f568f696d20ab57e8703a8b8a2d191dffa58720c479ee512270b3d21753c3cc8

Target
kairu.rar
Size 335KB
Sample260628-yqbeaac14v
SHA256 f568f696d20ab57e8703a8b8a2d191dffa58720c479ee512270b3d21753c3cc8
MD5 9c6971448c2abd0784281a9de0929d11
SHA1 aa415b48aa214a76175e48bc46827b8f221e1fe6
SHA512 a030e414753fea5561e479a5ec22a7a58af793f7ca31828a8dcf12784666e127a6335a6c097f1799c12a36099c1c06e18a00708350160fe9c6f8f256cbd0d0a2
SSDEEP 6144:9twn2UIdGixiGtTeC4bLGSgb7NllTWMC+LGDrscVArcQq3l72dbQTW93S:9e2mGtTe6z9z7CrArxq3l7qQT/
TLSH
T1FF7423C82F877CD55A7F2CD6D723CBA01438AE5F6A08F42EFDB7B101AB058A48059975
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  kairu.rar
- Size 335KB
- SHA256 f568f696d20ab57e8703a8b8a2d191dffa58720c479ee512270b3d21753c3cc8
- MD5 9c6971448c2abd0784281a9de0929d11
- SHA1 aa415b48aa214a76175e48bc46827b8f221e1fe6
- SHA512 a030e414753fea5561e479a5ec22a7a58af793f7ca31828a8dcf12784666e127a6335a6c097f1799c12a36099c1c06e18a00708350160fe9c6f8f256cbd0d0a2
- SSDEEP 6144:9twn2UIdGixiGtTeC4bLGSgb7NllTWMC+LGDrscVArcQq3l72dbQTW93S:9e2mGtTe6z9z7CrArxq3l7qQT/
- TLSH
  T1FF7423C82F877CD55A7F2CD6D723CBA01438AE5F6A08F42EFDB7B101AB058A48059975
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1
- Target
  kairu/kairu/kairu/kairu/AHK/Aimblox (great)/Id recommend going on blue team.txt
- Size 38B
- SHA256 2be4b414ee3d8456b7dbb6083eddce1e8daf52b49b9948048901aea2fa1f705c
- MD5 e05c0889bc0a7ddb2e99d8f958a06da0
- SHA1 7ab72b4443322d4cd654a4ea186817fc5a85cae2
- SHA512 2606854e882bf590e883a76b2ba9b8acac32913c12be43679ce0c67ee888ae089ebfe21ce8de6a6a24b0f6a7d9d95efee5f60f9091601f345a33bd047b138ff4
- MD5 SHA1 SHA512
Score

1^/10
behavioral2
- Target
  kairu/kairu/kairu/kairu/AHK/Aimblox (great)/camlock/camlock.ahk
- Size 4KB
- SHA256 3bbf1341f19317a53ae065174c0f153edff2f31feaffe487ba5327b486f8cc33
- MD5 2ad4479d897f693643416451d758702b
- SHA1 cbb33d5835016d768f11b99f2c69506af385517c
- SHA512 aeb79507008be2663769ed55bdfca9f39741146ddeb2824c9e676f78d1c436affa1fc6cd4c3d90505c842cb8e417eca358fec8787b84ea4ad2b956a29b110715
- SSDEEP 96:QxvDs8UIBStPuT2l6csxwPI986wVpysHlYI1yKkYas+mx2eqs:8fSt2Tu6csePI96VwsHlYXS+mx2eqs
- TLSH
  T17E9175F765D73A9F91BADA1FE802410BF60E81420A3760A875ECECF41F5D4A501E4EC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3
- Target
  kairu/kairu/kairu/kairu/AHK/Aimblox (great)/camlock/sets.ini
- Size 236B
- SHA256 2ce09baf7ad66f4f0678712d4342af574cc3eebc41dc296c4310c90821ba7c28
- MD5 deaebda1b7dc5c417c0487380b8ec3ef
- SHA1 4817340d44a9893d4781736566e4d57472ebd3f9
- SHA512 7313cd255cd660173abf2407d82cf515d2f8a42f33275a183115133116cce3c4de1683d41bf6f7233af6c887dd5d58817f542ffd4bab8784fdc1ba2237acbcab
- TLSH
  T12DD0A717EDC85CC754E96A0DB910522A31F401C5ABC48201FBA8E0472F6DC101159359
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral4
- Target
  kairu/kairu/kairu/kairu/AHK/Aimblox (great)/triggerbot/config.ini
- Size 109B
- SHA256 33d01edf3c763da6730dde980012481deaf23ba400906bcd712d713187bbc91d
- MD5 9934795bb3321b44990cbe9817bd2e3f
- SHA1 a16a3d357010433a9f5fec3bd6273e1ebc223d01
- SHA512 d31fa5ba09204c5903ef09351e9fe64cdf300d48f1589946d2fd0c84078a2c62ad279596e70f157bc486900e650ccc0def71e56f12bde360ac7129b935177e05
- TLSH
  T1BDB01257D3E06CCB90FF090AD914730811D025E823D647047A92C1464F56C10103076C
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5
- Target
  kairu/kairu/kairu/kairu/AHK/Aimblox (great)/triggerbot/triggerbot.ahk
- Size 1KB
- SHA256 288f4d2aea71ed677b473a6d15e11ab869fb2db8d888b002bd535efee0473b15
- MD5 dba8e296c5fbb833b56d5f4d495c4b9c
- SHA1 75cc7be3c90819fc1c2249447d40062ff3a8b97e
- SHA512 dbf2fbaff6d4cb9714a30c1496f87aa080067258028fff0e6f03d6ad1ba5351886d62d94383c656d5e487d8a4fe18ca1cb4dda0b4c71fcaa7c3ba0e087b52492
- TLSH
  T1F34103F796173D97417BAA6FD9134227F72EC3AF11273022B9DC99681F2071942C1D4A
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral6
- Target
  kairu/kairu/kairu/kairu/AHK/Aimblox (great)/use a white crosshair and 1 graphics.png
- Size 252KB
- SHA256 ff08d65a956fe81f4f8e3579d50795f83e63e19413c41f506b9887f436d14551
- MD5 20c889cec47f6a4b7f832822261bb053
- SHA1 87ddca4c39648f630176d7e1c0d38e0ec6331129
- SHA512 39d57b29d3a8b556ee62175b9487434f57d38f8c6284c904171f8a7a16d8f1f68e7af24c867bdae5ea5c87aba5e8ee3468ed0faa9afd2b5882625584603453b4
- SSDEEP 6144:R4uQcIBjVPDLFmgsZ7fdc5drfHQMAg2/aJdkkWjJ:f9+jV9mgsZw1HQMQ/YG
- TLSH
  T1534422904654C251EEBBE7B52BE2482FB99D18600EA759360799B726C3C3F8C77C5CC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  kairu/kairu/kairu/kairu/AHK/Arsenal (great)/camlock/camlock.ahk
- Size 4KB
- SHA256 3bbf1341f19317a53ae065174c0f153edff2f31feaffe487ba5327b486f8cc33
- MD5 2ad4479d897f693643416451d758702b
- SHA1 cbb33d5835016d768f11b99f2c69506af385517c
- SHA512 aeb79507008be2663769ed55bdfca9f39741146ddeb2824c9e676f78d1c436affa1fc6cd4c3d90505c842cb8e417eca358fec8787b84ea4ad2b956a29b110715
- SSDEEP 96:QxvDs8UIBStPuT2l6csxwPI986wVpysHlYI1yKkYas+mx2eqs:8fSt2Tu6csePI96VwsHlYXS+mx2eqs
- TLSH
  T17E9175F765D73A9F91BADA1FE802410BF60E81420A3760A875ECECF41F5D4A501E4EC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral8
- Target
  kairu/kairu/kairu/kairu/AHK/Arsenal (great)/camlock/sets.ini
- Size 239B
- SHA256 099c5a5de620abab5d9f0b0886c1c169ec3c187b25ddbefe783629f12338ca62
- MD5 b0b968d7db56aafbda7522686d39358d
- SHA1 94c11a563ee606851c6f4918bc2ebca8ab68e180
- SHA512 24520750240a77f4d224346f510b0da3277df41849a32fcc3522ffe73dc38d6979311af82fb02bba02ffc96440c01e9dbef5e5217dd40226c37e2804747a59cd
- TLSH
  T19CD0A717EDC85DC364F96A4DBD14561A32F401C4FB808241FFAAE0173F5AC101599355
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral9
- Target
  kairu/kairu/kairu/kairu/AHK/Arsenal (great)/outline colour.png
- Size 4KB
- SHA256 8b5164ea3722653062b6e6305d5b08d4e2e7de27ccef50decbba484e95cdcc59
- MD5 ac3729b7bfcac3c7a04cf7749eceac31
- SHA1 bce63468a659afa57f96d9a7d190459360544977
- SHA512 03284d56fc0e7075b1656b2a52901bd30f08e24fd7da6ce0a7d5213a4f2a20cddb4bb0cb00219b31fccf2331830f5e005ea2413b53e9aa87bf79a584a7772e45
- SSDEEP 96:X5RKqexk4qSjJr0wldcj44KvmgYp1uSzxudSt6PX6ONEJf2xTrU:pRKLx9qSiwldCLRgI1uU8d02XvEx2lU
- TLSH
  T147A13A48900EB0F90F36E8AF4AB786BD1AB0469E185703B774AFA75410056707D5B479
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  kairu/kairu/kairu/kairu/AHK/Arsenal (great)/readme.txt
- Size 206B
- SHA256 bbffb7c22485ea9fc18f539e2c7c63d56f4e676862f2cbe7a831f0293db6e60f
- MD5 3f7357ec80793de78f39304ec462fa2f
- SHA1 80925bc2803e16fbb2598e8cf89438483ebedb9e
- SHA512 1f9fcad2c815d3d6d83301c074dbb0142335fea7a04fc4296ecc0794e3890ed3c33f1f732e0796822a0df7650250272b1cc174c47a7be8ac454e65c8eaffc7f1
- TLSH
  T19DD0A719E3496391F721150C28A8049E8B52A25E21C51179B583454827312C9C8142F5
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11
- Target
  kairu/kairu/kairu/kairu/AHK/Arsenal (great)/triggerbot/config.ini
- Size 109B
- SHA256 0a5abf37178bd098bfa485532bb90d18744efaa3614c9f4ddbb2a52f1d7334ee
- MD5 07c52010e8483c6697d3bffd16fa70c9
- SHA1 106d2bfd1ff8670d7639ba0b4fe4f025035c758d
- SHA512 cc2407e41680feaf31a01e1b08cfd38d29abb083c57e5d9d88fd384a9c6a1ccc22274e0a1dd6db3cd1d41fcb84027c8e17a94d252873169e2ac5556edf3c8fc3
- TLSH
  T1D1B01257D7E07CDB10FF0949E518730C219005F863D647047AA3C2455F528100030768
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral12
- Target
  kairu/kairu/kairu/kairu/AHK/Arsenal (great)/triggerbot/triggerbot.ahk
- Size 1KB
- SHA256 288f4d2aea71ed677b473a6d15e11ab869fb2db8d888b002bd535efee0473b15
- MD5 dba8e296c5fbb833b56d5f4d495c4b9c
- SHA1 75cc7be3c90819fc1c2249447d40062ff3a8b97e
- SHA512 dbf2fbaff6d4cb9714a30c1496f87aa080067258028fff0e6f03d6ad1ba5351886d62d94383c656d5e487d8a4fe18ca1cb4dda0b4c71fcaa7c3ba0e087b52492
- TLSH
  T1F34103F796173D97417BAA6FD9134227F72EC3AF11273022B9DC99681F2071942C1D4A
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral13
- Target
  kairu/kairu/kairu/kairu/AHK/Bad buissness (good)/camlock/camlock.ahk
- Size 4KB
- SHA256 7b12c0607f827ae5e1b03ea73bbafe18f028728d0321b02e32e4c04d2e5d3b7f
- MD5 16fe61e8d53030f087cd7da85fd53836
- SHA1 f2a95dd22a2cc1482553795aaa09caefd2771de4
- SHA512 a76538f0b5fbc785a1faa1aef465b8d1a995a7ffda107dace178dbc8482d76a9aebc8d38c3e03601578b2ceb985856a215af3725c4b2fba655102a3c238096b3
- SSDEEP 96:QxvsP/a1duTbhVj6GvbyTHWPRCyKcJ2Yas+mx2eqs:8mu8TbhIlTHWPFR9+mx2eqs
- TLSH
  T1C99154B751C63EAF91B6DB1FE512401BFB1E81410A2751A47AECBCF80F6D85206E4EC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral14
- Target
  kairu/kairu/kairu/kairu/AHK/Bad buissness (good)/camlock/sets.ini
- Size 239B
- SHA256 dd06a9c55eb8fd84219ef46d066cfeccefa3777fcadf6aeeed24ee1a54887942
- MD5 569828cb52d4e33fa68f6316d9012705
- SHA1 19ce61b511566ddbf4532e3bcc2913ba9e0595ab
- SHA512 a29f9b1a34036479041b3cad75722b3018dcbcf6b3ef25336cca66c38d813007b3ba2a826a48b2932f5e7c7bc1d216c5101bb02d2edba71f74a6c9b4e420e9ed
- TLSH
  T16ED0A727EDC85CC364EA660DBD15521631F501C4AB409101FFD9E0172F6AC50155935A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15
- Target
  kairu/kairu/kairu/kairu/AHK/Bad buissness (good)/outline colour.png
- Size 40KB
- SHA256 0256616ab62e75d9174383396ba3805a031d75f076ba414e7e886f0185bdabbc
- MD5 690e4f2d14d1a2d3233c371f71d2ff00
- SHA1 c5407306402ca6ad52b057558a99517db35b1955
- SHA512 2c5cd34159a60f329ee13220374d4f0b93eb4a3928386677a9802157114b704bb9ee474eb8d70c7e9f11c5b5724cb700e4b7f7876dee99095c59efdacbde45a3
- SSDEEP 768:zLXGwxfMxk7lmLyT5HkJufZzhVcOlEYN5+lPByp0esZmuF1EPABN+Cjyxuv8XU:zLTxfMxk78LO5HOufZzncOlE85+lPB1p
- TLSH
  T19F13E04ECDD1C10182E74B2E53596A22DD1F2A0132029AE5ECB37D2D18DF996432B8AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  kairu/kairu/kairu/kairu/AHK/Bad buissness (good)/triggerbot/config.ini
- Size 109B
- SHA256 16f29702f8e7c61ef48f463367c6523d83d46013533715970974d30a48c9f283
- MD5 518383b035ffb65222a2f9820ed3de45
- SHA1 651e152e9e81b0fda1084b84fddb3020ab61d59e
- SHA512 9b6cc04ff606b194726898930789777d8c33e3a8c0d6cfb51ca756bc4638d88d1be58420ca51056624473fb41428f0bf43ef93a6b0254a9dfd0fa9b5382c2f57
- TLSH
  T19BB01257D3E16CCF10FF090DD6197308118005E823965B04BED3C1464F63810007076C
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17
- Target
  kairu/kairu/kairu/kairu/AHK/Bad buissness (good)/triggerbot/triggerbot.ahk
- Size 1KB
- SHA256 288f4d2aea71ed677b473a6d15e11ab869fb2db8d888b002bd535efee0473b15
- MD5 dba8e296c5fbb833b56d5f4d495c4b9c
- SHA1 75cc7be3c90819fc1c2249447d40062ff3a8b97e
- SHA512 dbf2fbaff6d4cb9714a30c1496f87aa080067258028fff0e6f03d6ad1ba5351886d62d94383c656d5e487d8a4fe18ca1cb4dda0b4c71fcaa7c3ba0e087b52492
- TLSH
  T1F34103F796173D97417BAA6FD9134227F72EC3AF11273022B9DC99681F2071942C1D4A
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral18
- Target
  kairu/kairu/kairu/kairu/AHK/Blade ball (idk)/triggerbot/config.ini
- Size 109B
- SHA256 7d6946c7d67981f98c5bf6753c86b9ac24784fd533117c3d419441cf68188f4b
- MD5 6b4a14c9ee01e9595de644c4d3046c8f
- SHA1 3bc526675a389111dc1dae9a24770402588460fe
- SHA512 93a156e269b142f93f55f7d2e2d29393c0d14017b8ae15ff440c74b0b18d5f92d9f475dd0f22659d17ee3b365c8d0b5af8ea48e555015811bea585f2e1221225
- TLSH
  T169B01257D7E06CC790FF090AF914710811A025C8239247047AD2C1564F46C101030F6C
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19
- Target
  kairu/kairu/kairu/kairu/AHK/Blade ball (idk)/triggerbot/triggerbot.ahk
- Size 1KB
- SHA256 b43c9643dd30d0310d5d7712a3adcb9a79b8f2da46b0c76cf80c060ef867ac57
- MD5 3e371a9026a48973a86b51bb51d2a696
- SHA1 8ba5eb9826621a1f5d3bfa04cf11aedb5b02a3e9
- SHA512 ede10c4cbd769f720954fc0231494d2c77151ec7f5527987e2ba169adb705505ecbb8437a900f5e388344e58cb1a3003f79b329a4c42794a7a3fa9a09aa6732b
- TLSH
  T15441ABEB96172D97007FA77FC912522BF71E83AF11273021B8ECA9681F3061A4185D8E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral20
- Target
  kairu/kairu/kairu/kairu/AHK/Combat surf (great)/camlock/camlock.ahk
- Size 4KB
- SHA256 3bbf1341f19317a53ae065174c0f153edff2f31feaffe487ba5327b486f8cc33
- MD5 2ad4479d897f693643416451d758702b
- SHA1 cbb33d5835016d768f11b99f2c69506af385517c
- SHA512 aeb79507008be2663769ed55bdfca9f39741146ddeb2824c9e676f78d1c436affa1fc6cd4c3d90505c842cb8e417eca358fec8787b84ea4ad2b956a29b110715
- SSDEEP 96:QxvDs8UIBStPuT2l6csxwPI986wVpysHlYI1yKkYas+mx2eqs:8fSt2Tu6csePI96VwsHlYXS+mx2eqs
- TLSH
  T17E9175F765D73A9F91BADA1FE802410BF60E81420A3760A875ECECF41F5D4A501E4EC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21
- Target
  kairu/kairu/kairu/kairu/AHK/Combat surf (great)/camlock/sets.ini
- Size 239B
- SHA256 497e17d087dc13f1fed53970a2ce47e70317d2ebac30002b132c560398e6d14a
- MD5 d3a7b8bd5b031bbbe84e2fc028082338
- SHA1 093d97a807282ceec40c47bb04769ff3acd47c55
- SHA512 1cc81cdb7ec6cb979596e73dfa4845a6951a3531d7e22518c8f4a4f47d2a64b761bc21fd4aa5f877a09f15731a9fb41aa33099796fd11b3a2318fb12ccc2a12c
- TLSH
  T1ECD0A717EDC85CC364E96A4DBD10561632F401C4FB808201FFA9E0172F5EC102599359
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral22
- Target
  kairu/kairu/kairu/kairu/AHK/Combat surf (great)/triggerbot/config.ini
- Size 109B
- SHA256 33d01edf3c763da6730dde980012481deaf23ba400906bcd712d713187bbc91d
- MD5 9934795bb3321b44990cbe9817bd2e3f
- SHA1 a16a3d357010433a9f5fec3bd6273e1ebc223d01
- SHA512 d31fa5ba09204c5903ef09351e9fe64cdf300d48f1589946d2fd0c84078a2c62ad279596e70f157bc486900e650ccc0def71e56f12bde360ac7129b935177e05
- TLSH
  T1BDB01257D3E06CCB90FF090AD914730811D025E823D647047A92C1464F56C10103076C
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23
- Target
  kairu/kairu/kairu/kairu/AHK/Combat surf (great)/triggerbot/triggerbot.ahk
- Size 1KB
- SHA256 288f4d2aea71ed677b473a6d15e11ab869fb2db8d888b002bd535efee0473b15
- MD5 dba8e296c5fbb833b56d5f4d495c4b9c
- SHA1 75cc7be3c90819fc1c2249447d40062ff3a8b97e
- SHA512 dbf2fbaff6d4cb9714a30c1496f87aa080067258028fff0e6f03d6ad1ba5351886d62d94383c656d5e487d8a4fe18ca1cb4dda0b4c71fcaa7c3ba0e087b52492
- TLSH
  T1F34103F796173D97417BAA6FD9134227F72EC3AF11273022B9DC99681F2071942C1D4A
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral24
- Target
  kairu/kairu/kairu/kairu/AHK/Da hood (goodmid)/camlock/camlock.ahk
- Size 5KB
- SHA256 13a0ee4c201ea77d71f13d2b189b9e273e183048627f4e1a0767a39852e271aa
- MD5 a32e83032954c42f5f9ed9b4f3cf5e55
- SHA1 e8a56e1a2186e6e467a4d20089e22a4d39233777
- SHA512 ae203283a20a2a7ebdfccfe2c025974a69fbcaaf20ecd469f48c9333e80fa7d936c273cad81ecfc82da109d1bd4117686f7a3aff08786543b015729ce5afabf4
- SSDEEP 96:QxvD3npBStPuT2l6csxwPIvcGoCGVosH/YkyKojqa00mx2eqs:83St2Tu6csePIvcGolVosH/YpZi0mx2U
- TLSH
  T11BB142B715D73A5F95BBEB2BD803021BE64E91520D2F60A474DCAAF41F6987502E0FC1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25
- Target
  kairu/kairu/kairu/kairu/AHK/Da hood (goodmid)/camlock/sets.ini
- Size 278B
- SHA256 213b1c8097f5c256efabc4b5eb3977948d98e89835b58212390c88021b5ff4e2
- MD5 41c349ddf80f08803d6e5536d98ce2f9
- SHA1 a1a6d8b312004aa5e458779c70bbef0ffa5d7061
- SHA512 e012574446d7fb816912daefcc213ea72614714863a724ca1a99965308584bbca561173522a8f3554c11ca462ee2458cd4cecd3bb493f118d5478cc1d64dc830
- TLSH
  T1C5D05B13EDC55DC344F5960DA915771A33F410C8DFC5C102FE9CE1072F599501269359
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral26
- Target
  kairu/kairu/kairu/kairu/AHK/Da hood (goodmid)/triggerbot/config.ini
- Size 108B
- SHA256 608b58f0b1a92f2ae5911c393f591e276751fcb3b7f88917893c813aab9b3998
- MD5 0fd20e2096eca6953907d446564d605c
- SHA1 f238f7c8550754e5285878951f2679d796afe1b7
- SHA512 577ae2033bd57314cc407d326a306693b500a651eb4bcae2c19a5bb151def6404899e95542da49d2218275f6d9c676da60fafbc7b747f493ebff923e723809de
- TLSH
  T106B01257E3E0ECC7E1FF0DC9A528710811A031C813D247187A97C1464E429100430668
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27
- Target
  kairu/kairu/kairu/kairu/AHK/Da hood (goodmid)/triggerbot/readme.txt
- Size 42B
- SHA256 b72e15e952f6b788911c26f1ae6de5a5b0dbcf369ee5d2c4bf0fcc0fcecdad7e
- MD5 7f708a2aac835993b7ec1db155f4b0fc
- SHA1 366e5104b9ba08702f3e1194999e00afef0cc891
- SHA512 51475a5b7c428049303844944777cb5afc167de4afb412c4678402d8d9e1b1806aaa320d611e9e612368fab577c278a30dd43f128b03f573bbc4ffe24a2270a6
- MD5 SHA1 SHA512
Score

1^/10
behavioral28
- Target
  kairu/kairu/kairu/kairu/AHK/Da hood (goodmid)/triggerbot/triggerbot.ahk
- Size 1KB
- SHA256 288f4d2aea71ed677b473a6d15e11ab869fb2db8d888b002bd535efee0473b15
- MD5 dba8e296c5fbb833b56d5f4d495c4b9c
- SHA1 75cc7be3c90819fc1c2249447d40062ff3a8b97e
- SHA512 dbf2fbaff6d4cb9714a30c1496f87aa080067258028fff0e6f03d6ad1ba5351886d62d94383c656d5e487d8a4fe18ca1cb4dda0b4c71fcaa7c3ba0e087b52492
- TLSH
  T1F34103F796173D97417BAA6FD9134227F72EC3AF11273022B9DC99681F2071942C1D4A
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral29
- Target
  kairu/kairu/kairu/kairu/AHK/Fisch (great)/README.txt
- Size 204B
- SHA256 1d0b5bc5fa9f15ac04908447bfeb7f190423eb3389dc316a3dfc1e695eafd0e7
- MD5 15fb6352ed8656303d4ff56b1b8e5b8e
- SHA1 647f0cbbc3373984d3a1d4ae3da1f74bd405cb1e
- SHA512 d3a6e70cd22414361f8f022c62739e8cd97aa77c3f2484db5f27ffa547676c7e7160e89195622b0a5f5f0ef3ef27dc3231c6434dadde9dc3b6b5e6f95f66c40c
- TLSH
  T132D0229CAB0B21C6CEB81CC6D42C8A26F0A8C4768080870290C89D3D828E1E8828E0FD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral30
- Target
  kairu/kairu/kairu/kairu/AHK/Fisch (great)/Shaqs Fisch Macro.Ahk
- Size 18KB
- SHA256 158487dd02c4b78a970ae98dda946901bb2249f0b65a0b4cfa04de3d3a9a4178
- MD5 c2ec785c73f3abb8090a5349d72c7ddf
- SHA1 95fb816fa43a0789cfe7a0bf93d66f3da95bec2f
- SHA512 2ffed7a7b6859728e263ce561157e7b8d4e4ac69ff7197e729ae18def84f0f8b4604ab5b67c41aec73b3bd0d50fd845aedb193226f46f29c0452546f6d96284e
- SSDEEP 384:RuJLK4ZUDP4ms/xC3UpPHfbqRCf01FBz2nF1:RuNw3kHWRRonn
- TLSH
  T1F882E776A0A2133A81337336594F7587D53D2127549B0B20BADC2BC81F7E9B847B9EC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral31
- Target
  kairu/kairu/kairu/kairu/AHK/Hood customs (pretty bad but works)/camlock/camlock.ahk
- Size 5KB
- SHA256 58b675105fd91bbd63e3c7957253678c293a28282ac5213b9d274f32728307c0
- MD5 79d2ed5d79104fa0decd2bf7dae09e23
- SHA1 38f5737852f4c9a2aba2ba9ad483117c497bb137
- SHA512 7b0f46b4f2a33fdb3f3f9216164bae1b4346935a6362ece1c39b59bbdddbdd8f5452d1e635fd060cab1329dc33411aa5785cbfa747e7691adb74989ce106dbb7
- SSDEEP 96:QxvDJEjBBStPuT2l6csxwPIvcGC5nVosH/YlyK3a00mx2eqs:86St2Tu6csePIvcGCNVosH/Y0G0mx2ev
- TLSH
  T116B120B715D7395F94BBEB2BD803021BE64EA1520D2F606835DCAAF41F698B502E4FC1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32