f448a82e444e1cc85467aa0eeb873035b794ea6db82fa0ed7a4389a3965e8337

Sharing

Copy URL Twitter E-mail

General

Target
Void-Tools-v2.0-main.zip
Size 1.1MB
Sample260625-tsknhsdw3p
SHA256 f448a82e444e1cc85467aa0eeb873035b794ea6db82fa0ed7a4389a3965e8337
MD5 0ac5668f0d1534e4795eca36ea902f95
SHA1 74658aa3076eac67437f3481b37883ce11478af9
SHA512 3d63fbd780b076f580dc5a4f39292e84dfd0f78abbea9881618f36dfeabc82acab1f9c92f0e1748e4a826008cec03c9a8075c101b1017cf1a8771305699ef4bc
SSDEEP 24576:UTRXkVFzSa1NJCOf8ERtr7qZccIxis8N1mrckp4f/fqjhct:xSa13Cg8kVcxb4ckOnfqjhct
TLSH
T11E35123EC751C962FD22E3BEE9A862EFE6D3BD101F405E0E2F699CE4115E1492B0464D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Void-Tools-v2.0-main/Void/tools/void-selfbot/fr.py
- Size 329B
- SHA256 ed2207afe1ff1a6c7a9cd56e874bfa0d439bad1e910ba7ad4f4db067b36ecbf0
- MD5 4439512094c97a9b5e5ccc71d603a5d8
- SHA1 b94e2c1fe56bbd7237e000566f612d874c224782
- SHA512 d764695c523c1004644909a862a05fa0bc5d6a1dcb24a133bd97e10c4fbe39bbb81cee388d3646d3017c59ce638840fee33cfed2d2bbf9b0c003d6496b5d5991
- TLSH
  T1FBE07DD8049826F04C3BD3D4D00870FDCE6150E26C0F4A60A9F506BCD70DA8891CC5B1
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1
- Target
  Void-Tools-v2.0-main/Void/tools/void-selfbot/launch.py
- Size 372B
- SHA256 3f15f1177f219e5293c124ac05b5ea7bdf0209ce43a2e5cd4c5f252c3374a252
- MD5 0540790044a6144a603751183ab1e6bc
- SHA1 f616d85c440bc066c52d6f1a5d9dbae96e77343f
- SHA512 bcb8d9760402929101eac2b93cc45e8a9949ef81b44c4b1c5cc7787b8ccba5230733daa6a45bd7456e3ef2fc2ef33a633998147eae828f83d4c96d72beb5a4bb
- TLSH
  T135E0C0D818A863F04C37D390D11C70FDCEA194D22E0E0A64BCF206AC870DE9895CC0A1
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral2
- Target
  Void-Tools-v2.0-main/Void/tools/void-selfbot/runtime/check_deps.py
- Size 1KB
- SHA256 b8c65e35d1c0e2c101f094edcdd2f57d6574d967b496a620f439d235cd16a6e9
- MD5 bbdfd451a3975f7214e59e38b3f504c0
- SHA1 773d1caee82db199691375b73aa72df935983287
- SHA512 614a185977bb0c16397cdbddd06d12b8a37cf8831bb15d10215726bcb90d5abc55bce106458dfa6e516a2a817894571723c75a3b2ae018c8e10f622373ed504e
- TLSH
  T17631AF17D941A8209B69856EAC859002637D1A970D0E346475ED46AC2F4F31FF630EFF
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3
- Target
  Void-Tools-v2.0-main/Void/tools/void-selfbot/runtime/main.py
- Size 665KB
- SHA256 97be53916aca4b131a362604cc778909ee60ebae2ad504a74b1920691acb9548
- MD5 60420087d7132b51361d7a8ab85f7d90
- SHA1 541f6622646fb110e3bc73ad165e20ff2feb319d
- SHA512 28ebc09ba1092621c738218dbc6512e267757f7658348fc88ee840920a354ee1bdc3acd42b4260f0639673b24de74934dafced1ee87bd197343be6849250f41c
- SSDEEP 12288:Mf9p1qNwFf/zP0MSFr6iJSLCbz9l616Wpu:G9Vt/zP0MSFrZJSLCbz9l616Eu
- TLSH
  T15EE47239C4653832F582F85EA87E95022624750F794439677AECB0C81FCE53A95F3EB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral4
- Target
  Void-Tools-v2.0-main/Void/tools/void-selfbot/runtime/setup_config.py
- Size 2KB
- SHA256 753855dbda1f097c6cbde20c83bc19c327562af1752a22ed7ad423c58f676208
- MD5 13c118ce02850e533b672c0c0c848d76
- SHA1 5833a37f678beb581bda33dc872d9096c7e81aa7
- SHA512 bfc092262cedb59d71e3c9f04b1d75b717983bf79105037b3f911e202ff23d17078ab9040975488bb7c948e501cdf847e35bf0f4a70300a7b0079ebe88e14541
- TLSH
  T148514F15C8146C70C3D78928CD16D0F5AA257FB31A2938647AEC82D84F784A792F3B1C
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5
- Target
  Void-Tools-v2.0-main/Void/tools/void-selfbot/runtime/void_cogs.py
- Size 5KB
- SHA256 84bddf270cfec20304aca6b273d21d5912ef894c58136f2b7e729d2dd5de3db6
- MD5 d4c6d0fa0df598ec27df1625b7c13a33
- SHA1 7b68124b1d9d583e9642a9c7b4f07e921c81a5dd
- SHA512 554251793670876b0c9052cc8d4f78b57c20b8c28afd8c301039ffc5ef9944bb1b2f84e647a4e112f6fb48b2650a921671c18bb6dd129954212482265c85ea0c
- SSDEEP 96:rVPIcWHpM+9Fk0vjy0P0zKaeCJHDra3+uYSZp26fFQW1hWCijF:5eS+9a0bjP0zKaeCl3y+TSv26OWfWF
- TLSH
  T1A9C1E025493B1D65C6DBECABAC3BB50B2228EA67141A7172F5FCB3502F181794042FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral6
- Target
  Void-Tools-v2.0-main/Void/tools/void-selfbot/runtime/void_pages.py
- Size 12KB
- SHA256 315c481b14af73baab2fb10e38577f87257a64ad0c7f9df451bb6be582f69d64
- MD5 123d8b868b1b9cac1e316c7140b7bbd6
- SHA1 61b9270531a61a03d705b1fad077ed7064bbd59b
- SHA512 6561cca23a2c8d9834e69527a751210e86f5bbaa0484004f51abc49f2a283d28ef143110bcc7a4009d1408ee1b2e53ead98cfc1fc00c9860c3237099aeb764d5
- SSDEEP 192:fsTE98+P0nb70rbLp7F3t4jKrnGtt816caRtq2Quq7vIoJ:fabslJt4yXs91evl
- TLSH
  T16F423017E1341D6701A77826AD4F8902BD18949FCE807E047A1C80DD2FDCD9D69BAEBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7
- Target
  Void-Tools-v2.0-main/Void/tools/void-selfbot/runtime/void_ui.py
- Size 15KB
- SHA256 5dccc7ae0020dc83b7c7efeeec6dcd18eb2ab0638c7aa8de8a110cf62637d1fd
- MD5 1fea6092367f0468674ec043f1d63512
- SHA1 45fdfdf3a36c98ab731b6a1e82bc3b39307d7aa1
- SHA512 191c65326d3d7061396ed5228c91a5c411614de8692744983c68a7f64381561375ddc2464a5ddba4330f0cf8fee50d847186475de7c1b98b6bf5b67e30b10b57
- SSDEEP 384:f65xmAWEcL/Hnx00JVLY17nbeghWYcybdINBO2v15L0mM6835t:f65oAUL/Hnx00XLu7brlcybdcLA
- TLSH
  T13B621116C86858A3B2C3DC2DDD97405167386E432E89BC10B79DA2B83F4C53E91F5BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral8
- Target
  Void-Tools-v2.0-main/Void/tools/webhook/core.py
- Size 40KB
- SHA256 dc4ea9b96b3517872db1f4da61d9e9a81c46c298bfce8163f27d1bcb8e2491b7
- MD5 072bcdc6356357dc892ac731eb803392
- SHA1 1e8424b14b55c1286cb524c217f567da794bf4c2
- SHA512 cc5a49c8383e20c11cc341040e1aef42e9f3bd7099dfe9995622ed6817f1e287c8ef85ee0dada2fff660e1ae46d83cf11e6258a70c76c31369bb56d2911b3b54
- SSDEEP 768:sIE6M1HQ2alvCKVFC4lxZ9miFDikAvFB9BIggQvTG2qwMhuiPuVMiVyv1MbDH25f:sqM1H3atz5/FOjIgtwhruCiU9M/vXIOY
- TLSH
  T1F613601D99556822E38BE8E84ED7841437797D070A043E74BFCCD6B85F88872D1B2BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral9
- Target
  Void-Tools-v2.0-main/Void/tools/webhook/en.py
- Size 10KB
- SHA256 adcfe01ed82b65eab025b6d8daaeb296a19026e1e91bb9cf937ac8373c192b8c
- MD5 fb93268898c0a16010daf70684017493
- SHA1 839a1dc861fc5e5392dee1bff963fc558e276e65
- SHA512 6dc7c031d57d2de165b86f268c785090c9e7950444b6f93a75e56797f3ef29e72ff8a9ad15bd9444be0d58a21b40a6128c1b13e96f9398758c4cb1ae77faf4cb
- SSDEEP 192:Jl1+6USH0Fubo949xAGfhUgsgCxgyg371gfkfk89Ww7UbfHOi9ApYMdLk9Y7iq4Z:JVbQ49S7/Ukf7ubLk27i1Z
- TLSH
  T1D722FD69C6508C6704A374D5B0981196743902130E80B96CFB8AEC6D5FCFDBBB16BB5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10
- Target
  Void-Tools-v2.0-main/Void/tools/webhook/fr.py
- Size 10KB
- SHA256 baf5801b0c975dabe4895813b6593c5f702356c5c6a1c21b5854358aadc45fd6
- MD5 c7ac36e70bc360aee87a83c24bfe0fb0
- SHA1 0a2727d89bf9fe3c714c1cf9aba277054271c0bb
- SHA512 d63fa384b047a1ca5dc9e9e8e9841d12746df4c76fe28dab09287f04fcd6e3042799078abf4feacd1229ab723ae36b6a5cd9fc967b42031ea3ee057995246c7d
- SSDEEP 192:JlM4GkDcpZboqj4t6wMGl/dAABSEEC3QWCdIeGl3RfJROKF2/B3eTHiEghxjhQ5A:JiTLb3jiyXUbiKX7iEShQ+
- TLSH
  T1B1221D58DAA49C5300D3B0C2B455A586306957071E90FA58FB4AED2C4FCECBFB12BB6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral11
- Target
  Void-Tools-v2.0-main/Void/tools/website-admin-hunter/en.py
- Size 4KB
- SHA256 b76a7a94cc08f97337171c5ee10a2cbea507db0c2751d2fb4ebdc778b07b7e35
- MD5 d5167fb574b62397544184acde2eacc2
- SHA1 50ae15c7c508ffa08f085c3456a128cd32098357
- SHA512 60b14aa5bc3cab7a82cfecfa43f06b4b16dc074e8e59e4200a973e28567c7e6d12f3f4c16665f355a2bdfac3132ef4a78ffbe2ae66a2f9449fb36e4f61225170
- SSDEEP 96:kZb7U5v9x2PflVzDf+VmH9Z6Nmca3z/tpzgysFHEEyFOAOZGK/yV:kZb7U5vKrEkPFu5FHVIOAWyV
- TLSH
  T147A1FE3728513361A3AE4C9494B2FC2C677525D7CE765034F9ED82D06FA8C309D66AEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral12
- Target
  Void-Tools-v2.0-main/Void/tools/website-admin-hunter/fr.py
- Size 4KB
- SHA256 22769c935e11531b6039c93faf0815ae985460adafda906260941bf157169d52
- MD5 743994d041b680872fa17f9b4d4088da
- SHA1 07fbea7f6f2a37f0d6038e94fa07001ce1650e12
- SHA512 42fec9caa4a1039be0722a6e0fc2d1bd45b4872f4997a44a86c19511bbe61ce1d39981ea6bf8adb52d6bb0872110150e468576e8ebe661b7ee5067f9be1749da
- SSDEEP 96:kZb7U5v9x2PflVzDf+VmH9Z6Nmca3z/tpzgysFHEEyFOVyOZGKIkV:kZb7U5vKrEkPFu5FHVIOVyRkV
- TLSH
  T13AA1DC3768513721A3AE4C9484B2FC2C677525D7CA765034F9ED82D06FA8C309D66AEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13
- Target
  Void-Tools-v2.0-main/Void/tools/website-basic-auth-bf/en.py
- Size 5KB
- SHA256 f6a7e69fc4be42ca44bc83c99c05cd5cf7adf752ec7bc2346a541c54423f89ad
- MD5 e45e4be867cec2897c01545df3396bd3
- SHA1 af4925521bcfce6799204bbae13ff08202901041
- SHA512 a969938e5347dee8e1f4502c198d4fe06b6e951bad3e3c66d62ebe20416ff72e16211efd57d201aafac4f446234056be2aec402063128f1fc165784b4a7cbe3d
- SSDEEP 96:kmbwU5v9x2PflVzDf+VmH9Z6bRca3z/tpzgy+eXZAAOcOi7T4g3BPGKXWb7oJV:kmbwU5vKrEFPFuBeXZdOcVgg3hWb7oJV
- TLSH
  T195C10E325850332193AE4D9894B3F82C6765B5C7C9B5A128F9FCC2D46FA9C318E256EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral14
- Target
  Void-Tools-v2.0-main/Void/tools/website-basic-auth-bf/fr.py
- Size 5KB
- SHA256 cf21a3345096083cc4c46210a0e9e67c7b8f3b6cf13f097a5b5559a09f8f263c
- MD5 d80b7e92a9b82762cab604f19a64864c
- SHA1 62cad49c9b7235bb3f61feb2ad65e1e070f9a54f
- SHA512 1262d6d1e37b585ea3c5679ebb6bd109ebc94825b5ee5ce2a94f0befc2f04d131b1f706829b134ed4880b7c1946bbdb2e99e674192f231142bf847510c3b013d
- SSDEEP 96:kmbwU5v9x2PflVzDf+VmH9Z6bRca3z/tpzgy+eXZAAO8uO1h4g3kJGKWWvLCWPGy:kmbwU5vKrEFPFuBeXZdO8uCig39WvLCo
- TLSH
  T19CC11F365850332293AE4D9895B3FC2D6760A6C7C975A524F9ECC2D46FA8C308925AFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral15
- Target
  Void-Tools-v2.0-main/Void/tools/website-cloner/en.py
- Size 4KB
- SHA256 6393961d36de2f962addb2ea0deba5041417c72f12e1414648e5e7eee1f0e420
- MD5 0f9e605b876bef3132f5f6ac6dd68748
- SHA1 97b768b5b4b0d5f32daaad4eb60d6c29a31b37db
- SHA512 16964e4abbba9e6537ecd074fc77843c88fbd96bc749483f356aec7c0d083ddb05e07e5399948185e82b4c8fe3380d58bbac31211b3543e525403e91b37edefb
- SSDEEP 96:k5bx5v9x2PflVzDf+VmH9ZySAca3z/tnzgynjFOOovmzz/0XWPx7oDFT:k5bx5vKr01PFMuF1JzSWJ7oDFT
- TLSH
  T1D2A1BB325850333093AE4C14A8F3FC2C6B6129D3CA726024F9ED82D46FA5C318D65AFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral16
- Target
  Void-Tools-v2.0-main/Void/tools/website-cloner/fr.py
- Size 4KB
- SHA256 629c1f52b5bee7b589c012d52417bd0510bd7ada28ad15072aece4808cbfed08
- MD5 1019cf1a9a9a471e137451ff870580d8
- SHA1 7dce18777a1a32f85160dd3ffc6f82fc7dbe6557
- SHA512 9e47385c187167864307dc5d07b790c9a9326dab718ff584a9bdab763735085cdd007dd75852e49be2dfb623bc91b6859a7c2c949fc4eb0f10f0cf6d76ef276e
- SSDEEP 96:k5bx5v9x2PflVzDf+VmH9ZySAca3z/tnzgynjRyOOovmzz/0XWP77oC5T:k5bx5vKr01PFMuRy1JzSWz7oC5T
- TLSH
  T1EFA1CC325450333093AE4C15A8F3FC2C6B6169D3CA72A024F9ED82D46FA5D718D65AFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral17
- Target
  Void-Tools-v2.0-main/Void/tools/website-dir-buster/en.py
- Size 4KB
- SHA256 aa78ba23e88f20665b29a6b950ce08bfbfb6b05e972425e07dc4c334400f6f9c
- MD5 80edbd17f80dd896235a896bcbbe9463
- SHA1 af3da55607c70e33378a2872e900088a7da5a0a9
- SHA512 9c50198d7f78f1ef0c9655f5f8314cfeceece32837b4a24f0d4479eab99bbe46c7fbe3432fe1b9400e9035ec9653258f7a0e04d78b1898e50d1449b059d3049c
- SSDEEP 96:kZb7U5v9x2PflVzDf+VmH9Z62fca3z/tpzgye/42FO5OZGK+m2V:kZb7U5vKrE2PFu9wEO5c2V
- TLSH
  T18BA1FF3724513321936D4C5894B2FC2C577525D7CA36A028F9ED92D06FA9C308D66BFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral18
- Target
  Void-Tools-v2.0-main/Void/tools/website-dir-buster/fr.py
- Size 4KB
- SHA256 da1d0f73e1ca33bf5863fb83293f9851f4342b0073b307bc2ecfc907e988d21d
- MD5 0b70dcba2dd686158d9b2252eb066787
- SHA1 89dc5dd3064a611ffe73015afbf384c9bc042b86
- SHA512 b8638092313a99ca0d868061ec28b0daa35ded56a08b36f4289975ccf879e7c97f778e09724a2e365508ffcfae35bb1eda96f65a79032a17cb3ca6b1c78f6792
- SSDEEP 96:kZb7U5v9x2PflVzDf+VmH9Z62fca3z/tpzgye/42FO2yOZGKVm6V:kZb7U5vKrE2PFu9wEO2yB6V
- TLSH
  T163A1DD3264513321936D4C4894B2FC2C677525DBCA76A024F9ED92D06FA8C308D66BFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19
- Target
  Void-Tools-v2.0-main/Void/tools/website-info-scanner/en.py
- Size 11KB
- SHA256 0138031322f35059798ad78f87162d30553ffd70cfb289446871dc2d216b28e4
- MD5 0ac1b1eb54675a23a661ae2d9f79fa11
- SHA1 617f043aad05984a60a7c87e84af41d2c2c53521
- SHA512 818270359aec0c77f02de96aaef1442480852cf28c548b349c4a2080008da71c563c997430a40089007a647dcd3e3232d154a7a822383d0500f8de016d5236d6
