Overview
overview
7Static
static
3INICIAR_CLIENTE.bat
windows10-2004-x64
7INICIAR_CLIENTE.bat
windows11-ltsc_2024-x64
7INICIAR_SERVIDOR.bat
windows10-2004-x64
7INICIAR_SERVIDOR.bat
windows11-ltsc_2024-x64
7RemoteClientMQTT.exe
windows10-2004-x64
7RemoteClientMQTT.exe
windows11-ltsc_2024-x64
7RemoteServerMQTT.exe
windows10-2004-x64
7RemoteServerMQTT.exe
windows11-ltsc_2024-x64
7General
- Target RemoteAccess.zip
- Size 57.0MB
- Sample260813-e9dtzazycz
- SHA256 17b48fe37c4573aa78676a11fde9bd7258cde598c133db23582a60934c3a471a
- MD5 6710ed7831fa4ea6e5f319be8361bc6d
- SHA1 664b3b9d677be69c2aa583f7ed903785d6f719d7
- SHA512 e21151f059e4236deee7bb81767347375f4e6d6077a3411dd7d1986d7a8a30d55be9eaa77f4627febfca9325bb0b52ec2731d08d2c04c3dee58456d47413e4c1
- SSDEEP 1572864:PnGVHxhi9kBF1lDFgkkQinhP57q6tbxXhlKAM9UZ:PGVRhLB7dihBOyxXBZ
- TLSH T1FCD733EA649678361864CAAA6FED875D62C548DF9721D374A3AD3F3D003F3098F70921
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
INICIAR_CLIENTE.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
INICIAR_CLIENTE.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
INICIAR_SERVIDOR.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
INICIAR_SERVIDOR.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
RemoteClientMQTT.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
RemoteClientMQTT.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
RemoteServerMQTT.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
RemoteServerMQTT.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target INICIAR_CLIENTE.bat
- Size 598B
- SHA256 b4c3de81c096e43ebd55ee2f3ffebf170bdc1f205ada6dacf03ca4152434113d
- MD5 2cb544fc67b080474d88e798cddabc4c
- SHA1 61f3abd1cefaae8deb4a44eb0d0595d2e5b9b3b0
- SHA512 f54d49cb8ce94a8dcf0fbc79914d811200c4b142d5eef1e5a5bd6d79c1bd5de0e6488b2759eaf538792ca0fe85c33cfc616a55d92f0d2b4cc3c049c6756cf3f7
- TLSH T175F0F0D2B3D2362868DE4296CC02D0A1740B715781409E6EF88F527C8F4D7E9E5AC1C0
- MD5 SHA1 SHA512 TLSH
Score7/10-
Loads dropped DLL
-
- Target INICIAR_SERVIDOR.bat
- Size 601B
- SHA256 f6eaaceb9788a56fbf381047862999255d61746c80c4a695536f8c5a9e05d089
- MD5 151e9009415a86fa565b76e281e22dc1
- SHA1 d4abf338b8ef2427ce484adf98c5d414e6f83fdc
- SHA512 3b249c43b9819cd2326749e70fb84ddf2ec79d63a6d31275c1c8089ba605291dc64a41f39f532ddcc4ae3767f9bac296c153b069d78f32e90fdfc7e33a4e2d90
- TLSH T104F05996B29235D458D651998C4710A6710B905B81506E8DBD6FC27E4F8EFE5F6AC0C0
- MD5 SHA1 SHA512 TLSH
Score7/10-
Loads dropped DLL
-
- Target RemoteClientMQTT.exe
- Size 30.2MB
- SHA256 5cedd55c7984075af7ae2e89477c14d0f4bb81430bf3541d309be17d6b8829ca
- MD5 15219590a6f0b8a79e5b762f5797ce29
- SHA1 6be88d3e0e7776cf795bc3854895ead6682a3eb6
- SHA512 672607c7c7ead9863b21ea0ec9bfde748ae9f16a62e2e86a78e9b22aba3d12c4f1ba7f0a6e94ab40c3a4ee9f90e34fb048014d8cbdc3e853e6d1b192c050a504
- SSDEEP 786432:wbS4ce2s7KXsmbRphfXahpHJXduJT+0to+xat+1Nvl7ewq:D4f/7wPhfXahkJmSew
- TLSH T18B6733C973641C7AF8A5413D6DDA865B92A1786147B1C3AB1BF91F380C7B2C8EE30B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target RemoteServerMQTT.exe
- Size 27.3MB
- SHA256 29d45716c6e82bf010cf5e849e040a5b4da4c54bf6f63cfbc7fc8d7ed88ff655
- MD5 9a60da33ee0657625cbcb4a5f9df057a
- SHA1 d03da55cc9b4996de5baee04ef00df8299ab1987
- SHA512 4d7457f66130c87d8cf272b0442b47e023e7ad99034ecc80beb2313f4de800ecd9d3d2752946db3504e396d501be0a32540d2d579cd983222d44535abed4ac23
- SSDEEP 786432:SbS4ce2s7Ko0RphfXahpHJXduJT+0to+rP1Nvl7ewq:Z4f/J0PhfXahkzVew
- TLSH T1C7573399726128BFECE185399EAAD1A6E2216C915761D3BF07EC1F3A0C7F3044E34B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL