General

  • Target

    GrowtopiaInstaller (4).exe

  • Size

    281.4MB

  • MD5

    a48be8262706e7bc3a55857c516f0cc7

  • SHA1

    38eb3f32cbbb8ef544b642c59541fa7f5d74b78c

  • SHA256

    497896e8dd085860f7082b73e3f42bcf6b1bbf96efdca99ae322dc3f0fae5ff8

  • SHA512

    a06cfab05c9c304d605c2af898c6730673a2cbd13416ab7e6a6df33d9d173f904ff6e5b0e2d66f23cb878aefc4f760fa11a52f9bdfa89cab1763ee296ee2689e

  • SSDEEP

    6291456:9TkXdH6zmsXZ0ZDhip7r6gUqSorhF/9bd4pAn51:9WkGb6r6g9S6Lb2W

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • GrowtopiaInstaller (4).exe
    .exe windows:4 windows x86 arch:x86

    b78ecf47c0a3e24a6f4af114e2d1f5de


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Growtopia.exe
    .exe windows:6 windows x64 arch:x64

    857adc0c7299ad317b37f8e938f1816a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MicrosoftEdgeWebview2Setup.exe
    .exe windows:5 windows x86 arch:x86

    ccc6e30409f96054ca558f4765d32e38


    Code Sign

    Headers

    Imports

    Sections

  • SecureEngineSDK64.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Exports

    Sections

  • anzu.dll
    .dll windows:6 windows x64 arch:x64

    1054328810b3c31a1c138b627a283240


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sdkencryptedappticket64.dll
    .dll windows:6 windows x64 arch:x64

    e3ee85ca7aeaf6754b6a9430e1da90ad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • steam_api64.dll
    .dll windows:6 windows x64 arch:x64

    c69c22b5a3698527f0d3c9618c3affbd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ubiservices.dll
    .dll windows:6 windows x64 arch:x64

    e89ec276be430c2ab3bfecf0d0f1eedf


    Headers

    Imports

    Exports

    Sections

  • vc_redist.x64.exe
    .exe windows:5 windows x86 arch:x86

    8e2588a9cf43886de3449dfff03137b6


    Code Sign

    Headers

    Imports

    Sections

  • vc_redist.x86.exe
    .exe windows:5 windows x86 arch:x86

    8e2588a9cf43886de3449dfff03137b6


    Code Sign

    Headers

    Imports

    Sections

  • zlibwapi.dll
    .dll windows:4 windows x64 arch:x64

    2ad53bea1f66fb1ef61d05c891663d87


    Headers

    Imports

    Exports

    Sections