- SSDEEP 192:kLG55vKrE6OtF+Rl0e744Zxw+1MFDLbZYM2RSCTQ08YZ1I2PXPHpVJ+6bSJBF:kIvF+ROEtIDXKM2RF79SJBF
- TLSH
  T1D642D63BA8252770938B18186873E818776564934A66682CF9EC83E52FFCC73C5B57DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral20
- Target
  Void-Tools-v2.0-main/Void/tools/website-info-scanner/fr.py
- Size 12KB
- SHA256 d42f9705a908a72ae617f7f85d334afe18409e8581f4cfa85c5131e037ff377e
- MD5 e81182fec559b83c63529e560e16f1f8
- SHA1 054d84fa8cf5c1dcb78271947c1cb610975f7c27
- SHA512 fa65218a804e2b4bb9ce320eb3e81ab79c598db4d3a9644df12922dce04842460affb1d2422f317259baf102911334eb501a061af1b7acfc4b8acce6749d3b9b
- SSDEEP 192:kLG55vKrEITEtF+Rl0e744Zxw+1MFDLvYTaRSCTQ0uZ1OtiNCzCMhDN/MPFwSJzF:kIIeF+ROEtIDsTaRGGvPSJzF
- TLSH
  T15042D637A82427709387181868B3E819776595534A66682CF9EC83E42FFCC77C5B93EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21
- Target
  Void-Tools-v2.0-main/Void/tools/website-subdomain-bruteforcer/en.py
- Size 4KB
- SHA256 5567398f5ceda87063ddf26bd5c9a6bc30ac3c341f0f66176163c707396fd325
- MD5 b776eed983c68ec6b1b4132b5ec7f1a4
- SHA1 bc9d917a7313f62dfc940b25be488e26913bc83a
- SHA512 66a4123c9b17a6b0213b5bd19f4ba8907cd7b6e95f037f7d9468fc52af427a9ce404de9f0d4b752fed1399cd3bf4656af33f5d810c97adc7b5004ac724651035
- SSDEEP 96:kZb7U5v9x2PflVzDf+VmH9Z6ySca3z/tpzgyYCgnok12OeGKCV:kZb7U5vKrENPFuBCSoK28V
- TLSH
  T18E91BE3364513371A36E4C5858B2FC2C277565D3CE76A028F9ED82D46FA9C308D66AEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral22
- Target
  Void-Tools-v2.0-main/Void/tools/website-subdomain-bruteforcer/fr.py
- Size 4KB
- SHA256 57a06e79b1cb70e755b3506820e421641917525be708d2f9175b20a310910956
- MD5 d58f4606f9ee90b1dd04d14fcb7379f7
- SHA1 49036a20a81d8efaef207bfa9148282e0e3bef2c
- SHA512 55c995ac8728fb1b0470add71ce999e28adee12d4622e5bdc2f47036aed6e19ad71c581562147a84ca8ba98455081430cf977fe2add9626a6fade2ede31de6ed
- SSDEEP 96:kZb7U5v9x2PflVzDf+VmH9Z6ySca3z/tpzgyYCgnok1RZOeGK+V:kZb7U5vKrENPFuBCSoKRZAV
- TLSH
  T13491CE3268513371936E4C5858B2FC2C277525D3CA76A038F9ED82D46FA9C309D66AFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral23
- Target
  Void-Tools-v2.0-main/Void/tools/website-url-scanner/en.py
- Size 4KB
- SHA256 4f6241aab36dfc59881254bb10660e2e7477e865f0db62cc8dba4c3d016ecbfb
- MD5 fde8ad6dd6f95aec0130628bd313834f
- SHA1 de83f070bf0659532d60d0abfd555764076e2232
- SHA512 3eb9e6ac5de8b897f6b8112ab32ac94c32d78311fef43c2c843511cdd8dd83f1c551e74fc19b004e455deaf7bc9aeb4bf045c32d7c6734a55443fd7ca00fdce7
