Overview

overview

3

Static

static

3

BOTW.multi...NG.pdf

windows7-x64

1

BOTW.multi...NG.pdf

windows10-2004-x64

1

BOTW.multi...NG.pdf

windows7-x64

1

BOTW.multi...NG.pdf

windows10-2004-x64

1

patches/rules.ps1

windows7-x64

1

patches/rules.ps1

windows10-2004-x64

1

BOTW.multi...er.exe

windows7-x64

1

BOTW.multi...er.exe

windows10-2004-x64

1

BOTW.multi...er.exe

windows7-x64

1

BOTW.multi...er.exe

windows10-2004-x64

1

BOTW.multi...er.exe

windows7-x64

1

BOTW.multi...er.exe

windows10-2004-x64

1

BOTW.multi...er.exe

windows7-x64

1

BOTW.multi...er.exe

windows10-2004-x64

1

BOTW.multi...er.exe

windows7-x64

1

BOTW.multi...er.exe

windows10-2004-x64

1

BOTW.multi...er.dll

windows7-x64

1

BOTW.multi...er.dll

windows10-2004-x64

1

BOTW.multi...ni.dll

windows7-x64

1

BOTW.multi...ni.dll

windows10-2004-x64

1

BOTW.multi...on.dll

windows7-x64

1

BOTW.multi...on.dll

windows10-2004-x64

1

BOTW.multi...on.dll

windows7-x64

1

BOTW.multi...on.dll

windows10-2004-x64

1

BOTW.multi...LL.dll

windows7-x64

1

BOTW.multi...LL.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    BOTW.multiplayer 1.0.4 files + setup tutorial.zip

  • Size

    96.9MB

  • Sample

    231216-qc8tmabffn

  • MD5

    da5a9055012cbd446771ef0331ff340d

  • SHA1

    e707e9d3940617ca9008ef17758661d9edb9599b

  • SHA256

    1a8d6a71efd2c31f649d91dfd98e7f9d470a8d6db52322befa4a8771a806c1ed

  • SHA512

    534eacd1cf393c3e2b76891adc27466538fe73986edf8d03ef260100199d12e64489e26dfa6aeb5a4c7e63592cd8b097a10d6424c4ca929eb936e2b115bb90b0

  • SSDEEP

    3145728:uzXYi0ktscBYug3+opnVdnJ3mQE1mpsLVmp:ujzHsU2zE1ksJ2

Score
3/10
linkpdf

Malware Config

Targets

    • Target

      BOTW.multiplayer 1.0.4 files + setup tutorial/BOTW MULTIPLAYER SETUP JOINING.pdf

    • Size

      5.5MB

    • MD5

      93cdf1accf3d992a36bac52819c3b3a0

    • SHA1

      a1e1e5513f936fbdcd20d1fc018b2ff86471b282

    • SHA256

      7c762c0083881f353de979e2f5bf3bd947f6f9c1601d5085efc2561458e7549b

    • SHA512

      638409904bcfdfeff033ee31bdfe0b8438f4ed1a05882408869d9342f6f09422e67b169af426ba1cc435958eb694318fb8d4e7b61746c200d0ffe75c1f8c3946

    • SSDEEP

      98304:pZ6ZYFhZ+2BkRc903Y2m8kormBuEX7dn+W4rZMY8W+nh7lgrAsJ7ZzGn2TYwD1HC:pQkhZ+pH1m87yjX7d+pD8rlypzGo1Hev

    Score
    1/10
    behavioral1behavioral2

    • Target

      BOTW.multiplayer 1.0.4 files + setup tutorial/BOTW_MULTIPLAYER_SETUP_HOSTING.pdf

    • Size

      7.1MB

    • MD5

      fd5520a888f8d5761064efc3bb37ca3f

    • SHA1

      2710de09799788d14036b759a83f6e3b0c3def92

    • SHA256

      ccc36601e7db8490d94da533e85b45c01b6c8d35d52fc283503286d5eaccad0c

    • SHA512

      c4853a857c946156bd6a6bb1b064720af9aaafce1c43eac270798ea004bdf1a953117bfbf9a21babb3f12b40fc226a997385fb22f2c0fb6f94532131fc543a23

    • SSDEEP

      98304:adOR8G/1VjiXSqojl/BzTVsphxaTZAumUrhl2DsuuzRp36sFFtL4rwcgGWLW9AKV:uG/cqwvxa+umUpNzRF6UtEkdtyT

    Score
    1/10
    behavioral3behavioral4

    • Target

      patches/rules.txt

    • Size

      262B

    • MD5

      063477f72f94eacb2a9c8dde2887c317

    • SHA1

      9db5379a06ad63c8297d943450d530a5d8e2a3dc

    • SHA256

      31f0019e1e4ee2ecc72d5df77b51fc1941ebe928bfa8b223f109b812e0ba0d9b

    • SHA512

      945e67bf5b24702e502274f8106bcfa267879cf4de46de27f1386f6657ab7ead9a7a4ba4bfabe7d6198a0211e188008465eaf90d5ec0cc6b6d8b7e7ba6a43b61

    Score
    1/10
    behavioral5behavioral6

    • Target

      BOTW.multiplayer 1.0.4 files + setup tutorial/Breath of the Wild Multiplayer files/BOTWM_Autoupdater.exe

    • Size

      1.3MB

    • MD5

      b197d70e47b180337344868274e5ea7f

    • SHA1

      7400b7540ce9099a9250caac0a4b65e6c312d037

    • SHA256

      c322adffa8eea584d525f6a5e942e09d49902fd4ce0e78d149aa407b90e15103

    • SHA512

      2a4740c6fd58190054900777c7e39f62935a66b6b1da70721a8aa78fd32fe6fa9284bc6c8c8065fc57b9ca9250bb15f0fa76940983e578741fb7b3bbc121a2e2

    • SSDEEP

      24576:Us0Y0pV0Y0psramTbM+YgYQfrG9TNmoBzj3z1D:UtKsram9wTkoBzj9

    Score
    1/10
    behavioral7behavioral8

    • Target

      BOTW.multiplayer 1.0.4 files + setup tutorial/Breath of the Wild Multiplayer files/Breath of the Wild Multiplayer.dll

    • Size

      7.6MB

    • MD5

      ddebb9de06fcc208276f17526d3c6152

    • SHA1

      82753f23c3762749ef6b740360a964ee96e19930

    • SHA256

      68093152daf7fd3fe724d08540191b90e9f3a29ecd04d4406242d4b85bdce8fe

    • SHA512

      cb98476c04a7eb582be04fea47082e83322553d4210b781531c77e819292fff5de1aec229d2265ce821c9f8755594b8d92bf00e1c97bafadca8a6cc03bdff433

    • SSDEEP

      196608:wvI2OvbFY+mknijdvI0xU4QBKnTbZ5d9IyKSx:U8bFYzS0OTKTN5duyjx

    Score
    1/10
    behavioral10behavioral9

    • Target

      BOTW.multiplayer 1.0.4 files + setup tutorial/Breath of the Wild Multiplayer files/Breath of the Wild Multiplayer.exe

    • Size

      351KB

    • MD5

      a90ff8884c16313f47f51489a3d395e2

    • SHA1

      0992dba63a7fe70838f4132b85f272e8ccc2ddfc

    • SHA256

      520826026f149d2216ee37915c176dec0acf3076579157ece6c1e6f3a156e21e

    • SHA512

      6b5971f3c73dcd464db9946e80b9eb0542c3cf3be056c9bdd9d51a57cb12c9772a4614d86287ea3365d200e12031059ee1879503f2dcad23d4625ff844a687d8

    • SSDEEP

      3072:+8vbzyQ6Y1YXrbNK+3FNxacPEMk6bRQAaTWO9znq9I+q9:+szAXNK+3FVfRQtTWO93

    Score
    1/10
    behavioral11behavioral12

    • Target

      BOTW.multiplayer 1.0.4 files + setup tutorial/Breath of the Wild Multiplayer files/DedicatedServer/BOTW.DedicatedServer.dll

    • Size

      462KB

    • MD5

      e733ef8af0751c91dff2cc54a55d29c4

    • SHA1

      ce3d464f06604664618aac22b9eb6558200b0d73

    • SHA256

      a6e1a541d65a16d3d7345ff345e3d8ca1700e4f252b97e3424393d5e2b39fd2b

    • SHA512

      859cda76f0e7e34f0828913f307f4e75da97fb8a67c09df3a520a69ee8f7c1e612ab7063207e00cec99e4b40c57fb0d0f4627f38fdaefbe0771db8d71ccc2d15

    • SSDEEP

      6144:0l7UcNsM+RA6t8nyN5VGuOk5KAKWEvOZYwZses7Hp9HRVvs0p:0tFnyN5VGuOk5bvjYwZs59HDs0p

    Score
    1/10
    behavioral13behavioral14

    • Target

      BOTW.multiplayer 1.0.4 files + setup tutorial/Breath of the Wild Multiplayer files/DedicatedServer/BOTW.DedicatedServer.exe

    • Size

      398KB

    • MD5

      d01616afda92b74a28f609ed70f4d572

    • SHA1

      546c7c1467a6b962ade50e5cc0a2479603a93143

    • SHA256

      353b59b02562df736d4b2fbf2e085564d28125db072ed6d1649669cb10763c6b

    • SHA512

      024afc22dd9bac84399e5c907c9ddc53bb1d12be6a6a64cfbd7711218a6bf57a8e5d2591664ef19a7cabaf03784307d749f17f775415aeed0c175ac375058405

    • SSDEEP

      3072:E8vbzyQ6Y1YXrbNK+3FNxacPEMk6bRQAETW59jLRVvs0pOf:EszAXNK+3FVfRQHTW59HRVvs0p

    Score
    1/10
    behavioral15behavioral16

    • Target

      BOTW.multiplayer 1.0.4 files + setup tutorial/Breath of the Wild Multiplayer files/DedicatedServer/BOTWM.Server.dll

    • Size

      227KB

    • MD5

      1e77f49386b7c167d3c44dc5aac3a56b

    • SHA1

      fffd8248b9970bd3be8cd62d280a023f385b71ef

    • SHA256

      92fabc28d69322bd490dd20f7c8ebf36d8261cde07d28d927ba01e33ba03215a

    • SHA512

      5b84a5a0a4c64d5d39c0e7588e28f7f21fcdfbce005df3c3d57fb2743fea70840a26094c57d884b39ed6fc967213d21bee1e0fc9d2b3208744fc283da8691b0a

    • SSDEEP

      1536:j+fRWN8cp8QXalQAr0xgVC9xAw0EUGMzir/K7:6pWNQr0xgVZw0EUGMGr/u

    Score
    1/10
    behavioral17behavioral18

    • Target

      BOTW.multiplayer 1.0.4 files + setup tutorial/Breath of the Wild Multiplayer files/DedicatedServer/MadMilkman.Ini.dll

    • Size

      40KB

    • MD5

      eddbca3b558a757851d05c4308bb621a

    • SHA1

      e489be69180ea6dc056c61cf565201f74aa15855

    • SHA256

      d8dba50a759fa04b24e9cf307a547ca2995b09ecc12fb45a1f563fafe81beba2

    • SHA512

      10fc87fde98cd38a23cd14275f327307c99a692ada4820f3b1d2bbe5543095ae3016e9f59dc21e4405f06e6f7c27b9ef54f5b24e0b2fd6694bdaf2b8f9ab5abd

    • SSDEEP

      768:DbMyQAEss+DiMWOJA4QKYGhWosjv5OQxYuyL8mCrafh:DbHEsXpWOCpKYdjxxYv8mCrap

    Score
    1/10
    behavioral19behavioral20

    • Target

      BOTW.multiplayer 1.0.4 files + setup tutorial/Breath of the Wild Multiplayer files/DedicatedServer/Newtonsoft.Json.dll

    • Size

      679KB

    • MD5

      916d32b899f1bc23b209648d007b99fd

    • SHA1

      e3673d05d46f29e68241d4536bddf18cdd0a913d

    • SHA256

      72cf291d4bab0edd08a9b07c6173e1e7ad1abb7ab727fd7044bf6305d7515661

    • SHA512

      60bd2693daa42637f8ae6d6460c3013c87f46f28e9b0dbf9d7f6764703b904a7c8c22e30b4ba13f1f23f6cbee7d9640ee3821c48110e67440f237c2bb2ee5eb6

    • SSDEEP

      12288:1eos/POdGV5jfWrV/9Yeh9eRcyLfLYtT5mWxTZ/B7jW5JMtRRpKzQk:10/POdGV5jfW5VnhFyvOB7jW5JMty

    Score
    1/10
    behavioral21behavioral22

    • Target

      BOTW.multiplayer 1.0.4 files + setup tutorial/Breath of the Wild Multiplayer files/Newtonsoft.Json.dll

    • Size

      695KB

    • MD5

      86a83a63f12b55fd3718cfbfb577d7dc

    • SHA1

      3df82ebba50086de83aee27c63255e80f2d73f3b

    • SHA256

      4816c4276f575e4d85b80633a0df2eadf29496fe00bdc33cd7843e61373bde0e

    • SHA512

      ae0eac0477e4b6375b5266297e6503c9206e6327ecb476d3f54022daef92c015b6f33bc9a5423533d869f200ac71793aba14f197bd358a0fdd3129e2c00bec10

    • SSDEEP

      12288:zQQOnmTbM+Csz4nn5lgYQfIrUG9rHNmoBzj3z1+tVqDMm:zramTbM+YgYQfrG9TNmoBzj3z1B

    Score
    1/10
    behavioral23behavioral24

    • Target

      BOTW.multiplayer 1.0.4 files + setup tutorial/Breath of the Wild Multiplayer files/Resources/InjectDLL.dll

    • Size

      338KB

    • MD5

      6e4af34926739b6b566587f96a95a1d3

    • SHA1

      bedb7d2b75c1325ae44a1545a9d8bf2468af11da

    • SHA256

      65f4c5a981f192c6b7a3eb930e9076f24ac1a42d6cc6a9576de89ccb56af81cc

    • SHA512

      9f3c65daf547d031994698a98845c38e9990a524854f26f69967a2078dd1672256ab2a9343e5a6467ffa1e72eaee59420e9692a9346924ccf93b1710b4d8cbb8

    • SSDEEP

      6144:GGw+3bGqJwQtQyhHt9wF8puUBf4lM79LKr1DEhhDK4xZ2GQxEEnjDjJ075:GlHe0euUN+DqN72GQxbj3M

    Score
    1/10
    behavioral25behavioral26

MITRE ATT&CK Enterprise v15

Tasks