab8a969842fa90214eca0d56679ff
SHA1 d8b77d59c9ddba7f81e89956b8a12bec46eed3fb
SHA512 259af35e32b6cc30799093fe4badf97204f5665e32c3c9906900accf631864104ce2dca5efc6315ebccd2bc7f93116ad8f3dcfdb3abc1ecdaca208042871ec6e
SSDEEP 3072:z1hQFFRbLwglsKJuDy0YVVyL2FWldasDbUQG7Nr8a98aiPcWPBZcbRcw:zfsdKKJxxV8ldaTf5rP7iPcWPrYRcw
TLSH
T1D404E0F278C0685BD0E6F1B029A86A331C47C94D65DF68A9E719E35A07CF0FC81156F9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

defense_evasion execution

Malware Config

Targets

- Target
  ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/da.ts
- Size 1.0MB
- SHA256 2cb2ec09679944998b6553b39d4aae67f927e4b2669c27f2b59b446261467637
- MD5 9383a4c829849530b5d14a3d2c8edf5c
- SHA1 b1c0b48d6469ea3d13684564268cf292b458a4e7
- SHA512 20057f20624a82a84459d7822be6af221859289248c31491fdc86b7991b5ed18e57e12c66f244efea1b331c04e6bee7293fff4e859148eab4108172baf8b7e69
- SSDEEP 6144:MWzHHz+8RsaN8mnOpIFHdbKXWYBksuojS3G:E8vzOXxknG
- TLSH
  T1572521C540BB40A8A1D7F5ED4A9B40493122D917EC1AEDB8BD8C93242F9A538D5F3F8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1
- Target
  ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/frida-il2cpp-bridge.js
- Size 152KB
- SHA256 3d90978c96ffd88f1195976e4a0ae8301311ba939c71ddae19ea116fd8c4d84f
- MD5 e8688c2c02995af1ca97b867c72a58ad
- SHA1 e67e8033e9cb98d7065e89111c237c1e904bed3f
- SHA512 f7c47be2347cb84a06b22d14c14ad2da849f987ae88849fb5bebc339f7c835c5538728b3473922a2ba7978726ca098e9e8f4dd2ebb5e0745b7b20bb012a9baaf
- SSDEEP 3072:xC/hgGf+pvzOY0mQrYrFQxAqXAaQdczvQg47SFOokQpg3FwiwgpB0lINK6jx5E3L:x+hgA+pvzOY0mjqxtVQ2zv147SkoHgW1
- TLSH
  T1DBE3744929F7C262812BF42C2B4BD048F23995036159DEA47CECC364DF9A931A6F67F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/nophoton.ts
- Size 1KB
- SHA256 ec3e5fda51f4aa0d177a82a094152e8632274ce8e2e9248d88e1199be916a379
- MD5 cb9fc9890e71112ee33f299115546262
- SHA1 13b4e6e2f41bd28b20373a46d914f4f65ca6b80a
- SHA512 3191bfa1feb4d54cfbf53bdbc28f306c68101f32d4e532c84d36a583c8b317a32ce90bce14d28ffb3c33cd188b92c0aecc96217a32b6a2e7373b57f1c8a6d39f
- TLSH
  T1593146AC2AE1F01B27DE162BFA0A49DD7172845610CDBD43B79CB00E87C915AE3A6537
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/questservers.bat
- Size 80B
- SHA256 9343e406e39c8c6bd71b1e73525bb92051da37bab4432c51f1129183af36a156
- MD5 062696187444c7dfe99ffde9d509196e
- SHA1 3f7a975d2edfa158d7e8eb9da3fc0e6c267c3ef4
- SHA512 2756b5023f6cfd4dd9a099d2a80f9749cea37cf19025e6479f656f5b59f0931eee8e26f1141c724a433475448e074be0406b68e2234ef4aecd1f86b2a3f53d67
- TLSH
  T183A012015D147534140801110F8A00D6A0841710C4CD8728E8813CD0710CD457144334
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral4
- Target
  ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/soundmanager.bat
- Size 1KB
- SHA256 459ef7cc91a1006865faf0bf44c8957aeb6f59e7e20f50bde47f322863987d4e
- MD5 9648d09f665722cbdd1832d55ac7b57a
- SHA1 231fd0c6912baf271c983c32eb8cdb98de4c99cd
- SHA512 413be6b3f76cdac5ac061da22aaebaaf15183ca282d562eaeece69a1b493fe0d9530a6852136a38c0e4cd850bdd9a6431865bbb33093114da5783bcb55745313
- TLSH
  T18831DA1DAB01916605F182B4C86821C8E278601B0B99CEEE385FD4297FF22C747FECC9
- MD5 SHA1 SHA512 TLSH
Score

1^/10

defense_evasion
behavioral5
- Target
  ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/ItsLeoV1.0.7/start (run before opening ac).bat
- Size 1KB
- SHA256 5114143adfcfe3f3449c834aa535b1464aca43f47cdfc98c64cff326d6b27747
- MD5 0d9a4adb2bc166d1040a7a1212cf1b74
- SHA1 c67aa83aa962c3fa4980a99c8197331013ebf761
- SHA512 85c38695dfa2df18577281b150454b1fee3c2edec3bfb3484a7472e35d9744f3d223eceb7a05a07c2584cdc25d5da8e311d86ea672a35c385eee0d10de0880b6
- TLSH
  T1E821659FBC00F12B497EC6CA5F96409DF75490E30B6D4D4C782E543317860C6106E716
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

JavaScript

1

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6