General

  • Target

    LordsBot-Release.zip

  • Size

    116.5MB

  • Sample

    240128-e3kc6sbca7

  • MD5

    de4d5c35e196b53b20929f9fd7a1fd62

  • SHA1

    e0a1979220474e5d04b364be0c7b4afa99c73577

  • SHA256

    5d23bb56ae025619efa102acbaf07801ceb76f457ca12edd3cbc89151e4339d0

  • SHA512

    3c9614a6fba6e5a89acbabe71fa19041983e0b9477497953f903cf120347cf63e05bd72ce2fa9bc36abac2442a2ee9a303e62a48515dd1f743369acbc00eba3a

  • SSDEEP

    3145728:uaz+M25Gb0RfUEnBWPXtJrrw9kBCVtI4oKad4/KFz38NxX7wE:uaqTJCMutROkgVtIbbGUsXV

Malware Config

Targets

    • Target

      LordsBot-Release.zip

    • Size

      116.5MB

    • MD5

      de4d5c35e196b53b20929f9fd7a1fd62

    • SHA1

      e0a1979220474e5d04b364be0c7b4afa99c73577

    • SHA256

      5d23bb56ae025619efa102acbaf07801ceb76f457ca12edd3cbc89151e4339d0

    • SHA512

      3c9614a6fba6e5a89acbabe71fa19041983e0b9477497953f903cf120347cf63e05bd72ce2fa9bc36abac2442a2ee9a303e62a48515dd1f743369acbc00eba3a

    • SSDEEP

      3145728:uaz+M25Gb0RfUEnBWPXtJrrw9kBCVtI4oKad4/KFz38NxX7wE:uaqTJCMutROkgVtIbbGUsXV

    Score
    3/10
    • Target

      GameAssets/Subscriptioneffect.txt

    • Size

      400B

    • MD5

      ccf7fd591d0203beb65abf1f88754c22

    • SHA1

      8899000b38f729778bb9541dc4d05dc56bb55a19

    • SHA256

      f144be7983429cc56483f6f8a84f4b4d139d1eaf11c9c37da22ad66a2235edaa

    • SHA512

      5eecd9ad28b5615830dea6c1d90562fb43b8357ca908d329695bdbec03f54fa6a8a3e7630a4280511016268fa8f9d2345eddd181d5f950e5d15c3a412228774e

    Score
    1/10
    • Target

      GameAssets/TDCardCost.txt

    • Size

      64B

    • MD5

      9a3ad0740c1ff10bccbf8ed342739f56

    • SHA1

      cbf47326632b7ed311f703407a67073c57e33251

    • SHA256

      69f46e99a0786b3e8c3e3eaeb41c3acf4067ad90bd062554ac93ec9ff63a256a

    • SHA512

      ffcd118b6e4d0f4018aaa31ec75a4710cc9452f2616c81ec1763ca55d2e071b6a925f542612be41800deda0d2e984e1e9a7f9e116774a6079e35c9df3bda69ff

    Score
    1/10
    • Target

      GameAssets/TDCardEffect.txt

    • Size

      8KB

    • MD5

      c2cd01dbebb81b4bc829476769e400a7

    • SHA1

      0e53ee3aa9939a6530d1e3b3381c3a98d8715466

    • SHA256

      9758df42f256ad57a3aff5e6b7cf188dfcb72604e421be4cb995a177ae0c89fe

    • SHA512

      ff18e84a4b42204d80e20eb1ac629564a717420ff654d4102bb5d4a976b760563e15c2621740041b9443653b975c18598bb3797f32d007db60a3dc455554adb2

    • SSDEEP

      96:stVQq4oKc+1gOl/+zHJUmllJN3x4WLcbUwBf3nLuruOZd:stVOc+N+DJFPTh4WLIhO

    Score
    1/10
    • Target

      GameAssets/TDChapter.txt

    • Size

      1KB

    • MD5

      ff5860f79693525cc3ac2e69dddd8513

    • SHA1

      b5b2da19b78646a039fe5bf3e6962035212751d5

    • SHA256

      c23b469eb16674ba61ce7fb4c218636fb30642cd030fa5a92d2ad8e226ee8159

    • SHA512

      34d6e88e270e476026f30a1b789e4e8d229b718c29799d128287356f802c0de5f6e47ab4c8b78308968924d07a36a22296476fca5526aef07869688a1a72444d

    Score
    1/10
    • Target

      GameAssets/TDEnemy.txt

    • Size

      57KB

    • MD5

      169dd91a6df92718dfb43d6de3cf7bdb

    • SHA1

      942e6125c97e838ccbb198f56b343fff1b5a72a8

    • SHA256

      0a1f8ba7317e207f0c155a1cdd3d055ce0f5dfc1c81e54a29b4b69f7b11e6d1d

    • SHA512

      7d8ab5361885ffdec3abbf1ac8552e8f424d716766d354c7a522de1acb9d47c113211b0c317a06209bf9ff4a0c055ee1748cbfe0ca7079711efe22a2ba235f20

    • SSDEEP

      768:sI0gSQuOpZQ7nmb1+FtpQa55RGmgrp4outImSzaDwYpmFwqCDkzrfy:svgHqmbkX260+B5HmS3Eby

    Score
    1/10
    • Target

      GameAssets/TDHero.txt

    • Size

      73KB

    • MD5

      8a9079a59be51586ea097978a60f1d71

    • SHA1

      5745e8a8c50894b8a8ab98797c36dc304981a423

    • SHA256

      1290d64647c9ece84049c67c952f3b4cb827fa6d9d2e471c4bb221792f844bfc

    • SHA512

      53a01117333216a10dc758654375e13ac97ddb3aae0bded9655ffae60ffbf6249dc8cac4cfb9664fc6648ed330bb80479e1854b48239204a6ebfd16ff25e2529

    • SSDEEP

      1536:VgB6xhYSl4H+Vimjm7PIptjqvZoa1MO8RP+:VYihnCDMN0Z91MdR2

    Score
    1/10
    • Target

      GameAssets/TDHeroPlaylist.txt

    • Size

      140B

    • MD5

      ed96d750958b1c310cd5c43aa71e99a2

    • SHA1

      69d26f32cace04249d3f067401d656cc5585f9f8

    • SHA256

      37c4950ab5d00fb75d45960b5f168d19dc9f16a3cd903418d5014773b1d41ca7

    • SHA512

      5708799dd927b6696f6d0fb1b4f33bfeb2af75c1b8eaff58c3721d5b8fc56fce225b466bdf4acbbe3d513b2ef124a14ef9f1921e679d3cee7eb1a1e3465cb904

    Score
    1/10
    • Target

      GameAssets/TDStage.txt

    • Size

      19KB

    • MD5

      2b7a9f23999f758001f8925a7e02d09e

    • SHA1

      dcaa132fcdebf634e5610745bc4e68b3c9739ba0

    • SHA256

      20471e80c17ec9446541c42ed1562bdec7cddc1fea051d643588b072b79cfc24

    • SHA512

      cb6a0493dc180dcb2bd2a2b59e3ad1364c843413f98e71a8c9209870dcbe78b80baf2f121f38595a5d4016a44118e111b7b2794d683ff8009c70bb5175e56b95

    • SSDEEP

      384:vDnvdWnANsQZtqTUtW3ptJpgGto43yriv51S0PYF:vDnFWnApTqTcWzXgG243yH0

    Score
    1/10
    • Target

      GameAssets/Table.crc

    • Size

      18B

    • MD5

      d1f92fd77ec53c7ee69f781b69744775

    • SHA1

      9278cb06a12ce5aad55e158a8ac77dc717f14093

    • SHA256

      a6680ad7b7475410b00f999df2d312ef8ad25d205691ae39dd8b43b48dc9219b

    • SHA512

      a9d923700588b9ff1a901e11fe902f3bbb79991bc210c7e34876d994880004ffcfc79136ce65edf10bde2cdac6dc51586ed153ee2c639b2a02a8c2b3ce739a59

    Score
    3/10
    • Target

      GameAssets/Talent.txt

    • Size

      474B

    • MD5

      70127283dd1123e03d4b7eb1f8fb467c

    • SHA1

      ac5acc19fa193f7857ccbea37f0aa09ee4c5490c

    • SHA256

      29b16d3e9fe44fcd759120ac8673b2c95c97c8f4dfc14e9d17d20c44d345fcd8

    • SHA512

      ef17266bb9f2e9029ed26eec66f54bf1a52787b85d072e48ec0ea7e3893da4249d70e549c05aeae53c68b376294381cabb2d5d376bd23201172caf6f7657dd7f

    Score
    1/10
    • Target

      GameAssets/TalentLv.txt

    • Size

      12KB

    • MD5

      e7cdaefe5fc67d6531583beaacf60660

    • SHA1

      34af868d5ea5d92ff38fa11ced801141154e2966

    • SHA256

      7477b0bed097b787b3673d1f8090019529dff510c7b0aa9227a9d8b2b2116c3d

    • SHA512

      6d1ea19fea2ac8e749bd6266b2a8f4185e67c57ee3aa1bbca187841938cd692d3a24cf5fbed1680fae6671562c238a178a877ee5e11131d22dfd9a16ed9e5342

    • SSDEEP

      384:sVEjBygpLK3YMOjlzrkMeuAqd/Nbew+9fU4TjuNkK:sV2Byg1BMOhQE/NNYco2

    Score
    1/10
    • Target

      GameAssets/TalentTree.txt

    • Size

      264B

    • MD5

      ab8f47e224fa72efec873cec2d58917c

    • SHA1

      d9aa309e41b7a0957b75e0e6c0529bbf60e2bdaa

    • SHA256

      9ea85e472db367bda0dec7ca2216dcedb194d4302dfb1cc492de01a5fc54ff14

    • SHA512

      7d0fda2fd558943a8fc58441c5f4e371194e1873798c5be8278145402abc7da1ca2365d044c65563a8113c021e7ad2e2fa65822488a9a25371ac96d58f7e39b0

    Score
    1/10
    • Target

      GameAssets/Tech.txt

    • Size

      2KB

    • MD5

      ca3e09d131ea72cf7e3428ccd6f10859

    • SHA1

      eafebd5a673235696a91976febccd31bf09dc263

    • SHA256

      e3f1ec78483e12c5f5538855df33aa139872d4e8240944aa94c2c06183c515c1

    • SHA512

      16bd61936d092d3621fa17fa30d99e252d096916330ddc7862c5eb1b8a9eb906b46c2c4940ff2a44d8e2a824e3856a55b158337185ec9c2931d920fc71c90db9

    Score
    1/10
    • Target

      GameAssets/TechKind.txt

    • Size

      52B

    • MD5

      162c2a2c718a5d3fd8c8beeb1eebadc4

    • SHA1

      6d1f81f87c252d9218302593ec80eaa3028202f2

    • SHA256

      3803753a0ff50797377faf68c5aef9151f199c1a7203aa5812dd06d10d5ebd03

    • SHA512

      bf4e1f94992a250b3c90b8b204b834b26cb6ade8865b6e42483e8f6a84e332fd14a49bb8c54a41dcd2dc7acf7085ec53bf3002d1465e35a4afdb7ef393bb55e6

    Score
    1/10
    • Target

      GameAssets/TechKindSP.txt

    • Size

      412B

    • MD5

      b6753f99c1d7279a2003f1d7ce090396

    • SHA1

      ee2523a9a67e28b45c91c15158a75c61afdc7f90

    • SHA256

      e5adeab5722f55fee733f3ee27fed528e786da2c1b29667bde7bb5a06ed6c8b2

    • SHA512

      d40460d6f8b32876580a5094b9c35d1f6b33c0805e3c5a326a5a69d6c68e1a2c3765a92f35b0ab7617f4434c781d735f93c0be589d667f3a974ea31f6914cd7a

    Score
    1/10
    • Target

      GameAssets/TechKindSP2.txt

    • Size

      480B

    • MD5

      fbbf0cd39a5f5a3ac7fb5fbed2258eaf

    • SHA1

      45c76964f776e54c94e808945d141b8a4fe54f9b

    • SHA256

      c4005a9a96c005206e2fb964e65370283bc27f1f18384e89f2c0c31af42dcb6a

    • SHA512

      3c0febace402bf5ad4127d6132d923498df34af6ef74feb46a149c819fa2d16b4e6ce2cbb24849f5854dbc1f1dfb946536aed10774b48a7644ede7bd950dabb7

    Score
    1/10
    • Target

      GameAssets/TechLv.txt

    • Size

      152KB

    • MD5

      b15933f03915343b101a93c210f46e95

    • SHA1

      6fcf5d726bc0aea3c20dd280ea76c313db9a4b17

    • SHA256

      4945389ead6ecd1d742839d836bb2c523ea373574380b6d7c85b129a56eed1df

    • SHA512

      31e1aa0c0b65b431ea7023951ca59c87c964d3aa8edc18859faf10fe9198a77b55db9ff72dd3d253cb13f09f11302a80b093379a893c3cb7d2f1aa6854214d93

    • SSDEEP

      3072:PGF1y2/Kmk+P2kAnbhaKiPjJC9BI/fvYDeQaWLl:OnyV1+YhapjJcBIPYDeQam

    Score
    1/10
    • Target

      GameAssets/TechLvSP.txt

    • Size

      34KB

    • MD5

      df0780bf0b167b364b4596f251e222c7

    • SHA1

      ddd10063df917a2ddc534a99ce65d6400e55224e

    • SHA256

      e50affdb8e845d9c3dcc1c52ef105f35e72314d7e2c3269cdfe3ed25d472ab77

    • SHA512

      7ba7cf7ef53f4337346536d77525e7e41ad1712d6b6459b50f6d8fc3285472f1e10e20bf2f178307d266b99994b2db04409b6db7d661fe6b490f7dd7138c02a3

    • SSDEEP

      384:fc8N2zlb8TKM+tOSK3JxHVtln+t2fg/bZYMiI9CI0k9Fn0c:fCcKM+SJxHVtln+tz/bZY1I9CI0k9x0

    Score
    1/10
    • Target

      GameAssets/TechLvSP2.txt

    • Size

      96KB

    • MD5

      b7d9587154be5b7a4f19edd3ccc149ae

    • SHA1

      b3f0a5b527a3cc8b99bea8ed98e44f7171eef449

    • SHA256

      c5acb33787fb5af13bf871e2f961cafa9c0575609acdeca2531d762ea847dec7

    • SHA512

      792c842efa41eb38a4eb1906cff2068e9f2c3c99a519518626d263ac4ea27dea1e5e154330333d8756a1a27b46ba85c5839b2d3380fb735d75a688dfa687f790

    • SSDEEP

      768:AiqfXZAJSnFifqww8rF2K0jrXXkCOm5/cvUOrqu3/tzxqCptotHd:QUS8fmisK0mm5/i5rqGqCpIHd

    Score
    1/10
    • Target

      GameAssets/TechRecommendation.txt

    • Size

      1KB

    • MD5

      4388ce52ca814a4c9b10e38c6eb41651

    • SHA1

      8ad178639a50c06bdf7f02a4369f2d238d98a56d

    • SHA256

      7ba96494c102560e3d9123b7c2967b190b2e7f83f0574076622a256ced090892

    • SHA512

      4fb8e3f658b0eb8655406581fb669eaf9346c9a770e3fa1c09b9ab65ad7dec472ad948c96563de91eb98e8fdbd3dd1f576a6f34e51e92619382ebb73f2a6467c

    Score
    1/10
    • Target

      GameAssets/TechSP.txt

    • Size

      9KB

    • MD5

      eea25cd543ef9cd3b313155666d20800

    • SHA1

      1615b1c353ddaddfd0836868458f17f80d5dbd03

    • SHA256

      58b5294d855950e0be58de462528f7fdac30c015f211f96b7a471c1915318d14

    • SHA512

      4048907a8a4ab12b7eab7fe32cbd0e18a9a6866a9b9416d3e4255d323751d37256ea3a10989d685d84a332d1b896982b098f0319749214b7d2615b703e89d07d

    • SSDEEP

      48:Bj8LFjPeiRHqC6TzGm7nYUtqrOHHkUKWTYXD5GuQzm55oVOg+/Rdqms3L5L:B4J1KHTzGm7n9eOkUH88uA1QRY3tL

    Score
    1/10
    • Target

      GameAssets/TechTree.txt

    • Size

      1KB

    • MD5

      29b8f0f5509a27b053b626e9eb6e8e28

    • SHA1

      3b35602fb742d57f91b16e0660c3c6ee0efe9e1e

    • SHA256

      b1e3780828467f277276363d52457ad4bc170a69d90c5bb6508c32956dbf45b6

    • SHA512

      af7969d838ecd7583cbdc256c79690c9c261c272fd3b01024da0456f62a3bd654f1b62aa1f1536762c3a6ca0ce83d027143763b3f13a66da7d4c789be794d9f8

    Score
    1/10
    • Target

      GameAssets/TechTreeSP.txt

    • Size

      3KB

    • MD5

      b703469d8919fd1a1d9ed19eaf5c6d33

    • SHA1

      8c55cc94182523079c7698beb6304ecec16f4ec8

    • SHA256

      fc77b9b43feb02d8784d0af4a0e183d9bd255edda1a6db8bc3cdf655389698ce

    • SHA512

      f02d642f20c3d4d1ee28a43bfc7a61f4ebddd535df99bca617af81450a645486faec763a5bea148d9fd0786ebdc22b61a8ed8c0aea5306540f1eaf0aec59ce1b

    Score
    1/10
    • Target

      GameAssets/TileMapEx_006.txt

    • Size

      256KB

    • MD5

      e9ec53d66b7fb241e635fcc858857b64

    • SHA1

      7f39c15294b546b393f1811470945186e8d5968b

    • SHA256

      321be785efd34eaa53923a619c2534d1263bb20a8687d7fa49ad3909f55eef0d

    • SHA512

      5ec3a00b5f8abd5db2c7a6cf61720b112a156be6741949a342af57dd71c04db95c0c402cd63b2d4659c2bc7ca8db2835563d91d35a9a0a66d547edaab7db78a5

    • SSDEEP

      192:horItWcd4RkYh6am5TpXbFDDToPhm08xlZT2/pAXHk8mKJvfEXf1Pk5XOy1dZpiF:hHldecdRNJ089M91qRed+6w

    Score
    1/10
    • Target

      GameAssets/TileMapEx_101.txt

    • Size

      256KB

    • MD5

      c10da7451794858dcb69b2d49779e73c

    • SHA1

      28a1281ca1ec44e5a24da710da024b795482b9b6

    • SHA256

      cd2130a93f76c499fdff0b8e0dc7c9825313c553bdff69402f2f75d6b545b178

    • SHA512

      17d3a329f8caea17d13a2e42c845498975388dfc1739378009671040c5bc920d66e56fbe470ea20e986568128b3e8d8a0ad21b0c84d95154c3cfc746da102736

    • SSDEEP

      48:khdHU0l+rXD/4OgtdtpgjrJeq2wXgC2sk:2UXrXkbdtWrJYww

    Score
    1/10
    • Target

      InstallNet6.bat

    • Size

      74B

    • MD5

      f57b862f33a138ee0775d38ab1a7e669

    • SHA1

      58104a9b6fb269bfbe990680f6fb132c69e8f236

    • SHA256

      76db63b2394628ebc83f433301800cff921f3453e273a34a93f720304a1e1b78

    • SHA512

      9375f0d51702e35575d27048623b2a8c0c8cc4b882296cba61fbdd60c4a5edf7126daf2264bcabb398a5eaa63341a8ee15d127b76fe96b6853dea5d875d9866f

    Score
    7/10
    • Loads dropped DLL

    • Target

      Lords Monitor.exe

    • Size

      417KB

    • MD5

      4a114995273b5a478cb5d1f4bfedb12d

    • SHA1

      d859974e863c6d8d325b24424790dd720051044f

    • SHA256

      80e57b1c5e90505dfab81291a9db92331649ecb8bb13dd026e70ac164711335e

    • SHA512

      5378f14e0132ba08857e29a1fb72d0007fd1e569e2157737f1ff42fe8e1ad6b8c752d40b9fbebd7adf4878acdf052931b4363b81d44882f401b5cc08967b6e69

    • SSDEEP

      3072:IVFe9Lh3pudG/GUnpaIvVm1fMF3pudG/GUnpaIvVm1fM+3pudG/GUnpKI9Vm1fMx:IMLh51ZQiF51ZQi+51LQiJT

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Target

      LordsMobileBot.exe

    • Size

      200.3MB

    • MD5

      800f8861421f562b2ec25ef99ea53d7c

    • SHA1

      c920b98212f27c4735dbeb1279791b490775a5d9

    • SHA256

      b380bc2b932a5ed4f1899cbdfae2e04e33ad401df9109ae45bbb95192316d35d

    • SHA512

      a93f6d78bb5afd127de46217cfc9a92dd2c6c0997ca4baf97cba7d4c4071c8a9069969c2b9c4ad69fa042864bf6343db6eb2a1096205abe3b05c2a3070a6467f

    • SSDEEP

      6291456:sk1WAOfraPInVSWAOfraPkWAOfraPZYWAOfraP5WAOfraPeWAOfraPgP:VdP

    Score
    7/10
    • Loads dropped DLL

    • Target

      MSVCP120.dll

    • Size

      644KB

    • MD5

      72664fbad17678faecae97481e8e783c

    • SHA1

      8edb9feb6d3a737a88dfd3213965d1ea4f64c3f6

    • SHA256

      2285fc6fc936c38d124b6ea5585b81ce83de235b460cb27383a15003eb5ca116

    • SHA512

      2cb7f2fcf69a28f0509fbea632859d82b9ff5d0ec318cf500eddc1f02ef887cfdbee2162eb321ca8f3b0f374930ecf69c97653b16d8dddedd73abe0993b5466e

    • SSDEEP

      12288:82fus43uu43Ry4GHlT4xH2K+M+/i+WSpY+7YOzCaK9A3gS2EKZm+GWodEEwn6:JuJzCaK9AB2EKZm+GWodEEwn6

    Score
    1/10
    • Target

      MSVCR120.dll

    • Size

      940KB

    • MD5

      448d1056a6379e6f797bca13a7bc377b

    • SHA1

      d36fe3ab178c017b23faf7c4dd18646994c15f90

    • SHA256

      b3e24f5d4ae25b0a00db55e2dbfc835b12a329c52bae17321d6f0b9257c18a4e

    • SHA512

      ed86c2ec550b2c0e259b8c0db6c71090f6de4f72887b5d6584f8552dac2accc5bc2d1df85b368e91e99439f54168137007556a5898dd55528e2442bf2acff77d

    • SSDEEP

      24576:ZkZ+EUPoH5KTcAxt/qvRQdxQxO61kCS9mmWymzVPv:ZkMAlM8ixQI5C6wN

    Score
    1/10
    • Target

      Updater.exe

    • Size

      291KB

    • MD5

      96bc22e267319e0714e8bb245d57bff6

    • SHA1

      642adbbbfec80f981a989f56187242b6729b2b1b

    • SHA256

      5bd819f39156fcd389d187f627b745d12eefc1fc8029c09f663d5ac77d0a1737

    • SHA512

      7afcae303c2079d809d7a374aed17dcc1717c1d4fffa50627d1d599481ec6f1442fc3f6aa988be96f972ccf47f3ebb39de3ec38629d26eda3062f56f28af0709

    • SSDEEP

      3072:Suxespq9bPB/3pudG/GUnpaIvVm1fMk3pudG/GUnpMIrVm1fMByfxeT:jx89bp/51ZQik51LQi9

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

ratasyncratducktail
Score
10/10

behavioral1

discovery
Score
3/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
3/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

discovery
Score
7/10

behavioral28

discovery
Score
7/10

behavioral29

discovery
Score
7/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

discovery
Score
3/10