privateloader | dc2a165d64a0bd23fa0bd161ecc76665161ba742f4f591f72084ebaaf534fac2

Sharing

Copy URL Twitter E-mail

General

Target
People.Playground.v1.27.5.zip
Size 205.1MB
Sample240511-mfe4yafc63
SHA256 dc2a165d64a0bd23fa0bd161ecc76665161ba742f4f591f72084ebaaf534fac2
MD5 081a3cea8a9900f373f2cb5b841cf2da
SHA1 93ee2014ab315bc652476f0ff3a7ca4aacc07070
SHA512 8811fdc3fc08d77245cfe87b1d09ea1edddd00d5eb4fad53012636b797bd348c68b003a7d07a64c259939e3024e0c5689038a2b084adcdfe003d020b25b4543f
SSDEEP 6291456:ctxeybGEa5qz9kSN6lTMwW4dHAE29oBsseZT/0620Je/s:c7/GEHSS7wW4OEcKsse5062oe/s
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

privateloader

Malware Config

Targets

- Target
  People.Playground.v1.27.5/Game/People Playground.exe
- Size 638KB
- SHA256 93d8dfb94ade06c2d7d4ca47add7d6881ff70453016cc8d1cd14537cc86c06a8
- MD5 5534465062a9089840568af130b7d0f3
- SHA1 47b1b9670c57e945a630787b661ebc57fa6da787
- SHA512 634e9c71f4ab5ee6d3c70abaecb0020d3fddc9eabcc03a7a0346b95d9c4c00db3fe30370670094ec7fd457d6d8d1491a7db19f70e1a2b49cd7068ebc9a5d3f7b
- SSDEEP 1536:cC79gXAX271lcBzqEY2lkCswVxYDXosWkd09dluaUGX/9fpDBGQ6J5CYExyHQYY:pgXpJozm2lkCsuYDbMkZkBfx9
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  People.Playground.v1.27.5/Game/ppgModCompiler/ja/Microsoft.CodeAnalysis.resources.dll
- Size 41KB
- SHA256 a6431af167eb96a81f727de7ab61ab698f2037d93bd04081ddc741bc8e3589db
- MD5 b2690670fb31e900af2fcdc0648e9530
- SHA1 b252d2c33495d4ef30526a50782c1499572276c3
- SHA512 9c27ee2566ed7c307823182874173e58d3f17a0da65081c9db9f4acf5091eebfc80f019ab089b808f1073a5d92a1b9a264f0b7400a7622581cd05633cb9204df
- SSDEEP 384:8cSO/bw4zXY5hg+uk+mIpO+M8/vs03fI9smqEeT5dICu4CnYQ9/UI8AWVlT9WLL5:/SMbwUAYIXgnrIYCn5/Un1+JQ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  People.Playground.v1.27.5/Game/ppgModCompiler/ko/Microsoft.CodeAnalysis.CSharp.resources.dll
- Size 361KB
- SHA256 dc6c58f2b6cad662ee54b41a0e5c04a9c5593914ee3319f0d98e87a0e03791f9
- MD5 e40988de8404e84fb46060880f66758c
- SHA1 30630c8f33aa8adce06fe8786c476ed178552e34
- SHA512 05d4db14828f209808ad33ad10735b4a85446964a8b8982a07697a7b966d1e33363e17c85cdb8b81fc2d98929cf60a639cb57e8a1bf59651e75dff7345eeeb30
- SSDEEP 6144:W9U1rd5t/7u1Hcpb0+rroufYzFQAzrC0wl7yuKJ/aLXpPqKSYb28bD77WtG6u4s6:WIo+rrtyuKZaL5PqF228brWtG6/s6
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6
- Target
  People.Playground.v1.27.5/Game/ppgModCompiler/ko/Microsoft.CodeAnalysis.resources.dll
- Size 39KB
- SHA256 3957f5e1e28393de378a188bfa62b4122dbf6ccb3471e84a6727bd8c3b701ea1
- MD5 d7b884b8c6ed567202975e67a214a0b4
- SHA1 8c3d65a9bff2cb95d79faf5c75d9ad7c76676856
- SHA512 c74821f01fb8ef1e97311ac6bd93c6c59d88727034460a3c1f97fe384810fddc26d28669b953b828bad992ecf22bf774c4a87c5a2f030ee265fc480d07e2786e
- SSDEEP 768:E8ESMzR8xk1nJhVxTiuoHj+bIL8G0YuylJUD+6yHzr:Z54xk+MmYr0+6yHzr
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  People.Playground.v1.27.5/Game/ppgModCompiler/mscordaccore.dll
- Size 967KB
- SHA256 fa2c965a82343d8bd4f91c6d941f99b3194b672813cb4ffa17610eab6f1c95f7
- MD5 ea613da6eeb3f2968faa2d65dabadab1
- SHA1 4efc48ac58759b637a3fee4e271bef9ff97fdb92
- SHA512 b2d79b24d518d73b2346268f51577c6d7f821ed5a03bd7d36e4d8a4bc3f5c400c26c7b7b9d34c421011506b03d4c6fb897332c1407b51bc511fcfe61dc77c70a
- SSDEEP 24576:1Zrpwuw3eX3IwYGPkiPkgCPvcOJ0fVMbqNtoH8gw42+mRfkzyeg59EzU:1Pwuw3AkmC8Nhfeyeg59EzU
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral10 behavioral9
- Target
  People.Playground.v1.27.5/Game/ppgModCompiler/mscordaccore_x86_x86_5.0.1722.21314.dll
- Size 967KB
- SHA256 0e28383156426886af01f0738e3988fd1d782d357f351f3942085a06a8a56922
- MD5 e58064d079c89a4a6057ffb56f4b4575
- SHA1 d33a154409d02a5bdcd79f08e46eaee38b910070
- SHA512 4652cd248aa25028ffff588470c5dea951a03e46f35a93a374048110a2dabd1a38d38f931bdd360643f333988a6e5aebf2be32394441939cc2d072e3afd5ded3
- SSDEEP 24576:vZrpwuw3eX3IwYGPkiPkgCPvcOJ0fVMbqNtoH8gw42+mRfkzyeg59Ezi:vPwuw3AkmC8Nhfeyeg59Ezi
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral11 behavioral12
- Target
  People.Playground.v1.27.5/Game/ppgModCompiler/mscordbi.dll
- Size 966KB
- SHA256 785d392284dc4612dab5616acc53e26b23e6def67760de2994b1ebe51b1abf80
- MD5 d7cb8cbb39127b4a5aa5b5131d3bedc1
- SHA1 c6f10f00326fe76ebd16193054301bf0ac7c3600
- SHA512 a7eb50ac3ac54069c5038548afdae6f8bad49ad53c19f3fa2a17b82bab7a445bcd1fc32a870a1203e378d1c6b43402fa647b032f578a04c693a51cb1d1677f88
- SSDEEP 12288:aigbcWbsrTssFo2su6zkEx2Z45Nen3XUaOu/saUnveKmI4bh8Tuupag0:FufbjuM43Cn4Xu0sao7Cbh8Tuupag0
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  People.Playground.v1.27.5/Game/ppgModCompiler/mscorlib.dll
- Size 56KB
- SHA256 706cba6f091ebec0b2efc2aa31c988da18fa192bd59f97c9efa834c2ed80f295
- MD5 ba694e8e63340912459119a01eb622f4
- SHA1 5ce7f2156259847c6f7a72b6bb8a830c13e47f01
- SHA512 083ec860cf9f9f0a7bddea30779cd828d3c0cbe2204171e4b8a706b589289bc129a196e0cfd16db5a81d856b045feed18b710cd4397fdffafd6f510065e760d2
- SSDEEP 768:5Hal9c5QjPRFpN1s+9G5e4HN4gr/lD1Qa7KCltiWpLu9PZ9zP:5HalOQrrNG5e4t4gr/91DK3WpLuJzP
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  People.Playground.v1.27.5/Game/ppgModCompiler/mscorrc.dll
- Size 139KB
- SHA256 5920aaa059833e8c7b1b4f8e888972a87f48206f4fda3449b490df5ad35e535b
- MD5 cae12ed68932fca65e2a1e3fd56940ba
- SHA1 0cbc39c620015be7b012a333005d9691b7d2d8c7
- SHA512 69fbb45e6ca3315425f2b4ca8e199e014dd9430dfabced73fb46b529a500e7438711c6311c1a1169e3bcfc770a189bf720d41ca9ff9b9523d5ba78f85dab0ab8
- SSDEEP 1536:HlMcGZms10CHvh7x8Sj0lZBJCCk7nw5ymvZ4MgSZctpoEXXJuHzU:HljGZ/qSolZBvGn7oUS4SckI
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17 behavioral18
- Target
  People.Playground.v1.27.5/Game/ppgModCompiler/netstandard.dll
- Size 112KB
- SHA256 13efb47ba8dc4742dcdc30a6e5bc8ef0d923a00b178c83e7f6b51eabde688d75
- MD5 6fe31e287ed588751401bd148bbe8a9f
- SHA1 43ed40001e383de58e5132c58d84395f5ec03a83
- SHA512 cba17ee920bd920d5b68159e9ead72b7b42132bbf9da41f5cb8ea745ddc1406498c975c543d548b375840686e4463e32e68b84b71c77e771531271366ab267c7
- SSDEEP 1536:lhYo5V4bgDHsPdBpwSJ5l3Akcg9Q3ESIKGN4rx9W9OkBsTIAxkwvdFgqXcuETiuy:lhYs4bgDU9TK3ESiqrrWDBex1FXcuEJO
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20
- Target
  People.Playground.v1.27.5/Game/ppgModCompiler/pl/Microsoft.CodeAnalysis.CSharp.resources.dll
- Size 361KB
- SHA256 27b49288b2c396d1347f29af251a5ddf688b6ceb458190fb46d00e9633792cff
- MD5 ba3be021e8e901af2e095a5abce048e2
- SHA1 84d95b82fe75d60b1aa56ee7c1b74b251b60a1ba
- SHA512 6b96687a7110f451f3e47eaaee7ba8143d8e702f7bd0b5a00f9221a13705705b2cc32626674b5f14c490c9b7df424b4fee5dd87a5c7ad893afb4b55fd0f45f2c
- SSDEEP 6144:I1moIk7J0xNANlgIn9wl8zBBHuOSXOGImMaY5XkkHQx/KMNTmNrCct0PqG/epX9+:IWIn9wl8zBBHupXOGIxa+XXHQx/KMNTx
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22
- Target
  People.Playground.v1.27.5/Game/ppgModCompiler/pl/Microsoft.CodeAnalysis.resources.dll
- Size 39KB
- SHA256 6893ab605f7ac2b21350b95c343db4dff7f6d74f6af15a8a48e07d67dd45d47a
- MD5 4cafeb57065f7d70ca86a542e90c533f
- SHA1 79bbc5acf007a749f70c48438208f9f591383bbf
- SHA512 31c0946027ceafa7fdfc995a64986a846baeb1917ea69ce35790bcd31b520eb7344a324b17044fdd093e81152660dcf4d273fa61626fc4abfa0dba8d2a523bf9
- SSDEEP 384:icSO/yYnynsBk/FzCdGwM30cBIRi9UtH31mtzF+/gNC3TzmWr3tjc3uLwjIo7WVI:9SMyYy6+DK37LrvEUn+rW5
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24
- Target
  People.Playground.v1.27.5/Game/ppgModCompiler/pt-BR/Microsoft.CodeAnalysis.CSharp.resources.dll
- Size 344KB
- SHA256 8adcf1d00f063d47e3eceef1ad6b8f61500b890c2db7bfa72e58fce3ec3dd55f
- MD5 004381a5ca9d53692b9458f6bc19a14d
- SHA1 94db74a75e50fa3b10fd4e49af9dc547f4999a83
- SHA512 35a6a520ff0eb1cc09094e4e1d77d7e9a1bb53fabe08d7ec293bcd68cd312e0308d4f591dedccefda66b517f51baf66956eae57b81311e21024efab745e61b87
- SSDEEP 6144:eGDcaqzzSAMfTcRsSvcCDeEyrv202kuRH/W+isStwOce1aa3:e8yOn
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26
- Target
  People.Playground.v1.27.5/Game/ppgModCompiler/pt-BR/Microsoft.CodeAnalysis.resources.dll
- Size 38KB
- SHA256 02f34dcb2d1f7c4c555b39d7759633f83ea21714a7229660fdb0cac75517fa87
- MD5 7327fa19604cf6f76d79378040a33e37
- SHA1 bbfd9c1f53baffec236e2df4f876c800e7da5496
- SHA512 2da39deb2422bde89ba416d8a94742371e34476470acc5cd5adc31dc61660b5fee399891c9994e3132d0aaa6a3984f5e1be0979ecfc6116bcd5bd02fe2890fde
- SSDEEP 384:6cSO/uwXYsAZeNrfceIuHPoMh22JOD9FpLfY3T86ZZN/2ugu5UM2enWVlT9WLqdm:VSMuwIsu0w0e2gYD8G/n5UM2e4+4YJ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27 behavioral28
- Target
  People.Playground.v1.27.5/Game/ppgModCompiler/ru/Microsoft.CodeAnalysis.CSharp.resources.dll
- Size 473KB
- SHA256 f6dd32ad8e567a4f9d95957ec7fc9f2212c7f421f2a0bcbea8f9d62930e37a2e
- MD5 5377424dc40ce46c722241862272b270
- SHA1 2b848e59bdb931bada3393475219528fc2ee967a
- SHA512 7bdfef3fc046f40efc8e61f55e3901119870c6043b39822047ae79b830290b2f22e7343fd890d2e9a061c3684182f664dc951fabfcf3e56b5ca917b6dd260291
- SSDEEP 12288:QItz+b3kY+GyrgpJYVo7x79J6oF6Li01zdJDGn7qev:
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29 behavioral30
- Target
  People.Playground.v1.27.5/Game/ppgModCompiler/ru/Microsoft.CodeAnalysis.resources.dll
- Size 46KB
- SHA256 2a3617b58334fb6cbe2735782a94c7326056e20df39b8ade40260f73b9c88c09
- MD5 3cdfab625cbb504bca911180d3dec205
- SHA1 64f5fc2b4be8572dbebe1c3020365a1901558ecc
- SHA512 c0a091f5f96084e356b8a950807b81f32387f19ca89867918d35463dd51f149682adcc87141ed9057aadefd3910c47049ac6952d222a931115eb9e4860de103d
- SSDEEP 768:PSMlVNkg8H+lwG1tcEJ6LIMBrOkkn+UEgCj:aax3w4SEJ4IMBrOkkn+UEf
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32