06fb5f8b5c42c35d87a1031cc7d25c630c6cf4380460307a5e027e61d1d33b02

Sharing

Copy URL

Twitter E-mail

General

Target

Pizza.Tower.v1.0.311.rar
Size

340.4MB
Sample

230526-y8lb7sha73
MD5

a11518cedb617572f4b7b14992991b67
SHA1

26b205707f01c9a4653a1b367dcb18ee00865c25
SHA256

06fb5f8b5c42c35d87a1031cc7d25c630c6cf4380460307a5e027e61d1d33b02
SHA512

4fb2f4fc8ddcce29f9e71da053bc689a96bebac07208516ae1ae117e5b7f0717f4ae7dc0982c439d4a4c34927c4b33ac2377998b9a5151877084c11769dfdbf1
SSDEEP

6291456:foVzx8xLH5wQdg5HTENV5/uGmgifrprkGVtxXEOKIInbpiWNL8vuUE0zDDGooXB3:fci5H5PmEDhuqcrFteWIbJN+m4DDop5

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  Pizza.Tower.v1.0.311/TORRENT SITE.url
- Size
  
  49B
- MD5
  
  34a4019b725696cdec110fa75127edb1
- SHA1
  
  1fb79f0adc5ea059197924cfd4f62561a3393c7c
- SHA256
  
  2b12e0dab37e851d16fa8981337c33acf7524b00f4cb08bbf3682adc64ca2b1f
- SHA512
  
  34b8f6b30a831019b33c8a355599e060a10773e12c7a3a34dc97e9d7bc949d9a416c3d46a8b31ff3527ec83b4572efc040554890b5b265cc453dc803f90b174d
Score

1^/10
behavioral1 behavioral2
- Target
  
  Pizza.Tower.v1.0.311/WATCH MOVIES FOR FREE.url
- Size
  
  53B
- MD5
  
  4006d6d0aef0bf0455101193ea751165
- SHA1
  
  52560f9c465327ab5c85e99f805112666da5ce95
- SHA256
  
  527fc8bb5b6c499d0ced0c51c1a3693884171ab7a84dded527e5b9cd41ecdf27
- SHA512
  
  6c218e8ab3cea7264106e94d651e64a961dfd9f7a4bf763311069549c9a8b65431483d70db00e7d4d3ac33fa5088cb3e4b6d3779a0539fb6ab8a3f56ad79c6ef
Score

1^/10
behavioral3 behavioral4
- Target
  
  Pizza.Tower.v1.0.311/_Redist/_Redist/dxwebsetup.exe
- Size
  
  285KB
- MD5
  
  bcbb7c0cd9696068988953990ec5bd11
- SHA1
  
  3c8243734cf43dd7bb2332ba05b58ccacfa4377c
- SHA256
  
  34f64699d4830145cae69bd40115b1f326e70fc6a98456cb3df996d947dddca4
- SHA512
  
  551a2e3aa5fc7c0e79c3bd7c5333df5f1920ea83fe35b99adbbe865ea926fa772d72709bde2ea8f2685f4914cd96ff7b5b6f894f9b99f1120c2abe89c390a786
- SSDEEP
  
  6144:3WK8fc2liXmrLxcdRDLiH1vVRGVOhMp421/7YQ43:mcvgLARDI1KIOzOR3
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral5 behavioral6
- Target
  
  Pizza.Tower.v1.0.311/_Redist/_Redist/install_all.bat
- Size
  
  1KB
- MD5
  
  0a97820f9eef2c02e4fc49958b05f2a0
- SHA1
  
  9c88b0f039e0cfe5a5f3b60cbab15cb802d5e2d3
- SHA256
  
  38c080778514b99f159eece9be4f6d850decc0710589bf043aa73f0a604d1442
- SHA512
  
  b6db2caf24e9d909058f18fc828b33993eb7934346e7e362a3f6a3885ee16f0a4de211876803efc9810bbffb3bd3c876431d4e78adc014dc2d0f0378dccb121d
Score

8^/10

persistence discovery
- Blocklisted process makes network request
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral7 behavioral8
- Target
  
  Pizza.Tower.v1.0.311/_Redist/_Redist/oalinst.exe
- Size
  
  790KB
- MD5
  
  694f54bd227916b89fc3eb1db53f0685
- SHA1
  
  21fdc367291bbef14dac27925cae698d3928eead
- SHA256
  
  b8f39714d41e009f75efb183c37100f2cbabb71784bbd243be881ac5b42d86fd
- SHA512
  
  55bc0de75a7f27f11eb8f4ee8c9934dfe1acd044d8b7b2151c506bdcbead3ab179df7023f699c9139c77541bbc4b1c0657e93c34a6bc4309b665c6cb7636a7e5
- SSDEEP
  
  12288:0s1yfEcpPzdv+t4cRIy3ze3SUN0PXGTjiqRy2p3kwzjGHTkV:NwfLrvi4cRIyDe3SUNaXy+WypoGHgV
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral10 behavioral9
- Target
  
  Pizza.Tower.v1.0.311/_Redist/_Redist/vcredist2005_x64.exe
- Size
  
  3.1MB
- MD5
  
  abde5e0a22a46434bd0df652a63fff44
- SHA1
  
  c5088da4be3f72b4af2f3156893bf1d2b1f6f6ec
- SHA256
  
  b1cbcde3791e0b1c6df3def43d8c05035c60fe2f6a2d8ba091abb4509fb43ef1
- SHA512
  
  4ebd8971dea1efb9a72fee071694da7c9d8c797b3564cec7e0044d24b01a13009013f4a43719b7e223214a6c43d50d56790751b9e91cd324d40809bf0d605d9f
- SSDEEP
  
  49152:RVgGXsOTkzq69oXxerpduZ6xJftGEkU0oEBL/txTroHENHTpPE6fIr6VAVP04PLJ:R7XFcDehoLtXEBv11TqZl04P5PqE
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  
  Pizza.Tower.v1.0.311/_Redist/_Redist/vcredist2005_x86.exe
- Size
  
  2.6MB
- MD5
  
  6402438591b548121f54b0706a2c6423
- SHA1
  
  e052789ebad7dc8d6f8505a9295b0576babd125e
- SHA256
  
  d6832398e3bc9156a660745f427dc1c2392ce4e9a872e04f41f62d0c6bae07a8
- SHA512
  
  c615e6337a9507bfaaff14e23043e206351d48bf7ba1d0c244c4bc8a08f411b4aa27f9a9074a87b320007b3cfca448306752fd343392bdde83b851b0e7daadef
- SSDEEP
  
  49152:OW6IfKsucUSdXRc8jfi8sH9LyrgSnem02SIi7oOBX4twfDI4OzLbT3:RxucUkGwoBrSn9hFi73BV7xO33
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  
  Pizza.Tower.v1.0.311/_Redist/_Redist/vcredist2008_x64.exe
- Size
  
  5.0MB
- MD5
  
  e2ada570911edaaae7d1b3c979345fce
- SHA1
  
  a7c83077b8a28d409e36316d2d7321fa0ccdb7e8
- SHA256
  
  b811f2c047a3e828517c234bd4aa4883e1ec591d88fad21289ae68a6915a6665
- SHA512
  
  b890d83d36f3681a690828d8926139b4f13f8d2fcd258581542cf2fb7dce5d7e7e477731c9545a54a476ed5c2aaac44ce12d2c3d9b99c2c1c04a5ab4ee20c4b8
- SSDEEP
  
  98304:98I8/pCVmdbx2rU/xFnTBU8UeNeagEXtIgvjyGFDdo85qyKYr5NM62dNKViClWPg:9Avx2rw5Th8XeNyGtW0DJr5uDdQdWPet
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral15 behavioral16
- Target
  
  Pizza.Tower.v1.0.311/_Redist/_Redist/vcredist2008_x86.exe
- Size
  
  4.3MB
- MD5
  
  35da2bf2befd998980a495b6f4f55e60
- SHA1
  
  470640aa4bb7db8e69196b5edb0010933569e98d
- SHA256
  
  6b3e4c51c6c0e5f68c8a72b497445af3dbf976394cbb62aa23569065c28deeb6
- SHA512
  
  bf630667c87b8f10ef85b61f2f379d7ce24124618b999babfec8e2df424eb494b8f1bf0977580810dff5124d4dbdec9539ff53e0dc14625c076fa34dfe44e3f2
- SSDEEP
  
  98304:vT4tlQ0aeY51XNURYxaA6qjEb9tRuPmBmWBDLTMTtbslyzRt9cuISY6Qa:vKlhE9U6476itR+mLPw6lyZY61
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral17 behavioral18
- Target
  
  Pizza.Tower.v1.0.311/_Redist/_Redist/vcredist2010_x64.exe
- Size
  
  9.8MB
- MD5
  
  c9d9eebccef20d637f193490cec05e79
- SHA1
  
  15d032d669078aa6f0f7fd1cbf4115a070bd034d
- SHA256
  
  cc7ec044218c72a9a15fca2363baed8fc51095ee3b2a7593476771f9eba3d223
- SHA512
  
  24b56b5d9b48d75baf53a98e007ace3e7d68fbd5fa55b75ae1a2c08dd466d20b13041f80e84fdb64b825f070843f9247daba681eff16baf99a4b14ea99f5cfd6
- SSDEEP
  
  196608:n9A3D5MBD0vwqMKgL29M2JWMWiKV/nPlnqIaAAVINqsAsbPnpCxmz7dU8:23D5MBwZMd0b4oSQ7VSrAs1gEdU8
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral19 behavioral20
- Target
  
  Pizza.Tower.v1.0.311/_Redist/_Redist/vcredist2010_x86.exe
- Size
  
  8.6MB
- MD5
  
  1801436936e64598bab5b87b37dc7f87
- SHA1
  
  28c54491be70c38c97849c3d8cfbfdd0d3c515cb
- SHA256
  
  67313b3d1bc86e83091e8de22981f14968f1a7fb12eb7ad467754c40cd94cc3d
- SHA512
  
  0b8f20b0f171f49eb49367f1aafa7101e1575ef055d7007197c21ab8fe8d75a966569444449858c31bd147357d2bf5a5bd623fe6c4dbabdc7d16999b3256ab8c
- SSDEEP
  
  196608:e9A3DAnfudQZKuNK0kMp2Wxw2tr3aA5Jegn9kaK6Hj0aaNz9ZBJ7C:t3DAnGKZKuNK0SvAn9kaK6gaaNRZbC
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral21 behavioral22
- Target
  
  Pizza.Tower.v1.0.311/_Redist/_Redist/vcredist2012_x64.exe
- Size
  
  6.9MB
- MD5
  
  3c03562b5af9ed347614053d459d7778
- SHA1
  
  1a5d93dddbc431ab27b1da711cd3370891542797
- SHA256
  
  681be3e5ba9fd3da02c09d7e565adfa078640ed66a0d58583efad2c1e3cc4064
- SHA512
  
  6c2f4eeb38705c2dafc4d75d8de0036a0aed197f83e9cb261d255fe26e4391f24b0b156e9019c739dd99057041c2bb80f9ab80f56869bc1e01f0469a76f24f75
- SSDEEP
  
  98304:vRWKtOl5CCGomEBkHUBmExJrIUg32t9RRyvo7VnOcyP24Vc35re94tb0eYbY1poo:v3tO3CCT/hBxtVtyUVnmSprzVIY7QKAk
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral23 behavioral24
- Target
  
  Pizza.Tower.v1.0.311/_Redist/_Redist/vcredist2012_x86.exe
- Size
  
  6.3MB
- MD5
  
  7f52a19ecaf7db3c163dd164be3e592e
- SHA1
  
  96b377a27ac5445328cbaae210fc4f0aaa750d3f
- SHA256
  
  b924ad8062eaf4e70437c8be50fa612162795ff0839479546ce907ffa8d6e386
- SHA512
  
  60220a7c9de72796bd0d6d44e2b82dbdd9c850cc611e505b7dc0213f745ff1f160b2d826eaf62fd6e07c1a31786a71d83dc6e94389690fd59b895e85aba7444b
- SSDEEP
  
  196608:OwKjLs+UIkzHlAv4X6zQRgiwHLD2LQIX/:9KjaxFFP1iLD2LnP
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral25 behavioral26
- Target
  
  Pizza.Tower.v1.0.311/_Redist/_Redist/vcredist2013_x64.exe
- Size
  
  6.9MB
- MD5
  
  49b1164f8e95ec6409ea83cdb352d8da
- SHA1
  
  1194e6bf4153fa88f20b2a70ac15bc359ada4ee2
- SHA256
  
  a4bba7701e355ae29c403431f871a537897c363e215cafe706615e270984f17c
- SHA512
  
  29b65e45ce5233f5ad480673752529026f59a760466a1026bb92fc78d1ccc82396ecb8f07b0e49c9b2315dbef976cb417273c77f4209475036775fe687dd2d60
- SSDEEP
  
  196608:bPwMcp4zKAKpCPhD5nsF5GBAiSG5VtJFeHi:0McAWKJsF5vib5VtTeC
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral27 behavioral28
- Target
  
  Pizza.Tower.v1.0.311/_Redist/_Redist/vcredist2013_x86.exe
- Size
  
  6.2MB
- MD5
  
  38a1b890ce847167d16567cf7b7a5642
- SHA1
  
  0f5d66bcaf120f2d3f340e448a268fe4bbf7709d
- SHA256
  
  53b605d1100ab0a88b867447bbf9274b5938125024ba01f5105a9e178a3dcdbd
- SHA512
  
  907a9aac75f4f241a85ecb94690f74f5818eea0b2241d9ef6d4bf171f17da0f4bc702e2bb90c04f194592fcc61df5c250508d16b886ed837a74b9f45da9627cd
- SSDEEP
  
  196608:hPMlUtWUVbuVAwgg1wGiU6QCs9FbEwEhMJ:oUUUNHg1wGd6QxbEwv
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral29 behavioral30
- Target
  
  Pizza.Tower.v1.0.311/_Redist/_Redist/vcredist2015_2017_2019_x64.exe
- Size
  
  14.3MB
- MD5
  
  264c296cc0bf00db6ba8e7bf8cc4e706
- SHA1
  
  837a49f9eaacda7c077a8bbea149a52d766b81c0
- SHA256
  
  7d7105c52fcd6766beee1ae162aa81e278686122c1e44890712326634d0b055e
- SHA512
  
  9f197af069535896f866d2853689c8e0243fe5c89feeaf6a027315f31bb0086bb0a6234e77a4427481fb2dbe32c3c0d748f9de82ee439086745658a825bed5e9
- SSDEEP
  
  196608:bRjltflpQcIIS/Rj7BWl+aV8t8z72BxBwBgO4oDi08YfpPOx5l5xtc84s7uhzNIe:1LlptVYmfr7yBG/4oDd8DL4s7uhBqY
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral31 behavioral32

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Adds Run key to start application

Drops file in System32 directory

Blocklisted process makes network request

Executes dropped EXE

Loads dropped DLL

Adds Run key to start application

Checks installed software on the system

Enumerates connected drives

Drops file in System32 directory

Loads dropped DLL

Checks installed software on the system

Drops file in System32 directory

Executes dropped EXE

Loads dropped DLL

Adds Run key to start application

Enumerates connected drives

Executes dropped EXE

Loads dropped DLL

Adds Run key to start application

Enumerates connected drives

Executes dropped EXE

Loads dropped DLL

Executes dropped EXE

Loads dropped DLL

Executes dropped EXE

Loads dropped DLL

Executes dropped EXE

Loads dropped DLL

Loads dropped DLL

Checks installed software on the system

Loads dropped DLL

Checks installed software on the system

Loads dropped DLL

Checks installed software on the system

Loads dropped DLL

Checks installed software on the system

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32