Overview

overview

7

Static

static

3

LomebuGame.rar

windows7-x64

3

LomebuGame.rar

windows10-2004-x64

3

bomelugame...me.exe

windows7-x64

7

bomelugame...me.exe

windows10-2004-x64

7

$PLUGINSDI...er.dll

windows7-x64

1

$PLUGINSDI...er.dll

windows10-2004-x64

1

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDIR/app-64.7z

windows7-x64

3

$PLUGINSDIR/app-64.7z

windows10-2004-x64

7

LICENSE.electron.txt

windows7-x64

1

LICENSE.electron.txt

windows10-2004-x64

1

LICENSES.c...m.html

windows7-x64

1

LICENSES.c...m.html

windows10-2004-x64

1

LomebuGame.exe

windows7-x64

1

LomebuGame.exe

windows10-2004-x64

7

chrome_100...nt.pak

windows7-x64

3

chrome_100...nt.pak

windows10-2004-x64

3

chrome_200...nt.pak

windows7-x64

3

chrome_200...nt.pak

windows10-2004-x64

3

d3dcompiler_47.dll

windows10-2004-x64

1

ffmpeg.dll

windows7-x64

1

ffmpeg.dll

windows10-2004-x64

1

icudtl.dat

windows7-x64

3

icudtl.dat

windows10-2004-x64

3

libEGL.dll

windows7-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows7-x64

1

Resubmissions

27/04/2024, 19:36

240427-ybnfasfc9t7

27/04/2024, 19:12

240427-xwpy7afb2v7

27/04/2024, 19:05

240427-xrrl8afa6s

27/04/2024, 18:20

240427-wy4ppaed6x7

Sharing

Copy URL Twitter E-mail

General

  • Target
    LomebuGame.rar
  • Size 78.9MB
  • Sample240427-ybnfasfc9t
  • SHA256 05451b195a176fa75fb7a8de600068e1f08b2a0b5cef42eef8439ec28ed26a59
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
discovery

Malware Config

Targets

    • Target
      LomebuGame.rar
    • Size 78.9MB
    • SHA256 05451b195a176fa75fb7a8de600068e1f08b2a0b5cef42eef8439ec28ed26a59
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral1behavioral2
    • Target
      bomelugame/LomebuGame.exe
    • Size 78.8MB
    • SHA256 c33a96f700dae9d6c4535ac35694a38659ffe364eee052687c8a1232be6e625f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    discovery

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/SpiderBanner.dll
    • Size 9KB
    • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral5behavioral6
    • Target
      $PLUGINSDIR/StdUtils.dll
    • Size 100KB
    • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral7behavioral8
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral10behavioral9
    • Target
      $PLUGINSDIR/WinShell.dll
    • Size 3KB
    • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
    • MD5 SHA1 SHA512
    Score
    3/10
    behavioral11behavioral12
    • Target
      $PLUGINSDIR/app-64.7z
    • Size 78.3MB
    • SHA256 f942960cdcd442304e8fe57e42769e2d532b3b77955fa16b6c376fbc2f3c1fac
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral13behavioral14
    • Target
      LICENSE.electron.txt
    • Size 1KB
    • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral15behavioral16
    • Target
      LICENSES.chromium.html
    • Size 7.9MB
    • SHA256 c2656201ac86438d062673771e33e44d6d5e97670c3160e0de1cb0bd5fbbae9b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral17behavioral18
    • Target
      LomebuGame.exe
    • Size 152.7MB
    • SHA256 cde6587e39b95f9debf34ce7c2af0932c8711597fc81609f4d300e63b2fe39dd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral19behavioral20
    • Target
      chrome_100_percent.pak
    • Size 124KB
    • SHA256 ccbca246b9a93fa8d4f01a01345e7537511c590e4a8efd5777b1596d10923b4b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral21behavioral22
    • Target
      chrome_200_percent.pak
    • Size 173KB
    • SHA256 c91abf556e55c29d1ea9f560bb17cc3489cb67a5d0c7a22b58485f5f2fbcf25c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral23behavioral24
    • Target
      d3dcompiler_47.dll
    • Size 4.7MB
    • SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral25
    • Target
      ffmpeg.dll
    • Size 2.7MB
    • SHA256 65cc75329d17ec264e7a2db571ea55f918394241445ea64569a56c75d0cfdc60
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral26behavioral27
    • Target
      icudtl.dat
    • Size 10.1MB
    • SHA256 9dfbe0dad5c7021cfe8df7f52458c422cbc5be9e16ff33ec90665bb1e3f182de
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral28behavioral29
    • Target
      libEGL.dll
    • Size 470KB
    • SHA256 897ceb95fb164640ddd2426673997b5f6fc2619fd916b038b575a70a0682a706
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral30behavioral31
    • Target
      libGLESv2.dll
    • Size 7.3MB
    • SHA256 bcb3a3d2fca3c33fa3d1d5dc976aa913cdc8001df8e64c2cd3d2c545245141bf
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks