83bb2385b733ec7672ac38dc514cf1e31275fad4a8f5c468c537451fe1825192

Sharing

Copy URL Twitter E-mail

General

Target
Spyroid VIP.zip
Size 364.8MB
Sample260809-nkffyaac39
SHA256 83bb2385b733ec7672ac38dc514cf1e31275fad4a8f5c468c537451fe1825192
MD5 8e32d0e7aa6c0ef5f4152a7f4a1211ee
SHA1 89cbd2118aaca2b25af22d2d80f4f5692dad9093
SHA512 572648db6f6a124de128d964afe1916c1bb4547f827db4a2e217827f2e962817c5d0cb6b92105d7b8df0511bd32860c9380d9babdfdae0d6198a64a398631f7b
SSDEEP 6291456:oAOPoJ8JuGNPriREp4UQ3PVUq2W4Jxk32T/iU9QuqjRq3racK5WEx0dWmii:UoJSuGoC6P0pJxkyimQuqlq7S+UFi
TLSH
T12A0933C6DEF940C6C9687EBF58906350BAC77860712C8F2997403DF52D997B28E9C1A3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Spyroid VIP/Spyroid VIP Patched By WantHacks/Bunifu.UI.WinForms.1.5.3.dll
- Size 223KB
- SHA256 e2d8041a6e57dbbde7c94398c3c83c66352ce4faf99dd2968e8c81d090905408
- MD5 61b35cc7017df96351f4ee9d5db377ce
- SHA1 2bdab9b59e1e909f8011759cedc037822ef14357
- SHA512 16d55621501aa05f11d78d79599cdf0a25188fa2e30faea1d57dd76edf4f12c4a12bb12af94c7c7658e833593c2eb537e3217eb87ef75dc7225346b7067ecc5b
- SSDEEP 3072:q4S17brKmFKTmq9Umtv5kJjoaTl2rIU+LwAjH4NIH2ENiJJ8MnPBlbbRS2/qW/Eq:WZk5JIMIU+dcNIH2ENak4
- TLSH
  T1FD244A603B645AB6E07F47BED04840408375AF06B08FE749BE9974ED1CB63A1CA4B677
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Spyroid VIP/Spyroid VIP Patched By WantHacks/DrakeUI.Framework.dll
- Size 3.3MB
- SHA256 578eb6d0fc846883129374903a6ef885e53fbab173339400bf8e3cf0da143dd3
- MD5 dcd013eac797c81a9250d4214b26435f
- SHA1 c98259accd13042a5cd32a9ab6ed8ab0372022c1
- SHA512 bc7a6d0de64d4c2aff668bea370421ee8e8a47939261d986b66dcb76f4e195a126221505dd4dada2ec02ce8edecb229ae7cde283807162d8996f4a50a478d369
- SSDEEP 49152:LMt8GGXNncIv1N1YwzhmVSMoNqFFhWDYISVvWS5uQwEgRKiDCg+z9Y16FwiXrwUf:LN1YyhKoNqFFqYnVvW51fnDqznw085
- TLSH
  T185F5F1052794AF1AE83EC3FE9423185483B4A601626ED74FAFD0F0ED2CE6795CE59187
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Spyroid VIP/Spyroid VIP Patched By WantHacks/GeoIPCitys.dll
- Size 191KB
- SHA256 d54fd6c5903eea49a75d620d4ba232f8effb1863f5f9c974e4ac0a8fb1904131
- MD5 c070f2421851420e832e4f5989a775a2
- SHA1 d6af3c48ffbe0fa1e0e54860836d3bbf374b8b46
- SHA512 75c3edeb4c16d8e82eedc5595b9c3fde4cbd4a3e9deae1967ad513474920a48e4e9275fdc76f44032b1be570a4ece1a6393c4680af8989f67bcdec039d06798e
- SSDEEP 3072:87IcHKc0TwY4O6BlLiJxTmd9h1+fJ5uJnjpUoh/ht21hYvpMaoySJHPc8E:8dHV0Tn4pox6d9G4k
- TLSH
  T153145F45B3EA644BFAFFEA35BD6460545BF6BCAE6925C4AC0E451D4C48F0B408DA0F32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Spyroid VIP/Spyroid VIP Patched By WantHacks/Guna.UI2.dll
- Size 2.1MB
- SHA256 e658e8a5616245dbe655e194b59f1bb704aaeafbd0925d6eebbe70555a638cdd
- MD5 c97f23b52087cfa97985f784ea83498f
- SHA1 d364618bec9cd6f8f5d4c24d3cc0f4c1a8e06b89
- SHA512 ecfa83596f99afde9758d1142ff8b510a090cba6f42ba6fda8ca5e0520b658943ad85829a07bf17411e26e58432b74f05356f7eaeb3949a8834faa5de1a4f512
- SSDEEP 49152:cvrqKk8q2gqi2OXCt6kuSw9g8PTNTN/23uxjPHEiCAjFcm:cvrqZr
- TLSH
  T16EA50A197DD4EE27D16ACE33D6D25021E3F1E4932AB2EB0E72D357681842349788637E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Spyroid VIP/Spyroid VIP Patched By WantHacks/LiveCharts.MAPS.dll
- Size 53KB
- SHA256 5b8a9a04f454a2c4da5989fa454a0138d3e5c40712816600f90111b7bf045c40
- MD5 dfee15e4c6efa37e6645d8b47c8581e0
- SHA1 876140e0855fcd15bfb590431fb7b280d1db4a21
- SHA512 4d0e7b0a5642b649c04e54d89e707ec00e79a0fa282eac19b6097b819652045c3e157763b5b2922a4c2252b0877059ef90eb60038280dbfbef9502f421d739df
- SSDEEP 768:r4gOx89xKERw2U11HI+bZO603JLw8MOrNNLSW5/5xTcb2y1ehVHp:rPKB22HIwwFNuC5N6n+VHp
- TLSH
  T14B33E44837986A69E7AD3A7454D3133053B8A6B22313F7168ED187F198773D20E94E73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Spyroid VIP/Spyroid VIP Patched By WantHacks/LiveCharts.WinForms.dll
- Size 19KB
- SHA256 a5b61c1726304e6b72e09a0f35ddbf52f89a75a4e28e6ed098c8d1df6081b4ad
- MD5 76c775d09b24798f6923452e920979b5
- SHA1 3fe2c79512a0d1153fb07f6640b27106c90d333e
- SHA512 eacc093f8ac9401f617df7e07fd68a8a0f1f03aa150283de67ad8c338fcb1520b0f07335547cf533a646ff95f239c92b029f952a706e736bcd9508817c9be0f9
- SSDEEP 384:F5gNA4m0NkdPbJfGZLifwdNqF8vLvTjzHEhZFUPOxFBVGquJpQ76RqMm:F5gNnrNklJfGZLiAw27jrEhZFyYMm
- TLSH
  T197925126DB64C13CC7AF0EB8F8931A210570CB067693DB4E1D14F4DA8C63756BAA7297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Spyroid VIP/Spyroid VIP Patched By WantHacks/LiveCharts.Wpf.dll
- Size 212KB
- SHA256 1bdbb1b5c1a50653e5c26161e9b7c03edc518721a6e10ea180a84049d967106b
- MD5 e924f79f0b5f3e79c98477d75831813d
- SHA1 64f71e20e1953b13c771d8a8e63549ad6d64216e
- SHA512 063e9bdbdaf0accb46cef5fdb98b30a97b8a6ba097a80d43a9799ff73e820d1c56d41ca9f71d94497736e3def7fbd0109db4000ab1d9e46cdc96357bf3e15fd1
- SSDEEP 6144:d/vd0eaDQcUc0GkiTV3bkACA3AloBtefVt+aA2xgKPo1zlW1w:vaErjGkiTV3bkACA3AloBtefVt+aAGBF
- TLSH
  T1992408B82368CDA9CBAF0675D011251043F19E676EE1CADAEDC090FE5F4BB4386425B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Spyroid VIP/Spyroid VIP Patched By WantHacks/LiveCharts.dll
- Size 148KB
- SHA256 9fcf89837b60f69c1c501e4cfa4d2860887afd0b8f325803367e795a4e3bc9ca
- MD5 9642899636959b7fc89bf34a8b998a90
- SHA1 479a0254d1c9e5565c7d861bb77f54b7eae50c96
- SHA512 435dccb57ff3e9d0663770768c866838b19fbaa5b8e79de0ca111d9c73276f016e016d1d268f72cf3435ecac122039764fada952e1a4f68f368b492bb866c9a2
- SSDEEP 3072:saegvMNVoz3Vlw6/R3z3MV1IdJJGVKWHC2KdxFFT9lzo:VFJlwYMVWY65z
- TLSH
  T1FCE33A1D7358C776CCDE6E3EE020482147F3E14AF6C2DB9A9F817CEB2913B898645562
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Spyroid VIP/Spyroid VIP Patched By WantHacks/MetroFramework.dll
- Size 149KB
- SHA256 baf326f52d39155d722465947f4cc67e6e90cfd0f89954eab959568e9bc342aa
- MD5 44538b311e9ec2bcf0a6452702628d99
- SHA1 da67301539903775708e9ec913654851e9e8eade
- SHA512 b65e3bc1c0f7b4c8f778cf52a36d628301d60aab53fdaf0355163e4865bc3d3adbf8870bb6cefc604708fdf2c0e72258eaf2fe301d524af2f77bc08014c9610a
- SSDEEP 3072:LU0T+erz8jYxYg5lzrPHlMUzxXd4kRZPI9q:vT+erz8jYxYgv/lxXGWPS
- TLSH
  T139E33B21770D457FC6BF4A7AF0A12492C3B0DC51FA7BDF5D5C82A29C989B794AE01283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Spyroid VIP/Spyroid VIP Patched By WantHacks/MetroSet UI.dll
- Size 444KB
- SHA256 6288e559b0f34d56ab4601ffb2ba2289001c77cf7351d135dd93915034c56bba
- MD5 d99a97de55b2561e57135433b44bb786
- SHA1 ab588b8d36683b52adcb32c03a9859b884838f29
- SHA512 7ef95cb161265fcf110ba843fe3af5e6cf6d47465e17a10c742256bebd91c128df2cfa7d21696d716bfa861c952d6fad445912f8cca9da9cb03d780211b0545c
- SSDEEP 6144:PTJ1DwrSfCmrB0O1SIai39IkRetlJT4ihPrsAgbP2UiuE2Bnw7M:rJSpmaxIephPrYDK
- TLSH
  T1B7A46B06A3EA571EF1AF4779C4BD01B143B1FC037A3AC35A2CD9B59E59B17448A82393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Spyroid VIP/Spyroid VIP Patched By WantHacks/NAudio.dll
- Size 498KB
- SHA256 3ad5d09b4c8c3146d15955a564a9f1a57d7c795b189a25c6f722a738d95ef89c
- MD5 6ca17abccae3050f391401b2955f9333
- SHA1 0975b039a793accb58130d6639262cd291d80d5d
- SHA512 c08f366aae9baf0e7762f47a2f79d0dee5187a1d7631e5838590b7c12911bdeb6247e0ff860ade36e04f1d6717f919ad98df6d3a1a556bff4b8994db9616ccec
- SSDEEP 12288:MnXnae2TPlr3zvzar5oRDaw92wP6mai9gs6C:K8lrT+r5ADakP4i9gs
- TLSH
  T1B7B45C5637E4552BD4AF2374E4F0090A47B2F48B36A7EF8B5594A7AD2D837824D00BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Spyroid VIP/Spyroid VIP Patched By WantHacks/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Spyroid VIP/Spyroid VIP Patched By WantHacks/SipaaFramework.dll
- Size 54KB
- SHA256 daacd27b8c89b8f328ac2b2d80fe4646a9df9500e5265d8f743911cad4fd5636
- MD5 7ca0f8aff7fc8c357dd26d617fa2d625
- SHA1 482b3efc1b12f9c8600c74b7218fe3ba5762cc9e
- SHA512 3927e713682bdfdcf3f8f45b7f4e7171a0fb6af302d4e76cc05fc47ef3d49047ef9fa49c6d577934b03f5b327cc391c49d9fa9e8df942e8e9019641a38b3df89
- SSDEEP 768:7vD2jQYGvCr8/rZRD/GfrseWaD9T2brrF8LBx+QdIb+Kdpq7m6q3niv9lAU:WjDr8/32QeVD9T2br27NIb+Kb64GAU
- TLSH
  T15D433B0927A9CB2AE87E4BFD64F2106013B976677523E71D9FC224DC2DB3B588610B47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Spyroid VIP/Spyroid VIP Patched By WantHacks/Siticone.Desktop.UI.dll
- Size 4.0MB
- SHA256 21eecaf504b7fe787a45f4aa8f8f36dacfc3ab1d75624dfb41827cdef2a9a589
- MD5 1582aa45d981e0e569c6e05698642b30
- SHA1 763506f312a186c55a04ef6a16ad7e867c394097
- SHA512 278a7a4e2b9d82528200b9f92244db3f228187d15c36fd169deb927e343bc4d0bb29c9dba496f86558aea4f4deb44d1e47a41d5598c0b375d99ad9fbe99cec34
- SSDEEP 24576:UCCxPAT4L7h3M7O2MLBSlvTh/aOBteUePU/DU/GHQYazK/DkWoql3zjbndHQ/jzb:WuO2MIThZNwewYDoyG
- TLSH
  T12E166D013BD08917D16EBF76B463141C97F6F804E6A7E74E7995F2AC2B9B3684802363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Spyroid VIP/Spyroid VIP Patched By WantHacks/Spyroid VIP.exe
- Size 87.3MB
- SHA256 25366235c41034f4b036164be8f5ec50126cd456e4032692daf80a9b08e2b466
- MD5 0ae1023762ea7487bc2957f6205702d6
- SHA1 6e81c44aa50d761bbda0980e8469849f91a1b80f
- SHA512 616fd62aab30914a7c08c41f838803566cd8cde29f1291ab7c27f79024cb5349d910d4c25f55a1d4f15641558031b6c54e47d9ef7a8be3386531a2c0f29447ac
- SSDEEP 1572864:ERvwb0hVeo5T1/ONYGUf1RWm1TBNVF5aoODiXgAQSpwBFq3QTyqe6TA0oYR:ERvwYeo88RZxiFeIFR2qemA0og
- TLSH
  T179182271CA7934B8C4A2BD3A814A87D2FDA1754C4661CEBFF3514A441BEEEE3D929700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

costura packer
behavioral29 behavioral30
- Target
  Spyroid VIP/Spyroid VIP Patched By WantHacks/System.IO.Compression.ZipFile.dll
- Size 24KB
- SHA256 b5c12e9099643e2eda9b49edd0d98bdaed153c72a7e8e6235d8e78714402d16a
- MD5 dcda916372128f13ada8b07026c1b3e7
- SHA1 99d6c187de8510206a93d2eed9c65e65e0c86e72
- SHA512 d66de5d61cf7090ce2e11ca8064723a44c2fdbd7ed937f1cf4198ebe13083037941b816ad9022d332bbb853666785600fa8b1faca94c498d2f82de73fe1e42f9
- SSDEEP 384:dK8Y54xRiW3mWeW+mWE3rq0GftpBj52ERHRN7dldBopPI:dKfemqiuEBHoa
- TLSH
  T15BB23A60D7BC4213ECF35D3066B8D6837D3CA7D69C20966A449AF1992CD33D1DB20E29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32