Overview

overview

3

Static

static

Launcher.exe

windows7-x64

1

Launcher.exe

windows10-2004-x64

1

OnlineFix.ini

windows7-x64

1

OnlineFix.ini

windows10-2004-x64

1

OnlineFix.json

windows7-x64

3

OnlineFix.json

windows10-2004-x64

3

OnlineFix64.dll

windows7-x64

1

OnlineFix64.dll

windows10-2004-x64

1

PhotonBridge.dll

windows7-x64

1

PhotonBridge.dll

windows10-2004-x64

1

SDKVersion.txt

windows7-x64

1

SDKVersion.txt

windows10-2004-x64

1

SteamOverlay64.dll

windows7-x64

1

SteamOverlay64.dll

windows10-2004-x64

3

baselib.dll

windows7-x64

3

baselib.dll

windows10-2004-x64

3

winmm.dll

windows7-x64

1

winmm.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Launcher.zip

  • Size

    14.4MB

  • Sample

    221213-balhzsdd35

  • MD5

    04378f6651460c8c2169242b1df28309

  • SHA1

    2e312aee624a2e35de0e9542a6c4de15e7bca3f4

  • SHA256

    a0ffd4b7147b329eb9f1a876cd6fc043be19002503f2734faffe1dbf9c6cd034

  • SHA512

    b532b88c273132cb604c6b8884479c5e462c1c659d41c721ed6c0c6fd47c1847653958812151b83f3e95bfe66d6273c5a7c2c6b0adb4dab46487733e893331ae

  • SSDEEP

    393216:jJW/zFhNTjlTc0f705fBL9iEo7dczvFbMo2R0a4wdLH+:jJYz5flTcw05fBLIZ7yzvRf2R37+

Score
3/10

Malware Config

Targets

    • Target

      Launcher.exe

    • Size

      6.6MB

    • MD5

      3306c8ffe15fea29a0a59fac9805daf4

    • SHA1

      980506195b477689a29f1e94a00ffb56808012dd

    • SHA256

      2ad12bf130d62371e2eceb66955178e26d929899e8e49b84c18925068e867d7a

    • SHA512

      41190e3c2e7d35b24f2dc799c5a10070672bd1e0ae8b369fd8a96bfae0ef9284372d28f94eea8c02dbdf96d2274f63ebd50591b387558a33548e9798c88ba4a7

    • SSDEEP

      98304:0LElcq9Aj27JHAwZQw5PAmORpd+XAclmDi9C/lVGEhsz8E+Zx20hq850+5KHO:AElcq9z7Kw/Amm3DomDlfGkhZx20hsHO

    Score
    1/10
    behavioral1behavioral2

    • Target

      OnlineFix.ini

    • Size

      678B

    • MD5

      492fc06260255c42019918c6aee7480b

    • SHA1

      0b67c03fb45616418fff76ab2bee52db42d8a75a

    • SHA256

      64861b00dea66da984041383ba0616955dfe88d0beb46794d1e606a2777580f9

    • SHA512

      848e23ce15bbe932aff71932a3c0a9c5a7514e5a837912d039d5ecbb6051fdff16a0aa1d556e768987d0ab500c1e547d869a17704b1401ae78a569158377ce9a

    Score
    1/10
    behavioral3behavioral4

    • Target

      OnlineFix.json

    • Size

      55B

    • MD5

      51bd3de7ee7e70c96fe914e35be2e0ed

    • SHA1

      fc1b6359e5fa6c9b8652bb583d736d381cf6b77a

    • SHA256

      c8b63a63cde606dbec66a7ca1d2f4b455907551bdd920f922eafed91a95a602c

    • SHA512

      1892e6ea3ede9ec37622a17b1ce3e7945539d1f659317500e7344aac63ade2c997a50a64479818e80dd4fdab63357c460282fdd3764e4f17cc12897b50e31f4c

    Score
    3/10
    behavioral5behavioral6

    • Target

      OnlineFix64.dll

    • Size

      4.8MB

    • MD5

      299ed8091d6a20588dc89f6180649546

    • SHA1

      9d133a4e25c628b8bfdaad687f1fd3e8d5b6915a

    • SHA256

      71a4f566abbf2ceb3b0d6159cd7950d120593c5badda4dde2711671957f16003

    • SHA512

      27793b04ab19039cb5606a144d9e1f1cf6270b14766c9e83596a9cdce4190e6d6fba564a65df4a45c77a4687e4cab75f6f45d282f0856195605c69bf4fc01aea

    • SSDEEP

      98304:VUpl8t9L68FxO50rTrSrjPcT6yJ1ZhLfVufEOcJe1Nre:Cp49L7DO2rTwL46elfVMXoe1Nre

    Score
    1/10
    behavioral7behavioral8

    • Target

      PhotonBridge.dll

    • Size

      3.4MB

    • MD5

      d21d2ecc52adf29f6d124f74401a53ee

    • SHA1

      b4afc0f37aa345fd2996402275d63941a1ea49fe

    • SHA256

      022c577fbd8d8365553f7d9bb7cd2039bb9f36088c7176fbbf1c0950fc661cc0

    • SHA512

      7df4e7ccc4c249c51cbf109b37b34439e1e853e1410c50ab1a0518e743720c5c7815ca70eb0e25154acd428777e512ed74edf8a18d6fe646d60bc926c25c069f

    • SSDEEP

      49152:fnCqtLGhj+ihFI2+Gt9iTYArIcZ+J54JYXRUszY6wBXpiDIUePezTvZat7Z5AHl1:fntLcj+igtikTYwIcZ+cJAURpATQ3Q1

    Score
    1/10
    behavioral10behavioral9

    • Target

      SDKVersion.txt

    • Size

      1B

    • MD5

      cfcd208495d565ef66e7dff9f98764da

    • SHA1

      b6589fc6ab0dc82cf12099d1c2d40ab994e8410c

    • SHA256

      5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

    • SHA512

      31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99

    Score
    1/10
    behavioral11behavioral12

    • Target

      SteamOverlay64.dll

    • Size

      96KB

    • MD5

      549eb651023fa847d2212bebe29c6f9e

    • SHA1

      f70fbe8f46cbd90c185eac2a2df843e2c3405a8f

    • SHA256

      9edeba9df599d65fb378d4bcbe16e9ac2ea3b7850491e662e8ddaf6f1d74849e

    • SHA512

      9e249b8d589c52857362b0611c265c21d1f715749e6b7a75e112d28aec89975655a8ef62ad1de812fadd39a48f0e01cc8eef9e33bbb5e30da827020c77247c68

    • SSDEEP

      3072:YV/XjVTzI4OC9cFnlHB6innA2ezcqSn4ueM+GLSD:iTi4OUc7Kt

    Score
    3/10
    behavioral13behavioral14

    • Target

      baselib.dll

    • Size

      395KB

    • MD5

      03b95098164fff97ea464b856aa6feb8

    • SHA1

      9a45498ca3b030637b2354866489282206e8e923

    • SHA256

      7a910434ea15a4b8e2cbd8dc8890b5656f9a60f538e6d3cadfb09eae9d5e38b1

    • SHA512

      6416cbdad5263c2b2d09e3bd8e5ac9be5244c0bb8499ac88eeecb4dc7f8730dbced3b10d755a5969a315a7239e75812485efc3488bac131eb76c5b39dc300794

    • SSDEEP

      6144:tmLYuq1+dNhJ6d0BNxcHqT4PxAVsyyhcm7vv78sdTW4FYVXplZXVvfBHO:8Yuamvq+GyYoGdu14

    Score
    3/10
    behavioral15behavioral16

    • Target

      winmm.dll

    • Size

      257KB

    • MD5

      c5bf99bc699a12c89783ec83c42a36c7

    • SHA1

      acd45b08796a4932ae7ad3989c571993ebcf0352

    • SHA256

      54a6ece54641ee6e437caa351e493ddf4435f3e23e3d4ab4655c35f57b94fc59

    • SHA512

      2d86cf49181d66e2747dd6f8ada8eb0646b4a9767d4dc2ad5dfeed5c9737543693855a43c6c4e19334bad6116157caa0344518d2ca803ec0882ea630d9d32ebf

    • SSDEEP

      6144:mP+o6GaSAZcnPOyUL/dKdpCdkohObqf6nGTp/hy:U+o6GafeOyULdkoVZy

    Score
    1/10
    behavioral17behavioral18

MITRE ATT&CK Enterprise v6

Tasks