ade9984ef5dc19da1b8a5eb63de500c59836b1c24c0b8e38d394e3c77188678c

Sharing

Copy URL Twitter E-mail

General

Target
sniper-v3-main.zip
Size 64.8MB
Sample260815-qrxpxaxdpd
SHA256 ade9984ef5dc19da1b8a5eb63de500c59836b1c24c0b8e38d394e3c77188678c
MD5 1f7cb771e3d9d86ee9dacbb3059f6fa6
SHA1 8001c360297f2d8f8409a68feb045645c138308a
SHA512 60d091761b01e169c0392bb62c55a1cfc1340e8754697228365f16d01caede7f6cc1020b61115d08a8fd8c3762492eb665a16fe88e6127a485e12cd3314c6659
SSDEEP 1572864:IKIMS5CbSD7mBEvjfnKnaOi95qUbBHAE52doov/UnZ:HI5CbQM4KnaODOaE5k/CZ
TLSH
T118E73380798AD31A6E529AB4761B1B89424114E0D787E2213B22E7D4BC751F1372FFBF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution pyinstaller

Malware Config

Targets

- Target
  sniper-v3-main.zip
- Size 64.8MB
- SHA256 ade9984ef5dc19da1b8a5eb63de500c59836b1c24c0b8e38d394e3c77188678c
- MD5 1f7cb771e3d9d86ee9dacbb3059f6fa6
- SHA1 8001c360297f2d8f8409a68feb045645c138308a
- SHA512 60d091761b01e169c0392bb62c55a1cfc1340e8754697228365f16d01caede7f6cc1020b61115d08a8fd8c3762492eb665a16fe88e6127a485e12cd3314c6659
- SSDEEP 1572864:IKIMS5CbSD7mBEvjfnKnaOi95qUbBHAE52doov/UnZ:HI5CbQM4KnaODOaE5k/CZ
- TLSH
  T118E73380798AD31A6E529AB4761B1B89424114E0D787E2213B22E7D4BC751F1372FFBF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  sniper-v3-main/.gitignore
- Size 8B
- SHA256 38c8ca0920aa7432679ec67fade3bdcee6df3f0852a233025bc71904450df4ee
- MD5 5c5597e119e10c4a601d310d4ef4f247
- SHA1 178aab90f1f0c850770426361ab2453d4648f8e2
- SHA512 9c256046302b6fb1e2005d40358f3270c9418abadd2569b899b80e6726e1d78062444bafed595622d5e9b8788752d72af0c414098ce27077ef18d6dad8121e85
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral3 behavioral4
- Target
  sniper-v3-main/LICENSE
- Size 34KB
- SHA256 95578167dd0e315f972470df0fe14a32ebc9be01f972f1ec2ae3e5c5014c2c99
- MD5 75562b0135e65fc846e223bdd511a3c8
- SHA1 df8032e3a0462e18a51e77d6cd72d9eb828b051f
- SHA512 5a4ce41120b326a67a8312e0b0c8772d54bf65257e0152e5acced19d53c15dec7b7b233c7b4f94fdf6f46bc4764e71152d7a5a9ddd696970d4ced155c3117ba5
- SSDEEP 768:Fo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A72:Fhcycsrfrnoup
- TLSH
  T149F2735FB74413B2018206A26A9F68DEE31DD03A376640957869C15C27B3E3483BFBED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  sniper-v3-main/README.md
- Size 8KB
- SHA256 49f08402bac255471c0c5724a7cfed8be5592702a47dfcfc0d04e16aa7394ab6
- MD5 d5f291f34672e8b0818c198c176ba195
- SHA1 8b7faa636fe59ce70c623d8725412bee868ea2c1
- SHA512 03e3b796f607dd15638ec1878ac78bd7364e20a2fdb7ab1e8b2de4b98e71dbe4cb5057abad60e993a97fa2eeab13b205c1b32feed8b80218babd2e8f124ed005
- SSDEEP 96:VE6BtNbrsS4sSFlSKy8SqmBhemueJkeZ1TtIgKXe+rrsNumPYXAnpOE79YtmEBGJ:VEwyu3u3bvrshQwhWEe4cKG/jwJ
- TLSH
  T130020AE782B038BF1FA3C2C6954635C6EB1A919DEE4B907CC17A006AE209723457F6D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  sniper-v3-main/Sol Sniper V3.exe
- Size 60.5MB
- SHA256 8983b4df12300a06cd7aabfa0d60fd409279b2859a9f8448ef7b034f534256f6
- MD5 6f99ddf8fc6164b6a318b500b1cdd18a
- SHA1 4fa3c3d2516fe597da80c5ff1bf442a3c3ca8dee
- SHA512 9bd568975e80941940aa4dd55c201177ab30cbea2760cc63e1f4971b80fe9cd5c0eccd8ae113a99e1371dae8e77a45fac2e94ea1c731363f218bc7beb199e42f
- SSDEEP 1572864:/UV8p+uMUv7ikFyWC9rJOWJdsgaBkRFVDwCZLlDVpEfOF:m8UuMUuayTrHP+k5DZdVp
- TLSH
  T19ED733907546532FFEE2E13467E36B58556234D1DB73CA2711A292A23DB32F03B3721A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral10 behavioral9
- Target
  main.pyc
- Size 668KB
- SHA256 943c3363f4ab3e94d3d47df781b05dac4e94db66e26ae0a1e42d6df721b8dc0e
- MD5 9648db1ac11ca9c6f489069b291b6416
- SHA1 fa91b0585f4a4c55e6d06650f16423dff48425a1
- SHA512 ce05aa4b1927dc719bcf37875f76e952b25aa9e33021aeba879b9ee115b6730b0d09617bd60889ed6ce4c3e541a9aa96f9a0696c5f80d938fb236cd8b668b664
- SSDEEP 6144:aal7b5Mt/0vKgWTmCWqUqhxIe434KpgXoVd3adR804tb48q:ai7lLvOmCWfq8oKpgXoa/8Ztb48q
- TLSH
  T12AE4C286BB63C877F860B4B64916239EF3249162B611CB1736FFA0796F471B09C611CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  sniper-v3-main/assets/bloxstrap.png
- Size 153KB
- SHA256 f77a0f9f45ec4c4ac1e7f51560b416a2f33d6f69448be36ca2700d6a44e28df4
- MD5 a2c12063283373e60903de6c68d9e9e5
- SHA1 45c02edca26380c27c4fdcd5efba9dac99b0bcdd
- SHA512 f4db4afa9178a92872e4c8dfdc7a2b39f2ede26890220c3434d1f29f05a05a8e90242edc63c74fa5707caf8d689ac9e946c9f09a195131466c32c1fac974cd93
- SSDEEP 3072:pafAw27C5SjSZZXl2F/Rh5mjG/wVQV9frh5EJGDr0aR8wI3oTF1sfPhP:1vhuTl2lRhU8wVQV9ThrRRVVXw
- TLSH
  T1F2F31221C26A88187ABF3131D689AEF343B9ECF7430763919E3DFF951850D6B909D891
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  sniper-v3-main/assets/fishstrap.png
- Size 356KB
- SHA256 46e0383d343d11346c477e56c6704442c0da1c597793662c737b220822c42e40
- MD5 8850d967737c50c4679c5200d4740b90
- SHA1 f5c28d15a28a48669133a3268cbf51b667709002
- SHA512 78b3b95b575993df6002f2fdf54669f2f22db55077e6816c30455be78bda2ebe183599094b0fec0e9bad5cc1a5f272aae9fe8055380044622483fed75f9a53ad
- SSDEEP 6144:2Eij1NFTsjoMjxG3d7wqVaU3JzQrT4/PCC/5bqEbEUY2+Eq9LnZWgV3FlX3XoslX:2BjMjE3dPaU3Jkc/aCz+FZWgZFlX3X5
- TLSH
  T1CE7423E4BD65818117E174C227025C03B712B4FFABDAEF9E0F6A24A4D1EDDB2D42491B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  sniper-v3-main/assets/font.ttf
- Size 17KB
- SHA256 6124fe5b92735e59548c010f9c03b32f024896ff75f19a3fc36ae5ae2b788e12
- MD5 bf3f245b7cd53caea0cb07d265a64adc
- SHA1 37c43e18626021d7cefba3ab197e5a1516ca94b6
- SHA512 045849214a26eaf0da839658b96c526e0c071f0036f118aca9bde926201f38cd0992941c3c88467fa5483529d1a9fb8e1b7aff332639a0228fa58bf22880ee35
- SSDEEP 384:2KmUvVk6NQoRKcpR6EmvGhVWv+eRrKnmNlt0np+:2Kztk6Nj8cpR6EAGhVWv+krKnmNlt
- TLSH
  T1BF82E68255F14A02FC1236B9CC6F5B445EEA5B825FA2D38363BA3C691CD97C5BE47380
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral17 behavioral18
- Target
  sniper-v3-main/assets/pajamas.png
- Size 128KB
- SHA256 3ebcd9349cb5377a749e142d0e78d575611bf3d071ab48051b3eebc83e406171
- MD5 098d98b189bd00f781c887db05a34834
- SHA1 b45aecb8c3777b83c87a236242135d81d57d7c89
- SHA512 74bc477b63e59224b5ad8de04184bb354a367435978078da23a407edf3543255eeccaf5b5ce99f1dc4951f4b13862471ce7cb18e97a19ada9f70ec8a0aef5e11
- SSDEEP 3072:b2pnlpHel8nWYB80w5ZdndAb+YKDhMLUdFz95fzBiRn:b2pnnWSHw5ZddywhMIbz95rcn
- TLSH
  T16ED31262997343E134E3883C49FC59E985A0300A95DBADCEF5BA15D3518BBD1FC3DA82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  sniper-v3-main/assets/roblox.png
- Size 1KB
- SHA256 7affcbca8129ec95ec16020abb195be6d96872f4164fe50ae59cd4a6a0794d17
- MD5 6bcf0b5f58b379ae055506381036bd66
- SHA1 92a69d6187ceb60a265d20591faa157a5cce165a
- SHA512 48fb414658b8d9804115f3c4821728ce2ed9e547c7ae0ca182a51ccb9a993504d020d4c89e1c33ca2a2511da5f3a5ac68b21ef76081f306e8e05024593187a88
- TLSH
  T1F421B7F5AF6DF1BD558C40F342B548B04027694A05438D58A0057CDD8858DA5662BFF1
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  sniper-v3-main/assets/snipercat-rounded.png
- Size 1.6MB
- SHA256 73ce846b74a2b6299d400e51789d61a23f9f453af9c02dea3c56f9441ee813f2
- MD5 c8c60fa43d2e52f81279ada476e13798
- SHA1 10f2a9618b7e3a380ee29ba6d4e9a1a1c7d83e6f
- SHA512 25e0e2dea936d26d653240b644edcac6245aa646dd4c5e0ab947365de65459c99caf8c8567c36964a5d978c83d118212d6e79a47b713aeb5138b46249175a8d7
- SSDEEP 49152:MyRWLvyvMkr3FF+GihLIQGtgFaB9Yw3ngotZ9:3QfkhF+G7QA5YwhB
- TLSH
  T1DF7533F5DCF2E3F6605703A191828A2131D55039EB5E5ED291BD8BB9C2D83532287FAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  sniper-v3-main/assets/snipercat.png
- Size 661KB
- SHA256 d8e4cbd25f93cf319d0504f9df20ca8a09cd4f1c63a223e9d53c0e23eb41c763
- MD5 2bce02db1afd198f1d9045efa8b8eb19
- SHA1 7c609226863d1d7f945b6a383c10276bcc907919
- SHA512 3d79ecb0e2fea259953fffa5610d759ddc763dea58647972478616c93f31e167607775aeb2a9e2307fd8c346e54d023b41d2845ea45230cd0d1c4ec3dd84db9d
- SSDEEP 12288:CcPGXl/fPAgVNcPD4qvB7UiO5IVxfxCTZBAufvlNriFrcHtiu/Z6v:CL1/nVeLRpZQGxfwNWURihm9I
- TLSH
  T17EE423598B5B43F3C9D0B274AD1E96A9F053FCBDEBC68E0560C7B432BA83355408A476
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  sniper-v3-main/assets/solsniper.png
- Size 119KB
- SHA256 e31807829dab09876c07d90cd71f43961e6ff0b568fde45fdae9cc63e546c8e0
- MD5 ea6b6d215d0c12c391e955ef0120be72
- SHA1 fc9d2fba34e6e415e02f933f276a4c1c7bf1e549
- SHA512 45c7ab5cecabdc6b1ba179a68b2dad5def68c7e4e2793204169a7a5f7917ac8783e91bd1d2ca4ae00ee5f0491ce72e4d79792f5036293366029f603d8a1e1611
- SSDEEP 1536:t6EEEn6M1PV7HzTTGuWvSTCjknvoIrmt4Hm+S/rI5FmCTfpF1Vd+zmBZw2/V2B:gEEM6M1d/TCBIrmem+OrI5FNTBnU2+
- TLSH
  T150C31218F9425AF20B48740063E5B08DA91F86B799D64637E42AD7B4D08E96F83F6F60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  sniper-v3-main/assets/spacedev.png
- Size 61KB
- SHA256 5f92ea5b86d2d923afb7799c0507ddede14c9aea4c34d5dc8925c99fc30e0e47
- MD5 bc1bc27fd0390726420ecb848a094218
- SHA1 a938b29e82508f4fd4eff5d04c2f52c57c1d17e4
- SHA512 3128b62fc49398da146585dc1a840af8e11ef5fd2d5ae52b6efbf1f72dc936327a6814c785040dc44b1a3cfe647c2323446081897174c9b07566d4c8735fd72b
- SSDEEP 1536:zj5hSjbhQyM6es2Kk5ixnMlLXnkwiG4y3gnl/9:zNG3FGixMlbkwiS3il/9
- TLSH
  T19D53027717A87D65331A5359CCA28C120687D29EE96F8977B92A4300C6CFD3EC2DC45B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  sniper-v3-main/assets/vex.png
- Size 529KB
- SHA256 ca684ba633a6bbd758171cb4977f375f672a973bde366543b1d3c8ee0849127c
- MD5 59edd7b1e6319518c14bda45f1ab171d
- SHA1 4cdef4b213da8d82ce55739f37937b99b219596b
- SHA512 8bf69fc6222756f30b07ae5d581ac848640c2ff5b510e39139a7b511f25b1ebbf48fb52618c8d4e2867bf9adeab3646a1a74ba4c5e0ac6c13200200b4015286e
- SSDEEP 12288:vwOK26WkZWr20dqKeg+jyusfqRdqdTwdCPq0b:vc25MWx6yuhRdyb
- TLSH
  T155B423524C91E92093B237673EF5EA1F1551A49DE26E11F318025F0EE2F9BE83489EF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Contacts third-party web service commonly abused for C2

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32