0d3bb735ed53a6d978b5b9ab56f85263b03ed86e5014bb43ec4423d6f54e0b01

Sharing

Copy URL Twitter E-mail

General

Target
PROOFS STACKZ.zip
Size 1.2MB
Sample260831-1rlmrazcpd
SHA256 0d3bb735ed53a6d978b5b9ab56f85263b03ed86e5014bb43ec4423d6f54e0b01
MD5 7fd32f5b960c80dcedd40aa005564687
SHA1 328b437f9ea6915699697b13120b394c56351b73
SHA512 b3e09a059b8dc186e02ff23aba0bfb5b0967808cc5c40a83241ac5195b5bdbc47d4cd205b8fe398b782d39955cec0f844b3188f51f1383a8d434754a0e1f2954
SSDEEP 24576:HPM5TcdUs3Cp7etYtygdUc9zgF4O7W+5qohOWsW1ZiDlmZospM3fgHCrA:vccdVC5etYty0u4CZ4SqkpM1rA
TLSH
T10245334287A851AAD2AF5CF806EB7DDC0426FB24D3A55305DFD573C9EC4496C8AB048F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  SPOILER_image.png
- Size 5KB
- SHA256 7ae62795928eba1e150bf3916a467416a4281b72f4a680044d25c3c5ecbeeeec
- MD5 73827cb4bb11dc7883f0cf5840dbdfc1
- SHA1 17e361bf7e88636ac8f8334e8319eb2c4a705f28
- SHA512 5f41fcc2a2172ebddaa461b265e64396f77ea6c7bbd05a8b5b79399ad342b89f08dfc1c763a2d9de7322cb7b73870e70faf8343160090f6e41faa7435aba5c5b
- SSDEEP 96:NxNXpoqp3k/ExWxyIsnOkJ/+Ds3mQOT3gonnP8FY9iHfaKrQLHYFIC3U/r4y:NjZoqJsxymkFm533IY9Afa9fp/f
- TLSH
  T1FCB17DC0B3F352411A38F29FE11A127BEB5E360768580A53872B857F1500AEF559BB36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  XorAuth.zip
- Size 119KB
- SHA256 7c7ad61288835bc34119d65e3c445adc3e11b2fb023336fe190d8c0d6ac5b0d7
- MD5 ab313faf28152dde209389ea36f601e3
- SHA1 fdd9005d79ef692572ca0929abad75c85a114690
- SHA512 671e7a1ef93867ce28fc24dd7964c7c34b8c8bb4f52692b2db2974562c1dbbbecd4c6e1fceb7f53c5e6d68e4a5f1a6f83d71b7a00a94599849ae2cd235e9da94
- SSDEEP 3072:d6cTLT92xT2dyT+T1CW3W69eFiSTT06MXEjgkX3:djTX92JT+Tn3WTFCXEjgkn
- TLSH
  T1DFC3F116E68B2460E5062E39FDBA23017631CA2BB071E119DB8C76C10CD36495F9F7BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  XorAuth/gradle/wrapper/gradle-wrapper.jar
- Size 59KB
- SHA256 91a239400bb638f36a1795d8fdf7939d532cdc7d794d1119b7261aac158b1e60
- MD5 bd2800c24d911ce05e46f6a283bf713b
- SHA1 251364b90b8f139c16eb5d5ce376dfa697cba6cd
- SHA512 f5739988517b7bbb69050bf6de6f167df79032e20c704a11946e76a3aa4e757043bdfdaa20f2038d34f09559357882076f798e5e4e407cda9a12f82695d2908c
- SSDEEP 1536:gYa8hwJ2z/Ef35SqzNwHRohURNrzEcWpyF:gYa8hwJ2zisqJEo+RBz1
- TLSH
  T1EB539D71A0D1D225F232063FA4F71912A93B539F44CF113F1AB83B89D7E259E8A67385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  XorAuth/gradlew
- Size 7KB
- SHA256 f96a757581fe5292465e3f3393380bd11fd8086d450b92e7c693da6513f583fe
- MD5 48fe0bd77a66bbb62c1150926ab1332c
- SHA1 0e59ccf04f8db22729ebef7ee39517a9e3a80c9d
- SHA512 0b150a18820290f7d82822aa39605cfcdd04efa1e25dc4d85bc7df5b941d58658e711e2cb3beffa5f5ea4e456a2280e3958d405e201de89e9b40878ea54da261
- SSDEEP 192:SyWm7HOyzJ1XnRy2D7khI+vcHI7gRDe8R5WW:S/mtzJZRyhhbWRtn9
- TLSH
  T1E4F10A1357812374478546B62E9FB0FEA63112BF2F83691C78AD420C373666A51F1AED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  XorAuth/gradlew.bat
- Size 2KB
- SHA256 af835f98787e9269af5a046edcb821a592fed372139df7b947b471a63cfc236b
- MD5 6b56324406b764fd6c5d4d7d215a3cd7
- SHA1 f5c317cf754bba8ad745e83649e9ce7c17e2f691
- SHA512 d4fef021e30640670fe20243e4fc4f0336b2f118f8c172c138a8c0c3028c93b12da9479812cede4196401bbc87ce9df89573dbec7378373cafafca6698867f55
- TLSH
  T1845154FB774751766FBC2B9B7A1C0482B61292660F4BA20C745F851D723034A51C0EAB
- MD5 SHA1 SHA512 TLSH
Score

7^/10

execution
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  XorAuth/src/main/resources/public/dashboard.html
- Size 32KB
- SHA256 923da8fa54de8c497f44144691b272f1485a38fb2b137466e29db2ddb995e9dc
- MD5 9bfe6e43a909089378a1e64c781c39cb
- SHA1 0dd3de280b4700c251b4c451a317b6e67b7b9ba9
- SHA512 ab0431b27b49f6e631f79500339bc70865391309d2d083deb4c68e6f256d8511204d8e5677705bbcc8a5e238d648e120f57aa586cc5fb58f3d8bf2316f6df318
- SSDEEP 192:Gmpd00PC2lGniwqNZc5uQadHl3kHE7po71w3HTHqS5wzV8OiDYPFog1bq1H3owqS:GQdBYIYwqxM4HQocRpsndJ8h
- TLSH
  T1DDE29329D5C014459173836A9FB28B4EFBA78143C309463D7ADD23875FBAC68C693AD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  imaeeeeege.png
- Size 95KB
- SHA256 5c5a118166f2d782d810ca811f2d025e13597df6b5db6c6d1ba5a2a92dd8681a
- MD5 0d61bdd05a87f885aa47d6d00890d230
- SHA1 635f283b3e0c3823ef25c6a2577dac27b94b8ddb
- SHA512 0baf1102a5dca295402f9b131b18472ed311710aa724e6bed85543d1b1e5dbd2f6e81ea037785a4dd4e059284d32dbef13dc96a9e487b969c305581980b626d8
- SSDEEP 1536:PSAsDqsSMjfWXFfIRRhG2EWkGI4CwvkbuWaPBLIET6NR1GmXC8ourNzVTT+Hw+aw:6AsDi2A0RhG293vvkSWSFIET6NRd73TA
- TLSH
  T1F5A302D08409BB3BE3B3361987DE8AD315FE65618ECEA3702CDD12A3411DE76885C967
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  imaeeeege.png
- Size 102KB
- SHA256 ef8c2cac985e12aacbb08f68e34da71192bcf1b022023b1ef6a9b689b6fb7018
- MD5 2501199ba3f6aa420cdc20690bbd83c3
- SHA1 d0bb96b7c9d9d1cdace9f5ff235c119e65410f1b
- SHA512 c534fd04165436795354a2a08e12915811c825db869bc9f4e85ed9ae8873d65493e663afacf8539a83caf08bc2d362ad1d20347bfcd9590332e7e383559a62b7
- SSDEEP 1536:+Zsi9373xHUcJKpJgrKh3PD9tl0XbW9PVG38RIBTkrzLAVclkUNWRh20/DnU/WGM:+ZvKK8fqSdUselk3LAKlk6E20/53d
- TLSH
  T1F3A312C0C774093BDD3E40EDEB6A8115C995B608C38BC4354FE422EDD9BDA9DD8968AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  imaeeeewhatege.png
- Size 108KB
- SHA256 196d7283ceb0487c49e0ea44662a221873f177c26e48092540ed2de9bba209d1
- MD5 08379a72a61549e6922511eb279e9fe6
- SHA1 1d60d3b6ca829b5756ee692156fb36b1bea00ecb
- SHA512 621ca8dc87b46c711ed4b00004b5750f1d5ea3fadeb8c4c36e398ce34348790a629303f891cbd6dcc81ef2985c0925550a26bf02f010bb199e56ed777af0ab8c
- SSDEEP 3072:6HXElrO6bjuBH196YMyJiUm10Zllb5G3m+s:gYdjusXyEJoTb5KmJ
- TLSH
  T17CB3128FE5AA28B3723F2CA750DA2DDD4703676348540AA52D5F67832408C6E7B3206B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  image.png
- Size 6KB
- SHA256 6ac71f90648d3de75fac1b028493aecac07ab914127f2607b07f7e7a33e6e21f
- MD5 890579a23d2325bfe0b8b31acf77488a
- SHA1 157aeb0ea36c25ffee3b28bc7971cb7c10eba723
- SHA512 d92b41df7ff8d5a892ca4d26ddf2d11af39332aab0648e5410ed5b19dc6bfa41f4ab76a499e137986d55ddc857b6f501a4600d3ca3de7adcac1d132e3a06af60
- SSDEEP 192:l+GKkywiy5/F+uM8GBwRYcKQ770rBz22/UkZ2tU9:zKkCUQMRVKQv0BGU9
- TLSH
  T1D9E1AFEBB172B2C78689F67CFF9CDE792FF083A58742590A904ABB7C58041D54B0E491
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  imagretardede.png
- Size 21KB
- SHA256 4735790ba4c30d325ee1e815f780cac5cf5b056e51fae5901abf8b2f27a55e44
- MD5 a189f8a5c460a57a0105e33449e2ab21
- SHA1 de3290cfc82af985a44931308693ded892f1c2af
- SHA512 7dd940e575b87f946b0d9b328237ea077b5a6c338bf4e504e1ca9f1197121242889fd4a1fb45fc58a3e43da04f2effc2e6500bcd6242c3726d714f2aab3a0eb9
- SSDEEP 384:23Z91pHOUEBPt2w6K5iRk2hDjQqyPPl9PXX4kcn/neNtBZxNJry:23PxER1zEk872lJXvSfg9+
- TLSH
  T16BA2E185A068224E79BEB1413EE8BC60D0CE543C870F87BABB567346630B4DABC57715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  imagvewaveawveawe.png
- Size 42KB
- SHA256 0d1101caa414c41ed637aee0a97540ee0bbc8ac61e7b4cfa4ce31dd16bdf9086
- MD5 cb8e2d15e774f81122b361eb25b53625
- SHA1 17fece01f61d0b51b5d344a78067b71bab159e7f
- SHA512 deb7b5210e518dc03d43a0d393139f8b92d1dc247cc63fa1fe1e697dab64d7c4eb9dfbeb5b09f57b2729d201d61693905e5d3255e41041a844e0caf9c8788888
- SSDEEP 768:OiCZ3jZ4q32ESpm86vwKh5NaYz5W1HV9+FMtJ0GOoJRgK7yEylNN0hBcgbdNic:L8Z4a2bpm86vwKbNrVW11N/z3GEymfbF
- TLSH
  T13B13F1F729BC506C87943D5BDA149BD8086DA410CDA5E640BC8C1FD7E03C684AEA73A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  imbullshitage.png
- Size 132KB
- SHA256 9474ab612ea43445075b47c988094df112bee10cc5d7175fd9643920cafa0090
- MD5 f55128ce49859e65d7011d97ef479c2e
- SHA1 15f6f20d2ce7523e94f34a91f36ca8ff012640ae
- SHA512 c9f2c86375e51a61ad5019a7cc79fc5b8dffb846d1d15ad80971a34d323baa4633fe2c443f105d92ead9566f2acc97d655dc38b40b4955180f68bf1a653782e3
- SSDEEP 3072:c0GjvthAZdvAHK/Cwr3ueBmHUI14gyc1UbT5DwKbLxCW:c0QqZAHKZjukmV4tceCExCW
- TLSH
  T19DD312573EED621094BA73D504D3AB2C184187CBA4D70A1DAFD2E2945FD366E23207EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  imeeeeage.png
- Size 79KB
- SHA256 1a8590b06b700bab80eabd0941dd7f491fdb87d5c2f75b065c200a074aa923be
- MD5 763563d7a9f6ea3d28e4169d6e39bce0
- SHA1 09b3b3e6a48c1050f179104b4fd980edbe0c4b4a
- SHA512 be62d82186d07df91ac93f4ebdafc4bb19222c0417ccdbd7509fa11ae098bcb939ede6dd988ea6af13e4380aeb08abcd09b13ced20087aa3d559ce85f8c12cf9
- SSDEEP 1536:3inrT/5pvoe7oaKPxRU9aeXGrM0J3Rx5QPXi9wiAgpC8mnY7caSW:yX/5pvoe7oaKPfUlWY0nxGPP0Og
- TLSH
  T13B83026DB8E836B4A5231DD343D650B935F0FE297DCF1CB36A1C997A12A13D98E16310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  photo_2026-04-27_11-49-06 (2).jpg
- Size 57KB
- SHA256 478776e4a8a4dbd62554f1381bd93aafc43d528cf9160adefc88b853fd2f9aac
- MD5 c965c45a0ef7cf6d6024fca9807cdc70
- SHA1 7496eeafc411cee6d4d13d5b01abbc10df385700
- SHA512 3bb1141a47e4c3e009152557244cb3b462f0f867f5864193260edf4d803a6431438d4918e57692acd814e64172b119cd4d3938abac67344d452404cb7a5a1bed
- SSDEEP 1536:hurgCqRCCfUDi/zQVVyrC1wUI8dhXdmPpIHXM7/:hurgCqRSirQVJ1wUIMtgpIY/
- TLSH
  T1E643F1821AB6BCD3D5F9367852C6182B72ADF582B533198E9421F7B06587740ED2F807
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32