General

  • Target

    SceneryLauncher.zip

  • Size

    24.6MB

  • MD5

    ebcd60980d146fb69175185a3f714b9f

  • SHA1

    b8f01bd12935ac0d9c8625daf2f88f3d094a3d81

  • SHA256

    5c27f927519d79c75feff2996756d6a389c9bab2200452f3ac7f97b9f2c587dc

  • SHA512

    4521577cbd1e9bdc7e81e030ee60982987859ae325fcd6d4ed9a477f2a3c103f136b794fa1dcd7d678919c5acc3c036be1164620c89f966face04e436b2a1642

  • SSDEEP

    393216:bTPbHvhkudP1Gs/EC+M00FGqD2fINFFe9KnPSVYcHJXUfE4tMkpwTNDuX1+:vyuKw4VINFI9KnPFsFSEKMJNDW+

Score
10/10

Malware Config

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • SceneryLauncher.zip
    .zip
  • Guna.UI2.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Bcl.AsyncInterfaces.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.WindowsAPICodePack.Shell.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Microsoft.WindowsAPICodePack.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Newtonsoft.Json.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • RestSharp.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SceneryBackend/Backgrounds/ch4s2-lobbyupdate-4-20-2022-lifted-copy-3840x2160-d3a138f5f9e7.jpg
  • SceneryBackend/CloudStorage/DefaultGame.ini
  • SceneryBackend/CloudStorage/DefaultRuntimeOptions.ini
  • SceneryBackend/Profiles/athena.json
  • SceneryBackend/Profiles/campaign.json
  • SceneryBackend/Profiles/collection_book_people0.json
  • SceneryBackend/Profiles/collection_book_schematics0.json
  • SceneryBackend/Profiles/collections.json
  • SceneryBackend/Profiles/common_core.json
  • SceneryBackend/Profiles/common_public.json
  • SceneryBackend/Profiles/creative.json
  • SceneryBackend/Profiles/metadata.json
  • SceneryBackend/Profiles/outpost0.json
  • SceneryBackend/Profiles/recycle_bin.json
  • SceneryBackend/Profiles/theater0.json
  • SceneryBackend/SceneryBackend.exe
    .exe windows x64

    53788f243675560dcf34d7b50bc02c60


    Headers

    Imports

    Exports

    Sections

  • SceneryBackend/config.json
  • SceneryLauncher.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • SceneryLauncher.exe.config
  • SceneryLauncher.pdb
  • System.Buffers.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Memory.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Numerics.Vectors.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Runtime.CompilerServices.Unsafe.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Text.Encodings.Web.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Text.Json.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Threading.Tasks.Extensions.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.ValueTuple.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections