Overview
overview
7Static
static
3Brotato.v1...to.exe
windows7-x64
1Brotato.v1...to.exe
windows10-2004-x64
1Brotato.v1...to.pck
windows7-x64
3Brotato.v1...to.pck
windows10-2004-x64
3Brotato.v1...ty.exe
windows7-x64
1Brotato.v1...ty.exe
windows10-2004-x64
1Brotato.v1...64.dll
windows7-x64
1Brotato.v1...64.dll
windows10-2004-x64
1Brotato.v1...a.json
windows7-x64
3Brotato.v1...a.json
windows10-2004-x64
3Brotato.v1...mu.ini
windows7-x64
1Brotato.v1...mu.ini
windows10-2004-x64
1Brotato.v1...!!.txt
windows7-x64
1Brotato.v1...!!.txt
windows10-2004-x64
1Brotato.v1...PC.url
windows7-x64
1Brotato.v1...PC.url
windows10-2004-x64
1Brotato.v1...up.exe
windows7-x64
7Brotato.v1...up.exe
windows10-2004-x64
7Brotato.v1...up.exe
windows7-x64
7Brotato.v1...up.exe
windows10-2004-x64
7Brotato.v1...st.exe
windows7-x64
7Brotato.v1...st.exe
windows10-2004-x64
6Brotato.v1...64.exe
windows7-x64
7Brotato.v1...64.exe
windows10-2004-x64
7Brotato.v1...86.exe
windows7-x64
7Brotato.v1...86.exe
windows10-2004-x64
7Brotato.v1...64.exe
windows7-x64
7Brotato.v1...64.exe
windows10-2004-x64
7Brotato.v1...86.exe
windows7-x64
7Brotato.v1...86.exe
windows10-2004-x64
7Brotato.v1...st.msi
windows7-x64
6Brotato.v1...st.msi
windows10-2004-x64
6General
-
Target
Brotato.v1.0.1.3.zip
-
Size
153.7MB
-
Sample
240223-q5hg5sae93
-
MD5
01992d9d35d1e65f85a7162ab3e4eaf9
-
SHA1
51b44e072af98f1c0cbb2a84c879cefad6cdb250
-
SHA256
631e90e3e4e79a6ee6595185ea7577f6e2b8b7b495b6041951798f945dabb5a4
-
SHA512
4b5126d1f1e68e9b232f2ffe471c0679f34b96462d0e644b0631bd8d1e1bd7146705c586ff4df87bc60285cbe674fbcb769d4a6eb807243f0558901f1898e2ab
-
SSDEEP
3145728:tkhOGf/LVj0IXhWy3HrDEhcpRLeAQ3mYdsjNNoqaI3iCzI0cfaAuNhun/ps5:tkhOGXLVj0IxWy3HfEhcBeAWmYdsHov8
Static task
static1
Behavioral task
behavioral1
Sample
Brotato.v1.0.1.3/Game/Brotato.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Brotato.v1.0.1.3/Game/Brotato.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
Brotato.v1.0.1.3/Game/Brotato.pck
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Brotato.v1.0.1.3/Game/Brotato.pck
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
Brotato.v1.0.1.3/Game/GodotWorkshopUtility.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Brotato.v1.0.1.3/Game/GodotWorkshopUtility.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
Brotato.v1.0.1.3/Game/steam_api64.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Brotato.v1.0.1.3/Game/steam_api64.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral9
Sample
Brotato.v1.0.1.3/Game/steam_data.json
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
Brotato.v1.0.1.3/Game/steam_data.json
Resource
win10v2004-20240221-en
Behavioral task
behavioral11
Sample
Brotato.v1.0.1.3/Game/steam_emu.ini
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
Brotato.v1.0.1.3/Game/steam_emu.ini
Resource
win10v2004-20240221-en
Behavioral task
behavioral13
Sample
Brotato.v1.0.1.3/HOW TO RUN GAME!!.txt
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Brotato.v1.0.1.3/HOW TO RUN GAME!!.txt
Resource
win10v2004-20240221-en
Behavioral task
behavioral15
Sample
Brotato.v1.0.1.3/STEAMUNLOCKED Free Steam Games Pre-installed for PC.url
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Brotato.v1.0.1.3/STEAMUNLOCKED Free Steam Games Pre-installed for PC.url
Resource
win10v2004-20240221-en
Behavioral task
behavioral17
Sample
Brotato.v1.0.1.3/_Redist/dotNetFx40_Full_setup.exe
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
Brotato.v1.0.1.3/_Redist/dotNetFx40_Full_setup.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral19
Sample
Brotato.v1.0.1.3/_Redist/dxwebsetup.exe
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Brotato.v1.0.1.3/_Redist/dxwebsetup.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral21
Sample
Brotato.v1.0.1.3/_Redist/oalinst.exe
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
Brotato.v1.0.1.3/_Redist/oalinst.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral23
Sample
Brotato.v1.0.1.3/_Redist/vcredist_2015-2019_x64.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Brotato.v1.0.1.3/_Redist/vcredist_2015-2019_x64.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral25
Sample
Brotato.v1.0.1.3/_Redist/vcredist_2015-2019_x86.exe
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Brotato.v1.0.1.3/_Redist/vcredist_2015-2019_x86.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral27
Sample
Brotato.v1.0.1.3/_Redist/vcredist_x64.exe
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
Brotato.v1.0.1.3/_Redist/vcredist_x64.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral29
Sample
Brotato.v1.0.1.3/_Redist/vcredist_x86.exe
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
Brotato.v1.0.1.3/_Redist/vcredist_x86.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral31
Sample
Brotato.v1.0.1.3/_Redist/xnafx40_redist.msi
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
Brotato.v1.0.1.3/_Redist/xnafx40_redist.msi
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
Brotato.v1.0.1.3/Game/Brotato.exe
-
Size
38.7MB
-
MD5
89626ead64936e17befc377a2b34c894
-
SHA1
1a4cd325a5cad293f003b6988c890474d1abf3b8
-
SHA256
8be7aa284b728971b8dfbd723c132f996597215693508b7fad8dabbb2a691a4f
-
SHA512
5fb9016c75e9786e276aadeef9371e348ce752661c6397a1f35d68dbb39b56962f9a8c002c1cae7d772a236c9cf948f81c63172f6da2050d8e3fed41a0f680c5
-
SSDEEP
393216:2YZWCjr5pqvA5LpHUqAc+c2rpY9xSV45cuD2nbEpUC0N1qscyG2089pvO7o5bgcG:wIZ4A
Score1/10 -
-
-
Target
Brotato.v1.0.1.3/Game/Brotato.pck
-
Size
88.2MB
-
MD5
f4875de0b6a40aa5eb1ddb9cbef1cc02
-
SHA1
661aa4ad5abb678bb00f88546f8ee32cc7bcb0b8
-
SHA256
fcb450a1505d742cd8cf48848fce1251321276830940701543abe524eaf546a3
-
SHA512
6808aa8205d49306619cd21eea7b36730fa625e2f3d44c61f06dadf4d76912f6bd740a4f45b8fbb02c0ac86f893848a6ce4d904995130698416e738c80b5bb39
-
SSDEEP
1572864:/USUrJTqn7O5rcf5YVI3Sp2gTWVCQ0oeU3lYjeghdzvRl45Fpa:/UzrJ2K4BYgoKVLxYKg5vw5Fpa
Score3/10 -
-
-
Target
Brotato.v1.0.1.3/Game/GodotWorkshopUtility.exe
-
Size
41.0MB
-
MD5
4b7b0808b51a52671f000fd8636683bb
-
SHA1
4a9958abf1aa06fcb34be4cceefd26b367c632bf
-
SHA256
aa828938193b796178b4de07624b480f2b753cadf7af20fe6d260aad5e3c45ac
-
SHA512
bbc27bc2402c6b0f65c5e8cc6de52dfdcec56d871780d87481a8cddebe83f8bb145cd9d4ae037b227c60126bed096d76ee3f8d4f98d30cbd7e7c115e11f0913a
-
SSDEEP
393216:sBb7kgsjLZVMrqUk5HCF+KajqeABsalatDeklP0/Bybuhhn7rGgTUpvvYevYnscP:WbjzbFAVSQt6x
Score1/10 -
-
-
Target
Brotato.v1.0.1.3/Game/steam_api64.dll
-
Size
403KB
-
MD5
e98e357c5712d35fcf1ae53c99cbc6a9
-
SHA1
78a4d5818965d4386eca0adcf00ee81788d271ec
-
SHA256
c269ef26736f907c637ba33f146a318d5e154824c47d3fc8937781ea8829dcc8
-
SHA512
a3de98def4cf9b1c7c97c0862342b96a3b9c809e8710bf9c265f3a419c009a79f3b2864ed32bd1f98461ac6079a36143bcfda6a3715098f66a89c37ae9e13fe3
-
SSDEEP
6144:cXdX/P531mK22HF7FZi7JwLBVH6LRXLhcR4W4zCRGqJUZnfsDnssTvYySbfCvRJ:6zIh7+LLwXOuZSGqJCiTAywfCZJ
Score1/10 -
-
-
Target
Brotato.v1.0.1.3/Game/steam_data.json
-
Size
157B
-
MD5
fc38c82a7c4552166de27e764d490b67
-
SHA1
6e97a8368037b44944dfec5ef6d16ebc5f10aba0
-
SHA256
af0ba7b029eae0f8cd5851ea58508d90f329599f9b5a68e3e0c8fe0c7da4146c
-
SHA512
54877b553996ca62a7fd27eddf62cbc255e65523146b943afe1ebda658e6b2bb0d412220aee78b566f1a0ecf47a29bdc2f8555c0f687ec264c2529d0b83221a4
Score3/10 -
-
-
Target
Brotato.v1.0.1.3/Game/steam_emu.ini
-
Size
2KB
-
MD5
035dfa316cb90542edda3c5265319b98
-
SHA1
8444ce6272520e0d3c66cce5e94b1470156ed47b
-
SHA256
dc56200a5b2070eabcc285f291237cf68c773bb5bfa87586d098019ea52596ab
-
SHA512
e84f48bc5163791f6611f07b5622ac32f7dad450ae93fc3c648aca8bcdbcac5845c40844e93cacf0fc143920119f002deac63ce755f1578239daef5cfbc5c077
Score1/10 -
-
-
Target
Brotato.v1.0.1.3/HOW TO RUN GAME!!.txt
-
Size
283B
-
MD5
cf1771cc1d6495d570cc6092583a0d64
-
SHA1
919718605707af6cb547c04db7f926a11ac2d1bb
-
SHA256
bd72aaeff7b6bd9f2892b668fa61c97a14748f24a106f3ed347da346a8e9ef93
-
SHA512
13ba19d5f858939a8f41445c79a14d30e4b2ce5dfb9d3d9089ec2ec1781c7eabb278ee72a4ff4a9687b62fbc9cfc4341776e8312245919f48c83d35a62410041
Score1/10 -
-
-
Target
Brotato.v1.0.1.3/STEAMUNLOCKED Free Steam Games Pre-installed for PC.url
-
Size
52B
-
MD5
92672216743fd0ad8799d25ec99e5096
-
SHA1
68103be0fa83db8a4a2efac6bb6169ce959a0290
-
SHA256
677d2e85447eea64fa541b8e8a9e92b41e20456360bef8642f898e7eb1b2f0db
-
SHA512
1ca286141902e64c4cac05fabc1ce0ef4d910582e720c8b38f3cf2799cadaab7cbc9d8fc925eff17e0d3280d5d074ebd856dc75d6cadbd95872cae14eddb7719
Score1/10 -
-
-
Target
Brotato.v1.0.1.3/_Redist/dotNetFx40_Full_setup.exe
-
Size
868KB
-
MD5
53406e9988306cbd4537677c5336aba4
-
SHA1
06becadb92a5fcca2529c0b93687c2a0c6d0d610
-
SHA256
fa1afff978325f8818ce3a559d67a58297d9154674de7fd8eb03656d93104425
-
SHA512
4f89da81b5a3800aa16ff33cc4a42dbb17d4c698a5e2983b88c32738decb57e3088a1da444ad0ec0d745c3c6b6b8b9b86d3f19909142f9e51f513748c0274a99
-
SSDEEP
24576:+tW4x8xAxCdUcyezFSjaBHFaNlsqK5/oh6iZf1LUXw/vxNI:d4x8xqCGexm8FCspg0iZf1LUXD
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
Brotato.v1.0.1.3/_Redist/dxwebsetup.exe
-
Size
281KB
-
MD5
fd6057b33e15a553ddc5d9873723ce8f
-
SHA1
f90efb623b5abea70af63c470daa8674444fb1df
-
SHA256
111aeddc6a6dbf64b28cb565aa12af9ee3cc0a56ce31e4da0068cf6b474c3288
-
SHA512
d894630c9a4bdb767e9f16d1b701acbdf011e721768ba0dc7a24e6d82a4d062a7ca253b1b334edba38c06187104351203a92c017838bdd9f13905cde30f7d94d
-
SSDEEP
6144:pWK8EGMUjp5cGQ3Mek1B3B9h8Ins3i8AEYBSawz1YSc:JGvjp5cj35kDB9hrs3zARBSaJSc
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-
-
-
Target
Brotato.v1.0.1.3/_Redist/oalinst.exe
-
Size
790KB
-
MD5
694f54bd227916b89fc3eb1db53f0685
-
SHA1
21fdc367291bbef14dac27925cae698d3928eead
-
SHA256
b8f39714d41e009f75efb183c37100f2cbabb71784bbd243be881ac5b42d86fd
-
SHA512
55bc0de75a7f27f11eb8f4ee8c9934dfe1acd044d8b7b2151c506bdcbead3ab179df7023f699c9139c77541bbc4b1c0657e93c34a6bc4309b665c6cb7636a7e5
-
SSDEEP
12288:0s1yfEcpPzdv+t4cRIy3ze3SUN0PXGTjiqRy2p3kwzjGHTkV:NwfLrvi4cRIyDe3SUNaXy+WypoGHgV
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
-
-
Target
Brotato.v1.0.1.3/_Redist/vcredist_2015-2019_x64.exe
-
Size
14.3MB
-
MD5
f0248d477e74687c5619ae16498b13d4
-
SHA1
9ed4b091148c9b53f66b3f2c69be7e60e74c486a
-
SHA256
b6c82087a2c443db859fdbeaae7f46244d06c3f2a7f71c35e50358066253de52
-
SHA512
0c373b06ffe84f3e803831e90f22d7d73304e47a47839db614f63399ff1b7fcf33153bf3d23998877c96d2a75e316291a219fdd12358ca48928526284b802591
-
SSDEEP
393216:q5lptVYmfr7yBG/4WoI+j6LTinXKSf0fzTDv8:q7pttD7yBG/uljIinXj0fQ
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
-
-
Target
Brotato.v1.0.1.3/_Redist/vcredist_2015-2019_x86.exe
-
Size
13.7MB
-
MD5
de34b1c517e0463602624bbc8294c08d
-
SHA1
5ce7923ffea712468c05e7ac376dd9c29ea9f6be
-
SHA256
ac96016f1511ae3eb5ec9de04551146fe351b7f97858dcd67163912e2302f5d6
-
SHA512
114bca1ecd17e419ad617a1a4341e607250bcb02626cdc0670eb60be734bbad1f3c84e38f077af9a32a6b1607b8ce6e4b3641c0faefaa779c0fec0d3ac022dac
-
SSDEEP
393216:/d/FlptVYmfr7yBG/4JU4TRjtjUMy4i6kgsY7i:/1PpttD7yBG/QHTJtYMyke9
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
-
-
Target
Brotato.v1.0.1.3/_Redist/vcredist_x64.exe
-
Size
5.5MB
-
MD5
630d75210b325a280c3352f879297ed5
-
SHA1
b330b760a8f16d5a31c2dc815627f5eb40861008
-
SHA256
b06546ddc8ca1e3d532f3f2593e88a6f49e81b66a9c2051d58508cc97b6a2023
-
SHA512
b6e107fa34764d336c9b59802c858845df9f8661a1beb41436fd638a044580557921e69883ed32737f853e203f0083358f642f3efe0a80fae7932c5e6137331f
-
SSDEEP
98304:EuLgywiNHBeSLxYK/bxE3q/BlZkWMGPQflVJ/EK1sLyzs2T2Q1mOjq4/:V7wqheSVYK/bua/BlWWnuVhsus8nm+qi
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
Brotato.v1.0.1.3/_Redist/vcredist_x86.exe
-
Size
4.8MB
-
MD5
b88228d5fef4b6dc019d69d4471f23ec
-
SHA1
372d9c1670343d3fb252209ba210d4dc4d67d358
-
SHA256
8162b2d665ca52884507ede19549e99939ce4ea4a638c537fa653539819138c8
-
SHA512
cdd218d211a687dde519719553748f3fb36d4ac618670986a6dadb4c45b34a9c6262ba7bab243a242f91d867b041721f22330170a74d4d0b2c354aec999dbff8
-
SSDEEP
98304:RuLgywiN1ah6HcG0UJrN7SDgndrHZDMeaNNjt0CKKBgY2r71pZ/APaOR72HgQo0z:I7wq1W6HqULS8djZDTaNNeCKVP5ORsg0
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
Brotato.v1.0.1.3/_Redist/xnafx40_redist.msi
-
Size
6.7MB
-
MD5
97c2eebb30c5a88c68c8f24f37183f1d
-
SHA1
49efdc29f65fc8263c196338552c7009fc96c5de
-
SHA256
e6c41d692ebcba854dad4b1c52bb7ddd05926bad3105595d6596b8bab01c25e7
-
SHA512
c9d1017b274ceb1b4ee624cf7e628787c32a727c64f715fbce1f1ae929d9114f8fe1291e34583cec615619b0128c01206b07efc878e7a5c57b792453f73fd0da
-
SSDEEP
98304:wynfL329J1XswfXO6wiBB+4RZg6aENaCZAU5PMO0MntfERyJGH2YPq/:wYD3C1XXfzH+4cLHU5PM/Mnt+YGlq
Score6/10-
Blocklisted process makes network request
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-