Overview

overview

3

Static

static

3

VS_0.40R2 ...tor.js

windows7-x64

1

VS_0.40R2 ...tor.js

windows10-2004-x64

1

VS_0.40R2 ...tor.js

windows7-x64

1

VS_0.40R2 ...tor.js

windows10-2004-x64

1

VS_0.40R2 ...64.exe

windows7-x64

1

VS_0.40R2 ...64.exe

windows10-2004-x64

1

VS_0.40R2 ...er.dll

windows7-x64

1

VS_0.40R2 ...er.dll

windows10-2004-x64

1

VS_0.40R2 ...us.exe

windows7-x64

1

VS_0.40R2 ...us.exe

windows10-2004-x64

1

VS_0.40R2 ...ly.dll

windows7-x64

1

VS_0.40R2 ...ly.dll

windows10-2004-x64

1

VS_0.40R2 ...ss.dll

windows7-x64

1

VS_0.40R2 ...ss.dll

windows10-2004-x64

1

VS_0.40R2 ...rp.dll

windows7-x64

1

VS_0.40R2 ...rp.dll

windows10-2004-x64

1

VS_0.40R2 ...on.dll

windows7-x64

1

VS_0.40R2 ...on.dll

windows10-2004-x64

1

VS_0.40R2 ...ty.dll

windows7-x64

1

VS_0.40R2 ...ty.dll

windows10-2004-x64

1

VS_0.40R2 ...on.dll

windows7-x64

1

VS_0.40R2 ...on.dll

windows10-2004-x64

1

VS_0.40R2 ...er.dll

windows7-x64

1

VS_0.40R2 ...er.dll

windows10-2004-x64

1

VS_0.40R2 ...es.dll

windows7-x64

1

VS_0.40R2 ...es.dll

windows10-2004-x64

1

VS_0.40R2 ...rs.dll

windows7-x64

1

VS_0.40R2 ...rs.dll

windows10-2004-x64

1

VS_0.40R2 ...le.dll

windows7-x64

1

VS_0.40R2 ...le.dll

windows10-2004-x64

1

VS_0.40R2 ...ry.dll

windows7-x64

1

VS_0.40R2 ...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VS_0.40R2 PCFULL.zip

  • Size

    279.9MB

  • Sample

    240222-wy2v4aea58

  • MD5

    7fd133bf44d18507abf3db4b4eefb778

  • SHA1

    a182b26960e748684d6304b8a949762b48adbaa0

  • SHA256

    fc800c10d4a9fb9c2cfaf0911ad5b14d72549e686ce1de209785da988be57613

  • SHA512

    ef0c13ae852bdba3bcbd4058af41d0b43b22c09a3fa7dc9526a7e487518ad5bf79b6124c2df4f052a4778575e4ef0452028b883c86cbc68ea7684a11f3b8cc50

  • SSDEEP

    6291456:fNrPUIgx4Rb1umuSCc5i5J6Ce/JuzHs5T6EKKbMwTas7PTehUsseu076hwCF9:f+Igyb1uSCNvzHs5eNKbMJ0PT6DuEi9

Score
3/10

Malware Config

Targets

    • Target

      VS_0.40R2 PCFULL/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx

    • Size

      59KB

    • MD5

      f7be9f1841ff92f9d4040aed832e0c79

    • SHA1

      b3e4b508aab3cf201c06892713b43ddb0c43b7ae

    • SHA256

      751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a

    • SHA512

      380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5

    • SSDEEP

      768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw

    Score
    1/10
    behavioral1behavioral2

    • Target

      VS_0.40R2 PCFULL/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx

    • Size

      59KB

    • MD5

      f7be9f1841ff92f9d4040aed832e0c79

    • SHA1

      b3e4b508aab3cf201c06892713b43ddb0c43b7ae

    • SHA256

      751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a

    • SHA512

      380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5

    • SSDEEP

      768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw

    Score
    1/10
    behavioral3behavioral4

    • Target

      VS_0.40R2 PCFULL/UnityCrashHandler64.exe

    • Size

      1.0MB

    • MD5

      dde6d2ace5a081ce8f855ff48aa236cc

    • SHA1

      6eea57878f9f252c539ff35603173bb4f30352fc

    • SHA256

      c7e163473d9f3e152bfd93f285c604269bb495b399808d21277f9801719fa13c

    • SHA512

      1ca2625d2f57048dc9b3bca76ca2d1bed04c488cddb2561ab6cb788dbc5cdab2ff75291e71020fe62e3544d242fa2dc6596c48265736b351ba9cb62ea61d6558

    • SSDEEP

      12288:Hr0VqCLbd4NkKx7fKZjwcZPxmCY3riaTreUo0EAn6:Hr0Vq6bdcvxWZjwWJZ4maTrv3n6

    Score
    1/10
    behavioral5behavioral6

    • Target

      VS_0.40R2 PCFULL/UnityPlayer.dll

    • Size

      25.0MB

    • MD5

      81bd793aeb5d2cc3d06c42e895529a3d

    • SHA1

      fa1239aa31f0f685a80a753574abf0d4d6ee3039

    • SHA256

      6f2a1adb75d3f85449441307f51ef746cf6d293923be36611e0e764c1c919cc2

    • SHA512

      10c13567e38c7d67a7186d9272c49ea198c9d123a6776cdef1c52674177357b1727ed1bbee5ef7cf3881de22e42c7ba32b1bf77d33cafb09e85641a678769491

    • SSDEEP

      393216:bZ60T5EycVc6BGCLDd083sQxMCBUS/LeI50d:bZ6fBussQUqw

    Score
    1/10
    behavioral7behavioral8

    • Target

      VS_0.40R2 PCFULL/Virtual Succubus.exe

    • Size

      635KB

    • MD5

      76609515f12ca2396b89b836fe467c9a

    • SHA1

      5dd3a2d505a2a5aadd82edb641022adb1dbabd9c

    • SHA256

      d753b53c4025faa853a6a612e62b89e352d8d4a3c4b478dcdbfe71de5eb1e4e6

    • SHA512

      4ac8a48c9dd3bfaa3110d236ea63fffcb8815117af463b13630c665c8758ca2ec039d6dc9019bd58c9de3f48b4b47631187fd592787c38ba83932221e1af173b

    • SSDEEP

      3072:Kys7oYfSbbQTLWuiUg7VsS4jMWN0U9ct4bx3DK4r19g:K/7oYfSHQPWTUg48WtFg

    Score
    1/10
    behavioral10behavioral9

    • Target

      VS_0.40R2 PCFULL/Virtual Succubus_Data/Managed/AllIn1SpriteShaderAssembly.dll

    • Size

      26KB

    • MD5

      67d929eb0d01a391194b43760da7cec9

    • SHA1

      fe20ba59678b1f532ec90e73347dc459a9e4f80f

    • SHA256

      f2ba59411d4c9890afd14b70c34b4b117192177b7c6b5a7b5796b41c7c0d146a

    • SHA512

      1d6ea78aa55826294df47260cd18a3b1da4c790bf081eaf4a216b1ea3627e50ad943d23c9347471fe2c92e30be456665db6f87d512c1b8b4dbcdf0fa028c0e8f

    • SSDEEP

      384:XVTW3K3yq/fTG4L/ie936GeIwp9pODb4rOvejhqAi/mW6Lnj/hYI7QQYtN:XVagjyxex6Ge79pOQXP/hYEjuN

    Score
    1/10
    behavioral11behavioral12

    • Target

      VS_0.40R2 PCFULL/Virtual Succubus_Data/Managed/Assembly-CSharp-firstpass.dll

    • Size

      817KB

    • MD5

      4337daf62e5d2dc1a1c6a27a2162b489

    • SHA1

      7d60e6f71cbec4a0a29cf136c9920e1dc0e154d3

    • SHA256

      4f9e4b523bd2007ab279e1f7b301ee282a38b5cacb01c1d2da61e5a6fda9d59a

    • SHA512

      a34a65de19a7f2d5af3bbf730f299fa1d9d5f67a2530faec858dc206107b015b2b06d49ad2ea8f0a790e23b66550a079c90ed7dafb593aff9b7806042e3ffdae

    • SSDEEP

      12288:8GQ0sezCsKrY0sf46hwN/+ZCiq+93lSl6XVb7/in6B6CfQO1qXZe:0WWscY0hl6XVfhMCfQO1qXZ

    Score
    1/10
    behavioral13behavioral14

    • Target

      VS_0.40R2 PCFULL/Virtual Succubus_Data/Managed/Assembly-CSharp.dll

    • Size

      2.2MB

    • MD5

      6fc9d0b76a550c819ff00b442d46ff88

    • SHA1

      67f818a5ffe0b718d82b30a90eaa9feb58a2c6b4

    • SHA256

      783860dcf8da142854694a38442426bc410066f74b470f21c373423156834752

    • SHA512

      d305df618e4bbe66504f94cf35e0bb0fd0fce8aff6dda31b16a44804d46a8eec97e471c57cca870b956c4e07f30c5666875bd7f624a451363cf7749c4bf86c25

    • SSDEEP

      49152:3E3gdXYZW2RSON0qoGXiUAnJ7/hRHcF7:3E3+XYZWyjToG

    Score
    1/10
    behavioral15behavioral16

    • Target

      VS_0.40R2 PCFULL/Virtual Succubus_Data/Managed/ConditionalExpression.dll

    • Size

      26KB

    • MD5

      a9608d88fe63a477c7a63dbcdcfc1087

    • SHA1

      a39c41774c18233b5a9c3a5d7d3f1f8d41e782bb

    • SHA256

      85bc495214c53114fdd52ac6728ef3159a521bac242eb9f0c1f9a8dfe821cb5e

    • SHA512

      fa1e17e700110c59ec18f5d8add4866da8df1bc05104248e61e58f81a15923107c9e70f8ff742289b04f343934eddf0af6e745fbf59e9178430d96ad614e58c1

    • SSDEEP

      768:1rH/J//VCUtTKAKFw5WeujVX/nOPHrEnY05QGNHXx:d/x/VCUtTKAKFw5WeujVX/Wr0mS

    Score
    1/10
    behavioral17behavioral18

    • Target

      VS_0.40R2 PCFULL/Virtual Succubus_Data/Managed/Mono.Security.dll

    • Size

      303KB

    • MD5

      f7acab1e09deaa11c9bdd0d723363016

    • SHA1

      e940058cff5dc584c11dc6e4b111e85a3f6ca06e

    • SHA256

      8c47b23389f9eede068683ed8b64b5a466f986499112983290778b30accfd1ba

    • SHA512

      ec73a3c841358113a33829b50ea14ec860ccaee883c327515b369d08e3979643466fb57dfd550c62eb1468b6c92c0cb03ffb07505ec77e62bb83fafcd51b2894

    • SSDEEP

      6144:Buca+sTOwf+31OE5FXNywY1URfxArXj5of:9Ui9kgxY

    Score
    1/10
    behavioral19behavioral20

    • Target

      VS_0.40R2 PCFULL/Virtual Succubus_Data/Managed/Newtonsoft.Json.dll

    • Size

      642KB

    • MD5

      6394c384723cb232e275e2b0b44c79e1

    • SHA1

      d8f89280df80ad3546bc9f16af562633d2607635

    • SHA256

      9aeb8e96474d51871d412918ed7401ec13bde312254dab81229e18305e128116

    • SHA512

      69bd96fa304c7a647fb4222b6f1c999948137dfced4b84a817eee3ecec50c9daa8e7d566d6d53b7952e8b17225733776068912d19331c41e0172ab3a4a13a2a9

    • SSDEEP

      12288:TukU4jkOguHDnHmEy16pr1VyjG9ExB6jyJzYs:TPxXDQo1VxExB6jyJYs

    Score
    1/10
    behavioral21behavioral22

    • Target

      VS_0.40R2 PCFULL/Virtual Succubus_Data/Managed/PlayMaker.dll

    • Size

      207KB

    • MD5

      37c1f4e28f998b3382c9d2a9761c8d39

    • SHA1

      e43d2e4aeb42f7709864706ac2699d01af5da448

    • SHA256

      c846ec9b56134c9d4a8c82ba347a61775aa777b1f1e922d0f6d75bf665c59ae7

    • SHA512

      2b602c993519a5d676a84f596c2a399ba6c69bfa39d1b49645f2bc593e6524e663f397cdd30487318eb8deeb2f6658fa2a7171990acf285cbc1bae50cff85136

    • SSDEEP

      3072:csvv5BBy/TiHGHOfUsKXCECTR27uvQf31qb0gFbxEfS4vcmswtq7u1b:cI5X4eHmmk7uvQtOFZ4vdt4C

    Score
    1/10
    behavioral23behavioral24

    • Target

      VS_0.40R2 PCFULL/Virtual Succubus_Data/Managed/Sentry.Microsoft.Bcl.AsyncInterfaces.dll

    • Size

      11KB

    • MD5

      a5b8233720fd57857a58789523e16f15

    • SHA1

      f5ea2159afa0395233ea56568f484daa16ba762f

    • SHA256

      4b0ee75bc146158dfad26be1ed20c5e29a3982146401476364d18e3f9e9f5936

    • SHA512

      cca6dfa2a4fc3b64c87e3f855c58a0de7503ecf82d2843933e3fa32fddff9f72842176c0a0b521ea018043d13cb9d64447a29f428ae0672b64b878df287d9a22

    • SSDEEP

      192:Lc/sDvTnTpxpZtitsbsHHLpjEtuuVPstkce0KsJSjJVe04rdBsiePxg7WfWqrMbN:Lc/0LnTZVbsHljEIGWW0VM204rdaiePs

    Score
    1/10
    behavioral25behavioral26

    • Target

      VS_0.40R2 PCFULL/Virtual Succubus_Data/Managed/Sentry.System.Buffers.dll

    • Size

      11KB

    • MD5

      adedf983b93e27f1d1d46ddb4d7cc766

    • SHA1

      a9082b95b2b64bee4286a7e2c6ef36bf8de0a723

    • SHA256

      5a15ad17bb3b2c80440861bbf320913ac4f8fc78a327b1fd59e469ae75918ca0

    • SHA512

      4a1bf3513ba8817116980f4a0b04b6e9d7ec0a297cba58ddcdb7917467a7c68fe5c319f14e3ea8f45bc732989b98b9cc0ef305c0a28107d5b6d4590fd9c6e2bb

    • SSDEEP

      192:auHEiHEuQIhfpsMTkd66NxUoMRyX2TasnD38z3GNT6WvYWJea2:35KmhsqXLnyX2TTgTGNT6WvYW8a

    Score
    1/10
    behavioral27behavioral28

    • Target

      VS_0.40R2 PCFULL/Virtual Succubus_Data/Managed/Sentry.System.Collections.Immutable.dll

    • Size

      174KB

    • MD5

      df4d2ea84c14d5fe8a2e76127f8f0ac8

    • SHA1

      4fd4c23143c26f7dab720de4f00fc7ad4c99d782

    • SHA256

      219d592352d7ad64ca787d5c0d252a75257b22988f1234562455f3a8f849be9b

    • SHA512

      7dacf17c542c6a24a406d5bed3773d6fe6deb957aad9b7aa7db2051abb0d0aa3b627a4cd1bb45683c278e7e5ec1f4aac2b3ad9cf44bcd27e811840f641486018

    • SSDEEP

      3072:svry7rOlU9DYnkmdeymBi7+HLr6ewTSmWvfLpPs+AqGdNdShG7r20I4/733PwGem:svwVkkmkPi7+HLr6ewTSXzxVAqGlS

    Score
    1/10
    behavioral29behavioral30

    • Target

      VS_0.40R2 PCFULL/Virtual Succubus_Data/Managed/Sentry.System.Memory.dll

    • Size

      129KB

    • MD5

      8a72d6de23cc058ecefb932e327da215

    • SHA1

      f509b8b8cb39abd2f1e2193483359ae8784bb34c

    • SHA256

      2ff84e14b7c7617388167a71e6c54495de2a624499af3a1c514c0b43ef9e84d2

    • SHA512

      5603eb09d10501151761f83c8518a3f0c043b91ceac8e2872f8542b07e9fa41904110fa69095852e083e36a4682a6fae1bce3d94ca74d680a6be8b3e9b286e44

    • SSDEEP

      1536:W9Mi1VEF3OwJpEB+i1FvXvBQ0fT0bLdt8Tnza+Onuye/zGXgMQsmYd9UDABhqnv1:GEF3O8EBT3fK07etpg5m9UDAYsFI

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks