General

  • Target

    Buff Achievement Tracker - Installer.exe

  • Size

    2.0MB

  • Sample

    240222-wzkm7sea64

  • MD5

    76ebe9deeab021efb9f9d1e831cd34bc

  • SHA1

    903d6140c2f08db50569252b14dc263a87df1e49

  • SHA256

    67d11a9ac4d14cc0875f263b65907d25adba2933e8eba07a29b5dd11607216a7

  • SHA512

    6303a51f6ac782f5614191faab48b2a69c11fcef441271e7512f438a274c5fe5b479612bf5a9af2d8de6e2d1019b98186e69e940c99fefd6ec57b536a05cb063

  • SSDEEP

    49152:BauxE87vxpsrFpIvu7OJGWuMmtc0s+CY7iNeCc8:BaAPN+TIvTB0tR7M

Score
7/10

Malware Config

Targets

    • Target

      Buff Achievement Tracker - Installer.exe

    • Size

      2.0MB

    • MD5

      76ebe9deeab021efb9f9d1e831cd34bc

    • SHA1

      903d6140c2f08db50569252b14dc263a87df1e49

    • SHA256

      67d11a9ac4d14cc0875f263b65907d25adba2933e8eba07a29b5dd11607216a7

    • SHA512

      6303a51f6ac782f5614191faab48b2a69c11fcef441271e7512f438a274c5fe5b479612bf5a9af2d8de6e2d1019b98186e69e940c99fefd6ec57b536a05cb063

    • SSDEEP

      49152:BauxE87vxpsrFpIvu7OJGWuMmtc0s+CY7iNeCc8:BaAPN+TIvTB0tR7M

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    • Target

      $PLUGINSDIR/app/cmp.html

    • Size

      5KB

    • MD5

      d7b8b31b190e552677589cfd4cbb5d8e

    • SHA1

      09ffb3c63991d5c932c819393de489268bd3ab88

    • SHA256

      6c21e8c07ce28327dca05f873d73fe85d5473f9b22a751a4d3d28931f5d0c74f

    • SHA512

      32794507a4b9a12e52ceb583222cb93300e38c634a72ea3f51a0189127aba60cf476fb7918942355a4f826185d7071e876cb40348ba34cf5d1ca7e9546ccb310

    • SSDEEP

      48:t9rc0/GLAoShbEHaLKNGiNQtvmolOGR36tgtr/GTvJP8AscaV4LiMt7ByBZXGz+p:4VLjHa2NGiivmmpWsBVutFwAk5vSG

    Score
    1/10
    • Target

      $PLUGINSDIR/app/index.html

    • Size

      20KB

    • MD5

      2822a4d01b4f0d0299207626845c6ce2

    • SHA1

      a02ca32d5eb26ea382692acf4973dbc3b230dfd0

    • SHA256

      1f16a65e36c0ee3ec05c4478b12552e89b5ab5cb4863e69823912ee6c429161b

    • SHA512

      9f8fd6a8f8a6c915a3c826b66cdf6d5e49a920c5cff9f71ce09d9f8009177a8a9ace886920575b5d14dfca2d6a0f275851162d6b206aa65cfb75bba94e86571e

    • SSDEEP

      192:8sdqpDNDPkFHmY74+/qmtRCtmK8W9I2gHHMlxh8B39LJ/Hab48JgJnc5w/93mJ8G:+WNaM8UnbjPkZ9+mppH3

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/app.js

    • Size

      22KB

    • MD5

      715d53e963a034a3721aee76d1c4e8f6

    • SHA1

      4643837ab7d2249fbda6ed23d025ef738cfa6317

    • SHA256

      5b8ab6d562e131159c89eebfc2f665a4a496c8621ef34efcabf7b0a9e1e85b1c

    • SHA512

      15018563724d17dd22c38daa51c8208286f81e8eea6784ff70f46d81cb3385635b688ccd775734f0e4bfd086189c5db721f2bb76daee4e6d6aad02075e44dee7

    • SSDEEP

      384:4X+acDQFcljKdZGb9plmt902wjI3A4vnzwF52xxYRifG6wXR3FGHWdMxj8T:0+acDQ+lOdEbdmXH3A4vnzIAnGifG1X9

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/block_inputs.js

    • Size

      789B

    • MD5

      b5b52c92b90f4283a761cb8a40860c75

    • SHA1

      7212e7e566795017e179e7b9c9bf223b0cdb9ec2

    • SHA256

      f8dbd6793b35f7a26806f4dabad157aaafdf6d66fad094b50c77d60f223fd544

    • SHA512

      16ad53ede5424ca1384e3caea25225589e9eec9e80e2d845948802db90fad222f709a7b651cd7601a34ba67a0627433f25764638fd542cbd4612871308e7b353

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/libs/cmp.bundle.js

    • Size

      324KB

    • MD5

      1de143ca1babd3c02744f478c8c05c5f

    • SHA1

      ac918b3d2d5f9cbd9e3b3f5e075ce3c96eec16b3

    • SHA256

      7fbc3a088ec303143109e0c1b2c04f4c5a6e450a2d6f3071fefb66e92f643ea0

    • SHA512

      6e419e11f35a3258124127970961907ed8fe0619f618a4c15542ee7f8a01a9f4a7af4d290b634444d21b823ca1afea65f97d5788fff6665d55c2231214edff24

    • SSDEEP

      3072:LWYyrzt6yrtky1UDtDkNdAOoSPGYTckZtVPuuXheQ:oF6yrKD5kNYYTcIp

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/libs/jquery-1.10.2.min.js

    • Size

      90KB

    • MD5

      44e3f0db3e4ab6fedc5758c05cf27591

    • SHA1

      2d408aa1d35661019c95adcc60b78c0727ed25b4

    • SHA256

      bc44d3631ffef1df7960e359f02002d3ada45ee05205c2cf1edd85da2f518144

    • SHA512

      4d4844e53e686fc59a52e86588f328dca3ed6fdad7195c58942a98c51755a24981b903ee7c7b27785375eaad5a7d9501cf74b999674b79f214e66103bad9efdc

    • SSDEEP

      1536:O4mCgi8DyCuXXFiJ+L0kJQsJVPEKuQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0JFV:OGsKYAI2p0WP9bDrJ7fak

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/libs/mixpanel.js

    • Size

      1KB

    • MD5

      344e4265b3d4e1fecfd81c561293edab

    • SHA1

      51dbcac23b839e64362d11763bbe64538ad80bb8

    • SHA256

      88872b5b01a8d1dfee124333aba630ceb8535390130833dd2a312c461ac52217

    • SHA512

      dcda17cb89861c4cd0be4b7cd93b58283cd1acc3c7a4a2176add3ea6403079c8567bcf88d878aa2e91e96c43b15a7ce668299c3d015c6dc4db5b15cddbe4ea7d

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/models/notifications.js

    • Size

      5KB

    • MD5

      85afdf9897bb1236eff3afa40d15ece6

    • SHA1

      4362bdd139458eaf4a2dcb34294b43e2d53f4a26

    • SHA256

      9dd03dfc92bcb74f3725aae60e904c0a56cc84f299bbb8e863a869719f6fdd32

    • SHA512

      4ab86c6bafba18f53f01ca913ceaa80f14900107069a1d5f65b108d35690bd8b50b1a6cdf1563fc5775909f69208dabebd139f3cf3d8576269d560d57cf9994c

    • SSDEEP

      96:sOr8u1s9FvYYdfHsW/GZwzpJGf8mui+U8QrGjqTzoOxOYsdfHsW/GZwzpJGNjINU:sGu9yYl3rNQ8K+JQC+/5Lsl3rNOEYIo

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/utils/analytics.js

    • Size

      4KB

    • MD5

      f288498a7ad1ef51bcd3f3272a1809f7

    • SHA1

      0a7bc52a557ae5cacb5ae7bddebefe0c1aec1ccf

    • SHA256

      c76e5be6cf6513f988e69977a0fedea42fbc700a2e4ef7d136fdf72534ee8519

    • SHA512

      7b2195ce7b6ff8f414ce43ee8cdbfc0660560b6802a2a6271b6a8eefd19d02810c200a51ea1e43269c18f70e5b749e7a515a6db7b8b8ffa7aeeca0a1cd32f057

    • SSDEEP

      96:LlYkmHqqVHlnZ4JGvt+QP2EvVVko3sO2LCgOb4bgao:AHq1GV+kcRObdb

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/utils/commands.js

    • Size

      12KB

    • MD5

      65015f2e2e490f6786abc0560e33e1d0

    • SHA1

      47b5c2b3b1f9381e4d2b9d1f3d82ba62828ce28e

    • SHA256

      e874c959c7b8e4351d730d263231df7176b5062580a7d3e0a2684001b510f5d7

    • SHA512

      a4ad579acfa6000fd8074893a6b45df74558c57afd5b957217491784fa25df370c59d9f92ff245abbdf3d26b42114cc22359ef95c4baa322e326c7e210f43edf

    • SSDEEP

      384:7/W5HB8c36uUvJQ006W8tusv5qEWTwdSW:rFOs5

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/utils/cookies.js

    • Size

      1KB

    • MD5

      6c60e675f8c8c68c0174b644d3a63a2a

    • SHA1

      3635a3fe07ccc4a6f33a986ddb690522d0611abb

    • SHA256

      9d3cb3822e20d6f5157faa02dc69bdaef44576c3fb5523e00aa152107ce30287

    • SHA512

      1dc9ec7b139bcf37107ecd673c01e4fcc606332ea1645a4a1b4e5d95f817d4c99d5964cd3d941a6a526689341d9623b17b4efc002cdf4c73404299d52b1be452

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/utils/modal-events-delegate.js

    • Size

      1KB

    • MD5

      117e4fdbdb0ecf211c8bd909efd337d1

    • SHA1

      9f8684d856b7c95bdffb139217dfd89f41373187

    • SHA256

      267661f932a2ea78d8c7a98cc03d1b18d7cb8132deb84636772ecd1fcfbe4857

    • SHA512

      f474ee20b59d3d0c11f9f6aee6b6e2b66f7025beaec9841f88455e60533dc96cb4e27910be0dae92b0028c5578932b7f459fdb91d594ad010f72a3b3af6addb1

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/utils/strings-loader.js

    • Size

      5KB

    • MD5

      9c94eb933d8a43dd3825e67a7e30c980

    • SHA1

      7ec7b16af6f399219209ba5967d377040486a11b

    • SHA256

      96445709fde2613af50f4b8908296d4bfccdccb2d9db9febc34a9bf4dcc70ecf

    • SHA512

      a662a299e31633f71a9b9675970359430fdac06dcc284fd7ce92919f244c7f921639f97a42356e993a95865e6c9f198dcba82c126f82065bf2009a31ec9b02f5

    • SSDEEP

      96:FXS/WSBWlbBtDhWFTnTeWsNkEj1I/6WfwkUlx416moPdXDKP8j8yZrME6:FXSuQwBBh0nTevNkEj1O6Wme0muXDK0W

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/utils/utils.js

    • Size

      118B

    • MD5

      a0952ebeab701c05c75710c33d725e7e

    • SHA1

      1da8a2e889f1213d481ae3cd5571670c01e64adc

    • SHA256

      b4f0c48cbfeaf8141fd44b12031e3f0410cb0cdc313888ffdb14fdf1d2341246

    • SHA512

      5e5ae616d3fded7d2bf47a326242c4477ca3119fb52897bfb41de0be230ccbd6c3da2c00268b3973e9bf7b4f2886aba64fd9719b448662e4130ee66d87913389

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/cri/cri-controller.js

    • Size

      5KB

    • MD5

      d222c95a2ef0b75ad6c96a3abe20fdc5

    • SHA1

      641c39f92a169f0ca435ed12d2a4d276eb415642

    • SHA256

      aafb56625ec30b24035baafff7bc20215e8ec7e4be4ea58a90aa5b46bdd14a6e

    • SHA512

      e9e66abf6d95fc15a6ffe46cf85c3c9d3b80f3884ca4c8cbb5d2b024fa1dcc46a5e2f39041a4a120a8b8b881d07b3d70b18b552332180aa08c4a67577ea6242b

    • SSDEEP

      96:u6VQTr5TeTGTvf/aaYWCtheobwIbZZuAk5a9k+:u6VQBaiLf/aHWC2oUU7uAW+

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/cri/template.js

    • Size

      1KB

    • MD5

      76c1ef0cb437db144c2bed53a5a8a5d7

    • SHA1

      aaab8fff649f8e46d1e9510018118ee9abe01498

    • SHA256

      505d3c4de7d9cf8f0155b5b1a3c8792bc0ca2eda6781b441bd85455f144be22e

    • SHA512

      822bf9feda91c89539d263c6c9053163e8dfa3c511195bc61a9b608b4687fb4048733323f03dd30a7ab661a4be4acf6c8d8ae7bb6723771122540a9551899c3e

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/finish-with-recommended-app/finish-with-recommended-app-controller.js

    • Size

      1KB

    • MD5

      01878b1f0f27ba2af34f89c648f3e16f

    • SHA1

      b45e04411d06052772b4645d1feb7a594b722067

    • SHA256

      4c96454e5b0493676af666aa5716ba12209aa72fb30e8dbde8e85ab000a4350a

    • SHA512

      5a7860c8df74ad9dd2eea3bd0927dbfa1fff1de7b9a093a6d727ecc2abb7139d721cbf76c55a7ade24ade5e08e6547321a62e3a1440eb202b7a8569305dfa782

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/finish-with-recommended-app/template.js

    • Size

      681B

    • MD5

      d1cb34b57cef7e28b9286454b197b712

    • SHA1

      f3a964b319bab82d4eda07e126bbfd6dec35c349

    • SHA256

      b61dfc304b46e8cd95d7b15bb93c6160b30523a1a093397a84fc8b8bed00ac42

    • SHA512

      3a07de9c58134edbb7998f85e6d037a0cd066e32c4daa07594a949a7574f5693153bbcdb59739e1a92e847ab1128e2369fb30ba76a7b9cdfa9a37a409db691c1

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/finish/finish-controller.js

    • Size

      2KB

    • MD5

      cbdfd75bb47bda0ae536b3d45958b615

    • SHA1

      9a69d440e1d8ba1976b2880964f7041c46e8bdf9

    • SHA256

      b4221b80fbbc4ef93b3a1f668d8a3445353db9f3e1ec77c9b6520a7312ac46f9

    • SHA512

      e78272fcd6af8656cd054c91b97508603792dcc75c4f7a123880671ff6ed126e03cd19ec13d005f655e8281a1e90f6b190be650ddf07522fa613a940148dd475

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/finish/template.js

    • Size

      1KB

    • MD5

      f092de7ea66d8e920b345f38537fa35d

    • SHA1

      82d107a409f18878307ae0cefe24074db64937c4

    • SHA256

      b05f111369e12ecb4cdc6526dd554061eb31097aa0de4bd126ddc185b69d922f

    • SHA512

      14942c0122f216c07595cbaae498f9c4d37a2d0fd95f262c332502befdf4566c7a042c4d85702c1d82a111123dde677096195e9efeb1d74eb1dfd4df84d01a23

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/main/main-controller.js

    • Size

      11KB

    • MD5

      15b665a5c915004e1aa7e9e11a710f7e

    • SHA1

      7821924e42bb19d60c572ff80bbaaa04d7aaeefb

    • SHA256

      84dc33e2eb3118fc77a38b0ca53af42c53f6eb85cfb1e8737dbe39fa03515653

    • SHA512

      dd47f7bac0dbaac714e6d2fc91b4c24756ca4acb70bdbc4b54cd5216552d6bb85ba2e1c3c8445c5fb40d116dfab6569945cd74730bb7c8f3cf46e8d08f8afa02

    • SSDEEP

      192:28RRXC9xThFzkzLZ1ksEIA6li5djpACga0U2FxVgMKV59GsZydwOVTzdfj5UEdwV:2sCHTTzkzLZhJit+y3ZydwKf6

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/main/template.js

    • Size

      3KB

    • MD5

      a118c7724c208f12083240cafccfd10b

    • SHA1

      f89c676a215b869626737862a08c9eb07d440211

    • SHA256

      63a43bb08403972d0f4b0e381bd264af14e826e0035242bc1baa9a815956b8fc

    • SHA512

      9fede79044ae5de7baf5bfba0d5a515ce462a25420026ff45bcf1751e57510023cb40df42d08e880114f62b38ddb218355d5357b725df32a41ae4e6a18414cb3

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/modal/modal-controller.js

    • Size

      2KB

    • MD5

      995aa365976d4166ec6de5fe212b0255

    • SHA1

      0d0e8c6aabfc8c967d5af224f66045314c0564b1

    • SHA256

      cff5f7519eb05899df67ae1d79c9318ea344b068d95b565ae8dafacb70a1c52b

    • SHA512

      71a51e34e92e2c478397e70ade9b33e39f4fb9a6da14f04a27997dfd9149978f4d90f0cb6d35e9ede116a2f6ed7f3c6f291383ef84d10994050893c1741f3de6

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/privacy/privacy-controller.js

    • Size

      2KB

    • MD5

      72aac0b210f16da255c03c34aac0085f

    • SHA1

      29c8520309a209185f0e7b864fa240aaf8a0c441

    • SHA256

      bdfa1535aecb73ea1de7c9443c5fcaea621cdd7b7f904e91df9bfff28c7f0939

    • SHA512

      6c549011d3607a26697eaac6761650e9d47e126e2b96c8d563df539f1e9651b62ed7fec6de515dabf889fb354d0830ea4b5598f658788bf97420b7058d88a7a9

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/privacy/template.js

    • Size

      655B

    • MD5

      cf8d2c26520d7c84e560dfa79e31dcd3

    • SHA1

      716f2ec17480d5cc9c145bc147833fbfc39d36f0

    • SHA256

      95c459eae0edccdb94702aea603a097e461daa0e5f37dcd0e30de7df665433a8

    • SHA512

      d466dcf7e86a4295857020feea281fc89f519f6bf1e79c3b5e1046d0745c9c9010377b1941e06c9a9b2c78a4173ed9909332d5d6c39b05f460e8a863086c895b

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/progress/progress-1-controller.js

    • Size

      2KB

    • MD5

      4bc723bda9cc718301f2533ca3196768

    • SHA1

      7f78b74746762fd5007ea3fbce45349bb0ef7901

    • SHA256

      164bbdea64ca671a04b91747191227a89992a34159f1578a2cbf0e16398af1ec

    • SHA512

      920f898d1592ae8d713410ac3fb43e9d490d567f2bb70b8f8d2958a0899fb8bf6a0a735db63a8eb3e1bf2cb02be70354a0f7b92d12584b1ecbde2d5ec19f9a53

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/progress/template.js

    • Size

      242B

    • MD5

      92b145e6649ba0add3dee9a69d3fa91e

    • SHA1

      4db1a45392ec973cc8a7eecf3a30a9a7ecc7a64d

    • SHA256

      a7128a08bca53dd919cab3e5cb4dab31ded7ae2dafc957209b9fdd23f3b944ab

    • SHA512

      747a087dffdba5c92d9f4c8923615d388b9c4c79d3b71d3cb90487aa37c132290a4f5107eef3055c03eadcb9614e20d4655393dc9251fab7e0ee2438f0d95751

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/settings/settings-controller.js

    • Size

      7KB

    • MD5

      bb0398431d8eccaae1461431d8304bb1

    • SHA1

      12947a7fe47b2b01c9e688c5cc2fb34ed8f3ef74

    • SHA256

      a26b559bbd3df23a9a95733bd30af6e39d7da5392f26122a360dd1621a74b8c3

    • SHA512

      23580092a308b82427ec8920c8d649b27ac58231d660f055fb25a30e7101eb5c96033b34d6758099b1f75e92ddf252d78e456c939d3aec60bf9747806508f2ce

    • SSDEEP

      96:WRFTr5TvuTlpwWXs/t2V9OqIJ6OFGR+4V6RjTmoSrOlidbtmfPNVC8VGeabpGHmb:WRFBjugWX8YV9UAf+4CeoSrCabWmNh

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/settings/template.js

    • Size

      4KB

    • MD5

      28513de0830383a516028e4a6e7585a0

    • SHA1

      d31fc3a6f4a3ce6c4afb82ff2342a1ed718809e5

    • SHA256

      8014a7c919da249ba2f2196d9c9b62639d20851be426f3ffaef161cbe477c45f

    • SHA512

      0f7321c2ae13145bb694368dae1b74e6fe20e6b09712da2178bc46e6aa65223ab84c38abbf0ed074c85b42dba1a238a5f3f8d1ae060a0af6df748c5befe11b61

    • SSDEEP

      48:Zx8LQmDdbaoFRpm4+0A2AEeQmDdbaoFCpm4+0A2AW:wpm4+5nHym4+5nW

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/welcome/template.js

    • Size

      1KB

    • MD5

      17f54fca6723b983875d940d931e0afb

    • SHA1

      01774cd5cea36bd74c80a708d6f77567e8091024

    • SHA256

      42c546e9da748ef76fdab56b96fd511eb607617a9ba37b3dc420148b769d8acb

    • SHA512

      401df9a54cd14c19227d91bd08b4775a7b437644b4ca0d1d636d3e07b04591f9c5516e80040ae6a79ba400457d15e3d80aa148a63de870a64664fc5a02f7a038

    Score
    1/10
    • Target

      $PLUGINSDIR/app/js/windows/welcome/welcome-controller.js

    • Size

      2KB

    • MD5

      6127f0a4ee214776271ea6fce1fb58e9

    • SHA1

      378cd32ccf043889de731fce6d96b6c21632a165

    • SHA256

      aa42af897b154c05a5a5bdf5c9420e698bc943cf1a6fcd830aae7c5b8317f654

    • SHA512

      f2b35ced730fb95b64dd72be81345788d1fb66d38f26f2ddeb205cbecfc767703a12c455d2bb8ba1dbada1a409e123aaf020a822321b8ad80947e67c53e83a9e

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks