Overview

overview

3

Static

static

3

Engine/Bin...64.dll

windows7-x64

1

Engine/Bin...64.dll

windows10-2004-x64

1

Engine/Bin...64.dll

windows7-x64

1

Engine/Bin...64.dll

windows10-2004-x64

1

Engine/Bin...64.dll

windows7-x64

1

Engine/Bin...64.dll

windows10-2004-x64

1

Engine/Bin...64.dll

windows7-x64

1

Engine/Bin...64.dll

windows10-2004-x64

1

Engine/Bin...64.dll

windows7-x64

1

Engine/Bin...64.dll

windows10-2004-x64

1

Engine/Bin...64.dll

windows7-x64

1

Engine/Bin...64.dll

windows10-2004-x64

1

Engine/Bin...64.dll

windows7-x64

1

Engine/Bin...64.dll

windows10-2004-x64

1

Engine/Bin...64.dll

windows7-x64

1

Engine/Bin...64.dll

windows10-2004-x64

1

Engine/Bin...64.dll

windows7-x64

1

Engine/Bin...64.dll

windows10-2004-x64

1

Engine/Bin...64.dll

windows7-x64

1

Engine/Bin...64.dll

windows10-2004-x64

1

Engine/Bin...64.dll

windows7-x64

1

Engine/Bin...64.dll

windows10-2004-x64

1

Engine/Bin...64.dll

windows7-x64

1

Engine/Bin...64.dll

windows10-2004-x64

1

Engine/Bin...64.dll

windows7-x64

1

Engine/Bin...64.dll

windows10-2004-x64

1

Engine/Bin...64.dll

windows7-x64

1

Engine/Bin...64.dll

windows10-2004-x64

1

Engine/Bin...me.dll

windows10-2004-x64

1

MediocreMa...t2.exe

windows7-x64

1

MediocreMa...t2.exe

windows10-2004-x64

1

MediocreMa...ng.exe

windows7-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MMA2.zip

  • Size

    38.9MB

  • Sample

    240609-lx9t7shg42

  • MD5

    eb894eafc31703845287695c2245fb34

  • SHA1

    e3e3b1ecccef13d21e3b6338520133f044db5e2e

  • SHA256

    00c0a0334facc04c53d881507f5017718e0332b9a1c7d15a5f9dd5a39d090a14

  • SHA512

    0b102b39e0d2cf5dd0952389aa7f9fd5da97c2d019fb5934478230a8ffc530711bc0d9cabe7930e6f622fce9787997d8c0e8032369a6fbd54fcff61afaeaed76

  • SSDEEP

    786432:UKWAkMBrPep5m/KwbgC0UpOgxkKEXreKbsqYw4i2UWJ1neHqKn7xNalKfKIniyl:SAkuPAVwbgnLgxkTrsw4i2UWJ1iJ/aYP

Score
3/10

Malware Config

Targets

    • Target

      Engine/Binaries/ThirdParty/NVIDIA/NVaftermath/Win64/GFSDK_Aftermath_Lib.x64.dll

    • Size

      113KB

    • MD5

      73fef0084f9e265e1091584e48343ac6

    • SHA1

      c91b14bd430e7d6460238c84cf19cea5e47a8d32

    • SHA256

      7ef05f61a31464f8e8b232014157614e0a211b8bb2eb699bdc11a06f9bc94cff

    • SHA512

      584581cab9dac2a8edb3e7129209ec5ffce5cbf75f50e140b73c4d1363d8cae53afb8bf6ac5e18d8d69a50c2dc87d7382e4f03e5b3fb798f8621f2d016d6e1bf

    • SSDEEP

      3072:GL1w8yONQj23ta735JRF/CV8m4q1aj8tPlUgQk2VhLxhwxMaYM:7Bj23AT/R1E

    Score
    1/10
    behavioral1behavioral2

    • Target

      Engine/Binaries/ThirdParty/Ogg/Win64/VS2015/libogg_64.dll

    • Size

      48KB

    • MD5

      cd1f16736ccc5dd8c8ce8525957f4cfb

    • SHA1

      654144e0ddedc26b0b3be8e6562784abad1b471f

    • SHA256

      284a6e70a6dce01f8a02d93e1bb78baf0efb6140459c587d8986d59fb6bd675b

    • SHA512

      357df96397e21662194a30ce7f5d53cc202fcc464e1c06312eb12031c5683305638b7e674e5b4b758e142facb00963a53c419c430ea2b419b62f97c14b4812af

    • SSDEEP

      384:GRKN7KRked7VWjLmPnUunFqphqaNQL2PnQftfKNRvrzAcojOYPu:dkSQyQUuFq19HAhjXu

    Score
    1/10
    behavioral3behavioral4

    • Target

      Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/APEX_Clothing_x64.dll

    • Size

      1.2MB

    • MD5

      aee966aa4ef3d77e041d8e98c32ac59a

    • SHA1

      116a092dfa0c258f9eceab45a08ee8beab4b84bb

    • SHA256

      bc14f2165f8f3acaf521728a460012787ccad8e85ba3e8b60d4d4d799ad68783

    • SHA512

      44bc59406664d7f9b56a9dcbbabce097f6ba302bce42726b2bea821a826a206dec7078a2ead8b7bd0b3ce806923995f78c223635aebc532d53ddfce9fa488ca3

