Extracted

• • Target
    version.dll
  • Size 16KB
  • SHA256 7685f2154bcfebd1bf455883da67f33016209e8b3c3adb6197951d308182dbdb
  • MD5 f1d21abd6e3aa85d072bd13db85375ab
  • SHA1 03bf023d22aa7cfc2b7dfa1ba26d92b33c1bfe0a
  • SHA512 0c63063af22f06c2be5d1e502dee6505f50ffed048b0163dc4ee0373798c10954e6f535930bb2002fde28c37d74b75aace19064a0b9f6865e0d2c1ec76ec4ed7
  • SSDEEP 384:Y96foCMzwNKuQSvGHsV3P4b6MwmcUk8VnPVxLI4imThuFd8W8bdWK:Y969NASuHOf4/wmcUk8VnPVxLI4imThl
  • TLSH
    T18D72080E77A2007DD48BE234C5F78B31FBB07E450AB9E63D42A0C5391E33A58953EA25
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdooradaptixc2rattrojan

  • Family: AdaptixC2

    AdaptixC2 is an open-source C2 framework written in C++.

    rattrojanbackdooradaptixc2

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  behavioral1behavioral2
• • Target
    watchdog.vbs
  • Size 893B
  • SHA256 7ec3e49ae13ab1565691ea2aba8f69d8e68a13134e5ba1cfe03d71837bd0479c
  • MD5 77f380c8ee18faf7d3fd6bfe1ad085eb
  • SHA1 c13e984f3d1b39496676dc5e148e43582f1be583
  • SHA512 f746e0f621ec631b73778e18e63cfe97cb69ece42a15969fb22bb307cfb58e188f54ac358f5b1028853e8e1cddb29f62cdb01b71d895b6155585ef03b6f19cc9
  • TLSH
    T1F311000F6512E33495918E121FF87C3079951532EB217CB0BC8CC89D1709239D1755DA
  • MD5 SHA1 SHA512 TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral3behavioral4