Overview

overview

7

Static

static

3

GAMDIE - F...es.url

windows7-x64

1

GAMDIE - F...es.url

windows10-2004-x64

1

Pizza Towe...er.exe

windows7-x64

1

Pizza Towe...er.exe

windows10-2004-x64

1

Pizza Towe...64.dll

windows7-x64

1

Pizza Towe...64.dll

windows10-2004-x64

1

Pizza Towe...er.dll

windows7-x64

1

Pizza Towe...er.dll

windows10-2004-x64

1

Pizza Tower/fmod.dll

windows7-x64

1

Pizza Tower/fmod.dll

windows10-2004-x64

1

Pizza Towe...io.dll

windows7-x64

1

Pizza Towe...io.dll

windows10-2004-x64

1

Pizza Towe...64.dll

windows7-x64

1

Pizza Towe...64.dll

windows10-2004-x64

1

Pizza Towe...64.dll

windows7-x64

1

Pizza Towe...64.dll

windows10-2004-x64

1

_Redist/do...up.exe

windows7-x64

7

_Redist/do...up.exe

windows10-2004-x64

7

_Redist/dx...up.exe

windows7-x64

7

_Redist/dx...up.exe

windows10-2004-x64

7

_Redist/oalinst.exe

windows7-x64

7

_Redist/oalinst.exe

windows10-2004-x64

6

_Redist/vc...64.exe

windows7-x64

7

_Redist/vc...64.exe

windows10-2004-x64

7

_Redist/vc...86.exe

windows7-x64

7

_Redist/vc...86.exe

windows10-2004-x64

7

_Redist/vc...64.exe

windows7-x64

7

_Redist/vc...64.exe

windows10-2004-x64

7

_Redist/vc...86.exe

windows7-x64

7

_Redist/vc...86.exe

windows10-2004-x64

7

_Redist/xn...st.msi

windows7-x64

6

_Redist/xn...st.msi

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Pizza.Tower.noise update.zip

  • Size

    269.3MB

  • Sample

    240428-wj7g2ade61

  • MD5

    e536301a5625ae1dae741edc36aaa661

  • SHA1

    f9dca72268a0e6392a520fd59f1a895018b73443

  • SHA256

    33d0e5e173f8b94023257786775091c96b949eb106e41f728d7077e54bc7aed9

  • SHA512

    3f0346235038456b9bc3b8dca37046380ed18c55c147690001c1966ed2af95b7e816fe31191e7d9320ac510b62c0d110d8306d306e9921134f1b6fd9ca965e40

  • SSDEEP

    6291456:Z26kFzgIE4ljDy3WFla0N053a/MeVdARal3VD5RiApdoI8avorScKnt9V:0l9DzF3Pv137poI8brScQt9V

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      GAMDIE - Free Indie Games.url

    • Size

      109B

    • MD5

      cf82b3e6830e72c0635664c15e172369

    • SHA1

      4df9001ad2f800c8b9542beddce9579cacaf2838

    • SHA256

      0c3ae59dd92cff4e20806105e15a82ba2114f6873dceecdffafd6f9d7f33130f

    • SHA512

      9c4faa7b1cc7694a140d308f8729eadef51fbace171772fd7cc3a565c382ce2d50151e5f755ba50642bd1382d51440a2184da9c31326f40b2abf9385208a29c9

    Score
    1/10
    behavioral1behavioral2

    • Target

      Pizza Tower/PizzaTower.exe

    • Size

      6.7MB

    • MD5

      b2d54e6e34f87f6baabb6df4308190d0

    • SHA1

      9caf5db51307f9c4d7b67350b2b5ba5c825ff19d

    • SHA256

      4a07c50ec0c659d24d25e19b12ee111d289462ca0e64dd34a7c7f13d2e6c9f1d

    • SHA512

      bd8e88d00b76375ec5e67e0fa22f9464d25c9158fe92528d5deac82fd9b339d5ccc8df4607ae2f4801250d0286519da01172b9bbefb1748efd6ce51428d95895

    • SSDEEP

      196608:91J0RvrxpiA76rXI565kqgy+lHX/TlD5qqutk5ZcPErh6W:8++lPyELuHW

    Score
    1/10
    behavioral3behavioral4

    • Target

      Pizza Tower/Steamworks_x64.dll

    • Size

      443KB

    • MD5

      04121386d3c6e139c159450ba9ad3a8c

    • SHA1

      96f989f63808cb6e61d4900d31ff5cfe873bd340

    • SHA256

      3a348a05e245b232d7c90a7674402b374e924dc975bc3d267800fcbc5e70d18d

    • SHA512

      8b2da2a5cbca60b518ac619154034265942899bdfbbf47641457bf68d0f63111eb782861bd5220df91b0e485921172ee71794ac95e4d2e4a3a5c29f10445146b

    • SSDEEP

      6144:OmZuQ9/zeq6Y93Y1EvyBgqn+YePRUz357/69el7vs0ohMcX9TRA0PwKW:OuNY1EvyBP+YERUbV68j3oOcX9n

    Score
    1/10
    behavioral5behavioral6

    • Target

      Pizza Tower/fmod-gamemaker.dll

    • Size

      35KB

    • MD5

      7d03df224eef39d3c507e33fe2165158

    • SHA1

      c8a1f626079a3a7e750d5205d1ed92f3f9d6c499

    • SHA256

      0cbb76f9bd8987c194b891c3c0b14c3ffb15ae0f676623a811090ca7619bd3b3

    • SHA512

      2dd05d7495456cda7bbea293032569ea6956b22f9e96e2a68de291bb3cc54e5240471d3994a04ff3481f4d76ded694803e55a870490a8aa8ba806a82d596ab54

    • SSDEEP

      384:HshbIB/FimHZgyn1bMVB39LkS7XuTE8L8RMO3VH6cbJ/NlGz8WDf9qGuokHmbPIz:4+S1/NlGz8W7bIOPOP4I7

    Score
    1/10
    behavioral7behavioral8

    • Target

      Pizza Tower/fmod.dll

    • Size

      1.8MB

    • MD5

      bf5815e7bbcbe5d2d5cb84900527536f

    • SHA1

      b6f4c2e0d57a17c0096d287679f855e2a3f68f6a

    • SHA256

      e78d09eafe87c4699e23e7b1fa88d99e4d031538c452d8647e3961bc104dbe09

    • SHA512

      7933df1990b9cddd2f50737e8980c7fdbf572586cd74a76a9f9e2f2e35b26a3bae9e0f66d45d5d9fdd400de29274cf042ff98e84a3c6441b919281f6d7cfaed4

    • SSDEEP

      24576:JVcCsfgfaDCHWnfFbHZmIHqizddHiVAZZVbNhUTPiRIVPaoF4iVzwI6n:JVcCsYfd2dbAaBdr3WYQP1F46c

    Score
    1/10
    behavioral10behavioral9

    • Target

      Pizza Tower/fmodstudio.dll

    • Size

      1.4MB

    • MD5

      3aa316d24bac9601e3136d73cee0193d

    • SHA1

      9448c6c683239b9b67a73831112a8a2d3e077541

    • SHA256

      489e8d08b760579a1974de3865a16c9c5e6dd989a09c831cf1c8c7db7c1ea50f

    • SHA512

      e2f2093665b40b2aa705e6e92cd93a823361928e8d527d40cb42f4d548b6dfba72d0aa05b4046225ec2a00fe84b25f0c5cf41af091a2355c41a119dc08c30d8c

    • SSDEEP

      24576:WDdspg+MtYUteTzXmYs8NGo4mmHq30JbV/ybI:2sp5MtYgeTzXm4/7+T/yM

    Score
    1/10
    behavioral11behavioral12

    • Target

      Pizza Tower/gameframe_x64.dll

    • Size

      6KB

    • MD5

      d2503d70b9ada6302b9424caf6987522

    • SHA1

      ba327c52f3ab987b1218f8cda363c4003e6b4db6

    • SHA256

      bf6699ee52f7e52dc2444de4afece133a37127d194272e323509120497b7d974

    • SHA512

      fa40bc000aab587b0642863016eab43bd67331e9653fd4f5e4a8863ed284e362c01866b7deecf6ad7f05acdc6b741bab8ac9f83a0f4ddc6ad8ddcc5c19e18a04

    • SSDEEP

      96:GosrIC4lrlf+4JWuPUMLcIS9JF+Y+MIUnKnM:GL74FAeBjcbYo

    Score
    1/10
    behavioral13behavioral14

    • Target

      Pizza Tower/steam_api64.dll

    • Size

      1.9MB

    • MD5

      37a7e0deae6e7bd1154f8fd059f9a241

    • SHA1

      5787b8db0d0d656d13474cd7d2caf66c443e181c

    • SHA256

      eb9b78ef3c339591c1993c9c364098de386edd391e1169ea0a6daa39ae9735a9

    • SHA512

      6d375c3abceb83a48b277ebafa7da24128fa97cdde7b3f3e89970671582ff3af8a413fead8d074127a97fc34cc423fd218f878ee3a218f6f28be3aededbf83f7

    • SSDEEP

      24576:0Nip4KmiEeJARIEOzje4nKGyAJ1VyKm9m0DKXC5CMcWXoyefCJXS0abv:EM/mIYI37p7VyKmTcMcWXAfCHab

    Score
    1/10
    behavioral15behavioral16

    • Target

      _Redist/dotNetFx40_Full_setup.exe

    • Size

      868KB

    • MD5

      53406e9988306cbd4537677c5336aba4

    • SHA1

      06becadb92a5fcca2529c0b93687c2a0c6d0d610

    • SHA256

      fa1afff978325f8818ce3a559d67a58297d9154674de7fd8eb03656d93104425

    • SHA512

      4f89da81b5a3800aa16ff33cc4a42dbb17d4c698a5e2983b88c32738decb57e3088a1da444ad0ec0d745c3c6b6b8b9b86d3f19909142f9e51f513748c0274a99

    • SSDEEP

      24576:+tW4x8xAxCdUcyezFSjaBHFaNlsqK5/oh6iZf1LUXw/vxNI:d4x8xqCGexm8FCspg0iZf1LUXD

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral17behavioral18

    • Target

      _Redist/dxwebsetup.exe

    • Size

      281KB

    • MD5

      fd6057b33e15a553ddc5d9873723ce8f

    • SHA1

      f90efb623b5abea70af63c470daa8674444fb1df

    • SHA256

      111aeddc6a6dbf64b28cb565aa12af9ee3cc0a56ce31e4da0068cf6b474c3288

    • SHA512

      d894630c9a4bdb767e9f16d1b701acbdf011e721768ba0dc7a24e6d82a4d062a7ca253b1b334edba38c06187104351203a92c017838bdd9f13905cde30f7d94d

    • SSDEEP

      6144:pWK8EGMUjp5cGQ3Mek1B3B9h8Ins3i8AEYBSawz1YSc:JGvjp5cj35kDB9hrs3zARBSaJSc

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral19behavioral20

    • Target

      _Redist/oalinst.exe

    • Size

      790KB

    • MD5

      694f54bd227916b89fc3eb1db53f0685

    • SHA1

      21fdc367291bbef14dac27925cae698d3928eead

    • SHA256

      b8f39714d41e009f75efb183c37100f2cbabb71784bbd243be881ac5b42d86fd

    • SHA512

      55bc0de75a7f27f11eb8f4ee8c9934dfe1acd044d8b7b2151c506bdcbead3ab179df7023f699c9139c77541bbc4b1c0657e93c34a6bc4309b665c6cb7636a7e5

    • SSDEEP

      12288:0s1yfEcpPzdv+t4cRIy3ze3SUN0PXGTjiqRy2p3kwzjGHTkV:NwfLrvi4cRIyDe3SUNaXy+WypoGHgV

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral21behavioral22

    • Target

      _Redist/vcredist_2015-2019_x64.exe

    • Size

      14.3MB

    • MD5

      f0248d477e74687c5619ae16498b13d4

    • SHA1

      9ed4b091148c9b53f66b3f2c69be7e60e74c486a

    • SHA256

      b6c82087a2c443db859fdbeaae7f46244d06c3f2a7f71c35e50358066253de52

    • SHA512

      0c373b06ffe84f3e803831e90f22d7d73304e47a47839db614f63399ff1b7fcf33153bf3d23998877c96d2a75e316291a219fdd12358ca48928526284b802591

    • SSDEEP

      393216:q5lptVYmfr7yBG/4WoI+j6LTinXKSf0fzTDv8:q7pttD7yBG/uljIinXj0fQ

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral23behavioral24

    • Target

      _Redist/vcredist_2015-2019_x86.exe

    • Size

      13.7MB

    • MD5

      de34b1c517e0463602624bbc8294c08d

    • SHA1

      5ce7923ffea712468c05e7ac376dd9c29ea9f6be

    • SHA256

      ac96016f1511ae3eb5ec9de04551146fe351b7f97858dcd67163912e2302f5d6

    • SHA512

      114bca1ecd17e419ad617a1a4341e607250bcb02626cdc0670eb60be734bbad1f3c84e38f077af9a32a6b1607b8ce6e4b3641c0faefaa779c0fec0d3ac022dac

    • SSDEEP

      393216:/d/FlptVYmfr7yBG/4JU4TRjtjUMy4i6kgsY7i:/1PpttD7yBG/QHTJtYMyke9

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral25behavioral26

    • Target

      _Redist/vcredist_x64.exe

    • Size

      5.5MB

    • MD5

      630d75210b325a280c3352f879297ed5

    • SHA1

      b330b760a8f16d5a31c2dc815627f5eb40861008

    • SHA256

      b06546ddc8ca1e3d532f3f2593e88a6f49e81b66a9c2051d58508cc97b6a2023

    • SHA512

      b6e107fa34764d336c9b59802c858845df9f8661a1beb41436fd638a044580557921e69883ed32737f853e203f0083358f642f3efe0a80fae7932c5e6137331f

    • SSDEEP

      98304:EuLgywiNHBeSLxYK/bxE3q/BlZkWMGPQflVJ/EK1sLyzs2T2Q1mOjq4/:V7wqheSVYK/bua/BlWWnuVhsus8nm+qi

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral27behavioral28

    • Target

      _Redist/vcredist_x86.exe

    • Size

      4.8MB

    • MD5

      b88228d5fef4b6dc019d69d4471f23ec

    • SHA1

      372d9c1670343d3fb252209ba210d4dc4d67d358

    • SHA256

      8162b2d665ca52884507ede19549e99939ce4ea4a638c537fa653539819138c8

    • SHA512

      cdd218d211a687dde519719553748f3fb36d4ac618670986a6dadb4c45b34a9c6262ba7bab243a242f91d867b041721f22330170a74d4d0b2c354aec999dbff8

    • SSDEEP

      98304:RuLgywiN1ah6HcG0UJrN7SDgndrHZDMeaNNjt0CKKBgY2r71pZ/APaOR72HgQo0z:I7wq1W6HqULS8djZDTaNNeCKVP5ORsg0

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral29behavioral30

    • Target

      _Redist/xnafx40_redist.msi

    • Size

      6.7MB

    • MD5

      97c2eebb30c5a88c68c8f24f37183f1d

    • SHA1

      49efdc29f65fc8263c196338552c7009fc96c5de

    • SHA256

      e6c41d692ebcba854dad4b1c52bb7ddd05926bad3105595d6596b8bab01c25e7

    • SHA512

      c9d1017b274ceb1b4ee624cf7e628787c32a727c64f715fbce1f1ae929d9114f8fe1291e34583cec615619b0128c01206b07efc878e7a5c57b792453f73fd0da

    • SSDEEP

      98304:wynfL329J1XswfXO6wiBB+4RZg6aENaCZAU5PMO0MntfERyJGH2YPq/:wYD3C1XXfzH+4cLHU5PM/Mnt+YGlq

    Score
    6/10

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
7/10

behavioral18

Score
7/10

behavioral19

persistence
Score
7/10

behavioral20

persistence
Score
7/10

behavioral21

discovery
Score
7/10

behavioral22

discovery
Score
6/10

behavioral23

discovery
Score
7/10

behavioral24

discovery
Score
7/10

behavioral25

discovery
Score
7/10

behavioral26

discovery
Score
7/10

behavioral27

Score
7/10

behavioral28

Score
7/10

behavioral29

Score
7/10

behavioral30

Score
7/10

behavioral31

Score
6/10

behavioral32

Score
6/10