8a2df00bb43b3db7295011b28b90dd44c8d1416a747cde798da6216839d542d0

Sharing

Copy URL Twitter E-mail

General

Target
lcb sp00f.zip
Size 3.1MB
Sample260721-t45g3axyhz
SHA256 8a2df00bb43b3db7295011b28b90dd44c8d1416a747cde798da6216839d542d0
MD5 763f8c24ef0005c81df4293310bcaa79
SHA1 2f980ae50fa221eb5947e42df83e5d71dc63d042
SHA512 bab8d4a878aa82121545a035706fd62dff0d394ab50b9f2662f2ffbd360a9e7c854d64d628373baca6a61638341d6b0611c4b34b4e3ab1730ee515bfc866aac1
SSDEEP 98304:l7v75ZVjSdqfcKpyvPIrVAHMNy3YjhAfrxjG/5UY:d75ZVjdNmPmEuy3yy1O
TLSH
T156E533B69E3C32F1E92E893908A66657ABFD6105E4C7530D45CB804190EE8BED973F70
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  lcb sp00f/lcb sp00f/Serial Checker.bat
- Size 831B
- SHA256 8e04607e18f90a99e360f4bffe37102b20006143859c87ae845694512b41094f
- MD5 119a816fb17e3c634deda5fa650bbb50
- SHA1 ee6fbcfe647a2b943e991797b08e10e2dd9eef5f
- SHA512 78d69503835da46a427afb50fd3dcb7d0dc246b89751d42533afb8bf8a0a0e5f78f78d350507460b5b421af0ae4b822ee2a435ab1962bf411fa5d94a663d6e2d
- TLSH
  T13101A144BD988AC070DAF6CC5B394132F0B1D0134062098C2F2A69208E50BCC7AEE71D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1
- Target
  lcb sp00f/lcb sp00f/cleaners/FortniteCleaner.bat
- Size 1.5MB
- SHA256 365685c1e71944bc955c6be46cc33a44099bcb0f8c625228e89445f18866b778
- MD5 2429db21a224c48fa6b17e55a6762328
- SHA1 f86eb0c2de25e8970add83b66253d3f18b0994e1
- SHA512 0487e79a9b2b427f8c0e5bb860e78039bcf29626bd58ad8190df858fcfa130d15add3fcd350cdadaccbc1d2e13f822dab76e418029d692d2ccd972594b4c0e23
- SSDEEP 49152:9TOB4ynYygOvXsMruROZyUpWvWOLZkORn:b
- TLSH
  T1A37532006260D2B2D46711C8D7DF995C396CE08725E07BA343E6AE8CDDCA43C55BEEDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion execution
behavioral2
- Target
  lcb sp00f/lcb sp00f/cleaners/Midnight.bat
- Size 104KB
- SHA256 5a21145b429b84651b8b30506382c7643e631bc917de152d70cf6aa8fdfb15b8
- MD5 98c35392bddb76264b1004a0dbf67236
- SHA1 2a32cd70da5f7a7fd43952d066f705538e980191
- SHA512 532b6a175755d340f8f5424dadbbd1ee0dac1680979e2365000024a63d226869c12384600597276217b73be7664fe6735da96fd6fb9dc1bd8fa6a5208c219202
- SSDEEP 768:l/KZzmezl/svUsfg8gVhCBL1oPY8xC01n5xpoL8oPlRPOpL5LvLpLjLgzJu/:Fg8gU61nvplxL5LvLpLjLw6
- TLSH
  T194A3D392631895B2D96704CC83EF864D3C7CE0CA25F5376242F2BA48D94A83C567ADF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion execution
- Stops running service(s)
  defense_evasion execution
behavioral3
- Target
  lcb sp00f/lcb sp00f/cleaners/Toruney_Cleaner.exe
- Size 135KB
- SHA256 d5b857f4972fea91c9d476905d4fb6f80de89df311da0dce83adfbef4d32d1b3
- MD5 03c9069653a814dd3a0d69d1431145eb
- SHA1 d57ca643bfb63dc9df696054ff12770132a81038
- SHA512 b7958fa0c0d2953ed4062f2e241f982377b4b0f990a179da9bf328a39e0a00b79ee76a537cd42482d2d782e33e36f390c85585d88fe16b882e67c4c9edd366cf
- SSDEEP 768:EcLW2SN3ItwfkDG7FIMXVGBzn5v1QLKeJunPxrU+lP/X3Zwkin9Sbh9Sb:LLWDN4qfkDo8z5tMGP9U+BBBuC
- TLSH
  T17ED3E8439ADC3CC6C038A3B477BB93C5C72EEC9592A2C28F56C01295D9BE55379227D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  lcb sp00f/lcb sp00f/cleaners/cleaner.exe
- Size 63KB
- SHA256 ce283342401e7fe747fe0ba57befb47465bdfe0f96ddfbeb869496684d6dc967
- MD5 ce27988cc633ed4e1ea1ed4bfd94e6af
- SHA1 ea627f85d7b710266d6eaf4c741fbce49d329c94
- SHA512 6204358139fc5bf8b8b12f8fdcfb5c3f615ce20e651fcb60042376b9d1cf5e5e02ec886a20bdb71ff94ccab16c5881da508431c288e31c9c134dfa10c79e48e3
- SSDEEP 384:y943jeTsybDGc9VIJ9KWSCGEcTvMtpAqFAgZl3QfBX8d7ptPQ9Z7L:vyPLoMMnAGZlGB6PQ9
- TLSH
  T1EA53085FB7A160FBE5B6C1399AC22219BAB171B403229BCF504115791F707E83C3D799
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  lcb sp00f/lcb sp00f/cleaners/leakedshit/New Cleaner.bat
- Size 21KB
- SHA256 b1ed8ef4d46bfb260356e37b884ad4a86bee9f0415bc6a73ef3acedc0dd8f1f4
- MD5 18c77961f8086f26c028643ba76e9b46
- SHA1 a9bb449bfb90526b98aac929ec578c387838a132
- SHA512 37615ab1a60b643f8741a3de628f72d79077de66bd7aa05ff012d5941ca16cfb22e77a0ec700d79446a7d636d4b7e539f99cbc9412d70c721bdc5930e939f53f
- SSDEEP 96:YXRVejIXO4C4AyCT5bWV7oJnJddsK4hSQX4V4j4V4z5ig51fH84f/vWqj/NbvTyR:YXoI3m9asdsth6IhU0M
- TLSH
  T16CA27FA1BBE1D233AD5B421E037EDF1E45AC8C49128411702772BE49E28E43C65F5EDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion execution ransomware spyware stealer
- Clears Windows event logs
  defense_evasion ransomware
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral6
- Target
  lcb sp00f/lcb sp00f/cleaners/leakedshit/clean1.bat
- Size 567KB
- SHA256 e2b6ce87a5fa871709665b0306e15d45cd7b5550a4de6701a8ce31e811a646ed
- MD5 4bf8dd140901a615b1a5fa5136728521
- SHA1 00e8b5a27ecea6d6a9c52739f15a71c5559724c7
- SHA512 5600ff59e7383fafc77ca98849b34c784fb85a86c2b6bb0d7cde2aec83c0db026f84cce7259ad3c20aec75a561f97150563e6f1068e9f9993bd4443ef4eb7537
- SSDEEP 1536:iYLmcHjAkpYLmcTzg8gFDRnvplGL5LvLpLjLw3z5z5z5zg:iYScHNYScTzg8gRRnvpFz5z5z5zg
- TLSH
  T199C4654027148011D5B3368DE26FB9296F7DF18F71E06AC711EEBB0DD89B91CC2652EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution persistence privilege_escalation
- Drops file in System32 directory
behavioral7
- Target
  lcb sp00f/lcb sp00f/cleaners/leakedshit/clean2.bat
- Size 260KB
- SHA256 97377c7ae3ff41e72dac718a4dd82cdd079ff50e026ce159d3435e6edb8bc543
- MD5 049fce145abfed6afa90599762b08c6b
- SHA1 563036667eb0a743c138f9f245cabfffe07c424e
- SHA512 e610806fbbf5365370538a1055637b5bf3ae9ae09f8779c1289b7800a9472f4f95db051c15c21af45bb70bfb99d2ef59846814ad36d8ecb6cd31c73e7dc443bb
- SSDEEP 1536:gWNoZxBOz2ouKKCWZr3PwUWg28361L5LvLpLjL5Azf4oH9Yzf4gH9c:gbKKCWCUWg284oH9Q4gH9c
- TLSH
  T1CF44A092621DA632E867108CC7EF851E38B8D08715E137A251F5EE0CD98A83C557BEF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution
- Stops running service(s)
  defense_evasion execution
behavioral8
- Target
  lcb sp00f/lcb sp00f/cleaners/leakedshit/clean3.bat
