Extracted

• • Target
    pawno/include/nize/DOF2.inc
  • Size 49KB
  • SHA256 a3736c6cc241f6f8a5e4a2add51e717401ecb61b531c4dadcb6f641f058f2743
  • MD5 46fa5b87749871d858e373f162488f97
  • SHA1 7a8e34c8a141ba1612589119f4741fe561bbffc6
  • SHA512 dcfd3488e8763e6cb8f8811230bcdd1d00685388db38779069916777d944fc474813e34cab7d17d95c33fd566b40acf9e84bdbc48cddfa22047e003e3739ddb1
  • SSDEEP 1536:t5xEZVCNSYjSgrPeX3jBWY5DJD1y4eQohtzXdGNYz:t5xEZVCNSYjSgrPujBWY5DJD1y4eQo3f
  • TLSH
    T1ED3357AAAF5C136595A2422AA60A4486EB3CC3733D590435FC3C07643F419679BE9CFF
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral1
• • Target
    pawno/include/nize/YSI_Server/y_colours.inc
  • Size 11KB
  • SHA256 2186db6837aa97b4162a6c094383fec769201670e59bded119a6dac42525521c
  • MD5 5fcc0f8fbf6a9316baefca863861ecf6
  • SHA1 5688ff0adb0e64724be216fb6092640a2fee257f
  • SHA512 d7b71060cec1c44437eb7a51901314ac4c50976bb369c9cadf56a57f1162a27fa1bcde20fab36b43a372a65b0622bd951d9727a6b5394722f9c30d09e8aef68a
  • SSDEEP 192:Pd3xHKaejyqCEqGhOuWqn5Uj3XrhX5uLxUyCWrdjtHbgE0Igr5AXi5ppD0+4SD:PF4YGMRu9jRHcoQAXKD0+JD
  • TLSH
    T15132A6B8EF9EC2753573052E580CD6A0410FE97F662A58E9BC5C810C7F42169B2B9C9E
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral2
• • Target
    pawno/include/nize/YSI_Server/y_td.inc
  • Size 65KB
  • SHA256 c54cff2ee1e2b69dc74780e28c0386141eb63d0bbabe7a62236d4872c1bc8fad
  • MD5 f37ba76cc18d3f693053435c20a09c01
  • SHA1 6f4f8fb597715160c10a99c06e8d07f1098a3cae
  • SHA512 05957ee23ac813099ff450217da2bf4a948257b09ed825347b796ece2c8393e38188e66eb76b97811f22870a08b18b047b7eb71b1349a93d7d1b8e310e1cb7a8
  • SSDEEP 768:3YRPF+prb/Twmpj370M7iBwm94PWU3jC5+OhFhS:umpj370M7344PWI9
  • TLSH
    T19063A75E9D1E47164113D06C9D18E3C2D82D61BF235CEEA37A5E2D38981E4E6C3ECE68
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral3
• • Target
    pawno/include/nize/YSI_Visual/y_areas.inc
  • Size 85KB
  • SHA256 694f4396e4890c01103bdb3209039e3a935edcaa5062100e4ad574060164a32e
  • MD5 d527ef014b14c13610d19b36eadd892e
  • SHA1 3915585d52a153701f896b3309d3b2330fc804ec
  • SHA512 f9fb5d17f148da37eb3b2d8a5e060c373d17f5c76009752b3574a30f031b714e503a0f16cb8d274876da5a6ee75806f1032b9101b141e91d457d6dfe53692b77
  • SSDEEP 1536:/bkSitfXXs+FgFkFFFAvT0G90V22nFRyACyAl:Infe+7irBc3nFReB
  • TLSH
    T1558371AAFE2D8B0E0452C07CB94561C5E20D67765B2E4CEB7B8DD798BB0815803BCDD5
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral4
• • Target
    pawno/include/nize/YSI_Visual/y_commands/funcs.txt
  • Size 1KB
  • SHA256 222235e04300b553ff57ef51220d8b93fd6a78fcf5db8d75f06fab5ae2d7e48f
  • MD5 61ff1a070e3a88ee6e2b923763f2afa9
  • SHA1 a0355cb7521f73e1fdf075b798f97a1d10cb4aa0
  • SHA512 55f24dcaf5aafb14161239dc7e9a7620feb1c094b59fd98993d0cdce932eeeff83a48b75614c3f8d00f688de604241ce97534ae82effb68a4c59c7da8ad1bdba
  • TLSH
    T1EF216B132FF88D6A4005C66C8F24D794ED6793A9A32CE26F189E78245C845D0292DE58
  • MD5 SHA1 SHA512 TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral5
• • Target
    pawno/include/nize/YSI_Visual/y_commands/impl.inc
  • Size 54KB
  • SHA256 80decc382747101619046e56b2ad30a76c20df226b066825c40aa577d72697cf
  • MD5 6b9e29952abb3afe5d0041175908800f
  • SHA1 b7cb1daefb5a0bcaec11832f959064c910b99524
  • SHA512 41a3a1934d8df56d08c892ba2bb0215ed150bc765dc9d01dba4084bffcb960b14b777130da856aa606f086b043ddf2ca548b448896fd1bf58e8f0352b5efbf7d
  • SSDEEP 768:CYjDlfjq6hLADJTouDwQUjl0VwQEaE4+105fREUEmoE7Ea2PEDEMLEDrED7WLE2L:rfjq6h0YpjCo23dKCiuaPKNsTea
  • TLSH
    T135431E165EFDCA160012C2388B95D295EE9AE33733354CEBB96D3C185F1C29592FCE89
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral6
• • Target
    pawno/include/nize/YSI_Visual/y_objects.inc
  • Size 122KB
  • SHA256 373fdfcdca57ac6085d68b45f645d8e10ed206b8f700cd904098aa1421f2f5a6
  • MD5 dbc6d7c86b078b6d9665b913b52b1704
  • SHA1 7066e9c0ea25b876183f9384f7bb978cb2dd54b1
  • SHA512 b7f928c80d9642113b4752c89139e5b7387f8cb928d3a044dfa3d1b37b9a4222fa5bb98d22a58cf7e11e4cbbfebf904e6edba0a15b2f0c3802158f68b51f84db
  • SSDEEP 1536:OwxF/40JwaZ2A0ysBwy8vUvcUmSC3WXEpBZwVrw:OwQysh0BSdVrw
  • TLSH
    T1D5C352507E1DEA9D0017C0AA553D548DC62DD0BF222CF8A63EC4EACD9EAC198097DF97
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral7
• • Target
    pawno/include/nize/YSI_Visual/y_races/impl.inc
  • Size 41KB
  • SHA256 0ed177fd2a67b3385a844e25a4116b35721443321fdf40efb15f8e7e0580fa63
  • MD5 d6a12cbdf00421884594dc26b6e31dbe
  • SHA1 0e290d2cb11e187cad44d2c058f0ab63676d10ab
  • SHA512 a521e4bd3a17194f120210f90efaf9065f197165c86e24148c054cc2f22862ca996d62c1add1f1e19d6b6d5842459fa832e0709be37ca18ccccfa666fd4eaf5d
  • SSDEEP 768:CYdP389oj8OnoEBUBFCv2Z4wB+MZPzfzq8J488AO0TLG:rP389oj8OnoEBUqv2N+I7VJl8SLG
  • TLSH
    T1A81375529EDD5F0A0503C168BD2E9399F0B974B72299AE937CC8751CB90C6AD02BFD4C
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral8
• • Target
    pawno/include/nize/a_objects.inc
  • Size 3KB
  • SHA256 dbec4c90242e42a9cd963ac9b65d4e176d3d55c8ba9bb01e3a94014c390eb949
  • MD5 fe4ccdaf82c2f9c8e9a3bce1904df496
  • SHA1 3b8ef6fb53b570d0cb99b037b483e9d49bed903f
  • SHA512 ef3d43aea246c140a09de90d24b26864854e005d831e24a999307df28d64e14e8a03195d44733ce17a1e7013b7297ced35a79362036b5d2c5eefea945f27b85a
  • TLSH
    T19F810911777BF04E41B1D98171225883D46291CE14B1F2A6A8D1F6C98E9B01F2FF96EF
  • MD5 SHA1 SHA512 TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral9
• • Target
    pawno/include/nize/bodyparts.inc
  • Size 5KB
  • SHA256 398d6ed1e7886c34ba634bf7fc6b6c02b060a1618fe3041117360767d3636ada
  • MD5 3ce54b628f41e6b343a440d6f6c7ae92
  • SHA1 c82119d4d2491a08da268d3972e32e8e38883443
  • SHA512 4bf71ef962504134bed9ec224a52be2049048f3e8e75f81f55c1932ec7a8177341cad91d0d70c8d3f7f68883b197521850b62b455ce4c03b87784317d0c7e29f
  • SSDEEP 96:J6ArBYT9qgQZL+BUKgQXFoI7j8ft5qfuPqgQIygL+BUKgQXFmI7j82c6N:60ba5blO0WibI45bzK6N
  • TLSH
    T175C11E00AF5F655D3111C58A65A79CC2F13890FB0915ACABBE4CF18C3B2905E8BBD5E6
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral10
• • Target
    pawno/include/nize/colandreas.inc
  • Size 18KB
  • SHA256 f380ea7fd979d1234a3bb4c8f6570c8ffde422b6ab427386ca5eb2608514770a
  • MD5 d1416908e436026ea9229679fd75f48e
  • SHA1 dcdd465fcfc0a81d984ca567aa3fd3bcfcef7c75
  • SHA512 ee6b510d9813f7573813d34b5e43c05227d10b4e75f9107fa70afbd54c9886e765ecc75cfadbc71b0587d4519bcaccaa0ea5618e1e5d242731f5bf77e07ad701
  • SSDEEP 384:KIAlmOIoTIdRV+pSnkQxdpoTvxwRXb2AoY:7gwde6SAoY
  • TLSH
    T14C8210407B13F1DD60A1D0D2A624AD87E66692ED523AB122B458F1C42F9744F9EFC2CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral11
• • Target
    pawno/include/nize/xStreamer.inc
  • Size 1KB
  • SHA256 6866e831dd5ccc2032c58ecc64f489eb1d4ae55f2ae327452585abc763a877a6
  • MD5 d2b2b6b7625e55c8fa8856f3bffddf65
  • SHA1 87058262178453eae8f12215493db1de683c0afe
  • SHA512 cfcde4a6ce7c861a8da8a43ebcafc8a9fd6753e4578ed1565696477ff8d9c236014fb472d62f26a44c833fd73c56919b0e19eac455aa3aa830c5c57be5b24558
  • TLSH
    T1B13147158D0BA4AF04A1D6EA6584B605F191BCC72411FC51B438E8EC6F9E45C477E39F
  • MD5 SHA1 SHA512 TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral12
• • Target
    pawno/include/primeiro.php.txt
  • Size 309B
  • SHA256 c5043ed2b52774feb48486ad11d5d062bbfb75f4ff0353d83ba49b86ba2f0060
  • MD5 54f83a3fb48795377dcfb82aee952b35
  • SHA1 d3c87b3a66f4cfefc7bbcfb6a8486bdc6b34fba6
  • SHA512 e9ed5e4f82b9b1f496c014044d0ddf485c1aa7ed91137fb2e65e551c9afa830bf52b6a517b374959d09c19370b7aef2a975d8cca0e07788da9c5ff95ff266a80
  • TLSH
    T166E0E7F63205DC50C01734309BC951C16855814441C06DDC10DFC2B772D4B458BFF6D4
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  discovery
  behavioral13
• • Target
    pawno/include/primeiro.php3
  • Size 309B
  • SHA256 c5043ed2b52774feb48486ad11d5d062bbfb75f4ff0353d83ba49b86ba2f0060
  • MD5 54f83a3fb48795377dcfb82aee952b35
  • SHA1 d3c87b3a66f4cfefc7bbcfb6a8486bdc6b34fba6
  • SHA512 e9ed5e4f82b9b1f496c014044d0ddf485c1aa7ed91137fb2e65e551c9afa830bf52b6a517b374959d09c19370b7aef2a975d8cca0e07788da9c5ff95ff266a80
  • TLSH
    T166E0E7F63205DC50C01734309BC951C16855814441C06DDC10DFC2B772D4B458BFF6D4
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  discovery
  behavioral14
• • Target
    pawno/include/sprayTag.inc
  • Size 13KB
  • SHA256 3419e35d6c868c1488414455bab4759dea37c5835796d14bb8a88aa8628383be
  • MD5 15ab1285a729a287643961a663dfe6d5
  • SHA1 1fc883df27c4688dd856223aca3bf4e905e08706
  • SHA512 f8b8bdfdc4f015c8abe98501b46adf54d0649375873ce28b20a2cb3500d27ff99afd473c99ae78b78d49b67f370669a40d4ddfa8fe2ade8a197bae328147edfd
  • SSDEEP 384:lUdE9BOjACXfj6IstGEVnSjpiMYhvNYaCuakKl739ro5F2EA:lUzZN5
  • TLSH
    T11A52531F937A90685432D681EAD98073FB72A3AF35155BD9F54CE08C6F0C41A13B8B7A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral15
• • Target
    pawno/include/xFireworks.inc
  • Size 2KB
  • SHA256 30a6f9f36f1b4d15badebb4093eeeb0092ef87364bf22eacd17765ba82b5a373
  • MD5 59e5bf0d91137690bf573bcb79fbd118
  • SHA1 f145b0acdd487618c864a9e7261f9cf0a44a012f
  • SHA512 be729c9b6faa1ea07eeb3815f524cefc7e40706b74bc2b6aa29aea5501bd25dc2323f1b12171e94d51b87ece5142ac80d0bdd03db6a01367b61f5f087152043e
  • TLSH
    T11751BD509E8FF0887C32F6ADD3095147C9D604CE15215C2AF97C80987FC52E66E9CAC7
  • MD5 SHA1 SHA512 TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral16
• • Target
    pawno/include/xStreamer.inc
  • Size 1KB
  • SHA256 6866e831dd5ccc2032c58ecc64f489eb1d4ae55f2ae327452585abc763a877a6
  • MD5 d2b2b6b7625e55c8fa8856f3bffddf65
  • SHA1 87058262178453eae8f12215493db1de683c0afe
  • SHA512 cfcde4a6ce7c861a8da8a43ebcafc8a9fd6753e4578ed1565696477ff8d9c236014fb472d62f26a44c833fd73c56919b0e19eac455aa3aa830c5c57be5b24558
  • TLSH
    T1B13147158D0BA4AF04A1D6EA6584B605F191BCC72411FC51B438E8EC6F9E45C477E39F
  • MD5 SHA1 SHA512 TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral17
• • Target
    pawno/include/xadmin/HomeHots(Isso e Muito Mais).url
  • Size 88B
  • SHA256 23d0b8c8db3faa700d8347b496978ec9f342e291ff416b1f4070f81e4aa4c971
  • MD5 a625a2685711ca135b17e3bfe926cedf
  • SHA1 07de11852e2816ab815744a49ee1079159b058ad
  • SHA512 8df84c0951b5933539c3bdd4a7d64fcdabce6797ccf51b3334d14d99da0ec30f4401925c62a58c71b88573f7fa21898c014fe055adc7079c4dec58ce23466f27
  • TLSH
    T183B0128C41098084A0038C0D2C78CD00AC01308180C2C1D0F150DF580C4E07B6086328
  • MD5 SHA1 SHA512 TLSH

  Score

  1^/10
  behavioral18
• • Target
    pawno/include/y_areas.inc
  • Size 86KB
  • SHA256 42a5253a86c78ffcecee5204516d3649db9025e2bc2b9f0df65fdb4f8331afdd
  • MD5 0a7384d4fa4428aaef127370fcabb543
  • SHA1 ae1ee9ad66feb16fae0a15bbfa4ca2e581a2c767
  • SHA512 7ab406fd45fc26bc267a3c33fa85c36cd30c19f69ca505d93a6c1e12cd4a29d33c4ccda31b610b05a7b358f9800b7c9057646be82ee0a427c16f0805376bf3b1
  • SSDEEP 1536:7wGitfSYX+FgFkFFFYeqsFWTPVpqn+QcpbLgJ:7olOe+7XRghon+QO8
  • TLSH
    T10D83909EEE1E8B0E0452C06CB84572C9E60D6B744B2E4CDBBB4DD7A8BB0D10952BCDD5
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral19
• • Target
    pawno/include/y_commands.inc
  • Size 60KB
  • SHA256 46c92ba9c200460f61e2b7f0c72ea849f800c6cf4220e4e4becd1661d5517412
  • MD5 6a17c1b95ce2c485dc8ece8074960109
  • SHA1 be950a3a919a9768c7851df8b2b68589ad5b0c97
  • SHA512 4a789f0d3d807da2bf6ba684a6244b70f0d3801cf846605f5e347f2242b880738983cb62440bf1c3017c5cb5c0f5a9a4594d934ead5b5048ca11996f02f90d7a
  • SSDEEP 768:1/5vAQkLzMNyVTOsoHHoLQP3xQcchpTV356:1nozMYY/9YTV356
  • TLSH
    T1ED539319AEFE8B0B0043C034A68DC3C9DBCDF337A754549BF9787D683918558A2AD9D8
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral20
• • Target
    pawno/include/y_master.inc
  • Size 41KB
  • SHA256 522637d383311fff8e5b4adf42b257383ccdf5ed185275729856640171c74fbb
  • MD5 f29eeede452f4b5a4fa9a50c48a50248
  • SHA1 eba587887ada4c346c5f6ff8ee8b2445de2c3ace
  • SHA512 b096ac0cfe672bbfed0e54b8af1891447448f242519593e8348339f88f01d30f3c77590b3672a76f2fb11ab7842c72ad3470d7b4f0a005a2ba6c36799f4a121c
  • SSDEEP 384:jCmQshAsZMNVu43+K5pPpuOnd/RXx+8+4X7YsV1nL9eFxPbXrZdMD2liWCcS5p:2mvZQ39P3nvdjX7YsVc4D2liWCcS5p
  • TLSH
    T18B13DEB50FAE92E4D8622266EA6D51C9F70CCD77931880E868597E1C3F01339F8F919D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral21
• • Target
    pawno/include/y_td.inc
  • Size 54KB
  • SHA256 90c7d90882cf3548979e3fa3256e9e0f86569f3bc6f47ad2bfe1fd0c1c4e8afa
  • MD5 ac22a24eedd44acae48d301327c2df3a
  • SHA1 ab0989aa0152f0e13800666b63da4bf387130819
  • SHA512 4c1156749f7340137910f04dadb608a5474d150e2046ad329c52e4d3dbc45347c3fec6d563d63a6c74b85249845c531348d9d26e3647beffb602917069c4c709
  • SSDEEP 384:jQQ8al83vx14yc4/UI5UsH4DvuuoUyEqqW7l/3tb//211drTeh2Hx2+n2wh2oZ2n:CMyvQsKvVeJVyn0KWz+hJBFzi1Z
  • TLSH
    T18743955EAD5DA32A4103E42C6D1CD3C6E85DA5BF4388EF637E1D1238641D89AE3DC9E0
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral22
• • Target
    pawno/libpawnc.dll
  • Size 275KB
  • SHA256 b7a6d406aaad6c6dc6621889a3e5c006755a16e577a46a806df2a85203813b56
  • MD5 1f3b35dc739f9e6d843cfaa595f320b2
  • SHA1 ac37a03427b356e3e4c1c1fe9d1f10f4a6d97f9c
  • SHA512 549c8b7ee2c4e59220e74053ef0147d35fdf6cb923726956e882c3e5640483e0108c3ccaca96934ce94ee3d387a16f022df86f38dbb6692c6b688ec8fc0734d7
  • SSDEEP 6144:DQUATh1kDLdQRUOi6XqXOKcB5B5jriaCvWwApMtye6cEIfUGmpkRQBfcqlu4V2lr:DQUATh1k3dQRUOi6XqXO9/B5jriaCe/E
  • TLSH
    T15C543B65BF60E028E66391B74007ABB5FCB8EB6D10601883EBC45E22FF74591D6617CE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral23
• • Target
    pawno/nativechecker.dll
  • Size 2KB
  • SHA256 e462acde21d900db805827f4ac31ef51f20672702c0aa3d29341f2252e85b337
  • MD5 f5c94cc1fe554c047d0c1349459b81e6
  • SHA1 b7ba8a3cf37a19ec9d5bc11727a35de96afced6f
  • SHA512 4433933d1e9565128931fb2c7f0c1a41ffec307cc800d1255bb758276b5e5fd0a5d7912c7f189e02882419dbb99e8439b88a37b7d77019bb9ca54b9e79bcaa2a
  • TLSH
    T1975120538F62ECF3C4282B3857F7438837B694E00791C4010A89152922085EC6B68C1C
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  discovery
  behavioral24
• • Target
    pawno/pawnc.dll
  • Size 160KB
  • SHA256 f1525c83537a8a16f35a3b9cd221f141500614a9d308e789ae5aef22662e3a52
  • MD5 529155afcc8db6ce08fd0064df712ee2
  • SHA1 1a3233749e83e16b8bc99161f82703f95377352f
  • SHA512 b8a644b9deb5e5472c9c3400d1ad41afbf548603c02988e15833f843675ffc7d0dae41b8e5cc98079fdfe0ca1d47c5751d7e6ff61d7e8a4efcfe9624213fb2ad
  • SSDEEP 3072:pP/bQiOGbQ1PUMA4LK3zIAO6uiDMy4RL89IkkF8xgEhuM:pP/Vt2NLKvnuqMywkk/Eh
  • TLSH
    T1F6F39E026A4148B1D99E1979007517FA0F3E94A3B3A576E7FFB42CA05E112D3CEB139E
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral25
• • Target
    pawno/pawncc.exe
  • Size 557KB
  • SHA256 3ef8f8a2549b31f0b1a0f1e19a6ddd7a9c69071e7014e30f6a556e1c67454827
  • MD5 585450edaa259a8c3fc1870d360d986f
  • SHA1 b7ddf94449a4d3edb95b3ea88e6244d3b8ac50a6
  • SHA512 98ca30d552cb2dabe8f67973cf5e01ce6e44089bcd63a58a67aefded10be1d871cca1079c367679f8f544a3ae9d82adbea9bde49c8c2c43824e5ac4f8eae9328
  • SSDEEP 12288:ow67q3bHoA43r/Og9nZCIBXhgJ9u8tJfE0WLoO2ydwNWEC:oc3Tov7NCNRC
  • TLSH
    T1A6C4BE5176F1D071C87280F6447BA72585FDB8204B6396D7F7C82A6E6F708C2A3376A2
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Executes dropped EXE

  behavioral26
• • Target
    pawno/pawno.exe
  • Size 313KB
  • SHA256 e58cc78ade6ddc2e59af19d5693983c39c8e0ab5d923bcb66337daeb78f25d6d
  • MD5 e73f3e763a9c6cae3157fc7e09f5ecbb
  • SHA1 05c9e7b29e3ffd13ae5dbff6ee4918d0f2e4df7c
  • SHA512 d78cef3a06c114eefa5e3c7b5878d1adb587c1df8cf554c90c822dfd3f97cba0d38cd1695c1039d61d671b820191550949dbb054d32dfab96cfcccb9a379acf7
  • SSDEEP 6144:4qV54oUeSsMY3j0cI8rdYEylF2EHJ8Sj6vzHrh8wDVU3wMs9ZFWz:4qV5dU7oTWKYEEF5J87vzLh8aVJS
  • TLSH
    T1276423B95A9244D6CC0BACF11F136F9C7B70DA11214CBB5BEAC2D94F5C37C02AC64616
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejecupx

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral27