HlBrute.rar
- SHA256 9976303c6cf0bc0ed4451439b0ebc51c9c326282c933fefa9ba3f473388d39ed
Behavioral task
behavioral1
Sample
distr/HLBrute.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target HlBrute.rar
- Size 276KB
- Sample260724-g14p5stdnc
- SHA256 9976303c6cf0bc0ed4451439b0ebc51c9c326282c933fefa9ba3f473388d39ed
- MD5 aa98cc9d8248a8c6cf8a577c3f53654e
- SHA1 a984843a6d8d7f45358dd62b847ebd8911c24368
- SHA512 ad09ec75ca186bc78ed7ab0a861d9f3742ef0379343bf36119215abf313a9a9afb3cf8d2b9045e6b800eb93d4df0280ab9f74e0e21c9c2029073060c1b65c02b
- SSDEEP 6144:/ftLefKDnBn0BCOTfrKpi9A+zhlpingYBu3sTsrBPuiNm:/f5eSDn0f2piail/Gu3HdPnk
- TLSH T142542278902C9B3CF4D6FF4E20399AC095D1F0A98AE9BFA8DD7540309A9BFC14167256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/distr/HLBrute.exe upx - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/distr/HLBrute.exe unpack002/out.upx
File Explorer
-
HlBrute.rar.rar 276KB
-
distr/Bases/UA.txt14KB
-
distr/Bases/[26.08.10] [CSM].txt28KB
-
distr/Bases/cs-monitoring.ru.txt33KB
-
distr/Bases/csm without serva4ok.ru.txt22KB
-
distr/Bases/gametracker.txt376KB
-
distr/Bases/serva4ok.ru.txt2KB
-
distr/HLBrute.exe.exe 210KB
-
out.upx.exe 568KB
-
distr/Passwords/usable pwd.txt1KB
-
distr/config.txt134B
-
distr/readme.txt3KB
-
distr/version.txt19B
distr/Bases/UA.txt
- SHA256 5c3d53bc823ccf6d914b9ebc7b3e21af553f858b59d3526a9a6d994dc2179db5
- MD5 719a95c6bd4476b1ff1c41bf62149dc4
- SHA1 9ac20c9c3796bd048acdafc34d7871ac13811bfa
- SHA512 3d89f85051beeda41bc6968d4661cf7a146266a5c4bedb254f2d7b98d16b1f2adeec8c23f171132ce3870cedfbaf9390c7d599880477770e62b65a80cbbc5df1
- SSDEEP 192:4A2Pm1g5soZuvOs9r8fqdcZWzirGlpEEKVfum9b9ONlBHmUEfuLuXxuV0LGz+V+A:4jfqdcJSlqfuLYwsWo4C9
- TLSH T10E62E5993729BBAB8E4430DE2B03B8E321D652A1DF27F5E2C3653EC49936156F5C2431
- MD5 SHA1 SHA512 SSDEEP TLSH
distr/Bases/[26.08.10] [CSM].txt
- SHA256 46821163df7b66462ba7fd05bdd1da3803bbcb91d5002d49c5ffd8860a3731a3
- MD5 5af1dfdb9d29e39e1b8a8258af654fad
- SHA1 d7cd90ff0c1b883c2532858c6aa4df201f7aeef7
- SHA512 33bffb95f90cbf65644e1e43bd40153b583721bac96ccb8934c7e4fe75d242e37e5bc112d426d800a25056e3f46594282bc950c80d2f7ad048fff6c957775999
- SSDEEP 384:o333Dn78QQ/bE1Y9MFuFs4Sn5F8KVHoit420QEzAZkbAn5:8D7LbuFs4EHow42/Rn5
- TLSH T177D29C8A36247FB78D8860DD3603B8E314D252A5CFB3E5D2CB656EC4B8B6056F8D0974
- MD5 SHA1 SHA512 SSDEEP TLSH
distr/Bases/cs-monitoring.ru.txt
- SHA256 df4419be45c7169ed9b986d39838f3154154c5146302b229f3424ad5b2286f72
- MD5 6fd3faa67bc082ac398bd01ac9b54390
- SHA1 955b5eafb9cb2cc905331cfee0e37a97035c0e1e
- SHA512 af875b6155205cfcbcdaae535a2c28930785dc8c3ec24260aae23e9df6f94eb8864239dc67b0a429c40945da56aa3294956dabde25cd11ab8d52f3c18a064ab9
- SSDEEP 768:RJD40QgmwzxGLke3nukcZvIyud3kK5rn2BGj+:d2wzxsuRvZQc
- TLSH T1CEE221ED352C3FE748CAE4DD2323F8E304B2A2518A73F2A1C7512D9965B6056F8D056A
- MD5 SHA1 SHA512 SSDEEP TLSH
distr/Bases/csm without serva4ok.ru.txt
- SHA256 d2d2dfb8112241369ae7d7ac38a9a9aa7dac6c140f878b57b67d8b520ca1cadd
- MD5 e8ee794fbc39303192780c87aa0f63c6
- SHA1 fbcf696122d1d2b2e16e32e8943c16d69a413af2
- SHA512 bed7c52689859bd53b489070597b88f50702dadc8c1b7d2446a4bf1490fa6073bccf3a4a9bf8b8e4cadd8976c4bd16b4d89e6595d3c9bf112582ee7f98c1dad6
- SSDEEP 384:E6FDKo0kWbE1OY9eDcTn5D80Ylu803m/8eix0F8oFPu:vDKoIqBne98oFPu
- TLSH T1CEA2978935287FF78D8860DE3613F8E314E25291CF63E5E2CB662EC4B9E2055F5D09A4
- MD5 SHA1 SHA512 SSDEEP TLSH
distr/Bases/gametracker.txt
- SHA256 36947507cb66bf7a831d1250befca96a375cf98c8d7717449ba65cce7d30dcc7
- MD5 7949ba6035f5611da75edb8e00879cf6
- SHA1 fda26bdb9ff2bd1b7ec5f8da8990700cf1d556fe
- SHA512 e2349ca1cadc3dd9764f1fb3b19be9d13b9bd6074d628f778e4702db625a1b8ef352ef397f15405d6effee70b37e105d2b8c630123bf7eaad92ea70ceedd292c
- SSDEEP 1536:k3dlqyl5yL07Ebt7Ab5KSR4U332ozhHillQZiQs+WKLns9mVCcUNL6BIby1V+P+o:5KLnsZEU
- TLSH T1EE8497A932257FF74D8C709D3613B8E315E353669BB3F4D0CBA52DC0A8A604AF9D1660
- MD5 SHA1 SHA512 SSDEEP TLSH
distr/Bases/serva4ok.ru.txt
- SHA256 44971a0f31ea754e00e1ac9997c83b076559e5a3fd01f916195b053c2bbc8e97
- MD5 9bf50c928f18ced232c2b7060cefe225
- SHA1 57639de8fcf7d86b687410543171b6cd2a246d58
- SHA512 ae41d25eeb45b05668d86771290acf95334bfe777254df085969eb85590a4ad9dc552eeae580919b38d88b74794384abf1f5e2ef2fb938f05a7123167de4f7e7
- TLSH T15141CDEDB66E2FC705D2DED81323EDF70572E6655432E364E704292E023A09AE88052F
- MD5 SHA1 SHA512 TLSH
distr/HLBrute.exe
- SHA256 ae2203f1491ab627262db84ef3c6ef2f5e7829a2e44d5285c479f794e78fba66
- MD5 24e40792b86b9551f5ed3e626f9e984a
- SHA1 f66ed3d23b6d130d4326cc921415db2601e7719d
- SHA512 6976bedba8a9bca23c90332b2f508fba1328eefa2b6681bd0823d3045d5bc3d5d0cfddb05bf4c61045b334382e1c6876545b65978932390e1b89547d820c3cf6
- SSDEEP 6144:+W1tUkZsPNiuukJd5HHCG7o2Y14hBPcJc:772PNiurEGs2Y1+P2
- TLSH T1502412A5F78599DAC4B6323177A70920434ADDB8DDA007073669BC864CF27632FB52CA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
618752
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
UPX0
Size
Virtual Size
404KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
197KB
Virtual Size
200KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
out.upx
- SHA256 4c5cf364999895c48a6f7e003e6732c8aa81bc72aec5de414f97dd8a16767a8a
- MD5 64cd832730395e5581ffb44af90d87b3
- SHA1 92b7b8504a970b06b9c053c7a4fff24c19023abd
- SHA512 cc887dc3e264502482431f8434c349bcbd614dd62133c7ef39d321dc86e826940cdc1cfc5ea7ecec0346dadf84176847c6abaa510a63a8d08220c195bcd72258
- SSDEEP 6144:Mud9EpSBS2bjPAZjYSFQqjlVGoalJ1BjHIQYdyDJE6MofFFQoZUz4SrMmSEIQGqu:z9EpSBS2b7ABF6BjUIGeFQSdEvGII
- TLSH T147C47D22B3B0993BC5736AB89D179A995836FE002E34D5C67BF51D0C9F35342787A283
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
435040
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
421KB
Virtual Size
421KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
6KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
95KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
distr/Passwords/usable pwd.txt
- SHA256 bbfbf5022db9943bca474c005597db796ced1bc57db7f07b2d77f830cac90c88
- MD5 d4b6211002aa77a6c242efcc548170b4
- SHA1 944125e3bb767148b847641b4fa2f5791efe0873
- SHA512 1db64f9a372421a69f15df7f7c54b393ee49d48b3ca4075c39b425497feb624a9aa5e27da47826449dab7d0a275ee721edc42225fc98f073896ac95137696764
- TLSH T1EC31AC2C904686CDC75725E972023884B6DC33156EC7495746A9BB8EB2A6A3CBF4205E
- MD5 SHA1 SHA512 TLSH
distr/config.txt
- SHA256 4d041a89a3f812336081bc5f02a21d5292ccb1c803ea5b15b085932e2ffb5613
- MD5 bc847b1cc7ffb288930b3d3d55f435bc
- SHA1 f061fd544ad7422be24f0d3c6cf442b5f115bcc2
- SHA512 a7bf318bad8bcbabfd089a461c0879390b2b7062a9e984021ff0cd44dad19ade471ed0f089cdad2c5736bd78b22fd8a4b36f5cbc08743d4cb56e400c0b5e754a
- TLSH T136C0927B0918CE7E6360844997104B2420CC2D0789B062A3A6A59CBA282AA2C35AC820
- MD5 SHA1 SHA512 TLSH
distr/readme.txt
- SHA256 fcb5999147f339efcb459a6972ac09188d741934ddfd71755bc66ae395960dd5
- MD5 95456b349300a34b109803e8a8407781
- SHA1 9efb6a01a5d3c9b74bd200248a97a70f79537050
- SHA512 ea749b9d7467e874da8682797409eb4354c8f8411a10e571c5449d53a09e827a903d936d82134f76db1ce8056bf89ad8e20dfa42e7e39419c39d545372b88ed8
- TLSH T17971F9530B486EE057A24ABCD5168B0124F94C07E5964B94A0A7CC1D37FC893E72DE2F
- MD5 SHA1 SHA512 TLSH
distr/version.txt
- SHA256 253e2a041055992aa6fabfb6b95d92f351c00e45264ccd7500b1d27cc654e73a
- MD5 5e9b0a4d3cad61344087379cda608f12
- SHA1 b0f54a7853331200ef7cdee5a105c04d0f131191
- SHA512 3dcaaaf57ac0ebd3992d730d802fc6b886082591252c80a3f02cdb120d9d5eb7f6baf68123f09545479d35f1e5a50a35702fa1d1a5ae2898f71a95ce291e4514
- MD5 SHA1 SHA512