Overview

overview

10

Static

static

10

Content.Wa...er.dll

windows7-x64

1

Content.Wa...er.dll

windows10-2004-x64

1

Content.Wa...ng.exe

windows7-x64

1

Content.Wa...ng.exe

windows10-2004-x64

1

Content.Wa...er.dll

windows7-x64

1

Content.Wa...er.dll

windows10-2004-x64

1

Content.Wa...ss.dll

windows7-x64

1

Content.Wa...ss.dll

windows10-2004-x64

1

Content.Wa...rp.dll

windows7-x64

1

Content.Wa...rp.dll

windows10-2004-x64

1

Content.Wa...rd.dll

windows7-x64

1

Content.Wa...rd.dll

windows10-2004-x64

1

Content.Wa.../H.dll

windows7-x64

1

Content.Wa.../H.dll

windows10-2004-x64

1

Content.Wa...me.dll

windows7-x64

1

Content.Wa...me.dll

windows10-2004-x64

1

Content.Wa...me.dll

windows7-x64

1

Content.Wa...me.dll

windows10-2004-x64

1

Content.Wa...it.dll

windows7-x64

1

Content.Wa...it.dll

windows10-2004-x64

1

Content.Wa...ty.dll

windows7-x64

1

Content.Wa...ty.dll

windows10-2004-x64

1

Content.Wa...on.dll

windows7-x64

1

Content.Wa...on.dll

windows10-2004-x64

1

Content.Wa...3D.dll

windows7-x64

1

Content.Wa...3D.dll

windows10-2004-x64

1

Content.Wa...at.dll

windows7-x64

1

Content.Wa...at.dll

windows10-2004-x64

1

Content.Wa...me.dll

windows7-x64

1

Content.Wa...me.dll

windows10-2004-x64

1

Content.Wa.../P.dll

windows7-x64

1

Content.Wa.../P.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Content.Warning.v1.9.b.Multiplayer.zip

  • Size

    496.7MB

  • Sample

    240419-w2gdkaca24

  • MD5

    dd5e3f2c32b8b9d44b4f6f72e2b47cda

  • SHA1

    1061017cf0e343f3904ee8f0c39d380f2a253bec

  • SHA256

    c1fefde94e58e05e03863b7627d2334e3c7036fbbe124f59533059ecc03b61a5

  • SHA512

    c9b2ffdbd187aa19fdc2fdc8f33c367ec7aeb6f0adc9b1dba8ae0f8a8b378f0b737e133b958f583669e72fc989dc836a1099dd875f1813d9ffb41d3bfa7b82b4

  • SSDEEP

    12582912:zbA5If8YN2TEzCWqgkxVsL106lZIacX8WnV/Fl53UJ9PeVh/YkOXCievNu:Q5IfLN2xWcsLPGxnVV3CPeX/YkOXCiGu

Score
10/10
blackguard

Malware Config

Targets

    • Target

      Content.Warning.v1.9.b.Multiplayer/Content.Warning.v1.9.b.Multiplayer/BepInEx/core/BepInEx.Preloader.dll

    • Size

      42KB

    • MD5

      24e30ee42802145447b474613f66c376

    • SHA1

      096810482069885b56fa430f7dfbcb77506f086d

    • SHA256

      9a7597d16bfc1d2564c6c1168fb077443155946b66f2041e1d1cf9548de210b2

    • SHA512

      3cbd64478650c1093e9c778408291d9184a84b5190e2d540060faf112b68feffa2d90a2fb97e82f586b40fd85ff60c77c780adf6f867a591a3c068be3718c0bd

    • SSDEEP

      384:2MEBj+RTLt5m7jJQNqgXnz2pxZqf3mjE7EP/QvlGM/3G3kDH0nMxbdgRwe5Lybru:vRwJxMejEAPMvGjgbVoLybr6csQp4

    Score
    1/10
    behavioral1behavioral2

    • Target

      Content.Warning.v1.9.b.Multiplayer/Content.Warning.v1.9.b.Multiplayer/Content Warning.exe

    • Size

      651KB

    • MD5

      69fdbd85eed8d2e7c322f779acac72e8

    • SHA1

      90623babfa8b37b108e190e20b0639014a9e203e

    • SHA256

      376ce3a54e42c82f2511ca1c3a4ce82fc975e46e19ec2f2cdc9a492f133eff1b

    • SHA512

      5877f4c5301c9ac526f145b3fa877d8203c1da5dc86d6ab60050de647791164d7a33500bd1813ab531fb1e95076f534532c034722840bb4c0275aec427578fcd

