5e83595508a9cf9d16719d2d3f2f3731044b6781f707ed261a571193e4e15c35

Resubmissions

20/07/2026, 01:51

260720-cabjfsb14m7

20/07/2026, 01:51

260720-b93asaew2x3

Sharing

Copy URL Twitter E-mail

General

Target
hackingtool-master.zip
Size 1.0MB
Sample260720-cabjfsb14m
SHA256 5e83595508a9cf9d16719d2d3f2f3731044b6781f707ed261a571193e4e15c35
MD5 32e2950990358556761b705dd430b7e9
SHA1 3391d53a3ec07cc0b2ed2791c6c77fba7b8294b4
SHA512 ed4fc241dc6315032fa8d4a4623b8fd7713ff9a2f8244d0a1bc91a6eaa5b51f8d3f8cc3410a1552ed7be14355d2361de675338f3e38e6f80f4edd7e755ac578e
SSDEEP 24576:VXy6wezicqyc2yEOxLTOGbuDzyF5VOnqMQUwcb5rTO:BypcXc2KOG6W5oq8jpTO
TLSH
T1B225234BF6B2E516D49B31B9D48E8263E6FCB91CB1AA681302DC0C7521AF18D3D14BF5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  hackingtool-master/config.py
- Size 1KB
- SHA256 ff733c1bea86bbd362bb58fcce577eef5e39a81cb708faaebf9160258f3eb3ec
- MD5 7a3f48895854be28c9e9917ea599baf0
- SHA1 3462d5d28d20e69afbe9ffee6223c9eb01295a69
- SHA512 e3b94fef20eea9e25de6deca1973b1f3b5f78ae94d4a02290f41946427d7c6d8b8610c6875579b54374fb25cf0ba3586b45b25de405671d4acfe02e19bcc971e
- TLSH
  T198214193FF676952C79E49A4B92AC2227725F9030A06E438796CA3543F9D02A853E15C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1
- Target
  hackingtool-master/constants.py
- Size 3KB
- SHA256 878536aebebb0f69f99c2b41d2dc8db012f1333c8796f16519dddf61f110a319
- MD5 a623cfde82c3f1f2e34bf9860c48c09e
- SHA1 94151c8d1e3a7ee78f77e26d5ac502ecd07cf38e
- SHA512 70bb88cf9af715e63e064331b74b65a77fd40a445830647f36d0c76653103a03f3c3fc4589744c4990a6ce446c37b49affbfe01f7e515709b19efe0a8c2b28de
- TLSH
  T1E2614171DE204C70B79AC69E9A5350061269B3113E96E438B25EB28C63DCD4D27F2FBD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral2
- Target
  hackingtool-master/core.py
- Size 18KB
- SHA256 8942dd6017f718eb21aed2505223a79c0c59d35151161cd69cac8295389c4ed7
- MD5 159adec36a4822af7140907129de7f04
- SHA1 1ee326b6d48f70e2bf7c67cc06da1ceffa65befa
- SHA512 d0d1dfb1c3162a5d5afb3db29bb776ea33b301ab975bb448e5de06b8a6b190199eee295eb3e63daba65b2962f3866dad90a4715180d719e2e94432f3483433b8
- SSDEEP 192:7Ng6OqCKH7A/b6qfICKLqt6wEqHLWK7w8g9c0hK7wqmipuhzRkNGfHwATUnnOHgI:7NM+A1oqH6kMmpuhqNgHPTeOHgfQ
- TLSH
  T15782642596226832F347C52CC893D45677192D430E486139B9FCD2A86F9CC7286F6FEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  hackingtool-master/generate_readme.py
- Size 1KB
- SHA256 6c4f342b8416bc692a08810fc28c60c2825ad9ab9fd23430add3dd710d4fff42
- MD5 3c290e4f20748baaa447fe5ceb1f957c
- SHA1 11aad608abd274d2540446b3b649f5e00ecfac90
- SHA512 fe52d8be5af8a45f437e0c239f968da29ffc4825ff736b80a84ea091ad84bfdb0507f66424ea23d50a49e242d5b431db0d2f8179ac4fc3f763e144df31122923
- TLSH
  T137318F61C93A5534C7A35258E495C465A6BF3E630E88452A3C5DC3942F8C47087FF795
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  hackingtool-master/images/logo.svg
- Size 5KB
- SHA256 8ac9b602c865e206893fd6e7820f30fa4e4763f5a3eaadf976d9ed8411562ee2
- MD5 8fc0c8a48c30116a21439fc46e3873e6
- SHA1 01ba719edf5d8424190b88e0e7637739665c9a78
- SHA512 86156b7a033e4562557c4fee47319bf89b908bfa4a5107db17cfa311ddfec847869c1750b1ea9e40603916f7b9d7149f7c440cb3b3fbb4695155f6e14af4145d
- SSDEEP 96:EZqAvj+VeVKTxfNr64uIXjOCLNt7EKfOLS0UZ:yvjkTTmyjL7EKfO2v
- TLSH
  T1C0B1122591ED9C32E6114129F71AF737162E80C7871DCA58702C0638BF9ADDBA67F2D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  hackingtool-master/install.py
- Size 10KB
- SHA256 73aa93bdd24c7703181dbf63095f460e43f0dd69feef093011c96014a561fbb8
- MD5 e6bc66cb917a841e9e55095573f6f3f6
- SHA1 8b1385265660c320d00207c1808389d92bb95489
- SHA512 eca7c25932ef90d4e95b96b581894fc2e869399f54876db2877ce5a87359668aa1b9fbd2affac061eddb2bbc0faec4dc473934dcfc9b7b3a12a607e92e2d9108
- SSDEEP 192:JdQKR1liJHZQutSfYn2I4g+HY+jGxe386:JdhAJlntoP
- TLSH
  T1053296778A7154B1BB93C48D99874013294638133A55B4387EECB2742FDDA2A8237BFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  hackingtool-master/install.sh
- Size 6KB
- SHA256 b0303d2a80e905c113c4b0ed172d7de5c7b42444c1a9261d7387a2e50c4f065d
- MD5 c6b2e0e4da36529908933b7b25b2a6ce
- SHA1 2d78adc0be4a9b2a04a4aeb7a7898d728978bde8
- SHA512 f76d2be10cb978881008e144cb7f30c7600c6419f556c045e17153064cb4e429589019e6cd39252408ba060f51e9a237d3b2eacf406e5a954b5361892c224019
- SSDEEP 96:vqA8pK/QrADsiI6ZzS0YMvfAaNazvoSi3iGNGw7GgGa5y+m0HMqqN:ys/oa7I6ZzyMvIaozHiyk159m0qN
- TLSH
  T14ED1A876A524A5F83A09C05D93BE90243A5E311F3A40682EF46FB0CC67DE9497237F75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

antivm credential_access defense_evasion discovery execution persistence
- Executes dropped EXE
- OS Credential Dumping
  Adversaries may attempt to dump credentials to use it in password cracking.
  credential_access
- Deletes log files
  Deletes log files on the system.
  defense_evasion
- Write file to user bin folder
  persistence
behavioral7
- Target
  hackingtool-master/os_detect.py
- Size 4KB
- SHA256 1a4329f9d3680cd5e1c9f397280989c9c904b68e3bbabe21a4fed7d3270dbcea
- MD5 8b3343fce9fed1d3f9b5633c51800c38
- SHA1 30ecee93b15d8e1bfcfc78ff983ca5b3912b5f4f
- SHA512 312d499009cab7d799dc8abe2bb1ad8288b7f1467d068395e0a353c12cbaff886a0f868717c3506e91f3c423f44bd0484c4459721e55069bbf46a6a66cd55f71
- SSDEEP 96:+6tm1NZnNNsMnHPE008uPThiKBNfonqgNtfLtXofiijghRPHLq:n2fNrvE/ThiKBJAqMzvLq
- TLSH
  T1E0B11235D6154D2732ABC9AEEC46812172A974673D5570A87EEC326C1FCE02B9233B7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral8
- Target
  hackingtool-master/tools/active_directory.py
- Size 2KB
- SHA256 2556da41b6a8e827cc0c0a7ab440b7df6f3b6e3eb4ae44c4e4ce57c86916fd36
- MD5 8a8898a6e2c0ce34e103a5f1f1847108
- SHA1 8e61a7883247d5e2c73a6c602b75e30e56fd77ba
- SHA512 a6b4246d72857b84018103ab1e3f4b89362c3b50f4b44840b31e1e6f4d1322845583c35cdc099360a2a83256272cca6ba6ab939ce733fcabcf4e7b6963bcdefb
- TLSH
  T12D51FFA710554CFDBE0A5AE598CBC4C07B58F9877D44A8AEBEBD00010F1D06706EAB9F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral9
- Target
  hackingtool-master/tools/anonsurf.py
- Size 1KB
- SHA256 1502000487ced81e3bc22a854761f03cb6e181fdda736abb59764718bf96c800
- MD5 f55dcc6b9af6b224f979c5e06d7f4d2e
- SHA1 8dd87d88e7709f22a7a387cc2ea863571d7e1711
- SHA512 8aca374e6052f817e1ccee69a838c749e74cfdf7a38af7d9a1d305935392051f99409080c315e1b56227e06153d2a3fbbd1455f81131ed5d6dda6aef56a88798
- TLSH
  T11031335A461924FDAF510695E4BFC0966B907D03CD146C6C3EEE15085F6B07203D26DD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10
- Target
  hackingtool-master/tools/cloud_security.py
- Size 1KB
- SHA256 bbe5bac94e68b34471cd400e3f9d5b84106c335706e4b0d256a19a09c6b0b413
- MD5 10798e6cfea1ad890e401d6c61a6f161
- SHA1 65e05318a0c5df723a9d0123109b170455daf0dd
- SHA512 a68984322c55b1ddf5e852eaa8f6d05905e9f407cec5c34dce1c4622fbf8f039823890fa0f838bcace34ff00ab4472ad09d74e8a066fff7897b26affb99fd9a4
- TLSH
  T1BC41C0A7511C4EFDFA4A648699EA90C82EF4B883FC09949F7E6900009F1D4A612967CC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11
- Target
  hackingtool-master/tools/ddos.py
- Size 4KB
- SHA256 5bc1d8fcdd6c514c0cee59b5a3b48ce915ab229f33536bc90b8a8513467a6bf6
- MD5 5180ce9912c2496dc55d03a26c9d0123
- SHA1 bb525022c7b5ec7c90d88c149629f8784e2a0dc2
- SHA512 dc5e77e66efbdb6ad26d3fb8a81a35898b048b408ed73cfc44ab1c654881d37677d54e0557705f0a7c6fe6adc846d217f7f472ac0c6cbf1bc9d62971daf80b50
- SSDEEP 48:QTLnnR43ObEEyHGaH66f8rjDTanjZPl05bKjBlOuEhXjbHxvDr84FM1HP5w:wnn9EEy5mjq1t01HuEJjbHx/8GcHxw
- TLSH
  T102A18477A2651CF5AF8F24A4F886804522A0EE47AD016C2DFCBD02B8DF5D0370261F9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  hackingtool-master/tools/exploit_frameworks.py
- Size 2KB
- SHA256 9e1c7e24c80264e2576475edca1f641a5d54b9abab1453802e5b2371ed38fa44
- MD5 a4d83b733921cf92ef512842c3bc367a
- SHA1 6a802abdde489ace80c3a9c0ec91795574da7ff7
- SHA512 ec841d9e733946ac73f31bfc811c183c8a084f3c39df3fe04586ae7e7afbc74ade1be62136cabe497c05183fc5510491b224e26a7e13e9826d3aa94bc4f9ca8a
- TLSH
  T1E34132EB40380CF8BB4A5796B5C5C18462F1F9477D00989EF9BE811C4F5A4E505827CA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13
- Target
  hackingtool-master/tools/forensics.py
- Size 5KB
- SHA256 1ded6bade4eddefd4dcac4f385d8c04007a9f3fc70f3fc4dcacc4939ec54561a
- MD5 d7ff5e527dcca6a2365f9c922d050455
- SHA1 9f10d6dfa7ae5728a2ddf57f580770fd8c82ee36
- SHA512 53bfc7a6eb0760dab24b22ed7f0e0c918aabcda4198e7837f41541830359d8352e795c31170408a4aa90e3409fd544a450334af3bd9f6ad7bfc2f1e15274bb8c
- SSDEEP 96:OHY+PsgsvNnbIgWvOKCkNnHHVo7jp1khv:GVIbIg/KCkxHivAhv
- TLSH
  T168B1655390BAACEADACA5544F9C7C081BB90BE035D18BC5E7DBD02985F1E43143B16BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  hackingtool-master/tools/information_gathering.py
- Size 12KB
- SHA256 1255c87cb132b94b545a8174b9ecf3bc9c9eb8f8442f4bf37f231b338d6c3f7c
- MD5 82fa1e44dd891db0471437a82417137f
- SHA1 36e13fc8be949fa95f5175d0d5a227f305000fd0
- SHA512 5d42485c81e8640ed233768145b3620c01cfbf48b1156cd32327cb6ecab83de977238149c21c47de780df39789bb7f588ada2c47c56a34e24b0798a7793b1dc6
- SSDEEP 192:CsWPNUKxwNOu4HZwG2TnyL05ycFd5I2o0TKBZc33RBXNpYCBfACGZmhI2l:CsWVUKcOu4HZwPTA05yys6vY7f4
- TLSH
  T12542539790244DE9FA0B2997A8CBC046B774F94BAE04EC5E7CFE00599F0E47603E1398
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  hackingtool-master/tools/mobile_security.py
- Size 1KB
- SHA256 624cfd64eb1e6a71dc3ee0324f042091ccd3fc0c448da1e9e96fa9d64e070628
- MD5 cbe1074155232da4fe21c0a7d283d878
- SHA1 7ba4f4e43a60e03f2c85d24b995bbe67e09a3f42
- SHA512 cd77a120268c8c6805a338ba05d6f39fdf5c6cb17260688b3464d983a4ff58fd0b6e8fe227a650aa9cacbaa482dbe3c369d440b6ac5ecfced0db9f05afa9752b
- TLSH
  T1C231F1E6E1A91CFEAE5A1CC268EAC0851EE0A84B7C40AC9F7DBC4DC04F1C4650251B9D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16
- Target
  hackingtool-master/tools/other_tools.py
- Size 1KB
- SHA256 ade2a5da2b47bcff67a0d724510af09d7048389ab8348cfd4d0784a38ff03ded
- MD5 fa643733667887fa3fd2ba8a2a976517
- SHA1 dfbf09003a55f04912bc9e1720de28a420623b93
- SHA512 5007d8ecdb95644c7b97799e781f509f2b4ae6dec6b762e3f7f0fcefb858235eb69155946e560e33d45cc4271069d856c4c7869cd0844f38f3293db481cb920a
- TLSH
  T102413F93817258C266CAB780691EC1392BF2FE033E476041B87C0E65EF8F32527E191E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17
- Target
  hackingtool-master/tools/others/android_attack.py
- Size 2KB
- SHA256 cd252c7d94f4539685a1da6345e33d3aa30494c3bdc37870a9ee7304cb220ded
- MD5 d40c918fcb075a77dfa80b344c841d2d
- SHA1 ec664256175ca8e6edebf08e34bc9ace0dd5911f
- SHA512 934242b1985060297b3aa54f5732500614fb0c1e9b354b42948488eae495611762757a0c378fdca04717d95312d09a3e6fe363f26495a64b9fe76bb662a39981
- TLSH
  T19D51EEE386202DEDFE481EA4DCCEC0496BB4A91B6E149C6E7CBD14495F0987602D5F9C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18
- Target
  hackingtool-master/tools/others/email_verifier.py
- Size 702B
- SHA256 fac7e523fc1765c8ff7e506ffdb45955490165a3a138a1b4f0bde93b6fd2d558
- MD5 10ec616cc27f9b1684c39216fd3d6ad5
- SHA1 28da4d0aeedc14293d9ae706c8b9af2d1a22d137
- SHA512 e0c7890e07eb99544be15e1e4602381cc630ccf92fb43ab7c0d75d21bb109fede0958235324d475bd4e20e374bc9267c4ca4296628f572bfc30f72f8def43f57
- TLSH
  T1D3017057403548E4A94561A86D8DD0CB1792BE0B3D52687578B405D9AF0A8723B5174B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19
- Target
  hackingtool-master/tools/others/hash_crack.py
- Size 783B
- SHA256 65ab181de38f7ba9d3aa05c228ff453d1c27f0081f36d546620f7c7a07edbba3
- MD5 174b1acc91fbf1f5cd8226b9aa82d350
- SHA1 3d297aa539210eeb14ddef6077556a297b58fb20
- SHA512 c45badc0ffc68d9d6c4ba2ef62900e5991e25ef6630b060ed0547d095eae1bb8ea507d57cb63be9b688e4d3666199fec7d7a57299f2247e4729fa451e8a5e945
- TLSH
  T13F019CE780689CE8BF4D62E04CCAC0A81EE5BE0B1F059C2A38BE06584F5B0311352749
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20
- Target
  hackingtool-master/tools/others/homograph_attacks.py
- Size 706B
- SHA256 85cf20b2a552e639de884cefdc457d1bd0f97c7478c8480d503c28765212317e
- MD5 9e826cdeaec12858ef59d966703a2fc0
- SHA1 d087c5b88b38435d557005d1c9a3a7805658674b
- SHA512 928d03cff3e1a4772f740d293680bd81823b36972cb49298336f1062c9b6f017ff647ed1e86ca2c3a11c4f1a4b9aec22d88a650778e7c3dfe9a533e165b773da
- TLSH
  T12301CBE3053159ECED08129094C8C44021A6FE07AE32646EBDFC021A9FA927242ADF8A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21
- Target
  hackingtool-master/tools/others/mix_tools.py
- Size 1KB
- SHA256 0012316645a2415b3e3fd3aa627c09a2af15ed8e1802ccecee3ede6434b3ac39
- MD5 8101f36484eb275c63c3e969e596c731
- SHA1 4634ec4369ea6d443dc42f4e890484dd0ba316f7
- SHA512 8656a3a923275d5fc4aa2d7edcc0c80615d81e7962c5a7aeda0798585b51ab9fd947e3468d8f0e8769f102f1d08f871482df6d423f10d60c4618ce63305cf47f
- TLSH
  T12E315457DC3116F8D54E48B664EEC18152D6FD373F98E8287CBE16889F1A67142F128C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22
- Target
  hackingtool-master/tools/others/payload_injection.py
- Size 1KB
- SHA256 221d6a96373a4a7f22312a17c2e59202ee2f06f899fead89ec00165cc0bbd447
- MD5 97180c29d77414f97ebd4b930580a471
- SHA1 21d0be1f294fff3947bce344e4291164042fcf3e
- SHA512 787b0d5c9dff81135b4411c6fca6d3d02c880394a7bd4942390570eb13367b0f0af312324ea138e89c3828615d557fe0f0d0bdf1f0cd8c3a7e96f726b3152b64
- TLSH
  T11D21FEE38420D8EFEF856161D8C8C154F6A0BD077E059A7A3DFD806CCF49A71126978A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23
- Target
  hackingtool-master/tools/others/socialmedia.py
- Size 2KB
- SHA256 b8eb84635d40f486c3db4ccd8e322a088a0972f36ab112954fcec399164ec716
- MD5 dc58b5ae36388b1d339e8561b0733f2d
- SHA1 23ac4efc35f93a90dd822f8742b879988dea76ae
- SHA512 7276e776b39605f813e2506b83592313d1939377806e7a341648fa5d3e39aa2e8069cd9fec649c5a443ec9e5f3a0a8682529707d2dac4d275f97bb7b47ce38ea
- TLSH
  T17F5152AB02192CDA7E092955F88BC44452BCFE2FBE09683C7CFFC108AF0D43115DA649
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral24
- Target
  hackingtool-master/tools/others/socialmedia_finder.py
- Size 3KB
- SHA256 5a74e4e742f901204c654aeff727005f75f590fd8a132f1708e91d30441f79ef
- MD5 866035b386dd5fcf707756072f2f549d
- SHA1 5bbe18af872eb080513108f811b34e85a3915179
- SHA512 b01b565ae5d24343ac1fda0b9ebaf90cf68ea98c2f64ebfcd4e8572b2b3f2415e64bfa34acd1e861f19036b34d4cffae30d87589555460afcc5ddbc8d34222fd
- TLSH
  T1F1714253C0351CEDBF422569789780017AD1EA235E08A82D38FD459CAF8E5772BB365A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25
- Target
  hackingtool-master/tools/others/web_crawling.py
- Size 653B
- SHA256 4044dce3bd40f59c4489b28211773cd481c3aafc6194ef21c9a3da37b4a85796
- MD5 0f1c37ca00c9ae19b6c841077d17e3f2
- SHA1 7367a04a8ce757945454abe7b711ed5d9fd2fb74
- SHA512 be0158d1416dc7daaa6b6494f0588af545f0aee5515c76d90d4ee6c6e8d26e6ff4a7ec869f3b5a57fc501b4737d02b32cfb289c5d1d70d99e92bd36dc276a020
- TLSH
  T16BF0D366D0225AE8DD9E90B14F4FC9D4E1D5BF0B9F0494393CB14551DF4F47103B1696
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral26
- Target
  hackingtool-master/tools/others/wifi_jamming.py
- Size 1KB
- SHA256 862a5c6df5938b0bc618db27ad49ad631172b19961da43ca069f39992e77ff3e
- MD5 18babbf2a0d387a4bc81d475d603d21d
- SHA1 abfcb831f898c7079ff80a2c4f6096e5cfb2f676
- SHA512 b83d45b489b78d4f4b629632abe3c31c915ef44f16a5fd0426d316dfa14526973a76fb69d1a6a788d2f933752189949f3213a36e8ca06c58cef313f16e400c4e
- TLSH
  T13E311253CB092DF9F78416D4C899C4952990EE0B5E046C1E7CEE963D9FCA03106D1AC8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27
- Target
  hackingtool-master/tools/payload_creator.py
- Size 5KB
- SHA256 41825d874ccb3203105eadefcc924cfdb4d277be91c032b3eee17583243f67c7
- MD5 137809b8ae638bc1ce3e6e601cdef9fe
- SHA1 9e6507abf7d609945ff5e8401ccaba1daafeb122
- SHA512 15d7f417cf335f3031031235c0d1e2e8ad3c27768fd3eadef87f8b9babf749909c7d16e1c80c9d36dc6cb54da40bea251829dcd5bda1b43e6e9931b0bd9c6755
- SSDEEP 96:3setO8bJP0uT8ef/GSW5hv8tY4+Sm96Z6SlZm5UzGzM:vr8efeSW5hCY4C9Q6SlrmM
- TLSH
  T1F4B133A784255CF97F1915A5D8CAC0016EF0E967BD04E86F3DFD005ACF0D42106B5BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28
- Target
  hackingtool-master/tools/phishing_attack.py
- Size 9KB
- SHA256 ce09a0063338859650553cbc0d8d997bb393b66f3d350636597015269356728b
- MD5 afad75c98fc952fad4fcdd4446e12a06
- SHA1 81f2dd6d3724f3ec370933344dfc973342600971
- SHA512 bdb6af975580dd3884f183904b87a037cfe3e3e9589a5d5707767a26f2990d5af10dcdcecfbb3ccf031365485c5b7595491f3bb53365ec5b8e2055c463bf08e0
- SSDEEP 192:HV3TCNXHREJJh5wCzS4hM4IeGN1N1Ma/CC:HlTgXef584hbIe41rd3
- TLSH
  T18012E1EB40640CFDBB091E99D4CAD0057B64FA4BEE41A85FBDBE18495F0D06702A2BDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29
- Target
  hackingtool-master/tools/post_exploitation.py
- Size 5KB
- SHA256 e72059ebf1e6ce89cf32df577a63924c9d4cb895d7ae323d6741aeef6b1b887b
- MD5 228f7be5d9db5285fcc02ac2f398f7d6
- SHA1 71c45b24598a419afb6bc303c6f30478d34506bf
- SHA512 7e4b7357ab10cf10f54045210fff662a5b386005b2ffb11f9e20a67049e718b0dd5dcbe0b338be296edc06ba20719e148ba038a2617ab05229f64bfa6d4fee53
- SSDEEP 96:jPRCtaZkkRcmPmSB/MrjYXhFJFS9RtT4bIqE:jpZDcymiEr0RFJAtTiE
- TLSH
  T1DBB125EB81740DFDBF1919C5E8CEC14A3B60F947AE05A89DBDBD501C8F0D46602E6B98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral30
- Target
  hackingtool-master/tools/remote_administration.py
- Size 986B
- SHA256 be2a25a796789136583ce05763f31615b7c7a8ca4af4ffbbc7f7f9c51b45aa8f
- MD5 8b14b70ad472216890eb6fe85a027fb9
- SHA1 bc6a1dce3f9504f42f8af76a3a73e4cb6ef7851e
- SHA512 811923e30169bc56c59e1afe534dd3835acb26b09ddfb38be2be0b23c8d7bab785e6d2ed73e5733a1db0820ce011b404322bec3c7049b431e55c8a8d37f6a9cb
- TLSH
  T17411E193804A6EECDB9E25DAA44EC0581271BD073E1154F67A7C0EA8CF4D0B09A733DA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31
- Target
  hackingtool-master/tools/reverse_engineering.py
- Size 2KB
- SHA256 1314a45b961c8791fef2b418fd8888edf07bec2a38b433fba11cac74c49f5057
- MD5 14d257ee28ed61dd9bee15ccfc39b689
- SHA1 12dcd14385ec5ddd589b906a4f15ed0b52cabc67
- SHA512 35d33177a9d74fbce61fa85353c38d5d1bc2c45fec0c857c78d733d817c2be971f2e8573973a44a379fd127e9a2885227a0a3fc2d667fe1f7bd96808cbcfa6f9
- TLSH
  T16E5164B3A1145CE9B94818D1E4C6E04537E0ED47AD05EC2EB8EE004ABF1A8A553E5B58
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Python

T1059.006

Software Deployment Tools

T1072

Persistence

Privilege Escalation

Defense Evasion

Deobfuscate/Decode Files or Information

T1140

Indicator Removal

T1070

Clear Linux or Mac System Logs

T1070.002

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

OS Credential Dumping

T1003

/etc/passwd and /etc/shadow

T1003.008

Discovery

System Network Configuration Discovery

T1016

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Software Deployment Tools

T1072

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

OS Credential Dumping

Deletes log files

Write file to user bin folder

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32