bc73e3981c7d4b798d605ca986459d0d0c43b989487ba0cf02f35c71874c8237

General

Target
rivals-toolkit-v0.11.0-windows-x64.zip
Size 10.9MB
Sample260727-k2d3nazble
SHA256 bc73e3981c7d4b798d605ca986459d0d0c43b989487ba0cf02f35c71874c8237
MD5 53151cfb74a4795580fbe42f1d2351d3
SHA1 15f63711f4e1be0f93677d61f16c7ddd2464bbd8
SHA512 805178d3300bfa58e1de025dc0a50b41b2515ccffb6cb1d3aa36c98db99746445f98a3e33a61b4b75c94766ca09766ffa19860785bed8688d0ffd18902e68f96
SSDEEP 196608:pgoITQ3NzqBSdOT1AGBFLPWRc+V8oDqTvWiJdgjRYFKZAkStFA7o189ckW1+bn:rXZqBgOT1AGH4DqTdzgMKZAbA7oj5Yj
TLSH
T1F0B633776AABD1D7D3A3FC6D2393EE5CB3B6578CB8B8697031895631284C0D700A7624
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  rivals-toolkit-v0.11.0-windows-x64.zip
- Size 10.9MB
- SHA256 bc73e3981c7d4b798d605ca986459d0d0c43b989487ba0cf02f35c71874c8237
- MD5 53151cfb74a4795580fbe42f1d2351d3
- SHA1 15f63711f4e1be0f93677d61f16c7ddd2464bbd8
- SHA512 805178d3300bfa58e1de025dc0a50b41b2515ccffb6cb1d3aa36c98db99746445f98a3e33a61b4b75c94766ca09766ffa19860785bed8688d0ffd18902e68f96
- SSDEEP 196608:pgoITQ3NzqBSdOT1AGBFLPWRc+V8oDqTvWiJdgjRYFKZAkStFA7o189ckW1+bn:rXZqBgOT1AGH4DqTdzgMKZAbA7oj5Yj
- TLSH
  T1F0B633776AABD1D7D3A3FC6D2393EE5CB3B6578CB8B8697031895631284C0D700A7624
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  oo2core_9_win64.dll
- Size 623KB
- SHA256 6f5d41a7892ea6b2db420f2458dad2f84a63901c9a93ce9497337b16c195f457
- MD5 cc81123b3396b838037113d230d31efe
- SHA1 b5120a64e2756eb99978a9ddc4fb36939a3d4cfe
- SHA512 8aad08bed85e0837a5593ccf1ae3bb2d9f25364c7cdf8c290e2ac3c33c019e7585f497f63c02ced97ea9aaaee850d7d3e454271ab5211f4a7506aa0c7f87437c
- SSDEEP 12288:cdAwMfEGT/SOqa61m1qdjOsLI4iVcwIBBih5m5JQgzFf/3FL5icE//rekCy:cdAwMfEGT/SBdkUBBihM5JQgzd346kCy
- TLSH
  T17FD47C92A2D151ECE2A78139CBABA253F3B13859032459F352B8DE752F4BED0633D705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  rivals-toolkit.exe
- Size 23.0MB
- SHA256 7a7994d4e06db5154be910fe3ce1e51038d419712fd2086693c4f653dee11c91
- MD5 048099685744b27542a55b0495e4832d
- SHA1 76ac214d7072aadf10dcf21a45685687b289d599
- SHA512 60c30990a78307d28e40278aa697434fe1e49248d4f5358531c1193b13a97d80ceb287045312045a1412f393f8175de697283f9b23d1663e6aef098e8c19e6c4
- SSDEEP 196608:HLD4BM/2SLz2sFRs382uyMX+YZY8kBM9qVYkWmMnX+R4GIJwBEkOJ/C65J8L:sMnrFCbjBM9qVPAXdJwBEkONCO8L
- TLSH
  T1323739217A5B996DD15AC47083464AA35E213CDB0B35B9EF4484B6393F7ABF42F38318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral5 behavioral6