Overview

overview

8

Static

static

3

Hotmail Checker.zip

windows10-2004-x64

1

Hotmail Checker.zip

windows11-ltsc_2024-x64

8

Hotlify Re...3).txt

windows10-2004-x64

1

Hotlify Re...3).txt

windows11-ltsc_2024-x64

1

Hotlify Re...3).txt

windows10-2004-x64

1

Hotlify Re...3).txt

windows11-ltsc_2024-x64

8

Hotlify Re...3).txt

windows10-2004-x64

1

Hotlify Re...3).txt

windows11-ltsc_2024-x64

1

Hotlify Re...3).txt

windows10-2004-x64

1

Hotlify Re...3).txt

windows11-ltsc_2024-x64

8

Hotlify Re...3).txt

windows10-2004-x64

1

Hotlify Re...3).txt

windows11-ltsc_2024-x64

8

Hotlify Re...5).txt

windows10-2004-x64

1

Hotlify Re...5).txt

windows11-ltsc_2024-x64

8

Hotlify Re...5).txt

windows10-2004-x64

1

Hotlify Re...5).txt

windows11-ltsc_2024-x64

8

Hotlify Re...5).txt

windows10-2004-x64

1

Hotlify Re...5).txt

windows11-ltsc_2024-x64

1

Hotlify Re...0).txt

windows10-2004-x64

1

Hotlify Re...0).txt

windows11-ltsc_2024-x64

8

Hotlify Re...0).txt

windows10-2004-x64

1

Hotlify Re...0).txt

windows11-ltsc_2024-x64

1

Hotlify Re...0).txt

windows10-2004-x64

1

Hotlify Re...0).txt

windows11-ltsc_2024-x64

8

Hotlify Re...0).txt

windows10-2004-x64

1

Hotlify Re...0).txt

windows11-ltsc_2024-x64

8

Hotlify Re...0).txt

windows10-2004-x64

1

Hotlify Re...0).txt

windows11-ltsc_2024-x64

8

Hotlify Re...6).txt

windows10-2004-x64

1

Hotlify Re...6).txt

windows11-ltsc_2024-x64

8

Hotlify Re...6).txt

windows10-2004-x64

1

Hotlify Re...6).txt

windows11-ltsc_2024-x64

8

Resubmissions

22/07/2026, 14:21

260722-rn53jsszcv10

22/07/2026, 14:17

260722-rlxcmaff988

Sharing

Copy URL Twitter E-mail

General

  • Target
    Hotmail Checker.zip
  • Size 27.4MB
  • Sample260722-rlxcmaff98
  • SHA256 1074f444ee58c564d3460629c633d2085defa91f403550b7d348fde0e4256b67
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarepersistenceransomwarespyware

Malware Config

Targets

    • Target
      Hotmail Checker.zip
    • Size 27.4MB
    • SHA256 1074f444ee58c564d3460629c633d2085defa91f403550b7d348fde0e4256b67
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2
    • Target
      Hotlify Results/API 2 Brute/Private_Quality_Emails_Hotmail (2).txt/Junk/2FA (09-29-13).txt
    • Size 82B
    • SHA256 51bc529837fc465a8e4ef3ef30a7f583b30aa81d844d26a9116f498c8a5026c7
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      Hotlify Results/API 2 Brute/Private_Quality_Emails_Hotmail (2).txt/Junk/Blocked (09-29-13).txt
    • Size 12KB
    • SHA256 2a16fc02940dc4eef97647f766625f2cae1d83a4df3a7eeecfb96f879151a66f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral5behavioral6
    • Target
      Hotlify Results/API 2 Brute/Private_Quality_Emails_Hotmail (2).txt/Junk/Info Change (09-29-13).txt
    • Size 4KB
    • SHA256 8758baca0913111f04a0ecefd55867bc96e6e4967c46ece6f93a3c52e37e9752
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      Hotlify Results/API 2 Brute/Private_Quality_Emails_Hotmail (2).txt/Junk/Recover (09-29-13).txt
    • Size 7KB
    • SHA256 44347f75335cc7e8d66e03d3c58c1ba80f43e64bce4fcbf0fd1981632c432c39
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral10behavioral9
    • Target
      Hotlify Results/API 2/Private_Quality_Emails_Hotmail (2).txt/Hits/Hits (09-29-13).txt
    • Size 18KB
    • SHA256 1a2b1bc562fc5dab75a6259539fb66afc205cade9968eaa975503141290f05c7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral11behavioral12
    • Target
      Hotlify Results/Crypto.com Deposits/Good Hotmail fresh (40).txt/Junk/Blocked (13-47-55).txt
    • Size 68B
    • SHA256 09a4ccf0f6f3c87f244205da934b53301756ac7231133d24c0a71efb691dc887
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral13behavioral14
    • Target
      Hotlify Results/Crypto.com Deposits/Good Hotmail fresh (40).txt/Junk/Info Change (13-47-55).txt
    • Size 986B
    • SHA256 72cf86f1c0b81b415144d44db6cc7434d843c5f6e2da8facfed8eaa4cdbd8d45
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral15behavioral16
    • Target
      Hotlify Results/Crypto.com Deposits/Good Hotmail fresh (40).txt/No Deposit Valids/No Deposit Valids (13-47-55).txt
    • Size 371B
    • SHA256 d68fdeb659d1b7b66d2e9170cc05788beedaafd2e1714309c8f0ec38013cbf58
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral17behavioral18
    • Target
      Hotlify Results/Crypto.com Deposits/Hotmail fresh @B4_Jx (23).txt/Crypto.com Deposits/Deposit Capture (21-17-30).txt
    • Size 35KB
    • SHA256 0a6d22eab1ba1d96053accd7f89bb491c621e52db539d3bb1d21fb5b6242f926
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral19behavioral20
    • Target
      Hotlify Results/Crypto.com Deposits/Hotmail fresh @B4_Jx (23).txt/Junk/Blocked (21-17-30).txt
    • Size 335B
    • SHA256 5286c8183c1152270650addd3be4d353c0e2c5a45304690edc7679883295d8bf
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral21behavioral22
    • Target
      Hotlify Results/Crypto.com Deposits/Hotmail fresh @B4_Jx (23).txt/Junk/Info Change (21-17-30).txt
    • Size 119B
    • SHA256 5856fe5312bbde1c3839213dde365bc1208ea10f086b7217565b6bc2c47324d2
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral23behavioral24
    • Target
      Hotlify Results/Crypto.com Deposits/Hotmail fresh @B4_Jx (23).txt/Junk/Recover (21-17-30).txt
    • Size 2KB
    • SHA256 26b0a0e31253c2cb7864db29e4a12b10a526c9c51f4ce85f392a452b5f52617d
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral25behavioral26
    • Target
      Hotlify Results/Crypto.com Deposits/Hotmail fresh @B4_Jx (23).txt/No Deposit Valids/No Deposit Valids (21-17-30).txt
    • Size 2KB
    • SHA256 bd55bc579f58aeee58ef0b928a7e3ab346f4efd1ad63a8e656e1bcc2a5ee9d08
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral27behavioral28
    • Target
      Hotlify Results/Crypto.com Deposits/Hotmail fresh @B4_Jx (32).txt/Junk/Blocked (17-15-36).txt
    • Size 583B
    • SHA256 27b0050690a963cf373b7b48acc34e4fbecfbc5b2fa8cd23639e00ffd9223ffb
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral29behavioral30
    • Target
      Hotlify Results/Crypto.com Deposits/Hotmail fresh @B4_Jx (32).txt/Junk/Info Change (17-15-36).txt
    • Size 1KB
    • SHA256 6d8cde28a91dde203fc007d5b21fb9020c13e9bd1578cc128cfa78598b754312
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

adwarepersistenceransomwarespyware
Score
8/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

adwarepersistenceransomwarespyware
Score
8/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

adwarepersistenceransomwarespyware
Score
8/10

behavioral11

Score
1/10

behavioral12

adwarepersistenceransomwarespyware
Score
8/10

behavioral13

Score
1/10

behavioral14

adwarepersistenceransomwarespyware
Score
8/10

behavioral15

Score
1/10

behavioral16

adwarepersistenceransomwarespyware
Score
8/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

adwarepersistenceransomwarespyware
Score
8/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

adwarepersistenceransomwarespyware
Score
8/10

behavioral25

Score
1/10

behavioral26

adwarepersistenceransomwarespyware
Score
8/10

behavioral27

Score
1/10

behavioral28

adwarepersistenceransomwarespyware
Score
8/10

behavioral29

Score
1/10

behavioral30

adwarepersistenceransomwarespyware
Score
8/10

behavioral31

Score
1/10

behavioral32

adwarepersistenceransomwarespyware
Score
8/10