de660b8a86eaeeccab0c7f22ebdd7102b6671ff59fee2839294c843454e1ce36

Sharing

Copy URL Twitter E-mail

General

Target
Streamer.bot-x64-1.0.4.zip
Size 25.5MB
Sample260802-km1ccafn9t
SHA256 de660b8a86eaeeccab0c7f22ebdd7102b6671ff59fee2839294c843454e1ce36
MD5 808c7f1a1bb22d41d77c9c727a9a71f4
SHA1 3bce8399dd413912e93ad70e01155abe9ae08067
SHA512 d52e12505305d1ad9295a5f504d2911936b91debcb5d534897ec9471bca159ea09571eeba4c3e48794b502383fd9306e9225f003cc9f020bc281d2f7c73f99af
SSDEEP 786432:ppoz6oWDxF6z7D06JJCz2t0bEIlb19NS9B6srzxzptLI:XS6oeFQXrHpt0bRglrzpptE
TLSH
T16447339CAC7DED7CD867B735C0FB0B983950305B8E921AA3E4427B1857C5A9CEB07186
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion trojan

Malware Config

Targets

- Target
  Streamer.bot.YouTube.Grpc.dll
- Size 114KB
- SHA256 5e09d5973f13fb44319d7a87fea9226d4aa967c7ccbc7a739f4c6c11c8c3b5f0
- MD5 a1a32b46ebc9256307161a5195f4c4aa
- SHA1 baf9816149e8ab66b55f2f121680125f60b4b373
- SHA512 9f079ad0203dc7fcfb8145b15b110e88496277fbb3a0e61d83c157232c3f6f764105604105a982afc50707e79f68b2d5006c6bf68daee3a3442ac3b837a462c3
- SSDEEP 1536:dAKNfaeeh85BJyL3xI6VGAd8tMAwhQKfEQv3I2LwLdIkTvFhJhlzd6zpqxFNKS:dNNfae6ebyLBLVGe5hQKn3INBqpq7V
- TLSH
  T15FB3E8187D9C95E9C6AB9734F8D818E09BB4E6973501EBBB9C0CA0C64543BC0E5523BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Streamer.bot.YouTube.dll
- Size 607KB
- SHA256 6138c8ce94a316b6bd18f0edcccd886d0075d855fe521564bf52b17dcae09827
- MD5 818e64f503dbba97ff715b59e43de5db
- SHA1 c23fb1080f39a4898a7d46e9d3e19e3bde8edee8
- SHA512 136faf522a2c0ddb94a4fe350d71ffbc53a91dfcabab3851dafa82950b8c3a1f27ee2cef6bf64bcd97b27d0f87d59b3065cd39fc424cc7cd8f5217317368dd55
- SSDEEP 12288:wWz7c7MkdKiIBc5+HAEDpfXne4NAc5FQl2zH43ZKRMJiV1:wWz7oXVIBZ7fXne4d1
- TLSH
  T192D439893650B79FC81BCA72C9651D34E7A1A0266317D34BAC5762EEAC0D79BDF040F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Streamer.bot.exe
- Size 17.4MB
- SHA256 005b8924c5bc64774cc0e6c61b6ee8aad3ffc4ceb5e93bce2955db2c788cd34f
- MD5 68a6ee711307a710b6c011f819996012
- SHA1 cce939c64ef9c10ac9aa50815ccb1806eda2e1ef
- SHA512 23ed5162217a8532fe76919c001a9c84928b8710d0fd5cb05e8f097e60856354f0b9892ab40b0e68bebf54e0c37c2a7c784fc25e7d97486d64374662624e5154
- SSDEEP 196608:JXJR9qOlX5zk38MBzGaIpW07E5Y0XTbcEjrXoqmeTx5oKSnPTFZc+HKo9BF89cES:JKr4qmvcc789jS
- TLSH
  T1EC07298D796075EFCC17CA72CD641D20EBA0A4AF531B9207A053A2ECAD4D6A7DF150B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion trojan
- Checks whether UAC is enabled
  defense_evasion trojan
