General
- Target hackingtool-master.zip
- Size 1.0MB
- Sample260720-cassqsew4v
- SHA256 5e83595508a9cf9d16719d2d3f2f3731044b6781f707ed261a571193e4e15c35
Malware Config
Targets
-
- Target hackingtool-master/config.py
- Size 1KB
- SHA256 ff733c1bea86bbd362bb58fcce577eef5e39a81cb708faaebf9160258f3eb3ec
Score3/10 -
- Target hackingtool-master/constants.py
- Size 3KB
- SHA256 878536aebebb0f69f99c2b41d2dc8db012f1333c8796f16519dddf61f110a319
Score3/10 -
- Target hackingtool-master/core.py
- Size 18KB
- SHA256 8942dd6017f718eb21aed2505223a79c0c59d35151161cd69cac8295389c4ed7
Score3/10 -
- Target hackingtool-master/generate_readme.py
- Size 1KB
- SHA256 6c4f342b8416bc692a08810fc28c60c2825ad9ab9fd23430add3dd710d4fff42
Score3/10 -
- Target hackingtool-master/images/logo.svg
- Size 5KB
- SHA256 8ac9b602c865e206893fd6e7820f30fa4e4763f5a3eaadf976d9ed8411562ee2
Score4/10 -
- Target hackingtool-master/install.py
- Size 10KB
- SHA256 73aa93bdd24c7703181dbf63095f460e43f0dd69feef093011c96014a561fbb8
Score3/10 -
- Target hackingtool-master/install.sh
- Size 6KB
- SHA256 b0303d2a80e905c113c4b0ed172d7de5c7b42444c1a9261d7387a2e50c4f065d
Score7/10-
Executes dropped EXE
-
OS Credential Dumping
Adversaries may attempt to dump credentials to use it in password cracking.
-
Deletes log files
Deletes log files on the system.
-
Modifies init.d
Adds/modifies system service, likely for persistence.
-
Write file to user bin folder
-
Writes file to system bin folder
-
- Target hackingtool-master/os_detect.py
- Size 4KB
- SHA256 1a4329f9d3680cd5e1c9f397280989c9c904b68e3bbabe21a4fed7d3270dbcea
Score3/10 -
- Target hackingtool-master/tools/active_directory.py
- Size 2KB
- SHA256 2556da41b6a8e827cc0c0a7ab440b7df6f3b6e3eb4ae44c4e4ce57c86916fd36
Score3/10 -
- Target hackingtool-master/tools/anonsurf.py
- Size 1KB
- SHA256 1502000487ced81e3bc22a854761f03cb6e181fdda736abb59764718bf96c800
Score3/10 -
- Target hackingtool-master/tools/cloud_security.py
- Size 1KB
- SHA256 bbe5bac94e68b34471cd400e3f9d5b84106c335706e4b0d256a19a09c6b0b413
Score3/10 -
- Target hackingtool-master/tools/ddos.py
- Size 4KB
- SHA256 5bc1d8fcdd6c514c0cee59b5a3b48ce915ab229f33536bc90b8a8513467a6bf6
Score3/10 -
- Target hackingtool-master/tools/exploit_frameworks.py
- Size 2KB
- SHA256 9e1c7e24c80264e2576475edca1f641a5d54b9abab1453802e5b2371ed38fa44
Score3/10 -
- Target hackingtool-master/tools/forensics.py
- Size 5KB
- SHA256 1ded6bade4eddefd4dcac4f385d8c04007a9f3fc70f3fc4dcacc4939ec54561a
Score3/10
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3Python
1Unix Shell
1Windows Command Shell
1Software Deployment Tools
1Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Privilege Escalation
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Defense Evasion
Deobfuscate/Decode Files or Information
1Indicator Removal
1Clear Linux or Mac System Logs
1Modify Registry
1Virtualization/Sandbox Evasion
1System Checks
1Discovery
Browser Information Discovery
1Query Registry
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1System Time Discovery
1Virtualization/Sandbox Evasion
1System Checks
1