416392f4296e07dbea4d0867a813c17b3b10eaa2fa27f35ec5af057b3c8d1ffb

Sharing

Copy URL Twitter E-mail

General

Target
Overwatcheat-5.1.0.zip
Size 158KB
Sample260713-cvvstsdt2s
SHA256 416392f4296e07dbea4d0867a813c17b3b10eaa2fa27f35ec5af057b3c8d1ffb
MD5 4f6bc289826387a41025a28db949d6e9
SHA1 9bcb3d1b38539a21a7c9de6781a72a5f63e0f152
SHA512 a9e203016bfeef7ddfe687827850d59e5a5a18a91e31252d8944b1f8824342b86e861ac4add54d4d63064e5a374a5fb3d31cea0cb41c4878eb3b2f71d7846310
SSDEEP 3072:TjpqwSjpsiMYNv6sQBO4aVzmXYSGcFH/7FlwK7qzwHr0Cl:Tjp7SVxv6w4xYmHDFld7lrLl
TLSH
T126F38D36810498A9FE5196F6312F1316B72BE271618866D2F64F1333EE87199DF303AD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution linux

Malware Config

Targets

- Target
  Overwatcheat-5.1.0.zip
- Size 158KB
- SHA256 416392f4296e07dbea4d0867a813c17b3b10eaa2fa27f35ec5af057b3c8d1ffb
- MD5 4f6bc289826387a41025a28db949d6e9
- SHA1 9bcb3d1b38539a21a7c9de6781a72a5f63e0f152
- SHA512 a9e203016bfeef7ddfe687827850d59e5a5a18a91e31252d8944b1f8824342b86e861ac4add54d4d63064e5a374a5fb3d31cea0cb41c4878eb3b2f71d7846310
- SSDEEP 3072:TjpqwSjpsiMYNv6sQBO4aVzmXYSGcFH/7FlwK7qzwHr0Cl:Tjp7SVxv6w4xYmHDFld7lrLl
- TLSH
  T126F38D36810498A9FE5196F6312F1316B72BE271618866D2F64F1333EE87199DF303AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Overwatcheat-5.1.0/build.bat
- Size 68B
- SHA256 005901c60d490969817512be59b6b12b1672774b04026e309809f8db8a8f2d70
- MD5 1c512979c20a51e48a20d585777980ca
- SHA1 260684e686b025eb8d26a5c8aa25ecd85b9578c3
- SHA512 7857a821605216b33da5bc74ed65718aa9ef21bcb4bd3248f0ca093b3146f0aee61a4d7a5f1c677f854fbec039b41d3b30dc52426560b635b90b17e0512f690a
- TLSH
  T13CA02233022C0000B880EAC200AB0EC0020FCAB08000A080B0CB233AEEAA0F0032CC0A
- MD5 SHA1 SHA512 TLSH
Score

7^/10
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  Overwatcheat-5.1.0/gradle/wrapper/gradle-wrapper.jar
- Size 60KB
- SHA256 c5a643cf80162e665cc228f7b16f343fef868e47d3a4836f62e18b7e17ac018a
- MD5 42526c5c47432675551273b328226a71
- SHA1 d99b3fab4e678237951d90da6814fc9eb17b97ca
- SHA512 0ab85887191e00fc382c560d2238cacc0eacb8cbd5b3954df95287b494326e64f1ee8943c64b1f40646469799ebfb9a1e27b987d698fb6b43b70acbc4e0b7770
- SSDEEP 768:EIDSDaVvpKFglJ31GdMXTSHE7S+i16FmGm2oUrwuyvwbd1iSoQHLrakcecWpsHaK:oDa9MddyT+wbdwuyoh1F1kecWpsHP
- TLSH
  T1F653B031A0E5E226F1320B3FA4B61912783F535E45CF623B15683B49E7E14AACE73385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Overwatcheat-5.1.0/gradlew
- Size 8KB
- SHA256 638c2862d623c302f3029f5bd1441276be484c5b79909b706a614ebe8e7a409b
- MD5 d6e9e0c5123926124374524add81b38c
- SHA1 c96ebca5ecb6a29a72306645746773c6fc2be948
- SHA512 5e31e764977caa72ca29a44785d7212d4f3b80e70bb52533b12eb1d8ac5d2568b7c54dc267ca9b6ea32da62bcdab925959cb34210a18b5197d0aa50e44f0bfee
- SSDEEP 192:SyWm7HOyzJ1XnRy26M4khI+vcHI759IRDe825WW:S/mtzJZRyvwhb79IRtm9
- TLSH
  T153021B6357813334074506B72E9EB0EEA72152BF1F83291C749D960C372B92A61F2AED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  Overwatcheat-5.1.0/gradlew.bat
- Size 2KB
- SHA256 18774a0ac0203f6893bf1db3291a0d77f06cd1b4dca2a43b51e7009da3e28cfa
- MD5 d7a461fc63ba188edf97f78829fd4652
- SHA1 4d4fbe1fc89951b51f53a220138bbd9c2b4b3937
- SHA512 2ddcc733b85fa8ff5648a57de49aa4ca035afeabbb1c668cb5003c70554ad65a07fb401fbaf14c5e377296c714bf646647b87ef1ddce7190551a013c563b110a
- TLSH
  T1235173FB370B517B1FBD0B6A7E0C45827B12A3AA1E47E30C940F840D7231B4A51C1BA1
- MD5 SHA1 SHA512 TLSH
Score

7^/10
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  Overwatcheat-5.1.0/src/main/kotlin/org/jire/overwatcheat/FastRandom.kt
- Size 1KB
- SHA256 2cc3e77869c1ae7ac1acb6f479c2d2716e51998929288eba39e378bc0a8b73f9
- MD5 b7cb0e18c36739ac4ae18412f2afcf06
- SHA1 2f480ffaff36ee4c36ae5cbe19485694c47013dd
- SHA512 75fa3c4185d9f4a88ee0770a0420ec8690baa640d6b8fd8cdd188364432e4216fa4d37ff316a06c14a734b35cf34bfd8cccd447f23087ae2d3c262c933715e04
- TLSH
  T13F21210E5194A7334E4107B5654750DDE34A69B375CE1440390E5329EF067F282A5FF4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Overwatcheat-5.1.0/src/main/kotlin/org/jire/overwatcheat/Mouse.kt
- Size 2KB
- SHA256 250989ef849ba5f35098545d34dfc147f10a505359425c167ccba68b7fd33123
- MD5 7e691cff986af16936104c7f88cd3170
- SHA1 6f1305d4c7ba80283e7d807301297d0e47087ee3
- SHA512 b437deac649e469a1430d7bd701ad46c70835843598219e77cdafc321575f3a4d47294ee3c9f0e199ce1984899e8c6c5b1ecf9d7c76eb9a4021b03e2f7ca958f
- TLSH
  T1C551D0AF408B09ED86476375B46598496F67763311C8E006F1AF063D8FDB730E2E2AE4
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Overwatcheat-5.1.0/src/main/kotlin/org/jire/overwatcheat/aimbot/AimBotState.kt
- Size 954B
- SHA256 0e22d2ed4fe7066b147c3f62e606fb53203c59a50241bf70594e6b439c19eeac
- MD5 3bec0bd94961b6839111a56137b3cffb
- SHA1 067520bd7d3d0b654a95adbb04aafc7853a5d50a
- SHA512 3de13994e3f517941abf3c9fea97f3f4906e8567cfb4c3781e502c78257439f44715ebeed34b9a532d9334667d6ddfc5c4af976cc1e9fd9929432ad17535cd3a
- TLSH
  T1DE11540D4454C77B4C0403E5298741DEA307AEB331DE4051300FD31D9E06BB202F9DE4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Overwatcheat-5.1.0/src/main/kotlin/org/jire/overwatcheat/aimbot/AimFrameHandler.kt
- Size 2KB
- SHA256 6bae330368c7a160cc33756f10db724fd8e6212384967e17324517d1663bd11e
- MD5 f7e04c10c01041c8686f70be9d08bfb0
- SHA1 baffe3ca25358cae0930742e9b84281a043cb202
- SHA512 cf2a92b94769ede8fec260d9011433f3f682de7d258b686c2fc1313bed03e029359c4992427fd8e28bab51cea74cfd306566cd371629a8b0faa14dc758ef5c7a
- TLSH
  T1D251520EE54CC2664E0026FD6487458F7796F47B780C8444341E552DAF84FB074ACBEC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Overwatcheat-5.1.0/src/main/kotlin/org/jire/overwatcheat/util/Threads.kt
- Size 2KB
- SHA256 7f28fc8230f6b3ac0ee57bc7a21b159d75d9988f7cfeacb3bcf2b7d8aa6da87e
- MD5 9963867f9105dd27a11a660bb87d1e5c
- SHA1 a659a1fbc75f6a984bd3884b380a4ebe805db5c9
- SHA512 24cbe3f2bc7435b17d93b813a887f6aaf4c31703daa74411b6cc52ffa39462c3ebd635ed10a89003238a6803b4498df063f3c6f14658819982c95c33bad7e988
- TLSH
  T1E341630D58E8D27B098521B9248702CB7397C9A726ED583079DCDA1C9F0AEF912F2ED0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Enumerates connected drives

Loads dropped DLL

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22