c0881f2196fbabd2846f3039427ecedd660296d8ad29a1ce0158f22f1c6976da

Sharing

Copy URL Twitter E-mail

General

Target
SAK_v0.7.14_32bit_20220405-19-38-49.7z
Size 25.0MB
Sample260801-vm34caea24
SHA256 c0881f2196fbabd2846f3039427ecedd660296d8ad29a1ce0158f22f1c6976da
MD5 d48ac6bb8ea4e0b5104fa1d18b9ab45c
SHA1 9c797da608488e4e1e08eb81c8893a01f84477f3
SHA512 0b0aa0f50238898ae4e544d737b89c0074c9e5fac7c58c28d0edc99fa7044c7f775a91d002583ddc4bdb692e4121754846e616be2440755211ba09d91c722b22
SSDEEP 393216:y+uXzYRadGlZvY/Qb/c46VgSyXnLrA6vX7Jr6pGp+3Y5lGSSz6Pp4iqMYQxsc6Sa:y+DUGzNjTDSyXvXlr6pdIbf2g4Qv6SZs
TLSH
T1DB47339F724A00614A07804373A7D6662555C0F9DF9768B323B14BFE3626A4FEED9C83
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery pyinstaller

Malware Config

Targets

- Target
  SAK_32bit/SAK.exe
- Size 1.6MB
- SHA256 9f6b8b9b26cb5c6f1d44f8c771f64ee16fa0800331c8ccbc31ebad2e452a834a
- MD5 fba0709e39294680ccecfead574f3a59
- SHA1 a9153aebdc0924f182cf0cf688d90de96f0eed16
- SHA512 e7b0d84f39c6012612abb08adbb60a0cdb53e1288312c5278399d0660771b816e088d7e7636d25f128ed1910bca2e7ec64097c60449b1b429d728f33679920bf
- SSDEEP 24576:SAHnh+eWsN3skA4RV1Hom2KXMmHar/fP1piadgSepsCIBumhbozTX2JNe5:Vh+ZkldoPK8YaTfP1pige65Nhbk
- TLSH
  T1F775CF0273D5C036FFAA92735B6AF23556BD7D240123852F23D83E7BBE701A1162D662
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  SAK_32bit/bin/4nxci.exe
- Size 980KB
- SHA256 10ce3661dd9f6bc00f5f52c2f1bff9f5c6ba0bdbff47408b03b828829e426ff7
- MD5 c9014290e0c68dbee7862c919f27cf1b
- SHA1 2e2c9fc487e0ce3d964627041ce98c94771d529b
- SHA512 31b72b33aaf4ec58a69178790c99258988df39e744f8802ac22077e535bc85fe8b2afb3cea268777814b72d9412f2e83f3d8f6e919ff397ace2aa0f5e6bb8881
- SSDEEP 24576:klTz9ILlrkO0miKf2mnunTZZAhABwOFdUCoC9n4Bc9oWReO:kbY+EXunTZZAhABwOFdUCoBc9zReO
- TLSH
  T1C7256B44FA83FEF6F91A877D44E3931F42AE9240D729EB33EA04FD2898276590633545
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  SAK_32bit/bin/guiformat.exe
- Size 76KB
- SHA256 647fb4f5108af632c3d52fec34934922c50c70585697504e92fb80b3b7d05ee3
- MD5 2459a629ace148286360b860442221a2
- SHA1 e1530fe47f34bfb18c7c01ce60010c7ff80652dd
- SHA512 3db860433a6522eff77736e1dc28c76543c2cce58e054f08700e781c52674dfa35f355853a1ee73c255956ea0ffbe47f288bc7b5f1e27be6d1eda07ecb27782e
- SSDEEP 1536:aihX6I+ob6rhXaHTcOgECqvec4ZoGcy0I:0I+UchNOgECUecGoGT
- TLSH
  T132735C22F2E5D129F0B24AB02D718BA65A39BE31C531D44B67C06B5F1E719A7DD22333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  SAK_32bit/bin/hacbrewpack.exe
- Size 1022KB
- SHA256 b453f6bcb127231fd8ceb8719ca8f467bfb9ca6fb532919cc03f725eb5b8671b
- MD5 8788310f4cc1620479772ba541fb54ca
- SHA1 14776056840eb8480ef456bd31d39bdea98b2f8e
- SHA512 a9cc1142f269dd20bbf02c8abe71922efc4f9337c5c480ae3ae427003d652d4fab971aaba7d3067ac3d5aec9bdfdbb5e932e6d96b2d9c828e6816d134878ed85
- SSDEEP 24576:brd/9MltGcUFsa+mnASngQqAjaJOKgpWQMhazvAv8GLWU6L:bTCQD/ASngQqAjaJOKgpWQMhR8G6U6L
- TLSH
  T1FC256B44FA43FDF6F90A87B944E3A31F42AED240D719EB33EA04FD6898276590633645
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  SAK_32bit/bin/hactool.exe
- Size 1.2MB
- SHA256 01e6ccb916c74071645df84f13e05d0185c9b2f5d748e469c84a157a53395cf9
- MD5 e87d6333b3d7f13f0cb8b384873f4b85
- SHA1 0baccd07aac5a73f31b39173b8ed50e9065b3164
- SHA512 1cd58b515e46a0a0ad36dec786e027787556c9f8f5ad3077a95a7812c4c95120e30b21d0702cf1f93a4183403faabeb3f5614bff625e4a3c48c5737f8e7919b7
- SSDEEP 24576:Jb0IfwGOZmuYcPp1kaTotKplefgS1W+4tBLd6Y:NfuZmuLPp1kaTdlefgSpuLd6Y
- TLSH
  T157458E54F381BDBAC849877149D353667736F0815326EB2F362CEE380F17B809E66A49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  SAK_32bit/bin/hactoolnet.exe
- Size 3.4MB
- SHA256 2ffb12bf36e26550b55d308e85b5e9b35a0ea530215ba8673a3c978627023e03
- MD5 223904a9a7f5b5acd4b8fa136b02d644
- SHA1 9be937331cd20d1ae0bdbf7bfa5d469eeeaf8ca5
- SHA512 6b56fef09ba918f538566d4a760b04982d36d8051db7824fe25766fcde21c3d4e05602e6e7d03190dc0ed17acc4e1a08602b82b8f137b6a7713ce143879ae97f
- SSDEEP 49152:CnJ53I6vWPE7o/Op7L0KUt5QU11g+vm7bKKEg3sUfx+tT2hAUgR3rn:e55eXzMhECrgR3rn
- TLSH
  T1B4F59E62F38806C8D437DA34CE29C323D670B896073586DB1D65565E2F7BAD29F3B221
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  SAK_32bit/bin/hptnacp.exe
- Size 2.3MB
- SHA256 3a0cbfcca48f2154423b26bfafcaf9c55061f32a7e09f0b34691c5c3a006e995
- MD5 f18c9613eabe47d2bf6722c7faf5449e
- SHA1 fe1c6bb5735bda2b86dc0cbe261966aea9132c56
- SHA512 090d9db6f83d5d44fc38faf875699d2aa5d47fd82ffd4f2959be76597e26df3dc320d5b0ac9efadbebacf0e178a1c4c6e96298f4026204b4b4a934d4d6b1be23
- SSDEEP 24576:zE6H60CTegbTmLf1CoqnFys38s6uEQRfSmr84ER7eRXovlraVuQ583h30w:HWazrR7J
- TLSH
  T10EB509036A8B4E75DDD23BB451CB633F9734EE30CA269B7FE609C4359A532C4681A742
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  SAK_32bit/bin/renxpack.exe
- Size 988KB
- SHA256 51d847e22795aaa29ead6b924ddb711be6f4b833eb04a367a7095b32d5390072
- MD5 3b87a30e819b4b381c40d90267077b74
- SHA1 df5131a26c6b18506275ebacc6c64dd029a119dc
- SHA512 a139932340ed741648dbfb74d47504ae78347aa1eadc0486faf37bfa293f79125e68b7b793191cea5138d3cfa86a3885bce485e0e8ece412d0aac69bcff97b3b
- SSDEEP 24576:mawJ3ht++QVbv2R7LyVmn2D3OSXouxOOkpbTK8/qXK4QHWGmx:iDIVABeI2D3OSXouxOOkpbTKW4Q2Gmx
- TLSH
  T1A0255B54FA83FEF6F91A87BE44E3931F42AED240D329E733AA04FD6884276590633545
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  SAK_32bit/bin/squirrel.exe
- Size 22.3MB
- SHA256 ebf1fea6ea96d10dd3b4201c17ecf83d655eb84e724b7b1f2980655df11c9d1d
- MD5 059e952e9fbfe540449dec24b8849e7b
- SHA1 3bd253fef6a3827e0b338b0c2db7cbd5d587a526
- SHA512 610f46389c44c60eeccfa9bc4b12254f0134dbb176b763e1d66dea7626134c27b0e3c37c6cb2c06ddc9cf6079fb9a5d583f7d109f306f2e4012c647b18e60517
- SSDEEP 393216:gHbWHOvptvjAwCteW6EWfVMg1OzqMDikJQlKfUH9EfSX/Ju7FfGYdrW:gHUM1+te9MqOzqjU0d9EfmMFf8
- TLSH
  T1B83733CBE6437C5DCDB902375B97C2A53421B5E07B26257B232A0FBFF41A2815E6C912
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18