687abdc1a56da0a4586a5697c395dff9118129beeaf2f5e5616a005511ffa334

Sharing

Copy URL Twitter E-mail

General

Target
Nitro_Sniper_2.1.zip
Size 513KB
Sample260821-sp351sgm2v
SHA256 687abdc1a56da0a4586a5697c395dff9118129beeaf2f5e5616a005511ffa334
MD5 76b53d2e2d4c0dc0f26bb4df4ba2787c
SHA1 1ab369b5635c5a7207b224e5907a130174f2b952
SHA512 6b1ed221e7e494f5c08d0523e2ce8c3e00ab42af1637f1b70f22c693c9823542f8916368315c61582f780f2b16cae4af78a0ca02ee9f4241435f27edef0e7c14
SSDEEP 12288:5TibgSMFBOBSlqrLKu7FxPbzJTVBU+8JM9hAC8Z3OVOBRkbKQDiUbpK8:QcSMFYZKkxpTKJM9mCw3OVOMWAPbpb
TLSH
T156B4231AF4D078CFD68ACDA394291C785F6C96C9CD126B7247C4EE9312842F627A44FE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  LaunchTool.cmd
- Size 30B
- SHA256 0476281e2ed8cca25b881092334c2aa7bca82c4be9819fcb9cefe8027e532f1e
- MD5 5ff63dcf35e3e904be89dcdcbee9cc62
- SHA1 5131d55fd2ae68f0a7caf191dfc3df750413cb17
- SHA512 25c45c0b7549c873d6ef59609afcee9d53f21c923aead873d039a3ef7a3349eba732d61dc378df65359a651427326298b8724e94a8faf06e22709b70f33f2b77
- MD5 SHA1 SHA512
Score

6^/10

discovery execution
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1 behavioral2
- Target
  lib_bit.txt
- Size 289KB
- SHA256 ead242a036f033f0829afa33768814be168ae29431d9de479e63a80c4cf9f431
- MD5 159c15741366f6837e0bffb6451b3def
- SHA1 e6113e61e31e0808216fd6015d9b06d038c9b6e3
- SHA512 45927d3085ae262cbecdeb0937d34c35e39b0541d8c0e062b189a13371f846e9b8a93599cd8d66e5c23534fde8d5ae9295bc284fb187736f4ae0dc827a2a3b08
- SSDEEP 6144:g3qFhFELwVIR+hB403W4kKybfFUWsGXaas6:rFhAwVS+hPm7KyDFUfgr
- TLSH
  T1FB54E8E1624807D2CAAB7591EC638997637724F1878A5A8A4F0CF8E4F754593FBCDC02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  lua51.dll
- Size 477KB
- SHA256 ef224f48255771d28b15169d60c8b0a925875dba15b3bd245c0b34d77290120d
- MD5 e3dc99990b09c552d005fe8de3b547d9
- SHA1 ffca5548df01907819e170ece6743fba095094f2
- SHA512 25ac5f6d878c8172396378678281a27992b8d4d0766d4ff68f994b3279ffce63d00fe2a5e6b44ccd234f89763d4c4cef3ec2101df9a84ae5c0554292768a5216
- SSDEEP 12288:VgjU4useIZsjm+UWJ/dUi2H1c/LBJoum:VcG7jm+Dxdj2H1w3
- TLSH
  T167A46B49E6700969D96B8178C9574E0FD7BA780403609AEF47E0BBB72B33BD5163B324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  vm_s390x.exe
- Size 286KB
- SHA256 1f546f1b4b2cd404fdd2ba9b52223ecf935ad26588993f703bef69db4c94034e
- MD5 6642d0d5c321637c1fe4d714fa585453
- SHA1 c2fccea540ed7ec1d2dfd7628c57d5eebc3da75a
- SHA512 c6ce73eeb9f9cc56323cee4a444ca5bfaf005f5a336d69fe350bab3634e2938957b382e53b661150d0d7c52905a20ae14386a8a9eab3ec0d1df4de6a2ecae767
- SSDEEP 3072:wrswOD2jjQ7nUN1GgbbMfKn49ro2tEMbrmEGBKbn5noV+DMJR4:GrI24rEHbbMfKn49M2XO5B3YAJW
- TLSH
  T1AC549E55A7A414F5DDB7823D8D46898BEBB2B8110764EACF03B041A67F277E04E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8