Overview

overview

7

Static

static

1

GOG-Games....es.url

windows7-x64

1

GOG-Games....es.url

windows10-2004-x64

1

setup_unde...8).exe

windows7-x64

7

setup_unde...8).exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    game-undertale-(18328).rar

  • Size

    126.7MB

  • Sample

    240428-yxy4xsga27

  • MD5

    5e278dcff4e2291cab0ed226f81672d6

  • SHA1

    1fb0b2ad382aa57eec5bb58f42469a8764449314

  • SHA256

    81205960a86545c2db5fec934fbff765cd4634e453dd469368239cb47e16054a

  • SHA512

    303dc39d255932795536187b355cb4cb6c06e63adeab14ee03abf62f9893960a5735fe3008139a9bf2ae3402ff040dc1f6d9880dc443b9098acae0abacbfc731

  • SSDEEP

    3145728:DSHIqNWvNc0rn+0fslfSob+5Framz9LQMj5jMgQNv:DytNAfcSob2NaoLQ+7cv

Score
7/10
discovery

Malware Config

Targets

    • Target

      GOG-Games.to - Free GOG PC Games.url

    • Size

      44B

    • MD5

      23264e364385f567ec36d589f7e1f1b4

    • SHA1

      80ee4350848ad9eab036fd012d043fc720dddd13

    • SHA256

      96a20e154bbff18739fe2c7085cb37497d660447f8c062a7885430c19f54948a

    • SHA512

      566caa216934758aea3ab87ae22de504a7a3286af5bf4d182eb81002efab703ce43e3b7015846d1e2c2e5f4047055602491e5b30bd27c7616fba96e26f43b5ae

    Score
    1/10
    behavioral1behavioral2

    • Target

      setup_undertale_1.08_(18328).exe

    • Size

      126.7MB

    • MD5

      69a1054bcf85084cc4bc33e332f1844d

    • SHA1

      a3db1a7c5a07ea07c31d40ab4c7685215ac4f170

    • SHA256

      21fbcab3c652d5af9efe57454d60d5a5057773e1c234ed16ae14233724502b44

    • SHA512

      f57df05d2d5db04cb48a1d72070ac5d76ae29620cca314817fbfbb30d42c2150115ac510acb216095115c210fe2eee80575ffc78a36fd455e72e4de9492b4f81

    • SSDEEP

      3145728:WSHIqNWvNc0rn+0fslfSob+5Framz9LQMj5jMgQN7:WytNAfcSob2NaoLQ+7c7

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops desktop.ini file(s)

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks