Overview

overview

4

Static

static

1

32bit/Asse...or.exe

windows7-x64

4

32bit/Asse...or.exe

windows10-2004-x64

1

32bit/AssetsTools.dll

windows7-x64

3

32bit/AssetsTools.dll

windows10-2004-x64

3

32bit/ModI...er.dll

windows7-x64

3

32bit/ModI...er.dll

windows10-2004-x64

3

32bit/PVRTexLib.dll

windows7-x64

3

32bit/PVRTexLib.dll

windows10-2004-x64

3

32bit/Plug...ip.dll

windows7-x64

1

32bit/Plug...ip.dll

windows10-2004-x64

1

32bit/Plug...sh.dll

windows7-x64

1

32bit/Plug...sh.dll

windows10-2004-x64

1

32bit/Plug...re.dll

windows7-x64

1

32bit/Plug...re.dll

windows10-2004-x64

1

32bit/Plug...ve.dll

windows7-x64

1

32bit/Plug...ve.dll

windows10-2004-x64

1

32bit/Plug...ta.dll

windows7-x64

1

32bit/Plug...ta.dll

windows10-2004-x64

1

32bit/Plug...et.dll

windows7-x64

1

32bit/Plug...et.dll

windows10-2004-x64

1

32bit/Plug...re.dll

windows7-x64

1

32bit/Plug...re.dll

windows10-2004-x64

1

32bit/Plug...sh.dll

windows7-x64

1

32bit/Plug...sh.dll

windows10-2004-x64

1

32bit/TexToolWrap.dll

windows7-x64

1

32bit/TexToolWrap.dll

windows10-2004-x64

1

32bit/Tool...ks.dll

windows7-x64

1

32bit/Tool...ks.dll

windows10-2004-x64

1

32bit/Tool...il.dll

windows7-x64

1

32bit/Tool...il.dll

windows10-2004-x64

1

32bit/Tool...or.exe

windows7-x64

1

32bit/Tool...or.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    AssetsBundleExtractor_2.2stableb_32bit.zip

  • Size

    3.9MB

  • Sample

    230212-vcrmkaef3v

  • MD5

    79c94479e8100e54fd6ad10dcf5b871f

  • SHA1

    748cdf26ae72021a9bfad93bc15edcb110113c20

  • SHA256

    ad93e037fa69cb66bd757866fd38ed0eab0db89541b4739c302aec7e797f5ec4

  • SHA512

    88e903e22ef9ecfefd2629025dead6ae9d8163585a6b53ce609b7c10d9577fe54d9e3819d2fc57877a3a12dc8e782fc611c53a49711ba0448a902cde60e7af3a

  • SSDEEP

    98304:ueihcod+e5UA2wsvjaPWahUvZx6btevKRBgEi7Kbul:uLlUezMvjU+hEsvaLi7Uo

Score
4/10

Malware Config

Targets

    • Target

      32bit/AssetBundleExtractor.exe

    • Size

      398KB

    • MD5

      849c26c0dccf05a5a195b49c4cdcbe9d

    • SHA1

      5acbdc635e34ec180fb4b36553a3da0306dc2808

    • SHA256

      c5b29bd33f24b29724eb8216e7dd4a9a30552f0a88a7eed1baefa1085405be30

    • SHA512

      0e3885ff2d9555619ae675ca3f79a92f464e1053d10c1d9629fb854d3434d018c3cd62ac708d85892cb68816b28b92bd0aa6a3808e660348a48ee3dbf3d27854

    • SSDEEP

      6144:neye4oQXovha1fNR+gJbl7uyl1Tvx/PAKi75Q/DVOjcphQt:ney3ovhaXLlPl1TvxXAKi75Q/DF

    Score
    4/10
    behavioral1behavioral2

    • Target

      32bit/AssetsTools.dll

    • Size

      793KB

    • MD5

      5485e7451430ae6ae9398bc2d5ebdc00

    • SHA1

      03e128dd41a8d8730f21548632a046c42bb57ca4

    • SHA256

      a5874c4ff2275214f5a7293dfee63f48e986629bce81e38fc04ef9bae21822c2

    • SHA512

      cb3439748f4eb7f407a2640601de6249ae10bbafe6a005bc29fb9821d067d30570e48c93b24ba89b2aeb532328efdaff629312efc713756dfbf407b0ec47e93d

    • SSDEEP

      12288:/qCAyjEMNxOit3ccD+Jg0yIjMnty8BfqxDkYj41EjqCcyqUb31/ryQT:Ao3Oy/RZnty8BfqxDkYU1ETx/ryQ

    Score
    3/10
    behavioral3behavioral4

    • Target

      32bit/ModInstaller.dll

    • Size

      71KB

    • MD5

      f7da2adfaa03d856872b328d20332f81

    • SHA1

      a59fb348f8b691dac1547e58fda7ec9bc5c9fba5

    • SHA256

      15e3e4a06b3012e678e8d80802625be7f461ed41a7972d6d260ac54b319f06bc

    • SHA512

      d6e6e3efe5068e6567fe58f22a2a48c021d2cbf0566f1c4b2b5582aab82226a6a8832d5932234b12daaa3b05048630f9b7de8f70c5ecd9c66f839587a8c03d7a

    • SSDEEP

      1536:SO33NJwdG542mAoE4QGsMYf6rmi3OZfU0:zNJw84QGkf6rF3OZfU

    Score
    3/10
    behavioral5behavioral6

    • Target

      32bit/PVRTexLib.dll

    • Size

      2.6MB

    • MD5

      7a8c0f1093226b93a0af4785ed41c457

    • SHA1

      5fa4657cc88b118c1e9fe51532196d257dd547dd

    • SHA256

      fd5b8af4ec99741bfbec5afee82bdfd63801f160595ad6369d260a1cb051b90c

    • SHA512

      f9fd12d9cf68ec907ac6ac241f0d477400f4e7cecc11dc0286324688b19d53e07dc4c2a073f578a6246ca0c0e7d0f4fa9e85f45416aa348739e5477fe425eaa9

    • SSDEEP

      49152:UdNo4lhArpyhQwJgILfz+qakxYAZ6th/ORMm70gjQPmfHKlWNWpB:UdO4lhAFyhQwCkHaqJZ6th/OzzjQPmfq

    Score
    3/10
    behavioral7behavioral8

    • Target

      32bit/Plugins/AudioClip.bep

    • Size

      25KB

    • MD5

      528eb2ea91bfd2ead6ac52131dca4908

    • SHA1

      b98c1ecb4111137d4ff5ef408156b472d76d8d5d

    • SHA256

      fee78483765ce86185ac6416951b7b74d6a87287ca523dc77178d024c7803553

    • SHA512

      2b0f44b51e3b084b51a5db7a50087b7e9d91a447ca9da3b3ce0b7ed74b1ed248073bdd9d1660cb5418da4d580fad110fdb138350230ff4b9482226d7de183960

    • SSDEEP

      384:RXI82ZefcDELm+YMCvxzuYXOb+nMQ+MCj71KSshm71Dvci+gOZnPVxEtFIS:RckGEMrR5Xnn6GSlDcirOZndxYb

    Score
    1/10
    behavioral10behavioral9

    • Target

      32bit/Plugins/Mesh.bep

    • Size

      908KB

    • MD5

      2ae8e18ca654b4152fc6ad3fc6a9ea85

    • SHA1

      ae84308d121c4a22b5b66962a31789f7cce43471

    • SHA256

      56e497b6b4eec41f824456a79b312bce9ebd4bad81257f00d71763da3850ffa9

    • SHA512

      51f838af338f031be2227650bd70c792648a6525561a37b6feb50fc781f64b97a7db430fe772c32145e93dba74b32240d747fcfff544c32d8535196aaad616f6

    • SSDEEP

      24576:GB1Xt6AEr1w0x77LlMOUxqSQ2Oge/WRA36gT00y2:mtjK13x77RNSQ7SA3lT00

    Score
    1/10
    behavioral11behavioral12

    • Target

      32bit/Plugins/MovieTexture.bep

    • Size

      31KB

    • MD5

      8a7097f411529df0400771bc67d9a09a

    • SHA1

      3623206c14352fe4b2ab0c47fa40480d84d21944

    • SHA256

      62d08d840b6e2c30aa7c09aa0c727c9a81f6c6214cac5ec0b8acc2dc20d76ecb

    • SHA512

      7b7a038cb297bc49dc4f75da5b30b1d5f26436ebe96e802844485f72288f6554915cc949a0f58130fae91a8d37ae0e7f54c2c7dbca0e2b0aa02058e0727316a6

    • SSDEEP

      768:Oc6qH24z602RoGzHtf3Ia8Mxl10I6BVYhzD/qOZoOdro7:56Q24z/uocHl3Ia8Mxl10xbYhzDSOZPo

    Score
    1/10
    behavioral13behavioral14

    • Target

      32bit/Plugins/SubstanceArchive.bep

    • Size

      18KB

    • MD5

      e024742aca8e2a335aa8e36b238436e6

    • SHA1

      76ab230957ea1ace4d674cc09e3928b81d773c16

    • SHA256

      8db4ed2a072f907242b6c0f4c01698577692f587d3249f59eefb67de367e9f11

    • SHA512

      214bdb2532c2c4114b713df1283ab451e50481d5a65850037d2fbfaeccc8e130b0b74d1c5b84ac747102c272c5fe4da194db155775a67c85b5bfbf54864cf097

    • SSDEEP

      384:G1lyBq/ZnvsqkplObalUQcAfl9qOlghRJQKOZXOPVxP6:0ZvUtlY2AOl0LOZXOdxP6

    Score
    1/10
    behavioral15behavioral16

    • Target

      32bit/Plugins/TerrainData.bep

    • Size

      32KB

    • MD5

      cc5403ea37d200db10c8690cead032a7

    • SHA1

      137546870f8a5fe3a37a16916645713d6bc9fa22

    • SHA256

      9b8f8b75fae3db2268bf7406c3b4b8b3c0c78db6a72b57e7fee1a4059b34e157

    • SHA512

      11a06a0891298befee091138e67c36897b045ccd8888b1737032870e823668038b8c05b619780b16f8599d16030d61644a15a803371ecc656a1e8d49dd69bfa2

    • SSDEEP

      768:026eGQ3HhnoBAZjyMNJympe8zQwOZordSne:026i3HhoBAZjyInDOZ5ne

    Score
    1/10
    behavioral17behavioral18

    • Target

      32bit/Plugins/TextAsset.bep

    • Size

      29KB

    • MD5

      b5672829f3c68e41008125eafa05b296

    • SHA1

      8c9f8f0b5d0f25cb598d7d85946cd3816abd5e19

    • SHA256

      6abefad8bd25effcc9a26bf6f1f1900f1075d5d215f6725a739c1e37d774581d

    • SHA512

      9ffbc61acc8208282e778c7a6b0425798c3b76596a2e0388a36e9f2c2fe5c1d44c7443c2ad41532ba5f8fd5d8cdc59552600b3f1280e8be1892f86fb2048a94e

    • SSDEEP

      384:iL4YMTmk7Cg71TRnEjOAjxQw4RTqO7+zZG1avc1QJVhM5xoQqiZA2QKOZoOPV+54:iLFjkz4Ni66aDbcoQqiZFLOZoOd+5e

    Score
    1/10
    behavioral19behavioral20

    • Target

      32bit/Plugins/Texture.bep

    • Size

      147KB

    • MD5

      839d6af2056e6cb65ccb14c7f3642a26

    • SHA1

      6ba919328b51d5e46a8438372071a2c787499e44

    • SHA256

      f9c9b98af1a4f49afd4040e73897a6237c4c61ecab73e73f10ee2928ca984c00

    • SHA512

      e68fcc66de7582c7c800ce8038babdba91ea8a10dac19c521e05cb808dea482a7aac32cf455ac1a249d9680ba7ad210cbe88692db0dbd7508b10d34b8cea4892

    • SSDEEP

      3072:lVy7kDvqEVhnEFx5Z736ogilJDlZThj2UGp14QH+FSOZEa:l5qEVhEFxH7zjlFPJ2/1eFSOZEa

    Score
    1/10
    behavioral21behavioral22

    • Target

      32bit/Plugins/UMAMesh.bep

    • Size

      26KB

    • MD5

      c6695f46c9ba57b183cae349d7b393dd

    • SHA1

      0c8f0e829e0c68ef9a52de38c15bbcdd53972c31

    • SHA256

      ecd989a7e0b2549dd82f7cca9d3f7a492ade4c7ecc735a45eb2ffce4ae598e13

    • SHA512

      884fe51f2bdd7986d0e9ae4696ce69134937e660b3498c63da648548354c004f44c6ef386a29a0ce9dd7ff595adeac392e9c6915cd67ed407587402ff377a1a0

    • SSDEEP

      768:dOgKu1cQSUd4nQMMWFcT3DkVCwOZsOd2:dOgdC5nQMMWFcTzFwOZm

    Score
    1/10
    behavioral23behavioral24

    • Target

      32bit/TexToolWrap.dll

    • Size

      562KB

    • MD5

      b3779e78cf62c5bddac7be245da41a47

    • SHA1

      16f26d3e6b5b9eb96c092e8ef307114226c20557

    • SHA256

      4878322eebab8c5a7eaf906e3675419b25ae461b367dba280d0670e41494df5c

    • SHA512

      ce50b72a397eab6cbe7768abdd4f696931aa669a6a41ef5ebaf669354219bcf84d175d57ed10655a431cc0a5833bccccf02a20dc27d19086f0dd84b8c473f20d

    • SSDEEP

      12288:VwgpQur3Q8ENfiNlxlbc3/oeoz1dYMM8j1vM+Hn:KgpQur3Q8EN6Y3/oeaP9M8j1x

    Score
    1/10
    behavioral25behavioral26

    • Target

      32bit/Tools/Mono.Cecil.Rocks.dll

    • Size

      22KB

    • MD5

      81d65a9c910602dafa039a02745253bd

    • SHA1

      886f4ba0ab71dd43423f8c0005743f81e5138c9d

    • SHA256

      25ce8049cecea9af2da59eeb371bc9b12a27b6a7195f8d47cc884194a17c13a2

    • SHA512

      4ab415ef9c22cda58b299163d17c3f0b6313f6cd716bb0e3154b407be99200a84a4cc984fe03437412b2155282a6af12bf407b5ecc75bb8bf325da971ed09d92

    • SSDEEP

      384:NgHYsesyQmuq4DsrBf93+VtV5ofNdYWND1WMcZPLj8ZNz9ZMzEbSjr/j2yz+IbZt:WmuYl932V2iWNQ1TjiNn/IbZo

    Score
    1/10
    behavioral27behavioral28

    • Target

      32bit/Tools/Mono.Cecil.dll

    • Size

      273KB

    • MD5

      c840f1e2cc507ec3b07777023c05ad19

    • SHA1

      6d6f2366da9da78d73ce6e66e56e9c076e518f10

    • SHA256

      e8f08f27409d8a718590a94d1ebf82c300c4cd7c3850055629f70a42be6ded1b

    • SHA512

      15976d52f831dc5b8f12c6008fbf7fe9bbdc6051558d539336fa504726baad4a8093cf0410f2e22e3bf5c6c4c9fb2d65a2b1da0d650c62fea04c9949b68abe8b

    • SSDEEP

      6144:8ZWw66iJiMvd6bZrcgouIcraLbl0BP//BQvrR:piqdgUu7aLbyg

    Score
    1/10
    behavioral29behavioral30

    • Target

      32bit/Tools/TypeTreeGenerator.exe

    • Size

      51KB

    • MD5

      e6a771064ea1407d2cba5c2a835b36a2

    • SHA1

      f685135ed8cfd1459ec44cd4aba6271b1054fb28

    • SHA256

      720de8281893296bbaa5cf8df80be19e6310d5bee11444603d6b8a88b1bdb7c6

    • SHA512

      7ac0de03673e56ff6a721ce5c8451db6a81274ab30327e990551bd1113af06252466c4df1b9246d162c6bfba079dac060d5072e28de99ebfa87820d6a6a6a9b7

    • SSDEEP

      1536:DOh8+H9JZXThFnYc59SPyrMVaxyJi3cmp5H:D8tzZBGVCMMd

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v6

Tasks