147730a9cb60bfa2efa991496526e1bc27960814d9425f2f19e8cce7b7f9db2a

Sharing

Copy URL Twitter E-mail

General

Target
Xenopster-Desktop-Launcher-V2.5.35b.zip
Size 9.7MB
Sample261002-3ste4axw2p
SHA256 147730a9cb60bfa2efa991496526e1bc27960814d9425f2f19e8cce7b7f9db2a
MD5 e8bb1e1e38a66df534fd8be12e9d12f8
SHA1 ad6f0606298e9f82b0ccf76657f04d16d09fa985
SHA512 15d7b33c522be73bb94b90f917d2754bf11a5ffb0c63efd0fc086a3266bfdfb2436ee0a015f30c50426dea0d40848af266f079f326e157baf8f1cf5d73cb7fae
SSDEEP 196608:IY2aLI08XxM6GlM3LJbOoyCSYs43RxVfoKQ8oyNPONSn4qdjnu:T4xQIOotStADf4hgONSnddjnu
TLSH
T1F1A633355ECD349ECACDDCFEC27059F33609E25A84B9133254988A95AC77E2916CACC3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  Xenopster-Desktop-Launcher-V2.5.35b.zip
- Size 9.7MB
- SHA256 147730a9cb60bfa2efa991496526e1bc27960814d9425f2f19e8cce7b7f9db2a
- MD5 e8bb1e1e38a66df534fd8be12e9d12f8
- SHA1 ad6f0606298e9f82b0ccf76657f04d16d09fa985
- SHA512 15d7b33c522be73bb94b90f917d2754bf11a5ffb0c63efd0fc086a3266bfdfb2436ee0a015f30c50426dea0d40848af266f079f326e157baf8f1cf5d73cb7fae
- SSDEEP 196608:IY2aLI08XxM6GlM3LJbOoyCSYs43RxVfoKQ8oyNPONSn4qdjnu:T4xQIOotStADf4hgONSnddjnu
- TLSH
  T1F1A633355ECD349ECACDDCFEC27059F33609E25A84B9133254988A95AC77E2916CACC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Xenopster/Xenopster.exe
- Size 345KB
- SHA256 17abb962826ab2aada2f5a0fa9583d70a5d54bc66982839209ae18df50c1db2d
- MD5 c610307479fbeb286ed56de5dff0a5c2
- SHA1 1c729df6f9d9be680e2ee2d929537c41729f0e73
- SHA512 8f091527989d3713d685d923270f55f18456ce0812895365a57887c795a57b4986ab3fb53c9aa5966cd6f51703530c2afc038e1b0abd8983dcf88598e9558b7d
- SSDEEP 6144:K+fEeMz9UJ1uvN/5Ge8agu2qCTcInaAMRclCjqCFUl0p9:LMeECJ1aZ58r7aATC7p9
- TLSH
  T1E2749F1BF39354FDC527C17486AB9372E532F81503306A6F2B99CF352E64C604A6EB68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  Xenopster/config/cache/components/drivers/clash.dll
- Size 137KB
- SHA256 a0f9344ba9e8e21a72e459ae18608b363283a65a3c1b1c26aac296d7281e38bb
- MD5 fa3f11f8793ce03d694305008c2fc41b
- SHA1 3b23608cae9424e893d4c999d5ab743900cf0464
- SHA512 b3d1d8745d3557e8bc71809216db81df8d581145b14761f47ef5543f946c42c7e9ce2c1607114bdbf7afa4e8a05b1d2074ef44d6f50265bcea8450003e23b81f
- SSDEEP 3:Wltgl+:i2
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3
- Target
  Xenopster/config/cache/rpcrt4.dll
- Size 272KB
- SHA256 37fa6739fe44ad33d28b5e821f0af8571c1fa8357fbabe28c5a9c579ef0172f4
- MD5 70bacd75e2b17f3096fd809026ad5ca3
- SHA1 269589df915eefe86a1bb92b31778e0e0138d9d9
- SHA512 65a7ac6599388008d2cf482b7aa42d4aae7459490c4bf36c79dc3f360787befa6d9410e6e9c691745558ed6899a34fda0135e7cde546417af9be067b63ad8c92
- SSDEEP 3:Wltgl+:i2
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral4
- Target
  Xenopster/config/updates/amd64/websocket.dll
- Size 247KB
- SHA256 e0c4c9619e80fd6811d2d005ea23795fbfb7e61f2315557312abb140fd287f25
- MD5 6bc9026fb9837383855099ff7102685e
- SHA1 b294b5b540807cb1b34b992db5d2683b10c5e76c
- SHA512 d0237a1ebca3ae0d2219c4612ed5955b9271e6c90dc29443393a2b4c120920a7b029d488222e35cd749947ea4a5c47e0b902e930fbd4f130c4f03c7b9fb5eb1d
- SSDEEP 3:Wltgl+:i2
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5
- Target
  Xenopster/config/updates/config/http3.dll
- Size 221KB
- SHA256 01e3a64a5ef7ef69db5e47bb31367385f086c1711e20cb504982174e6f24bf77
- MD5 2f981caf1a36e25d08212f9705a56a9f
- SHA1 8eccfd53dec336d11f7625bc159d7d0d8e89a18d
- SHA512 b6fd4296e389d50e262ced35e6d8ca1c63078235d08ffde39f15db8c70b1572c9f2245409aaee9c54c1a0e5e32b7c8c1d46da1b675906eef9b8ed6c99a712ac0
- SSDEEP 3:Wltgl+:i2
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral6
- Target
  Xenopster/config/utils/en/client.exe
- Size 217KB
- SHA256 255be308fcaeb9f48b5061c22e52acc889fe8620c4a1686f757f2f4897d12f6a
- MD5 8963f139a478199d0e6aea7aa7f7d668
- SHA1 13bee1c58741d4f717caa3d20ab9eaaf04bc7c47
- SHA512 fdc028c624b75548db9652d2330fba9c1659cf3d58d8dc827b215726e8a6883439864954a6c91b7869fda3b1d90a17d25290ac558a191b788199b7ba366f5bb7
- SSDEEP 3:Wltgl+:i2
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7
- Target
  Xenopster/config/utils/en/davclnt.dll
- Size 512B
- SHA256 cc9db23853cdf8417db589db3abd0b43211aff730d3a27023fcbd587f2007a16
- MD5 21d65ffbe8f4973f6b273e90cb1e1ee5
- SHA1 556dfe8702c6ef04d0186d6b8c421f1ff6e8a716
- SHA512 e853dc4ba2a5900512a2819c98f752a993e0c6688d034a9ce26d91cad8d9a3bac3e46e7070540a82c6987b0c7f388352c8822574a182db461b8ed3d533260816
- MD5 SHA1 SHA512
Score

1^/10
behavioral8
- Target
  Xenopster/config/utils/en/settings.json
- Size 168KB
- SHA256 27ad02911c019fb7d6511e733551812c55e436524cbb957e1bda2c5ca741383f
- MD5 190a84edb643fd048b64a65c662d77af
- SHA1 d4ae381d19d440650ba49971a3657379cfa83eab
- SHA512 71e47b4cf3df65b5f8c09cbf64c4814898f30d3167c94c977a1a04011b1562f6487f3877423e2e7e4d992c05aae85b3276ba8a6f7e649984eb81e3bd164a3c42
- SSDEEP 1536:KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAh:m
- TLSH
  T143F31B0DA62314E3476F4450F43374016BF9485647D9004D053BC7D8DC540A5BF5F6F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  Xenopster/config/utils/public/network.toml
- Size 336KB
- SHA256 4e1d8c5ee9132e47b88396fb8d71504ea7fc24dbc08e6caeecc18575b7786043
- MD5 1127345269c5b7d9d7d9355798037c05
- SHA1 378d7b71fc6f9c76f36ab77b42030e45148e4bf4
- SHA512 f0f83f28cf0104fdc418c1636c890b3d7c81fc79b10115e785d60326403a71e31a2ef3a8bd968cdd5ebc544f1996ef333d640e938611be0af8bc6fdda1e06f3f
- SSDEEP 1536:KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN:m
- TLSH
  T11A741A0EA62300E3836F4890F43274016BF9086647C9004D093BC7D8DC940A1BF5F6F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  Xenopster/config/utils/public/rules.yaml
- Size 321KB
- SHA256 88460c1cc5ef0200ecf76334715fa86d083c60a7576ee238e4fe40418b6b5124
- MD5 f453ff4cc88f745c201f34b64ac56d74
- SHA1 4bf705dac0b783ed4ae9821e20b5d5d877103c94
- SHA512 40af6b3f713092601f2bb96048cca649d83108dd50ea09933dd310415e82625fcb9df06fd29af0efa7cc13aad1ce3ab10cd4800a7f72a181a21035b7bda3d5f2
- SSDEEP 1536:KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG:B
- TLSH
  T192641A1DA22700E3436F4850F1367401ABF9092647C9404E053BC7D8EC950A1BF1F6F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  Xenopster/core/libraries/assets/data_4414.dat
- Size 337KB
- SHA256 34b4778a28f1fa837d7d2c4c65928a6917627cf10bb911ca9aa448ea5b20aac3
- MD5 4b4299dfa906ac48bd6c1afc8fdfef19
- SHA1 eca1fcb197d31fbf0a528fa8f075295762325c49
- SHA512 501368b140739e834ce0d02d8ab980c9bc4c5106d1e5b71d48fe9b314432935755419a905e883eb6e17a66d5855afac7c376c0b46e019991e0d8354e341f6ce0
- SSDEEP 12:KAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAc2:n
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral12
- Target
  Xenopster/core/libraries/plugins/data_3292.dat
- Size 134KB
- SHA256 ed027817cc408dae4846c2a6c548a1e9689369b307dad5af3b515107130381a1
- MD5 0292869ed2d87e3e530ceeba285beace
- SHA1 b7e3f75357092954528647b5ab87d2696bdb0a4d
- SHA512 d66ae074223a23da361127050d942b5a397c8d2e8842be4eee339685f8a161724dde213853ee4949812bf483789163a8658b5a7aebc2461f11ed0c8eb62a71b2
- SSDEEP 12:KAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcK:T
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral13
- Target
  Xenopster/core/libraries/plugins/settings.json
- Size 152KB
- SHA256 4146c2498f8a75acdfa8b9db5620764a173195ebbe3ffbeaadb990bb881d5fc6
- MD5 22d2ba2f059c7f2c46cf6379abb40973
- SHA1 ec34c3f7a28956b8301f5d929897ca6ee0a443e1
- SHA512 5d4b5cccd05d4ca19a7ce1bc1123249adf96838a53c718960933f4c2956f562c3eafe7e55aa85fc9af2403b4b3c36e5b0d941f57c4af989d290850bc6c2a85f2
- SSDEEP 1536:KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe:N
- TLSH
  T11FE31B0DA62314E7476F4450F43674416BF9485647D9404D053BC7D8DC540A5BF5F6F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  Xenopster/core/libraries/plugins/tunnel.json
- Size 177KB
- SHA256 a04542b782b29a53fa0e033d746ecb76fcb08c3f0e4beb64f589d18ca9f82eb9
- MD5 454d7143736e9269866c485ba03e7d81
- SHA1 bd56856ff55cb78838118419de28aef0edd1175b
- SHA512 974c65f891c1e89955bdc928380d2611ab94781a85556d0f48a37ab8196264532f4520d5e529ada486d72bc2d02a29af7813041e8b1ee75c9bb1ab63417a5cfe
- SSDEEP 1536:KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAS:/
- TLSH
  T1C2041A1EA22300E3436F4450F0327801ABF9091603C9004D053BC7D8EC540A1BF1F6F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  Xenopster/data/client.ini
- Size 84KB
- SHA256 f476263dca8d1893408ab81bf3d43d05f8e11a30c42a88939c5ca2f28d4b9626
- MD5 cc5f3e937eea4aae408acf08ea93337e
- SHA1 ca78f1ef4b4ea80f60165dc1fce020235e7afbe2
- SHA512 33e580d1c185c69c6e88b8e07f0b2abd129f5b0a511b3f9311b16f9fd8b1a26f970bfc2bd158d3b8508b2175da63cee17c68fccfec0a87135f147cfaf84dec8d
- SSDEEP 1536:KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa:N
- TLSH
  T17D832B1DA22300E3436F4450F03274016BF9081603C8000D043BC3D8DC540B0BF1F6F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral16
- Target
  Xenopster/data/dependencies/internal/tunnel.json
- Size 80KB
- SHA256 6e3505b33b984545e878b151d64b471e336bf8ee4a637f072eadc8f44e59d3b8
- MD5 c93cb907915029900d85aada4389f4a5
- SHA1 e9918f2c99e54ad8decaf538efe67bb583d14495
- SHA512 3fa56abade50fcbee2107834eca7db91935f1b907d6a9922a33a865802c849c57afceec53fe426ce1fcb6cf8d3b549b086649307ac5ab94bfcb7f6aaadcc848f
- SSDEEP 1536:KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe:N
- TLSH
  T1E7831B0DA62314E7476F4450F43674416BF9485647D9004D053BC7D8DC540A5BF5F6F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  Xenopster/data/locales/config/network.log
- Size 88KB
- SHA256 989701a447bddc1d359052af5b382e69e4fd37f594931f9b461b9021f5889896
- MD5 fcc0a9ebc432d7a48c0cd32fe21aa91d
- SHA1 35f2847a292578ef092fda82088f8edbde37737f
- SHA512 3462fed939a8039cb902a2c252761660182a31e22b88ff8ffc5fee4b6c3480f02e92e86397fd58e36c9aedd9f02d3630254121ac0398dd60a047981c3498ccc1
- SSDEEP 1536:K++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++P:w
- TLSH
  T1BC93122F9A1320F3437B6491F432640A6AF9046BA799104D653787E8D8540B9EB2E9E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral18
- Target
  Xenopster/data/locales/data_5379.bin
- Size 282KB
- SHA256 f1c638f963e57b4146723049d9b77727c4a29494f7cad2e9bd7399a7cf4c562d
- MD5 a6dc6a4566ca438cdc588c8d110eab33
- SHA1 ac1e10d0d47d69a3b95e08191cf7a3adaec51ae5
- SHA512 e79fc134b05f503ab08eb9a93148fa9be5cbac5f53f53f4dcb988b1c822559ca5a47e0275841635e41a3934cedcc181f0f5b79bb0224bc5d741711a72c117488
- SSDEEP 12:KAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcb:K
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral19
- Target
  Xenopster/data/locales/data_5689.bin
- Size 74KB
- SHA256 6bdcec300648c287b9e467833b03c371f8e63c308b612b4b050bc7d4b4476a1e
- MD5 6c0f26a1efd9c06a8efa1409516b0962
- SHA1 dbffa9b0f434233bea4bd4ed6f5fe8d46e0aef12
- SHA512 8a39fd782a88064c145f5eb0882a226d7ebeec8ae68d79d6453e7b532f6be7378271b3e2281f08837a1411214e8572305a80ffecb69a8f553b47a473cb1f1ec0
- SSDEEP 12:KAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcl:a
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral20
- Target
  Xenopster/data/locales/proxy.cfg
- Size 423KB
- SHA256 b924303e361bf4a0bdec2180662f6f8b3b6c10b4ce3e54defd9886dbc0134f9c
- MD5 f15a895dbe53671e57963b037d6b4e59
- SHA1 8a0972aa147fb2ae79a4e86a46292099f59dfa28
- SHA512 802518f45ee7825d4e0635db433a09bdd8ec2a02376c4f39a87604db4b66fd99e2c00f52fcbcdb6ea99e6864df3df64ed7038943f5ea82805bf2f07f0348a958
- SSDEEP 1536:KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0:R
- TLSH
  T1FE941A0EA62310E3836F48A0F43378026BF9086A47D9004E093BC7E8DCA40A5BF5F6F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  Xenopster/data/locales/rules.yaml
- Size 427KB
- SHA256 c2033b9008f1861b80e32e808a39e06b67947dd7e7c6a274b4a06ac882fefd6a
- MD5 0baa926bbdb5f3dc5baf710503afd285
- SHA1 f0a65ab4546b001500275aba0c7f33272e552b16
- SHA512 08b9c149b9e9c2ecc3ed9cb693ebe5487296d56ce88bd96f1e51ea06a3633a3b3e1984db8d44ac0e235e3c2cae99127cf46a6c41c06f13c523a6a9dd8cbdee43
- SSDEEP 1536:KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAr:G
- TLSH
  T187941A1DA22700E3436F4850F1367401ABF9092643C9404E053BC7D8EC550A1BF1F6F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  Xenopster/data/locales/v2/netfilter.sys
- Size 22KB
- SHA256 6ed3538130255c76182673a0c792109efe7beb88ca5cdad516757392ae68f68b
- MD5 f5898b9285b9c4defc0945b03b1e5816
- SHA1 96e3c9e30245caf899767be61ce77e092c2333ca
- SHA512 5324a8c7ec8dc908a8006c3c856ca0e9809875aa0eab253c808fb70f216eab677f3051d3cddbc063d6af3a920535fcd6235c5c14430d39c226b437bc20233dd6
- SSDEEP 3:Wltgl+:i2
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral23
- Target
  Xenopster/data/locales/v2/session.log
- Size 239KB
- SHA256 2238836f58134dadaef87ab033d1bcb510423c11d4f7f13452ef633ebab0458e
- MD5 2ad93743a70b343eea40b2735e8aba48
- SHA1 7e82020d52f833fbd041f4c41e55d9d2fc4ed795
- SHA512 7182c83c8af559e6c396ec87f0072c095ed412c9b43a44a9d66d1c9853e3cdb81a886b8a9a63815a704a41a3d20545ab0f9a9bae8ca786ee4ff2ba5f66c2f76d
- SSDEEP 1536:K++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++u:d
- TLSH
  T1A434222F9A1320F3437B6481F031240A6AF9046BA398104C613787E8CC040F9FB2E9E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral24
- Target
  Xenopster/data/locales/v2/tun.sys
- Size 251KB
- SHA256 8697f454f98ace4b622576fa4fe97ae653df08ec2c78df3f1f9c2bc681b69304
- MD5 a2e23df2d48a7c6e0679bdbaf23bc5ad
- SHA1 496d4831f9d4294a320ba55219deca62dc7a20b3
- SHA512 38a198cea03810089fec149fe3878c0d651b4c6eb10b36d8bbcd1e49d0f5e0df45e60a1e4c5d27431612470c04ff8fe2b8693be7bb06e6ac6cfdeaef24f415b2
- SSDEEP 3:Wltgl+:i2
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral25
- Target
  Xenopster/data/plugins/debug.log
- Size 255KB
- SHA256 3b0ef2d64f9bcb4bc1be8e7b9aa25f57e7e38a460cb71d61327869609ea564c5
- MD5 95beeb414a028d948ff114dc00d0792d
- SHA1 34d124e6d870d1215ea9d9d15dd2a30e47208f1d
- SHA512 90433a5064553338de3c159f64447d5e28585fc8504a78bb9d9fb7185b8e4e1e8988349993ff0e7ee85adef387cf8dbf488e40de355f02351ee5ad82a58fc8ea
- SSDEEP 1536:K++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++B:0
- TLSH
  T11944122F9A1320F3437B6491F432240A6AF9046BA799104D653787E8D8540B9EB2E9E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral26
- Target
  Xenopster/data/settings.json
- Size 89KB
- SHA256 2db64d30228a713218e1f9cf556666f0f466729087f09b2dafe38288794ded6e
- MD5 5a23dd48d6f6bcd9bab1b33080e5b6ce
- SHA1 bfb0177d82d784e664398aabf84e5cf7406c049a
- SHA512 e83cc1727dd1265317942cec1489bda81c0865608adc83fa38a44ab15bb41ca14f639f4e957844a16a2a00dd1ba939eeffd82f6166d1edd1e0e9b035ca458d20
- SSDEEP 1536:KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe:l
- TLSH
  T154931A0EA62300E3436F4890F43274016BF9086647C9004D093BC7D8DC940A1BF5F6F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27
- Target
  Xenopster/resources/audit.log
- Size 42KB
- SHA256 c378bb5c535e5a6016bc9a164e5512c58d57306a05e67aff001e1e2c24e8493d
- MD5 4603a180d7d78db3d367e7279bb55bcf
- SHA1 f606516cbb03f45d987b12fbdde792122b558ff5
- SHA512 9c521462179d73be929fcbdf6a9234cf38aad5834cdec6951cc820e4b9331250cfe4ea00e718aee7447a69c88bc4a2a2d8b065e93ee06fd10442dd6f724ae3c1
- SSDEEP 768:K++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++E:K++++++++++++++++++++++++++++++k
- TLSH
  T1FB13122F9A1720F3437B6491F031640A6AF9046BA298104D653787E8DC540B9EB2A9E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral28
- Target
  Xenopster/resources/data_3714.bin
- Size 46KB
- SHA256 2fbd3419306a5d6f896f8a7f18db34097b7f3e44b13012f7b5a8c79888446e70
- MD5 73d5f40a27335d74dc2af057256920dd
- SHA1 d45e981e7184592828682ef515464a6934274e28
- SHA512 9137a9b9e0c8e8dcac9cc9a454ca079eb2469477be9c25c178693475a157dc2d26a8eafd4ae2560ebd9d3204f7e93de238b62ffd4773b95a9748c2c1e631955b
- SSDEEP 12:KAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAce:p
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral29
- Target
  Xenopster/resources/lib/tun.sys
- Size 332KB
- SHA256 e665f6731a8dc98b1f3b77556a0604e39e2c29eb61a20838a1ae0994d1fc0987
- MD5 b0ceb7e460b4aa4cae41f82221ee2e04
- SHA1 92b6fd68263dc9ac17fb33cdc9d6184ac7f27b6a
- SHA512 225454c560c3e0baf77ecdde08b56b4ed01faede153361fe7a6f043544a49beae2cf9b78d7059c6763ab28bca1389c21c84e44aaf5d3ac4a19f5bd39ffb6542e
- SSDEEP 3:Wltgl+:i2
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral30
- Target
  Xenopster/resources/x86/data_7020.dat
- Size 144KB
- SHA256 24a49b3d3bf143639ba6a676d53483cee7a64984eceb2bd947ac86351f007f73
- MD5 af90d0e03e1c0b75cf438cfe97d0a8e9
- SHA1 227fee3c0d6bc6a168b39f7c89aafe536e4a81dd
- SHA512 fadf6fc1e110bf284f16fef6d9300a0dbf4aea169fcd4d985ad5273cadfbf73ca4ad3871ac65b6b0654b832c30ef4f827b6561bb2ad5d173722b0a98c47a9ba5
- SSDEEP 12:KAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcK:T
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral31
- Target
  Xenopster/resources/x86/error.log
- Size 198KB
- SHA256 3692611723583f31473cc7b5a0f43aecd8b8d0692f4970decf44eb821329b211
- MD5 0dba4d1b7b6b22c051171ca9e9e54724
- SHA1 ae95feed29796eebe394b8fd8fbab8e7720f3396
- SHA512 80542493aaa26ba8b43547f34ed51fca2acf98bb206e2130ef347ea4d589d283d23c5e5516c544476089fc70bad88910f7532fd3d141caeb7c0c66be334079a7
- SSDEEP 1536:K++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++D:Y
- TLSH
  T16914222F9A1320F3437B6481F031240A6AF9046BA398104C613787ECCC040F9FB2F9E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32