General

  • Target

    xash3d-fwgs-win32-amd64.7z

  • Size

    8.6MB

  • Sample

    240523-ayvk5afa3s

  • MD5

    a27f2e3e742c88c36b08a0f2e6194e51

  • SHA1

    7915554bcc82d0ea147c245d5962fed5a4becfe8

  • SHA256

    784b1348a30bfd0dc8bfc44b4db3d3922bd74afa5b71a90dfbd47201151b6309

  • SHA512

    025c6770ac1f2d8cf503748b4699ec2cba87ac679f981bae0ad46028ac17dc5f327bf11bc15ebd277a7b72b9a11d22f28284cfe4a08573de4872a82917bf2a3a

  • SSDEEP

    196608:m7jlYHbTzPd9DKjtdLovD0p6+RtcB1Kw6YHDqqlqGE/2:sjlY7Tzl1W/oorsnB6ADFl5E/2

Score
3/10

Malware Config

Targets

    • Target

      xash3d-fwgs-win32-amd64.7z

    • Size

      8.6MB

    • MD5

      a27f2e3e742c88c36b08a0f2e6194e51

    • SHA1

      7915554bcc82d0ea147c245d5962fed5a4becfe8

    • SHA256

      784b1348a30bfd0dc8bfc44b4db3d3922bd74afa5b71a90dfbd47201151b6309

    • SHA512

      025c6770ac1f2d8cf503748b4699ec2cba87ac679f981bae0ad46028ac17dc5f327bf11bc15ebd277a7b72b9a11d22f28284cfe4a08573de4872a82917bf2a3a

    • SSDEEP

      196608:m7jlYHbTzPd9DKjtdLovD0p6+RtcB1Kw6YHDqqlqGE/2:sjlY7Tzl1W/oorsnB6ADFl5E/2

    Score
    3/10
    • Target

      SDL2.dll

    • Size

      2.4MB

    • MD5

      f4726eb99f3cad40585c4636ace54f64

    • SHA1

      ba1b4ac92577c684e64f28c03d970b68332fced6

    • SHA256

      68e36533f0184b533ec79aa01e835641a099880f63eaefe9425859574a739790

    • SHA512

      cc8dd927120c9a0f0d818c5e94c98b0203c9ef4026ca45b1b7e907ffb9f278927d7a81da02f26849d4dcab27a3e938732f461a2a9f791019dde972f556dc2979

    • SSDEEP

      49152:TAVZNUUUoSnkr2cvDLQ+cCW+3thqzbWU1u19rMqbvZMpZvy:TAVZLB2cvj3DqHWU1myGxMpZv

    Score
    1/10
    • Target

      activities.txt

    • Size

      1KB

    • MD5

      5d5865a647dcdffc1222b97491fe43b2

    • SHA1

      94d9694ed4206051f43f058a89bdbdaa0f477257

    • SHA256

      a4b9703afff4717ff8594570f3d79f0aa14799bf02a70eaacfc81d6cffdbe773

    • SHA512

      a1a8c3105b3572f70c720919d22510c000419486dac9fe239dd1c74885b5db5739cf7e73a6e6483c04172cf6aee33a0e7fa4411567bcb23f9acb2860a146939c

    Score
    1/10
    • Target

      filesystem_stdio.dll

    • Size

      703KB

    • MD5

      571fff40770ca536d9393d76ad0d9158

    • SHA1

      c27a6a22b16efe9e09bbe1e3891a4dda4fbaa561

    • SHA256

      ddec34ecf99a3ae32d962648c429869e50eb479bf813abaf4a0bf49b124a37b5

    • SHA512

      86e8882fa2d9682eefcd6c82303e4d6395103a4614ee9cb831d1eced32237c7b4660d3c6895331a58eebde10d062477bd5a5666b6fc300e14e439ff98882f991

    • SSDEEP

      12288:t14zQ3fjy9TYToVDsHr5BpRR6JXJYfi0OGPYFhZn:t14zQ4+HVBpRYJ+q0O9

    Score
    1/10
    • Target

      filesystem_stdio.pdb

    • Size

      7.2MB

    • MD5

      9c5aac1e4b19210b14f511b40c9f43da

    • SHA1

      973d1e2f838e33098d6890f0ad71f9d9d417dcaf

    • SHA256

      763e940552beac09fd0dc91572d2f0b5dfdc50661d2df69bbeb4029e08412182

    • SHA512

      28d4da9e13a6157843a4a54cf317781e82ddde0d43fd8c1410cfe92918f082f7218268bca6a7cdac4af61357c9d60b435e67b42d94a7bd04fc5d9eb526a64388

    • SSDEEP

      98304:TPWLxuHaESAUJYcZXPTlxYUEn9t9SOJPSW99l:jN1

    Score
    3/10
    • Target

      mdldec.exe

    • Size

      630KB

    • MD5

      12168d0454c2aafaa765cb5c67c454c6

    • SHA1

      a43524f49cb9fcc2e4a02318155cd9797df36bf5

    • SHA256

      e14bf161b87a299aae5fe7550a758473a02751463e7342f2460596b1a815edc8

    • SHA512

      b5bc01dde9e10c0abb4ca8a29bc3912b8e29eb08fca2aee4ca221f3185c6c8c017cfb08ccfae8ecb0c4b1739d186d384938fa4defb17f365af887e9dccc061c3

    • SSDEEP

      12288:W7VIoG83ojkoyZ99n44f5AD3ygDGJ5G3he0hLYQiP:0LZ7n44f5A1GJU3he0hNi

    Score
    1/10
    • Target

      mdldec.pdb

    • Size

      7.0MB

    • MD5

      ec4b5d549d0e5269ce4bcdfc722c0353

    • SHA1

      2130074d44998895903077f7e43fd57790e2fc0c

    • SHA256

      efc4227ec16e26550ed72d3aa53c8900f1bc570aff7d1a5d1a630a4f0518eaf3

    • SHA512

      b9a1f8eff2c4cdd59862781ae01af5efd56b20bdaf0337995b4d15298a3cafeeb9ae34d9ec6ac83eabc1294b87b6e66d8d93e29ed0dbedc32635ef21c09bd0ee

    • SSDEEP

      24576:OScQc3lr9Reorop+UULgUs/uFB6KnufOlt4PiH98oUhRdblK64phlrVhlJN19ltG:tC9IpPmKn68hh6p4/ii/i

    Score
    3/10
    • Target

      menu.dll

    • Size

      1.0MB

    • MD5

      10f226f349790e2fd3bdf7e65583ee56

    • SHA1

      6c244b4c0246862a5d02a7b44d682b5b780e6e9c

    • SHA256

      58483e3a56e0521437a7e5609e98593c6bae3e1f6ab9968639a723fabf93f936

    • SHA512

      7ca27ce1047648bedc534477c8bc7370296d12c57c496f50dc09334b79186bb682a2f37bb168e74c9aae2e680855f8846e6edffb9d6e44ca682c80e61a25eaef

    • SSDEEP

      12288:jxVwKFYoMwIjHl2jJivkeSzu5/IdmHkm5qswzSNTOoZfwOvyEZotZNVF:jxVMHpjHl2akyHLqjzbWfw4yCGF

    Score
    1/10
    • Target

      menu.pdb

    • Size

      8.9MB

    • MD5

      241c3dbd2f08832522660bc0c426bc22

    • SHA1

      4dba3784f819f611cf330e423d5625217b391ff3

    • SHA256

      a7d0af06af44099ec3923d10c5ea58be8c3c8f37cf026d1594f4e82a241e9e6b

    • SHA512

      ecd5bcc136e4c7b4ac1a831cd7b57128be8d3e122d5ce632ffc97fc302c4a82103f41bbb8d118b62edf95389edb48be3f4388bfda6ad7ad81707f083d2771fe8

    • SSDEEP

      98304:kiydlSHQXUlV/NZ+8xjDlaboOjXlZ5Awlr3rg+8slkJRm6UlV/NZ+8xjDlaboOj6:hydlSHQhkJRm270

    Score
    3/10
    • Target

      ref_gl.dll

    • Size

      907KB

    • MD5

      d1e1d25bfcc346a7bc17b6066162409e

    • SHA1

      8510f2e41ee0ca7aed3826f6553c87b128659290

    • SHA256

      fe96a7e3f360bd23dccaad481a4c0680a99347852ab2106710489a9513f5daa4

    • SHA512

      cd2c7135038e14ab1c6ceb2970c436ba92b670944d2183fa1e52f0a85be7bdedecb79b0e1355ee900bfcb8a34364301d17d346cf7e6fab6594a8c2c57e02db29

    • SSDEEP

      24576:NVTq33Zl5UpQ1jILNKzZk5wvnBnXK4eyxqssR:NZq33ZlCpQNILNA1XK4eUqj

    Score
    1/10
    • Target

      ref_gl.pdb

    • Size

      7.2MB

    • MD5

      27fd3d866162f77d6b9e510045e77437

    • SHA1

      61d5821265aede7ea6110fbaa741796743832353

    • SHA256

      904f2f77c167f5309fb4c77ae12c3193b00c63b4188e8e1ec877a8fc6136155b

    • SHA512

      8db6acbc1c0ef35f4e7c45c7a90ec0de6104976eef7c2460f374d837290af3fd7d76f85d73849d4850a49c590428e95766898ca18a6e79a09e6338ff7c876057

    • SSDEEP

      98304:n9fp1Oq/LT9pk+xmwhHl8mtJbLHsyR9JmUmXmzARHjTP16G4uq/LT9pk+xmwhHln:n9fp1FARHjp4iAsp81

    Score
    3/10
    • Target

      ref_soft.dll

    • Size

      808KB

    • MD5

      c48f99afa42319dd285dc303f04deb37

    • SHA1

      1a5687095075b31d9fa8d6489b713cd2bb17dccd

    • SHA256

      b3473b8e5ccd541cfae7fcb4fee5b1df483bfd1edd27eae61f44f94980211a8a

    • SHA512

      09018fad9a5a3f8396f345485cb74215691266800465477e85bac88a2c8f590251d06e44896e808fa557d33a131a936e8cb576b33793fadf7333b613ca577cc1

    • SSDEEP

      12288:zX62LCrZcSJNAhOQRsH5X5skQeruyG9IEsfx1Tso9L4d:7LCrZcSGe5skQkqZs5OcL4

    Score
    1/10
    • Target

      ref_soft.pdb

    • Size

      6.9MB

    • MD5

      61eb3b092089955da958a9c150ddde50

    • SHA1

      8ace3ba4ffb1d8323aa33137845bb9abddf25972

    • SHA256

      1ac8734a5e5a50ad93cc2412f0519da4e0591a1164d91527a81eae6c03e70856

    • SHA512

      b9f38cfb50fba30afe94f401f7e4b63a80e31ea4e00f23e67a2aa786c339d72d2cdd7f1e57839dc12cad9d38e96e27d9425bcf61301e9aed8c17623988eebc9f

    • SSDEEP

      98304:ISjG7LfxqUcwEaRUWsnGicFxa9H7FelALxqUcwEaRUCsId9vVnR6uh:ISjG7L2GicfeyAFd9vx

    Score
    3/10
    • Target

      valve/extras.pk3

    • Size

      2.3MB

    • MD5

      5196bdfcf879d09dcfdc095726ab7a85

    • SHA1

      0894db0fc13a4e592557b293a4d69c9d2f49d94f

    • SHA256

      dff5896437a624f1205c8579342f1f4201bff389a9c0665d4832e685dcd5d042

    • SHA512

      f15f8dbe07955d65fd92cf7f437119bddf6eded4451eb5bad31b82ea023f5e2be21acdaba7a0de5676824e553021e04fdeea9ed6a1f1710ef1d19ef8a419d77d

    • SSDEEP

      24576:ir5mqqZHP5A9vW0OHxMvym93475Ql34eJKOlEqIDCO41X/awk79:ir5mqqZHPS9O9xSyeI5O7lEquC75iwS9

    Score
    1/10
    • Target

      touch_default/map.png

    • Size

      2KB

    • MD5

      b8dbbbbd5dc53e42fea9df3a32b701a2

    • SHA1

      ca3595e8522d6264d9ca4786c0546a788d36bdda

    • SHA256

      9976a4e2c5e8d7c442d290c8b7a131f56fc2e9760dcd1b6b957c603fd98f3a17

    • SHA512

      995fff2cabf724facafd08657f6ca2072fa94dad852c0031c7004b76daefcefa897e6b5df0803867c2a4e04e835aa3c979c07c89432b04e87aae232db30a538e

    Score
    3/10
    • Target

      touch_default/menu.png

    • Size

      2KB

    • MD5

      73d0de335d03ecfc0de8ed1d0e76c7d7

    • SHA1

      7f9fa0db5310d168fa56a4e2e01d9359adeaa1f4

    • SHA256

      0747230199bd66d0665fddef0654a8ec7c22b023a801d280cccec19b0c645595

    • SHA512

      72fa8c2aaa056843a0bef531765bc0c0121e9db0530adb163875c5ba1656317971ac8745d7adf783616baf89e1c782a9ed70c8bebc69cfb955056847895d901d

    Score
    3/10
    • Target

      touch_default/next_weap.png

    • Size

      494B

    • MD5

      050488421031e2a5052114e99c5e5876

    • SHA1

      5c4097e7c4fe68a68f42c02cb0afa6bf29fb5bd1

    • SHA256

      f4b2d033f6433f51520beae3f6bb575b5687b1aeb4907926a5005faf3c7d18be

    • SHA512

      9d1511441fe4f774bd3597eaa62b48e96f2470ef7995a4c1c4143c241079bafb75f937be4ca31418328041bf9800e1fa74b5e077ea8b256dfd9a7c1049184c21

    Score
    3/10
    • Target

      touch_default/numbers.cfg

    • Size

      1KB

    • MD5

      acca31e96fd30680ee1786feef5b1c94

    • SHA1

      5ecdd95c4ac8fc62c920e32e2cae30d78468aee5

    • SHA256

      c88afdddec53c27ba517bfb9fa7f4a87f8157332f64a2cc26e02621b41d7d472

    • SHA512

      738207f48d7452857fbdf398c68e47ffcd8c258113344d6535e412314a745c8eb080f3011ecfbc57489006887898da33f5217bcfb75534a35958dc473cd321b0

    Score
    3/10
    • Target

      touch_default/prev_weap.png

    • Size

      459B

    • MD5

      437da8bf19d1bd46d6ff48f158581a17

    • SHA1

      0b843a53a98ec531847ccd78534fe315b5215e0b

    • SHA256

      165113d0235ec43bf5d3998bae259160544c59bb9019284ab302ec0ab3c67c5f

    • SHA512

      75d2d789890064b6f0f87f85848166a5b898a0402be799601655a4a8119bd9bf323fecec1cdb3f6d74670a30342b3e318639f9309b9a1ce82fe874f9977b3345

    Score
    3/10
    • Target

      touch_default/reload.png

    • Size

      4KB

    • MD5

      25eef5931be5b19d3d1c27963a938e7b

    • SHA1

      84a90f3704664ce058f1f22521cbbc89afbcb6df

    • SHA256

      bd3862abaf7ae75c94b5262111f3f73fd77f077996260d114a3ce0d1e9d0a770

    • SHA512

      fe8be2c622ab77f5a3cb2debdfd65d5c9bafdb0ae578a508d49e9f079204e79929759696b2395d997eb71f932bfb1cc0e054cb2e131075bffe83b760705e929e

    • SSDEEP

      96:7Y0MDHUB5y+Ef/DvoGWTHe07ROcG7M7Fe6Ur1qedljcoXa7/fbLH2XgC7lW5Ic:k0EHiytf/DAFdYwFe7oenjcoXY/fbLH7

    Score
    3/10
    • Target

      touch_default/save.png

    • Size

      688B

    • MD5

      922100e10277cdcc16887d24f5857475

    • SHA1

      73e90fdfece61b24a4f6d725f7e8032381d935de

    • SHA256

      5ca278d3170270dabca51d8099d684048ebfe89764a7c538571cdf50993878a2

    • SHA512

      2b280632dc3d47c2be4865d6f927cd53b69d86b26ca315beecb85781f419051af45b67415a17dbad2e5e7e6bb170a90a639b927446a5d575720d262b1e99e28e

    Score
    3/10
    • Target

      touch_default/settings.png

    • Size

      4KB

    • MD5

      0f61f6fd8dc3061e7bb9d8a1d81c4dde

    • SHA1

      1ca2b738f18788404764bbf7521f390189e85c12

    • SHA256

      f58da86cefca0c39e4c492d10d86f523ca53926ad6613f1058916b3b4816afe7

    • SHA512

      fef6b7e4dc3f45058992be72c9622e8a3426ed204f97cde95bc0c32da0ea5bb24899a62ff95e99f021747fb644b88623ec474cfac5e9384450dd1e33d5a92d66

    • SSDEEP

      48:DKrquyeUoSPmdbwETTzAythktoIdQYtQL/nBCCl7I8oQVODhIyTRLiVu18R0CRng:DKvUz8HAyvYrQYKLUQloQI1pFmLe

    Score
    3/10
    • Target

      touch_default/shoot.png

    • Size

      1KB

    • MD5

      9429ba7f307e1716f1d109cf2b13008e

    • SHA1

      ff774f97078857fd4aac9dfc11a9d44a43c72e1d

    • SHA256

      3ee23e9d14bed84087bf6110d9e452b10dbfb548e490573a59a89e81f8166481

    • SHA512

      aac36a38abd6d01e0e528c8f762a8325602f0b1fd3d65bc802bcb63a2988d991f95f21ef120b641c4f6600c9790dae32622c30b8283070270c9e5f86d157e194

    Score
    3/10
    • Target

      touch_default/shoot_alt.png

    • Size

      2KB

    • MD5

      72b16db047660412d6bcb278479b21e8

    • SHA1

      fd40907195be748041e5bba08744da8e9371e97a

    • SHA256

      0974612609d224a14328a13803e7ff93ba29e936549ea4e2f0fb45f200b382e2

    • SHA512

      c56a65ac0a2335cdae9a4023eb4c43167bc239db915438d89ee71352906cea54fa622d0f42be956a1083e8bb5b5d0d78c0b36c2e157259daba27b684c7cee6ba

    Score
    3/10
    • Target

      touch_default/show_weapons.png

    • Size

      558B

    • MD5

      85a1c1ef7cfa99589e41fb5d2d931fac

    • SHA1

      76951fd518fa7256dadb1361b7e23ef24467a273

    • SHA256

      c407a43f7020c80b385821fe9149ae54803f3d9f3708d81883a63024f1770f9c

    • SHA512

      456da755dcaeb84f6311605ae6a029878c4cb78dbb75dbad4d858ed1aa8a6aaaa580801fc36518c50af268d95a953d1c491b2042303e0074627fbd8328bfd4ef

    Score
    3/10
    • Target

      touch_default/spray.png

    • Size

      4KB

    • MD5

      001238a7d09ee16e871ec0f1c9c7c982

    • SHA1

      ecea24f214482b53cf5912880b3623b92448867e

    • SHA256

      8e7145fc1f54f1a15e2803ecb44a58c974389861dd43550c41be0a1827dc93f0

    • SHA512

      3f82eaa4e9ff52cc369f7c29742cc61d27bfc5c30e1beadbacb3e768eab562b8715f75db2a5da4d41e481754e6ee5e57f8493f24afec3ce686d564bd16bed718

    • SSDEEP

      96:Zyq6Nf0vo3LJfhVkXrh48WaIqwIsONOmt+PphwdiUTxhuuC:ZyPNf0QbOXrCgN+TwdT4D

    Score
    3/10
    • Target

      touch_default/tduck.png

    • Size

      8KB

    • MD5

      5b46f372f7c0b82acfc8fd7adb373e09

    • SHA1

      fb7b2308b5b09600a75e8f4b78c0e7a3fad86abe

    • SHA256

      92cb321700f7db33349beed923d4306e38c5f94fdbe5760eff3c57c18e806bd1

    • SHA512

      72ab6fd449f879da994fa4d13da60fca3b840befeab731846ed5e96e9e521102d6888f09f306879a6c8242f7c8469235ef24d11ea474f937b3e3fc99f50352f3

    • SSDEEP

      192:HbRXWJSJzXOdVUAEYpAq+MtpbhqVT52PP2bBG7JSfSBvuzoEtc/CHbr:HbRGaD0NpAlMeAP6wuSIMyFHbr

    Score
    3/10
    • Target

      touch_default/use.png

    • Size

      3KB

    • MD5

      f6031009ba0f9f965b6a2755cd92b544

    • SHA1

      d89555445eb9ada84ef31c931fe033becf1a7f39

    • SHA256

      c22690fa261b0e524050dd248e402b31cbccd8d0c5a35e53b418542da744139f

    • SHA512

      856e38233e803eba635d8783f91dc07748b8c1602daf11b913ff33c145e986a384654baa61a620287df0ce095b2abc685daaa6153e10be0763a5d45f9ceeac10

    Score
    3/10
    • Target

      xash.dll

    • Size

      2.5MB

    • MD5

      39388be0b96d527fccdbc35fa55fcb9e

    • SHA1

      3cf302c872f7f8a29293ade2a3fbcffec3332c1f

    • SHA256

      ef71b6ad8f8449c47930f546bb1528c8e8ffa047364a323902a12115ee4f5c98

    • SHA512

      076539af54485804d115df8bec2503f0378fa48b354b308c081137020db7b99093f3aba97c030193fa58ee2987693e4544b6377fa664b8fad6c8bb7c5f0dd10a

    • SSDEEP

      49152:xTiwd8WA0eRCZQvFFfzQ7+TQcuR7lZFWdMUoAY:x6cZQvFQ+aZF8Ml

    Score
    1/10
    • Target

      xash.pdb

    • Size

      14.1MB

    • MD5

      023bbc2f97cf72ab71bf06cf948b9311

    • SHA1

      1c1bd28ef9e4aac0695c409323753b12458518ae

    • SHA256

      43fd694fda8a6d95c94e896ce1535be2551f8d5054d05bf271a8a9003ec41a62

    • SHA512

      13e43c1bd6e1c7c4158781c668c3ec27485539aade787d1bd7e291b1020ac5a4222014d5eeb294d2529ad29eb175e6cd10d37fed8298f4c2691b32576899375a

    • SSDEEP

      98304:Wmzrl1VhyHMd6zOXp9zWpnaInlPF8x5OI4qs870aHq:WelhyHRzOXp9zWpl0x5OI48i

    Score
    3/10
    • Target

      xash3d.exe

    • Size

      597KB

    • MD5

      1d4af76844aebb8668c8512359bdd44a

    • SHA1

      64a8e781ed91820a49024a6be7cfe26cdc437caa

    • SHA256

      1dbc6a21d1e3879dc254960c66c14e09fda7c22a6d951bc2215aae0302b696ec

    • SHA512

      e4ab9c9439f6db883451ee28c09fc9df4e40d2fcdf7dd0cb03c394fbb51c7fa4f5afdc6a36c074a3712df6644b492173429e809be3166ca14e9bee55c19eb2d0

    • SSDEEP

      6144:OfVRu1W1iXUYQ9SfckzHuqSsBNHL5R9Bv3edmIE5/N4MNw4nCMnC34k:OfPKW1iX7QCfi7YNHZBvIE57CT

    Score
    1/10
    • Target

      xash3d.pdb

    • Size

      5.8MB

    • MD5

      891125d3f05833c1f5783ff9911a935e

    • SHA1

      adc438fe72be50d3db033ca2a94eefc1dff2d9a8

    • SHA256

      5449f21e4aa531f863b5d3dae6aec0f5cb08b4a7699f9158d8f48e04d306b2ea

    • SHA512

      97124631b0b7279e99756df470fee272ef7cab146629996c33f4018127561d462c2abf0c8503ab90ef6709cb646de0fb6151278e800ef253d7914a3b7b3b7154

    • SSDEEP

      24576:Dbq6scrrz6ll3VguZ+L86mtrifhfooJJOx4Kv86E3HpYNtR0XA0iIgjQgNogo226:Hq7i5foEtXeIgV2/i

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks