Overview

overview

7

Static

static

7

Bookra1nCheckM8.zip

windows10-2004-x64

1

Bookra1nCheckM8.zip

windows11-ltsc_2024-x64

1

Bookra1n C...1n.exe

windows10-2004-x64

3

Bookra1n C...1n.exe

windows11-ltsc_2024-x64

3

Bookra1n C...xe.xml

windows10-2004-x64

3

Bookra1n C...xe.xml

windows11-ltsc_2024-x64

1

Bookra1n C...1n.pdb

windows10-2004-x64

3

Bookra1n C...1n.pdb

windows11-ltsc_2024-x64

3

Bookra1n C...4f755f

windows10-2004-x64

3

Bookra1n C...4f755f

windows11-ltsc_2024-x64

3

Bookra1n C...e6b0aa

windows10-2004-x64

3

Bookra1n C...e6b0aa

windows11-ltsc_2024-x64

3

Bookra1n C...3800a6

windows10-2004-x64

3

Bookra1n C...3800a6

windows11-ltsc_2024-x64

3

Bookra1n C...ac.xml

windows10-2004-x64

3

Bookra1n C...ac.xml

windows11-ltsc_2024-x64

1

Bookra1n C...5902e1

windows10-2004-x64

3

Bookra1n C...5902e1

windows11-ltsc_2024-x64

3

Bookra1n C...484eea

windows10-2004-x64

3

Bookra1n C...484eea

windows11-ltsc_2024-x64

3

Bookra1n C...b55789

windows10-2004-x64

3

Bookra1n C...b55789

windows11-ltsc_2024-x64

3

Bookra1n C...948a1e

windows10-2004-x64

3

Bookra1n C...948a1e

windows11-ltsc_2024-x64

3

Bookra1n C...7478da

windows10-2004-x64

3

Bookra1n C...7478da

windows11-ltsc_2024-x64

3

Bookra1n C...c2.xml

windows10-2004-x64

3

Bookra1n C...c2.xml

windows11-ltsc_2024-x64

1

Bookra1n C...f91ab1

windows10-2004-x64

3

Bookra1n C...f91ab1

windows11-ltsc_2024-x64

3

Bookra1n C...89.xml

windows10-2004-x64

3

Bookra1n C...89.xml

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Bookra1nCheckM8.zip
  • Size 63.4MB
  • Sample260801-cy2esaward
  • SHA256 8629d84f035d2267d91e43e45c0489f74ea871578c84238267385f171d403c25
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
adwareagilenetcosturadiscoveryexecutionpackerspyware

Malware Config

Targets

    • Target
      Bookra1nCheckM8.zip
    • Size 63.4MB
    • SHA256 8629d84f035d2267d91e43e45c0489f74ea871578c84238267385f171d403c25
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      Bookra1n CheckM8 V4/Bookra1n.exe
    • Size 29.2MB
    • SHA256 e92ef9b336bbee0cca7f25e1d6f29008a8f8fbe247fa20a2fd3fcd9902db2be4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      Bookra1n CheckM8 V4/Bookra1n.exe.config
    • Size 1KB
    • SHA256 aeabffdfd736df7c862b6b0b3313eb463a3d85a08ddbdc6a444787f44eb11f1f
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral5behavioral6
    • Target
      Bookra1n CheckM8 V4/Bookra1n.pdb
    • Size 331KB
    • SHA256 2b1ab332e3f8542fe79f532e448bcf8e823258ae44e71dc60e9035e12393d34b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      Bookra1n CheckM8 V4/OTA/swp/ad09186179f31a88dd6ee2c8f2d034025f54c82a/00/00c83ecd913aebb7396e2b456ecdcad4774f755f
    • Size 132B
    • SHA256 79137762e9177f19270cf456567b3cc56f77e3ff3958682b51d186b213d254db
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral10behavioral9
    • Target
      Bookra1n CheckM8 V4/OTA/swp/ad09186179f31a88dd6ee2c8f2d034025f54c82a/01/012707a2ae34d77a28b16a9e443b780ea4e6b0aa
    • Size 659B
    • SHA256 aaa805ed73693c6ceac04731c5e86ae5765f2cdfdb0f0fd1e43e28e330eb8cf6
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral11behavioral12
    • Target
      Bookra1n CheckM8 V4/OTA/swp/ad09186179f31a88dd6ee2c8f2d034025f54c82a/01/01a14737bf725839e60201704f5e0447e23800a6
    • Size 10KB
    • SHA256 73dd95e696302d39043c0986156047f8729eace925bd874c7acfd9b237bc8ff6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral13behavioral14
    • Target
      Bookra1n CheckM8 V4/OTA/swp/ad09186179f31a88dd6ee2c8f2d034025f54c82a/02/02dcc29d169dda989f3402fe07d8b6526d6fb1ac
    • Size 561B
    • SHA256 4460f2c764817b989f14d415666791791874d9141af499ef6d466ce523e2bbf4
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral15behavioral16
    • Target
      Bookra1n CheckM8 V4/OTA/swp/ad09186179f31a88dd6ee2c8f2d034025f54c82a/03/03d7c2ff408d6eafd6ea0231d8e48231665902e1
    • Size 114B
    • SHA256 239daffce583a1fda9c79e454e4574858be5ab1cb6fc887c31151c30274db980
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral17behavioral18
    • Target
      Bookra1n CheckM8 V4/OTA/swp/ad09186179f31a88dd6ee2c8f2d034025f54c82a/04/04a9a8cdecdb8e169428755c6efb8458db484eea
    • Size 440B
    • SHA256 0db0f66242bebf99b3a50e7b523276e265283d1a5a2e9eabcfa9f4394b7ad359
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral19behavioral20
    • Target
      Bookra1n CheckM8 V4/OTA/swp/ad09186179f31a88dd6ee2c8f2d034025f54c82a/04/04bc17f9e2a6c15dd056b5c236ad56e589b55789
    • Size 28KB
    • SHA256 81968c76415333c8e43db235fbfd8254d1fbbbc19f3206c1233b332545f72c8d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral21behavioral22
    • Target
      Bookra1n CheckM8 V4/OTA/swp/ad09186179f31a88dd6ee2c8f2d034025f54c82a/04/04ec47c2b38b390219c2c7f245f76f2afb948a1e
    • Size 641B
    • SHA256 f7479470cd73807f6cf087707cbe4d6b7a027d697b5c00898590fc2e4338e4b7
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral23behavioral24
    • Target
      Bookra1n CheckM8 V4/OTA/swp/ad09186179f31a88dd6ee2c8f2d034025f54c82a/05/051b560a86376b4644f8bc51d4a7cb41207478da
    • Size 237B
    • SHA256 86076769817ad2f9f187c24828a800c1d23415fb47f8aaab719ecf2856e7df6c
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral25behavioral26
    • Target
      Bookra1n CheckM8 V4/OTA/swp/ad09186179f31a88dd6ee2c8f2d034025f54c82a/05/05575c8bd920efae4ffc54c0e25e9981952c5ec2
    • Size 751B
    • SHA256 8323a79f5f3be68e5cd0821e3869360cc539e0302cd0a6097f2d70f270de7a12
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral27behavioral28
    • Target
      Bookra1n CheckM8 V4/OTA/swp/ad09186179f31a88dd6ee2c8f2d034025f54c82a/05/05fc8de89f9a5c214ca28aedfc4e669f92f91ab1
    • Size 818B
    • SHA256 afb279750b0d7ee99337511839fc041f668c4dd18a30fd105eba677cfcc10878
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral29behavioral30
    • Target
      Bookra1n CheckM8 V4/OTA/swp/ad09186179f31a88dd6ee2c8f2d034025f54c82a/06/064d76faeef55598c754d5f4af2f8903229ee889
    • Size 52KB
    • SHA256 a4051c2f6357a33f78efe2ddcaaf8b289065bfab0ec1afa2c672ed68aec7e4c8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

costurapackeragilenet
Score
7/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

adwarediscoveryspyware
Score
3/10

behavioral6

Score
1/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

adwarediscoveryspyware
Score
3/10

behavioral16

Score
1/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

adwarediscoveryspyware
Score
3/10

behavioral28

Score
1/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

adwarediscoveryspyware
Score
3/10

behavioral32

Score
1/10