Overview
overview
3Static
static
3Death Must Die.zip
windows7-x64
1Death Must Die.zip
windows10-2004-x64
1Death Must...ig.ini
windows7-x64
1Death Must...ig.ini
windows10-2004-x64
1Death Must...rs.txt
windows7-x64
1Death Must...rs.txt
windows10-2004-x64
1Death Must...rs.txt
windows7-x64
1Death Must...rs.txt
windows10-2004-x64
1Death Must...ns.txt
windows7-x64
1Death Must...ns.txt
windows10-2004-x64
1Death Must...ns.txt
windows7-x64
1Death Must...ns.txt
windows10-2004-x64
1Death Must...rs.txt
windows7-x64
1Death Must...rs.txt
windows10-2004-x64
1Death Must...rs.txt
windows7-x64
1Death Must...rs.txt
windows10-2004-x64
1Death Must...ns.txt
windows7-x64
1Death Must...ns.txt
windows10-2004-x64
1Death Must...ie.ini
windows7-x64
1Death Must...ie.ini
windows10-2004-x64
1Death Must...ni.dll
windows7-x64
1Death Must...ni.dll
windows10-2004-x64
1Death Must...ct.dll
windows7-x64
1Death Must...ct.dll
windows10-2004-x64
1Death Must...db.dll
windows7-x64
1Death Must...db.dll
windows10-2004-x64
1Death Must...db.dll
windows7-x64
1Death Must...db.dll
windows10-2004-x64
1Death Must...ks.dll
windows7-x64
1Death Must...ks.dll
windows10-2004-x64
1Death Must...il.dll
windows7-x64
1Death Must...il.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Death Must Die.zip
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Death Must Die.zip
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
Death Must Die/AutoTranslator/Config.ini
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
Death Must Die/AutoTranslator/Config.ini
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
Death Must Die/AutoTranslator/Translation/en/Text/_Postprocessors.txt
Resource
win7-20231023-en
Behavioral task
behavioral6
Sample
Death Must Die/AutoTranslator/Translation/en/Text/_Postprocessors.txt
Resource
win10v2004-20231020-en
Behavioral task
behavioral7
Sample
Death Must Die/AutoTranslator/Translation/en/Text/_Preprocessors.txt
Resource
win7-20231020-en
Behavioral task
behavioral8
Sample
Death Must Die/AutoTranslator/Translation/en/Text/_Preprocessors.txt
Resource
win10v2004-20231023-en
Behavioral task
behavioral9
Sample
Death Must Die/AutoTranslator/Translation/en/Text/_Substitutions.txt
Resource
win7-20231023-en
Behavioral task
behavioral10
Sample
Death Must Die/AutoTranslator/Translation/en/Text/_Substitutions.txt
Resource
win10v2004-20231025-en
Behavioral task
behavioral11
Sample
Death Must Die/AutoTranslator/Translation/ru/Text/_AutoGeneratedTranslations.txt
Resource
win7-20231020-en
Behavioral task
behavioral12
Sample
Death Must Die/AutoTranslator/Translation/ru/Text/_AutoGeneratedTranslations.txt
Resource
win10v2004-20231023-en
Behavioral task
behavioral13
Sample
Death Must Die/AutoTranslator/Translation/ru/Text/_Postprocessors.txt
Resource
win7-20231023-en
Behavioral task
behavioral14
Sample
Death Must Die/AutoTranslator/Translation/ru/Text/_Postprocessors.txt
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
Death Must Die/AutoTranslator/Translation/ru/Text/_Preprocessors.txt
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
Death Must Die/AutoTranslator/Translation/ru/Text/_Preprocessors.txt
Resource
win10v2004-20231020-en
Behavioral task
behavioral17
Sample
Death Must Die/AutoTranslator/Translation/ru/Text/_Substitutions.txt
Resource
win7-20231020-en
Behavioral task
behavioral18
Sample
Death Must Die/AutoTranslator/Translation/ru/Text/_Substitutions.txt
Resource
win10v2004-20231025-en
Behavioral task
behavioral19
Sample
Death Must Die/ReiPatcher/Death Must Die.ini
Resource
win7-20231023-en
Behavioral task
behavioral20
Sample
Death Must Die/ReiPatcher/Death Must Die.ini
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
Death Must Die/ReiPatcher/ExIni.dll
Resource
win7-20231023-en
Behavioral task
behavioral22
Sample
Death Must Die/ReiPatcher/ExIni.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral23
Sample
Death Must Die/ReiPatcher/Mono.Cecil.Inject.dll
Resource
win7-20231020-en
Behavioral task
behavioral24
Sample
Death Must Die/ReiPatcher/Mono.Cecil.Inject.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral25
Sample
Death Must Die/ReiPatcher/Mono.Cecil.Mdb.dll
Resource
win7-20231020-en
Behavioral task
behavioral26
Sample
Death Must Die/ReiPatcher/Mono.Cecil.Mdb.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral27
Sample
Death Must Die/ReiPatcher/Mono.Cecil.Pdb.dll
Resource
win7-20231023-en
Behavioral task
behavioral28
Sample
Death Must Die/ReiPatcher/Mono.Cecil.Pdb.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral29
Sample
Death Must Die/ReiPatcher/Mono.Cecil.Rocks.dll
Resource
win7-20231020-en
Behavioral task
behavioral30
Sample
Death Must Die/ReiPatcher/Mono.Cecil.Rocks.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral31
Sample
Death Must Die/ReiPatcher/Mono.Cecil.dll
Resource
win7-20231023-en
Behavioral task
behavioral32
Sample
Death Must Die/ReiPatcher/Mono.Cecil.dll
Resource
win10v2004-20231020-en
General
-
Target
Death Must Die.zip
-
Size
28.3MB
-
MD5
17930122ef4fcb9d84820e70efde006a
-
SHA1
27d17df2c352afcd2a86ae54b1ff0c786d2a7d1a
-
SHA256
6ed23b10a501a9661051f76cb9bd44ed762eea4c57b95da53321b9b1db3d74f5
-
SHA512
d49b6d564f94aeb498e338c7cdb90aee8069031a2c21d48fdbe4999a9e19ec7ffccff57acf93ee4db9080e5884cd05726337f14c81dcefecbb60ec76d95011bd
-
SSDEEP
786432:op0hCZLzy7QPZrb3RxdP0pGnu5zPnF0h28f/sJymrkHqt:BhCJyMxvR0pG0zPmh28f0Truqt
Malware Config
Signatures
-
Unsigned PE 9 IoCs
Checks for missing Authenticode signature.
resource unpack001/Death Must Die/ReiPatcher/ExIni.dll unpack001/Death Must Die/ReiPatcher/Mono.Cecil.Inject.dll unpack001/Death Must Die/ReiPatcher/Mono.Cecil.Mdb.dll unpack001/Death Must Die/ReiPatcher/Mono.Cecil.Pdb.dll unpack001/Death Must Die/ReiPatcher/Mono.Cecil.Rocks.dll unpack001/Death Must Die/ReiPatcher/Mono.Cecil.dll unpack001/Death Must Die/ReiPatcher/Patches/XUnity.AutoTranslator.Patcher.dll unpack001/Death Must Die/ReiPatcher/ReiPatcher.exe unpack001/Death Must Die/SetupReiPatcherAndAutoTranslator.exe
Files
-
Death Must Die.zip.zip
-
Death Must Die/AutoTranslator/Config.ini
-
Death Must Die/AutoTranslator/Translation/en/Text/_Postprocessors.txt
-
Death Must Die/AutoTranslator/Translation/en/Text/_Preprocessors.txt
-
Death Must Die/AutoTranslator/Translation/en/Text/_Substitutions.txt
-
Death Must Die/AutoTranslator/Translation/ru/Text/_AutoGeneratedTranslations.txt
-
Death Must Die/AutoTranslator/Translation/ru/Text/_Postprocessors.txt
-
Death Must Die/AutoTranslator/Translation/ru/Text/_Preprocessors.txt
-
Death Must Die/AutoTranslator/Translation/ru/Text/_Substitutions.txt
-
Death Must Die/ReiPatcher/Death Must Die.ini
-
Death Must Die/ReiPatcher/ExIni.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Death Must Die/ReiPatcher/Mono.Cecil.Inject.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Death Must Die/ReiPatcher/Mono.Cecil.Mdb.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Death Must Die/ReiPatcher/Mono.Cecil.Pdb.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Death Must Die/ReiPatcher/Mono.Cecil.Rocks.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Death Must Die/ReiPatcher/Mono.Cecil.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 271KB - Virtual size: 271KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Death Must Die/ReiPatcher/Patches/XUnity.AutoTranslator.Patcher.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Death Must Die/ReiPatcher/ReiPatcher.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Death Must Die/SetupReiPatcherAndAutoTranslator.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Death Must Die/arialuni_sdf_u2019
-
Death Must Die/Инструкция.txt