31e9f88d2343967251e2ef28dfe51eb901ac91fdea16268f1b023e4d00456e51

Sharing

Copy URL Twitter E-mail

General

Target
steam_ssfner.zip
Size 9.4MB
Sample240510-kzzataea4y
SHA256 31e9f88d2343967251e2ef28dfe51eb901ac91fdea16268f1b023e4d00456e51
MD5 604ef670d322ef90c42cf2a982bef63b
SHA1 435856ab9edb57028a3ec85629af780d0bb9ac2c
SHA512 1e0487693bd9293548fccd9d650099c1e66c51b7ae17a0fa12807930a30f33ec5a5946105529bb7851103a35c1b1db7d1d814662d811921aa1d5fd57687c3cc1
SSDEEP 196608:kQaQor/e8U2OW7sT/VnGObK+o6//cTB2Or0DloVAQn0ImqEIpBnrEFj:NbSe8MWg/VGOHMTcOrilxCDEI3YFj
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

linux

Malware Config

Targets

- Target
  steam_ssfner.zip
- Size 9.4MB
- SHA256 31e9f88d2343967251e2ef28dfe51eb901ac91fdea16268f1b023e4d00456e51
- MD5 604ef670d322ef90c42cf2a982bef63b
- SHA1 435856ab9edb57028a3ec85629af780d0bb9ac2c
- SHA512 1e0487693bd9293548fccd9d650099c1e66c51b7ae17a0fa12807930a30f33ec5a5946105529bb7851103a35c1b1db7d1d814662d811921aa1d5fd57687c3cc1
- SSDEEP 196608:kQaQor/e8U2OW7sT/VnGObK+o6//cTB2Or0DloVAQn0ImqEIpBnrEFj:NbSe8MWg/VGOHMTcOrilxCDEI3YFj
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2
- Target
  data/app.so
- Size 4.7MB
- SHA256 960f14f8b09df6917abea23dd80b2380814f035e51916f8e4f12393845377f6c
- MD5 775c8db634b2d45d68a91b07bf884df7
- SHA1 701d4839606a96ad1af84f9ddf231350b54b899d
- SHA512 2b34a9397a97ac7b8efa80fcfd9394e30a2ed28be27e11acfde1f4b049dfc6ed59405f79c8d64bc7737fcb72c5217c48e320934e7e938ed9ceefe9287401d164
- SSDEEP 49152:X7TsmUJPxRyme8I79spXf3w0W7WTS1ERYyKjam3DjzyavY7Iy91Cltnlenm4i5:X7tUJZwd7WKaYPD3DjGavYs1lenm4i5
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3
- Target
  data/flutter_assets/AssetManifest.json
- Size 1KB
- SHA256 c6177078657ed844c7833614ad5d9a2be67460582e436bab18a6cf81f8e892d2
- MD5 352d6a37f9656412c52d8cea3037b679
- SHA1 e69fda13642dfbaff6e39704e693b2a619794bfd
- SHA512 6d27c0d00d0eb28128f7a7358cf1413e6255c8e246a2fab9cd3e1b2989ff92b3f8464a36468a3c73fb683d7a3f7776b5d48d266e15989ccb525db8367dcd953a
- MD5 SHA1 SHA512
Score

3^/10
behavioral4 behavioral5
- Target
  data/flutter_assets/FontManifest.json
- Size 2KB
- SHA256 f9bca0df0391d2c6124fb87cab089ce8aaa902bf25ef7820f7cd128f53ae311a
- MD5 e3637cec141ff037b4151edf1c0411cb
- SHA1 927b3a2c90ae40706d99162f52bbb6f7fdbdb4ff
- SHA512 690056a54bf397799a904a9bed2d1ac8102c05f6d4aa1b4e5018b9466540d23b225b0c9e2039d658127c485ce7f0e1323f0583fe23ccf4ab6adf859c380c3a56
- MD5 SHA1 SHA512
Score

3^/10
behavioral6 behavioral7
- Target
  data/flutter_assets/NOTICES.Z
- Size 66KB
- SHA256 8f3324555eeeed1a08a3f68f2baa26938e387e9869aad4d362aec533f2b6d895
- MD5 51259596906fa9bab24bd23db7855e55
- SHA1 5cfd8807e4aa409405fea3a45477058fc87247aa
- SHA512 d720a13ae7410cc2661eac624ee6bc1260ac2a0fea52fec516381de2f3df125998463135e3fa2c24b171b1d0d8054faac1e20b02d280d4db4d2e0addefb597bb
- SSDEEP 1536:KE1QOMgRvz7qT1iPVaMWcoflYSe0qZgTEIh7:F1QbgVmTwPVaJHYJgR7
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral8 behavioral9
- Target
  NOTICES.Z
- Size 811KB
- SHA256 4b6805cde69f6dae92051c9a6518be081c9aa029ae001751b526ecf880ae8049
- MD5 9e54d42af4c017a766fbc20231aaac25
- SHA1 4fb86dd86283ba1f355b682eb80e9b01b285a65f
- SHA512 28163d04cc14c0e5ca62f49df6b6caf4948dc5588b785838e7c736836a730a4f811bec1f88e436505bdc1c11762dc5d4f6d097c3eb2736c16c9933cac62ae9ae
- SSDEEP 6144:nxOkcAWPR8PNTxQKA6RwkRE0Wrak8zjr6YhlpXnk1DdM/q7d76F6qv27dPsOtpr3:nxOkxRw50j6Ng1apZwjhOg7or
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral10 behavioral11
- Target
  data/flutter_assets/fonts/MaterialIcons-Regular.otf
- Size 1.5MB
- SHA256 4c360df3abbacf856eecfcae3bdc5b0ddfc9c832247c38bcca0a1543a044e72b
- MD5 7e7a6cccddf6d7b20012a548461d5d81
- SHA1 ce0e8012e38a339e411ff44a897a99aac3915d71
- SHA512 9ac3bdb35a3c262004237fed143a1ccc199c686c27dbcab08f151d3a8075e6e0fad48da2d1d2d2aeeb9c9151f9f40364f5525ad1bd251905e45ddd2abb2c824f
- SSDEEP 24576:CJsPoIRolMKvGXtkOiKLkM0IfXfEsAZI6zN9DZheeeprGqeOeGr2luzTlgMEVz7s:FPgHvUz2Zy
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral12 behavioral13
- Target
  data/flutter_assets/packages/cupertino_icons/assets/CupertinoIcons.ttf
- Size 276KB
- SHA256 c7a357fad8f2102890b72cdb6e3c98f14db3a19ec60db26d13e4fe93f773808d
- MD5 6d342eb68f170c97609e9da345464e5e
- SHA1 3fb6dbfe8477121c2a0881f533a2f24ee0485985
- SHA512 67e157249b029211dc76e573b4b77cabfb458ad702827b5e21d43aa4db8aca803d71943c7dcb242a4d2a35e1e6debe9aa16317839041e25fecf167192ab58543
- SSDEEP 6144:W6dfXjvunBmDKBpPPiPPXQpVes0hMVSW3o0LUcwFHOaXVe:W4fT1DKBpPPiPPXQpVes0ekW3oqUcwVG
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral14 behavioral15
- Target
  data/flutter_assets/packages/fluttericon/lib/fonts/Brandico.ttf
- Size 15KB
- SHA256 ce108e93d78fdcbf0386655eb992a8bff6b20b943451ca837a42af735060b4bd
- MD5 791921e9b25210e2551b6eda3f86c733
- SHA1 1a4971a348e6d34ae8d53c3309da29cd8c164394
- SHA512 bbe4cd4ead43206342f637f22381e54551831877400b977139808f1ddf4874542b514dcd67b1893c2a714b682c20d59c88a0e8e61793a71c04808a69f13a7ae8
- SSDEEP 384:DUjasj7MzHat6E56sR3g21oyHtoyWP+0Ce49TbJACbiStsIi:Qai7Mz6tCsJcyHtoyWmRJbJALmsz
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral16 behavioral17
- Target
  data/flutter_assets/packages/fluttericon/lib/fonts/Elusive.ttf
- Size 43KB
- SHA256 7ee1d60a5097a24e168d97f6d15cc22183368c3508b9739bc8d1f3658152dc78
- MD5 23f24df0388819e94db2b3c19841841c
- SHA1 669a1e3a27fdc9f015998db92d4d3afc11c1a4d3
- SHA512 abf41a805662b050915a761bb86b93c96c31d830b787381068a00c89edbcbd3521e8fed338a80e8302b4b91c7a1382f6dc7db5f32c51793703f578f193593184
- SSDEEP 768:OaFKXgt6lH9M6cv7alpBEVt0jjVDm0PQyNpPREQrqu5Ca+v:OaOgCq6cv7ipBUtaBRPfhhrFCT
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral18 behavioral19
- Target
  data/flutter_assets/packages/fluttericon/lib/fonts/Entypo.ttf
- Size 45KB
- SHA256 505be8baf66716d96c0b099af407c532fa90503a41731130aaffc71a038b2215
- MD5 58edfaf27b1032ea4778b69297c02b5a
- SHA1 4be6d1115889b2717ac9e52538ee2ff93138b6da
- SHA512 9f5e4427787311658b26ca5d27252cafd9de1b2f6cb3d166713afe9a51f79fa70a16f1e87fd6614f5fadba27e16df4b14c45f14f285f8e94022afa1160ea4f3b
- SSDEEP 768:EkuS/HL+YdSmb2OFTvvkAvh+zAx9KpNUhtdt9RBs:US/HL7SmbNTth+zAx9KpNiHVK
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral20 behavioral21
- Target
  data/flutter_assets/packages/fluttericon/lib/fonts/FontAwesome.ttf
- Size 154KB
- SHA256 b8f8327f9f206677b9d0ae9472845f70f4c5bddfb2901c498fe8a4e312f52f9f
- MD5 799bb4e5c577847874f20bd0e9b38a9d
- SHA1 7e098af59c1cd085de230107e3573313a9c0b7db
- SHA512 9f3b8903b97e9b3430717d7c754469cdd9e5f6b0906bead22526da9ca32e6bef6f59e06d7eebe0fd3a1ea8161c417084e57508ca073ac910a108ad4be36fba82
- SSDEEP 3072:CH7sM4XCszJk4XLgsH4zZ5iars9taaE5hfynxS6NX1lAR+TmxZFEvmAVb5g/nrrh:CH7wyszJkyLgsH41k6OtFGhfjEXDmxZd
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral22 behavioral23
- Target
  data/flutter_assets/packages/fluttericon/lib/fonts/FontAwesome5.ttf
- Size 407KB
- SHA256 342f10f8659c00404a18f8a97bb090edd95a03fa82f36f43d2d30b3a569a22a0
- MD5 221b27a41202ddd33990e299939e4504
- SHA1 a533b2667dfc2b8aa8aad0db15be85610d221f3e
- SHA512 e1b76fb7ecf74b89c5d4f4d5518f8bf77fd70c459ad511251e81d3392fc65098e7107d68f0d4dfe371dde71e4906dfd0501e7b6c6880de61bf4421c7b50875ba
- SSDEEP 6144:C7pXawwru2so2nxRe5gH3Pd/DASdW3PWF4mCSvSq9Opd3/Xlycyl1j26Mph:uTIso23/1m3oqqilXlNyixph
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral24 behavioral25
- Target
  data/flutter_assets/packages/fluttericon/lib/fonts/Fontelico.ttf
- Size 12KB
- SHA256 f4dad132076ff1384f4a37bc72c5d7f11516891b592b6e9ca49bd1995232aa23
- MD5 3a1e1cecf0a3eae6be5cba3677379ba2
- SHA1 29836bd190ecfb492f14b2b41c2c1ea0bbba0fb6
- SHA512 943966174e76a65a601dbb0364dfc14c3f1a0e994c67d7fb10f4e0f781c35aac2f7b881270ac35706a19526a9f87ba274b8a78898cb6ed69eb8bdbc00c527817
- SSDEEP 192:tpaGrEa8BnCVQl+zMWzJv6BaXLnJxXGVZFr3aX1mqVwQdCZpN6joc8QUmrxpxB4g:90GQctRXruDpa6hpsoLYxvuuL
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral26 behavioral27
- Target
  data/flutter_assets/packages/fluttericon/lib/fonts/Iconic.ttf
- Size 20KB
- SHA256 e52e1bb007af01cf85fe37deea044c9f167e412dea971c16ec79e02b8f4167cd
- MD5 34e12214307f5f7cf7bc62086fbf55a3
- SHA1 189830b4bc74ba03b35aee3be76add451c99f52f
- SHA512 8833285b5f915cf2f6010643b1df94b3d367a90ba6c849a8fd973dbe3369a5ccaa498f1d7ca707d4c1d50749b12a8ac6a7537c809e24226ef021888b8c6ab7ea
- SSDEEP 384:uQNCIydC7lSyMboQgumABIkWdecNTvnjRLTMMHMxwZlVGTSUdDRMgFhS3pQ:uDdC7lSXEuDTwecBgS+Fd1lS3i
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral28 behavioral29
- Target
  data/flutter_assets/packages/fluttericon/lib/fonts/LineariconsFree.ttf
- Size 51KB
- SHA256 2689a9291e616eb9d1847cab91defb69bc45bb6f9a7f033e047641502c22a7fb
- MD5 276b1d61e45eb9b2dde9482545d9e3ac
- SHA1 3de71092188f50bc456fb9579d7297e03a75340a
- SHA512 7a0b8aebd60c181395ced2652b4be3494cf74ffdf7b41e825d29ea43d7fcf9a72efa1c9eb851373622c033d21ec05ab6707104a74f32daf2de9cf042ac87f1f9
- SSDEEP 1536:/JCGc5Vsp7Vm738Q78voXqbOPzwGVfmpaInUaJWIA9AlY8dM44Gc+vOx2jOsqq+K:/JpWVsp7cDR8voXqbOPzwGtmpaInUa0s
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral30 behavioral31
- Target
  data/flutter_assets/packages/fluttericon/lib/fonts/Linecons.ttf
- Size 16KB
- SHA256 84b31ec94d3f119f72780849d89139e6b4fb6894bb89a86d186c10aaf24ab407
- MD5 2d0ac407ed11860bf470cb01745fb144
- SHA1 36d579e246af42db55df1fe8c48292914414c313
- SHA512 963b1b0fffdd4a6a8388b79a1507e42c068798cddc175bacac424763efffac7b65378cddcb9f103fe0b10217ee0a6ea5bacc6de6346000efd20052f3f8f291d0
- SSDEEP 384:6km15HnJsmDKhrHKdtp4TvPMCBTdQUg01d8KTgGLpydShvldnu1S0UQjo:6km1rnDSrHKlC16f01lgufAoQM
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32