b00f7ce1e4c6a728edcb58c830e6308e08796f5301e7a8171e2367a87bcd3ea6

Sharing

Copy URL Twitter E-mail

General

Target
ecdaf292-c02c-4261-b9bf-8cbb43f9854c.zip
Size 34KB
Sample260822-3rf4da1bkb
SHA256 b00f7ce1e4c6a728edcb58c830e6308e08796f5301e7a8171e2367a87bcd3ea6
MD5 26b6c15dadb156b54ea1eeeeaa7545b9
SHA1 a8cb7492e11a49f88bbbab3a9759325f25a1779d
SHA512 ce20fae97d00fb94f5c0007c540a062fa6ad6c4638a72774ebfe947266250f05c4c36e9b7c31950eba308e7c537a3584e1ad4510cd81aa13d5b25e390532a064
SSDEEP 768:EI2TRR9GN52yIvvOke8mzl2srDqSJe7JzBfLp9fOeYa43:EI2X9U2FvOl9gsrDr2JRjHe3
TLSH
T190F2D12FCA478574CEAEDB7812EC507EC1CB6A9D7D228F61AD1001593DCC6019672AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  ecdaf292-c02c-4261-b9bf-8cbb43f9854c.zip
- Size 34KB
- SHA256 b00f7ce1e4c6a728edcb58c830e6308e08796f5301e7a8171e2367a87bcd3ea6
- MD5 26b6c15dadb156b54ea1eeeeaa7545b9
- SHA1 a8cb7492e11a49f88bbbab3a9759325f25a1779d
- SHA512 ce20fae97d00fb94f5c0007c540a062fa6ad6c4638a72774ebfe947266250f05c4c36e9b7c31950eba308e7c537a3584e1ad4510cd81aa13d5b25e390532a064
- SSDEEP 768:EI2TRR9GN52yIvvOke8mzl2srDqSJe7JzBfLp9fOeYa43:EI2X9U2FvOl9gsrDr2JRjHe3
- TLSH
  T190F2D12FCA478574CEAEDB7812EC507EC1CB6A9D7D228F61AD1001593DCC6019672AEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  methods by govrwtf/misc/300+_methods.txt
- Size 13KB
- SHA256 dd344cf575e7d3afcd41c2bd0c3bdf6c1bf78d1b7f469f05fe657d91e47e333b
- MD5 4de88fb38363cc9df837db01c9c4e2ab
- SHA1 26275fd6c18c0b66ce5c17fc7fa2349716a46744
- SHA512 631c46b7724b95bd4ee8fd3028020ae8d30fdb0d1a5c67cb00c40f4f595d9f8355734fea2b69e38a2cd68558d1f7a648834f926442b52f130ddfc753d240db85
- SSDEEP 384:XauyvyzYY+LW1UMxquD932CBS5alUqUQAtn6lmFRT9kMgY+mJYdgY+JYaD4Vvc+z:XauyvyzYY+LW1UMxquD932CBS5sbUQAw
- TLSH
  T10152E7FF600381301B7A5A9D3A1D719DC22B506DDDD3A482F46CC27D2521D3ABAB5C8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  methods by govrwtf/misc/30x_boost_method.txt
- Size 757B
- SHA256 8b2d1acccfd794ba446d6f2dd299c194e7c4ecd46868893b5b59ec6488a0452d
- MD5 c390280b3e84cdc4240d12cf2381c095
- SHA1 18399e97bae324773d72830cbc5d5dc479bb59a9
- SHA512 d7a89368e053ddbc6fb22f2eadaacade126723b8a70670fd1f21d19b7610933aed0ca0ceadfe06dcae233557436033848674d8166458d3e603c48cc29eddd435
- TLSH
  T17701D0BF5654013F02A02586D86FA0BAEA57847CF07E0223B11EE0750BB5B29713F788
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  methods by govrwtf/misc/80_carding_methods.txt
- Size 5KB
- SHA256 0852cfb5526c637e45fa07dc0120b8306f019b31076dadf726700701392ac3eb
- MD5 4b4795dcdf0e73ba9b3fb70f4d3d4dd4
- SHA1 0832145d623c6399e76d3946512af3e7b4782552
- SHA512 c081fb3be389560d92a3d57541b6bec9ea0302e35216d63168b8451f647c805f4796aca066b5b4ab78ce828c4f6976cf227dd38957961364be84bc23a6619360
- SSDEEP 96:MrGhgrQhtr1ohGrTh3rD7hhXTrbhmrLhBr1hTrKh0r+hmrvh3orWrvhxr0h53rMA:MyhgEhtuhGXh37hhDfhmfhBJhTGh06hB
- TLSH
  T1EEB110AFCB07455A3BEF429DC4DE3F4DCB76991A0EAA55F0BF81962C2484DB52C1052C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  methods by govrwtf/misc/Discord_Nitro.txt
- Size 1KB
- SHA256 62796b942e418dfdc5a02862cdd1d00ea5e09c62b16b893518141e400f3a39c4
- MD5 fa6a3e2c44b13d0e516c45f8b8acab3e
- SHA1 8f2671e0c7259af1dcc90e60eb9899146d168cf7
- SHA512 4db596ac8a52275bf96fbe40051445c83dd86063f9ea2d8c311319a588014aaf52d4f037c1700da845196b3c0b8cf05425a0d29242ccda3213ab02f7330ac1f1
- TLSH
  T1F531002F5740233A21A40362514FA05BDB6440F593634CB62C6D909A13FDAB383778E8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5
- Target
  methods by govrwtf/misc/Farm-Nitro.txt
- Size 463B
- SHA256 20d4237ae84764dc4b9e8b9f6846f0f9891c5fe428973590e6b0f0952e9a5a47
- MD5 fc76df7aed1d4fbc972ab0c44796acbe
- SHA1 6e52d4a51c73780c0ea3bba813018aecbafd16b1
- SHA512 e4af3beede5f0a8879bab3070e16ca7ad90b7b90bad92f5572f5e859b17994e40c557dc677c2d4dfa9d8f76aeebb8659c38c6365d88f541f477a2c74a43fdfdc
- TLSH
  T14EF0D4174E10433B05E00769A54512DFDB6154306A3BE377642568F9237DB1ED774B85
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  methods by govrwtf/misc/IOS_Nitro_Method_English.txt
- Size 649B
- SHA256 3e8dba241d28cdead23188e0d90a525e729a9a947740fd64072739e37c581fbb
- MD5 e1a7ddcd9fb13b6e06957d69bc496970
- SHA1 d812ad15f4db15ed32d231467fd5b5c789bec2b3
- SHA512 5c088ef74d663a4251f33a62f620ad4308c458ba181a546b7c66fdc2a7698f4ae658124eaf7d3e65040aee88d075b63423edd19c48602d6c1432a2e027dfcfa1
- TLSH
  T1F6F0991E52CB927141F661D9095C53A3E204B1BED32EE23A70DDE0D80362A15136F899
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  methods by govrwtf/misc/MONEY METHODS.txt
- Size 1KB
- SHA256 e66119bc335bed71950fb00680cafce23ee9d160e5dbc3635a2bc7102e6862ef
- MD5 0ccdfd60d101195f02d3bc96fe5af26c
- SHA1 9091155a7f372bfcae51357613862aacb9023c68
- SHA512 739e00a6a4a131b1440012523c0eacc7dea1f12cef1a4b39e17c3643de4556055711cc4b7426f3f79b7a216eff996c080fde47854960aef7494855222b98590c
- TLSH
  T17521B4DFC64B60F102B0C694218E70DAF32A163CDE829F94B44CD02883A81212B36EBD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral8
- Target
  methods by govrwtf/misc/Methods_300.txt
- Size 49KB
- SHA256 c2514e44c4a5b0927451b12fd8c6fe2a48454b572847ae1e673914fdb9d2d148
- MD5 926605fba2e1f2fcac9305a66f25e388
- SHA1 27073529cc4bc04c4d5ea0297b8f09a6a5b2afef
- SHA512 7c7add43b493a27dcd1dab39c2a58413550c9a014c2b3f41532e7af992355b608f65ab37efcb92b9ef9b82e85429dc531ab4b40c15251f06e59c28df3ba61135
- SSDEEP 768:QBEX49v1UC1uUkNoPv+lmAOsa3d+cBfiq7ok/lcycZauyvyzYY+LW1UMxquD932e:vdyTokiycQ0Bc3TYdk7s1x
- TLSH
  T1A833E4BF9D43CD700B79D698764D30DAD22A906E9CC3E445B45CB079272DD3A36AC88E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  methods by govrwtf/misc/Money_Method2-1.txt
- Size 796B
- SHA256 c9f08d79e5e2fff021d4e7d023558cb18f133645d743511099da73fa4827756e
- MD5 ae74d4d1e951932d4d7be2b2fb741079
- SHA1 f0fd06ce5cd00a03012586919b8d62ed39268cf6
- SHA512 7576baa17dbc6d5f19d9f1b34a826b473f5ccc8e4f29b97ab32fb1c91f531ae35605616183da99d7019d62fdb0b7f013cad53c4a9a8b446bb2879529253ccdab
- TLSH
  T14A01755FCB0B627022F0DAEA355F36A7E3143638AE60ED64481CD06853755E62777CAC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10
- Target
  methods by govrwtf/misc/NITRO_MTEHOD_2_1.txt
- Size 1KB
- SHA256 c949972740adcced2bc6a0784416710acc711b12838f2d416461e3eadfa43839
- MD5 1b5b5ef413a5b901c9c250453dce5554
- SHA1 5d479d35cddb71752981d804ad4c495b7d714401
- SHA512 1fc394c62ca352a6d5a7c70e41ad28f53a339c423aa13416b120005167ddc17a4844fd807f2e07fabb2ddefbe51577ba29646b78e192c241caddc485e7cc9162
- TLSH
  T10C41213B9782637B21E50352104FA15A9F6480F5D7674C7A3C6DA09A23B9A7282778EC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11
- Target
  methods by govrwtf/misc/Thanks_for_1x_boost.txt
- Size 6KB
- SHA256 ee4e38af7b4039fbeb4d6747c40c8f949b90f6593e6071158dc6bd1236d9df5f
- MD5 973eff3964f18c4ad076a9b16a9dedf4
- SHA1 563669d571faffb9578d86bfdc68dc3204e49789
- SHA512 75cbba9746b6bc2e21aaa100d953a496c55c8d213e4451944089263a248ef3f7ca98f70c465bc2ce37cb870a4fa3431400cd214302135e397ede2cb638ce3c19
- SSDEEP 192:iOfjpnkjzg3WhEi+oR7Bk6q+i3Qc211ihXt9CPHgMIioZ1Ol:iOfjpnkHg3WhEi+oR7i6J2Qc211ihd9k
- TLSH
  T1AFE1C9B3A08954B01F6FCB4DBA8534ABC33A50AB39C6DCA4859185746675D7DB07AC03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  methods by govrwtf/misc/nitro_method.txt
- Size 551B
- SHA256 eeb381ed206bd864a0b6bee6c420a074e2f2dec67d5d36c5346ae808d5111333
- MD5 ec59a4078a96ad90ea4d36d5bd160e2c
- SHA1 471847453a5d7838cab14d8a578e17b972a5d53a
- SHA512 4505e80cf56c64b85249837e9a77ee99c0b34181e172f0daeb670f905eb33cb107c92d36fd9034b55b4612a938937aac5e7ad89b21377dcdd00ae59434600a48
- TLSH
  T174F0E1B34355423363590243090B6172ED084281C5F288343869A50D33995F352AB9E8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13