pysilon | d82bc0247448d4b212ac0ae092d782b0acf05434f006e44b478daa0757e1f81b

Sharing

Copy URL Twitter E-mail

General

Target
8ai00d.rar
Size 107.8MB
Sample240405-y2axwsdb27
SHA256 d82bc0247448d4b212ac0ae092d782b0acf05434f006e44b478daa0757e1f81b
MD5 5892e054c660b277153bcdf1f600fa79
SHA1 352b3addf25c4af4a3cb325ec2624269c512e258
SHA512 78503a44b84822b0e19943c9e272fcebaeeeb14e4509f4c970a15208b1590200e04aed794ccc9899f7f155ee26ae4aa074799f70798008775843e63bb8cbc645
SSDEEP 3145728:sKXs4h1ZK98/vFWdtQKBPMYP6bwnZQLYV5lmH:sKc4h1+8nIHQorLZRVXmH
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  Gamesense.pub Crack/Gamesense.pub Crack/Gamesense.pub Crack/Data/Managed/Assembly-Cpp-firstpass.dll
- Size 4KB
- SHA256 9519773ab7f4914d61fe2099ebcf2834996584bde4086160725caf7d17c69ab9
- MD5 2b7f44b78d2770e302f058888037984f
- SHA1 670f93498e04e40a812fd7d8b57a930980dde0f3
- SHA512 9426dccef3f39c09b7b57ed32ef0352589201d3b2932ac77f53ac545315f9c779e9f66609a4ce5a40906efa5049c25205a578795fc762124d2b685318596f9cc
- MD5 SHA1 SHA512
Score

1^/10
behavioral1 behavioral2
- Target
  Gamesense.pub Crack/Gamesense.pub Crack/Gamesense.pub Crack/Data/Managed/Assembly-Cpp.dll
- Size 2.2MB
- SHA256 f3872adb0c9f480c596215de4642ee4146519471d11c49a32c98eea12be7692a
- MD5 bcaa1a508f71722afa0cac481bd55d57
- SHA1 55e14ef6452737bde6ac6cec730da47618614576
- SHA512 ba9ac7845a0397056aa734b52562e2c9e6590c4db01510ecd4712c46cf119d6f64f3b0bb6c1fc6c0ddfee6dd5f7fa010fa1011cd3105ff58e90eba7f888941ba
- SSDEEP 24576:3x88VBx+0d8VYNTmsZMEyvIf493FAVRoxu9nTf2f:3x88zixvIpoCf2f
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  Gamesense.pub Crack/Gamesense.pub Crack/Gamesense.pub Crack/Data/Managed/Client.Configuration.dll
- Size 42KB
- SHA256 072b1a1c48998733a2d52e1ac53e2d8bd5c618eb4dd17638347a4d9494b08dd6
- MD5 a8841ca20b0ef176cbe7e88ea7401cc8
- SHA1 8e4a9f7fef53e53bd062a6add7e43d055ff9e485
- SHA512 ffba27866803a586d0963883a27da07731de1feb497189d90ccf3f9b6bc759b71ebe9a4a4428f17e8910e9813e6aada7c5a0f2cc3c43179b8e7070b352e55f6c
- SSDEEP 384:HzC2yuMNMMZJN56g8mKo/hjp0r4ourMVSzciDqnjdiaFg9/Ses93HE7LDaXTSv/+:H/yP1Sm3ScrMdWgdVl93kZAarx2ZJS5
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6
- Target
  Gamesense.pub Crack/Gamesense.pub Crack/Gamesense.pub Crack/Data/Managed/Mono.Security.dll
- Size 303KB
- SHA256 8c47b23389f9eede068683ed8b64b5a466f986499112983290778b30accfd1ba
- MD5 f7acab1e09deaa11c9bdd0d723363016
- SHA1 e940058cff5dc584c11dc6e4b111e85a3f6ca06e
- SHA512 ec73a3c841358113a33829b50ea14ec860ccaee883c327515b369d08e3979643466fb57dfd550c62eb1468b6c92c0cb03ffb07505ec77e62bb83fafcd51b2894
- SSDEEP 6144:Buca+sTOwf+31OE5FXNywY1URfxArXj5of:9Ui9kgxY
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  Gamesense.pub Crack/Gamesense.pub Crack/Gamesense.pub Crack/Data/Managed/Newtonsoft.Json.dll
- Size 670KB
- SHA256 87fa9a30e8406b0ccee1ac7f44b529228b4d76f7a3549b1a3817fdda0f5b5b2a
- MD5 95fabcecebe498f780caaaa33483bb2f
- SHA1 c994bc5f781df8fcc8aed36f7858c9e647942000
- SHA512 9b4ada10114c8c5c6d99aab1832682ec8bb9c9f95c0310648b1defba2873e732af70cc6f0a2c1abc23f2170073408120020feaf2b08441f137d4f590572d340d
- SSDEEP 12288:judT4rkEdatCiMGYBsq85XrWIhf8vbTB8jx6nws:j84rddkCTGN7H0vXB8jxGws
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral9
- Target
  Gamesense.pub Crack/Gamesense.pub Crack/Gamesense.pub Crack/Data/Managed/antivacban.dll
- Size 3.7MB
- SHA256 efa9830957224e9841f99312e3144f8397c6319cde635abbde9fb11860b67a6c
- MD5 f1332aa6761e05696fbf67a94713124f
- SHA1 243a04d90a736dd14aa38ab25f1025618382150a
- SHA512 9837fb2180b3837cdb68b6c87e9c20a96329892a90d800944fb64a14cba314578619e87fda2da1f55bf7bcfa5b736d204cd84483aa1e929b0e5f4b9cda048add
- SSDEEP 49152:yOgvuIMGtZbVLbg2XfkanY8XCGvH8KztzvA:3IMGtZhLjfhnY
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  Gamesense.pub Crack/Gamesense.pub Crack/Gamesense.pub Crack/Data/Managed/vacbypass.dll
- Size 83KB
- SHA256 994be039eb23da7b0c14fc2fa2c09b3ca2a73bb330e840275ab8275063716f0e
- MD5 92e14598f1f886b75f0a02bf934350b3
- SHA1 7c8022fff30a45ba04940ebb7ef924a9146056e3
- SHA512 e49af894dc52c21bb02040989cfa1907ad0b021d13a56d8f854df591ec594a2c2b8f1270341c28173a866bb0498625d116d87bddc5b0b872d8a87a4716dd162a
- SSDEEP 1536:1DzF+czO/mQxvvn5W4zyH04rU5SSn5ioLlcv9rK:1CFo4zy1y2RK
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  Gamesense.pub Crack/Gamesense.pub Crack/Gamesense.pub Crack/Data/cfg/crash-handler.dll
- Size 24KB
- SHA256 60143c64ef0082a69938e25540877beeee777dab4a58f2687881ae771c6b5461
- MD5 38e7a495a8411357c5740112bfa51b43
- SHA1 fdc34ba1288ab6eb6249b52a714a5e84ceea18a5
- SHA512 4329765381cd4abbcd464d707ff45642e13f2cc845eb9f297363f57dd5b1de9b964070ad64d5862266347387304f6cc09de332842928adcae8e43d26cfd7e094
- SSDEEP 768:jksSBX1GOJhqIvhjkehVYEpYiTPx3kmX72l:jKMOJhqIvhjkehVh7TPx3kmX6l
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  Gamesense.pub Crack/Gamesense.pub Crack/Gamesense.pub Crack/Gamesense.exe
- Size 107.3MB
- SHA256 b85a5df529065128dcf884a3313fcf91abcc1a46061befe1927a7212f013e12a
- MD5 a8c22ea2a9351b9f6cb65cfd5b427e6f
- SHA1 41a3cce2b601b4c8b99e393dcc65762601f58bc9
- SHA512 27a0d5f1e5f4da7ce1e99a50db37eec57878f492cd40caf13bd1ab71bd2a63618a5e7c7aefce18a2b5d94880320cc4e6526413c621652a4b1b014a6dc50b463e
- SSDEEP 3145728:7cdZtiS6xjKcBa6R2qHO5iI8QVnG0iWMsbB2Ox08uCW9:OUSWNa6HHCiwticBmk
- MD5 SHA1 SHA512 SSDEEP
Score

9^/10

evasion persistence pyinstaller
- Enumerates VirtualBox DLL files
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral17 behavioral18

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Modify Registry

T1112

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

File and Directory Discovery

T1083

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Enumerates VirtualBox DLL files

Sets file to hidden

Executes dropped EXE

Loads dropped DLL

Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18