f34c3b62fabb53ec10d4b0174eeb662bfda5d5a7dab84661f1acd94e40b101b2

Sharing

Copy URL

Twitter E-mail

General

Target

Princess.Conquest.rar
Size

882.7MB
Sample

221228-g88n3acf7s
MD5

f6001824c7684a240c13bd1b802e8b6e
SHA1

1602f29a4b3c5a99ac9e2cce16dfe59936e32678
SHA256

f34c3b62fabb53ec10d4b0174eeb662bfda5d5a7dab84661f1acd94e40b101b2
SHA512

345deae4764aa599618d5b38720dc44ca373b4fd01aefe6df8f49cec2abfc077703b312b26699e97bdbcff230f56d06419a40c9288810e2a00767e49eb61c4bd
SSDEEP

25165824:lDnJTuVlmKHPgUUMVF5FEc29VypLmEY1Wa:5JFKv9nvfMLypLmEY1Wa

Score

6^/10

Malware Config

Targets

- Target
  
  Princess.Conquest.rar
- Size
  
  882.7MB
- MD5
  
  f6001824c7684a240c13bd1b802e8b6e
- SHA1
  
  1602f29a4b3c5a99ac9e2cce16dfe59936e32678
- SHA256
  
  f34c3b62fabb53ec10d4b0174eeb662bfda5d5a7dab84661f1acd94e40b101b2
- SHA512
  
  345deae4764aa599618d5b38720dc44ca373b4fd01aefe6df8f49cec2abfc077703b312b26699e97bdbcff230f56d06419a40c9288810e2a00767e49eb61c4bd
- SSDEEP
  
  25165824:lDnJTuVlmKHPgUUMVF5FEc29VypLmEY1Wa:5JFKv9nvfMLypLmEY1Wa
Score

3^/10
behavioral1 behavioral2
- Target
  
  Princess.Conquest/IGG-GAMES.COM.url
- Size
  
  196B
- MD5
  
  882e17d630d74b64a8176e38e2fadf7f
- SHA1
  
  d6652d568db451c03b73eede688e0124e2d54ebf
- SHA256
  
  6d905d76e7d807c5831231d791f2510160dd56018ae423a037e7ac88fd19412f
- SHA512
  
  2baac743dabdbf133583c4d500699673e0bb2b2ade89f0a660eb17bfb440f1d74814ade3b82eb07d776f6a7c1b1975f25c6c1c500edc589897bc304a9c9fb3b0
Score

6^/10

evasion trojan persistence
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral3 behavioral4
- Target
  
  Princess.Conquest/PCGAMESTORRENTS.COM.url
- Size
  
  202B
- MD5
  
  420715a04de8367bb8d37d57ce1d6d41
- SHA1
  
  710369a636391e43be7149416d8e9b390863babb
- SHA256
  
  c4d6ac03d1b51af3f4127bdd12f2317da8ebf4a7f20402f2139c61d5cf10ab23
- SHA512
  
  8737cec4730f412c18e508076d9fb7af2ab10b4b1637c70c2f76c1c6ca7bca27021cbe56dc3305a4ea7704f7ac2c6e005d02c605a4e7f9b0a709bb94cfc7f457
Score

6^/10

evasion trojan persistence
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral5 behavioral6
- Target
  
  Princess.Conquest/Princess & Conquest v0.16.14/Audio/BGM/P&C - Pirate Barrr.ogg
- Size
  
  4.2MB
- MD5
  
  b3fbd80286bf6007c0be8caa18218ce0
- SHA1
  
  48af991bbaac54364bae1d080b21874f576a5891
- SHA256
  
  3982a7e3cc59fe4d5df5bd87f69bb86f2ece564d881392ae3fcb0c304f7f2c8e
- SHA512
  
  d6f98c38c5ce157a5680bbe661c5c307f072e1fc563f93ecc2cdd4e8f74d35558cb8fbdc9a4916edf0af5471832a1224dd5b67267bdc8fef72c907378063567c
- SSDEEP
  
  98304:V/nJYrBqKdl5epstZrKWRRkSPjK8+XwI94U6H7mgTVi:V/nhWlJrKWMSPjR+XJx6LTVi
Score

1^/10
behavioral7 behavioral8
- Target
  
  Princess.Conquest/Princess & Conquest v0.16.14/CoGenDrm.dll
- Size
  
  350KB
- MD5
  
  efb3fdd996bacd00c1080681e8ba183a
- SHA1
  
  55c48dee2f4946a1b28f3aa05031efe02dcc7aa1
- SHA256
  
  a5470f25f8c6d5fb93897778c89d32cf58ea34bfca276c2fa79b5cbfff9d2ee5
- SHA512
  
  03bf739c1a7515164eb3ed5df441fa42467a433924aad5ea712ce8ed1c5e4e24305d167f57565f222f51a47b8f5b6c2cf7fefddcc271c784ccde4027726e3ae3
- SSDEEP
  
  6144:rrPRUhOyVAPgBIIZBseIJmAGWJIqgddEJknWLqtE67+YGrS7mqY8de90:rTQUgBI5JLOdeJycS7m
Score

1^/10
behavioral10 behavioral9
- Target
  
  Princess.Conquest/Princess & Conquest v0.16.14/Fonts/04b19.ttf
- Size
  
  7KB
- MD5
  
  40dbbb241511a3da7e1d96dcce49da4d
- SHA1
  
  5a2b9e3ae8615df233254d0bd83143656935dc58
- SHA256
  
  41589dcd753ef587c53793c8cd8cd0892174bb8209bccf812314373ddbc29108
- SHA512
  
  d02cd77501b83c7d2782bf295432cecf493df4d32e698210fc1c72de4ece9de16738debf905e7956d8d7fdfe48e237b5ac7e862f4910c791dc6393e356ef250e
- SSDEEP
  
  96:bMJrzgf33PiZaweKkXGkS9cVfMALLK961oFZ6gqM77777777yoHN8Zsn:bMeni4PKm29caELKMqFZ6toHaZsn
Score

1^/10
behavioral11 behavioral12
- Target
  
  Princess.Conquest/Princess & Conquest v0.16.14/Fonts/BebasNeueBold.otf
- Size
  
  99KB
- MD5
  
  524d720f3f670bd38785447ca9c4b395
- SHA1
  
  d17be829986eb8c6958551a63a51cd07a15a9cd4
- SHA256
  
  b5601ad8805b1502a5e6cdb2186b9a9cf49ffe2c973d137e6077ec70ca68e828
- SHA512
  
  f13efbf198c0222a718f609f4db9b51eb1e8fbaa00f02f56b7095643bc8ce458cacfd8c95f74302c8bbe2e4bf75eda18fdac2128a4c794541853f128f3b12ce1
- SSDEEP
  
  1536:34QY1l8REaL0GAMJSUUQhK70kBnz8sMZ8xYjameA0YxsI+fBzxqFDrOSJ:Ill8NL0GGD7Hnz8HK6oYxsIip8FDSSJ
Score

1^/10
behavioral13 behavioral14
- Target
  
  Princess.Conquest/Princess & Conquest v0.16.14/Fonts/MODERNESANS.ttf
- Size
  
  22KB
- MD5
  
  6948929af01e5f48744baa5dc78eb6e6
- SHA1
  
  ece5900ff367729a185488e50d27a23330e255ff
- SHA256
  
  ad2ffb254b194c8732ff33720ced9fceaf8905c5f605e6b7908e7430210cc66e
- SHA512
  
  70b7ff779d2c36591ca26ffd5adfd631537f5a27e08b8548427e65323b879c08b3a12846d9a2ed6c0ca48612c4efff162b4e29034314ff497ab0e4a18dc5ef92
- SSDEEP
  
  384:F6WAXLk8LYZViMB7rv8Nv7r6hWNQ5qz3KpEbiE8wJeatcvWp635w7:8Xp5MB7oNTLQAz3IEbb8wlkWpv7
Score

1^/10
behavioral15 behavioral16
- Target
  
  Princess.Conquest/Princess & Conquest v0.16.14/Fonts/TG.TTF
- Size
  
  6KB
- MD5
  
  188341b74bce61d0529a7fe61270a927
- SHA1
  
  ff9870d4093b774b4994f9179fdc81008c61ae5a
- SHA256
  
  b25fa5563cc8a2e1e9b3913c3129668fa9084b684b5071de34e80ba79b91e89e
- SHA512
  
  bd60f9fdde712e870d3f8079e5ced0dff72409008901ddd2468a0ae63dbeb960dd71ea657cb229534ec57eaca02b501bdcc7cb404ad756a51ce0ac705109c719
- SSDEEP
  
  96:7u/f3EZadeKkXGkS9cVfMALLK961LFZ6gquEpyWyR:mMZawKm29caELKMZFZ6vlI
Score

1^/10
behavioral17 behavioral18
- Target
  
  Princess.Conquest/Princess & Conquest v0.16.14/Fonts/VL-Gothic-Regular.ttf
- Size
  
  3.7MB
- MD5
  
  d904839f41a9241e080f8989769efaf4
- SHA1
  
  b8609cc9fe80b2cbcbc3fabdf059be4ca52108ef
- SHA256
  
  7bc537ad07905dfdb6296d7e30b205fd71b8d6159702f4ead167cab3fb9032f6
- SHA512
  
  1fb7e1140d60102ddef6f48b5f971693005352051391372a99d55a8c44059c3af87276f3ed21872000ce7bfe0da19b7bc5a91e36065ece28d8bc19a636b6d7d8
- SSDEEP
  
  49152:W78I9HQ7Fyt4jC4sJ3DehQ8UzpP+uWOiT4XiT0H/J5zMfaRMnFjSINf7fBe:Oijjdwz/8K5iT4Xn/T
Score

1^/10
behavioral19 behavioral20
- Target
  
  Princess.Conquest/Princess & Conquest v0.16.14/Fonts/VL-PGothic-Regular.ttf
- Size
  
  3.8MB
- MD5
  
  0ddef3748a32597229c0adf45cfeac2a
- SHA1
  
  e6c107418367911c080b3e81e092dfc89edf2c8f
- SHA256
  
  8706ff2af72686f32049c9dc13c2e489a81f2c62b386a2921d332d34d4f3e95e
- SHA512
  
  cad835f53c0a8fdaa9f6c861c9965d469fbd1b8dccb9e390fa6c7c763db5218e2ba0f3d4c68b9ae1551f893f13db2c3817f2cb2da80a8c381654ea38c7899784
- SSDEEP
  
  49152:Pfw4EsKHQ7Fyt4jC4sJ3DehQ8UzpP+uWOiT4XiT0H/gtzMfaRMnFjSINf7fBXQ9:P4VsKijjdwz/8K5iT4Xn/5Q9
Score

1^/10
behavioral21 behavioral22
- Target
  
  Princess.Conquest/Princess & Conquest v0.16.14/Fonts/VLGothic/Changelog
- Size
  
  21KB
- MD5
  
  e34c692b05dfa4ed6a267ff80a0dad6f
- SHA1
  
  35e388df677d4948a207f64de154c6d85f110acb
- SHA256
  
  806fa8d90a3ffb64b395fe63454c970019e1b51e241e21be0b27af5f06cc94b4
- SHA512
  
  f8992f66a4e362aa633f0b0ddf9eb5ae495d3d7259c2e213fa4faddeb76de60c92086149fbd80492afaab2aa31f1d789300ebf048836c7368ce2afb7d2e6f011
- SSDEEP
  
  384:PdyxdRR0CCf6Nm/9HdVPYnNTpqXkhAt614:Pdy3VCf6N4SDqXkGt614
Score

1^/10
behavioral23 behavioral24
- Target
  
  Princess.Conquest/Princess & Conquest v0.16.14/Fonts/VLGothic/LICENSE
- Size
  
  2KB
- MD5
  
  a1219f144cea677e116651cce1a44843
- SHA1
  
  922b8f22b0f128d7bb052e58f5098afe33ef0c45
- SHA256
  
  752a35ceda0f41b29b234dc7b5cf3b4ba98c34698285825fc72f9db6c25249ed
- SHA512
  
  4090791377dd4e44a892310b873e08de09a645eacb569e7d308f3738702c938c93ab4fd6fdd4e67daf2fddb191a502d01a80ab0e15c3eb2897c43b449d84ae71
Score

1^/10
behavioral25 behavioral26
- Target
  
  Princess.Conquest/Princess & Conquest v0.16.14/Fonts/VLGothic/LICENSE.en
- Size
  
  2KB
- MD5
  
  4e7ea8b1a077841213e1446bfb0ce44b
- SHA1
  
  a5f7ea4602e90b17f5c9d557ffa9ae413d739f45
- SHA256
  
  a7c80d8bec13cc8b963ddb198ee7d0549c8bd4f1f3440cc2ad097295078bca4c
- SHA512
  
  7c29697e862cfce4aed85099459f9365748869b393c1c276e17298990a53bcd8cadacbc68fa3a46b25dd66f757275b41299e58ea7ff6d95e5e9ae19145f80795
Score

1^/10
behavioral27 behavioral28
- Target
  
  Princess.Conquest/Princess & Conquest v0.16.14/Fonts/VLGothic/LICENSE_E.mplus
- Size
  
  375B
- MD5
  
  9cb9b5eef336be9d69501fec78b3d4fb
- SHA1
  
  4fab4adb4a1e09fda4577670df7fe4f14cb55d18
- SHA256
  
  66d1ce3be56b1de04ffe96663d28be3b0ee1bf89985cbfc9a2e728a9ff0d4578
- SHA512
  
  a3b96e737ecdb47190a39b3bb252234a43dab395f102e460bf703e299a6a35e14b1f784bb832d78d864af8cd5e41ac660e28d41d97fee7ef1be7c931c7cadc4b
Score

1^/10
behavioral29 behavioral30
- Target
  
  Princess.Conquest/Princess & Conquest v0.16.14/Fonts/VLGothic/LICENSE_J.mplus
- Size
  
  329B
- MD5
  
  3268d6d1d7763b1ddaeb48a0597f86d5
- SHA1
  
  a01cc8493c04d3ccdefee32c3ac70a1fead18ef9
- SHA256
  
  bf4c60d392a7d5afefb3cc8f3e5f8dc37b8ed2b1f69b5373cfbcb351a0ba7013
- SHA512
  
  8a837fbccd557761505c565b0fd831930bd839d91972d9980fe559cc5ffc601b4d23fe5e0cfdde946192494db50410dbaefc7228fb3f0da7f56fe551b2770bad
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Adds Run key to start application

Checks whether UAC is enabled

Adds Run key to start application

Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32