Overview

overview

8

Static

static

1

tiktool-main.zip

windows10-2004-x64

1

tiktool-main.zip

windows11-ltsc_2024-x64

1

tiktool-ma...10.pyc

windows10-2004-x64

3

tiktool-ma...10.pyc

windows11-ltsc_2024-x64

8

tiktool-main/main.py

windows10-2004-x64

3

tiktool-main/main.py

windows11-ltsc_2024-x64

3

tiktool-ma...10.pyc

windows10-2004-x64

3

tiktool-ma...10.pyc

windows11-ltsc_2024-x64

8

tiktool-ma...cha.py

windows10-2004-x64

3

tiktool-ma...cha.py

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    tiktool-main.zip
  • Size 1.2MB
  • Sample260706-chek3scy8k
  • SHA256 8515a2362f6e58e3fada286818b5b9a2e3cf84e8506051b10f007156b7614c25
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarepersistenceransomwarespyware

Malware Config

Targets

    • Target
      tiktool-main.zip
    • Size 1.2MB
    • SHA256 8515a2362f6e58e3fada286818b5b9a2e3cf84e8506051b10f007156b7614c25
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      tiktool-main/__pycache__/captcha.cpython-310.pyc
    • Size 1KB
    • SHA256 2bf5f0d835e18ca244a0c0014d41d56544e16ad6a931b6b5a925df48955f9d9a
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral3behavioral4
    • Target
      tiktool-main/main.py
    • Size 17KB
    • SHA256 0f25dc127ac35bf0d2e6681fd98997abadfb2d6961e745b325db1946e8e6ea3a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    behavioral5behavioral6
    • Target
      tiktool-main/utils/__pycache__/captcha.cpython-310.pyc
    • Size 1KB
    • SHA256 cdd09a3442eb6e265da8e19292a4e166967bb948ec7dce0dce2050f76742d8b5
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral7behavioral8
    • Target
      tiktool-main/utils/captcha.py
    • Size 1KB
    • SHA256 4f3cb9fbbeea0377453b56d9841ab49e2a724052a1dca58e94fba52d625d826d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral10behavioral9

MITRE ATT&CK Enterprise v16

Tasks