Extracted

• • Target
    DarkBeacon_1.16.172_x64-setup.exe
  • Size 210.9MB
  • SHA256 83cd02f821d5b8c2ba778a609ff93b21544a36a65ee568d1f5190a3aaec3cacb
  • MD5 6aa8f5ac890ffc40d9db9304716f289c
  • SHA1 473162ae28e62b42b3db3bf7f7470ea0efeb7159
  • SHA512 92f528bb3178346788465e2b8092b92047189c5b25655467922f5ead089c0f514f266219253de48f06f0a646ce87556890b628f1101ecd4ab3b79bdaa4065337
  • SSDEEP 6291456:XE6rWvWgZwivS5JAGg4S0SURT6hgN082XzoLQs/Rl:XE6MvS5CGveU8hqnYohz
  • TLSH
    T12BB833E23342D1F5DEA57478664ECF577CFE30C282F78100E257B766AC48A536E482A6
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoveryexecutionpersistencetrojan

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Adds Run key to start application

    persistence

  • Network Share Discovery

    Attempt to gather information on host network.

    discovery

  • Discovers running processes

    Running process information can be used to identify security tools or plan follow-on actions.

    discovery
  behavioral1behavioral2
• • Target
    resources/wasm-toolchain/effect-template/node_modules/yaml/dist/schema/common/null.js
  • Size 469B
  • SHA256 f5d5f694ea3a42ef136e0fbcc674dfd7aa0a3da2b8d62183fb750166a12e52bb
  • MD5 ed89afdfe4d5b5019fddb736a58446f7
  • SHA1 0aa5c22d0f5e309d0fdb6555f2ccb92a6ee28465
  • SHA512 949e2676137da358143342611f8dbf064b69a1ed7082d25db733a39b605a2d073ae9dc9e5120e91baa0fc017d50366f518ac0cb85b62d9f69575830412cadef5
  • TLSH
    T113F02E391D7304764751A0CC0C41C640A864DC336B15793AF44E0CA14BD926D02BEBF5
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral3behavioral4
• • Target
    resources/wasm-toolchain/effect-template/node_modules/yaml/dist/schema/common/seq.js
  • Size 484B
  • SHA256 51fc0e8bfc63d1d9c7c66b0370a069bb33e0dad865080ff76802803597b9909a
  • MD5 a7509b9ee1390acacc939e1a88e7b4d6
  • SHA1 0fbdeed7ed1a07be189abf6700a50f1163e382c6
  • SHA512 f8b973290d4213ff323474c5b8e5a96da5e0b38c91eb03488eade385101a202f9ecd56ce0c7be606d5359ee5f411e7642b3954b8553f339f408a61e9cb445df9
  • TLSH
    T1F4F05C6B0BF1F126FA1365E7842A9AC9764404037C14B439758C55B38F7C2C881B7AD9
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral5behavioral6
• • Target
    resources/wasm-toolchain/effect-template/node_modules/yaml/dist/schema/common/string.js
  • Size 457B
  • SHA256 51d0b3aafab2ffa4ad9d86656a3b92c4b4824d0a8806423882ea5f92a1bf8d11
  • MD5 2e2f4840eb2f2501b5c5804ddbb73a02
  • SHA1 96bacf1a6518d7b227bce757abbd8b48225f1a67
  • SHA512 9fdaddaffc73844ef34987085a2d7c7b82f773d90705f1ae80701ada78f6eac31a836f7177cfc3bcf7f9fd579149fa27c5638465553227a507228517d73fc6d4
  • TLSH
    T105F05C3A3CE180312DE53949A2DC5800997406860D3AF4F8FCCE44711B8C79C58727D0
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral7behavioral8
• • Target
    resources/wasm-toolchain/effect-template/node_modules/yaml/dist/schema/core/bool.js
  • Size 635B
  • SHA256 9fa696b1efc38cf8c73a398f30d9f9841658aa5afd0b7a6b0822947c3991ba7a
  • MD5 aed3ac7b9be92b936b42aff90b2c9c4e
  • SHA1 a3c0f6a1ae823aa28da296d27bae59db08669288
  • SHA512 c6086b8ef6d7290e333f0b9449a138a7af614d7030d765e3215e794612131806175b7177934b87905b83d10fca9a07043d4e02377ad927a0851d9f70f2288119
  • TLSH
    T139F02DAA1DF301620383A1AD4D5584107838E63254287EADF80D35743F69A69077AEA8
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral10behavioral9
• • Target
    resources/wasm-toolchain/effect-template/node_modules/yaml/dist/schema/core/float.js
  • Size 1KB
  • SHA256 139e3964f0e626ad3741500faf51d855ff98eafa2d9e7523cac06260e4515382
  • MD5 a7bcc7c7476657cd9fda11f6ebf55919
  • SHA1 f32dfe5f47021c004bd2ff9c72e6d66cd070cf97
  • SHA512 e4494aad66c663e35fe89d92f9a01ca56bf7f082053b8ee27fa2f7654b83b056c9d5d5dbff00d36e94158c65e5432b246e3d6a638bd863d0585fd32a35480ff1
  • TLSH
    T1C031ED360EE310550B6A1DAD9E9E450838355A9BFC18B6ACF18F05220F0F77DA1FB6E4
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral11behavioral12
• • Target
    resources/wasm-toolchain/effect-template/node_modules/yaml/dist/schema/core/int.js
  • Size 1KB
  • SHA256 f0e474254f6877d5dd23bb57017980931ab333a7eaa3d33872247a80d11f754d
  • MD5 6b54b45c5d4a397811a11ca9442e9955
  • SHA1 85aea517d5063bb1d4aaa89787a4d99b8a03f363
  • SHA512 2732e7599cdc13f9051a173b3709aa302e8613b8d7f786f680bad2ca2ba90c9fc96dbd2cf144b3bdab0f1308fa8e58dce609ce4583b2f901512620a9a210a3ea
  • TLSH
    T1FA21DF272CE1045C09B2B53E99D6882D5A3D5803ACA670FAA46F04760F9BB1D23F6794
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral13behavioral14
• • Target
    resources/wasm-toolchain/effect-template/node_modules/yaml/dist/schema/core/schema.js
  • Size 509B
  • SHA256 481d7c64817b40090d519fb65bd83730dadd4c6baec1440b9bf85d29e52c046e
  • MD5 83166c4f6cb79944bb55b877c18b973c
  • SHA1 02a6e41d4b9988bdfecfddaf461eb0cc8ec268b8
  • SHA512 06aec3d79de1ad8df0d020722bbd2ee8989077ca68cd2271f452d5801b7095adb2810416775fa96f9f2671117c6d6dd9211b2db4cfda0d7ca6d8b69ebd751aa9
  • TLSH
    T109F0B4A20FC498142A5408C28C7C5296A682C1D31AEDB034F46DD5660BED4CE16316FD
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral15behavioral16
• • Target
    resources/wasm-toolchain/effect-template/node_modules/yaml/dist/schema/json/schema.js
  • Size 1KB
  • SHA256 9efdd848455f6e0621feb13f3eb762453cb02b09d5e04b6501163cfb26af27ed
  • MD5 4eca8435968d06afc3eeb50f38bb5f92
  • SHA1 b3a131c370f2a04b5ca81f6936d95f9026ed00ef
  • SHA512 d20b7385e9b4866b8a584e5ae6026712dcc4683df4ae5f2c9e9d8be2c89c42fc5dd727622548e45b9646c136444048622f3b656843701355ebedf7b19c6c15c8
  • TLSH
    T1FD4110252EF210244B71BA99849C412569398D1B4C75BCB4F45F1CB34F4DA7D12FB7E8
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral17behavioral18
• • Target
    resources/wasm-toolchain/effect-template/node_modules/yaml/dist/schema/tags.js
  • Size 3KB
  • SHA256 dba2f42d4dbe8cc8b13f662fd97d253da2da5567e71c47115305efede5a888f2
  • MD5 16cbd3ef9b566982bb08b04af24ca8bb
  • SHA1 7b89e8c651a5a736ade2a3f0c299d6603fa1255c
  • SHA512 da928eea74055f4d189e980c69799331e874e76687d5c9a1ece68350c5b24ea3e6e8c0d66ab4d384f99f951f1c9891bb9d778440a47557366342223357b8ce60
  • TLSH
    T1BB61EDD609D21830A16718954D6E61406092C0132FE8E63AFC1CC931AFE9C2F5676FED
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral19behavioral20
• • Target
    resources/wasm-toolchain/effect-template/node_modules/yaml/dist/schema/yaml-1.1/binary.js
  • Size 2KB
  • SHA256 15d7b0b8516c8190b191ec9a0adaab16808d09751ef534d7829512944072011f
  • MD5 821d5d76e3de9bd08c280ce4da37aaf9
  • SHA1 a95bdf2d47469e6d458e5a604e9b89981cc68762
  • SHA512 4db5540d96d3cf65641ac619dceaac6c0341d7340e94e26f55dc61b2273950a84e0c66d540ba70c0b8be8ae8d56c451eff18c6ee7b5991fd18eb2a88e79260bc
  • TLSH
    T1725112141EE7906945A3B8DE438BD91D95B1A2332515F8A8F40E10341F90BBD8AF2FFC
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral21behavioral22
• • Target
    resources/wasm-toolchain/effect-template/node_modules/yaml/dist/schema/yaml-1.1/bool.js
  • Size 841B
  • SHA256 80a0046224dac3437f22e3b27b0180e1aad82277ab2fee4769094c6d12d67b6f
  • MD5 e8ed555bef414058102fa2627e5a7f25
  • SHA1 37ec10689bbe336fae460fe259e649cb73cde41d
  • SHA512 28d29d0f4cb41ccbf576f082419710c846b0f3c91f806b8e66da715f54aad8f764d461101bdada0918614803ef5045182ec99a63081c22e50f722bedbef5eb1b
  • TLSH
    T1A901AFA92DF21139871254DA4D5A850468B1A9122C11B975F45F04D11F5C72D22BBAED
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral23behavioral24
• • Target
    resources/wasm-toolchain/effect-template/node_modules/yaml/dist/schema/yaml-1.1/float.js
  • Size 1KB
  • SHA256 a90c44db83152e4d902d46f667737dac90aa86b401abdefe89371ac3bd03abfe
  • MD5 e3ff211f27a58fbf9c0ff62d38c78162
  • SHA1 8608aedef911c5e790f8f671bbd692294d02c33d
  • SHA512 2a9a4d962d094028ec9f83e2801a3427b6144e9118c239c6d50269f31a786ca2e13c10cfc8bd17b59d379d2efe19caaaf03a92e9da4aa5d57d9a9a4aac304329
  • TLSH
    T1C33103261EE310450B6629A95C9F010824355E9BBC28B6ACF48F01224F5F77CA1FBBE4
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral25behavioral26
• • Target
    resources/wasm-toolchain/effect-template/node_modules/yaml/dist/schema/yaml-1.1/int.js
  • Size 2KB
  • SHA256 5ff72b08fecc3a924d4a76658a304859db5edb4fadf8893ee837aa06bba60a52
  • MD5 1b248b357bb51aa90c2c778087f45116
  • SHA1 e63e7f37f4ec2f4ec922bf555ba363db87af37a9
  • SHA512 57d832a3d5a13f25c60d0ace8094a4e63bd7bea4c5d4db2b96cedc84741b454d7e9d841be2b7c498cc2a67ea44abba983f641137048e829ce095bc96ac9188d6
  • TLSH
    T123410D2A1CE2041D06A3B579C69F84392B3C78036CB8B4A6794E04754F4B34D63F67D4
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral27behavioral28
• • Target
    resources/wasm-toolchain/effect-template/node_modules/yaml/dist/schema/yaml-1.1/merge.js
  • Size 2KB
  • SHA256 9c85b5e026e4369a96f3f7b5bc6c05da102dfa2968950b17986201cfe0be542c
  • MD5 dda94f2c8c16f63d856e38b90c48c649
  • SHA1 1e6012528b0cea4283ef5b32dae40beedbaf74f7
  • SHA512 266e08a3f2eaad1b17bf9663bf155848873056af8b7be9d1275f56f83d75b01e78cd2313c1ccfbdeda5d602c64eadd39f0b5d4839497ae771db738f43c25414b
  • TLSH
    T1EE5130673DF0203145F354B4494B8089BF2A8067B328F9B9349D48552FD647942FAEE9
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral29behavioral30
• • Target
    resources/wasm-toolchain/effect-template/node_modules/yaml/dist/schema/yaml-1.1/omap.js
  • Size 2KB
  • SHA256 3174270cd59c0f0e3ffd73b3b44c4de679efd5c681325b7aac8e0935d547bee8
  • MD5 a7005b88d971f050fc77f68609a50f01
  • SHA1 06fd6e6e2086547741b4f264ec379f498de62d2f
  • SHA512 632e5417a367025f4c2dc2f4a7158bdf6dc25bcc1b44b301563cae8811a33e5c43e2342112fb836495e7f0f23461a018a76e88a0aa9d7ef3170a2b190cb16e86
  • TLSH
    T15751024BAFF7A02186A364954E0BC584B3644013F56CF9AC394C9575EF560A0C7F6BE8
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral31behavioral32