7d8fd3490b6430d4021435b9cf93a8c83d2655b078aa2f4d401303b9e4791ba2

General

Target
771_aimcfg.rar
Size 797KB
Sample260730-pr4msahg23
SHA256 7d8fd3490b6430d4021435b9cf93a8c83d2655b078aa2f4d401303b9e4791ba2
MD5 8e66d151465af79f0280fbb931446279
SHA1 b239765ed16e30163064aab4a65dce7e4b5a4b9c
SHA512 2b0053271d802781f34cab7e60e0e7ef9f2d9dc9ea5fa79cc8227052390119ec8052e2273ed9fc571824413b955497c813402cb462fe8dee2dea8d3270411c0c
SSDEEP 24576:fm36/3OEpXMts7afKw5OusmWX/eG5/NKG9hXyArq1OoW:j/39pXMs7afLwnXNMIrrqI
TLSH
T1950523EA524148F6E9CE0F3470EA5171FB83BD1BE365DFC39A69A36C0428921597C13E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Malware Config

Targets

- Target
  aim configs/crystal/crystal.dll
- Size 976KB
- SHA256 be67f55becdf1b6ae1d94741f359d76fc55996b67fb41b8a00271c38a5eeddae
- MD5 041e1a1efcde5162fd07a2d2ac14cb0a
- SHA1 0308d048baea6b70009e339fbdccc6ef1c50cbc2
- SHA512 abf74302edf5b2fbee9dbfbb35487417b1aaec3fc8b672847a179e7ba8d0bfe67280005f3e84ac96a58b2f571ecedaa160b8da76df310772b32595325c1320d4
- SSDEEP 12288:HxgnLqYl2vu888RkmKjaRiffsv2jZ9RKM7ch6:Fy2QfEvEZvK6ch6
- TLSH
  T17E251B10E501807DF9EA01FBDBFE5BAC916C66509B5C10C352CCA4FBD7766E23A3249A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  aim configs/gen/gen/AGNaim.cfg
- Size 248KB
- SHA256 c90b6fe6e6f645514ba895982876266a336ee81e1ca7066d743faabff454f541
- MD5 38e2a1aebe07d54994a9064d6ad4f940
- SHA1 eed242e43f3fea10852a8e63dce67811dfa6b07c
- SHA512 d930e99502df74154f4f7fa8c62566b548aa029201c391747c37d422b112d2eb68aaac80f3074a64eea9096f10135937a1d5ad3f4e509946868941da3462a3b2
- SSDEEP 768:JFdcAxHaxV6UovpL17lgYg+0HNE4Fbeu7/8Si+4:JVjUCpL1RgYg+T4Fbeu7/0+4
- TLSH
  T126441D3C8BF66D1BC22163B6A582C8133D6D63431F176D89751EAC9A0B51BFD87078CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral3 behavioral4
- Target
  aim configs/s3nZaT!0N.cfg + s3NzaT!0N.dll (Best Aim Config Eve/s3nZaT!0N.cfg + s3NzaT!0N.dll (Best Aim Config Ever)/s3nZaT!0N.cfg
- Size 80KB
- SHA256 d5613488518febe797320499a02bf18fb6fa39749b1046c665dd85f002621881
- MD5 7f9f8dd63a4137f61b36127b7521965b
- SHA1 eb9b707843ffe21b26d0fe81981ef9f746dcd6c4
- SHA512 1795b9676344e071490c5e589dd55af0183025c98ec410d6317ead1a7613c87b49dade3baefd2f768298d13ab8e24c70a80c327d0b17cae184f63ff6aa6980d1
- SSDEEP 1536:TIjoMCf9NJsHawTMXcEinv4pIGvUHPCjLS:cjo5RhcEi4pIdyLS
- TLSH
  T13183D732F23898974A7AF7D7B88594083F28662553164E91388EC67CC71E2DF763D80E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral5 behavioral6