Overview
overview
3Static
static
3RavensQues...pc.zip
windows10-2004-x64
1RavensQues...pc.zip
windows11-ltsc_2024-x64
1RavensQues...er.pyo
windows10-2004-x64
3RavensQues...er.pyo
windows11-ltsc_2024-x64
3RavensQues...__.pyo
windows10-2004-x64
3RavensQues...__.pyo
windows11-ltsc_2024-x64
3RavensQues...ct.pyo
windows10-2004-x64
3RavensQues...ct.pyo
windows11-ltsc_2024-x64
3RavensQues...ne.pyo
windows10-2004-x64
3RavensQues...ne.pyo
windows11-ltsc_2024-x64
3RavensQues...at.pyo
windows10-2004-x64
3RavensQues...at.pyo
windows11-ltsc_2024-x64
3RavensQues...er.pyo
windows10-2004-x64
3RavensQues...er.pyo
windows11-ltsc_2024-x64
3RavensQues...ms.pyo
windows10-2004-x64
3RavensQues...ms.pyo
windows11-ltsc_2024-x64
3RavensQues...er.pyo
windows10-2004-x64
3RavensQues...er.pyo
windows11-ltsc_2024-x64
3RavensQues...sm.pyo
windows10-2004-x64
3RavensQues...sm.pyo
windows11-ltsc_2024-x64
3RavensQues...er.pyo
windows10-2004-x64
3RavensQues...er.pyo
windows11-ltsc_2024-x64
3RavensQues...eq.pyo
windows10-2004-x64
3RavensQues...eq.pyo
windows11-ltsc_2024-x64
3RavensQues...er.pyo
windows10-2004-x64
3RavensQues...er.pyo
windows11-ltsc_2024-x64
3RavensQues...eq.pyo
windows10-2004-x64
3RavensQues...eq.pyo
windows11-ltsc_2024-x64
3RavensQues...er.pyo
windows10-2004-x64
3RavensQues...er.pyo
windows11-ltsc_2024-x64
3RavensQues...eq.pyo
windows10-2004-x64
3RavensQues...eq.pyo
windows11-ltsc_2024-x64
3General
- Target RavensQuest-1.4.0-pc.zip
- Size 242.0MB
- Sample260802-akbabsam3w
- SHA256 fd873cc7f817ddb3d12e2248e157a801ade4b5844889402286d3f24d4b25d56a
- MD5 ada93fc9a6e41af1f9fbd71c20f98aa1
- SHA1 95de4ddebdd5abad09952f47d0aff56625c40c29
- SHA512 b141011743c8a20e4e897a2ff1cef3bda252b30e01e92bad2bbdc2866ab6541c068a1855a461742cc9c8c82ea6eea99f99e576f1ac7895bed8ad703dd5c33f55
- SSDEEP 6291456:VmfcZfCEyyjWNi7kh8kz6jBGLjLIE2RxGiAyBgQ74zaXuQ:VmfcZJqN3hlzOB8wEnyBb5X
- TLSH T1A2C8337388A089DBE5B7763AA33D5592181335F2242151F7AC1BBF9552CF2C0FABAD04
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
RavensQuest-1.4.0-pc.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
RavensQuest-1.4.0-pc.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/charsetprober.pyo
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/charsetprober.pyo
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/cli/__init__.pyo
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/cli/__init__.pyo
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral7
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/cli/chardetect.pyo
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/cli/chardetect.pyo
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/codingstatemachine.pyo
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/codingstatemachine.pyo
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/compat.pyo
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/compat.pyo
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/cp949prober.pyo
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/cp949prober.pyo
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/enums.pyo
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/enums.pyo
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/escprober.pyo
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/escprober.pyo
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/escsm.pyo
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/escsm.pyo
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/eucjpprober.pyo
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/eucjpprober.pyo
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/euckrfreq.pyo
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/euckrfreq.pyo
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/euckrprober.pyo
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/euckrprober.pyo
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/euctwfreq.pyo
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/euctwfreq.pyo
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/euctwprober.pyo
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/euctwprober.pyo
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/gb2312freq.pyo
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
RavensQuest-1.4.0-pc/lib/python2.7/chardet/gb2312freq.pyo
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target RavensQuest-1.4.0-pc.zip
- Size 242.0MB
- SHA256 fd873cc7f817ddb3d12e2248e157a801ade4b5844889402286d3f24d4b25d56a
- MD5 ada93fc9a6e41af1f9fbd71c20f98aa1
- SHA1 95de4ddebdd5abad09952f47d0aff56625c40c29
- SHA512 b141011743c8a20e4e897a2ff1cef3bda252b30e01e92bad2bbdc2866ab6541c068a1855a461742cc9c8c82ea6eea99f99e576f1ac7895bed8ad703dd5c33f55
- SSDEEP 6291456:VmfcZfCEyyjWNi7kh8kz6jBGLjLIE2RxGiAyBgQ74zaXuQ:VmfcZJqN3hlzOB8wEnyBb5X
- TLSH T1A2C8337388A089DBE5B7763AA33D5592181335F2242151F7AC1BBF9552CF2C0FABAD04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target RavensQuest-1.4.0-pc/lib/python2.7/chardet/charsetprober.pyo
- Size 3KB
- SHA256 f4cba6e4ade315817dd274a27792bf7b7e651da4431f17e974b459c5e93aed41
- MD5 480415e6d0ec8e28328e483c17407c60
- SHA1 72f37a2708bb097cc64bf0852063452951af09d1
- SHA512 502ed9e31d2cf85c76f7748dd04c5bd90c1b4b0a0ff519ba6e5f3f08152a1ce7936f69b4b8ca8f83dbeb42a1ac7a195ab580d85bc3551bd8c06b71c1204b22b4
- TLSH T148718D80E7908917DA935232A0B7062FBB79F5B351416B813274A67918DE25DC93FEC3
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target RavensQuest-1.4.0-pc/lib/python2.7/chardet/cli/__init__.pyo
- Size 188B
- SHA256 4066d1dc9a93c52c30f805ab7128919b4de553ccd4fdd15721ce1fa4964eeb80
- MD5 929f28ffb30b9fffa3383ffa0b8bbe6c
- SHA1 a17021fe23e00f400f3d0ceb8a75717b876d86e9
- SHA512 ff031d6f7bbeca594427758db5e477b283a295841cb5116c9aecfdbe89444a28dbfc489a1d396d9271332a9255e78cf9e8dfce4dc779568b180c8d3335f0de54
- TLSH T14FC08C50A371C143EAAB9636B107032E8B9DB0B351A03A817268176D0C9A48C0E3FECB
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target RavensQuest-1.4.0-pc/lib/python2.7/chardet/cli/chardetect.pyo
- Size 2KB
- SHA256 8260c1b7bcced4f43408ea690cc02baf6accfb83919fc0389cb7e12a45e7f3f2
- MD5 1ecb37dfc04aaf73c7e61bf5369b648e
- SHA1 672721f67aa4e30ec0332dd11da9df4f4d9e7f6c
- SHA512 7d560d66c02629185261a030be5c81412e8f4f142060a359394ae6f6e37711409d5d914eef618f6aec4370478af506507451db08cdcd919bf5d6ac50a3f6b12e
- TLSH T15B5120829BDC82978A950230A477472BCF35B2F31684174131BDB1782BE9226957BFC3
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target RavensQuest-1.4.0-pc/lib/python2.7/chardet/codingstatemachine.pyo
- Size 2KB
- SHA256 cf595548d760f34310d8d8cbdad527207996bdf9a6a3a0b33f42dfd85ec58d27
- MD5 327d5ee0728a184b9edf32b3a72b0fc6
- SHA1 df52d92b83dc329dac5833cbe9d8209ee7f530b4
- SHA512 cc61beb1a3ed291ecbb2d91dc2b51dcaff5b61102188975906ed032a0e04f6f4f26d148ccbe8d45bb0d8cd878f6933d3e10de289a88d28105d46401649bbb68a
- TLSH T1FC419D40F3848947EE6B1671B066113AA67DF0B362016AC233B876362D8A18DC57EEC7
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target RavensQuest-1.4.0-pc/lib/python2.7/chardet/compat.pyo
- Size 437B
- SHA256 8d56d9085a7e301ced09973508c720ff0a204ee0bb4aabbd3a68a9b51ea43773
- MD5 aa069f9db558040de7817ddc2f574d0e
- SHA1 44fd7623b00051e1dad2382b221d2a606a46ae27
- SHA512 1b03da0cdf7ebee51e41f54629812935bcc99514762a03ae9b55a4b6841b73cf37e6e2ae5bd4e776008d2664a5302853c9c37d48c1eb52a1ac8e05a5c6644e3a
- TLSH T1C7E0AB40BAB00953E9EBC338706A01671BF8E5F26304F6436F58877650ADA89006B6AB
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target RavensQuest-1.4.0-pc/lib/python2.7/chardet/cp949prober.pyo
- Size 1KB
- SHA256 f77659887ffdd58a64d31ae186cc7d9713ec202e37c067456658b4098c6d1357
- MD5 5d87c5d4fd0c0b961aa66880436aebc8
- SHA1 6a4c3f855af4fd67233e1d8da13e3a3ccecbba43
- SHA512 39cb608054e4e3889dfcdc871e9193d749cea691e496c39ff51cb7a975c1960da76e009ad449e214e22e6ef390462c17998f9463e947599dd35bf0a11c5c2147
- TLSH T161315AA0F7D48557DAE31636A067023EA6ACE0B351502AC22270AB751ECD59DCA3FDC3
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target RavensQuest-1.4.0-pc/lib/python2.7/chardet/enums.pyo
- Size 2KB
- SHA256 d2195c142de0887c42b49faec1dc9d60ad05244a5ddb97412a43225ca6a90bd7
- MD5 6671401bc804f6310ec1f355b29fa48e
- SHA1 3c525a2dcf3789c740ebb54cf92101b1a378bf51
- SHA512 107ec3808e4031a0b2a4ff9a38d3fb8cb60cd4669c445463a1cc7d82ac47e12ddafa9161d867077511e2ac669b68e99ae8fd50b1c13f3483688c28a8537ac4be
- TLSH T13F518DA0A7988493D5D64339E1B3125FA668E0F373410B8A662477750DD9A8C897FFC3
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target RavensQuest-1.4.0-pc/lib/python2.7/chardet/escprober.pyo
- Size 3KB
- SHA256 3f5b1c6dd899c8f4fc7005ba255e455f773ed8e55888e9bac0c528c47c05452d
- MD5 b611f092515b870ddfc17ad0a03cc201
- SHA1 28d0b90d858d40b7546eca2cf44ba29d878c3458
- SHA512 b242e0a4ec8cf8556b2f22569abdc01731137fbb5cdd1967c27e7a253e36fd1df00206d271c87f24866856378d22b1af54f2741c3840ee3d4264d932d1e79810
- TLSH T1ED611280F3D4895FDA971236B0F6122F9D39F5B365002B9272B8663118DA059C93FBC3
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target RavensQuest-1.4.0-pc/lib/python2.7/chardet/escsm.pyo
- Size 7KB
- SHA256 a5aabe2f53fdb36457fbbc181f5eb60e40978deac2cbf9aeecd73dc6971680a4
- MD5 17f04def0bd0b202e225998982f77b6b
- SHA1 c587900677b687b361bf205c261bebd5829e1cd8
- SHA512 48b621d61714a527ef492a7d23ab14c523e29aac8bffffcfd2c6efbed52ef931b8377bcfe42848536acf0bdc0ae11d3ceae826de1bb5cfc1386d65d11099eca8
- SSDEEP 24:9yyyyyZBL/bHy97yyyyyyyy7CvIiYSMIyyyyyyyyyzBEiCyCyDm6pcyyyyyrfYBH:SHMHphCFkb9qyR+cBEd
- TLSH T134F11B42B68D4F07D5EDD63E905A53063930E99973C29B7732CE7411AE873DA0C269E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RavensQuest-1.4.0-pc/lib/python2.7/chardet/eucjpprober.pyo
- Size 3KB
- SHA256 4e683f49064bcbd13ab114bc08d3846c90d223f9667c080e06c960b54a8525de
- MD5 9a4b44f2a942e86676d3e886c6f7ab73
- SHA1 dbd00fd02e526ab2c434c175e969405c7af1e054
- SHA512 a103adbbc990fb5a1cfedaf8598cf898544defdc36168f3d5d4851c485ccfedfebca86978a7abb7ebb2a6752de121dfdf7aaeb2cc4eaf4c83dcb6d8bcf06a9ac
- TLSH T1AD612390F7D4C54BD9A20135A0B6023BDEB9F5F311021B9227B457352D99219C93F9C7
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target RavensQuest-1.4.0-pc/lib/python2.7/chardet/euckrfreq.pyo
- Size 23KB
- SHA256 c14c9119fb73fd4a84f514d6051009d6144a01fdfa67d641d78b5cc97187f6df
- MD5 2303b9b0e40846ce8d045537a9a20d75
- SHA1 ef7448eaa223d13c1232254b7d9a7d936e17a2fa
- SHA512 f8403eb81713bbc08dbfa4ae6c6814029a3121b0f524c05a9a3c2b8e21841b9ec8db0bf0696d9e021525263824a209b1dae82b46675491b4a34c9b68f84a8a2a
- SSDEEP 384:xVfvxjZBlYg+I2wJ3ZL+xyNPDuXr5yHHEwcAVfvxjZBlYg+I2wJ3ZL+xyNPD+Xr2:fjB+ePZdpDuXr8EsjB+ePZdpD+Xr8EI
- TLSH T16AB27972FD564F749FCAA467B51B4B7E8251D0EA2F42E00703105AA98B81BC75F07782
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RavensQuest-1.4.0-pc/lib/python2.7/chardet/euckrprober.pyo
- Size 1KB
- SHA256 6cf383e7a44eb0ff7d6d38ff3a4731e29442867c6c84cb7409803d5cf6abb85c
- MD5 3aa6503a4ab95a0e13b10b44fec60fe2
- SHA1 117fb71775fd143cf6e171335d14719b8b706c82
- SHA512 372eaa7b06a6602c8871d43b82acede0a9cee70fa2d6893f54523077b7cb375fd7e3fa6439a5f86e3c695c8505ddf1e5761f088e3a304ff355e794b8b35546c2
- TLSH T1FB31BCA1F3D4C107DAD32236A067127EA6ACE8B351501B822270B6751DCE64DCA3BDC3
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target RavensQuest-1.4.0-pc/lib/python2.7/chardet/euctwfreq.pyo
- Size 53KB
- SHA256 b377d6c96c25fa8f0f176fe7000c45c7eac3ccf1a9ffd07701ffc805e043fed7
- MD5 3ea49dadac2415ebd661c04d6fee419b
- SHA1 a0d7d6258ad0d187ac8b95c28bc3b9493103c152
- SHA512 e315dc6ca8a33b1b8aa3c7dcba98d19f2c3f2781e0dcd6ce500939e43b4474cfab56675c97def19795619af630571d01f29287ee11c3d87c66a7741d999b33a2
- SSDEEP 768:rERMnbZG1m4FosjrrDmNH09WDlDMWLSG5ERMnbZG1m4FosjrrDmNH09WDlDMWLS/:SCEtK+rrUfDlLRcCEtK+rrUfDlLRw
- TLSH T1B733B0A1FD585A214DA95B1632EB0B2E1124D6D22B10EC5B2A615CFCB7E13CF7A8234D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RavensQuest-1.4.0-pc/lib/python2.7/chardet/euctwprober.pyo
- Size 1KB
- SHA256 43fe60646336936bda4b9cb624b0111a5131f4725ec1c5a7b3fe87c1ff4196a4
- MD5 fbba130f42614ab9b65c61d9729ba462
- SHA1 2cade86a790af69f353191cf7dc532cb58bb48a0
- SHA512 513e10e72345fbcbbe488822f2f14fb8f6ec55388d7c60c6edf67e3f3ef5f007ec895d7e45a43cbf72f07f4724c7f1afa15b75017008237c33012984f6479d03
- TLSH T12B3169A0F3E48547DA93163AB067423FA6ACE4B351502AC66270B6751DCE54DCA3BDC3
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target RavensQuest-1.4.0-pc/lib/python2.7/chardet/gb2312freq.pyo
- Size 37KB
- SHA256 aa67e9a2208a0b894fd5aa41cbd3cea9c1d17874aea871ccf242fb4c69431f65
- MD5 8831236fdc21a48af5ecd4d4a9f13ac8
- SHA1 4999cc1b9c3e758a84651eff7d94e0bc9d8d6255
- SHA512 54b64385f6e04e75debff8c02f2b45d39a72cad705deb2aa677596b79c3aa474d45d4703ed96d95b2c460507283234af2fe04643f6723065b89f1ef433dd6de9
- SSDEEP 768:iixWHiZHKhpGjXbOeM8x0vWDixWHiZHKhpGjXbOeM8x0vW5:iZHiBWQbzxiWDZHiBWQbzxiW5
- TLSH T19B0333A2FD584F304EA9335276DF1B6E1010D2C22A15F86B4A641CF8ABD53CB7E52399
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10