289c97a9b889179b4a13e6afb06626087ea18595c68f3541a8ec344da3e65382

Sharing

Copy URL Twitter E-mail

General

Target

skysim-aircraft-md11-v3-1-0.rar
Size

710.5MB
Sample

240219-zsme1adf65
MD5

dcdae53b72dff8eb11b2760dcce16140
SHA1

69c20ee59497d1245f3b83fbcb93cd18ab3b191a
SHA256

289c97a9b889179b4a13e6afb06626087ea18595c68f3541a8ec344da3e65382
SHA512

8b0f7b52e74c7cf71396f6261c6ab770887f66ea0411d5beca4796fdddf122a7e72f5489d5c011189f334beccf47ea68ab860df179db305f9a3fee392345574f
SSDEEP

12582912:vyWWSy3oTPcdGvm3+lhBwzci68GIR4ClW/SBKaFUF4e/J074L:mZ3oTUdQm6XwQ7d47Fvk

Score

7^/10

link pdf

Malware Config

Targets

- Target
  
  skysim-aircraft-md11-v3-1-0.rar
- Size
  
  710.5MB
- MD5
  
  dcdae53b72dff8eb11b2760dcce16140
- SHA1
  
  69c20ee59497d1245f3b83fbcb93cd18ab3b191a
- SHA256
  
  289c97a9b889179b4a13e6afb06626087ea18595c68f3541a8ec344da3e65382
- SHA512
  
  8b0f7b52e74c7cf71396f6261c6ab770887f66ea0411d5beca4796fdddf122a7e72f5489d5c011189f334beccf47ea68ab860df179db305f9a3fee392345574f
- SSDEEP
  
  12582912:vyWWSy3oTPcdGvm3+lhBwzci68GIR4ClW/SBKaFUF4e/J074L:mZ3oTUdQm6XwQ7d47Fvk
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  
  skysim-aircraft-md11/Documents/SkySim_MD11_Checklist.pdf
- Size
  
  266KB
- MD5
  
  9ee916e50db5c647fe1756adeb3f3ffd
- SHA1
  
  41ae0c720ef959559a8763ddca4cb6b35c24eae2
- SHA256
  
  d3f3f42c54a4b6e35e72095b4b2f544976e7c97638b247391ccde46e883538ae
- SHA512
  
  39ba8d417d129c7abb02961d3b4c88bfa5c7846af3acae0622e4e9c4e6ea835674c93ea47786f422fad5ff8a3c4c5f1e009102026eb730110c3c57c551c90ed5
- SSDEEP
  
  6144:GZM+H0NY1h0yRPExTHxxCFAxmgGSv3Fx8kd2hxNraaJKyn:v+UNHgsXRx2Sv3FCkd27Ya7n
Score

1^/10
behavioral3 behavioral4
- Target
  
  skysim-aircraft-md11/Documents/SkySim_MD11_Operations Manual.pdf
- Size
  
  3.7MB
- MD5
  
  b50a1c9207dad0da69d143794027e16e
- SHA1
  
  dbd2266099ec0b6faad3c0659305358d1a6323bc
- SHA256
  
  83529011c57f93f8d452c5cd4e712b2441eff910164258468015fc30774d43f4
- SHA512
  
  8fa320a0e4606975baa44e392aca23e2ec43a17ac1580f7298eebff645808a308bf1724f3612a449729f3de12acd4a2543a7c1dd96a64d43b780d69c56cb1438
- SSDEEP
  
  98304:gaFQaQ0xtj3mli3iuqEi9kV/XLXFJs49ucz:6alj3mhudXV/XLXF+2uc
Score

1^/10
behavioral5 behavioral6
- Target
  
  skysim-aircraft-md11/Documents/SkySim_MD11_Speeds.pdf
- Size
  
  87KB
- MD5
  
  3c0408e11641e72dfec10bae1a2ecfc9
- SHA1
  
  44861870d512fa13190e4497fa0e1488b4449f61
- SHA256
  
  5af64ee0648c69ffc8827526df98cd882d2690bcd5a40c733b1fdc11f30e67c2
- SHA512
  
  fc9038de395311f526daeaf38799a3d6b16f429522427978652ff172cc5efc7bb9d006eebf50e33090fbea60ba5761ffc71ceb48d3220bc2d47d918c2122febb
- SSDEEP
  
  1536:yCFWG3e9ToEZjgj7DeHemDLIIMuDy5xw61aypUGxiY0kBpX4l+FU4:dPWToMM/D0IIMFwyqjkBFI+i4
Score

1^/10
behavioral7 behavioral8
- Target
  
  skysim-aircraft-md11/html_ui/Pages/VCockpit/Instruments/Airliners/SKYMD11/ATC/SKYMD11_XPNDR.css
- Size
  
  1KB
- MD5
  
  59e6af59e0be3781d47be944d60a264a
- SHA1
  
  b54bbc722f7273a1003e5d75432d54f1185f343a
- SHA256
  
  a133ccc1f293695073a40b7a2e27ad756a6cd6f6c5981f2dc6070292fd1a7436
- SHA512
  
  8488946889e107fab6abfaeb029fac5d764411d05754fb40739cf6c8c3c1027b2c6a38098c5b89e92199de3ca364ac40bda199ab75bee9dcace1d6836745fdb4
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral10 behavioral9
- Target
  
  skysim-aircraft-md11/html_ui/Pages/VCockpit/Instruments/Airliners/SKYMD11/CDU/SKYMD11_FMC.css
- Size
  
  3KB
- MD5
  
  85ed345d8ab34475dbb31748d2863a7b
- SHA1
  
  3445fd6d3a21acbd1665a09b8fc6520a484980e2
- SHA256
  
  1e8ea9dc18b54efe2c6498282cc3de0543a4430ef82ca35721a914e3a63d7f2b
- SHA512
  
  2568957eabdc9e66b93bc6f703e139509c3483f687dbd7d3b5facbf445f3cb04fffc6978e0d301a4d6f46a0026c511cd956aef7aec1cd9e70d95a4be8a0ade17
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral11 behavioral12
- Target
  
  skysim-aircraft-md11/html_ui/Pages/VCockpit/Instruments/Airliners/SKYMD11/COM/SKYMD11_Com.css
- Size
  
  2KB
- MD5
  
  280780079503a7477e415f670ed7a4fd
- SHA1
  
  e3db0891661b3365f1fda466f7d4e4c86ca8d6c7
- SHA256
  
  f3288648aef025bd1f2d5c402b98ed05f5e77d6ec3bbeed200534ca87dfbc8de
- SHA512
  
  fbaf4684de3b09b3cf6ebcbf47069d7f5283fe10a0ab4d68361d78a8fd870066f2699b63604b6c3548fc8dd5ec588456326f94cc9c7b1bdb09dc4c61fc54e4d2
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral13 behavioral14
- Target
  
  skysim-aircraft-md11/html_ui/Pages/VCockpit/Instruments/Airliners/SKYMD11/COM/SKYMD11_Com2.css
- Size
  
  2KB
- MD5
  
  868bc4b49918465c8fcfe4aee3051322
- SHA1
  
  8a55bb93242a3e2945ab475a5b3b324367f25391
- SHA256
  
  f8496e77d93377f04f16aafe613a79cfe26389c371d692fdecaaba547c0ee49d
- SHA512
  
  6cff3c39e472e125cbc4acbc33d5812c4d3f147d34e959b163b54da4e9c9799de984494686aab03584d19abda4271032a2796ce3ee382276277bc29152097e94
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral15 behavioral16
- Target
  
  skysim-aircraft-md11/html_ui/Pages/VCockpit/Instruments/Airliners/SKYMD11/EICAS/ECAM/A320_Neo_CommonECAM.css
- Size
  
  1KB
- MD5
  
  09dbddf0b85e4e86e22e60f0f6d6affd
- SHA1
  
  2eb5d85a5f234e75a0cd4ad52fb7c500c310dc33
- SHA256
  
  47f38d98e5d5ece86fa8caca5907bf027e5cdda723d81446c1cf1a79cfb6eef2
- SHA512
  
  0e5fc1af33afb86da2e6917b941b7481af20d2e79989a67450557afd9e0e8b283a441c4d2083f88989336e6229b66bd4bc8ea68a96ecc3177c59e88952b3a8e6
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral17 behavioral18
- Target
  
  skysim-aircraft-md11/html_ui/Pages/VCockpit/Instruments/Airliners/SKYMD11/EICAS/ECAM/SKYMD11_ECAMGauge.css
- Size
  
  4KB
- MD5
  
  b27828657670a5d784007983741fc396
- SHA1
  
  f340ec1e2c94fb12ebf3639730bd60aec8071ec2
- SHA256
  
  363d00ae5237698876e0361f12c9c69e513972e55495f29e697bc952db309685
- SHA512
  
  172b22b6c534fe88d6462edc4306cf73829727fcc66c29beab0278af7863cacb4bde9258430df9884e5745e59fa046bc0bee720c8985350c229cfbbfa8450ff0
- SSDEEP
  
  96:OV3Le7O9sWWragiqvB7eg2NUIXbXslLlAoLIXwXccxzLuIXWPNzmNhXCK4GIXxXz:OV7YOKF29yB7eg2NUIXbXslLlAoLIXwe
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral19 behavioral20
- Target
  
  skysim-aircraft-md11/html_ui/Pages/VCockpit/Instruments/Airliners/SKYMD11/EICAS/ECAM/SKYMD11_UpperECAM.css
- Size
  
  8KB
- MD5
  
  2813d320b9cc9d43ac0315ab3e5e0d3d
- SHA1
  
  c20b6fe0d326df924d8687db028503b07897783c
- SHA256
  
  fe69a79697cb2c8cdf0c78c8406e251555138cc479f924d4001b47776c1b3dd9
- SHA512
  
  9a35ebb7cc16d6cd2c5e26366c4b5ce3f8e8667753b818950752d403023590d35fd0c3c10d17025f3faed10c195f82490deebd63263685ee837fa64813f0237e
- SSDEEP
  
  192:OV7YOM9Kjom1mrOjOJOXOVOnW/m4OlOG2OpNOLNO3SOvyNgZDTZUZ554ZF5Icy4y:OVG2+m2yyQM
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral21 behavioral22
- Target
  
  skysim-aircraft-md11/html_ui/Pages/VCockpit/Instruments/Airliners/SKYMD11/EICAS/SKYMD11_EICAS.css
- Size
  
  7KB
- MD5
  
  1e42e093ae9a50e09d64689bfd611498
- SHA1
  
  6491749d95d3809a459f31f222f317703d3b873c
- SHA256
  
  08d643809f7bf72656a11358549b211a6be0b5ed7f5dad8175a122e97ac432a4
- SHA512
  
  3b62327cc7b26fcedd0225a6a3ee11be72bd165aa1fa6cc8440805d4072ca7fc237eaca14fe1c74ac012f2672f76456a5b639e23e1ed64cb40da6393637de3d2
- SSDEEP
  
  192:OV7YOVhd5rV7YOKF59yD7eg2NUIXbXslLlAoLIXwXcSzLuIXWPNzmNhXG4GIXxX2:OVNrVARRQJA8Mk1tyK2
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral23 behavioral24
- Target
  
  skysim-aircraft-md11/html_ui/Pages/VCockpit/Instruments/Airliners/SKYMD11/EICAS2/MD11_EICAS.css
- Size
  
  634B
- MD5
  
  f8fa54cf794ce0adc98ca22cde5691bc
- SHA1
  
  213a7e81d28d723912bf65abffa930394d18b427
- SHA256
  
  3d5d7728f27c8ef5db415634941cd76cba6af30d64573bc64cb1a1b3be1d81cc
- SHA512
  
  025dfdbf89feaa7a66a6cad52f391c56438b824a3957ff021479da322c5649df570537995792f4d75aee7e262818b9de631bef485b44851597adcb057f5f3241
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral25 behavioral26
- Target
  
  skysim-aircraft-md11/html_ui/Pages/VCockpit/Instruments/Airliners/SKYMD11/ND/MD11_ND.css
- Size
  
  1KB
- MD5
  
  4d6a9e326fd4dab1d150d7ab77c2f283
- SHA1
  
  f78142a41a87fec38cedcbb01737083656bf6b3c
- SHA256
  
  be22f9f73b0da66faceb6908c32bc3859392b150ee6d19a73d0dff855cf69d2f
- SHA512
  
  4717c2f17c5a68d2dcb36510f5c7cc35aa0f44fff992281bd6fbc07f7021b23341ec361d39457a77f753ed60f06ae6b702a3068cda989c30b465c624a44d45e4
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral27 behavioral28
- Target
  
  skysim-aircraft-md11/html_ui/Pages/VCockpit/Instruments/Airliners/SKYMD11/PFD/SKYMD11_PFD.css
- Size
  
  3KB
- MD5
  
  915b4ce724463e7c6dfb09996c80d55f
- SHA1
  
  8ad4bb4bc84b0586c5bf1b0bd7b50ee80c192abc
- SHA256
  
  822be04863a607f1aa298accd50930cda8c4163ec310291627366642f7076396
- SHA512
  
  a55e7599c5eea4fe09055bb51fed45966493ac3983973b4081e37cb591184bf1dbed167acf4b7f91b8767ee903477ad319a21373a192074ac581215ca4cac603
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral29 behavioral30
- Target
  
  skysim-aircraft-md11/html_ui/Pages/VCockpit/Instruments/Airliners/SKYMD11/PFD/SKYMD11_PFD.html
- Size
  
  3KB
- MD5
  
  e1e966f38475d1e833ad92e199a23ed3
- SHA1
  
  52e68f5a682f6d58df71c8250fa454157960d2d7
- SHA256
  
  4d9d80409e05d7afb8e566431c0fbf3ceecfbbb1e85d07fea9f062051a2bd433
- SHA512
  
  8eed1bdc1ffb49a5e7c313d0f34ae659d0f490a56e2722d04de80c9b9747e9a4e063197224bf883ac5dab70869dc0cd0cfcf89997970b750a700188171e48594
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32