f448a82e444e1cc85467aa0eeb873035b794ea6db82fa0ed7a4389a3965e8337

Sharing

Copy URL Twitter E-mail

General

Target
Void-Tools-v2.0-main.zip
Size 1.1MB
Sample260702-2r4c8sf15s
SHA256 f448a82e444e1cc85467aa0eeb873035b794ea6db82fa0ed7a4389a3965e8337
MD5 0ac5668f0d1534e4795eca36ea902f95
SHA1 74658aa3076eac67437f3481b37883ce11478af9
SHA512 3d63fbd780b076f580dc5a4f39292e84dfd0f78abbea9881618f36dfeabc82acab1f9c92f0e1748e4a826008cec03c9a8075c101b1017cf1a8771305699ef4bc
SSDEEP 24576:UTRXkVFzSa1NJCOf8ERtr7qZccIxis8N1mrckp4f/fqjhct:xSa13Cg8kVcxb4ckOnfqjhct
TLSH
T11E35123EC751C962FD22E3BEE9A862EFE6D3BD101F405E0E2F699CE4115E1492B0464D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Void-Tools-v2.0-main/Void/lib/__init__.py
- Size 29B
- SHA256 e80446481bfce6e49f31ef91b1bbea1e73d4424a4b74a5cbfac6727186af3752
- MD5 4db7414afdd3a4074345d35240afe425
- SHA1 a2743ca61d60a8f526393a361bb3e2f1605b57fa
- SHA512 388509aa4b2315f2f28ece9daf3d719abefed27ce4965f797b0980c922dcc19585c509606e496bfb1ce8406f0cf9c66ff2dc2c9f94545594dbb72292bcca86f6
- MD5 SHA1 SHA512
Score

3^/10
behavioral1 behavioral2
- Target
  Void-Tools-v2.0-main/Void/lib/boot.py
- Size 8KB
- SHA256 cb354cae8b7f30d197d0675e2ef46cb4f0cf427363b958df3b40e95d7a24607c
- MD5 8411e091feaba1f52a82ea3662a8b6a1
- SHA1 959c735214b79c5664ced36b9c43d09f66cdb37e
- SHA512 5b7b5bf8202d35e312bc591d1cb2e3adb631ecca6bf24f9a5fbe1f97e5dbaac479aef53a1e98bccaf3e08d32979cd3691f8d763d947a0dd3324c9ebbba26462a
- SSDEEP 192:uag5bJgfSPpRgFn4aQVpAWSjRArz/WpvQDILw6OVwKazsvpAzUisdK0wbJ8wk:3SPMFfQVxSlaz/WpvQDILwfVwKazshAG
- TLSH
  T185029636A44027227247CD2D04B3EC1A171874E7F6652128F9DDB5E02FFE424CEA6AF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  Void-Tools-v2.0-main/Void/lib/config.py
- Size 2KB
- SHA256 2303af7760d63694066010ca8e5ea712ee56c34570549d72aa560683317ba6f9
- MD5 fccf13d6a049cf83835111380cd10fb4
- SHA1 8f3928d2210edd879ddfa472ad255dce65a0a298
- SHA512 486fcc1fb3b12f2dbaa6d5c46e59a2bcc5f1a64148c6566b684789f274a6951f201e06682d933c122a7c11d253d4e1ae3e78ce3610bc12610b866e656855d44e
- TLSH
  T17F411128F503CC13C28784B4847EA203AA497D4356197474BEBCC7543F99E6745F1AE9
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  Void-Tools-v2.0-main/Void/tools/void-selfbot/runtime/main.py
- Size 665KB
- SHA256 97be53916aca4b131a362604cc778909ee60ebae2ad504a74b1920691acb9548
- MD5 60420087d7132b51361d7a8ab85f7d90
- SHA1 541f6622646fb110e3bc73ad165e20ff2feb319d
- SHA512 28ebc09ba1092621c738218dbc6512e267757f7658348fc88ee840920a354ee1bdc3acd42b4260f0639673b24de74934dafced1ee87bd197343be6849250f41c
- SSDEEP 12288:Mf9p1qNwFf/zP0MSFr6iJSLCbz9l616Wpu:G9Vt/zP0MSFrZJSLCbz9l616Eu
- TLSH
  T15EE47239C4653832F582F85EA87E95022624750F794439677AECB0C81FCE53A95F3EB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  Void-Tools-v2.0-main/Void/tools/void-selfbot/runtime/setup_config.py
- Size 2KB
- SHA256 753855dbda1f097c6cbde20c83bc19c327562af1752a22ed7ad423c58f676208
- MD5 13c118ce02850e533b672c0c0c848d76
- SHA1 5833a37f678beb581bda33dc872d9096c7e81aa7
- SHA512 bfc092262cedb59d71e3c9f04b1d75b717983bf79105037b3f911e202ff23d17078ab9040975488bb7c948e501cdf847e35bf0f4a70300a7b0079ebe88e14541
- TLSH
  T148514F15C8146C70C3D78928CD16D0F5AA257FB31A2938647AEC82D84F784A792F3B1C
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  Void-Tools-v2.0-main/Void/tools/void-selfbot/runtime/void_cogs.py
- Size 5KB
- SHA256 84bddf270cfec20304aca6b273d21d5912ef894c58136f2b7e729d2dd5de3db6
- MD5 d4c6d0fa0df598ec27df1625b7c13a33
- SHA1 7b68124b1d9d583e9642a9c7b4f07e921c81a5dd
- SHA512 554251793670876b0c9052cc8d4f78b57c20b8c28afd8c301039ffc5ef9944bb1b2f84e647a4e112f6fb48b2650a921671c18bb6dd129954212482265c85ea0c
- SSDEEP 96:rVPIcWHpM+9Fk0vjy0P0zKaeCJHDra3+uYSZp26fFQW1hWCijF:5eS+9a0bjP0zKaeCl3y+TSv26OWfWF
- TLSH
  T1A9C1E025493B1D65C6DBECABAC3BB50B2228EA67141A7172F5FCB3502F181794042FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  Void-Tools-v2.0-main/Void/tools/void-selfbot/runtime/void_pages.py
- Size 12KB
- SHA256 315c481b14af73baab2fb10e38577f87257a64ad0c7f9df451bb6be582f69d64
- MD5 123d8b868b1b9cac1e316c7140b7bbd6
- SHA1 61b9270531a61a03d705b1fad077ed7064bbd59b
- SHA512 6561cca23a2c8d9834e69527a751210e86f5bbaa0484004f51abc49f2a283d28ef143110bcc7a4009d1408ee1b2e53ead98cfc1fc00c9860c3237099aeb764d5
- SSDEEP 192:fsTE98+P0nb70rbLp7F3t4jKrnGtt816caRtq2Quq7vIoJ:fabslJt4yXs91evl
- TLSH
  T16F423017E1341D6701A77826AD4F8902BD18949FCE807E047A1C80DD2FDCD9D69BAEBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  Void-Tools-v2.0-main/Void/tools/void-selfbot/runtime/void_ui.py
- Size 15KB
- SHA256 5dccc7ae0020dc83b7c7efeeec6dcd18eb2ab0638c7aa8de8a110cf62637d1fd
- MD5 1fea6092367f0468674ec043f1d63512
- SHA1 45fdfdf3a36c98ab731b6a1e82bc3b39307d7aa1
- SHA512 191c65326d3d7061396ed5228c91a5c411614de8692744983c68a7f64381561375ddc2464a5ddba4330f0cf8fee50d847186475de7c1b98b6bf5b67e30b10b57
- SSDEEP 384:f65xmAWEcL/Hnx00JVLY17nbeghWYcybdINBO2v15L0mM6835t:f65oAUL/Hnx00XLu7brlcybdcLA
- TLSH
  T13B621116C86858A3B2C3DC2DDD97405167386E432E89BC10B79DA2B83F4C53E91F5BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  Void-Tools-v2.0-main/Void/tools/website-admin-hunter/en.py
- Size 4KB
- SHA256 b76a7a94cc08f97337171c5ee10a2cbea507db0c2751d2fb4ebdc778b07b7e35
- MD5 d5167fb574b62397544184acde2eacc2
- SHA1 50ae15c7c508ffa08f085c3456a128cd32098357
- SHA512 60b14aa5bc3cab7a82cfecfa43f06b4b16dc074e8e59e4200a973e28567c7e6d12f3f4c16665f355a2bdfac3132ef4a78ffbe2ae66a2f9449fb36e4f61225170
- SSDEEP 96:kZb7U5v9x2PflVzDf+VmH9Z6Nmca3z/tpzgysFHEEyFOAOZGK/yV:kZb7U5vKrEkPFu5FHVIOAWyV
- TLSH
  T147A1FE3728513361A3AE4C9494B2FC2C677525D7CE765034F9ED82D06FA8C309D66AEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  Void-Tools-v2.0-main/Void/tools/website-admin-hunter/fr.py
- Size 4KB
- SHA256 22769c935e11531b6039c93faf0815ae985460adafda906260941bf157169d52
- MD5 743994d041b680872fa17f9b4d4088da
- SHA1 07fbea7f6f2a37f0d6038e94fa07001ce1650e12
- SHA512 42fec9caa4a1039be0722a6e0fc2d1bd45b4872f4997a44a86c19511bbe61ce1d39981ea6bf8adb52d6bb0872110150e468576e8ebe661b7ee5067f9be1749da
- SSDEEP 96:kZb7U5v9x2PflVzDf+VmH9Z6Nmca3z/tpzgysFHEEyFOVyOZGKIkV:kZb7U5vKrEkPFu5FHVIOVyRkV
- TLSH
  T13AA1DC3768513721A3AE4C9484B2FC2C677525D7CA765034F9ED82D06FA8C309D66AEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  Void-Tools-v2.0-main/Void/tools/website-basic-auth-bf/en.py
- Size 5KB
- SHA256 f6a7e69fc4be42ca44bc83c99c05cd5cf7adf752ec7bc2346a541c54423f89ad
- MD5 e45e4be867cec2897c01545df3396bd3
- SHA1 af4925521bcfce6799204bbae13ff08202901041
- SHA512 a969938e5347dee8e1f4502c198d4fe06b6e951bad3e3c66d62ebe20416ff72e16211efd57d201aafac4f446234056be2aec402063128f1fc165784b4a7cbe3d
- SSDEEP 96:kmbwU5v9x2PflVzDf+VmH9Z6bRca3z/tpzgy+eXZAAOcOi7T4g3BPGKXWb7oJV:kmbwU5vKrEFPFuBeXZdOcVgg3hWb7oJV
- TLSH
  T195C10E325850332193AE4D9894B3F82C6765B5C7C9B5A128F9FCC2D46FA9C318E256EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  Void-Tools-v2.0-main/Void/tools/website-basic-auth-bf/fr.py
- Size 5KB
- SHA256 cf21a3345096083cc4c46210a0e9e67c7b8f3b6cf13f097a5b5559a09f8f263c
- MD5 d80b7e92a9b82762cab604f19a64864c
- SHA1 62cad49c9b7235bb3f61feb2ad65e1e070f9a54f
- SHA512 1262d6d1e37b585ea3c5679ebb6bd109ebc94825b5ee5ce2a94f0befc2f04d131b1f706829b134ed4880b7c1946bbdb2e99e674192f231142bf847510c3b013d
- SSDEEP 96:kmbwU5v9x2PflVzDf+VmH9Z6bRca3z/tpzgy+eXZAAO8uO1h4g3kJGKWWvLCWPGy:kmbwU5vKrEFPFuBeXZdO8uCig39WvLCo
- TLSH
  T19CC11F365850332293AE4D9895B3FC2D6760A6C7C975A524F9ECC2D46FA8C308925AFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  Void-Tools-v2.0-main/Void/tools/website-cloner/en.py
- Size 4KB
- SHA256 6393961d36de2f962addb2ea0deba5041417c72f12e1414648e5e7eee1f0e420
- MD5 0f9e605b876bef3132f5f6ac6dd68748
- SHA1 97b768b5b4b0d5f32daaad4eb60d6c29a31b37db
- SHA512 16964e4abbba9e6537ecd074fc77843c88fbd96bc749483f356aec7c0d083ddb05e07e5399948185e82b4c8fe3380d58bbac31211b3543e525403e91b37edefb
- SSDEEP 96:k5bx5v9x2PflVzDf+VmH9ZySAca3z/tnzgynjFOOovmzz/0XWPx7oDFT:k5bx5vKr01PFMuF1JzSWJ7oDFT
- TLSH
  T1D2A1BB325850333093AE4C14A8F3FC2C6B6129D3CA726024F9ED82D46FA5C318D65AFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  Void-Tools-v2.0-main/Void/tools/website-cloner/fr.py
- Size 4KB
- SHA256 629c1f52b5bee7b589c012d52417bd0510bd7ada28ad15072aece4808cbfed08
- MD5 1019cf1a9a9a471e137451ff870580d8
- SHA1 7dce18777a1a32f85160dd3ffc6f82fc7dbe6557
- SHA512 9e47385c187167864307dc5d07b790c9a9326dab718ff584a9bdab763735085cdd007dd75852e49be2dfb623bc91b6859a7c2c949fc4eb0f10f0cf6d76ef276e
- SSDEEP 96:k5bx5v9x2PflVzDf+VmH9ZySAca3z/tnzgynjRyOOovmzz/0XWP77oC5T:k5bx5vKr01PFMuRy1JzSWz7oC5T
- TLSH
  T1EFA1CC325450333093AE4C15A8F3FC2C6B6169D3CA72A024F9ED82D46FA5D718D65AFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral27 behavioral28
- Target
  Void-Tools-v2.0-main/Void/tools/website-dir-buster/en.py
- Size 4KB
- SHA256 aa78ba23e88f20665b29a6b950ce08bfbfb6b05e972425e07dc4c334400f6f9c
- MD5 80edbd17f80dd896235a896bcbbe9463
- SHA1 af3da55607c70e33378a2872e900088a7da5a0a9
- SHA512 9c50198d7f78f1ef0c9655f5f8314cfeceece32837b4a24f0d4479eab99bbe46c7fbe3432fe1b9400e9035ec9653258f7a0e04d78b1898e50d1449b059d3049c
- SSDEEP 96:kZb7U5v9x2PflVzDf+VmH9Z62fca3z/tpzgye/42FO5OZGK+m2V:kZb7U5vKrE2PFu9wEO5c2V
- TLSH
  T18BA1FF3724513321936D4C5894B2FC2C577525D7CA36A028F9ED92D06FA9C308D66BFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  Void-Tools-v2.0-main/Void/tools/website-dir-buster/fr.py
- Size 4KB
- SHA256 da1d0f73e1ca33bf5863fb83293f9851f4342b0073b307bc2ecfc907e988d21d
- MD5 0b70dcba2dd686158d9b2252eb066787
- SHA1 89dc5dd3064a611ffe73015afbf384c9bc042b86
- SHA512 b8638092313a99ca0d868061ec28b0daa35ded56a08b36f4289975ccf879e7c97f778e09724a2e365508ffcfae35bb1eda96f65a79032a17cb3ca6b1c78f6792
- SSDEEP 96:kZb7U5v9x2PflVzDf+VmH9Z62fca3z/tpzgye/42FO2yOZGKVm6V:kZb7U5vKrE2PFu9wEO2yB6V
- TLSH
  T163A1DD3264513321936D4C4894B2FC2C677525DBCA76A024F9ED92D06FA8C308D66BFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32