0c12431a9008fe89211095f66e95ea20e8cd55c6c51611108f26ab48094dc652

Sharing

Copy URL Twitter E-mail

General

Target
Cracked.zip
Size 131.9MB
Sample260701-wfeylsbv7l
SHA256 0c12431a9008fe89211095f66e95ea20e8cd55c6c51611108f26ab48094dc652
MD5 90eba355f68fa1264ea04c1f6ac19119
SHA1 ebcf32733073664597c2ad09a92ecc8ff531d463
SHA512 cbed7ad21595eeeb40453deea3ef9da3e6ac58744cb3e0e6443130ac12b3cb17a43f4f47cae8c6a5e146c6fcf27bda8f82fd969be571462c936db4047614a39a
SSDEEP 1572864:AvYmv/l0N11cXSWsO8zqjR/hXLUi9uk1BjimXwc5VV5rqwn73VEGuzGKpxZZ5KD4:Av13eN6rJjTsc5V3qwnDt8px7Rn/
TLSH
T19868331B15B0FD47C4943DF41D939F5022803639EA1BD9A2FF682F96A76E0D17833A68
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Cracked.zip
- Size 131.9MB
- SHA256 0c12431a9008fe89211095f66e95ea20e8cd55c6c51611108f26ab48094dc652
- MD5 90eba355f68fa1264ea04c1f6ac19119
- SHA1 ebcf32733073664597c2ad09a92ecc8ff531d463
- SHA512 cbed7ad21595eeeb40453deea3ef9da3e6ac58744cb3e0e6443130ac12b3cb17a43f4f47cae8c6a5e146c6fcf27bda8f82fd969be571462c936db4047614a39a
- SSDEEP 1572864:AvYmv/l0N11cXSWsO8zqjR/hXLUi9uk1BjimXwc5VV5rqwn73VEGuzGKpxZZ5KD4:Av13eN6rJjTsc5V3qwnDt8px7Rn/
- TLSH
  T19868331B15B0FD47C4943DF41D939F5022803639EA1BD9A2FF682F96A76E0D17833A68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Cracked/.env
- Size 185B
- SHA256 a354605b6e9b70264d796ad183eccaefa38f9509c752e426509238a8f3e22a28
- MD5 8ee9960d77fdcd7d1768878fa0db43e8
- SHA1 6facc39bc3942c213b4f8a90df3804e017841e76
- SHA512 84f3aede0dc33b05246794ffa86d7548d748bf85b22c0026011420435be09481b912d8d7b966a98ffe44b4a12ce8030a2f517e903aa13126cc7ea806a27e3e58
- TLSH
  T1B2C02282226C28182888CAF2E0C829514632AA08FC233303880A80E8349381383A8180
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral2
- Target
  Cracked/.github/workflows/codeql.yml
- Size 4KB
- SHA256 5991dac60b069d4890570c15c8d9f676709950e7ea2645e70bf1f26af946f1f3
- MD5 6e2c3c88f4efe9c114914d1c8eea93f6
- SHA1 2a0f8b1df12cff8017844ef47d5af713f74751b6
- SHA512 228ea11aa7613197c6f85e2c23a31a89b3e45c05c2339f7f2fd20f035771b183eadae29293f176c948195b3ce68bd538a989ff155b1dd7710bef359d4aabed44
- SSDEEP 96:9rIyhyK9/lSksak8lN83B5iZF7g+A50GH5y:lIyX9wMk8lNuBY77VAVZy
- TLSH
  T187917552E20119BCA1408446B2E9BFF1C32AF56B95C4AD5CBB8C83084FA72B551B65F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3
- Target
  Cracked/.gitignore
- Size 18B
- SHA256 5f56c9f3ba8653792c08845e499ed9a9d4b9f9b2ebfe8e564afdabe054271a1c
- MD5 5a30b598c48810c283a74224b9bc1161
- SHA1 faaa0d6c1fabcb53d1e6c8948332c41596ff334b
- SHA512 3f965d6672b55d08a92ed5d202a580e30431e0236aa45ef6fcb763ff486f9175cef77fc955c7b8506ad3d85bccb1b565e11d756c528830c8188435e73d329d3c
- MD5 SHA1 SHA512
Score

3^/10
behavioral4
- Target
  Cracked/LICENSE
- Size 33KB
- SHA256 8486a10c4393cee1c25392769ddd3b2d6c242d6ec7928e1414efff7dfb2f07ef
- MD5 4ae09d45eac4aa08d013b5f2e01c67f6
- SHA1 a2f9ffbf32eeb6284afa81bc4fb4c27b80d044e9
- SHA512 5c4c4e351be428767a0f30cde8bf2687bc31580c408c4b8c6e3a6cf9e4fa0412aabb9037f216e46ad93b85481941dcabe726c1da3714ab5a737be71b12d2ff2d
- SSDEEP 384:UuvgUu2qVTfofITuM2Vs6aHGUa1lufWkGVBmnLRfCiR1XAnLuaa9f/d5zgUaGhqW:Uqk3LTB2VsrHG/OfvMmnBCtLmJYR7a
- TLSH
  T148F2755FB74413B2028206616A8B68DEE31ED03A776640A5785DC15C27B3E3583BFBED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5
- Target
  Cracked/README.md
- Size 9KB
- SHA256 d2a90a3e00ab6891864e2b46b8ecce1d74b6b4608e2130b33e5deb042c21e0d8
- MD5 028de7fda17e45458be4a550a57a1d30
- SHA1 118eb223a15014e3f7079cd6315a23c2b2309315
- SHA512 18cc05b80efe2ca071a3ecce2aa0b71d662210322e6b524cac7c1b891d1faf43434710f3551a8c3435cde08a9b0fdd0804e584e0de18a4e2caa41e13f6ebf72d
- SSDEEP 96:l8kxn76MMlnB/R8assEvSB/Ks+eBm2XckAbAj3Dr531O5YLaEK/ib7JRwFXFGpGA:ek1+T8NsEqxKTHVLorh1OCOaffGI6q
- TLSH
  T1EC1296EB1E943BF62DB5C143B68835D6EF02434D26166C1574BD80AC3709B64CA7EA8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral6
- Target
  Cracked/RickRoll.mp4
- Size 19.9MB
- SHA256 9eb2a220bccec4bf7ab14e3c9de29002ed4c6cd3a46ee6d6f6877fcf389a1981
- MD5 12b63627a71feaaa302596c4c0bb9faa
- SHA1 abfbb76abfbfd03f6745e816d650f660868f7d51
- SHA512 ffd6745337d7833de7f1d9bae2d46c16fb176e87a02fb2bb7a9032ae3423f5b571c0fb11d41a33cd09010b83d70704ea37a8b75be87939a49365fa74df2a208f
- SSDEEP 393216:iZv6FjBX7NWyL6XTclB6TEda6FW5TDn2/1FsoFMNQjYLv4uY60VBHE4tM9:3FjBoEETclgAdaWWpLY1fM6mYbfXtM9
- TLSH
  T187273386B3E5708FC099873DC6D70B6272B1D5794B5343CBE6A0BB3C269A3781D662C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Cracked/build/main/localpycs/pyimod01_archive.pyc
- Size 3KB
- SHA256 cc79060d491c730e14e66c2ced4cac24b827403cf51a4d2a8fe75b240a94f9bd
- MD5 096082189a334cecbe97d1691e7fdeab
- SHA1 e84c498fe3f22890310aacfaeb99b2e2eacc25ea
- SHA512 a8d8e6264b52b8e2c6129c62372f1e3d90e563a7a4bd247fb0d531176a9154a39f871a6e1ecea3af44726f68a678667b8d8a0cff5ad227f972e0c9bb186dd0bd
- TLSH
  T1EB51B7B4A99259BBFCF4F0BE9427022547BE946F9E124282382E574E2F482D19DB13D1
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral8
- Target
  Cracked/build/main/localpycs/pyimod02_importers.pyc
- Size 22KB
- SHA256 32183112b39d5454332ca5fb6730a403344a274ff3ea56096e01c6152f034cec
- MD5 5901e67b46f83f73d981d28b28fbf3af
- SHA1 c32bdde97048348539b5b3a9335537f79233004d
- SHA512 18508b36ae8df32775557d2bb97273ea423ac062e58b8010b9072287d0c7dfb6661294dac001ae17d451538253e0d93758cc6e898d936020adaf376943dfd55b
- SSDEEP 384:jUgcROgpYKW5RAMMd5Nwc8oG9syRjKC2TSHF8A2n5WV94TjCJlQ50953BMnFw5Es:jNcRhpTNHykC2WCGlQ5m3BM0Vt
- TLSH
  T1A9A219D312842937FEE9F3B399460AA4133BC1BB83194152746DC27D2F561A09AFBBD0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral9
- Target
  Cracked/build/main/localpycs/pyimod03_ctypes.pyc
- Size 3KB
- SHA256 47141f13ee9fc687ad7e550bfea54163189e6506a50679518e0d6ff18786149d
- MD5 785b91d3af2291069ae7969e1bc3192f
- SHA1 c85550dc03764b1bdc356232187f226c0e937c52
- SHA512 4d3b4ce3c267342277dd1c98b6c1de852fbd88696ebfa2371498bf17e7183619942d728f62bc49cbdefbf183b17861063dcee1d21e55f9af1d0baa0b77884aac
- TLSH
  T1B17196D10A01BD3AFDB9F7FE961B46E914D2E267050C51232BD7D9F50F8368918E410D
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10
- Target
  Cracked/build/main/localpycs/pyimod04_pywin32.pyc
- Size 1KB
- SHA256 cb15b49d2c6eb7fa3ec4d293aa9923253dda56ed5144af1c8ca5fb0ef360f8df
- MD5 ef88a750acc2bdb78d75ca3dcea93049
- SHA1 b73ac542d81b979641ef4d002990b39a4d80339f
- SHA512 8f7f9dc50edc2df4808a69dd65446f2a8da7c291f3b13263caa7d3a0f7564a62b5ea3475a0437e112ab3ce80d789c2a4fbea47436143edcdb020e2ad3a8873b3
- TLSH
  T16C1121D58D25D635F86EFBF5601F43515512F5FE06A90F00198AF9B72C427B01AA0C19
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral11
- Target
  Cracked/build/main/localpycs/struct.pyc
- Size 287B
- SHA256 cfd45f6a7ebce7504da92723b030aa7f63481addabaee6a2b0208dedd5cc9848
- MD5 c3083d539efc7cf9524676048a29f56b
- SHA1 e6070583f79bd2a805f211214d1e4153edb75e5c
- SHA512 23f1152a130ee78ad1517d5d89009cbb1985509be5b27cbb88325384410199370343f88160c9a8acd37da0b85de4b1a0008632bd66377beb39410cfdfa2cf38e
- TLSH
  T1B3D0A7E25852C8DFF0B192B6C2A65270A1EE6F7097AD48235E5A102B6A1F7E004B0196
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral12
- Target
  Cracked/build/main/main.pkg
- Size 50.5MB
- SHA256 44d42901ec5b458f519f738db0b7338c2920b0f0590f38c7d7bfbf5d5840e547
- MD5 28e388cd092dd76323131563d2764b68
- SHA1 74bd3c5b2d6d16017518c99bd12ff732dc6a2a98
- SHA512 f434f61a05c2c94e8d57cb0e30ca0f2db693314c001bd50fd3c68d78094e0d3081a367bbdf11d08c225cb9d41e39383500a1a27ac92afba0923b4a4fcc2dcf77
- SSDEEP 786432:x5vzInNnSENKnjMYFDmWKU09fj1KBW8D6hn6LLsKMMo5ovsVuR2Ck41oOd9169Vo:x9z2nvK9FyWC9rSWg6noeO2Cke52Vw
- TLSH
  T1D8C733382244598FE1D4BD76A9D6F7302287BD227B729087479A3671049F98B6FB3F10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13
- Target
  Cracked/build/main/xref-main.html
- Size 3.2MB
- SHA256 8d2ea5ba2631bf65172cf35bf7ce9dca51ff54fbce60e1a36dd9a2ce2495d086
- MD5 49e967e64fb0577123165f3d6d7c27ea
- SHA1 88d22101737311dc2e9d9d931c1f5bc8e775fc8f
- SHA512 2285a722d754ffc7c57768ecd123fc8b3f0aa86738cac3372789b18546e7f2ecdb84357b9e5761eb090dd195d0d29314a821dd704b0128fc9ba21c0aa2af064a
- SSDEEP 6144:Cpp8Gwmo8A/mw8vf67qDQ6HZzn5pxH1vbFF95xmlNF1d9wxOf6bzU2NOldUq3jdt:Kpn66dNCpIp3pCvshFSU8p
- TLSH
  T17DF56943FDF8680B0361828696F2E72957B360C9B3057D1938681B6FD9EDF435823B96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral14
- Target
  Cracked/commands/__init__.py
- Size 19B
- SHA256 c25fc38b1243382ade04740a11e49e168f1e78707cb9ad483b0d9e3c6578c7e2
- MD5 7b657aa6ff87ceda87ee55e4a564753f
- SHA1 801bc0ecd2b29e7b13f0433e4ec5b55654d3f7c0
- SHA512 13ccd911eff9138f945520fe07bf3cb6ee57e8ea8cd875a9523b265e14e342ade8b0a13501aed4ac771d7c5a970b3f36c208b55f062d2e77bd1a85eb6bc6cda2
- MD5 SHA1 SHA512
Score

3^/10
behavioral15
- Target
  Cracked/commands/__pycache__/__init__.cpython-310.pyc
- Size 167B
- SHA256 0ff7bd36d78111fa6adb607e5123520581bc064c79cd0b3510aa0e53f185687a
- MD5 b89c37f142dd49648ff03c9b8f08c24a
- SHA1 4ae4aa98ecdc8fdc9c35809caa3b1e50fa803c60
- SHA512 0282bc94b22238d854298a310834f12b1775a90ed0d71b4e39314529646c9df64e31a58288118df73d68921e3d876e2d52788d64dcccdfc050ea10d64ba0d0d4
- TLSH
  T10CC02BC18B12C047D83EB57760309F3650D5CF4711CB13430C28125E4C6BF104C52100
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral16
- Target
  Cracked/commands/audio.py
- Size 9KB
- SHA256 ef803fa82e92def1d86d9125524835a8769cbe3603be72ce2164514bd91750ee
- MD5 3fa0d336702bd07c9c1ff72f80b2e12b
- SHA1 97509e2cc7c36d6a6392d3d1fe83c05e09558ca2
- SHA512 05cba82c92807a8ff7819d81baf636fe4edae46d8f2b450751f5e1ed2db60ac7f15ba4b5168f1745d02a3f152d7f34e56369426199f364e3add425ddc658363f
- SSDEEP 192:+6gZZlKAgw7++8gJe5fOkh+i9FMFuexezG8G/:+66KhYUh+RZxedA
- TLSH
  T13A1240799A3A1862F393D49E59A2A043275D7A137908787939ECF1A01FDC027C971FF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17
- Target
  Cracked/commands/files.py
- Size 7KB
- SHA256 fbe15cb95d81282d01d419f29b703d264f2016b2d4385d0241de811635477785
- MD5 68a6f131fff0f15406860177e0d75222
- SHA1 f1f91037110da28eb6b36a4d0f90c2505b20cddc
- SHA512 bbe0e4772eb88e1dcd182e4c7d61c7cff7fb1eabf27b3b76ed0fcae32fd4e93af33df86e00d937e682a570bb3f25317353e139445e5b931e0e0e8be8206818eb
- SSDEEP 96:+l6sOk4AShn6AmBVXWn6nyDGiAbBan/QhmTmAwB2nz0QC6CLTT/HM2Xd:+RZfvOoh/xHTT/HMmd
- TLSH
  T175F130128D7E183583CBE1A6293668870A54695F1E053C757BCCD9602F5C03A9BF2BFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral18
- Target
  Cracked/commands/grabber.py
- Size 10KB
- SHA256 9c412ccd97fd6e44b5d2ad6daf5e30c4c64fd07e0640462cba80477d3fab8caf
- MD5 922d2fc2eb7d08435284879c336712f3
- SHA1 6b1dfc002a4510fa9b068036365d1aaee22c182a
- SHA512 e1649a38cf7a79a4d501845871b4e0afa36355823a906fbbb8c53bc4738424117fad9d629f097041e1eb6594c991667ac9c44ee6abb143d19c0d224179449023
- SSDEEP 192:++N9JemlFkMyGYWjmuZwXR1RPQWHBeAQJewxIE:+ikMyGYWjBSXR1RPQtfMy
- TLSH
  T1BB227423D8866411B24BD46C5C97F8077A367857691C32227EEC76CC3F8D41672A2EED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19
- Target
  Cracked/commands/keylogger.py
- Size 5KB
- SHA256 c19dfc914727f6dd2cc6cd5d819d4d94f86fab11939cc24ee649acd63cf4edd6
- MD5 59fb2a33622030977ec9aedee5970d6a
- SHA1 562cc4a0db1793f16f42a8fbaa0cc027e7e8dea2
- SHA512 aedbbb03e210741749fb75321fa69386e4c18e4206cff165e630877fc4a88c45e9e02d1322d7872e2fef7474f61891b58a107e423a5fdad21530e3af93491a8a
- SSDEEP 48:+1oI0aFNiD56pp8nwMxg78e9htHUYr/SaWW1nGvkQ9+g9fenwRojRN+tGsnOaE+T:+2I0aT488IfUrWMvkVKekQHsnQpzUbFp
- TLSH
  T1EAC1DE7E86FF4C21BDAAC42E2D9153E22448FAD7784420E934ECB22C5FCC95981E15BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral20
- Target
  Cracked/commands/sabotage.py
- Size 8KB
- SHA256 b1327fb2ea20cf780d2ba7fe09aca9ebbcc21bac8ae787dbcd11254c06db106a
- MD5 3a7a1cdc4fe761d62edba2fdc0785450
- SHA1 f11f736ae5d4995c8e583f7d510de0990656ccea
- SHA512 90f369f6f77b3bed159c0c64c54663c9c6845597ae0460708856407734717dc1c6aad6d648bdab5aed74592e1c8ee84404a416b03e0eb5d109f2139ac8adf857
- SSDEEP 96:+tBkh2ce/ZDAh5KilOxt98ip7GDeLLRquAc+a9:+chc1AhZlOxvFL0uAFa9
- TLSH
  T18E022371453F48717693D4AE49A36267022C7523361825EB797CF1582FCCA328F62EBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21
- Target
  Cracked/commands/system.py
- Size 11KB
- SHA256 389a7996fd61499d832c07fe2a8c6709cf10b5bc9bf8959c6cb9f2e70850fb01
- MD5 c949e07ed1803c756080f04bb6d32fe0
- SHA1 e581f8b13d0a4a8e057a4adcc4a1ab94c388b4f0
- SHA512 cff741c4e632e964382ff530b3a4f47c0ae7a69ee11ceae7a98ccb91d0028294067710379e9dc6e875f3efc5f4aa369bb7f0cfe688a7ccbaf8a24fa9d5a05085
- SSDEEP 192:+GganS5HTY5B8WVuDwVwzc9pzcie8Z2Pf2eoM:+GaTVWewVwz0pzI2eoM
- TLSH
  T1133260968D7E1932D39384AA2477B1035194B60F5718343BBAEEE6202F4D031D673BEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral22
- Target
  Cracked/config.py
- Size 2KB
- SHA256 a6e534d03d776d02d1df9c3fccb91ed4d922ab08dea51ad540475947695fd3f7
- MD5 84d7030a94dcac3728008b91da4a1431
- SHA1 51f4a2fd13c6c53d456e18853e29dcb18c366da3
- SHA512 5e5b485d60af5792d145c3f62829e6899ad58daa4d0673d4a02c56f7c59adcf1416e836abfe1f71be4fad3bb26fb0870a4e931bd17dceffa4ada95f6de53f4ed
- TLSH
  T17C41013306343C443615C08CA38BB1025732B5633F0594566C2831689BEDE2796EABF9
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral23
- Target
  Cracked/dist/main.exe
- Size 50.9MB
- SHA256 1df07973b958e368091a16fc94f615a81180b1443cb4b0e5f25ebded4bd96a55
- MD5 4491522c670147f76007bfc2f4a0ceef
- SHA1 8d2e1f353f01dba275c616bfd52883a9d29273aa
- SHA512 88ac7547fdcd0b569f41b0bd722b324e4bc8a87804ea57a82c601956b1e3281f6a05039aa1e3c282dde2477dcb892707df52f6d474a11a49d41c19b041b64373