- Size 22KB
- SHA256 8e43a6e232e9842777d3fce8c552bf942359757e6af092595c98ae101ee0e94d
- MD5 fbd3ebe26a823f86ae2deed72df613b9
- SHA1 ac360161007807aff1577ca90edc57b21c3d14c3
- SHA512 2def0b5306711a7806cdfe58196877cda39f3b0bcc5786776d9164f28310dfd85cbf922dc1619f2bba3dfa5c84a5701d1b948042e0af28b6af5c4c893ce045f5
- SSDEEP 96:tVeN1ZifiB1ifIXi4C4AySST5bWV7oJnJdwTK4hS9X4V4j4V4z5Rg51fH84f/vWo:KZifinifILh9aswTthIIhU0
- TLSH
  T175A28FA1BFD1E237AD5B421E037EDF1A45AC8C49128412702772BE49E28E43C65F1EDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  lcb sp00f/lcb sp00f/cleaners/leakedshit/eac install/EAC.bat
- Size 68B
- SHA256 5a98534f6de39af620b6520d25ac388d1ee46f10d10c7a05f34f6593098c99d7
- MD5 8e25b700f094c22cf9545b24df4b3b98
- SHA1 58bd8197a3b4f1e687179b0c611a4db3869004ef
- SHA512 2712e9e9b08dcd00eef9504bcafb45e92554240ab8dd7033483305ad1eddae9b60f7577bca987ddc7c4ad4762467e596ecef6dac2502b0c3e3f2f1870fb0b898
- TLSH
  T1C7A022003CBE82AC3A0380FA08A0B0A0A0233C8000C3F00832C300032003280000B008
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery execution
- Executes dropped EXE
behavioral10
- Target
  lcb sp00f/lcb sp00f/cleaners/leakedshit/eac install/EasyAntiCheat_EOS_Setup.exe
- Size 933KB
- SHA256 6108a4f378ae293a5ea2ba74058beae388d85fc199edde903ba81375d8744396
- MD5 b2cf34920a4010ef3799921d8e0d18d7
- SHA1 1956c3da751cf7601c8eae613ada5c54473b3441
- SHA512 118ba08014819490894368696a0be5a6e4b460868674e0b8475b086a65ff6d0dfe285ed7ac5071e920964e6e413d61b4d19327ccb1e8207d2149983205ce3d6b
- SSDEEP 24576:aNbP+i822rvtMR82UumYYmyUjWmfy7NWlVeh5WKg8QT6c9:a5+j6+2UumYYmy4Wmfy5WlVeOKgQc9
- TLSH
  T183154911B8409072E49110B395F9BB6D842CAC243BA568C3BBC876795D347C3EEF7E5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  lcb sp00f/lcb sp00f/libcrypto-3-x64.dll
- Size 6.1MB
- SHA256 2249476a14dea73ae271d661483bdc6c15e45b931f8dbfd0bd1b84193cf420ea
- MD5 e7463d58d7aff43c7d71a3847ba8201e
- SHA1 1a030443545820af4edea017c64da1233a6177a8
- SHA512 2155a8fda32b9cb0f9029ce9fd6b418322b392523bf641b67eb885afc219a9b4942bc37292f32d190f128864b3f5830a8eee44dfc29623689bf0d5b259d0859a
- SSDEEP 98304:dP+C5HnwdCqOB1rpZtC78tPq1CPwDvt3uFGCCN:x1HnwNOLpZtC78tC1CPwDvt3uFGCC
- TLSH
  T117567BBDA67C0109E4AA91BDC3874237D271BA1953B013CF696186F90F27FD92B7A740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  lcb sp00f/lcb sp00f/libssl-3-x64.dll
- Size 1.2MB
- SHA256 18babfe5f3de3d0ceaa4bd671d7d3c808c8f788ca9782117b74d5b4900a2d250
- MD5 10cbd37c4df0aeff2346ba2c2038b420
- SHA1 499495a812dcc64ae01f75522eb8ed57699ee090
- SHA512 f859a516c4a5c73b68c9051bd28392aa4617b1f9ca45879257c8e43321ff0cf35b71f176f267184ac892be8b1c87e816aa78fcc1ac77fad2bd932ec7300c564a
- SSDEEP 12288:o3IaOMsTeC9cz8D7qs4SjIgtBwfcVXPz6dVr5yQH+BrMnfdEVB3:o3IX99c43D4S5kcVuTQQHmqdEVB3
- TLSH
  T119455A9AA7B80199E8F6D13C86434613D3B2F4162370ABDF1A6586790F23FD52B3E744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13