behavioral5 behavioral6
- Target
  System.Buffers.dll
- Size 23KB
- SHA256 2d78d770c9cb997199154ae8c018b9f1d1efbc86729f7264dde6dbad2a12cac3
- MD5 902760412abffbd10be14842e83f0c09
- SHA1 d87680e1a96549cf45506d17566ec08c27a770d8
- SHA512 016a283723e32eedaa3b3c6d92bbd0d4c4d2663ab0f0b74bda56d6d2d742632ea0005b3c0c982ca77dd152b839deed0af07228172f059c9e0840e31b530bd0f2
- SSDEEP 384:7RJyzxhqFAB5n55560IZplFuA6ccxReXWd2WkRnfLXmztvGHRN7LgFA9bFs0R9zJ:FJyYkx60InTuP0njQtaUFQZs49zUS
- TLSH
  T187B27C11D79C422ADE7F1A716AF9DA862E3983C16102E66F144CF5040EE37C9DB31BB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  System.Collections.Immutable.dll
- Size 253KB
- SHA256 77d705fe51f224d77b25fc06ede39e2921f08b46a961a027d6ee49a4bb19c127
- MD5 01a319c7cf409c69298b2874651053b9
- SHA1 eff11d47c2b835c0a64d6004e5baecfb97bc151b
- SHA512 ba881ccdc1cec9239d94b33ea889955cae0b8e5d595f1c9f15120b6ca2d56a0d5fe4ca79ceec4e06e58f01f2947de001f287385ded4f310328c58998bbe41513
- SSDEEP 6144:Er6Z7DVH0TQnY6GAqxDGDvmqB+cTv6VK1jfz:ErUVS6yOv
- TLSH
  T178442901B3CC8B32DABF5DB7B9A1D06A4B31C553E19BB7AA50E9FBF05C827046C54099
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  System.ComponentModel.Annotations.dll
- Size 42KB
- SHA256 04113c8549185519f3202790ceb23df609644872b9c249a56d2bcf59566102c4
- MD5 7d3d14b0417a68ccdd9c51972ff74863
- SHA1 ceacbd53b6a02e1f7337a6b0058924e1e11949bb
- SHA512 b2d133214f21d700e1af0c248dcc11ef66ea6da62043ff6d5e900fe2a1665d75583e4cd218526a146f2c62e22adf4ca2fa3b8879ae0f5a2e515e2c3a5184ce9c
- SSDEEP 384:GnXppnvYs47bNql0kevR9SDQxSWIfYYL8oRT3KI3lUlBmeEZeTfyDxdQocwc1fVZ:gXDQsPurQcR3y6JOnSHDYFD9VioLQJ
- TLSH
  T10313D842A7F81139FDF34BB06B38ED96597BBED66D22C12D149890CD08B17D08B6173A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  System.Diagnostics.DiagnosticSource.dll
- Size 184KB
- SHA256 1887592615fc08bbc91ad62307c8c11dfc14c45bf120d271d66be4a0d1a149a7
- MD5 680f54b3fbef0f75d9903188d04cdef7
- SHA1 708b2deda0b959c72d4b18f64e477bacd979bbe1
- SHA512 27303005e1de42a339711115c42fa01c88a60e2cef67cffa95a4f28569e89b3afedd0773fe3bb8730a92457280408c996d38fac4c42471c77399d992be644524
- SSDEEP 3072:Ko4D0KyYm46XJ6jgo1vUHbQ82DJqlZet8FTTpsm35S3zSVVYX43l:iByYm4/1BKlZeCFXphfVXl
- TLSH
  T192047D1063DC4ABBCEEF17B5F16088024376E957B922EB6D2A44F9FD1C137918A12367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  System.Drawing.Common.dll
- Size 48KB
- SHA256 36d80c92c7f51ccfdb2b758640faa07a32f52ab48722b4e2ba95c5d5b7f70db8
- MD5 d3789d7ffa9157310079c5bdba97b3ed
- SHA1 acf995b8a4f2cbe1afd921c3c18a2e8584c9ed1e
- SHA512 59255942444e50e86b7dcd31e7004cbc1969fafbd3f3334d43eb6b7d40c2af0ab6278d5434ff6b9ccef61d248f3c34d1c74779b9d403fc995ae44033ef4f5cf1
- SSDEEP 1536:PH1D7k/tfRi6EpO/2KzLVxuXeCXS5R4353zd:6/tfRPEpO/2KzxxzCg4hB
- TLSH
  T1B023E842B3FC061EFAF70BB07ABA94155FBBBFD22A62C79D1054400D25A2F948571B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  System.Memory.dll
- Size 141KB
- SHA256 d5e8e4866f9cfa66f7765660f84b210198893e55335487afe5ebda342c0e913d
- MD5 bd7f42207f4fdb9c7eafb0013abd7334
- SHA1 96c87b7148805a0adcd4b9e23162deb06d7a4702
- SHA512 a903fda3c5585af8978918c6fa5dd7649e84bee41d0dfa09667e151819d74e16cff626595eb9760588bec12c0b8ec31f527e7dc84800378683156309c3247240
- SSDEEP 3072:IPgSRYPuMbrhcabqwwwUumu36xNOIRJAW:OuPaaWwww4u2HX
- TLSH
  T161E35CBC67C6DD12CB5F8C70A028621A5A31873FAD43F7E615C8E4F425A37A936193D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  System.Net.Http.WinHttpHandler.dll
- Size 158KB
- SHA256 bc6bcc7093773346080001c6efcc30009f7f9b778fdd8c096c7e4605f4515d42
- MD5 34ea903e2b9f2e18aa1577b674391251
- SHA1 92cc94a2dc3fdab984c70f2123405452de5e4822
- SHA512 b4eb0612ddee128dc5cc07fef72a8ac8298c3c632bd09c0765bfc94bc9fed4e02f4c82ffdfd9815ef82c9cbe688a58da3e34f1a46bb3bb31b347a71617adeaba
- SSDEEP 3072:RgoCFJsuW/Lbc3hLEcXU4n1QzkbadtFHfyoWNa1Qe:RgNJa/6LEYf+dftDQ
- TLSH
  T1A9F34B2173F85719FAFB7F75E9B691218A76BE812931DB3E050060DE09A2B80C970777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  System.Numerics.Vectors.dll
- Size 107KB
- SHA256 20c2fa81b8c70d651099d762954f285fd4f942e63b2d7217c145dab8d4b2f4c9
- MD5 a57f205ce75d4e4a19020e8b627469c4
- SHA1 c5583c3257cf193ff4736671445f8da64366a6a1
- SHA512 6b5985cb7ae4daecd1be3d6dbc709171ec94b89c0671aec1dc7288e08f5fe172900be75da1c43b75fff37504a33e7f8992c66581e562397f47e2ef2cefb46b54
- SSDEEP 1536:2uIaashZlF/cLecJE3+DWG/E2NstmOz+IAKvR7NQcmzF9:2zaashZzWeca3+DWG/E2itDf9NQ7J9
- TLSH
  T147B3DFE22F6C655AD7CF9F7B20E64E120B331963C403D2E160DC67A227A776729421E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  System.Reflection.Metadata.dll
- Size 499KB
- SHA256 8fc17840e7b7db173e84fc6c7daaf92441069b83a07b2cb054599e7dd36ab86b
- MD5 18948fe516947f4d6a6f576042967b58
- SHA1 9f7c98dbe619a4aea203cd083e5025430a643211
- SHA512 d5691862252e695e17dce54e69a51650b9aabf1b4e4e0bc517bfec2db33c40055d8f86015db71b1c78c73f0fb04d719cc617a864a36735f0877268b03137ea40
- SSDEEP 6144:RrMoL5Z6CbHle18G4P4ALO6Ick8YQxUXnh+CcvSZ8fJ4pinY8GgtWTStik/Z:RrMQ5oWFOU0M4hckcJ4YGgE+ikZ
- TLSH
  T1D5B45C1233F8772BCAAF4B79F07504295F71E81A6297F75E4448A62D0CA37978C217A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  System.Runtime.CompilerServices.Unsafe.dll
- Size 18KB
- SHA256 08cbd7278b66f1e68425a82d4b97181a4130d93e3dd91831407aba7212ccdacf
- MD5 cb5b861883d2bddd9833c9fe956406f7
- SHA1 43290cd4aaf80df5d1cf9f242486ef8e646fddda
- SHA512 79de2065d8af3713662afb2a10e0a62c0821920608cc63cc2a47a09dc7bb6baf1fa71612da3ebe22d410ddc92fe52c0261faa019839d241fe9252d1663f4f4c1
- SSDEEP 384:RGbUedrbbxT4WT2WCwnHRN7bEpGR9z04yy:RGpd1R3XbEY9z
- TLSH
  T1F0827C24C7E44503FE627F3485ACE543BE3893960902D72B2582F57A0C973D8AE35A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  System.Security.AccessControl.dll
- Size 30KB
- SHA256 aced52254a8c3cb6ad30f99f8b745296926c49373cab00824c2c4c10ad325b10
- MD5 2d3e0b4ddf8628b41057b2aceef296eb
- SHA1 8a3b1bd9df5d052c24de2304a2928fad86927f6d
- SHA512 faac4233c45a773c4470071b0b2a75ee81eefa45f88b76fea305443514ff9c8429af3d394884933712d1fb7a7a03701f3d9df0f1de345078ddfeeeb5b4dc094b
- SSDEEP 384:3RFGaTHrxhDRtGP/Ksmvt4kyvaMAdB+w3G5h9M9ZV3Mfpcrqmf9wEJqIxVRvFNgp:hAajzDRtGUl4kdWBkyHp98I
- TLSH
  T1FCD2C501ABF81159FAFB4B707AB99E121DBBFAD53D22C50C0514A19E59A2F90CA31733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  System.Security.Principal.Windows.dll
- Size 14KB
- SHA256 c3ae599b5218516915f6542779ef577d5ad5de3d84a116e671c09e15e4591285
- MD5 b40bda63658a012d46f930c243b77056
- SHA1 2aed74577f5f623f7e910adda8ef74a11eea0437
- SHA512 6c60d39858788775e265476b309a04bd8ab6054b30aa37199f199f19907aa103a68fe28cad4db22b2d7091f31448b0d1ab1f54ea7db78735af9a8b5356961734
- SSDEEP 192:oQqIMZJxX3x4YjjEHxj7ligqWFLpW0W65FdQHnhWgN7aJeWyDM0884LfqnajOdoG:3qIAh4YvUqWFLpWGQHRN7WbJlqdo1sl
- TLSH
  T1C56239A1CBE84113EDB32E7056B6C6833C3DE3E7295246671AD1F1492CA33C5CB1022E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  System.Text.Encoding.CodePages.dll
- Size 746KB
- SHA256 67d868132552144c49ad929af33b774b371e3d1e5cb6ad2b67523bcd08351553
- MD5 40f8b2e776e65b772c02356ee2b75161
- SHA1 6b7198566d80d2c9c2d3629bb1bde3cc2d8921b8
- SHA512 60fddbbdae3b546b4ef92751d16b999336c4d51f4d3ffc1846df108f897f3d73c94087687dca35f8b9d8ab01a8f428ad0ad6446c559a5980c12807dd5b4455df
- SSDEEP 12288:s7i7xn7kZQ6kliVreJIHHr0tRYbKr2KtG9VKABC6rPDdC:689km6k/IwRYbiBeKGCms
- TLSH
  T1B2F49DA066A55B17F9B7CE3097F13012CAF6BC567E02483BB952634684D3BF01DD4A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks whether UAC is enabled

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32