Overview

overview

4

Static

static

3

APEX_S3...�.docx

windows7-x64

4

APEX_S3...�.docx

windows10-2004-x64

1

Titanfall2...ol.exe

windows7-x64

1

Titanfall2...ol.exe

windows10-2004-x64

1

en-US/Tita...es.dll

windows7-x64

1

en-US/Tita...es.dll

windows10-2004-x64

1

lib/CommandLine.dll

windows7-x64

1

lib/CommandLine.dll

windows10-2004-x64

1

lib/System...fe.dll

windows7-x64

1

lib/System...fe.dll

windows10-2004-x64

1

lib/System...es.dll

windows7-x64

1

lib/System...es.dll

windows10-2004-x64

1

zh-CN/Tita...es.dll

windows7-x64

1

zh-CN/Tita...es.dll

windows10-2004-x64

1

̩̹...�.docx

windows7-x64

4

̩̹...�.docx

windows10-2004-x64

1

̩̹...�.docx

windows7-x64

4

̩̹...�.docx

windows10-2004-x64

1

̩̹...�.docx

windows7-x64

4

̩̹...�.docx

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    22fc90e435e2738a776026b603fa61fb97830c1e8e93f884863634881d235b0c

  • Size

    1.3MB

  • Sample

    231001-rng1qada23

  • MD5

    147597eea17d1e0f07ec6a7ef78bef4d

  • SHA1

    7201d78b22e42ad459fb7adcc3774855210b8c32

  • SHA256

    22fc90e435e2738a776026b603fa61fb97830c1e8e93f884863634881d235b0c

  • SHA512

    69a06dbaaa5f826b40aac83a81f24f98c831d6913ad7e2a6ee8596f1269f23060d9a41e4b5ae3ebbe56fb1991d8b4136fe4d592b5c0e41a7e6e0509941e0f9ba

  • SSDEEP

    24576:NAqJ9f0gsiYPcI8CrzmLriHV3PyFqrsQody82qnj1RoqgeDe+ngv3eNT1kRW:qEJsPczcUroV3anN2qhwv33a1kRW

Score
4/10

Malware Config

Targets

    • Target

      APEX_S3ʽҪ.docx

    • Size

      16KB

    • MD5

      b8717e613f115f31602dfad4bf3e88a1

    • SHA1

      da929d64d9dfc69fb13ee51daaa5b03618c97649

    • SHA256

      6d9e9125579d264ca6ee74c51c91ef8a7e12cb8caff9b9ce235e3a1ef8bbb1f7

    • SHA512

      2aa1f163be90d85ba585cfa0aa206684219786f73f2a53a7f73c2f94e1356eae9b5a89f045a03a0836f316dad4b80227ff7125cbac8d665d30de6c6b62a6b809

    • SSDEEP

      384:ds66YlSW/6qi8ZcQ6XyM/sqF/sLqrJ6mMUnu0YC+qz2qsyi:apYlS0iw6XPjFELGJuUnupC+QRi

    Score
    4/10
    behavioral1behavioral2

    • Target

      Titanfall2-SkinTool.exe

    • Size

      574KB

    • MD5

      d8d087af6a816fdcefeddbf2fd39c2a5

    • SHA1

      eb615c82e18df4428ff29035bec7431735b2e1ea

    • SHA256

      f71be65c6b2f871fa1e7e408afc4d29bac6bef682f6cc9a5a258d25d433b3b63

    • SHA512

      74585c29eca92c1a6de9b9a6189612f81c1397a0bb4a9701dc165f638df8ef997c9c6d86ecfaf2509964dca7270c5e67c57304b4788a458b235f2f671a002afa

    • SSDEEP

      12288:0BxnvKRSVDXsObMdh8wXmzkZogLArtS+Xj5:0PnvKRSZsObMdhXXmzkZaSa

    Score
    1/10
    behavioral3behavioral4

    • Target

      en-US/Titanfall2-SkinTool.resources.dll

    • Size

      5KB

    • MD5

      a471c7dd52fb8bfd455b7dde5fcd0a9c

    • SHA1

      11da3004bdac6dfdfe4fe9a71374832555cfc7cc

    • SHA256

      f2c3202925691a8404acd535c69dca49468d81b77408689c5e53a6bc00b3ae40

    • SHA512

      64f6e895a44072a44fcffff666cfdd22058f86c959b1b59e54bcd1ff041f486069a3fdbb76d88a7be329fdc44da709c30b3ebb38e888f6bc2b1a6d3c0d26d983

    • SSDEEP

      96:1H0+6fOWoP82JRenQG9VXWIUfG8tYuuF0ltcLLYN2hp:1UrajI4G8tYuuWIf

    Score
    1/10
    behavioral5behavioral6

    • Target

      lib/CommandLine.dll

    • Size

      212KB

    • MD5

      d788b7dedb2e07ab596569360fcd3154

    • SHA1

      3fee00542701ea636c8a4db60e96856cfe4deb39

    • SHA256

      26af31165dbf6af3864609df7834a06404e6cfbd8905ba202e0a0bb921326d57

    • SHA512

      1e83c8e64a63046d1c0a620c088ccba5e7205539b249dc814b59a0360bd06dadd66d6d1e4b0b494c574d311fca1103011691453d910cf32b6092dd8f492dc8d2

    • SSDEEP

      3072:Lo5LAk8+YfkQRqP9RhBh1uirTB+3Lr/guqCwtipIllWf1/IFacB:Lo5Mk8XfkQRqP9RhduirT+OXllCwk

    Score
    1/10
    behavioral7behavioral8

    • Target

      lib/System.Runtime.CompilerServices.Unsafe.dll

    • Size

      16KB

    • MD5

      9a341540899dcc5630886f2d921be78f

    • SHA1

      bab44612721c3dc91ac3d9dfca7c961a3a511508

    • SHA256

      3cadcb6b8a7335141c7c357a1d77af1ff49b59b872df494f5025580191d1c0d5

    • SHA512

      066984c83de975df03eee1c2b5150c6b9b2e852d9caf90cfd956e9f0f7bd5a956b96ea961b26f7cd14c089bc8a27f868b225167020c5eb6318f66e58113efa37

    • SSDEEP

      192:erLXx0hyLsbb3rxVj7WU2WLTYoW4GD5dHnhWgN7acWlbAkWD7DiqnajKs3WoHpZ:Ih06sbbVVPWU2WPY7dHRN77RGlGs3jJZ

    Score
    1/10
    behavioral10behavioral9

    • Target

      lib/System.Text.Encoding.CodePages.dll

    • Size

      740KB

    • MD5

      be1849efb259352613e72046a3b4bcaf

    • SHA1

      40cb9985fd33fb9f3e8e5fcb8efc3f252c07c14d

    • SHA256

      93da6a111239a3804da2efd6a6faa92bf5cbfe3b2b079ad3c04be643179f4088

    • SHA512

      d5b3f10863356b4e75020fa34451a63d1cc6ac8abfddc19c2c7b819bb2cd3c91f131356f4c3e25fb4736cdae17b0d22dbdb39f6ae34d61a0ca0fb7c1c55b9651

    • SSDEEP

      12288:RijF57xn7kZQ6kliVreJIHHr0tRYbKr2KtG9VKABC6rPsB:uFF9km6k/IwRYbiBeKGCRB

    Score
    1/10
    behavioral11behavioral12

    • Target

      zh-CN/Titanfall2-SkinTool.resources.dll

    • Size

      5KB

    • MD5

      e366c10bf87f87e75f6731a0dcd24a24

    • SHA1

      1f0a36f760d37c4b84aebb8011a65098cb18f3ff

    • SHA256

      2d0dbad3d0509e0040448cce27b11ff808858ddb7840c7b889535c2d6c09100d

    • SHA512

      5d6c2db3b7582560cc30d6055cc384486e7b29248855d21497277322bfa0ff5582d4995a49e61c8abce25e4dbd25bb0c092201a39590f5aa503489071d1123ab

    • SSDEEP

      96:oH0+6fOmZ//TKdvlGIlOmdtTaE4s0ltcLM0b2lp:oULRUOku57

    Score
    1/10
    behavioral13behavioral14

    • Target

      ̩̹̩̹ͼ˵ĵ.docx

    • Size

      571KB

    • MD5

      5872c5e4263d23301ecf769f8cfa1c14

    • SHA1

      d0f2406d9cd7df40b1e0ad51eb2c65639942b4be

    • SHA256

      f590e7daa3bab32772248c39d1abd3b97ff92a3d5fafcd0ed9623c8afa1f0096

    • SHA512

      8d934e0b62ece01ef1d3ba904819fd9cf1e79644142205b026d6215f7bcef2149518fe190d0a23420cdb06d3282dcd2e3ea2c2341f620f79f4a0395f8e11fa54

    • SSDEEP

      12288:gvEfwotixme5NoMzLSkB2IH/jEUT3apfRigEuOmx+Tklb7nLV1eFT/gW:CoMxm4OEpj/TcogEVk+TgnbeFTh

    Score
    4/10
    behavioral15behavioral16

    • Target

      ̩̹Ԧͼ˵ĵ.docx

    • Size

      39KB

    • MD5

      4d0b6eef50bb4a69937147178cb8c743

    • SHA1

      6a62575ca31f63f1710123f1cbdde89b308fee5a

    • SHA256

      437320775af1074cf3dca6bd1106135c699db50ffdb0278f31737a6a1ca73835

    • SHA512

      ee1b7e7e6de5750734156ceb75ab3663308702a045bb40ef432d521781cc622bdc27e3384086f939f1f08d579b58d60fa5814bb097fac63c15d756a2a6e511b1

    • SSDEEP

      768:yjF70dATFYwv0szdv1i1pTu9MppjinN6V4B9U/3t8LDE3HchJd6alI:yjTXd9zwp+nZM/24chJdja

    Score
    4/10
    behavioral17behavioral18

    • Target

      ̩̹ʽҪ.docx

    • Size

      20KB

    • MD5

      a771338ceaab3c8a60a2d8bbe28da160

    • SHA1

      bfe64518bd9597ee03d0623ee90824cbe2c88712

    • SHA256

      8f26edd478c7b8c48ba062e585b37991fa7c560b69e5a6d9a5ef0fb134f70fe4

    • SHA512

      a95558fcd5ce4b55613c015742cae8432512cc1e775658381cb8beaa0a1375df04abff6fd2e5e202a66f92335258fe5456e71b429dd403e03dbb66a2f8f67611

    • SSDEEP

      384:bv4gEAR01edMwtjrNoPrgshGMBZcQ6Xy45J6md8VikezjAzIsG:rjbawtjrOuMZ6Xd5J7QikePgi

    Score
    4/10
    behavioral19behavioral20

MITRE ATT&CK Enterprise v15

Tasks