Overview

overview

8

Static

static

1

Everygame_...ll.exe

windows7-x64

8

Everygame_...ll.exe

windows10-2004-x64

8

Resubmissions

03-07-2023 15:28

230703-swbpcaac8w 8

03-07-2023 15:24

230703-ss6ejsac7z 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Everygame_EN_install.exe

  • Size

    579KB

  • Sample

    230703-swbpcaac8w

  • MD5

    5fb92c3a7e96f2e5bf430d23df09922f

  • SHA1

    1db9a40c3d8965dec4fd2362f6fefc7f0e1883f4

  • SHA256

    42c5a74fdc77b2fb5adfc011437e01aec7b178873e725f90fbd50fb8db9929e9

  • SHA512

    de97634b695120d98ac85db8388476478d08753dcf8cd996a3369fb89a498c672b8a6cb063cb61df65b6f21cf97a00f99c2970762bbd808f2dc6d9c37f8a61e9

  • SSDEEP

    12288:PybTT3i/KTMu8yGbiZsLHVq+cXWaC0KAp6KJFWXndM7YqiskVGECE3S3:PybTFn8yalj3cXWa3KAp/anWEqlGS3

Score
8/10

Malware Config

Targets

    • Target

      Everygame_EN_install.exe

    • Size

      579KB

    • MD5

      5fb92c3a7e96f2e5bf430d23df09922f

    • SHA1

      1db9a40c3d8965dec4fd2362f6fefc7f0e1883f4

    • SHA256

      42c5a74fdc77b2fb5adfc011437e01aec7b178873e725f90fbd50fb8db9929e9

    • SHA512

      de97634b695120d98ac85db8388476478d08753dcf8cd996a3369fb89a498c672b8a6cb063cb61df65b6f21cf97a00f99c2970762bbd808f2dc6d9c37f8a61e9

    • SSDEEP

      12288:PybTT3i/KTMu8yGbiZsLHVq+cXWaC0KAp6KJFWXndM7YqiskVGECE3S3:PybTFn8yalj3cXWa3KAp/anWEqlGS3

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Use of msiexec (install) with remote resource

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks