General

  • Target
    LordsBot-Release.zip
  • Size 116.5MB
  • Sample240128-e3kc6sbca7
  • SHA256 5d23bb56ae025619efa102acbaf07801ceb76f457ca12edd3cbc89151e4339d0
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      LordsBot-Release.zip
    • Size 116.5MB
    • SHA256 5d23bb56ae025619efa102acbaf07801ceb76f457ca12edd3cbc89151e4339d0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      GameAssets/Subscriptioneffect.txt
    • Size 400B
    • SHA256 f144be7983429cc56483f6f8a84f4b4d139d1eaf11c9c37da22ad66a2235edaa
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      GameAssets/TDCardCost.txt
    • Size 64B
    • SHA256 69f46e99a0786b3e8c3e3eaeb41c3acf4067ad90bd062554ac93ec9ff63a256a
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      GameAssets/TDCardEffect.txt
    • Size 8KB
    • SHA256 9758df42f256ad57a3aff5e6b7cf188dfcb72604e421be4cb995a177ae0c89fe
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      GameAssets/TDChapter.txt
    • Size 1KB
    • SHA256 c23b469eb16674ba61ce7fb4c218636fb30642cd030fa5a92d2ad8e226ee8159
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      GameAssets/TDEnemy.txt
    • Size 57KB
    • SHA256 0a1f8ba7317e207f0c155a1cdd3d055ce0f5dfc1c81e54a29b4b69f7b11e6d1d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      GameAssets/TDHero.txt
    • Size 73KB
    • SHA256 1290d64647c9ece84049c67c952f3b4cb827fa6d9d2e471c4bb221792f844bfc
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      GameAssets/TDHeroPlaylist.txt
    • Size 140B
    • SHA256 37c4950ab5d00fb75d45960b5f168d19dc9f16a3cd903418d5014773b1d41ca7
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      GameAssets/TDStage.txt
    • Size 19KB
    • SHA256 20471e80c17ec9446541c42ed1562bdec7cddc1fea051d643588b072b79cfc24
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      GameAssets/Table.crc
    • Size 18B
    • SHA256 a6680ad7b7475410b00f999df2d312ef8ad25d205691ae39dd8b43b48dc9219b
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      GameAssets/Talent.txt
    • Size 474B
    • SHA256 29b16d3e9fe44fcd759120ac8673b2c95c97c8f4dfc14e9d17d20c44d345fcd8
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      GameAssets/TalentLv.txt
    • Size 12KB
    • SHA256 7477b0bed097b787b3673d1f8090019529dff510c7b0aa9227a9d8b2b2116c3d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      GameAssets/TalentTree.txt
    • Size 264B
    • SHA256 9ea85e472db367bda0dec7ca2216dcedb194d4302dfb1cc492de01a5fc54ff14
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      GameAssets/Tech.txt
    • Size 2KB
    • SHA256 e3f1ec78483e12c5f5538855df33aa139872d4e8240944aa94c2c06183c515c1
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      GameAssets/TechKind.txt
    • Size 52B
    • SHA256 3803753a0ff50797377faf68c5aef9151f199c1a7203aa5812dd06d10d5ebd03
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      GameAssets/TechKindSP.txt
    • Size 412B
    • SHA256 e5adeab5722f55fee733f3ee27fed528e786da2c1b29667bde7bb5a06ed6c8b2
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      GameAssets/TechKindSP2.txt
    • Size 480B
    • SHA256 c4005a9a96c005206e2fb964e65370283bc27f1f18384e89f2c0c31af42dcb6a
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      GameAssets/TechLv.txt
    • Size 152KB
    • SHA256 4945389ead6ecd1d742839d836bb2c523ea373574380b6d7c85b129a56eed1df
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      GameAssets/TechLvSP.txt
    • Size 34KB
    • SHA256 e50affdb8e845d9c3dcc1c52ef105f35e72314d7e2c3269cdfe3ed25d472ab77
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      GameAssets/TechLvSP2.txt
    • Size 96KB
    • SHA256 c5acb33787fb5af13bf871e2f961cafa9c0575609acdeca2531d762ea847dec7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      GameAssets/TechRecommendation.txt
    • Size 1KB
    • SHA256 7ba96494c102560e3d9123b7c2967b190b2e7f83f0574076622a256ced090892
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      GameAssets/TechSP.txt
    • Size 9KB
    • SHA256 58b5294d855950e0be58de462528f7fdac30c015f211f96b7a471c1915318d14
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      GameAssets/TechTree.txt
    • Size 1KB
    • SHA256 b1e3780828467f277276363d52457ad4bc170a69d90c5bb6508c32956dbf45b6
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      GameAssets/TechTreeSP.txt
    • Size 3KB
    • SHA256 fc77b9b43feb02d8784d0af4a0e183d9bd255edda1a6db8bc3cdf655389698ce
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      GameAssets/TileMapEx_006.txt
    • Size 256KB
    • SHA256 321be785efd34eaa53923a619c2534d1263bb20a8687d7fa49ad3909f55eef0d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      GameAssets/TileMapEx_101.txt
    • Size 256KB
    • SHA256 cd2130a93f76c499fdff0b8e0dc7c9825313c553bdff69402f2f75d6b545b178
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      InstallNet6.bat
    • Size 74B
    • SHA256 76db63b2394628ebc83f433301800cff921f3453e273a34a93f720304a1e1b78
    • MD5 SHA1 SHA512
    Score
    7/10
    • Loads dropped DLL

    • Target
      Lords Monitor.exe
    • Size 417KB
    • SHA256 80e57b1c5e90505dfab81291a9db92331649ecb8bb13dd026e70ac164711335e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Target
      LordsMobileBot.exe
    • Size 200.3MB
    • SHA256 b380bc2b932a5ed4f1899cbdfae2e04e33ad401df9109ae45bbb95192316d35d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    • Loads dropped DLL

    • Target
      MSVCP120.dll
    • Size 644KB
    • SHA256 2285fc6fc936c38d124b6ea5585b81ce83de235b460cb27383a15003eb5ca116
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      MSVCR120.dll
    • Size 940KB
    • SHA256 b3e24f5d4ae25b0a00db55e2dbfc835b12a329c52bae17321d6f0b9257c18a4e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Updater.exe
    • Size 291KB
    • SHA256 5bd819f39156fcd389d187f627b745d12eefc1fc8029c09f663d5ac77d0a1737
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

ratasyncratducktail
Score
10/10

behavioral1

discovery
Score
3/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
3/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

discovery
Score
7/10

behavioral28

discovery
Score
7/10

behavioral29

discovery
Score
7/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

discovery
Score
3/10