General

  • Target

    gd.rar

  • Size

    199.9MB

  • Sample

    230513-sqg9yaah5v

  • MD5

    b42b5ec462bc2fd7d13c10fc9ebdf74a

  • SHA1

    cbd67b4c58e85c37383332bf5a082fd6f4488e9a

  • SHA256

    1ef4aa23897477fad4e57aeec8370f5fbdce756efc26be3deae5123efdc86b9a

  • SHA512

    3e171c187a4abd3d76d8831e5d0bb7b581d35e5d06efdd85bb483e06c8261a3e31c6e5dfde91eb2b5d0262343df404407bf9138e8ec00182602d8010045fc5ce

  • SSDEEP

    3145728:mUekkV27WAhJoAeI9wq/f+XEtkuaCiRoe7Ktqyp3TyLNRSF/YY7pUMCxmQdq/Y:mRVmWi+I9w6GEtOriqWTwSVTp45dq/Y

Score
7/10

Malware Config

Targets

    • Target

      gd/Resources/CCControlColourPickerSpriteSheet-hd.plist

    • Size

      5KB

    • MD5

      77ce7c2080d0f2ac65c42cfa4ef631c6

    • SHA1

      9a6fb0127fb661d519cba5868b60835617859180

    • SHA256

      980f92d2867c93f2b6f43bcb6aa05647e7545562055b51edd7eda38a3f6e5dc0

    • SHA512

      255abd0ba5c467ecf79a2dd90fe6768ac0b32a7896ded83f6d79ccea46e20b1ce32224d977ac333df6f96df2fadd711374bc8d6307983a90550855422cb83f12

    • SSDEEP

      96:/y+VHP5/QO5nNHQWI/QOj9kuH7I/QOj9ksHMCmI/QOj9kvHE/QOOiHc5/QORnHz1:aYb06E06D06d902VD

    Score
    1/10
    • Target

      gd/Resources/CCControlColourPickerSpriteSheet-uhd.plist

    • Size

      6KB

    • MD5

      551af94aecec5dce55c41f7448703cd6

    • SHA1

      96b15e8559ed90923d9e76ab15107234d88a2a87

    • SHA256

      5517afdc4ea319ea42d2f120e758a6da6f4c19a2b10f7346ba38e6d7f0278c2c

    • SHA512

      2450217df4ddbf64585c7d2e1c5acee7a2165efe8e5ef40471bcd6aa1000a0ccd66b962755bb7e279da2d19f35805fede5980a671c9848f969709a17df05c466

    • SSDEEP

      96:/y+VYk/NEaWkYk/N20uaYk/N20LYYk/N20LrYk/Nyw15Yk/N20I2Yk/Nywy9Yk/l:a1c0u

    Score
    1/10
    • Target

      gd/Resources/CCControlColourPickerSpriteSheet.plist

    • Size

      5KB

    • MD5

      fcb5d49e60350b4e061376d079c78c04

    • SHA1

      86e6da84404f79ed9105b8ed1a84c54f5a8cde2e

    • SHA256

      32ec9e42908a44d99fdcecde2f71f7ca23989c1351f0276275564bdaaf6791af

    • SHA512

      2b28d248db07cbda87ce36c6dc55d73c7fb5e84ea9d725ff0bc6a6bdbdff908eabbef74d20abd402f64406cc173cd251a45670aeb72ce1dc481a3665f888f3d9

    • SSDEEP

      96:/y+VH5/QOhxH+/QOdhHA/QOdpHr/QOdOHN/QOqyHS/QO9LHo/QOqqHO/QOfUHH9l:aQdZM

    Score
    1/10
    • Target

      gd/Resources/DungeonSheet-hd.plist

    • Size

      2KB

    • MD5

      81973b2057bca63dd6ca47a89414b35f

    • SHA1

      5f8b5fcc84c7310dd0fc75c21e9f1afda157620a

    • SHA256

      ebbc757cfa618a93a9170ab505da95ea178f49128113c6fe70c4b121ae3c2763

    • SHA512

      a27c4998a93c84470e430d5269d4c488c9c325885ee0c3f007a8a4857f259f9df19125d5797f17672f2a7fd2628f4b11566788b789cfcde9812caca70705c56d

    Score
    1/10
    • Target

      gd/Resources/DungeonSheet-uhd.plist

    • Size

      2KB

    • MD5

      27ba105952636545dddebc4e8337c7e3

    • SHA1

      ef45e7d19370d3c4a65bca01b60d94339ea009c0

    • SHA256

      4f93ece615eb1f276d22cdd72d873be10a2d4bf90266743e80a1cf5d0dd67291

    • SHA512

      e4dfd2b6ccf4fe0760027e922450d6dea7b820d457acf3bf0b04ee861a40f1169bdeb1b101e007b501ed135c8bf8179e0586e8a011ec33f0f0a37883a29c97c6

    Score
    1/10
    • Target

      gd/Resources/DungeonSheet.plist

    • Size

      2KB

    • MD5

      6da5108211a576bbbc0ca0b926b94706

    • SHA1

      e989deba30cbe58700b5744de53a641cf15ce695

    • SHA256

      c0806b2c8446156cfd84cf8951dee85d3feb36e0d873c882edd2310a0746a888

    • SHA512

      eef1a546a616b61d7c9d444af06bc8f8547c9914ad6901ea8444f15541f3971aab6cb720956f06df2bd8370f053666fcc4eeecd467a699d7867dabe38a379634

    Score
    1/10
    • Target

      gd/Resources/FireSheet_01-hd.plist

    • Size

      202KB

    • MD5

      390a1e32ffff76050744b88fa57c8247

    • SHA1

      1649cdbca8b6f36c872889b791fd6b478038cf0d

    • SHA256

      aa7e5d61c298018d54bf70a828e3c92245c3394fcea90f247907031435ad0301

    • SHA512

      ad1f10790814f8304081aec308274c8e5704e6b59af8679ebb837c0c33ca6feb78db23014890837843b59129f71b2043148f01a5440f5eb12c99f9060553750e

    • SSDEEP

      768:IE1LvaxO9XpbkROnFWJmdJOAtqQFZXVLDFsi:91LvaPAtqQFZXVXFR

    Score
    1/10
    • Target

      gd/Resources/SecretSheet-hd.plist

    • Size

      8KB

    • MD5

      fd1b8ad2c4307a1ff6a6bcf696b327cf

    • SHA1

      491072085cd021ca280485d92e22b5e5bf750251

    • SHA256

      e8ab94b4318da1b011e95cd06700fff9adf1a2bd7e20ab72dde7a2496a581035

    • SHA512

      57460ebec83aa4ccf75dc3b22cc88a469715a995db1b84d8672b1659f6ac7690fa2365cd9a55f6058fa2c23e679768dc026cebe0363b41d31e6b0597fa82faf7

    • SSDEEP

      96:/y+sYkuDXoSYkRvn0cBkYke58JZcYkxd+WpKJYk/NBBQX7Yk/NnHe3Yk8aMK02YM:a80g06LGak+XQ

    Score
    1/10
    • Target

      gd/Resources/SecretSheet-uhd.plist

    • Size

      9KB

    • MD5

      58b19583b080b8b31466e9e85db69945

    • SHA1

      2d53890f00d2855543e048a407f2ff3911777808

    • SHA256

      41a147659aafd6970a2c18bf3e68f10b0bd1cbb24da5acb7d7b2f910f717c5dd

    • SHA512

      5cbd2000477c6748b837f541e49d0b1f75a7228d10822dfe40e65b9a1eea189654fa146de3376e2390a555ee4bb54ca1ced50f9ccfa159348ac9addde63c8846

    • SSDEEP

      96:/y+sYkPlhV8SYkCxGikYkVVWUZcYkYC6VzXJYk/N+cYK7Yk/NKIl93Yk0ojx2Ykx:arjS

    Score
    1/10
    • Target

      gd/Resources/SecretSheet.plist

    • Size

      8KB

    • MD5

      7eca932fc2d95fed5d4f10f0fd5e2fbf

    • SHA1

      357eca98a853c29d2f20bc4d4ca21bf800bd4053

    • SHA256

      e7e344f8af607b4fedc13c9e46e45d23d17366cf7e0c87fcc9b1771bb7fd4642

    • SHA512

      5943bd4f5071a2af1e1b32e5037f20047439ca3ed15a7b7c82ba8f76920bcd5d87b9c1bdcabf795efaf7ee3dcdf5c13fec670ff30597390e62906eec0212633e

    • SSDEEP

      96:/y+sYktkoxSYkEoN6GkYk2ZqCiGYcYkKKZLpKJYk/NLbaK7Yk/N20JkUYk/Nf/0D:a60b19i

    Score
    1/10
    • Target

      gd/Resources/Skull_w_01.plist

    • Size

      2KB

    • MD5

      a89988f0a456c1d1892d9bee7615fef6

    • SHA1

      a21f2bb3d48719b7d760f8e36bd30ed2bbf29b62

    • SHA256

      32efa112a870ce51fd26561e2d37c76ef847bd034af3b67adcad61b1d6ade114

    • SHA512

      3f27b08acda13f2f1f59e56de4ec0822b77b8e3724cd4533fb0f34ece34499ffefe73fd66c57ea475768a14907dfe7a30411dc3f9a112e2151a8caa8764d5a3a

    Score
    1/10
    • Target

      gd/Resources/Skull_w_02.plist

    • Size

      2KB

    • MD5

      053bc5334f60e46888df0711dd11f865

    • SHA1

      6e21b8c3af90d9eb75066a4db9d1f1b6f8267092

    • SHA256

      147d4e99c8360276debca1f1f72669f169bc2d0126fbfaf97359a0990cc57a44

    • SHA512

      c817b7cad320d7cd31e0797053466db83a043c38d82c6f4a42853e6294ac4d6b46d92fd95ceee8de8fa30b611844fc40af4d4e87de39202953b645dee5890f1c

    Score
    1/10
    • Target

      gd/Resources/Skull_w_03.plist

    • Size

      2KB

    • MD5

      b7ed9a96daccc42a4a76ace0f54cedab

    • SHA1

      acf2468b251acce486d4fd736e274eafe96d640d

    • SHA256

      030cb4f718d91020c89e2a1bd1ffdab5d23ca95a69d1a97d9d7424b525d3cb7e

    • SHA512

      f42910b2d89c4c3f739552dcb83534659a889d0dad966ace989cb292683cf01184345de35c3ed500de5fb8dd80dec29d496b82aef2e78f0fe6b762fdf62c7de8

    Score
    1/10
    • Target

      gd/Resources/WorldSheet-hd.plist

    • Size

      4KB

    • MD5

      3cdf5ffef83eded94687a8f5e66a282d

    • SHA1

      1d70bfa7ad40c00b1ba3ac5634e1581a5c911b26

    • SHA256

      b888b88d3fb772bc0cf5626ff998b4dfe91b5d5a90f56ba686017623f7044222

    • SHA512

      e3fc2184f176bc5fb28746662591b256a66fd42c84c896fe5ef5f01a3836ee764201993432bc5fee5c830c266b79649f6e61a79812e426f943d525b3e930dff3

    • SSDEEP

      96:/y+SYk/NusOJYk/N6YhlYk/N/fOJYkALnfpvYkAz6XHGKYk+I+WlpYkGrBEYXZtd:aeKh

    Score
    1/10
    • Target

      gd/Resources/WorldSheet-uhd.plist

    • Size

      4KB

    • MD5

      c74c1e852172c86a28adea23add021c2

    • SHA1

      53fc5072c865f22ecbc0365f732d5880d3e05dda

    • SHA256

      4fff531675cd2fab608841853b3d31cbfbeb0788bb33c5f99456d8c421136a5f

    • SHA512

      a8713a6a31fb70a25b59521c598dba3e1af0bf7a05d696c65fc4204a2772de30ad327a47a54196f164a954a478c44e8001c69a41e3e8142c150d41f573045b43

    • SSDEEP

      96:/y+SYkKO4LmYkh1Xke6Yk/NPPSYYkMAOm2YkMsM0DYkRRNsaYkTJJkhrLXZtZo6Q:aFPp

    Score
    1/10
    • Target

      gd/Resources/WorldSheet.plist

    • Size

      4KB

    • MD5

      b92cbe0d6149f73ee7dfdc019aca7a40

    • SHA1

      f6d160f063c928abe9d5fd141b1ea7b7da670da1

    • SHA256

      545d047789c2302e4f3b4902b3f0ff16a0973f4b8687c1e4dff03f780ff6db81

    • SHA512

      904197fadc0ac58599d1f907384769836ab98701074861914685f8fd8a0b86457c615b7585ba8c0b8eaf4735bc49dc6cabdbb98603400fae29905309abc5009a

    • SSDEEP

      96:/y+SYk/NnHgJYk/NnHW6Yk/N7r65YYk/NmEC2Yk/NIucDYkToqIRpYk0U4bLXZtu:abN5W

    Score
    1/10
    • Target

      gd/Resources/_CommonRedist/vcredist/2010/vcredist_x64.exe

    • Size

      9.8MB

    • MD5

      c9d9eebccef20d637f193490cec05e79

    • SHA1

      15d032d669078aa6f0f7fd1cbf4115a070bd034d

    • SHA256

      cc7ec044218c72a9a15fca2363baed8fc51095ee3b2a7593476771f9eba3d223

    • SHA512

      24b56b5d9b48d75baf53a98e007ace3e7d68fbd5fa55b75ae1a2c08dd466d20b13041f80e84fdb64b825f070843f9247daba681eff16baf99a4b14ea99f5cfd6

    • SSDEEP

      196608:n9A3D5MBD0vwqMKgL29M2JWMWiKV/nPlnqIaAAVINqsAsbPnpCxmz7dU8:23D5MBwZMd0b4oSQ7VSrAs1gEdU8

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      gd/Resources/_CommonRedist/vcredist/2010/vcredist_x86.exe

    • Size

      8.6MB

    • MD5

      1801436936e64598bab5b87b37dc7f87

    • SHA1

      28c54491be70c38c97849c3d8cfbfdd0d3c515cb

    • SHA256

      67313b3d1bc86e83091e8de22981f14968f1a7fb12eb7ad467754c40cd94cc3d

    • SHA512

      0b8f20b0f171f49eb49367f1aafa7101e1575ef055d7007197c21ab8fe8d75a966569444449858c31bd147357d2bf5a5bd623fe6c4dbabdc7d16999b3256ab8c

    • SSDEEP

      196608:e9A3DAnfudQZKuNK0kMp2Wxw2tr3aA5Jegn9kaK6Hj0aaNz9ZBJ7C:t3DAnGKZKuNK0SvAn9kaK6gaaNRZbC

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      gd/Resources/_CommonRedist/vcredist/2013/vcredist_x64.exe

    • Size

      6.9MB

    • MD5

      96b61b8e069832e6b809f24ea74567ba

    • SHA1

      8bf41ba9eef02d30635a10433817dbb6886da5a2

    • SHA256

      e554425243e3e8ca1cd5fe550db41e6fa58a007c74fad400274b128452f38fb8

    • SHA512

      3a55dce14bbd455808bd939a5008b67c9c7111cab61b1339528308022e587726954f8c55a597c6974dc543964bdb6532fe433556fbeeaf9f8cb4d95f2bbffc12

    • SSDEEP

      196608:19OaQ54oYY7jLwXjZ41OON2uk3bQWgtyccMEL:Gz5x7jLXkmkU4cFe

    Score
    7/10
    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target

      gd/Resources/_CommonRedist/vcredist/2013/vcredist_x86.exe

    • Size

      6.2MB

    • MD5

      0fc525b6b7b96a87523daa7a0013c69d

    • SHA1

      df7f0a73bfa077e483e51bfb97f5e2eceedfb6a3

    • SHA256

      a22895e55b26202eae166838edbe2ea6aad00d7ea600c11f8a31ede5cbce2048

    • SHA512

      729251371ed208898430040fe48cabd286a5671bd7f472a30e9021b68f73b2d49d85a0879920232426b139520f7e21321ba92646985216bf2f733c64e014a71d

    • SSDEEP

      98304:hQEKzHx15bWUuBrNatjJh2eNUrzKRL/RaIswn7aBOC5qZxVqFb2iExMc7FvxwGvf:WRDnuBotjJh2emr8L/YIsG7MOgqHG64

    Score
    7/10
    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target

      gd/Resources/boost_01_effect.plist

    • Size

      2KB

    • MD5

      c638bc6f61497a4a2c32f62af4bd60fe

    • SHA1

      3618e84825c6b5fa6d0d63d3e8dacca90c490fff

    • SHA256

      d3d9dcc6da6b954049e8834661f6d2a1d3f7256928991fe08f49c5daa62a8637

    • SHA512

      814470fac0d683a3019f004a4e0d98420c0a72dcd51dbddefbf496b7a90e25b6e8663279240ef0c2e17f141571ee923271a0e1b2ac3ca1bce2fdb46398720dd8

    Score
    1/10
    • Target

      gd/Resources/boost_02_effect.plist

    • Size

      2KB

    • MD5

      f45467db6500a27f2756cdda60947df8

    • SHA1

      2ec869aa0e2c2fc3512857ddd351609f1d53afc2

    • SHA256

      00afe2aaca87cafe9ccebf3d45c11b9017273c94b52f6e9c3c038c3cb1c4cf4c

    • SHA512

      6e1d9401aa92a88d92d2cb75244125c7e06b4572dd88213627bc445a0df87b23dd5c26b48fc6c8ae60f24c3d764276fc1d271fcef2876828b2106fe3e7c80347

    Score
    1/10
    • Target

      gd/Resources/boost_03_effect.plist

    • Size

      2KB

    • MD5

      d122c045b6e8adcb983a09bc7a02ca71

    • SHA1

      6a38519ac6f268c9dcbcee37cbeca327c3381c85

    • SHA256

      8bfc68dead941eda0b73218e872d9fb31a8bfca9e448486771748316b545c60d

    • SHA512

      0d8bbc2583e98a17362658e3535f59ddd8b012d1a12df23c63d15d3139c8bec8a93f4312aabd17ec025c9cc150a1692c413c56b53558acc6c94207c2878d9e9b

    Score
    1/10
    • Target

      gd/Resources/boost_04_effect.plist

    • Size

      2KB

    • MD5

      80168c7967ce56123eaae7c1c3ec71ea

    • SHA1

      73994ab3c4a3da5b55460ee25dcfc2f45f5f7a5a

    • SHA256

      e1a98040443675a42fb01354aa39f74a2256b1445e0249268677f6b01bcb1639

    • SHA512

      f32153e91355d0848bdca3082d28e6d198b8887bd5d1ccd2f3afedf9c2a2b0054fb8eaba02c01df450f4652f1d729fc9fa30150aefd74d08c036dece549511a1

    Score
    1/10
    • Target

      gd/Resources/bubbleEffect.plist

    • Size

      2KB

    • MD5

      92c33af019b971db151ce8c9dc7d157a

    • SHA1

      d08056779fa552e23a3a06ceb957b18e71c4a943

    • SHA256

      90d202a11098cd5dc3c6a55b9c8a5ecdd180db4be90d231b50097263e27f4c16

    • SHA512

      185d431b2952c7a09bf247109194ed144261962615e8821c881b7dc4e1c6cf9fdecc0ed6fb4fcd7e7f32deb702809b8904ff200fd0f2d9f296be4cefb9b67e48

    Score
    1/10
    • Target

      gd/Resources/bumpEffect.plist

    • Size

      2KB

    • MD5

      3ad67c3a9be538cb858935704afbc618

    • SHA1

      04621abab915fcb0089ea41f194aa781f984f48b

    • SHA256

      fc6b0d43afe44fc6c304854c64c136ab5e18b71bbd825de30d3a743ed1be9669

    • SHA512

      d25d3a490838678036564b8f187c65ed04a9dbb8fc99c881bed6db2a5c0aafdb15114d72528cdaa27859d604826f2f25d4c30369b4d4a3b484cde982220321d5

    Score
    1/10
    • Target

      gd/Resources/chestOpen.plist

    • Size

      2KB

    • MD5

      d0c6d566aa6535fc9d662e220b23b781

    • SHA1

      2ffc88c379c988e2bb47d7975a96f32480dc302e

    • SHA256

      70703ff38592e071018d643d5a74b5152940613235f7a7c674725269d9e0af80

    • SHA512

      1b74953f3cb443e4ab5d24eeb86cfc49000b15b1a253f53d64e28ae013e0ade48c158a29040335dc473dbbe4741cbac1d9c61c4463ad701ae9ad7af19a43e16a

    Score
    1/10
    • Target

      gd/Resources/chestOpened.plist

    • Size

      2KB

    • MD5

      7e7620021f4d24dc33f16d38457f7a51

    • SHA1

      e77072a06dbad85adf04afc638c824c340339529

    • SHA256

      96577dccb845cdeb9b805ce0ae56b1c6637ae409da57b3ba4c685b11a2f24ae1

    • SHA512

      4333cbcb22f26b09fa27af81f9d274c018be35ad3ae20801cd85c8bc568343dbc7af49e4cc9bd8a0bfb62d25a2ab958c9961d8ba3a1f33dc62d50f05452c78ba

    Score
    1/10
    • Target

      gd/Resources/coinEffect.plist

    • Size

      2KB

    • MD5

      fd4c3505406224426f46f8e0c3853201

    • SHA1

      4949dd31c507fe304ccd8c5f0987182dc994ceb1

    • SHA256

      4d85768ecefe0bce391c4298de1561e6dc5c6f41daeac955963325a3ece10f60

    • SHA512

      87c80e557bffa15ec19c96aee1e4978e1a11748fd42a98d59c1bc4202c58926cf34af6a1c9661ead38d797de0d77cf5b02c03711045783c02e43249e66602ef1

    Score
    1/10
    • Target

      gd/Resources/coinPickupEffect.plist

    • Size

      2KB

    • MD5

      c63fa1ed9c5d2ab66ffb7fbe7845190d

    • SHA1

      ea770e92bdd79fdcd46856d0f4255577557c5761

    • SHA256

      4f6d127477e30c46af16cdd00d0a764979609f32617849a0358af4dbd29bea54

    • SHA512

      1d4c82d495ace2b02d66082386d1ae4cb287ec2d8dae20eb3104ac616c9a4ffaa0a9c22f245377a62b0228cde6dd8341225724120ba1518fb6791d3a0734620e

    Score
    1/10
    • Target

      gd/Resources/dashEffect.plist

    • Size

      2KB

    • MD5

      7a0f4665c95dc11f6e043b9d3b5c8b9f

    • SHA1

      45f37d6aeb2051349c415ddaf80429275390ad08

    • SHA256

      0820f8e641679f7a91bc6f41f2a25632fde54674f2667979797ebb5e66afa152

    • SHA512

      85e152af3699feb7e79accbbcdbaf0f645abae0aa92f5e1099d2d62bd78cd1e1f4bec03672365c5a9ecf05dbf7599d3bdf0f84fc1ed3d4fa9d87b5be539ba0e0

    Score
    1/10
    • Target

      gd/Resources/dragEffect.plist

    • Size

      2KB

    • MD5

      6de0ee2cd3360b7a56c053235c495a18

    • SHA1

      3003297bd7e617ec83c94cbf8b7d02ef76327c61

    • SHA256

      c7e03b52f30719841186b1f740ed584164573785bf19bc5fac46a0ac813784b7

    • SHA512

      5d2586c94713df8fb24599c523e745a9a34c247e4028c6f51b09fe1f6e7a0338f714a322731143e2cc68c281e26bb73c1cd382fde2a43d4122c017eb7aac6f65

    Score
    1/10

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

28
T1112

Discovery

Query Registry

4
T1012

System Information Discovery

2
T1082

Tasks