98a88a68ac67374c6036eac7a9c6107127a5f7a0ee8b86f7b9c1d0e11c7a4d68

Sharing

Copy URL Twitter E-mail

General

Target
Krypt.Scout-Setup-0.3.2 (2).exe
Size 217.6MB
Sample260826-2a24vavvhy
SHA256 98a88a68ac67374c6036eac7a9c6107127a5f7a0ee8b86f7b9c1d0e11c7a4d68
MD5 bd83aab720d40799ff75cf7dd3287507
SHA1 756f73c22eb4d3f36ca5b574ad955b8ab98dc201
SHA512 e024b5f2db5734c802350347b4a461a24bfd8572be3662f06650416035eb7035b411b2b817932177444c1f4b2dc68dbca8fc2fdaac5bf5f9556fb4b8774f6902
SSDEEP 6291456:vC4P74nLX2y6FjO3c0Vy36RCUpCFUkyBPOztBrwCT2:a402yijO3c0U3sCXFUkRtBwCT2
TLSH
T17DB83394B2529EA2D0C17C3A4C23065D669A5EB76EF1AF09370DF1B2E3F39147D6A04C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Krypt.Scout-Setup-0.3.2 (2).exe
- Size 217.6MB
- SHA256 98a88a68ac67374c6036eac7a9c6107127a5f7a0ee8b86f7b9c1d0e11c7a4d68
- MD5 bd83aab720d40799ff75cf7dd3287507
- SHA1 756f73c22eb4d3f36ca5b574ad955b8ab98dc201
- SHA512 e024b5f2db5734c802350347b4a461a24bfd8572be3662f06650416035eb7035b411b2b817932177444c1f4b2dc68dbca8fc2fdaac5bf5f9556fb4b8774f6902
- SSDEEP 6291456:vC4P74nLX2y6FjO3c0Vy36RCUpCFUkyBPOztBrwCT2:a402yijO3c0U3sCXFUkRtBwCT2
- TLSH
  T17DB83394B2529EA2D0C17C3A4C23065D669A5EB76EF1AF09370DF1B2E3F39147D6A04C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery persistence pyinstaller
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH
  T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5
- Target
  resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH
  T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/Cipher/AES.py
- Size 9KB
- SHA256 24af7918b87ca1c3025348200ade01b17a2c8310237ac25d097d266cff577fd6
- MD5 97c2e30fe71322ff34b0bacf7b115dd4
- SHA1 e6558a8f6aff6c330ba40f7047a83061f5892f21
- SHA512 5929dbb9aefe62d76b760fcd10bae27401472d1ab063a0efa65d6ff7f37cc5c01660ab0551a6df52d015659163ccd4adfc4af591330bff3b9c63a46b338055b2
- SSDEEP 192:dmQHvdBTzgeSDztF9+hMkRI4H1Fit/zyc/Ki/yRAL:sedBTYt4Ot/L/K7AL
- TLSH
  T1C212B7339EC3ADD175B140822D75E019E326219F2D962B0235BDD45C6F76F30E3A918E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/Cipher/ARC2.py
- Size 7KB
- SHA256 cf808c3951f83d9e86799e02a564661d6c372216656dc5d40fd9e19b21d84a53
- MD5 274e46a9ae6d3e092b48a7d1ab3f0d6d
- SHA1 fb5a62548fb3876ff73319d3c92565b64cea3e69
- SHA512 d9850d167368ae4b901512d5b3111ef6858e643fcd4dca7ee2a263adbb621d3d9729d124a9a9570eb250d63034734663b16770acc5b2d4f1ceefb3e47eacd8b3
- SSDEEP 192:dHQHv8gflA2jSkmRFmynD/t4AKdRYotKI:te8g9A82jnD/t4hjYotKI
- TLSH
  T1F2E1A567598399D2257040622E79E04DE722916F3DA28B8135FD941C6FBBF30E37628E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/Cipher/ARC4.py
- Size 5KB
- SHA256 717b865cc7a4417aeaf0efa70b60ef7c42cbfdae4433bd704eab9ddf75c50486
- MD5 0ef036a0343812f8bd2cd7cc80b2ba95
- SHA1 b443e26a222338477a44bf29fd5aca2942271b86
- SHA512 aa5e7f0bf9c5199b5e76441decb0cc5a0899edbe7517f6a6646d14205e727fcf35ea935a921ec90502b7783d28cdcc5bf648f8fa2a06ffdefe302171332c6d3f
- SSDEEP 48:dHIB0jcQHMsvI/S3oCFG+PdiIPskHzgirvO/ZEgR2lYvHipJjHeLEyEMWnP7a7jv:doFQHvo7dIUoeGgR2uvi/jqEyExPNOuG
- TLSH
  T13EB1C887BD97D9C237718086297DE84ED78552072529671234ACE0586FF0731F2FD688
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/Cipher/Blowfish.py
- Size 5KB
- SHA256 9e71714f41ad4fc6499b83ff0199d1ff75d73d551a740cffdc077d13ad930edf
- MD5 c34b138e93044278085c0172b171945a
- SHA1 058cca453b61ad12f6007a84e1626371ea2e5855
- SHA512 39ca5d7161933f6ab86d14877e8e089d3bd11561494079b99c7b56209b074fae50d31a8ba25760c3309e36bbb216a818ed49084e9479f0b47fefc4f55bf2ec51
- SSDEEP 96:doFQHvofgiwZAEuVDYsgiiJsJWkGI9gmJt4qeA//RFWotKj:deQHvogySniiSYkGIOmJt4A/RYotKj
- TLSH
  T146C1B5635D83DCC2257050762D7CE049E722A16F3DE29A4136BED05C6FB1F31E27A289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/Cipher/CAST.py
- Size 6KB
- SHA256 2e59e547baf132e8553fc76e9ae2151b48c0610483e54130b0b6262a03f95903
- MD5 1166b892369e19b4220bbc069d9ccabc
- SHA1 f8fffefad392a8d7f79cd644b4d21d771d7458ef
- SHA512 b99aa9b0f448b24bcf56deb0bb30b948c1fbae91692a78a291ae30a1935e4c74204a24925573e3e60777b5033cf748fd7c0d4bee3e79bcf3d8d5fbbb19e195ce
- SSDEEP 192:d2QHvVgdaKSnrF4xkOUBRkUtmz5t4AyRYotKw:UeVgd8n549aW75t4rYotKw
- TLSH
  T1FFD1A5625D93DCC326B050A23D78E05DE722A16F2DE25E4135BDE01C6F75F30E2BA289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/Cipher/ChaCha20.py
- Size 10KB
- SHA256 ddf406689b55741bc914e9acd426f4a42918f37983367711f5bb4e148a282934
- MD5 bcef8a2f679f6c77e073e576e7313f90
- SHA1 e01f20ee9bfbe1a4770c092d54d3506a1a1db69f
- SHA512 d23bec4867b33a58289faf97add75b054acfef0056019b8e653333da469903f7aa365043d02b9bf82771fbda9e1f83973be3f83af2e513a70d3afef221fb59c2
- SSDEEP 192:9qrskrs9t3q/IcwYjUlRGziNzvPppkzBjfgEQ3UjwzgLMZKPOYbCCtrBUpt:0rskrs9VqxwDlCihP8xfgPF6PPOqBUt
- TLSH
  T13232C7938E52CCD253B3850A6C3AE90AE71962272E445F033CBDD8147FF677595AC8E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/Cipher/ChaCha20_Poly1305.py
- Size 11KB
- SHA256 51a6580a63c4487bcd0df401999a5c4497416cf251e2e935c950dc2a59422271
- MD5 fb82fba68f1745f08771ca59a1a1db89
- SHA1 2d84988aa839ab296667a08e947146aa08f34d31
- SHA512 34ef9dee60458fd7ff62a92e1fde86a08d3b92cf0f84daff849d9288f49bd1a1df032c52be188b8eab7b1e1bdcbc5257ef8ac42396e7d64ffffdedacad61f2aa
- SSDEEP 192:0qrskrs9t3q/IIJOqi/JHxbkg9XRV8psd6agIbjKVFtt:zrskrs9VqVi/j7XRViWPKVHt
- TLSH
  T10B3297A5EE47DDA34277C48AAE68E50AEF4750132A180B137C7C94541FB0B74E2F8DE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/Cipher/DES.py
- Size 5KB
- SHA256 bae52d7a7d2cd509d466156dc2878d7e4194bb304a8cb555f353ec00108c9186
- MD5 1b182d8cd016edc5f53015a433be05d5
- SHA1 531c8db19cda7edee5b45b83d0c309f4ea65c1d5
- SHA512 3d08af59aa18156e5086e061bbddd3e7e321a5eb98b1efe4cce56d7ca668cdfd167ecef8f42a66fb6450797f21a6a21841fe24a606b0f1f959375ca6f4279227
- SSDEEP 96:dOFQHvotgiwHCXjG6DH5K0kmIbU6Ct4qeAYZRFWotK0:dcQHv2gUqC5K0kmIct4NZRYotK0
- TLSH
  T1CCC1B6666DC3D9D325B440623E78E059E722A12F3DE25E5135BDD01C6FB2F30E27A189
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/Cipher/_ARC4.pyd
- Size 10KB
- SHA256 f6538c0c003f317f88720b230581e950d1da11307cb9f322c7282c14bc720ca1
- MD5 eff0f16d6e853ea2cbc7b3bcab5e0591
- SHA1 d9e9947afa2871a4814b9eeedab7209f9f32c9a8
- SHA512 ceaaea7c60c66e4cab3b21d237ae753e94cbef397c3a9bb40c636421dc6b66cf92355d213fd14cd8d55ef06618ae3504ee229a8c6afe866f0e94d7c46ae9bd2f
- SSDEEP 96:ajZuck7BNymq3UtFfZAn401wlKsQ9AfJkSRsP64Cz6+q2c5n1kBRcX6goyOazh:okNNyatvAn40q9WE6R2YORcqgola
- TLSH
  T13222288CFA564CEEEA6540B58A270B4FB075B711575273CF03B0917A0E637C6363A702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/Cipher/_mode_ccm.py
- Size 25KB
- SHA256 2adc50f715b0bf67aab34c48da20af3516699a7fe5b79a743ba583b6590a570b
- MD5 c9e25e247a6853768731dd309fa1aaaa
- SHA1 563d8d8aefdf67e7b211d4434212c8e5caf1f9eb
- SHA512 7e9986a52c6203fccb379db32feb95f717f4e5c662bfd25f8dff40bee5de63dae5794c81e35a3f7fdb2265e3f4d365da3dad5fe7626b39d9cd1c02baa4dc14ea
- SSDEEP 192:9qrskrs9t3q/I+9S1nXrBamtA6/c1VpOG7n2x4Cg4wCmgX4gtRLNeVRWPv8GxvBn:0rskrs9VqW1n71/w92x4swBgdeXWHVv5
- TLSH
  T1B5C264A19E079EA251F7D44B6C69F14BE706A00B272C2B12347CC4499F34A6593ECDF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/Cipher/_mode_ctr.py
- Size 15KB
- SHA256 2cb2f14bd56381e0db323b2e585a3803a667c37f9a852d407ab2b62e09efbc68
- MD5 67b5d4efccc2ebfd2ef0f2a0d43a0d36
- SHA1 613eb622d976517ffb544792c4331093e28237c4
- SHA512 46c59c7add4b04dae6bd85190cd1885347986f6de4e151543d97dd2e52efae0817cb43c96e145cb0491bf45bdaf33be4619d5c66fdf6015ba5f9a20905e9c5e5
- SSDEEP 192:d5QHvltxqH2LakMiITNEriO+gU46o2U4ozC1ShJnwBil3iYPlIidiSSZD:DeLF7AYT6o2TozWShkaSCl6
- TLSH
  T12572B7565D5759E2AAB2C40E3C3DF049D315630B1E641B8678FCC0086FFA63293AD79A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/Cipher/_mode_ecb.py
- Size 8KB
- SHA256 beb1d881c681295ae01316e857a5ab8d289a4a1b30dcf97ed405fea5c694892a
- MD5 ba708c28472bf8a266985dca4ccd93b1
- SHA1 c4e6d55a46edeb5fddf8a8bf15a1ba198c94815b
- SHA512 d0543d25a7aa3787cf681ebeedee2d9229dcb03b8d53125f7afb40b48040e4b3f4cc912a02c86eee1e4e2ecad24669b89174fecc4c199bb94733b159650570a6
- SSDEEP 96:dBFQHvoWieqW8XSXMxJYuwG2m0/EfQb7nk+qIbpktAV7+qWKWIRI:dfQHvPz8XjJYuwVkZi7Z1WIRI
- TLSH
  T18B02B9458D6BEEC1A7B2C4561D6EF40CE315630B1A681F23B8ACD0189FFA33092BD59D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/Cipher/_mode_kw.py
- Size 4KB
- SHA256 ac337a35b09cb6465e2f2d79ef22a083e27ffc6fabae50eb2ce6ab91c2e40494
- MD5 b17ca50009c50fa8f5a1afa871acd7bf
- SHA1 f0a3e4fedc89f4db1a781a271baabcc6d62689f8
- SHA512 b2cb0845d6a98f92f0f7aa9c190d8fec0a459adb45377c18a715f960b387e182a600990a4f77957cf32f698527941c9f89c574dd3006161b670d82f7c26ed0d5
- SSDEEP 48:6DW4+rwiPQdTfmNgXrgb1YmzFDIF8MVpJwpwZ+NQZ/bN+QwmtErYPfKHHbls:6DW47iyTEgXrgbD9IjVYU/bN+9uXkBs
- TLSH
  T16C91F052EE8BADD2E3B0C54D4E64D84BFB05420359689B5A341CB408EFF05B956F8ACD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/Cipher/_mode_ofb.py
- Size 10KB
- SHA256 670b77041005e3e61fa2e3a80e23e454051039fe3f310c8b53a7a8f02a56b986
- MD5 eadceca62ee60c2f04d2e18adb5fb72c
- SHA1 3a40bcd84e318e1641dffdfcf7509957dd75a997
- SHA512 e347fd33f158e656f5f60499d25c18b7121896190b3f4cb935f3253433cfcb038e3b46d591e203f0ef78f8f99d91d76f2ff34d2831360d199ae0e1b148f0ac65
- SSDEEP 96:dLFQHvoPoxH4dILt52ALFxKiDqwG4rW9ytU4p2EVQ577BqotU4SputAVsqW1mYhH:d5QHv/pwADKKqO6+U46Q2U4c3amgQO
- TLSH
  T15E22A485CE5BCDC256B2D85A2C7DF009D711630B29285B2278ACD4089FB533093BEAEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/Cipher/_mode_siv.py
- Size 14KB
- SHA256 beb9b03ee0819457c449970767bc7fe3f671a385bed8b7c018bbd3edd2f9c45d
- MD5 ed410bd9244f81ee63de5883ea85f821
- SHA1 2c04fa9c2f06f167cc5411c41a925f9e56337abb
- SHA512 57081239f77b97d2ef811207b0f29518d9c44e216a529f59b17726b7e378853e0e771e2120c8ebc759a323a4aeed330e3db3a291fe25f523ac5d782431003cd2
- SSDEEP 192:9qrskrs9t3q/IK31IzSsGJ+KLk3eNVkrEPHAZsLzL64giVRWcuL4oozDTo0Bk+Y:0rskrs9Vqp1pXNVkrEPH6MXWiXWWtDUX
- TLSH
  T16552A7928E4B9EB352B6C08BAD75F44EE707901B2A191A2338ACC0485F7577493BDDDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/Cipher/_pkcs1_oaep_decode.py
- Size 1KB
- SHA256 9f8950feeb6be54c20fe83b79d18b33c773591e4bfd2f6ed85865e4e12677616
- MD5 f93ae45150224e27a0198060d999ff3f
- SHA1 25ca8c5737157bed998870a4c5f2a53392fe4298
- SHA512 ca4d755b859fbdda17f5b498a2b6a718fcb452d3ad71715d84707b5d3effe383fcb1ad23e2ce34387abd390825135c18ad2152b35aa23fd0717660ad63f4c1c3
- TLSH
  T124315B5749E2C0C2AABE0C3B0593A449C1052313A6B29F073FBCA248FFF75616052626
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/Cipher/_raw_blowfish.pyd
- Size 19KB
- SHA256 6f6f3d25dad7d864ac3dfb54177ed6978c3acd36810af90e8874100317737706
- MD5 403a4f70938f58c15daeb4a63d7ecadb
- SHA1 21e4f3c75afb71bcad683ae607cd677f3c2415cf
- SHA512 ed11e69f332c150dda9f563aee4b3ef1bc870d0c8be348be0d835f76f10420694ba072e1455341b97ab761873d0b45f76741fad7e98c9460fe05449865de5305
- SSDEEP 192:iI2AcU5uMeFhK8YVfyc0u/yO0Bfx4RqI6HJAyZJg8D0KThxA+rAQE+tnJiO88Z52:9eS701RiMpJgLa0Mp8XgIO
- TLSH
  T18F925C4DECA856BAEE200274C6468D9FE12FF534633DEBCF2770168D09166E60E747A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/IO/__init__.py
- Size 1KB
- SHA256 655dbe52f138022ccdaef6db28569eba1d513617d12ad88685d793e40c21f5fa
- MD5 2eb5a616573613c3856a549bd00de6d4
- SHA1 d5dea35b8153b724af5c1974fe8e65716f917c42
- SHA512 6615dd25f7cfb1f058ca7ded52e5126f5db983b7eaba10d8f403113d21d942ea4a241a81a2451ad2fd78048f5303d94aa16afc2da60348a75609cd1567e0223e
- TLSH
  T14131655702085BD256F157457795FEC4B08DA02D3F236C0A187DA285577B32EE4B7411
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral24
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/PublicKey/_ed448.pyd
- Size 73KB
- SHA256 20fe0b35808c110762e5e4302aa8d926bf42211209e6bf8e438e914e42a58c09
- MD5 617020ec629cebd633b37d3cefcfdeee
- SHA1 e52922eb69df68ee0aac61f6f1553e621d54308d
- SHA512 db33dc63d593b48a61a48c6950d7b88aa1deb8c89b57de46c553d99ef051294b0d04781ce20697519bbd72c9feb6579a4748ffc56d98c4d16692b7b38bafc865
- SSDEEP 1536:7L8NhQDnXNnN9LMmT4k7QvUQkwSsWB/wVHqoPy7O0J054MovAfqb3lt8gKNQCv8H:7L8NheXNnjLMmT4MQvUQkw1VHqoPy7OC
- TLSH
  T1B773845592C164D4C8BBD37EFD7F8942B6A6F4480B8A538FD2B085B01E75EA169BF300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/PublicKey/_edwards.py
- Size 4KB
- SHA256 1f001ab4ed9b6b7c0bb1b0d04dd4637d547af01406e51ce9d2d381ff71e5beb9
- MD5 cbcc4503858baf72b2a6eb551e73ef6a
- SHA1 9ff384a8db39e9ce28f3b6e6b169ebd9be90f47c
- SHA512 64c7133a409d7ba66c9512aaee79c15bba06afdfe62e54027ee5bb540ca77c95a6de800002a1603f0a81aa9b35e6fda272358dbebf8bb8bd2144211e4b493878
- SSDEEP 96:1goeJoPg7VvR/TVMzL8v/rDxiW87+iTVU:aoC7VvV+W/rDxiW8aiTVU
- TLSH
  T10DA1AE3B80556216B6B84087F20A640DC315F78366F2ED9677EDD9B85FE1001EA71BC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/PublicKey/_montgomery.py
- Size 5KB
- SHA256 3dd4b003b6471646f2565d0a7444d57f86611bf4891523610d13a0a2b7c60a50
- MD5 6c383f13b7332fd68f4a8da577dae59d
- SHA1 30137d9b3fbd3521987fc8f4b205d531269e3965
- SHA512 4d7bdfe076320127f152b0bfc5105c5608fc0a97196932b47e51d21511a657602fdff85edb6db1ea57e47b4c4802d9b199b9b9c78c1b2fcba5095779976b21ef
- SSDEEP 96:1goeJoPdtJ2HXrw9Rix0T4jNnG7g3fUtg0T9:aoXz2HY804hfU+0J
- TLSH
  T1B6B1AD632D0340B6EDB0449A2115E40EC3A6E74357D06DA739BCD9F81FFA144AEB4B9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27
- Target
  resources/python/krypt-scout-backend/_internal/Crypto/PublicKey/_nist_ecc.py
- Size 10KB
- SHA256 85aee37f53183859adfd441979f7a1246850d352d7fce24b706efb3e715365ef
- MD5 15e5f3ec50b8961a60926038d863f7ca
- SHA1 bbb94c0b153b56749da6c21aa67546d188ff40fb
- SHA512 8a7e73ed8476aec99f1c62ad3624f839e575a28fc7c43d911c6f6d86f23d519e67e6fc3a048f5577399b95ae00a1337557449e299104deba1b58a7cd31c880a8
- SSDEEP 96:1goeJoBTZuGhWrGZb9jc8775ok2ZlciPX/hPxTgecTwlVHONlvBcvb+1NGoK/vhh:ao5aGRjctk2ZlbB+ecSVHONlevIK3hh
- TLSH
  T1D8221252192164D1F2B88C681143A55ACB04F30399E1FA9B797CC3BC5FF5891EFD07AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
- MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
- SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
- SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
- SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
- TLSH
  T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
- MD5 ec0504e6b8a11d5aad43b296beeb84b2
- SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
- SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
- SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
- TLSH
  T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31
- Target
  $R0/Uninstall Krypt Scout.exe
- Size 250KB
- SHA256 bc08e33718021dcaf2c9f7d5ce431a026e92ec4f80ae9f192e362325f7e8c722
- MD5 2e2236740012bdfa2f1a71b821bfc6fb
- SHA1 9ce18c7d9b73f372651999566e71faa183586601
- SHA512 dfbb55eecb7793e8bde5fce420339c0bed6e4d89de0925e4989a56fd1e254ac29c4ff60a6bd5af35856968c28320891bb3b0b3ff396829da8842a21181090cb7
- SSDEEP 6144:K740IlLAg5/cukAk67VjKZiEtqdz7/2Ua8T2t0EyL+yaJ:4wLlpzkAk67V2ZiuCLRKJJ
- TLSH
  T1D2441210B7F1CA77F5FA0F724BA582875A7AA11120708F47BB942A8D3CE76A5CC0D356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Adds Run key to start application

Checks installed software on the system

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32