General
- Target wolfteam_nakit_hack_2020.zip
- Size 2.9MB
- Sample260811-tlpnwsfb93
- SHA256 53935fce9bd0f81fc0a43f52f6cfe8958c1d9143845a8e4ddc1826a03f52b00a
- MD5 e31d1abb22a992d14c9689b60492d40d
- SHA1 d1d42a26ab3c792d3db7be982aa40851ffd630b9
- SHA512 c30808b5774783ac8b301abf1d3c8213e11e6f10f1adc6ffbf72e98af42ac7a47ab1fad784537f3631de6077b18662dcb2fb8289547d249ca19a7bccd8c8d1b6
- SSDEEP 49152:zt1R9NbV+XgFveFQ2gbowJR9+HH5yHeznfJUI2WrSXNzvrLTRTcnklSgJRF24nqR:p1DNbpveDm+HH5Qezn6I3rSXNTrxqE2x
- TLSH T199E53396FCBC1719306A9F0BDC7D1649D9FB4D04BEC182442EC10A8A55ADA38FE39B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
wolfteam nakit hack 2020.msi
Resource
win10ltsc2021-20260513-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target wolfteam nakit hack 2020.msi
- Size 3.3MB
- SHA256 23c34602d1d1479f732435594312ba34792d3078c25d00c265cb7808987a2deb
- MD5 4729e00e09ef11e9b3d37eecf8837a4d
- SHA1 4e0207adfcf0a3117206d94bdd67fbf5298df67c
- SHA512 44f4a6287eaa47e61df286babfa69f9adde195542e28cb7023b5accfa590060a81f958c820ff17e12aa111d5217194d20ac07e5e74943efd8173cb3f03dd6192
- SSDEEP 98304:tdyTLeL65/K+6zSeznKILliTxHJHiJ65/K:TyT6W/pwS0KILATxHJR/
- TLSH T18CF5121176F98B33D063063689BF5711267EEC201F618E4B2384762E6D713E0A7697EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.