General

  • Target
    skeet 15_10_26f2.zip
  • Size 23.4MB
  • Sample261024-3qt9lsxwhy
  • SHA256 368c4192ae3e0e6490c10db846503446423cb89fed9c23b4b2865bf556fe0565
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      skeet 15_10_26f2/docs/README.ru.md
    • Size 88KB
    • SHA256 01d06c89d4372f809ab5200c1c7601a12d338517aa7941cdc7c93dfd899fe193
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      skeet 15_10_26f2/docs/examples/rage_patterns.lua
    • Size 2KB
    • SHA256 c512a810b7523237e015ece2f9006cedb2bfa4fbd685cf798bd3f5dda3bc4f31
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      skeet 15_10_26f2/docs/ffi-reference/introduction.md
    • Size 6KB
    • SHA256 493d38347da433bda25003c7f9499c7b1972f65455571e04abd06aa68cc8eb75
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      skeet 15_10_26f2/docs/games/doom.lua
    • Size 24KB
    • SHA256 a1373020842a5c6f26083ae967300630cc49d9c4e607e22dc0f901c25e41e821
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      skeet 15_10_26f2/docs/games/tetris.lua
    • Size 11KB
    • SHA256 c447b720d7b9ff6a60160d2e13397f41f2201268c749b9556df58fbe16086962
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      skeet 15_10_26f2/docs/widgets/ragebot_info.lua
    • Size 8KB
    • SHA256 899f08c01531acca56803596a9b3866c251eb6ada62bb6ab7f193c92f0c280f6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      skeet 15_10_26f2/skeet.exe
    • Size 14.8MB
    • SHA256 5144b1ce96026bdfa9dc5e1d0ccd03eb4e9718f2e2686f9c32de7006f5e857b9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      skeet 15_10_26f2/skeeter.exe
    • Size 20.9MB
    • SHA256 1827aca66f08bddbac4ba72384874852c7f6d66668ce186e612ea6580bf1c559
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    • Enumerates VirtualBox registry keys

    • Looks for VirtualBox Guest Additions in registry

    • Looks for VMWare Tools registry key

    • Looks for VMWare services registry key.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks