f3ed7750c8ba6fc2139f79880848832e4a7d9cc74b052e10992f2458489531a4

Resubmissions

23/08/2026, 17:12

260823-vq524shq9w

23/08/2026, 16:54

260823-veq4tahq3y7

23/08/2026, 16:47

260823-vasf3shp9y7

Sharing

Copy URL Twitter E-mail

General

Target
Archive_file_760878.zip
Size 726.9MB
Sample260823-vasf3shp9y
SHA256 f3ed7750c8ba6fc2139f79880848832e4a7d9cc74b052e10992f2458489531a4
MD5 af332fedf804fbdfa65e84b2b2925b0b
SHA1 4e464e8ca7e5daaf276778e5723b0e8b97896415
SHA512 eca48a343f16a6dddc10a01544a375967d07905f2fab0aac8a6ff28e3ac14fe93687010396a11eb76a7161715ad31585128c9cd255a64ba43475e40fb851beee
SSDEEP 393216:GX5N4+J1K45KuHdN2JzqOtssKLYi+YX0RBt5jO57CUlJimQJWJQgYgOOiSH2tw+A:ikUr2hqOsJX0vXihnPYz5SQH0TZZom
TLSH
T12F893305C92DE4D7FBA376B8B8B0D057DA2F50B132DF9158F99A31F4AD4A9006F2C909
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Archive_file_760878.zip
- Size 726.9MB
- SHA256 f3ed7750c8ba6fc2139f79880848832e4a7d9cc74b052e10992f2458489531a4
- MD5 af332fedf804fbdfa65e84b2b2925b0b
- SHA1 4e464e8ca7e5daaf276778e5723b0e8b97896415
- SHA512 eca48a343f16a6dddc10a01544a375967d07905f2fab0aac8a6ff28e3ac14fe93687010396a11eb76a7161715ad31585128c9cd255a64ba43475e40fb851beee
- SSDEEP 393216:GX5N4+J1K45KuHdN2JzqOtssKLYi+YX0RBt5jO57CUlJimQJWJQgYgOOiSH2tw+A:ikUr2hqOsJX0vXihnPYz5SQH0TZZom
- TLSH
  T12F893305C92DE4D7FBA376B8B8B0D057DA2F50B132DF9158F99A31F4AD4A9006F2C909
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Setup.exe
- Size 102KB
- SHA256 7123e1514b939b165985560057fe3c761440a9fff9783a3b84e861fd2888d4ab
- MD5 0323998e0e85eca5fd90d9f8ecbbd6c2
- SHA1 56dc080f728d7a276495d6a4371670f9ea71519b
- SHA512 2b56c210d6c690cef89ca03563cec186576c50f6b1b60b287afd46a14cc5c9dfce31dd458066098951a79daf3b367fdb0787d3bdc74fbd8f69425877f263b0e5
- SSDEEP 3072:53Yj+8JlFCumUbyJlKP8HRvkduTK5Nrh2o9Dj0fmoQ:1Q+IFCumUGekHRvEuO3go9kfnQ
- TLSH
  T167A3F206BB1615BEE922803EEA970666D7B0FB6217514CC71211A2301FB7FC19E379E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution
- Indirect Command Execution
  Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.
  defense_evasion
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral2
- Target
  data/.6tG
- Size 328B
- SHA256 bbe3a135405e89f59226cfc63f23cda88f17b4daed4b82c3f19f9eff4f504311
- MD5 422caef36ec1bcacc705ddc64274a3df
- SHA1 2de40bf809fb6aeb0eb1d72f6b3bc604cd6eea85
- SHA512 a6212e051cd067ea70b67f8397a726bc637bfed7de382d7c137994f958b7e7f8cfa4e8849ad383810ff040a076ed5e58ed024d27101c6929ec27539d7999007b
- TLSH
  T17FE02D1A36BB3A348B08F43122BE984855008C932399E906AF385C1DFC955906B3B2D2
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  data/YNdqBjUX8t0U.ru
- Size 10.4MB
- SHA256 10b46df53637ddf0f83cea617c3f19fcce79b5d5accdfacb8fe0aa287aa8b0f2
- MD5 926502ca6b65e61386545f7ef903485c
- SHA1 fae8a037eec6aeccf03e1d4fa360fdb7e1d77255
- SHA512 59b8f53c3ab77fc6687e782155ce02613938b44b104a4c4c6222e2ecfd37ea1fb4b61b1acfe41191b516378f599c935c52de6b81a6bee0e306e9b2c72101123c
- SSDEEP 196608:FmviHT7RU5b3lkUEwpq+/8RdmA7zODBDgEZXXTMlDZahFb4SGdYTNSCoUHV24Z6E:FmviHT7RWb3lkUEw4+8RdmA7zGJHZXDl
- TLSH
  T1DDB6A82E12E7536DC3A2A7C58F9064F3B94FA6D35C63E5F8FED24903801F1A91A1C919
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  data/cache/bytecode-39.rpyb
- Size 366KB
- SHA256 a88563c222ec4e6f3e4c794403d16bc7e6c4d37d500553afbcb4ec61e6164c01
- MD5 80b649b09c009c9b7f30ba9121c84c63
- SHA1 1a63aa3d2e3c993a742671b549cd687dc09cad23
- SHA512 36cb2eb2b5e5318a9be6c6ba438396d52945e76e653c65898d10b5514f76058339df5fc6114ba61b0df77f1c5bbd8380d307c3f3fd72237663881dbbb9bebbea
- SSDEEP 6144:iad71GRb0EejU3yfiFE2DzbuJ014QsEel0Oyl0JewbTAboC/7esQvlpYseioW/Fv:ia4peoAyJzbuJ/RE+yUewQboCVQvlpYu
- TLSH
  T19D84230988C710040EBC87A97105FA7CF16C6629A3EA637955E7C6F5FD1E8662D62C0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  data/cache/py3analysis.rpyb
- Size 69KB
- SHA256 5b00d9f6bd8b819f46e83f18ada1f618edf9192884c443d45d381a480d6729b3
- MD5 d2a62d6ea64bf39f0820e4e36e0d8c02
- SHA1 cdbbcf13318ebadfb6808e42b6e97a9d5e49d075
- SHA512 3bb5c64cde41bf00bfb40ac4280bde35b70a6fc572cc3bd47a3206f1886305f2a91a890047657b12b040aa0e214f56af7736573bd3ecb576b84c46540c898217
- SSDEEP 1536:Y6KDNSwqoiXumM8GEszg1CR24NjF7Z/hIkFMR22AsMNRSi6xEY3NRw:fK4FJumM68gsjFliwugQikL3NRw
- TLSH
  T1DF63021A8249773BB414FEBDBAD6DC44C528F7C03EC603A39F58B99856D4DA03652BE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  data/cache/screens.rpyb
- Size 125KB
- SHA256 7cfd1e2b6df9f27978f0f2d049b3509b5f595f0cba0c9ecc6b186fc077d4190c
- MD5 aeb7ef7b848588302899e90317167a3f
- SHA1 49b9d0b2a457d1863c7d8157c953c88a0b07bb73
- SHA512 983fd91b10f036b53ac86e00097abe808375fab9e1c9995c2694b38c65cb5baccf6aa1b000c01f3e3ab7008ae51e3e300ff913cefe77f6ee072f9d17ed585ba3
- SSDEEP 3072:Z2epl/0KH70Jp0soBzVtiE58qmgbIclyRldkm2wZ6EL/bb/qHaKq:Z77jHIL0vBzbiE54gbyDdkqL///qHaR
- TLSH
  T19CC31327BA3C184859A47C46CE81AFAA06E04C0FE68FBB4B41867C9C9C1F542FF51DD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  data/cache/shaders.txt
- Size 843B
- SHA256 ab34b29e8a360fbfe78a91a0a9359e2fa01966c0c0e8f6b44fb7066644ce785e
- MD5 0497f221a82855c916902e51e65dbed3
- SHA1 8a074eddecb5f86574e6e31a8a7c0025a0e6841a
- SHA512 5a40e7beebd12e90b60b64aceb36173f97a95c1b950621f5d8e274ddf178a7588a077f41a0f12b42d15efb006451aa7cd4d66c76252ce76b1d81f0b4086cc935
- TLSH
  T1D4015647853CD70C949DB341251C114E7D0BD25817CAA6FAD96755B2C3B3F0C58D445F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral8
- Target
  data/gui/bar/bottom.png
- Size 1KB
- SHA256 d0fa864b9b99046be49e79f6e973ca6e373299cbdb4a4ccce02b9dcb2e93e625
- MD5 96e82a1c7f3d7e0a656a2cdfb390337d
- SHA1 306b57f3ca026bb786fcde76f5dee497e3ba9b93
- SHA512 1b54f40639f74f9193a6728eb10d9863c887c8d6e4ed9b2365a7e83a9b1720acb961337fb3a30f209d69bda3e1e5f4d8588e477b0064add8ec594a64fe4c87a4
- TLSH
  T1C8312BDEE33E1FA09380ECA690707AE7CF1E2354FAECB45C95475B705947523A08AA74
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral9
- Target
  data/gui/bar/left.png
- Size 777B
- SHA256 aa3c509124b64c16a72fe06b560b30fc40f7ceeb92063b067d105b1cc3a008df
- MD5 f65e3c841443b60f54902c1b051bfcaf
- SHA1 b6b8d22a5740fdc979e6f5881f3b504ced511552
- SHA512 4996e7ade5c1a8deb8d38d343a495ea71db4396f3093e24f18d7da263036b1bfc738114c727a9db8e96f13971c59ca61ba8aa463f6e7971d848b47239141f37c
- TLSH
  T1E801C088D654E5337208119271471AB254117E7F7A74ECAC02C73A1F168BFB92CB9DA1
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10
- Target
  data/gui/bar/right.png
- Size 1KB
- SHA256 4e14bc58703d16e1bcd8f7303e2f37eb26ef0ce80a039505d431071555a92f0b
- MD5 07a3cc7aed66de291f49451c2d1baf35
- SHA1 0d76ca99186a02d0513701e2659297e8494bcb25
- SHA512 b22e097503e5d50ad65366872e47f7d4edeaf054b2f7dd697a2ac74253f3e87ea9cfe93a50b79ef7dc676db3754bd0419c72f1d9f59b09f8f33150d5d9d60bc4
- TLSH
  T13821838AEA62983774011161FA894DF38041AEAEBC30C26C80CB795F0457F703C70EA2
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11
- Target
  data/gui/bar/top.png
- Size 1KB
- SHA256 b2e29f21b20521ec5740e978bf7f4be0b2a2354e50507e884547d807aa2e3eb8
- MD5 ca9601e1bdde48276d5991365ad72165
- SHA1 3d802069f5fc2d71f2eb360cab14eb378abb2cc1
- SHA512 d9013e3751345ec6a4c2a7c790c09d444b7aa4d7d74cbe612cabc3e5bef69b390b0c3179162f6723a3f3c9eb7a902122d2e8ca3413f8ce3fdbcc191206d8af84
- TLSH
  T1C71190DAE33D1F60A340DCE6A070B5F2DE0E2305FAFC6498648B9B740A975779049B71
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral12
- Target
  data/gui/bubble.png
- Size 6KB
- SHA256 008730f3c815929a35d9106e32d79ca9ecc25cb80eb226e6b05a7dc276b0d382
- MD5 cfb195b7e3643c7e6bb280ce5fa5b03e
- SHA1 a19bff6221f7c810ac16533e39405d6134445f2b
- SHA512 59cf930c119abc79a1a5d7bcaa1d7913939d1a8f5ea3782a2db09475ba6d3faee994dfe0b42686b84015502e6c48ef3bd57e0b3a984fa64aaa57112351b1d231
- SSDEEP 96:ttTlZ6i7DfbKvW2rfhcJ7vZH7z6G+WsB2llHnJaKmpm4RVbC7NtxOi8iut3O:vzR3KblGhHiG+WsElhnJ3mD3SNnt5u9O
- TLSH
  T133E19E02899CD626D7F940E189492B57DE710A3C0ABE8FE19CCC0D57CAB0D0B9B598F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  data/gui/button/check_foreground.png
- Size 542B
- SHA256 ed7b2aa4aefabef1b6953ee2283680c0fec9f72e6d83b4783d234a24495522c9
- MD5 4571e217046578dd0ba2b1cc52f268b8
- SHA1 11d475d754966af122107374e5e815a329b30254
- SHA512 c4eee2a85ae8dabd74cc04258fea49277bd887f04fd5e78c645fd47d48d69ffe25047400dd4b49ad0323977167000c7c99879b1c06f7f2240be4cf40694812ab
- TLSH
  T1C4F026B385C0CC1C715D1423353F2D64713E97491114488C1CC5E2BAB20DB08E5DF303
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral14
- Target
  data/gui/button/check_selected_foreground.png
- Size 275B
- SHA256 8d7ef45ad05298a97684e0f3cc39dddcb809789fe89bd0b07a9c150d48830ca3
- MD5 d3930b2f3a1e4630b72afb1d942cce45
- SHA1 049d10bda847532e05437073fb272ba23413cc0d
- SHA512 a0a0f5d1b47e330895f657f446e18f8ec56b3ad74c18b7332866d2a1cba508392d84b421adbd897941cb9044b11b9b5aeeef557e8a4f1a5f6960c83661cde0fc
- TLSH
  T13BD0EBB68BE30C33F120B2A38A6037B0F434D184062060320426B0BADE6488404AF342
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15
- Target
  data/gui/button/choice_hover_background.png
- Size 2KB
- SHA256 3517aa6e3cc5edeb138910d37b49f66f4530016138ca0c8cbbc45d660c33cc4d
- MD5 82964219bd8c9d3f511ae75cb9cfd8f0
- SHA1 cb6e6ddc3eec6de1881c05e169529e8096cf9117
- SHA512 ce8c0d40279889ad53cbd6c14bf99befbb57968e237f2bbc4f2108d0117bd5cef3dbb245606afc1ad672c8e451ff49141a6098a523e226d0f4d6eb2c55ba5b0d
- TLSH
  T11D41EBC1E7600033324A0002B218895386885CBB7568ED1849CB783F97BBF3A6EB0F43
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral16
- Target
  data/gui/button/choice_idle_background.png
- Size 2KB
- SHA256 6fd5dd37189209d4948a08492294d3bf55c8805fb8cce8864794c90d818e0fc5
- MD5 b5ea3b010223f55006d70451cbfeb82d
- SHA1 f7522ecd1b4b617de059f8860cfcc0f2f5c1fe10
- SHA512 6b48803f767b88ef75df58a38bf7ab377a46f5af6df2249c72fc50d8824e18ad7ed4549a8bf218078502c3257ad110e87a96e305513b3b476b369206cb9c144e
- TLSH
  T1BC51FB02C32901B7BB1A1A28B8FA24976D064C337C41DC6689C7B56F1357F7A2CB6DA5
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17
- Target
  data/gui/button/hover_background.png
- Size 763B
- SHA256 225b05c73dd59eb0b1ff6804d260c3b2d170928c13f64b9366df15e5fd7886ab
- MD5 79e4069e9d458879269abd856921383e
- SHA1 490098a2ef4d33a2979ef775530d638ee9119ecd
- SHA512 d135b1002e408e029c1a550ff8b1cd9f83a6ad33729d098c2e57485bba647b89fa0c58d11b9a60a405be33f17958e7608f9d21ae367d34ed4e84bc18df3c973a
- TLSH
  T13C0127DE7AF15A6876CC34266A3B4F6C8465C2A034C3500CD007D27385451377445673
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral18
- Target
  data/gui/button/idle_background.png
- Size 673B
- SHA256 049b5469d4a6d26dd3605a12381dc98a4d0d421db216ab0b8d07f87672bacb6f
- MD5 c81b653f43524d30357cbc9051349569
- SHA1 f36f59c7a722b2394870dd9e01dc0b7faed48876
- SHA512 04741b0062cc6a020b671731b021ac4d0a9f663950a5050efe373476d3232f4ae49cbf85c7df460b65cb1bd220a61272c8d87f927b0e7dc309603af6924c6109
- TLSH
  T15601D8DC79B5142879DD369144370F3CD42A465834E3106CE127E87B56416777745573
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19
- Target
  data/gui/button/quick_hover_background.png
- Size 1KB
- SHA256 5dfccf091adced4a59cb70b393480e67669ddb6e9328f9822a23b7d64e557429
- MD5 ee359551a1ea3fba6059fcb5dbe68bf2
- SHA1 14a7efa93c348967b847adedd12dcd3d98a57144
- SHA512 7fefb7132f9eaf18932cc8eec65fbbdda180f94cb37eed04b42b3f74b853735dad98f6bf48bfdaa1c830793f4423c4bf1a30191441986a9c414587e6a788ec93
- TLSH
  T1ED2171C723A8A45077DCB050843B1F2DD5B2E90770431E4CE42B853FE4C117B25696BB
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral20
- Target
  data/gui/button/quick_idle_background.png
- Size 834B
- SHA256 096303319e613682f94319330646aed585c4c8136331ce345ef5e7d3cd2f58cb
- MD5 53a2702bd02d489966d4fae84664122a
- SHA1 0ebadbf6619b0f58f6acde0c086e853e17b42468
- SHA512 3c89aa06535eae028950967c83a2d0b71c6888e7478e9a6034f1928b508708c41483ae7292a80b89c309a23a4d59b51e26699f71ef9ed3438f1c516e2dbd9d65
- TLSH
  T138011EEE7175486DF2EFB44188B74E4E88889A44B8C31C0CC253C037362083B7201E3B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21
- Target
  data/gui/button/radio_selected_foreground.png
- Size 955B
- SHA256 e245e97a6758fb1d8fd0c8ddd742b646dc6c157a38069f84f2063287f373b12a
- MD5 afe303a6f9d70efe118c7aff49f9def6
- SHA1 01050bd7785f910066e2809b1367d41578969be7
- SHA512 fc560fec761c50d96fbed9a7f19e663ff5187d620cde86aa235af82e1fbcdea22532aeb259a8c4c38facfd1d5b39a11a49086e910ec5b9af0339ed97789b2e85
- TLSH
  T12F11C8D089339C76F804BAC14FB2C752B95AB1FA01D6110E444CBB6D8B05006CEA7B5D
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral22
- Target
  data/gui/button/slot_idle_background.png
- Size 3KB
- SHA256 efd99f2a90b09674870dee061b55dc0147840849332bc1cd31a10ccfabab270e
- MD5 9b42bccbf0be9b62ceb8d463b8a719ff
- SHA1 5b0ecb09c404770fba3ede0a448a08d1ce376667
- SHA512 eb924647d5445d7d215e8da94eca8f4774a9e8ce5b25a0b761646c64d430854a0ad592ca653025c6078447a247bce5d8af53b1bbf7fddb407e117e2f136e425d
- TLSH
  T19A71E849E66C84E3715844D57B587B0708490AB32876DA86B8C3301A07AFBE2DD34D42
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23
- Target
  data/gui/game_menu.png
- Size 38KB
- SHA256 3f0f5bff1a1503a363aff9051b39af2e547ac54320eeb224f0bae82d216d9897
- MD5 b2ba8ee29eaf3cf30844852a6c805643
- SHA1 000157546b05b564e737ea4b05cad9cc2dd923e2
- SHA512 0934bebcfe00a4e8523f3d65151783013a4606db584bfc566e3f14d840294b18a93e3fa4ce0625f5f632129f7441115e5754c5da90152bf1fa456764f10f508e
- SSDEEP 768:WkHkHkHkHkHkHkHkHkHkHkHkHkHkHkHkHkHkrkHkHkHkHkHkHkHkHkHkHkHkHkHu:Wggggggggggggggggg8ggggggggggggZ
- TLSH
  T183037795D70145B33D20E6A4303C9DAB05484D77B89ACEAD16C3B91F2357FB26D30C22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  data/gui/namebox.png
- Size 1KB
- SHA256 6c88049e0e039ef53f6bc6011aa63d425fb942a76b53d5afd5384be9171732cb
- MD5 36e2765825b5d5d85e5a4db865220db1
- SHA1 e9afeaf4875b557591f297588dccdc42262f144c
- SHA512 da41457cde0f443b532df2e6941a920d1462893c01c3328499eb835ffedd505f15c8e2a9254bf67e16524e0a537e85d29bd00a87755cf94b5e3e0a07e81789c6
- TLSH
  T14E21E8ED7B304A04BAED346F22774F1DA8058040B0EB8A0FE497C67B190653B7862A73
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25
- Target
  data/gui/nvl.png
- Size 40KB
- SHA256 a316d15ef00937ef27c6dd04efbbd4710c4e59ae1177ee900fbde1b4c26a537e
- MD5 2adf4632a9f300c66d7c8f9d8af214da
- SHA1 7c467f2aef140f9d98819b758eec3ba1a7620047
- SHA512 db3dffe67ccabb21f66060f8421b3780e87d5da3764801f27b6f457c4c922f064ac97b3150cdb4cd525c69a380f4cd7aa7f8afc8167d7d72cc52f77c59ed53e6
- SSDEEP 768:vYPPPPPPPPPPPPPSPPPPPPPPPPPPiPPPPPoAAAAAAAAAAAAAAAwAAAAAAAAAAAAx:xAAAAAAAAAAAAAAAwAAAAAAAAAAAAAAT
- TLSH
  T15C03B19CD711A83772091200F191AD2745212DBB326AEEA168CB794F3B97FB99C3CCD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  data/gui/overlay/game_menu.png
- Size 39KB
- SHA256 0eb00dbcbd6b7c39cd729f78bda555c2e38167964027c4cd3ade6a858af9f72f
- MD5 93b99791daddd653307ae5b6b7e257ac
- SHA1 aab7bf4a3f9d7af83bf6eb8cd8a726cbd0656176
- SHA512 c21a3d0aa7626989246d4ca4d7eaa9971cf91f9123488afad2858bee6c38f1811c88650d9d5225eb7b51b8e486d31f353e9e2721f263350e0662de3b61e4d39c
- SSDEEP 48:qelj8lj8lj8lj8lj8lj8lj8lj8lj8lj8ljiurnhHcx1jeFMh25i/crsm:qI6666666666mO2x1yFMUs/crR
- TLSH
  T1AF031C2AD38599FBF0224264B10098570C811EB7B9D1DD3960DBB52FA32BF784FB9D94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  data/gui/phone/bar/bottom.png
- Size 1KB
- SHA256 db980c7d062275e083d9e7ca5a7c195555531aa8f67d918d76896693d6e558b1
- MD5 75270604360d7018c3ac58d15579b878
- SHA1 eb1e353df724dc498bc197b02380c48d783f5de3
- SHA512 257aee92c7bacdcfe6305260765f41c5d127e4829d8d79ed31beabc4cb40d1b3a2774944df85db02ca133b0da79866dd0c3a8299f0aed6057717a2cccd8f6da6
- TLSH
  T1962144DDA23E2F65A340EDEA613075F3DF0A5310B9FC7568648B5B74094752350897B0
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral28
- Target
  data/gui/phone/bar/right.png
- Size 839B
- SHA256 3780cea00e02ec535de30de7bdce50f6de8c86a73416409c9bbf0259be350599
- MD5 c9b7fb72735e0ce2bd1ce895695b4628
- SHA1 18e576975fc6ce82d20342f36dd3ecb7f5f1ca8c
- SHA512 48be42fae7270d1fd409a7df31ee0bc54e3bec8007322d57b6e2f9688ed694db5fc8250ff0826da033f67f9261e221f0ebe4e825dc5f603df825ef05d566c159
- TLSH
  T16E0141C0D665953F61280060B3CA2AF24C226F7E3C60D86C91C3760F21C2FB62DB8D91
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29
- Target
  data/gui/phone/button/check_foreground.png
- Size 1KB
- SHA256 eed3e6176204747c0c64495916f643e8c778bb3dd739c938ea8523a4a2b93249
- MD5 68d3f188f7373171f2e8d673693c2d5f
- SHA1 fa0aabc025769a0e18cdabb0be1b68e63d18887e
- SHA512 a8f9d69cfea57603a330c9fd0e977ade59a3ac90e1a929ae65fca484e698112db544fef09dc3928b5c617e37da540cb2c1713840ee215269e4bf08fdff45aee3
- TLSH
  T12211B9CCF2A0188DEF0D32B56635AB3D0E7A0533495D400C091DE95396F5E7900BD0F2
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral30
- Target
  data/gui/phone/button/choice_hover_background.png
- Size 1KB
- SHA256 b7319a55bdbd2e0f655085caec6e709041e85356935de01135fa4ed13d48ac80
- MD5 1658482498838601307de23fcd8fef76
- SHA1 3ea3525077ef73e652d86db59443ad45e75ef051
- SHA512 3863f2a589c4b1b9d25e27b2c3b1114938ceb0c1d8fa8248fe01777ccfbaa203786b3e1a8d6502cfb08d6c44466c9e505abe5f0da1be08f596aa7bf6473875f9
- TLSH
  T14D41CAC2E760453332550110B15A895742C96CBBB968FD5950CB752F877BF39ADB0F43
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31
- Target
  data/gui/phone/button/hover_background.png
- Size 700B
- SHA256 747ca98e30ae2fc8a6de7c0aff36b9c6e107efe5f3ba72178c6210cf34f0cc8f
- MD5 67faa6d2a42562a527050d58b914dd97
- SHA1 60416786fc4dd9ca8ffedcc712c498805b13f2bd
- SHA512 5807c5792f5596ff6dfff585570c7b97eb528289384142ac0604f506052dcb9394a1f5be1bdcd7221e374948b338a74002f8c5d1e5247c5fff21e75290bb244e
- TLSH
  T157015ECE76B05415B5EDB025457F1F2CE5A0015135C3511CE44BD47B35046337409D3B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Indirect Command Execution

T1202

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Indirect Command Execution

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32