0e277401a6d9b642935938d5b989a76ade30fc6a63c24384aee0a59f6f0d4a4d

Resubmissions

29/07/2026, 01:29

260729-bv923sttet7

29/07/2026, 01:25

260729-bs993attcs6

Sharing

Copy URL Twitter E-mail

General

Target
1.zip
Size 43.1MB
Sample260729-bs993attcs
SHA256 0e277401a6d9b642935938d5b989a76ade30fc6a63c24384aee0a59f6f0d4a4d
MD5 658102c039a3c1378f5eecfeb56e127b
SHA1 e07c11457100a9e29560d1c1b8e376292dd0157d
SHA512 21c2cc1eaf8b0a0f582b616c717b59dcebf6410b997be30c1e52629bbc06387d325f13c131229c80b7151faf6038f7e23978c9ef967611321360b3d1267d16b0
SSDEEP 786432:iNwAPy6aZ0wJxXTSAGaRfwmBy4eblqI0+nH2qpGKRtCbIVvJuYuZ:fAaZPxaaemB65qEnH2CRjCbmvPuZ
TLSH
T14EA733B85CB989B65246F638BC5F68320BBD4765A13BD83F5029D1C3984D3368BE091F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  1.zip
- Size 43.1MB
- SHA256 0e277401a6d9b642935938d5b989a76ade30fc6a63c24384aee0a59f6f0d4a4d
- MD5 658102c039a3c1378f5eecfeb56e127b
- SHA1 e07c11457100a9e29560d1c1b8e376292dd0157d
- SHA512 21c2cc1eaf8b0a0f582b616c717b59dcebf6410b997be30c1e52629bbc06387d325f13c131229c80b7151faf6038f7e23978c9ef967611321360b3d1267d16b0
- SSDEEP 786432:iNwAPy6aZ0wJxXTSAGaRfwmBy4eblqI0+nH2qpGKRtCbIVvJuYuZ:fAaZPxaaemB65qEnH2CRjCbmvPuZ
- TLSH
  T14EA733B85CB989B65246F638BC5F68320BBD4765A13BD83F5029D1C3984D3368BE091F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  FastRunner v0.5 — копия/FastRunner.exe
- Size 54.7MB
- SHA256 3493447c2b29d9112ad88039af01becf506c26ba166d863a92c3b972c8cf8e8c
- MD5 d6613b6751e20a474f05ff05f766b616
- SHA1 4d1724759aae21faa391919fa59f8f19c74e5ff1
- SHA512 4e15354c53a84dd343770d5ef1e2663e8be4f770cd7bc08d1b66bcc0378501cab204ee162a75d4e82bb04c91d9bda85f7da1876d7426c07d4c36358e866f12a3
- SSDEEP 786432:l5nVymc26v0NdchV7RM9q/84sPR0f8dugHJjpFOkVM:PnAmc2ZdZ
- TLSH
  T130C78D13FD6918E6D5ADC434C6AB46237F707889573067EB1768A3203F7ABE02A79314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral3 behavioral4
- Target
  FastRunner v0.5 — копия/blockscout.json
- Size 16KB
- SHA256 1f8b092514634de6f52101fad1ff923e48fa2943f045f5620e140808394a287c
- MD5 b67fcbc53347f5f6d64c79ac1fa673ae
- SHA1 fa9b8873a9c4500fe45cfd1429840495aea17a0d
- SHA512 373b2b86458749b13f29386403a437e4fc51ddba2d95dbabf8eb41e8faebb5ef6a7d0c9b108b7c6f2fc9e42fc73279e31b264055bb2909c19db5019270fbdc73
- SSDEEP 384:EA802er4vZQ+b8ccdJhQx6R07jZbOXrIRQAJ1lR8cRDlhpgS:D+n4alxh3
- TLSH
  T14072D2F7416625970BD200C4E942360EFB5A5C0BCEC4B5FBF3278682854D5F7B0A9A9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  FastRunner v0.5 — копия/cleaner.json
- Size 763B
- SHA256 148468e9e932c69e67f32466f7d42fbf4a89f33438770b2b0d080f316b0b1806
- MD5 e57e99d986caddf5527d86975c6611ba
- SHA1 07e0d87c5d3b6ad25ed0ec75290f2c628fdb319d
- SHA512 933bb6bac48771d44af25384b773c8e47de6fa6a0e62ba7401eb57471787311123ee16bd647d4c7fcb1c5e3c2c8ace86996ffb8744253608116f97e08aec8255
- TLSH
  T120012114D51A0C802AC8A676CC4B5A872D2082477C403F1C37E2E1EC8F2E85F68B57BF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  FastRunner v0.5 — копия/coingecko_ids.json
- Size 5KB
- SHA256 bfd399cfa5d268cdefe6ee1d0c9607d2e244bb1fc218a9c1e9a650a965be74e3
- MD5 01e0fab469a0d547e03fdd4c05d46123
- SHA1 32deaedd8e311bb2dbd93a22493bec990805a2f1
- SHA512 f00306f152234b05b1a58d5d5290613bcaa83024d7cd2f3e0d5c5664a7623be85086f4172f5a5b98e73beb28b1730234641f6677fc5e7c8c1e30944e4fd574d8
- SSDEEP 96:tD9AAhpy4F99dZFjvUGqBF8EKl3VCScjj8LxIItwUOBcDyjyDL2mORYbrp9lz6OZ:NvLjdsGqBGCVP8LxII0BcejyDL2lYbrz
- TLSH
  T18DC1CBB2A1160ACB1BFC9C88744263556884AC679FC675AE878F01C2CB9E10376FE91D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  FastRunner v0.5 — копия/db_settings.json
- Size 797B
- SHA256 324dbd1655686d16dd85d476f2702a40d115e9a1dde5fc87b89470517a6e661c
- MD5 7acbca027f2d65e848dff44fe355a24e
- SHA1 4d6ee5993c7adf019747e6af96621d61853b239a
- SHA512 53b498cdd28787c841ddf1a0d7b5eec0b75a91ad385b908b33402371fbdbffc8d919b2f6d9497801316b0f9983a2a65231487434581fc01f4f6f1e3f467d30de
- TLSH
  T1E5018920C4580EBA50D0906CEC6E86175328DD13191D7D08F2338B4D3B0E77239F6BE9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  FastRunner v0.5 — копия/derivations.json
- Size 9KB
- SHA256 d78fc6659fb8b4c2567f1879747d354bce8d630c9aa2d228819003cc81733408
- MD5 f344942c923b0c669bb0de0f39bd7eef
- SHA1 59a0bcde4cc33b6a41cc8f60ec7aa83a18974580
- SHA512 fed2f8efef86c4a16bb446827c6e553b1e6a3aeffb459c3fe279ae5815c246cf3c83322148f476896c267dd1fc4d63751f17ba04bf8d379babb1bea3066df1c1
- SSDEEP 192:DIvtGSnyKJI28OTnxZWRx79Z69F6UrrZOLBZqeIEPMMEiWfainfG0Wxyk9lwa5vh:DIv4xKq2pTnx4b79Z6TlXQtQeIEPMViH
- TLSH
  T19D128119C8B85CB10099AA24957E1543A3618AD78E373D7C3BCC20BC4F8F6AE52FD6D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  FastRunner v0.5 — копия/fastrunner_crash/uid.bin
- Size 32B
- SHA256 a48a04ad37f0ddac44c0433444d82dc1e409402f5af44401baacdd664190a9ff
- MD5 2df7affe19249cf30851757ccc4935ea
- SHA1 fee687d6f960740bff13cb80a8062e53ebc48500
- SHA512 8a14d4fb957c0bfe53593a505c37f6b02f0ca376a5627cf20062fb8a4b6f54ab90f634c6fd1692c5e80acedcf004415fa26979904f505708416faa8501dc39d5
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral15 behavioral16
- Target
  FastRunner v0.5 — копия/local_parser.json
- Size 1KB
- SHA256 e608aa7e065b67be011e2e2bbfa9ee40261d651a4344ca1a75cdd678aafb4feb
- MD5 5e443e4c35d414095b5e8bdfd88136e5
- SHA1 2c67a87dedae85f52a9decd1835fc80164b13942
- SHA512 f79bbaab7109e76c0e28b49c8d53bf47c4390d9a25980d2acb4ac7e6c4c6a32f0018d7233563723c79369ae570174591acedc51ca469f331c40886bf3e66f96e
- TLSH
  T17F315A20C9062CA115C4D526E85F92870D304F271D153D1D33D299AD5F1EA2F27F7ADE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  FastRunner v0.5 — копия/multilines.json
- Size 20KB
- SHA256 aa4de6ad3748816dc0e64c5bccfa3a7f8568e8bd25cd6beac63eca56241ed9b9
- MD5 b99b4beae76b73b64b66ef021bc4496a
- SHA1 bc348cd7a656ce1c05fd596dad11bcecafeaedeb
- SHA512 7c1ebace33c3ec00a5c154092c85e8ed1bb5abf43616f13b93ca711de6071ef70a179035083c266b0771f4cd43d3bdecd6bc3ff68b7c061de29f58c00858675e
- SSDEEP 192:XtlqX3h87D0Fc7pf7+z/DZ4TkQlG4l/7CiyTsC3gGSG7+F14tNOlAfZuWFPWkx6b:9lqhXfVgGSGulAfZzJa
- TLSH
  T11992231CE5388D3268E8A56E5ABD4A93643085574EE83D2CB30D410C2F5E72FA9F72DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  FastRunner v0.5 — копия/mutex_config.json
- Size 3KB
- SHA256 21fab29ee974f61b91612f5c7b390235f11468fea4b0734cff8dd2e80ede0023
- MD5 107101a994cf5a340d19bd85ffd8173b
- SHA1 75ff994b4e016ee06deec1901335be1418a09744
- SHA512 a6a2269f091789906db9d63ad2f47e11d458675d5d4054a287a7da71099ab08b98ab75b7d369104773ec94ab1163f95eaa66a697dc85e7cd51f067bb6323c5c1
- TLSH
  T1A67167C1E9224CD2344EC525702E204261A40ABB9ECA3D0E37BD9E4D4F5D25F2AFAD4F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  FastRunner v0.5 — копия/notifications.json
- Size 215B
- SHA256 c832f3559c15caae9428fa0182bf2de6ba5b9588e53009f1e909bba948082710
- MD5 4ddc169644638ab6e4da326dfe0984ef
- SHA1 99accb277b7731dfee72da011f4f5bd9761a40c5
- SHA512 a952e8084ce0d4df4c4a230cf484b1f2c31202146ce5c8f89de32127ef1378a07b639bb9acbdc432eaa3252a55835b5611b778e893f67ca013655f54845a8e90
- TLSH
  T1DCD0C910C5701CEB10D4C434893E60A36210CD530A4E3C34B241823C2F0E13B23F5CE5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  FastRunner v0.5 — копия/patterns.json
- Size 8KB
- SHA256 120b0bf17f4a7b5b769825542c8f71fe06281ec5708c82b9d6fcdcc263c01099
- MD5 7a796db8ff2083c5c345f53e47181c57
- SHA1 a3ccaea6eb6a5b586b8c9949c9a1cb126647ced1
- SHA512 49212c720ddf01b89f213d70eaa324f46d2b05a529812552c41f2d69a2aba6a7b4f79f25e2f5fcbdf6c617cdc2e3dc577f306b8b58e8442a34925985a3b438d3
- SSDEEP 192:tHFzrAt0qUMOwWcwy+Qyg+TdZXRczrkZEQZFxZENZZFZI+H2/XvAO101Ik1:oF0Xv51yH
- TLSH
  T13A02E159CEB49D3208A5E4644D3B229B38248D678EAE3C2D7B1E402C6F4D72F36F459D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  FastRunner v0.5 — копия/proxy.json
- Size 619B
- SHA256 337c447962cb84f80fed4a9cdb91fd92f5de91f105a69007db66ca6648d4e7e0
- MD5 da60772ffec7051d12848d824261d8cd
- SHA1 3025cd758e2fdda5ef339740af4cf339790f5f2b
- SHA512 a6ea73d6fcc05824663f12053c5d3715b11454e66ab0b5b0a7b86ae2e92b63c0e559d61bcaf5b34035394c4c65c6d6bbf41086f54969688b43155a077b5ee62a
- TLSH
  T1A4F022C0CA02083080AC83C0F03C000EC3820C03088E2808330A808E0F2880EA2B0838
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  FastRunner v0.5 — копия/routes.json
- Size 1KB
- SHA256 12c909abb024a9645bb2059cae7a9d272b6e84ff8661671377d88edf1d61fe01
- MD5 aec0791592ad892f4e0fc40312f89c8c
- SHA1 05177c5ab47d8f1e4ebd61ebc042608b754d2b88
- SHA512 b28d2eedbf61c7ef7ee6a0a24adf80b87fe9756d8913919f1c7e0400bd33ed99015bd42b7d6e739c9e0a52525fb3134a10787006a507dea3244a2d7035f19b24
- TLSH
  T1B0312564E5701EB121CA553AA46F4A8361304197AE693F0D3BEC112C0F3D43F89F76AE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  FastRunner v0.5 — копия/settings.json
- Size 237B
- SHA256 f09310682542947b1e0529b0bbe7f0dde631e8d9770de9ee01cf6ff25f1294c8
- MD5 ea8bd23677d660bb03a1225736d44799
- SHA1 341a91b1e341450f274821711414f7375b6bc441
- SHA512 99e3bfe40ccfcfdbb597efd618a3e9541f16efdd37d95c70cd23e0a8048e84139561c1ca6d6d8444812b9a3820648df5d88d71a0cb4606203784cc00b307ee15
- TLSH
  T19ED09251D4A81EFC9251447CDC8CD417BB1608972E6C3E28F101200C2F1E32DB0B0AC1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Checks whether UAC is enabled

Network Share Discovery

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32