4ab6f2b1b72612020e85edc9246cb2c3d6cd2dc3c2944f4b83464f7d8f9b5acb

General

Target
r3ktvirus-master.zip
Size 317KB
Sample260721-sqvv2ayfpf
SHA256 4ab6f2b1b72612020e85edc9246cb2c3d6cd2dc3c2944f4b83464f7d8f9b5acb
MD5 8e6c47c0f50a82692a9dbaa145c622ce
SHA1 2445f33cae05ecfbd23a3693b7a80b01b9dfb403
SHA512 90df17e6798ba58f53d4e53cd0d489f359484a2d1105e7445ba2976bb560ff11776e0273f0307bdb87ddcbbea9141a67bd736415f491c440240845dd62b74794
SSDEEP 6144:LxcgrRzrhq4XibGbsP5M5hq71fjl6jcenfuJMyxoFvUSE09nqJdq:LFr9rhq4SbXPQ07Vl6jc2eXxoFvUR4qW
TLSH
T15D6423DA7B00919DD5267836DE61B9E683F1EE80838D70601ADACB6770F73B37C25A44
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  R3KT.exe
- Size 172KB
- SHA256 6eccd34b5fd479c02356e2f27c4a0d4703d4c0a1ba6e2ca079f652f6b8d9a989
- MD5 bc1bade9688d5f472c5f2df32323161d
- SHA1 ebaac201839daf02c53f89a1cd6fa9fd6fb17e5a
- SHA512 10520c7e5eff0a817e2ce605891a31498ca912771009543975209d4468250bd889adce1b568278f47a20af745a127e42ec70134c3710f77d9273ce1bf611a08c
- SSDEEP 3072:f0T+5jmiE+HbpaL42RGR9hk4/LMyBeDNt8YG66LEq4n7Eagm:f4+dFE+HlaLhI9hkCLM+ehxQL9Y7Ep
- TLSH
  T10304018B7316C897DD3512B1C773BAB666B38C14C4E986396CE6746F08B3F804996B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery spyware stealer
- Drops file in Drivers directory
- Manipulates Digital Signatures
  Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops desktop.ini file(s)
- Drops autorun.inf file
  Malware can abuse Windows Autorun to spread further via attached volumes.
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  R3KT.exe
- Size 173KB
- SHA256 8c149b5a8e87bdcac18acdbcf9cea07f7fc7ff0bfbd93562c8f1b7a2d11362ae
- MD5 27e257df1f6f86508dfe99a8c1d7cddc
- SHA1 8de67417d101c107c412224f30696cac1090f65a
- SHA512 d4de3a5236381883410aff4e0f7ceac3472eef5b620c8849bc10a9d1a80a7ed7f62bb1ce0285d1fbf674ec386d65ebc705a3bf01aceb1a923c9fa4ad4fd9e847
- SSDEEP 3072:KyBP0T+5jmiE+HbpaL42RGR9hk4/LtwGNt8YG66LEq4n7Eagm:K+P4+dFE+HlaLhI9hkCLt9xQL9Y7Ep
- TLSH
  T11C04024B7316C897EE3552B1C373B6AA66B39C14C4E9C73A6CE5746F08B3F804992712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery spyware stealer
- Drops file in Drivers directory
- Manipulates Digital Signatures
  Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops desktop.ini file(s)
- Drops autorun.inf file
  Malware can abuse Windows Autorun to spread further via attached volumes.
- Drops file in System32 directory
behavioral3 behavioral4