- SSDEEP 786432:P5vzInNnSENKnjMYFDmWKU09fj1KBW8D6hn6LLsKMMo5ovsVuR2Ck41oOd9169Vo:P9z2nvK9FyWC9rSWg6noeO2Cke52Vw
- TLSH
  T12AC733243240D99AE0947DF5D996E6F06286BC12F762808707B5FE21387B587EE72F1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence privilege_escalation
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral24
- Target
  Cracked/icon.ico
- Size 146KB
- SHA256 cd885ef625ecad92ff8adca7c9273517f8d36b8387bf61f9ac672deb92c423a8
- MD5 a0a44e175da335b76b3c70f58dc88ece
- SHA1 dc036b97da2a657a230f1e7c5f4cfa1505378440
- SHA512 49957a17604315c014389e9b3841a01ebfcc3b9d9e007994648d10965f800c0cd9d2b250ac472aeb21bad1ec801d7bb786d2691b8477d73ceffd3d7737d99395
- SSDEEP 1536:lS8Sf516erS13RzhbKkgoKDO+PK/5rwmERBio0p6mSfRX88RkaWKXhqQzf:Up76/hYnodPEuUZPJf
- TLSH
  T12BE382A0B084D096E66933FAD1705BF9544E4F6FE4A8619B1978FE4476B27C3CC28C1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25
- Target
  Cracked/libopus.dll
- Size 431KB
- SHA256 c84da836e8d92421ac305842cfe5a724898ed09d340d46b129e210bdc9448131
- MD5 0e078e75ab375a38f99245b3fefa384a
- SHA1 b4c2fda3d4d72c3e3294beb8aa164887637ca22a
- SHA512 fa838dab0a8a07ee7c370dd617073a5f795838c3518a6f79ee17d5ebc48b78cebd680e9c8cbe54f912ceb0ae6112147fb40182bcfdcc194b73aa6bab21427bfd
- SSDEEP 6144:QzvQP4JEH+xiPuym+Sl1AhOtw6qIUZtvJd3dbK2lbO2miHWQAD03N3hg9/To88jC:Q6Ho+8p0IU3BW2s2miwmOLozjJ
- TLSH
  T1EF948D45F2AA58E8D17B807881972A57FA74384A03148AFB1BD4DA713F77FD0963E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  Cracked/logo.png
- Size 45KB
- SHA256 609c9e47041c5b932f427a777a3a62537fb722ebb0a54d30598c13c09876b719
- MD5 e6696e289854c282504c2075093d3436
- SHA1 2119d5fd90c471c4ff43d6bc35c6690128365a30
- SHA512 b2b1971c2a20c079a15f61711fa9ab9d1d06a2103ec395dd782f86f0342d067365541752bf9267dfbdda8e5d2e24f1674404740b1d6a30e49a62605253314484
- SSDEEP 768:vTCHuLYq4mhJerDlcygXcd817FMJnKHybPNdy4bkRHcbfLp714ByGGO7WvYy:vTCOkKJ6RgX2M7FAKHybldy4Hbf17a9y
- TLSH
  T12323F2392ABEB471D4CBE2079758408295B543236CF76CF5CA98949ACAC4BADF317343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  Cracked/main.py
- Size 2KB
- SHA256 2cdc506a11c33c46945d6a0cba0e99ea88783dcd25490b5e7c4cab42b358cc3f
- MD5 3f081ef3bbed374abd6578ca6318e8a3
- SHA1 f14715f00a4188c67bcaa356b152d4b51c78bfd9
- SHA512 e7a5462d31d6a99834b7427ae93b4c1a70fdb6488646d26f91f740a64a0dbebb22cdc3b13898b0814935aa7847326a1300e4c84aba68a8d021de4f16b61bca23
- TLSH
  T12751D0BE91BF1C117D6AE0CD5EF822901AD977CB7900106271ACF51C8BDC126C892D7C
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral28
- Target
  Cracked/main.spec
- Size 718B
- SHA256 d90c0b50e4bf49a8c53af6d6eaf61cb65a303707d9fdc322316110252fca5d39
- MD5 8be47b5f5ab293a035e35772c25075ce
- SHA1 13cb97e06e8f648e16f1dc02b4bbf8ec3e7a7037
- SHA512 9213b1912fff9bc41d6119e7eabb21a5d8a7989464e3b4138c36f14eaa60a6a3a26e8fd3afa048213592b2e9cc0fbbeaf97fa5f93a36b7d8ea33f3a5fed9f08b
- TLSH
  T15001F4435984498992758A0CD6278844E39E639F1C1334A7BAF9577A2F72941F09442D
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral29
- Target
  Cracked/requirements.txt
- Size 157B
- SHA256 4e010da72f1fe5be6ce71cee950f9284430f1c06c90abc3da9d601cfcd995290
- MD5 155807716d18d352479a60465cd27f43
- SHA1 ecbcd811078e5c68b34b36f78a116229af7c8f3b
- SHA512 a976d7e32de1f1d5b2487487091780a0edd3057367757593864dada5c041d606dae5e5a47f6fb5594551d64837affa59bed8452a70cfb841ed115a82ef817c52
- TLSH
  T144C02BC01B20D57753F2FA9A4CA1571945E9C1A320B232A0521B728C270EF83CC08DD1
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral30
- Target
  Cracked/system_utils.py
- Size 2KB
- SHA256 bed892bac50168a67da0823170444861ed6d84045bac7d1eaaa95848d538053c
- MD5 5f6115e06c6f7ee8964332b0c2c82af1
- SHA1 f2b16b55a36cb6d54c7318cc32f7e7000ab528a1
- SHA512 89c3651f53d349d95b2fcdf9434ca63208403340e55f4836584c4bdc10f9d0162930267186e8647d1f32db85242a8f09148dcbd20020b63a9293ce5c6cdb0c79
- TLSH
  T14741ED718D945B11B383D09E49578052669ABE937A02D430BFDCB2E42FCC27886F5ABD
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral31
- Target
  Cracked/utils.py
- Size 6KB
- SHA256 e95681a5bcc0c9b8f6f3dc5a4381a3410b4e164e6a9546fde1920574a95f6fc6
- MD5 4ebf31c0522b926dce96d787dc176936
- SHA1 095c68664d5c62be3cbd6c15264dd94d4ac89ff7
- SHA512 60ae106ae92d7591e73ec051b3c0b5b684af9687cc7a8a665c1469065aa7210f35914454825dd2d007af9ef7d1adfb171b5a4145cd24ad237a6779f9eb7b924a
- SSDEEP 96:NFQqvgO7hqAgDLcRnORv34Jt0bRbZ4fx1cG9Dnd5JOA0M+6sg:NVoO7hqAgD49vqRbwx1cG9Dd5oA0gsg
- TLSH
  T149D15371CDA11E21B3C3E06E9C719042621CBB57BA156431BACCB1902FDC139DAB2FB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Event Triggered Execution

T1546

Netsh Helper DLL

T1546.007

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Event Triggered Execution

T1546

Netsh Helper DLL

T1546.007

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Loads dropped DLL

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32