Overview

overview

10

Static

static

1

Smart Game...VL.exe

windows7-x64

10

Smart Game...VL.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Smart Game Booster 5_noOVL.exe

  • Size

    3.1MB

  • Sample

    230419-qgtv9saf83

  • MD5

    2e3b1d6727fc76a1aa43636ff0704c3b

  • SHA1

    ce5ad0ccb03acdd90ced16fedcf1a25fd081bc4b

  • SHA256

    15712faa167b2a875b7d28c8aa7e1d2c107877eb633c8de3f49b2e2faf9e7b94

  • SHA512

    6e9622818017eae868d6a8a28527bff470fa55292b7e3bf4ae3e08821cbb54136a5a5aae06ed6cca1704dbd220e55a5a869e2b4d28127d568b2b23aece0995a5

  • SSDEEP

    98304:Mf8TSU/kWiZL5IH6R+N84p+AVHPSMhD0:y8PvPH6R+XJSMh4

Score
10/10
aurorastealer

Malware Config

Extracted

Family

aurora

C2

77.91.124.12:8081

Targets

    • Target

      Smart Game Booster 5_noOVL.exe

    • Size

      3.1MB

    • MD5

      2e3b1d6727fc76a1aa43636ff0704c3b

    • SHA1

      ce5ad0ccb03acdd90ced16fedcf1a25fd081bc4b

    • SHA256

      15712faa167b2a875b7d28c8aa7e1d2c107877eb633c8de3f49b2e2faf9e7b94

    • SHA512

      6e9622818017eae868d6a8a28527bff470fa55292b7e3bf4ae3e08821cbb54136a5a5aae06ed6cca1704dbd220e55a5a869e2b4d28127d568b2b23aece0995a5

    • SSDEEP

      98304:Mf8TSU/kWiZL5IH6R+N84p+AVHPSMhD0:y8PvPH6R+XJSMh4

    Score
    10/10
    aurorastealer

    • Aurora

      Aurora is a crypto wallet stealer written in Golang.

      stealeraurora

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks