e2161676231539da3c2af5f0393ee1efb1efcfd7bc3053bc141cd53aefca20fe

Sharing

Copy URL Twitter E-mail

General

Target
Netflix-Checkers-Generators-and-Accounts-Tools-Pack.zip
Size 79.1MB
Sample260820-xamxpstcld
SHA256 e2161676231539da3c2af5f0393ee1efb1efcfd7bc3053bc141cd53aefca20fe
MD5 dbbfd2d6dbe733ba1fcfb73274f9cd2f
SHA1 235cea61f6fcb17c2d343a30057b343cb9c786f6
SHA512 641ec37fcbe725da32b31f37dbb447c14bc49efcadbd34e2ec0bfe6fe1d8aca0cc53c447639081765ce0cca0e09b6406961be7ba9e459d2c82021c1872ce9df1
SSDEEP 393216:F9JOI4TpuqiiCIyA/teBdo2zImDIjbzBCI/aplE1gulk3fI8NI/uuIVmInXdzAIE:IuoPtaE1gNTMLAd9GqMFFuTOq8
TLSH
T19408AF10B394D032E25A11B17667D2728278BC311716A7CBB7943BAE1D327DAEE3171B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

agilenet discovery

Malware Config

Targets

- Target
  Dark Star Netflix Checker By Scorpio/Bunifu_UI_v15232.dll
- Size 663KB
- SHA256 b695ac865a5df23e45ff991bf26b71e4f879c89a1a6fde0ba92f31904beaca5c
- MD5 7d723a8eb4d7e494ea488c13510b97b6
- SHA1 07f07c10e0661fa5f272a61ce69ed95c1cb251b8
- SHA512 5ff49cc06df33b65c2bfbf37d89fa6ae2b71e26046bd7cf96a374ceb840ec7d3e11761f94b0f67b9ae38e4fcb1fe836c09a0b227e4a478f775a7511eda9d133c
- SSDEEP 12288:q0MpAgk/SL8w92kboM7E2PheNUd6/8O+OeO+OeNhBBhhBB1xzyqtqKm9RZwWMN46:q0MpAgkdw/eC6/IxTtqB9RZw34HWOU
- TLSH
  T1CDE49D62F6D3D2B6E9DE00F5883C7E1E652DA9051B289AF7A3DC6F6E0D305D11A30247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  Dark Star Netflix Checker By Scorpio/Bunifu_UI_v15264.dll
- Size 728KB
- SHA256 b3710de17d2c2f84def83c8f3093df0dbe1664f34ab4a3adb72f1085e71c773c
- MD5 08dfad3a22e42e17a3bf8f4ee43a67f5
- SHA1 add9635ce5de6886b0010c83295df59d3c40a2b1
- SHA512 820163bcac0c44dddf55d423c06895d419b71beb8a2099501c3e334689dac9d034f543c72733b3bc56505d662bf821df807ef84c7d16a46a0217aebc7192ab60
- SSDEEP 12288:UF4dPwdZ2MWYgeWYg955/155/26Bm5h56GbU+rwo4o:Rwb6BK56GbVrwf
- TLSH
  T1F7F47E2BB69582A6D072D03D8A97825AF7F138444B659BDB1290436E2F37FF45E3D320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Dark Star Netflix Checker By Scorpio/Netflix Checker By Scorpio.exe
- Size 911KB
- SHA256 23ed26c2c6c4fa65ec649007dcaf46d90b8b5a8a3171ff871f5b330a22cf5d5e
- MD5 1bedebc6525864260a59bc12298630b9
- SHA1 8e891823bd78fe1a3d9e3d1315a8c4523956fb63
- SHA512 4b2dbf04393bf6398ad9d98e626d492bcae7af2ea69d45c65dad87e140cf5ea3303b8b8efd53d9dcf382467fddaaf4f9514c9fac48fb0675fa227592f123ca70
- SSDEEP 24576:NgwAwE8sVsqzvWsHQNq5YvmY1T3KJI9YL7zbwu:NgwAwXsVsqBQNq5YvmYx3KJI9YLDwu
- TLSH
  T11F152AC137788073D25513321D5BEA6741ADB82E076C3BCB6F86EB6F5A282F07A25147
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
behavioral5 behavioral6
- Target
  Dark Star Netflix Checker By Scorpio/api32.lib
- Size 438KB
- SHA256 d4394b8ed2b9ae91bef809e728453636a249ad4e25ff6185be013ac885bb6f53
- MD5 0cf8d02991b9b797b5776ca9935ce901
- SHA1 29cf8c07faa07a9d70bb123d34947eef3d1d1cd3
- SHA512 8f0c2e50ab2ea58c23f7d1332a82567c7572196cc5b41503c157c0d4794862f630611088ca140291875a03c12579f406b916bebbec57a406e190e8d6a9e25575
- SSDEEP 6144:MnpKnqt3lO3f5kXUGmo+8y6ds204eMreKqiLfLI0g5NMHMDctQ3:sKqt3l8GcPUdsqeMrtq8kNKW
- TLSH
  T184943B1475B2D1B5E161C133761BEBB059697430A72339DBB38427AC1C606CEBBBBB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Dark Star Netflix Checker By Scorpio/libcef.lib
- Size 300KB
- SHA256 00289c2fe9078c8b3ca899ef269179235a57c75777d7c65fbf408c03acfac04b
- MD5 7830a4ced35b10d5c52f1cb580e5be1a
- SHA1 5b671be8b002185cf91c212bb9fb57ddbeffcb36
- SHA512 8365202477e151c4ae0a13d6df4026379db84c9c13d8b6704b7c4e18c97c41db7436d08b0f87b8ac31957ccdf0d7b374ad6ff21d825781a46c9a078c4fdbac74
- SSDEEP 6144:50M13u/UbFV5X55WxbtOj4rG4//ng0eqqt7T/gWV:50MJu8hV5XexbtOj4rR/eb/gq
- TLSH
  T136644B20B242E036F9A34472AFFDCAA9552CB9300F5614D7B3C85FEEDE645D5A63070A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Dark Star Netflix Checker By Scorpio/nssdbm3.lib
- Size 906KB
- SHA256 9b996eb290c94f1c3a7b00bd8e9b2ef33f1cfc3e16b00d427d9267e8d24ec567
- MD5 25783918816d674edbaa87fd9a9990b4
- SHA1 e62c64d036edff03764ece224df18b5da73bd12a
- SHA512 dfb978cdb68cd253f4fb38d026a7339faed6403afcd986a27954acfcbfa7aa9201770ba13784e3e06d4ef4c10f82ccee0ce4f6ba4257edc653e993e716f5753c
- SSDEEP 6144:QRS38PbDbl+/HKJbH+C0PjfDtZjfDtrtnLxCZhN2jq8NWclJPpv80dUwtn1Qsi9B:QQMPbP3gxCd2vNWcLUinusi9opw/
- TLSH
  T14B1586CB8BBE9D92C2CC17752D43B9074065F80F90AFBB4E4E4BE66A651D33974DA042
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  Dark Star Netflix Checker By Scorpio/xNet.dll
- Size 110KB
- SHA256 cc949931ef9533adced83f3d58862e9732e5db7ad17b5fd4cb9d209a99edb592
- MD5 ac1dceddbc66a1ab7915ac9931f0cfec
- SHA1 22ce2ec96192a520a2a76a0fa272656c77f1041a
- SHA512 3906b3b7f8874bfd79f94e945d857dbc83ec89ed73ac13d49790c7fc4eed5c7e98c99c32ffc4a05795da9981c3163978c7f84a54298e94420e365c395392b3f9
- SSDEEP 3072:PqCUxh+3H0MznY3wihz0YmcTqnV+xnEdU:PqCUxhfMUTqnV+xnEd
- TLSH
  T154B328286BF85D15E2AE87B9D4744610437BBA5A7A03D72F1D6034AF18B3B50CA10F7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Easy Checker Netflix/Bunifu.Core.dll
- Size 2.5MB
- SHA256 5f72650f6d3a4a9b77bcdd74159282fcf724bd34afb989df6b6e075ea1dd6bc3
- MD5 d9f830dffedbb2bc371fa60784c01221
- SHA1 d6a778249e05ee04c2e5e386c31f88598338ab84
- SHA512 e8e7c712638e0aace109e0587cc4421697e1c6cacb64ff5d56efbe570615d72e72b5dd3afadd468e59116b1ed1326b25c459d5f2110b9d643bfca750825efd61
- SSDEEP 49152:9mTi+XhlhlFZ5vG+2PkuAc1B/xWCcieUuebO0Syigfihlh5:9azHb9LcFW5ifLq9yigKhlL
- TLSH
  T1A2C5F362E6BEB931C30FC5FE57032344C6D4AEB67A56D71AE14940E80052FB91FA81B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Easy Checker Netflix/Bunifu.UI.WinForms.BunifuButton.dll
- Size 118KB
- SHA256 34077030d0414c4bfa63cbdf9af3e6dd4258c3b949335d9290bc93db0b9d24cc
- MD5 c3356290e7e68bac31309c9d80ba34b1
- SHA1 75a23f1d262da114728447b14f4ce216dd58d706
- SHA512 ccc9c9adc8326275f68bbde62ae133b0ab538b0934cd6bb8579e343173323dfb2d46e83f4c6024e0eb3d931dc0707ec84c8ae0147b6b218f34b7c88e0c07c736
- SSDEEP 3072:wD8b3CjH6CGSinYSGOk7m4kP2tFkxgjsLb:s8b3AaCGSiYSGOfPYFkjv
- TLSH
  T165C3F73EA5DAFF31C34676712C40EB80623CAE577EB5D31EA4A94184D6C2E990C4D2B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Easy Checker Netflix/Bunifu.UI.WinForms.BunifuPages.dll
- Size 112KB
- SHA256 4cabfe559ab8ce3a7ed7fc38d70333adb26a3096845b81d92b38df374aeb9929
- MD5 493dc0ceb2a3cbe5a3e68e745339a181
- SHA1 016a1487ebf534f53187e63fa60227732415ed0c
- SHA512 f0e6c6d68455aa12160a922fbefebcb7665170b6d6692ba2b6f69cbbfeca7e897ecc3dd9076803ca58134a8d968fbc907486ccc32b7fff088378a7c6291d5c2a
- SSDEEP 1536:CIr8l4M5dNC+n6xNrPGXXJIoDEoNji7IiOka5cHk5m/NDKnC2VI:joiIN9KrOKgNNjoIzcHk5Y4K
- TLSH
  T181B36D3E73AEBE70DF067A3A617160005E34AD9C7D7DD3AAC78488985846BD60C163B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Easy Checker Netflix/Bunifu.UI.WinForms.BunifuRadioButton.dll
- Size 31KB
- SHA256 7f98567b2dcfae2a87cc4518cb161a21d63a86c83984fffa7ff8060607ab6580
- MD5 bd372f827daf1239c6ae91dbfc836f9d
- SHA1 8cfb4d4789f8b7c924426f38023e1cba9c281d18
- SHA512 1588c649ad6f06de18dcda65e282a130a5fb54f473cc9ee3829aafd41564d28414406e43ec0eb9458504ea8cdd9008313b78be0a812b852a69d88efe5fb5d466
- SSDEEP 768:3G7kcuu6vBYdzrO8biWhKXPMNdoO3PKgA:3216ZArOlW80LD/i
- TLSH
  T19FE21659B7C2AF23CB660B3529B091014F3DFF56E961C75FAA9C11484BE27C204D87EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Easy Checker Netflix/Bunifu.UI.WinForms.BunifuToolTip.dll
- Size 728KB
- SHA256 511790fed2ca5b914c89c224551ca692e1b9b5d2e41d6683efa1a5afda473a69
- MD5 439c6cb33261d1ba1745ca3cfcfa2867
- SHA1 0c6e2524dc9df96c7ccc04bebeebfe9f257c8a24
- SHA512 3105820d9955a23215d71e472a5d81c1c4fe02b41af301c0478b253373b1cd5849b33f2fe33e1fa905d82bf837c062ed3502e5fcc6dfa81d9a4f2cbc334804b0
- SSDEEP 12288:/Jt1RFR6/kikunQZ/gpbwasgHCThdEk+nfMtdTI:h5Z/gYbwMtdTI
- TLSH
  T197F46F0152ADBD70E3BA0731A801D1008AB7EEB178A9DB7FF68741D93152F9A43D4D6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Easy Checker Netflix/Bunifu_UI_v1.5.3.dll
- Size 390KB
- SHA256 1108c011910dde1a0cb6528a515ec91611113b83d0202bb305ec172e26f02d57
- MD5 d203ce2a89db4c8e91be65a586699b6f
- SHA1 6a6f2f4481b9ff145c9b39d1f111ff137d823ec7
- SHA512 3d3aa3defd80765d5973f4afca9110eafbdff0744146d8a7120fdf59c55b26d4e4bc17b4ef719bcc2c24263ca7b776b5a04b272d8ff09032fe9890d351bdca2c
- SSDEEP 6144:ajgVgVaGslPVCkyM9oNXebSTgzcH/Wi+RllW84y6EDp:K65X9opebfcHoGu6W
- TLSH
  T17984B52152AEB9F6C3DB4737964C11209A689DE076EEF37FC44B11D81053FAAD84225F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Easy Checker Netflix/Easy Checker - Netflix.exe
- Size 775KB
- SHA256 bf40add3169b6ee824cca12702c7ed93bf37d4c3309412af417d8e12a7adaade
- MD5 fea0b8af8cf1a5c57a88701dd3e6f1c6
- SHA1 b107009dbeddb3b796a7e0ce80886043c35ac292
- SHA512 032d5ad4df9c6123eab447380899e2468ae716373e27b7e7c956dbbafbc13427d6c4417686a4ebfdb3a7def16b250214ccaacf6e37a8d5391354c77e35477006
- SSDEEP 24576:1pwAwR4sVsOzvWsjQtq5Yvm41T3KJI9YL7zbwR:1pwAw6sVsONQtq5Yvm4x3KJI9YLDwR
- TLSH
  T119F45C1077808037E26211320D9BE2B795ADB8390B993BC77F88177E9B695F17B3524B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
behavioral27 behavioral28
- Target
  Easy Checker Netflix/Leaf.xNet.dll
- Size 115KB
- SHA256 939c8980bcb9bd9a2279714f6086714229e7af194ec4e32677c5a4ed96db5edd
- MD5 42cf916df4ea1d300201ec9559b7bef3
- SHA1 f58abe0ad5f3e033a9dbebcebd02692c5d35936d
- SHA512 2d03d21b369b9784329573e8219553f4c6b3cae66515ebe7409154c7457e3cfb95f8dfac5bae57820ade2a5219dd7d10ce34d72ec8971b2fbb7024a5a23cc1ed
- SSDEEP 3072:68eadOu2iOCIckQucNPlkZnVVkeLm/RV1oal:68BEu3OCIINWZnVV
- TLSH
  T122C3293577F84A1AE7EF8778E870521047BAFA496902DB6E5C0460DF1892B908D12FF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Easy Checker Netflix/Protect32.dll
- Size 744KB
- SHA256 73b04c3db43dbdf62da5a740a3945fb5cc7ce89deca440c05cecff2c201f2ba1
- MD5 97b6f7b91e343dae3b3d822df2b8e39a
- SHA1 a77b4ea621aa7896a48c7e558f25b54c0956bad2
- SHA512 1798e968b16206185e990d2afbaea9b410f4a9c40a4cd3e279665f3900b0680d7fcb0dda71fe5bb3b2cc0a0949c0bd62af4efb16753b59aa93761924a8cf054b
- SSDEEP 12288:EbpDOABtX8l5Ht7v7im3fgKimJk+OeO+OeNhBBhhBBy/kJdO/kdhFP1RpZEmvnRO:EbpDOAB+HdUQ8/kcklPdZEknRv
- TLSH
  T1A0F49E62F2D7D2BEEDCE01F2983C6A1E652D9945173847E7A3EC2B2D5D301C12A38356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32