    • SSDEEP

      12288:l/744aOD87GtvpZVD5Nd8OWEwwFYnxbOMvChvGgszmjmWfsmPio:V9aO1pZl5Nd8OWEwwFYnxbOMvChegszK

    Score
    1/10
    behavioral3behavioral4

    • Target

      Content.Warning.v1.9.b.Multiplayer/Content.Warning.v1.9.b.Multiplayer/Content Warning_Data/Managed/Ashley.MeshSplitter.dll

    • Size

      4KB

    • MD5

      1f7ba84fb8b898e507ebcd55d6b74fe8

    • SHA1

      23552e20e413e1f86f422d1e4afc42a85d5a711c

    • SHA256

      b52e35d31c80a92a23673f710b827554aa17a2264a7dfc03d165b720a476c2da

    • SHA512

      b4e0ab9b831855b90c96800f29129b465e48950498e8c5f6e6ffa878130541b1d3112b77c789ad7854bf8c8aea3771f8f2081c3fa0399c6182c921bb1121a46e

    • SSDEEP

      48:6c+l4NCgsLX2l2mq+IM81qYJQTZx/0KhkxkZ3iLr1xatlul9VWq:a4ArD2kmpeITD00kxkViX1xaGfV

    Score
    1/10
    behavioral5behavioral6

    • Target

      Content.Warning.v1.9.b.Multiplayer/Content.Warning.v1.9.b.Multiplayer/Content Warning_Data/Managed/Assembly-CSharp-firstpass.dll

    • Size

      65KB

    • MD5

      7623c414c4f43e3e17aa4bb4d49e07a5

    • SHA1

      e97208c3f91a3f47cbc8fbad95b0b8694bbc8092

    • SHA256

      65ec518d3078939548497d1c38602a5f0af99233dd4d981fb824d923841f1f88

    • SHA512

      859e2010abcb73f14a686afbde521acba2f82668d733d106fd75430854e84689725ea44d75c39f14188949b20907f0b30b572bec01f5d9eda45a8e2c9bce7968

    • SSDEEP

      1536:1kJ0+xNKNZUuryjPtmJR++FZg/dr7eOzgYlqkBeyvv:sCZby5OFZUr5gYlB

    Score
    1/10
    behavioral7behavioral8

    • Target

      Content.Warning.v1.9.b.Multiplayer/Content.Warning.v1.9.b.Multiplayer/Content Warning_Data/Managed/Assembly-CSharp.dll

    • Size

      959KB

    • MD5

      56bf66783021b63d8f080a247efa1b2e

    • SHA1

      f57d58d3053d8156d54870a60e5c7d5f18f27a58

    • SHA256

      dc04c28baabd71cc1b5e03e5411a8b089e5d3bbb5a5173eff9c7a74699199057

    • SHA512

      c2065546059962c17d321c8b5c273ac66a09184e11ab4bc59fb14c419c5676f054b0718233918c32d44086dd5a8afce65b522fea96f5a63e3e7c9468606497bf

    • SSDEEP

      24576:VhZ/T/hTyE+W6yO3UZ/7QbYdZoj2O70w:1hWE9bGb

    Score
    1/10
    behavioral10behavioral9

    • Target

      Content.Warning.v1.9.b.Multiplayer/Content.Warning.v1.9.b.Multiplayer/Content Warning_Data/Managed/Discord.dll

    • Size

      97KB

    • MD5

      319b28ed5343ecc9eeebde140152d760

    • SHA1

      01752daa76adf6eba596663ac47a1be12547e3c1

    • SHA256

      60fa3475fe4474e422b5fea91c3c460c9fcdcfbaaa3ce01d1372c6d2590a7103

    • SHA512

      5a6cb8e93b6871057b1fdbb31571a0e8e492713b241834627b63ca65821b9b6fa9ca1f9fc20d2acbe9f04ecf2e817d9a768bc7ac1141ca919a3a345c5bb3981c

    • SSDEEP

      1536:FG2uedJxXiAWCUawVxJHtpQ/lF3lky/j2l8ylw5hd/9Zx2PygRCJkwY5h:A2cawVxJnq3lkMjBy+3N/xJk7h

    Score
    1/10
    behavioral11behavioral12

    • Target

      Content.Warning.v1.9.b.Multiplayer/Content.Warning.v1.9.b.Multiplayer/Content Warning_Data/Managed/HBAO.Demo.Universal.Runtime.dll

    • Size

      6KB

    • MD5

      8c5d466b518b0ceb6d57f2c91188603e

    • SHA1

      1f87d8e2f98d6239b69f627a55444564923650c2

    • SHA256

      b1abf2edbd3991dc185d528445f3e48ab33c0c2989c59b959095f929ed615997

    • SHA512

      969dd11be33005107f600f8147572adb8b344b4400829c1dcb1691b765baf60aed388d20983963c16cf67593d564383ff775fa0b111c6d266e66f2e916904aa3

    • SSDEEP

      96:AoHSXDbgp0Gi3XA2tLiOfWpIESyjNdRLkxkVX/uruhtY:+0p0GintVWIESeNQud/ue

    Score
    1/10
    behavioral13behavioral14

    • Target

      Content.Warning.v1.9.b.Multiplayer/Content.Warning.v1.9.b.Multiplayer/Content Warning_Data/Managed/HBAO.Runtime.dll

    • Size

      39KB

    • MD5

      1e7a5b784e83d42029a439e9ef3723c8

    • SHA1

      a350e93e22e26f8a49e56083ff48827be5e80045

    • SHA256

      36746dd47ff4177a679f107916f5a2b81673bf65514609f78e237f1a3f248934

    • SHA512

      697ca33cd0401d3afae97c8013c1c56d7bba3903bf44fe885c3e43fdf9495435d8e6c6cdfb1982c228f60d8c6251369d916677f6db221eebe6f73a95feec5111

    • SSDEEP

      768:3cn6O2p3tP3uqTx8y4O5yS//Qjzh4dYIntLQWsXlWg5YDKN:3M6tp3tP3VTx8yXizmSIxQWsVbYk

    Score
    1/10
    behavioral15behavioral16

    • Target

      Content.Warning.v1.9.b.Multiplayer/Content.Warning.v1.9.b.Multiplayer/Content Warning_Data/Managed/HBAO.Universal.Runtime.dll

    • Size

      41KB

    • MD5

      56373e1df5f32ec7962a9371cd418f00

    • SHA1

      0069e0729d4157e40ca48be81facca98188e54f8

    • SHA256

      b9db582b08f109ca1a5c3037c10a9915e95c5911536ea343794948aaae565aa1

    • SHA512

      9dfb2f0491983bff8a06b2f62bed24ab57e394842573072aa9eb98172e8d0fe9fe44eb7f8eab28a0e8708e4638b0de4b14b6d203932ab3ebaf473cdff17fab16

    • SSDEEP

      768:j+NsQqKEtIsiKjWGHzf5n2OBAvLIQ0T/5NpMefwREtx5XmkOs:WfGdBeLj0T/5NpMxRE3

    Score
    1/10
    behavioral17behavioral18

    • Target

      Content.Warning.v1.9.b.Multiplayer/Content.Warning.v1.9.b.Multiplayer/Content Warning_Data/Managed/MeshSplit.dll

    • Size

      20KB

    • MD5

      69001639e30fe2bfaba35916017e388f

    • SHA1

      ea65696c0dd18b861486f33f543512525b1722ed

    • SHA256

      ee9d808ca951e113b188b63ab24f95159652354189dbd54584a70c5e6a70212c

    • SHA512

      9cb9efe86bbe8e3d30bbcede808bae5e6706283ff446f3bd1486b631b272185ac71e68d2921ebcc8040f11052af0cded6fe4e5e6f4d259d75b8d5091ffe4adbe

    • SSDEEP

      384:0T4MWNS6ecwBVt6MX/pw4aC5b0Tks0v1g9yIQHqj4:GvtVQIq4ambs0yQKj4

    Score
    1/10
    behavioral19behavioral20

    • Target

      Content.Warning.v1.9.b.Multiplayer/Content.Warning.v1.9.b.Multiplayer/Content Warning_Data/Managed/Mono.Security.dll

    • Size

      235KB

    • MD5

      1b0505dd33bf159c0760c185112fb6dc

    • SHA1

      814fe64509fde64d7c27d72526084c4c120e807d

    • SHA256

      f88d997d5d72856a7f065d732cbda261c372d98d2487c25397da4ec740fa6719

    • SHA512

      ca454e7cd59dee17ed7569558f124d42dc197739cbf15575fa6ba2919810c4c2d3e925b7a3161cdc51869972465e30b7847bb2a3bb73eb3d32c35834dc548b22

    • SSDEEP

      6144:1UjTQ70cnf8MoVRxS9iJdBF119RJXG2yA+Q:EEiH119RJXP3

    Score
    1/10
    behavioral21behavioral22

    • Target

      Content.Warning.v1.9.b.Multiplayer/Content.Warning.v1.9.b.Multiplayer/Content Warning_Data/Managed/Newtonsoft.Json.dll

    • Size

      675KB

    • MD5

      d751086b7423fd5580b5e909b06217b9

    • SHA1

      c1707b17df636cd6d4a804361fc6ead4ef9db5cf

    • SHA256

      a56146202232958f46bd6a28b5a7da166aea123ee0d646735a46e5c341dfbf1f

    • SHA512

      86655b59ad62664a35a30807cce7dc2c2be8f1ece235f35dc9031873d255dc6f13a22b55d0386becbe927f007a14a6d936ba3861d1103af8f2fe16aa0afebe11

    • SSDEEP

      12288:aBNYm5IWx4AhnIqjCfP4bYaRLL0eglBmjV+0kRqQCB0jEIF:aBum5I24A5LYa5g1ByNyq5B0jzF

    Score
    1/10
    behavioral23behavioral24

    • Target

      Content.Warning.v1.9.b.Multiplayer/Content.Warning.v1.9.b.Multiplayer/Content Warning_Data/Managed/Photon3Unity3D.dll

    • Size

      232KB

    • MD5

      269369f112ad867a4770ae33e3b32779

    • SHA1

      bdb1e231ab9cbe6ec4fb815a9d8c5d6aa50a7c74

    • SHA256

      0367bdf2a7c5a20a1ae24c2e60906f2dfeabeb6ee40b4390db78df75f8b8a330

    • SHA512

      ed07ed6e6a91e408e2d34e9fdb598b9a843684afdd72e7c87ea9f80bf86481584d727ea5e94747423b80bf49be4d7047a50c8df11da3f2a271ee8063b8e9f405

    • SSDEEP

      3072:Uk/b0H1D2Q4/tqIS8iSA34HvrE8kA42gonxiK60sCeJDnfZGOE2y:U8be1D+aSAovY8kA4on9M3

    Score
    1/10
    behavioral25behavioral26

    • Target

      Content.Warning.v1.9.b.Multiplayer/Content.Warning.v1.9.b.Multiplayer/Content Warning_Data/Managed/PhotonChat.dll

    • Size

      34KB

    • MD5

      05108e9145db557c3d7b26f585793bd0

    • SHA1

      5c749ea013ff0582e284dd05e4a6822ac7d7e859

    • SHA256

      b89dfbc9f6d3d3b6a7cbac37c571aa7468a89697004b6fef2b56bf1b2c7a1ffc

    • SHA512

      eda8136239d13c746483707d699de360853e499d22f05f15ffedd5b0655032984e9615f4e17f1577eed31698b3ba585c4e28f3c61d55f36f1c7aa8772a7a3698

    • SSDEEP

      768:sJhr6Q9dvc7eR4YZN6SjEFJV8OA7v7GZSoimovJthF:KbU7g4eDjbgSoimoxbF

    Score
    1/10
    behavioral27behavioral28

    • Target

      Content.Warning.v1.9.b.Multiplayer/Content.Warning.v1.9.b.Multiplayer/Content Warning_Data/Managed/PhotonRealtime.dll

    • Size

      107KB

    • MD5

      00c293d286d984f87f4d937ba622d42d

    • SHA1

      0d658619850028ec7287ce842c362b36a30abc75

    • SHA256

      87c4821f1bb761528ec1ac86247aa9dd8d9477b39afc2cd5d0dca0ca222ab35c

    • SHA512

      2de4f62d1ade6d7b85d1b0d271f1d0f9aafca6b1f4dba2eff97c175523545a2146425516ea1e1e86ba37442a53ac2d34b27d05db6962bdcccdbb9ba35efafb3d

    • SSDEEP

      3072:sVB28r8wClkjlE8snptYqygUIdRAg6b9ZLrbEFvBrKIoR:sVB28r8wClkpE8snpqqPUIdRADb9ZzEK

    Score
    1/10
    behavioral29behavioral30

    • Target

      Content.Warning.v1.9.b.Multiplayer/Content.Warning.v1.9.b.Multiplayer/Content Warning_Data/Managed/PhotonUnityNetworking.Utilities.dll

    • Size

      60KB

    • MD5

      e57a4a10787df87d4df46756042b0e7a

    • SHA1

      7de782510e77ab2af3b7c36e9dce86a7d07632fe

    • SHA256

      f8a227a7369ed950511f12094534c8f2c0bfd7ab5b0dd85dacd8e278c953df4b

    • SHA512

      6b0298d257d1fcfc3639878d9c2b7d9c7418d58467ecd5c26a3e782ac50ab409727d2ca74cf4d8036908cf6719e44d497a1608ebc78530035c48aeeb4cb956db

    • SSDEEP

      768:r8y9ampUpw0JZ5JDZLRxicvMtzGhhUhx9ftWFfAKV1CN:rBxpUpbvDZGRChKhxtUE

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks