Overview

overview

8

Static

static

3

LAUNCHER.bat

windows10-2004-x64

8

LAUNCHER.bat

windows11-ltsc_2024-x64

8

LAUNCHER.ps1

windows10-2004-x64

8

LAUNCHER.ps1

windows11-ltsc_2024-x64

8

REBOOTEDSPOOFER.exe

windows10-2004-x64

1

REBOOTEDSPOOFER.exe

windows11-ltsc_2024-x64

1

keyauth_emulator.py

ubuntu-18.04-amd64

1

keyauth_emulator.py

debian-9-armhf

1

keyauth_emulator.py

debian-9-mips

keyauth_emulator.py

debian-9-mipsel

server.key

macos-10.15-amd64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    rebooted_crack.rar
  • Size 37.2MB
  • Sample260731-mvplxsem91
  • SHA256 6dba40f2e95811ca1c71139d0c0fbc189a90bc3bff24d2b073d987f3338c6ef4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
executionlinuxmacospersistenceprivilege_escalation

Malware Config

Targets

    • Target
      LAUNCHER.bat
    • Size 393B
    • SHA256 00c0f5856b30a76be23c5af9053280b2025d6ed62e33d3b599733ce6b6d830f1
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    executionpersistenceprivilege_escalation

    • Drops file in Drivers directory

    behavioral1behavioral2
    • Target
      LAUNCHER.ps1
    • Size 4KB
    • SHA256 c6bc91613bfdcebd8f1b46871a4f3bce0639bfe4a0438f1452e156778c90140a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    executionpersistenceprivilege_escalation

    • Drops file in Drivers directory

    behavioral3behavioral4
    • Target
      REBOOTEDSPOOFER.exe
    • Size 43.0MB
    • SHA256 702a9a60b898192ca046399b9ec0a3ff17c3126e5a030c691ffa0bc271b90eee
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      keyauth_emulator.py
    • Size 8KB
    • SHA256 59c5c29a5f0ee23f7d8ec335ecaaec39cae50d1f92c91cee0f97e937b627f294
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral7behavioral8behavioral9
    • Target
      server.key
    • Size 1KB
    • SHA256 2b9ff7a06f3667f8690f32831ce4f2fd75c1b3fb98a9b97acd93c4e787d68794
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral11

MITRE ATT&CK Enterprise v16

Tasks