- SSDEEP 96:kCkGk5v9x2PflVzDf+VmH9Z6e/94ca3Z/tnzKRynzQtZ/Xu8Obv40/hR1xk0F:kDGk5vKrEG4tF+R4Uvu8wlhRjk0F
- TLSH
  T1E2A1F0362415737193AE4C5888B6FC2C276129D3CA32A034F9ED82D06FA5C31DE65AFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral24
- Target
  Void-Tools-v2.0-main/Void/tools/website-url-scanner/fr.py
- Size 4KB
- SHA256 a187f02edb36aa093634d05af400200be197ac8bd8fe50c798c5935c3c6a18eb
- MD5 2ea691a96e87546694d0796415e21e95
- SHA1 818476839022a25c3508d076dbcc3c95429cd6b7
- SHA512 a1280a8b25819aa760b3918deb723ab0e12838d819f4d0f605f0ca68ef291655b70359e920e6cbd52fe1393aa6064a0bc8cea0b45201128fbfbb2945b791f227
- SSDEEP 96:kCkGk5v9x2PflVzDf+VmH9Z6jqpca3Z/tnzKRynzQtZ/XusbObvJAhR1OTF:kDGk5vKrE2ptF+R4UvusbwyhRETF
- TLSH
  T1A0A1F03664157371939E4D5898B6FC2C676129D3CA32A034F8ED82D06FA5C31DE64AFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25
- Target
  Void-Tools-v2.0-main/Void/tools/website-vulnerability-scanner/en.py
- Size 8KB
- SHA256 080deb3de1335904e80b0be19f3e64c084badce69b7454befa82aeb1294c1077
- MD5 40aac2ec959fb2b5740886edcdd32d6b
- SHA1 6b29bd18c66613793e59e145b0f204b44abb39ab
- SHA512 9b37fb797207fb7f5f478a3678a5e27f247226694ace47e151905c07d1ce351fa2ac1fcbdf4749707bf00ef467b90081baca851eadea2ea08ab3696e6d3dcd74
- SSDEEP 192:k0GW5vKrEQvtF+R64CmrobV1WXcoRV1qi4NA22+EX9ftbEBGtI9ZT:kmcF+RxSbY3RoiK9ZT
- TLSH
  T16502563608153762D39A4C589872EC2C236679E75932A078F9EDD3D47F9CC309961AFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral26
- Target
  Void-Tools-v2.0-main/Void/tools/website-vulnerability-scanner/fr.py
- Size 8KB
- SHA256 ec1bcde153b8f37ff43f24cc1758f2a8522116e3181c94dc7ae9eb5f4c1b6b0f
- MD5 7f175012a0b87dcf699574d8bb21089d
- SHA1 68e9d230b7a42cd39a0864864a8b70e8a08f373d
- SHA512 324eadb90e816100871ecf483a694926e15d698ccaf0e9e287695a4c0218ef8c212a2102b9d335f28a5617972dfef73fbcda2a672170733a96dbd73ddf78931d
- SSDEEP 192:k0GW5vKrEQvtF+R64CmrobV1WXcoRV1qY4NR22lEOTftbEBGtIDZT:kmcF+RxSbY3RMrKDZT
- TLSH
  T17F02663604153762D79A4C589872EC2C236629E79932A078F9EDD3D47F9CC3099A1AFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral27
- Target
  Void-Tools-v2.0-main/Void/tools/zip-cracker/en.py
- Size 10KB
- SHA256 48c015be2e9215b39cb0fd6ee04c25b7c271cb1877d397ecbac26e96a0b09f30
- MD5 04072d7dfe727d7f09cc8dddcc7a0c1c
- SHA1 5e75c52693b262ea1ca6f1534d7bd56c242b1acc
- SHA512 3443b67b8340ec963596ef03fb2f3ae8af92bbfd73d117db526cd982150b52fa823a9ad9dcc60a73f3bc7fda02599f1cff7d5496e0497a8cc70b4f0db9678451
- SSDEEP 192:kArRQiLxv9/0uh8nPFMxRkODWKira0Wve+26+B2vvDgLXYcjU0edpo2:kAT8PFMzbC7m2mvDgLXx+N
- TLSH
  T14C2231361C502731C3AB9D5888B3E86C2B6069C78975B024F5ECC2D46FB9C718EB46ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral28
- Target
  Void-Tools-v2.0-main/Void/tools/zip-cracker/engine.py
- Size 4KB
- SHA256 c513a4dd8ffcc6aa2ff9ea8379ede6463a4654a6a43fac375526f019fb4115f0
- MD5 335f6ad3efe1781720fb5d5b6826006b
- SHA1 eab64e3f285d4de76a17f5c0624057ec9ad7f937
- SHA512 837d86d54b0db723877bfa80c646d5944dc545421ca76d5966d4145f1b6e47ca3df577c741f4e53fe2adc41bd60b3b1ba07e491da04d2046ffeeb8fa4d21f1e0
- SSDEEP 96:PnbNw127wcKIQkY3GJeYfUwWArnmg8sI9Qm:/bNK27wcKFAZfqArmgNWD
- TLSH
  T10691401658553823D7C3CA4C4A3BE1A67295FDA7150A1838BFDDE31C7F8993181D4ACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29
- Target
  Void-Tools-v2.0-main/Void/tools/zip-cracker/fr.py
- Size 10KB
- SHA256 1f8cec2e10fcd7889a0ce97d2ed65f05b220ec1578f118f0ffdc12c6a3d8c841
- MD5 4791e52e03da9e8322f7df4f45aea3de
- SHA1 07e2d22cbbf44f2f2abd1f27f8f56738eeea7fe6
- SHA512 3810962b26a358e4d6644a0811f3879864bd18cff0c90c4afc61e0e560f092940cc26638256fc82678fc5dbf2e014cd64cf9ba80cef207f4f208a2b9c3062194
- SSDEEP 192:kArRQiLxv9/0uh8nPFMxa8DW0o4Hni0WZ0e+26+BaE18LN4hjx0elQpoK:kAT8PFMT3nM02518LNw3lQ
- TLSH
  T19422303218503731C39B8D5888B3E85C2B606AD38979B024F5ECC2D46FB9C718EB46ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral30
- Target
  Void-Tools-v2.0-main/setup.bat
- Size 3KB
- SHA256 3d029c620c7dc1edcabbb8a4cbe073f682513137ef6d41cbcd7603c0a4113f90
- MD5 4bb8de8805c0d92d08f2b740594d8134
- SHA1 4a8edad72aada22b1bd6101a4c895ca5c80cc596
- SHA512 2dcc4090ab75f5cd7961eef17e567ff513dfdf1012b55a7cf42f6722f9cd7544cde05e4a9d95e133373f2b0eb6e98c8d9da93b39e2e02f3c752f67cf2d0c8d6e
- TLSH
  T1757166822372C83061FC66DDB78C8712B39B44DB118E25DB343D526C774CB56327EA66
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31
- Target
  Void-Tools-v2.0-main/start.bat
- Size 2KB
- SHA256 042f006c3d08c362850e07d45556f84e22905e2caf0a461f522276daf1d3a155
- MD5 e09d3fe96a1012f2bfffbfbb4d79d389
- SHA1 6a37e8ffe50c0a9e05a99dc8a459342e7208724e
- SHA512 bd684f6017b8f440884f7e3ad28c41e654a270249b3601d08949275985d83be50e69e7df2f3b9f6078cd1f0bace55b63200cdcd0cfbdf7ec271ad53c7783bae3
- TLSH
  T13E41D0401262DC6060FE15EC738DCB55A39748EB12CA12EF703C819DF74CA5B357D669
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32