7e398fac50d05ac3b9093006628c82cbb95f0b9ef7176918c7b368610ba32f50

Sharing

Copy URL Twitter E-mail

General

Target
67-CLIENT-SRC-FUCKED-BY-MITTKEE.zip
Size 1.7MB
Sample260802-qrakdatele
SHA256 7e398fac50d05ac3b9093006628c82cbb95f0b9ef7176918c7b368610ba32f50
MD5 c66b05f147a474c812914b819d6cb12d
SHA1 096d569c7564b2f523da842836122ebe586a61d9
SHA512 ae3904546f1cad43754da5bf1a3fd928904d92d28d06441c5013fab14b65933f13bc8dbdaa6920c4d11d7ef7a067ba2dc08fd181450c0d7f4aea035f3783ba5e
SSDEEP 49152:7I6LAM7RCEGrjrqzXLI29YLmx1rTSThqB:hLAMRGrj2zXsLGRuqB
TLSH
T1CB8512D7CA5C5531F8B3127DB3601D21283ACBB86256ABB4451CA0FB3D1FA992E8315F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  src\main\resources\assets\sixsevenclient\icons\client.svg
- Size 240B
- SHA256 7e599259210bc30e5d431edfc45b2143f621dff884d4da2155ce095beba04ea9
- MD5 68233ba8f0eaf79a625890f2e20a7195
- SHA1 2079cfbbe8694dff7b17e6e71d5dd9bb935f421a
- SHA512 7d9b0de68ee4c87029a4b0e7abaa3948733094b5765a5c162caf61b8431d9cd073cffadada95d2466a54438378fafbfff3fc2c943f161d70ab86e8372829463b
- TLSH
  T19CD0A71993498C3CE8550F74EB35317921162042468C125DD1AE2736B201DDD25379D8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  src\main\resources\assets\sixsevenclient\icons\combat.svg
- Size 197B
- SHA256 475bb0aa3eb062a22e2df88c70bbcaa66f012b143a5fb992980eca470530c497
- MD5 a55475a1640ef5327a2688287582998d
- SHA1 79d2431abdd6885df5d4712045c7b1ec9ccedeca
- SHA512 383ea1d4928ead3212a70631c21d0abe885b32b406242b6629ffa64b952410dddfcfb9e9de3a6add2c6b0992cc5ac4b665fc27add3dc099d27fbccc60fadc417
- TLSH
  T182D01216A24DED1C955481AC937734A5103F20D9138E1219F040686358055D7383B2FC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  src\main\resources\assets\sixsevenclient\icons\hud.svg
- Size 289B
- SHA256 65664e47f3f23db49ff8f773357fd02225dc54c2baee02ce068c474483633b0a
- MD5 b00f370b64cc497c2f1e2f77af44352e
- SHA1 d225e89d48071368d8d977021c4b48b4668baa33
- SHA512 6cf5e3ae9cb8af795b485cb07267ea4bb74c1cb7de16266dcba3d42b26b2a2ae07bd191564fce983fe9f5b46a4c52d598761f55b5833c986d86bd6db8b7ae2a5
- TLSH
  T197D0C22653AC6D6CAC174A24DAB27272066E7450B658106CC8BD30351103A5DE87B8DC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  src\main\resources\assets\sixsevenclient\icons\misc.svg
- Size 438B
- SHA256 0491ca89f42de786de60a9ae37a0a734ff09f9d2f935da925dd8fa7bd063fae0
- MD5 377566b3f8471aabf7c83aaeb0f26258
- SHA1 1113773ac1f6da9ffbacaf96e97a6a83804475f9
- SHA512 8995958dfeb058ae7e1dece429aa9c27710f7a8cc2358c24e45b80bdc3bc977500d14afc9c36e6da2bebf8672176c89e80c12efdfc052724b9d2de4f519c861e
- TLSH
  T1E2F055996028481EA434AD3DDA34707053CFB07FBE84700CC5E9762211012A8FAFB8CC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  src\main\resources\assets\sixsevenclient\icons\movement.svg
- Size 474B
- SHA256 3060b3365c92a7d093f3ca0debc1e0ffb60a2e68768099a54e08d60b3a07c93f
- MD5 33aac432b73ebc0cd53534ebad0aa90f
- SHA1 55598d2d82261ae4edd8e67f357b7ee655ccae21
- SHA512 6df4046cdf2c8aedf3d0ffd9c62537e8920763c0de4981383ab9d58226e7156547cc64303982a49326e39666afbab54cc6d6808b581de28041a82f7822ce4c1e
- TLSH
  T197F0279C8254471CA9224F28D754797013BE047372448A54DDFE94734113D8DF55BDC8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  src\main\resources\assets\sixsevenclient\icons\player.svg
- Size 505B
- SHA256 29374b85f7eb91655843b6ea2e3ffcad7dc4bcf2c3afa63909c1d68956ed9faf
- MD5 ae2e5456a433b2c4a87001a2f95a00ac
- SHA1 1eeb7cdb9116e88290ef036d5cf035ad25b96740
- SHA512 2b8df54dad973dfe43ce02793599cd085f434235e465308b5d84a04c93a3b0d3789b220134b059f1413782ccb348e676bff65e62f75c97c944be47be7a8e878b
- TLSH
  T14DF02E0F572C5D6C763A04BCD72939B9025FA057574D3B69E065307021461DD3A3BDD8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  src\main\resources\assets\sixsevenclient\icons\render.svg
- Size 418B
- SHA256 3aedef8ffa899fef9518dc47f22a4f0a9c8fa6585ece3ef1d9f8eb51c6230f3b
- MD5 74b4768b7ba46e1e80802ffbcc4ae952
- SHA1 816bd12e63cdc800e378ecad8dfa281b0a2789ed
- SHA512 737951003928231b9ef2cb504275a898a71c6c57fe9178a0a60ec229d4ca0ad3303ac5e66c593a1892e020a92f1fdc684e7ef9c6fba3a1def5b50d80ef7affe6
- TLSH
  T1A2E02B19B3447D2CB9648769D365757941FF61608B0D6209E05030B1DB1AA9E7B372EC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  src\main\resources\assets\sixsevenclient\icons\visuals.svg
- Size 413B
- SHA256 41e74568f27848e381e887b56fa1b9ff6b2fa88071ca036493af656b2abfaf9a
- MD5 4f5a14d06dc0c7a85377f07a6f394e44
- SHA1 09757df1d9aba2267b5bd6b474c857488a57059a
- SHA512 80de7b833acbfde70bef1c0484eba2a3c7eec74e9749eeb7c87a561953566a126d99302139317d08f57b39cd50b60f85f1099ceb97bac7bed6586f711d130439
- TLSH
  T180E0226A83BC9D2CB922C931CBB672B1461B21046A082228DCBD64301107B6EE4B7ADC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  src\main\resources\assets\sixsevenclient\icons\world.svg
- Size 689B
- SHA256 e2409d661c09abfa5f64f5b9d8f5486d48f7426e1e9cd8d0462aa802debaf6cc
- MD5 4385d6f9d63a791c77d04262a68fd08a
- SHA1 60399eaeafe42826a76988fa3414e2714313b177
- SHA512 62ea69ff3366feeb7e124c2b524e8e2ba6ac9b25bfdeb535887f6e27159ac71449d1ae0a80a118a67e5966e36fbd0fca5be60af26b4b98ebbade8cfb75865a6e
- TLSH
  T151019E4DDF964F2CF8B31B2CD74471B0241BA389599C72AEC9701830B25738DB2275D9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  src\main\resources\assets\sixsevenclient\spotify\smtc_bridge.ps1
- Size 10KB
- SHA256 c112ffc504d49d9185d662b73c7822e824d05cdf0408691a3ce03ab95223e74a
- MD5 8b426f349c72bc6414e131e770c2d468
- SHA1 de4562d7549ff0f265a962524f0aaef04a53d86f
- SHA512 ccf597925af503ad7d40ca689c8a985c63fcafe80659e0e7b646c285c85a28999708d32daef562a73d88449af09bc7a1b4e79c0487d9296db35688cbe4931531
- SSDEEP 192:gLCcmwZiQUUgd2k8F04JCiRgdUVcKsyDDw5qfyDj/7+vckSGSCybIKDug1Cu3/Ow:gVrkUdiZqkUKq0P
- TLSH
  T19922F5193DD3A0792163E03E7E8E9242E734C40321AE7C50BA9CD695EF99DA2837D7C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Command and Scripting Interpreter: PowerShell

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20