General

  • Target

    PWHM_v1.1.zip

  • Size

    28.2MB

  • Sample

    240203-nb8q5affe5

  • MD5

    d25e1bbbe52d246059374e5bc6ab31cf

  • SHA1

    862c64b78c9e38c040d23ad33158a5da61cb417b

  • SHA256

    91292107669ffd59d6be639d0e4d00bb63406e5f0d711bdf9b708651d517c14f

  • SHA512

    aac245a90bb95dee44d06705aa1d326679ae16fc3a1186ab6729626c71aa00e900e5887fc2cb1bb882694d0b9055bd725d87284818a5af7db50b5621fee79741

  • SSDEEP

    786432:CTPiglcw0OOP4fX5HwagVj3bGqbQRfXu1qqq4:CHlcjgfJH4VfGqb2f6qqB

Score
7/10

Malware Config

Targets

    • Target

      PWHM_v1.1.zip

    • Size

      28.2MB

    • MD5

      d25e1bbbe52d246059374e5bc6ab31cf

    • SHA1

      862c64b78c9e38c040d23ad33158a5da61cb417b

    • SHA256

      91292107669ffd59d6be639d0e4d00bb63406e5f0d711bdf9b708651d517c14f

    • SHA512

      aac245a90bb95dee44d06705aa1d326679ae16fc3a1186ab6729626c71aa00e900e5887fc2cb1bb882694d0b9055bd725d87284818a5af7db50b5621fee79741

    • SSDEEP

      786432:CTPiglcw0OOP4fX5HwagVj3bGqbQRfXu1qqq4:CHlcjgfJH4VfGqb2f6qqB

    Score
    1/10
    • Target

      PWHM_v1.1/DreamyCaramel.dll

    • Size

      10.4MB

    • MD5

      21e11b927a4b520f0913b297ac9dfac8

    • SHA1

      e67cdd5a7d7043a29105ce98e06c6b25847432c9

    • SHA256

      05494e308cb0ad3e0cfdfe9dca9b7d6690ef4769ae961a4b4f01114c06a2170e

    • SHA512

      1a0642dab941ad6adbad1f123bbc50d418ade0768443dacfa44533b1b8bcf594a45180998c1a21cddf4f508ec667fc268df84731a4ad27af721f2f61e88a6e62

    • SSDEEP

      196608:yGY4OxowsjaAWrDhs3XPyqMzSPcdNmfH1CEKbIT+bhzOmsQujF7IYucOBlr:tModjhWHC3XPyqPPGNXEz+hzOm3ujF7k

    Score
    1/10
    • Target

      PWHM_v1.1/PWHM.exe

    • Size

      12.7MB

    • MD5

      4a0a46830acc5f2a83875af74ac93cd0

    • SHA1

      4d93f706bccc2f268cbc5a23cec9388418df45e8

    • SHA256

      817b37e6d41c60d6161c3cd3ade72fdb2b31e10556d3a2fcbf44d760cc21ba0e

    • SHA512

      3758b4ef7e228aa0c06a4e29e158694b9430a40659e3e76d585a90a319579099cb890385dff1e8ef05f5398b2fb8430308fd22f44b2ef6461962907d5ed0e1ff

    • SSDEEP

      393216:22VyGM00XecG0yajCMegLiXTvdzyB0pKAOD:obX3IMmXbND4A

    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target

      PWHM_v1.1/Resources/Images/palworld.png

    • Size

      132KB

    • MD5

      272047b9ab38dd7d5a1ad5513436fcdf

    • SHA1

      1080fbcecee433b490ebcfe9220be0c25250556d

    • SHA256

      7baa59a0a8fda138bdb82461b8ad79f8baba892cb88a98b0167ca05a4a555b58

    • SHA512

      c9a9fa742567a6faca7b765c081df84b0855974be1e0458dcce003298492ce7a28d01b6a34f1cbcfd76f6dd2776b33443f08963b4f95ce7bf1b817f7984af68b

    • SSDEEP

      3072:yXFbhn2VG4tAtOzyg9mcnE2eX0+LXIQqtZoXmy6ZP4PNlzrYOR2A4VZlQ8/ujH:375zhXnEx0+L4ZtmmyUP4FlzrHRY48/M

    Score
    3/10
    • Target

      PWHM_v1.1/Resources/Videos/Background-2.mp4

    • Size

      2.4MB

    • MD5

      ac929832ee321bdff667acb2075f91ad

    • SHA1

      b9338dd50e6aa76d0c2eb1422a58bb9baf1112a1

    • SHA256

      6c6bcbeeb41ef4571f677bd93722a09f78651e4f2127f1ade23d1d92d3024ec4

    • SHA512

      6971accdbd3dca50f65136ca4a7dc996740b57a0764bb76815072e8b7a1774705b687a6ee852393fc2130e7108a4f2506f446c5c6c8d62ceed2563e4f93979e6

    • SSDEEP

      49152:Wi5ONM7bh3tGEJ0oeaJ7/6jTa/yAz3o0RXqcmHkUlcZeFoM6skFmQY59dPx:BIY7JJ07y7wHzHtISxXdPx

    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target

      PWHM_v1.1/Resources/Videos/Background-3.mp4

    • Size

      2.0MB

    • MD5

      edbbe67c7bbd7e3582204b917e237fe8

    • SHA1

      0a670ef41fb35b09f0eb0455cd74e0da0ff68261

    • SHA256

      f10e5cbf67a87d4be2ca3abb6aa0125bdfaf0ba5690d3abdaa743a7ea29c0564

    • SHA512

      c979ce876a72c381ee6eb23104c161fa627f24554482e54ef5e13b746922e77a6bb98be3d8f3684744939d26ee85f7a4c01dc0924d558a6f679d00f732e33773

    • SSDEEP

      49152:N7cFDP9/CheALTh0YOvL7sIwJ7u4DOkDOUYgtrSZTFq:N7UDP9/Chl4L77wJ6AdOet+ZTFq

    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target

      PWHM_v1.1/Resources/Videos/Background.mp4

    • Size

      1.1MB

    • MD5

      d7b9ef8a37c9393c532f6e582b7fe2c1

    • SHA1

      4df7ae822dd0e906786b9f7b61bb89af142909f6

    • SHA256

      928cdefb13d92280e9ba96523d1d056c9cf8e12205d0ec24253e8452029f40d8

    • SHA512

      5da00ed7bb2d32c7e6f7ecde63720f592516de913a4f30c87b09e17e0589a285763ab0f11b893dcd0db1a11c8f604fe5c0a93c73ad400a812488c0b7e55d983d

    • SSDEEP

      24576:5IpxHjaRslopQH6zyxx0o3FAX5FcOqL+DESnXK8BjhQKHPb:ipuslopI6yxxD3K7qyDESXFhQSb

    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks