General
-
Target
arena_wars.rar
-
Size
63.6MB
-
Sample
230702-w252xscc39
-
MD5
3984560a9711f120e6f5ec8d59cd0f63
-
SHA1
466f0f112209c483c33865c1d045ae33b8e7db47
-
SHA256
714cba3a893c73df0f144602c2b282e1bc252dbf7a8e820158139ff468b34867
-
SHA512
372659bd4b76447ab5539db1434d58b5546613eec23418bdadce8cb6ea34a9f7af2cdad62a7e268a167b53ede6573c7e38e2d2c4888014352b54e1d7be675d25
-
SSDEEP
1572864:w1+L/ZLgjL3Fw+yMlBSXyiELIQ1FZmvcYYQb81P0/Tk:w1m/ZcP3Fw+ll4XyiEbYcYNSP0/Tk
Malware Config
Targets
-
-
Target
arena_wars.rar
-
Size
63.6MB
-
MD5
3984560a9711f120e6f5ec8d59cd0f63
-
SHA1
466f0f112209c483c33865c1d045ae33b8e7db47
-
SHA256
714cba3a893c73df0f144602c2b282e1bc252dbf7a8e820158139ff468b34867
-
SHA512
372659bd4b76447ab5539db1434d58b5546613eec23418bdadce8cb6ea34a9f7af2cdad62a7e268a167b53ede6573c7e38e2d2c4888014352b54e1d7be675d25
-
SSDEEP
1572864:w1+L/ZLgjL3Fw+yMlBSXyiELIQ1FZmvcYYQb81P0/Tk:w1m/ZcP3Fw+ll4XyiEbYcYNSP0/Tk
Score3/10 -
-
-
Target
ArenaWars.exe
-
Size
63.6MB
-
MD5
400b6b0f0382469ae0350c394f78fd2f
-
SHA1
2ee631ba2382e2a0f61b662d3534d44b558db8fb
-
SHA256
7cc4d64738543edb9f6586837822b01ad3eaa96ffe1bb19d4bc82a662ed4a71b
-
SHA512
94b968305621cd3f400fe9bf6dada61b4c4439f20ce16056ec7021baf3f692ceddb863266b173361432906c5e8dc819d7da4e0bcdc1d85fae61636af5fc9d2d1
-
SSDEEP
1572864:D1+L/ZLgjL3Fw+yMlBSXyiELIQ1FZmvcYYQb81P0/T7:D1m/ZcP3Fw+ll4XyiEbYcYNSP0/T7
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-