c696032f87fd25ff8786e82159957ef0e763faaa0a970529b00a01074fbc4c67

General

Target
888 Rat 1.3.3.zip
Size 238.2MB
Sample260818-dg3f7av1ex
SHA256 c696032f87fd25ff8786e82159957ef0e763faaa0a970529b00a01074fbc4c67
MD5 a76629477787258a36727aff7ccad78f
SHA1 d20c6b3aa81a6eda25867c22f2887895261ddf8b
SHA512 ca70cb1dc917f44896d9ca9ece24bcca7fa64b39417f9df2fc0cfeffdd1342d9312ec6f041ca26a59946f348d0e496f35c7407e152474fe28c6f5bfb1fdb324c
SSDEEP 6291456:78aMbLj668A7lSVsuocKV30frs5ZxdPPwSl:78aMvj66888suocKNZx14Sl
TLSH
T152C8335654EA7984A794D6675DBCB23CFA2E02EEC8780853FD670136DAC0191883FE73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  888_1.3.3.exe
- Size 233.0MB
- SHA256 689a7d9f559465052ee580237e142ba8ea6fee88bb33b6e598b130431ddabf44
- MD5 8e1f465865dd91a77bc4d7e20afe6c6a
- SHA1 98bb2f9be20f10bf7011304fdd4005e67c59348a
- SHA512 01bbea50a296bd451f71f30860ad009c0dbb7e27dd95b117d5a1793bc6a45eb8a416458c4ee430e837c8e14021bc3927be2676ce87277c9b9c6b9407bbfa8cd8
- SSDEEP 6291456:RrHQZY4FFsxeCfKM2Z+x+PWrLhDGaS8zg0GhZuW3SAirUEV0oSmj2yz5Ul:pYf8fKpZFzabgdZhFirj00zal
- TLSH
  T169C8338255C313A6C5813BF07E99BB074AB337B75931818B23AE383325A5C454FB96B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution pyinstaller upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  keygen.exe
- Size 8.3MB
- SHA256 92847e0762158567bca2c7608e0bc62d640f82d0bc45b388d52b61beb532b417
- MD5 c6e2a2119a6d4a709b13a9a6b2d2e5fc
- SHA1 fc21eddddf9e907343c105d52a4b6e9a9969329f
- SHA512 93e38d2910e5224b7bf6f9d273f4f84d9ca701a3e750063bfe8b1d80d72bcff8a8337d2cd1c80f59588862938e9940720642c5f3c658d687ad3f66562e6dd02b
- SSDEEP 196608:d/CogwCJcCKzCMoni3DvozQZ0bUQFOhSVUeeLxkg0otKM3Ishxg5ZQEwDlvjngcm:oog3cCKOMoi3DvozK0oQ4EVUee1kg0oS
- TLSH
  T14396AF16B219F204D22A1A3F41608CB017D59742CE99FB1567E73C53B7F1382AF1AE9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral3 behavioral4