df837ffd21d8854408988d266344b35d59cc40e6015b85f89e089ddf389737d6

Sharing

Copy URL Twitter E-mail

General

Target
Project SadRC7.zip
Size 4.5MB
Sample260701-mqtebad18t
SHA256 df837ffd21d8854408988d266344b35d59cc40e6015b85f89e089ddf389737d6
MD5 20cb17e0e9557cfee1746cdb77d0e474
SHA1 351424e081b0327383c2af040e406d36b9ade084
SHA512 65330cbfdf738b6856195a76b30d8439ce6e667b9e633a695cc9963ac82a3c70f5c3ffc0251d0824fd198f585a4d79dae3f4b85202882307eecc416ee3705c2f
SSDEEP 98304:74HZxR9S/lHuFurElEnSRLptDLm71/pvCZQr1pw57xfDGCZlu4U:KktOTHRLppC+DqCZMl
TLSH
T19A263341DA2419B2D65FF572A687158E8E55D208D390D03FB906BEE33113AB18F737AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  Project SadRC7.zip
- Size 4.5MB
- SHA256 df837ffd21d8854408988d266344b35d59cc40e6015b85f89e089ddf389737d6
- MD5 20cb17e0e9557cfee1746cdb77d0e474
- SHA1 351424e081b0327383c2af040e406d36b9ade084
- SHA512 65330cbfdf738b6856195a76b30d8439ce6e667b9e633a695cc9963ac82a3c70f5c3ffc0251d0824fd198f585a4d79dae3f4b85202882307eecc416ee3705c2f
- SSDEEP 98304:74HZxR9S/lHuFurElEnSRLptDLm71/pvCZQr1pw57xfDGCZlu4U:KktOTHRLppC+DqCZMl
- TLSH
  T19A263341DA2419B2D65FF572A687158E8E55D208D390D03FB906BEE33113AB18F737AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Release/Scripts/Orange Blades.txt
- Size 21KB
- SHA256 30025f441ce85518796039df716b80f142ce0c47d1ea8dd0c95af5e5ab5ea757
- MD5 6f6ff8612f7d19eda22e5d664b5404bc
- SHA1 c9ebf489397824d29adf114c300cdda4b8adddee
- SHA512 6dd2469eebb9bad3c10691a88d445cd6b309699fa0740b7a1c03d9f9cfd09094b7243b007fad3c1b3c21100a8a86a6e3f57de461d657c3b10dcc6ff942d09589
- SSDEEP 384:1sv05WXS8LhynQCruKntTMoUcSYEN48ZyKhe4ASTHaYD+Y6:u0QXS8LhynQCruKntTMovS5N4eTmY6
- TLSH
  T111A21CDC3386133A3DD9EAA5C016AC01E6B6800A1A79105F71F6B0D145CE86DEFF2E5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Release/Scripts/PipeBomb Launcher.txt
- Size 43KB
- SHA256 51b28a1de8a517ec6ec7048281e9a2288de1eb895028e738d37dbc61c57e7dcb
- MD5 14d99ff02ac79875dba58d3b38ae46db
- SHA1 1788cd013cb33f862ea7a982e7e4a266b04cfb9f
- SHA512 308aed0cfdc2ae8f894d50ef8844bf70372a12414fe888c05a8d8c95b763f54cfc3992a326722eaf0b63d827fc223c04d9ec9a1fb839b0799b9343bf9f8efa3f
- SSDEEP 768:pbWonHo0idCu7jHfuhMcVf34sCKXk6dTp2JwTmHfv3PnpOELXEXdGXWXEXdGXAXt:sFY3rCGkAT8a6Hfv3/pOErGdscGdsCG+
- TLSH
  T12213967F138721594BA93790AC5B0C05EB75C021F1363898F62CCFA96F2A55F50A1BBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  Release/Scripts/Pistol.txt
- Size 21KB
- SHA256 334490dc822932dd01d996204252a08a46d786ab20ecb9c60fe7bf2716365b58
- MD5 93649a1e2bb4548d946cb1a7da24fafc
- SHA1 23d738149b31285591d47302f478e8b7e9f2ec8c
- SHA512 e2363a58084a956ea9b0b16f55ae8922e1db7de34d58c05c5be0272fcc99f741c52f34c687bbfb0a38c9d00241091ea2049598da7bb69634085a83dcede0226a
- SSDEEP 384:PJN17NS3yfujn/LmLRtr4FOx2o1+dkGjUhMNAsBACvYYPRbtApLHmPuLA:PH15Gyfujn/LmLRtr4Fm2o1ECLsSCvYc
- TLSH
  T107A2418DA39135F50577E2252A532C07DE221027267D99EBFA6C5728BF3830CBE54B87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  Release/Scripts/Rocky.txt
- Size 128KB
- SHA256 25f1c9098f4aa7d85992e7c9b1eabeef695f9e7c31dfb187508eb9804a342851
- MD5 7d882fe13835731b6a569bbfe5f42ee2
- SHA1 3f3bce598cfe608cba1c1d0c39abd0c633150ad8
- SHA512 a56dbe018a191415aaf6193f7f2165eaab23dd2c1b9e634caf0a0b0dd80936883f65092bbbdf94ec6e76e010d4cc4d37a737ef9decd84b12d4e319792366b541
- SSDEEP 3072:twi3X2ro49otvMLFJqo5d/cEMkgljv2XkFEbC5XBTg6es6SYN8bUb2UrAOdvJnp:x3X2ro49otvMLL5d/cEMkgljv2XkFEbb
- TLSH
  T1F3D3981B25D7236878FBD65876DB0C07F913601B1229455CB2AC16F02FB538EA2F266F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Release/Scripts/SB Shotgun.txt
- Size 36KB
- SHA256 e420893b235d34b72726b7811b5e6145c290e743a22e61920f6319a08220a66e
- MD5 59b47aa9df5f81c995f9bac2f694a4f0
- SHA1 8e5f4457351a887bedb6cd935a8c8b28d7fc2f70
- SHA512 3030f41088259b01fc3bc5288b272783a39e60bbe7f6e29b33ed32b47a846222eb4b685346d02f3d759f6b4b48c54c40992b3c35dd83884b2ecc869086d2818f
- SSDEEP 768:V0o0SzWNrDKFeISGyfmTPGbyi97v4L8FsINbV0d2+/q+SFeo:2So
- TLSH
  T1FDF266EE73C727A52BF1D675D0422E56B676800B2716408BB1F9E4920C6B06E8F72D4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Release/Scripts/Scythe.txt
- Size 63KB
- SHA256 4341455ac844c7b2a92f148468843fdf75d4717ac31f82f1dc53d31e22fdc42b
- MD5 de5b718ff36b702fde58fc7b9b47fbf6
- SHA1 510b580ae5121f7b237fb909b8db8d0c20f24a39
- SHA512 3b6a96434579c3d39cf0d114d42f9070cb56bebc7719066a294d81e20a9a16470d9c5dd8226f4c81e8d21e35c40f7ae97ef60ba086dfa318c25a2b546e437ca9
- SSDEEP 1536:QcZXvCPnN4Y4fYifYRAROR5P7wrK8MTVyPrvxU9odx5V5TUqRAJESo3z/lS:QcFvCPnN4YpbcuB05x5V5rRAJESo3z8
- TLSH
  T10D530A7B53C73D7D809A676058DA0709B67EC424321A6DE9F110CC986F2A85F60F3FA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  Release/Scripts/TF2 Heavy.txt
- Size 42KB
- SHA256 d51b4f3cd0815efc11cc704375deca3eaa1cdb49e1421eb9bef8a19a982f4d34
- MD5 8c40b48fc62ab294f87b8f7adde29335
- SHA1 bdf79d47e28b88e80f8865010405df573a8b97c4
- SHA512 b149ce9e10e9c005517d26cb463f301d3aaf5883e7dc113721f81022a38550c276198d912208ba472b15e0a600ae24622b5c67a7b1f48cbd85a7ae54d338252d
- SSDEEP 768:n/3L86A442zwB2H0FVSDOulffVJkg52LIdq/MYWrOKk5kUw0xkfx6INzK6+D4AJ6:n/nzHAQjzFcKh0z+S6vT7ON+msVj7ier
- TLSH
  T1EB13117D27D203ECBA461AB6B1042E41A0BB9C3935711AE16BE83CC62D9D2DF77D064D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  Release/Scripts/TF2 Spy.txt
- Size 22KB
- SHA256 bb8fe7185cfbfa8306a08658855c4bacce2fac854c2904fe0031131f7ee78692
- MD5 8ddb9d9e0b289e448b6335ecf5c779d1
- SHA1 ccd71d94d3ca76819b4aa71e0a09a3bcf832c324
- SHA512 2eac982781bccab045ad6fbeca565653d7b6ab5701b16948811674eeddf9cdfd6e419ce921cad65c91c0155178ccdddc929e511c2cdf3607d508833ff5affa8a
- SSDEEP 384:cJ7P77E3QCcTnPCGLnP+vbVghtoqLyBEltlgJ/g6FAm2PZAV2NqOFX9DYAXuAezS:cdPHEQCcTnPCGLnZtoqLyBElM/6m2SVQ
- TLSH
  T1D8A286DDF68C11F40CC6B1A5AA332D07A93FF435313E56DAF4D29078691C28C9562BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Release/Scripts/Taterazay.txt
- Size 49KB
- SHA256 47e0bec97ebdd0c1214db0cfbc465f95bd19cd5932a98d7165ff4f9c814660a1
- MD5 e23b463e51917081cb8299d354600420
- SHA1 1c04d144358bb5c19cc41d9aa14b1d69450d82d9
- SHA512 4df8e74e1564bb61acfd38ae2823706abe7541ee24264815666cef3c04d636b6137d8f22a3bbdce7130ca39a379e21d69695d3fa06fd96229316654e727e17fc
- SSDEEP 1536:JhW8lkJABY5L4s+G+wHMNKNOxZx+NKNOxZxENKNOxZxy2yMeITFTeXAVJa:JhW8lkJAB+L4s+G+wsNKNOxZx+NKNOxL
- TLSH
  T14533651D36E013F648D1A77D604A2812ECAAD081353745E576BFA4DC6B2E21CFCB4E5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Release/Scripts/Techno Gauntlet.txt
- Size 79KB
- SHA256 83a5136dc656ff5e597c2dc1515672459f6d3271e34aa249c744b31146c0f78a
- MD5 72dc9ae43a2335d1bd2235d4ee58e07c
- SHA1 cc0396ae09ba836f94c36d25310dc741ad855273
- SHA512 bd10b64853e35dbe67de02ea8ca6535c05bc3c591eae94557723e5115d4f450844eb9142cee5f68da9bd2d25fb6d25d665133c32478181b54ae5e1258ee6a132
- SSDEEP 1536:ho+pDD/X3KIHds+07P4yaPGrC4VTGTMDOKvkV1xjs:ho+pDD/nPGrC4VTGTMD4V1xjs
- TLSH
  T1388398FA7BE204BA035E4E7984D94E44743AE54A31367D41B32A5C63AF35A3F3809736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Release/Scripts/Time Blast.txt
- Size 17KB
- SHA256 27bb3ace6b007ae2f434eb20cc3b8a69f16b9c54eb65c8f620babd7962d717c2
- MD5 c166444888977774a7ce3a42b5a882e4
- SHA1 89a06013025a9a3f35ab990a1ed850cb2068bf7f
- SHA512 bc79924521283095c038a7084158da6fa068e9b22ffc103108e78926cd85fb10dd2911cd902e56281b6ff1b8276d3ed9ec4e6c0885e70994f4998c8a25014cde
- SSDEEP 384:fGLa4KokE0xRwEcxR0dF4yoxBQR+aQzuyNQLg9h3xKXjowax1iFozBj2X1r+KoRe:fGjKF4BvABwlUg9hBKXswW1iqzR2lr+e
- TLSH
  T1D682755DE15704B96CCADB85E1E55E83B8A138A836372DC9F2E9900C3A1C66DF4E434B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Release/Scripts/TopK3K_3.0.txt
- Size 90KB
- SHA256 534e94b41c8415f996e4a447a20ec44c4426f9c1cd3dc6857b9758c18e8dad39
- MD5 0acc26812e24d4daea8386950c395de3
- SHA1 3c7ed4bd981dc2accf12c006db578c8ca129f352
- SHA512 47006096fb6869922dcf9e9335adf0093fcbd57add9e14f5aea24724d555aee297a1b70beb0ee99ba6e73666ccb4b8f8df18653d66d58efa41d0adfc0de431b7
- SSDEEP 768:l9dGinWaivTGFMoN6x94g+SnITXinAUJj0WFtdeqJ3ELZ7KhJDr0x9wgevMkO6xy:k39eXLAMRRo82yHg63ihZ4
- TLSH
  T16993969F368322A959F3B65D3CAB140EF3B310172139164C767C99887F7628DA1E09DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  Release/Scripts/Zeus Blade.txt
- Size 28KB
- SHA256 0865d7a02fceef07a48eb2da520dc45947b1280d1a5db14844082726cbbaac51
- MD5 f95d5f283acdc819976f2399ea336175
- SHA1 0bcc247a7441de3283f305b42e05320f88fdc584
- SHA512 4c176fb01c2da7b154e13c1aa4df4f1653f80e0051823442ad232daef454257f7d9d29a38f7fd02c92413b5891667da177b9c5fc7c2bba6475040f5ae9a9df1d
- SSDEEP 768:XZlKVxyfjRq6tv0KbHwOst06L68bFo51j2mVUGjRxuJmwULKEPVm0LvVmTOUo7U0:X/d0KbHU62G1j2mSGjRxuJmwULKEPVmM
- TLSH
  T1CAD2516C67D123BA0DCA977870875D83DE4B7484303268C577793CDDA62E11CBAB4B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Release/Scripts/aimbot.lua
- Size 10KB
- SHA256 39c0941198c663a7660ea1b6d1158b4505d379274a98af78772c0edd7d57a6b0
- MD5 6e94bb3f642f732000f8b85d0a1963f6
- SHA1 22c48b969a3c977b39086d13e5a391adf9991ee4
- SHA512 c823409f58df63977f36b227b7cf3d1901be8c7659e111a627d6a9e7716720dc979ece0e7a7adaf86ff836ae4b67bb46bebb5330f0ec9125a32a994045532d3a
- SSDEEP 192:qPhnks3VGiGxGMGdGID+bCFgXUpGpBmxxQXvrQ31gbw2e3pe3KfQCr300/9Spb8q:qPhnkSVDYtmX/gUwpgYfgTlQilSRzF
- TLSH
  T10D22763AB25F52E88D872798D83B4C44BC6EF072A51B039EB7AD5037B10969C80D67DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Release/Scripts/angel_shotgun.txt
- Size 6KB
- SHA256 88a530747f7bffde97274982c21efaad4093e51e798e92e7bc847772c01bd878
- MD5 b1806f320f004ec09f1038097e8e72d5
- SHA1 250468356593bbc96958de02a0ed7f8cb3834aa1
- SHA512 71b22220e02e3df367db34e39d0be51c6c36be3253554bf25dd7ad209a6424bfb36cb19cd70806b3a602f52f1249a06e979891c4a127700acdd5f61731bca1f5
- SSDEEP 192:/m97YD4WLcdp6/4YVf4ZR0IDM7zV7xJEAO/a/Avc2yVPqiF:/m97YD4WLcHQ4YVfYmWM7zV7/Eh/cAEP
- TLSH
  T1D0D12C8E3B87F9E55ECFAF5AF137090663B7F142293505D5F250A009772892E2CD09AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Release/Scripts/archangel.txt
- Size 62KB
- SHA256 5d072d12680fa5dc20e43927fe10610a39afb3a3147e153f7017243a33b210ae
- MD5 d7b373a3585e18ea619efd4a704d758b
- SHA1 86cb26e2a84d03ba633f9afd13d7f6609635187f
- SHA512 fd8a0ea048b0f88a6551325cc1b71de2bbc39333ddc22918202d40e041d7c8cb70838451235e8c0917795b77ef72d4c102d6e6108ad529637b67dc671c9a8e88
- SSDEEP 768:CR3/RQEUem1IbsL3kstKTobpX3cGkUs1+d2ZUVQOvEi/Cz5fkJ/6BJX0cEdQRo7:9jU7UssSez/w/EdF7
- TLSH
  T15253EABDBA4E0A6E1E92F5719CB3CC00B63DE530301E21A975AE901C1F5955C43B6FAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Release/Scripts/big boss.txt
- Size 117KB
- SHA256 ebe8ae9e6e30758380e85327471cce932b70a6c1703a050aa7ee002b1fe73603
- MD5 83719fd3cfc0a08aa07691a4e931a36a
- SHA1 87d3bab87341c09290e11c8b34b27d8f70be7ba1
- SHA512 5ebc00fe6ead431a33b6b9fc11e4bf0ed081dbb86aa01d3ba194bf39719b0d207a4e1099c231754cd8f086a16d7c411cd64196c19ed76b7fcecf8b55f1f83083
- SSDEEP 3072:zaQzY38g8RkJh+hhw9KHD8NOrJhtdx5vv45MQ+dgnDu/IvapU1NGJE/4NowV1gT+:zaSY38g8Z1gTudmPNxLbvVBActFo
- TLSH
  T13BC3D6BA7BC140BE4E8F1B58CCEA9A116434A821753E34D5F1A700676E1AF3E3445B7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Release/Scripts/poison_lighting.txt
- Size 67KB
- SHA256 b112b801bd19653edf1f5ca24d8eec2f5df86bc4a02e45d553a8b47724a890bf
- MD5 b10a6754a53e9c4bd786d3e79c878386
- SHA1 1f1f3624b27e3bdfa30c73ba6581c83b66112c81
- SHA512 7cf4d1e82226a777be4f9ff9044b41810675ae9ef979e82cb1c104d1087247b90e11ada6971a9c2c9745512cd8d2e73258f70ff1318c8a3e072eaea448a54605
- SSDEEP 384:vjTsUCX/mt+1xzkI149QLMLkoFnXClatwh6CjV/FXrCnp22w3w+NspvxkbRDttzK:rTsK+7jXLsObWmwIyOhrOFmBhoGsh
- TLSH
  T17163A36D3B430A3A2B77C6369C831800F6357103316A19BD792DA5492F7A3ED12F5BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  Release/Scripts/portal_arm.txt
- Size 6KB
- SHA256 007db6ee5633863b9ce2c4a392cdaf439cf42a50472e7eb21c7b486200fb85eb
- MD5 d662b962ae9d9ab31cdc02a1bb65f546
- SHA1 39bcd2bc0b59443b02eecc5c83cb82f5b8f6662c
- SHA512 56df03eb4cf705e0602e481b2d661576d75670d98ede6f9c54c6361ee4744b7293ed89199452cab0699e2fba3a9157d93b7b8c5b8748920076315b4f2cbbfb6a
- SSDEEP 192:hdUkyObcGf5N1eRTKUQq2fK3JMxDBDw4Lqq70apr:heicGhDeRTKU3+OE1r1pr
- TLSH
  T1F8D1A60F728123F64D4A6B548447018BA273A976308615FDA5E1E8EC3D65E0FB2A7BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  Release/Scripts/purple_eletric_scythe.txt
- Size 68KB
- SHA256 050adbed5d653b9289bf7807391d14d20cd2231e54494abbbc05cce225251f41
- MD5 b38cb4b0f3ae444519e826ecca290a81
- SHA1 384adf8c501a2b5f0b1346d5df092ed92399b8c0
- SHA512 62afb8caf9509a5f4e2719bbe8ca0ae89306376ba8fa41473a2f69fd77f6a748d3e7734d8ac294b2e19a4172bc3846f37011acbb7f83d2bfea57da2fe7d5a426
- SSDEEP 768:Ao60wwnC8ySqKV+/2Z9/2JBhWChM8Gr9paS+qb7lqR5lIsg2Lojbac+ZiZnb+KLw:MBwnSB6z7lqHSsg2LoXsMDhF+
- TLSH
  T16B63521D63C400B25AB7E33854532E42DEA1E4533B7B49AB754C45DCBF6F648B2A8E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  Release/Scripts/ride_spider.txt
- Size 58KB
- SHA256 5aedc299d2dfd941aca474a637d04e5362a9c443396178271c4a6e7668b2bb7f
- MD5 5fad2c9634e0608eb64c9945b27b17fa
- SHA1 5a207b4953e51feb44a1b29e8270f1f86db87995
- SHA512 caeab04a2ef478425e81e8300bd002ff0e50a670ff1b3d673a5b0a7bab88b00de98917b10ca3187a084a375a49fe5c84e196d178a7dc60845113c0e8466fe68a
- SSDEEP 1536:aLwA8PhkCQuWGwW9HD9wNHjc+HjycqFcDDnDF2hxb/Rx2k2g2YCc:1A8PhkCQuWGwW9HD9wNHjc+Hjyc7DDnO
- TLSH
  T1D943447C7FD032F648A127711D893E07E82A66921733C9E079A158CCBF2EA1D7671D86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  Release/Scripts/seveninject.txt
- Size 494KB
- SHA256 99ce1d6b07c7c5121aef303b5fadb5053aa897eae424c49cd7a390835970138d
- MD5 3cee42f1b457d739552df63d51ffe392
- SHA1 c4fdae92abf6d8a15732a339ce8bd0c1f29f8fbe
- SHA512 df5fdaeb7ed73adde29358d4eda1347c5f78a968aae66f6c366542bc66f556b907587f4e9483eb5405058476330b198b585f601310385404206b491fbbd721b4
- SSDEEP 12288:tVSY7wamUg23uyWE/RRkjH9/i1VPPqQ94FIfpNCij:7SY7HeyWE/RRkBi1pPqQ94FIf/Ca
- TLSH
  T177B4F92E734A26B468FBCB5468A71804F233905721211B64F7ADE1993F3926F71F07AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  Release/Scripts/shadow_katana.txt
- Size 24KB
- SHA256 042f088d92716b347849b4aab3a858e60101dc7d9e4457c908d69622be6ab372
- MD5 8f3a2838e7436fb668a87fe0aadbcb05
- SHA1 7eea3f8a5dcc0caaab0078ebf80708c0fa452f3d
- SHA512 3671428410a7686a900288c5f1b4cba3854eb58bb42f6954e6161755bb724e84d72d6b300faa70faec933d078694c0e0cf78d38e20b55a8a22510dc68128ce4b
- SSDEEP 768:5acyHAUOUcZl1Oonm+RP6c/Un0wAVJIXef6aUSJCzvMv79s/7oiO711a5Kcc4uhx:T8Uz/hBvY6DWs79s/7oiO711a5Kcc4Ux
- TLSH
  T19DB2617EBED1227A499BD76464DB0543E963A446213308C4B77CA4EC6B2422C79FCB3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  Release/Scripts/shadow_lighting_fast.txt
- Size 37KB
- SHA256 6f51f36745ce9512ac622039cfe8ebc33ff0db91afcfe14703e86a3f16a2914b
- MD5 44562ee031593173f2be9220ad1a425b
- SHA1 81951ac6ff38825978ef478b7e51185bf5190916
- SHA512 c6b1a0006d9da39895014cd9200ce6470945622005cf0f79ebb7f7d1653d4a1970ceb586f2a34156111eba13c25a49c43ab37b336a30ca8146e0129ede5a74b6
- SSDEEP 768:Z67njq+WLWLFSYWLWXx1WWLWLfvQWLWboXuNptJ3tExJ3Ve+V2PN4XAA2xhZdKsV:Z6wYDxh
- TLSH
  T1A703210FF7550666448AEEB75AB40E43744337D3B32B19C5BAF9880CA13568DB484B9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25
- Target
  Release/Scripts/zeep299admin.lua
- Size 31KB
- SHA256 f239c5d0781d84a8cf3fd0af48c4791da72197cef9cbf2e54319f8df18e6e79f
- MD5 19905e4d2f56f39e2086c81b6cfca63b
- SHA1 1cbcb6480a2bd3d0b99a1111c651e4cb4db841c7
- SHA512 088d17a3052e282dc6bba776291aade0919b8cae92f65bf105cad2aebaf77c9357262967ff152a17f2a052258d45eb051b22005df8b4cbe9af723f2fe81e5662
- SSDEEP 768:owv2E3DLZ/iOO0/tv/PE3SG5P3JVdLJlqV3LQpSuepmFve17Ww7spJ:kE33Z/V/h3Q27e
- TLSH
  T140E2625A3FC243606DF92BD6D91BAC40FB72849D326693A4F4BC618F321D5BD88F0958
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  Release/Scripts/zenatic_sword.txt
- Size 121KB
- SHA256 952c3357cbd5143d3b78b3e229d1c05330fa83600adeb66d970f74571993b041
- MD5 cbe2d43ddacaaa87854175f78e622697
- SHA1 2b8fcc9c94744bfdf3e46a933982d6b09d5cc7f0
- SHA512 ded138a76c68ae3a919ea5e8683b98dd9e8f7b9ce111a3990191cc95568d6c721a11db62d6b0df37a43ebdc7f1cfad9f59f10e408424e50415fb8edcc817d7a9
- SSDEEP 3072:4yh5X1/fGuRh5T51pRmmbUD26mmGtnWTmYEbnmL8rrY8EvUi00woqqDJY8EvUf1i:4yh5X1/fGuRh5T51XdmGtnWTmYPV00wL
- TLSH
  T17BC3FB5E7B8511F65995E36C28321803FAF5A516373B08CBF6FC1498361D62CB19CACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27
- Target
  Release/bin/Cloudy.dll
- Size 922KB
- SHA256 5e43f18478edade4cd1d87c53c276977c0e5a87113455cb3d4f5a839bff181b4
- MD5 a6fe4c22e85f1bfb5fd6faba72a8c2bf
- SHA1 c71d97c6a61192c4047f290af56f23b8c70b904c
- SHA512 e4160606df96e989a414577b3716a829c2f8aade7b8a22a12227c01fd557a2227507ad6aae4579936790a877b68b78a948aa9466ce521d7f21071b49cbcd3339
- SSDEEP 12288:rFLDyogtrTu8S/tDy6G3u/9TaW68O9UmfqY0DdVKl5:rDgtPU9/k4/tmfIDdVKl
- TLSH
  T18C157C2A6A5800E5D1AAE2B8CB878913F7B2B8014324E7EB13E055657F577E64F3F710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  Release/bin/libcrypto-3-x64.dll
- Size 4.5MB
- SHA256 81a5fe6cd0ef5b083e5c4bdb6a40a30bfb1b0de15a9dfad459de2d6a36d94f86
- MD5 be0f6d1d60e149cedaca33a04963e05f
- SHA1 b686e1ed9ae47b8ae803a5d9e912b0e631bc4217
- SHA512 7b39dd8c70286ec4fe61cb2c3c12062f2dcbdda607c2f14c4f983741026f6aa62b60f9e983204949395cc54b5ebf6426c0f8300e0e385c35c1f2f3847160d7ff
- SSDEEP 98304:5l+f+Kv6t8y37re39P6k1CPwDvt3uFGCC:/Cyt8yLre39yk1CPwDvt3uFGCC
- TLSH
  T1A9268D69A5BC0056E86A81BCC3936227D371B51657F057CF2E688AF90F23FD522BB740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  Release/bin/libssl-3-x64.dll
- Size 802KB
- SHA256 159198cb8e740f9ad5918b51503121fd1b7e70460f6a4f6a6aa27576bbfa31c7
- MD5 733e3b58ee1760a442fec4712848c3ad
- SHA1 529206caad19cce2424323bc29a9fb9a4bbd3e76
- SHA512 10835ff09e35d8acb2739707219905b3ae2870af973d8f80040baeb732eb798fa93ef1bc599ad9898aff8e20ee21aa1f5e5e07340eda205aa938fc001cd83a88
- SSDEEP 12288:uDYDcpeu9jFBOBJfbudc68KqLie1+jKMwmUxlcdEVB3ks:usM9jFr8OeW5wmNdEVB3k
- TLSH
  T130053B69BBB8049CD876C13986934213E6F6B4563370EBDB0B688A790F677D4273E344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  Release/bin/xxhash.dll
- Size 46KB
- SHA256 aff59e91d222b75b3e3ac789baba9e24eff99796261ae5e887ef9e3c28bb3d64
- MD5 70c514826d9428f184d27f0c8f397404
- SHA1 e6b0b1a396de9913004d9bcaa230972686416bb6
- SHA512 168c63cbb54865ca42a884fd974291bcadd9dd8cf8bc1980148214e84498af42a590cb3d3a394765ee0b7d2e337fab6e85ff4f85d9ced97b92b540152202a0a6
- SSDEEP 768:tziPp7yW4k3QDn24NuDUSu0MKQVMNKuxYAuogba4Mk3Q18swN1WQ8hi6U:tziR74kgDn2rDRuIrN5mAvgbTg18DN1z
- TLSH
  T169233A47ECC98ACDE927DB7CC77B49CBE5D9362827114AE3C6E614A110A37C06737682
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  Release/bin/zstd.dll
- Size 638KB
- SHA256 1374391dafd6262795243a58f9fb234be859d940683fe756c64692ca807f0478
- MD5 5b96fb0d4e6453680da278f5b7e51a29
- SHA1 3c96a29248fa3644de2c653a5d97c1e21b13a769
- SHA512 27d06b7182aa48a81cce18f8f7b1bee054f3a862ccebd77d273a67c6a15e5d0ef5ba8fd7430976f445eb8bff51d290f2bb50061ac7ef448255ba8a18b8baf193
- SSDEEP 6144:fbauYl+rrR8uT4uB5uWYfO16oMynnjDHMkYHbpk5tRCEybNFZemMBLx4uQ16aSG:fbauYGT5BYMxjDHMk0petRCEyb9emHO
- TLSH
  T13FD49E83F69542EDC07BC079C6564327EBB238061314AAEB83A4DF652F17EE55B38391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32