    • SSDEEP

      24576:BzySwaOpIYRaajq7Kche5eMjeFFg84cnK0L:Bzy5acINa+he5vjQC84L

    Score
    1/10
    behavioral5behavioral6

    • Target

      Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/APEX_Destructible_x64.dll

    • Size

      1.9MB

    • MD5

      7f69a219044e6578127791c568052b6c

    • SHA1

      668fc68f7356d4a683fc8e5d2ade3c3f5e5d41d4

    • SHA256

      12b594e6a5d8274ca74d8ec252b0e9eb068667a55a572cb069ee29e678c2a67d

    • SHA512

      daf140919234136f3baa679ce8e4f00e8ea008383590c6fa2f15e666b9ebf86c10d7183cc8c1726bac6221a5618a9673e8ba75028f535bbe0a6d66113fa34ef2

    • SSDEEP

      49152:e+n1sohJtgLv4dRNbqspV2y0VIz6Rvsla:pgDS4

    Score
    1/10
    behavioral7behavioral8

    • Target

      Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/APEX_Legacy_x64.dll

    • Size

      3.2MB

    • MD5

      fe647c228487836a6b3ecc4c3ea6538e

    • SHA1

      7f527636553947417184d48ef2703b2b71eef95e

    • SHA256

      ae0fc15c4b3614441efe3d0a4f10d62e844bc33d61082b88fcf24d2cd18743f3

    • SHA512

      fe16354aa5605e46f89ad06d8660bbdddb773d7f17901b7b953dd23321b3e84e265c356006241d0efd5f5eb5f6b5f52cccd4460be4bd9ea2796709b02ef3fe18

    • SSDEEP

      24576:+BdqSe/jHtRSqk+mqxqVUP0cNWRtacU5ZjJQAWYUWx/K1b9CMVc:+DqSeaq5UUotVU5ZjRUu/Abo

    Score
    1/10
    behavioral10behavioral9

    • Target

      Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/ApexFramework_x64.dll

    • Size

      1020KB

    • MD5

      04c8f90531b3df07ec1df6275293ce8f

    • SHA1

      d1d6486de70ea3b39e440c4672ff8383b6967337

    • SHA256

      2c8b0d14e497fa940f474fd1b41b2ebbb412e40e07f87def6d2a485b7550b8a2

    • SHA512

      34785377628e5f15c048f812a25ab13843e3ea8022793a7d87f1eab6dc8e5c9274f52b43886583268b641e6aa9d2efb0cf43abdb58c1830401441ba606075895

    • SSDEEP

      12288:mQF2vHn5pMINjnQmM4y+kbpQFgApPH7ef5SWk+7D:ZFIgUZMP+kbpQ+AF7K5Z

    Score
    1/10
    behavioral11behavioral12

    • Target

      Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/NvCloth_x64.dll

    • Size

      259KB

    • MD5

      1f5241126af6ebd9b4e4b282e60bdf6d

    • SHA1

      ff1fbbce72306eb3fe1914bb9a6d808689c89e48

    • SHA256

      425a8d425377f924450620aa1e5319c93a55aa966f894df1454e6235f28d9b49

    • SHA512

      f09d1715092d3f2cbaf431aca5d363c17ec9158f2453dd9b4fbd8e7152c4fed86c02dc7ca7af1c158d4be47e8ae9d006c8dd47947cd8aa51daf729d11470fe75

    • SSDEEP

      3072:j9NOvjZC1mcpyk1gSAUDf+zVpdy9RukNtODmimTbxrq42evBDzrxMQmcdXH2Z8+F:j9qjZAmozgdUD2zDdKvtOabdqWXhQL2

    Score
    1/10
    behavioral13behavioral14

    • Target

      Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PhysX3Common_x64.dll

    • Size

      1.5MB

    • MD5

      54b4ba4cdcf411f98995930206d3a4f5

    • SHA1

      56bfb1dd25582becfeec964c8e309457ceea2636

    • SHA256

      ac07d52d513f223c6b88c0b3890ef13842cdafd886f1daeb6adbc8b293731f95

    • SHA512

      e6fa1609dfba368ee68a41cb085d937847b13105804857839baf4f6b8f8fcf9e1e4ffc35a21f2607ebd6f41bdedbf47674f2875cb0b2cae7ce6c7b517dd5ea79

    • SSDEEP

      24576:wf3SYvMHtgWPQPTWCN8a5ttbsMYNvw9WdwQoQk98LOZ05ci:wf3SYvYkbNYNI9WackqiZ05

    Score
    1/10
    behavioral15behavioral16

    • Target

      Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PhysX3Cooking_x64.dll

    • Size

      240KB

    • MD5

      0b6d32f8edeee4cd0455e0929aa8cd77

    • SHA1

      7ce42ea626979dfbc6b9dd3928f2d35ccc4e2d9a

    • SHA256

      4b7941801c62485e5e9899db33c4b545cf9e1cd018def9b9b245cc18c01b3a81

    • SHA512

      b13e88a35a3b49c975f3b339bb33366fda7ba2d9351b49dbf1560d045d9cf3bfae8f4913a44b3825d006bc60f3d79f2573e5b71d09325214bc3d3c875715c6c3

    • SSDEEP

      3072:JMK7GRW4uqnmOrUAs1QwZH46AxSBgm9u+0x29vPnhOCbQTalVKopK1:f7G7uqn5UAs1PZXi2gm9ux25vllV

    Score
    1/10
    behavioral17behavioral18

    • Target

      Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PhysX3_x64.dll

    • Size

      2.0MB

    • MD5

      e4fa52b88a0aca4d25a6a718c239a067

    • SHA1

      addfabce2b70573c8659443bd5b3410b81f86b51

    • SHA256

      a9cd6fe508e660de04c71cc2ee89a6924cac4bc03a9933528b5f5fa9ad08295f

    • SHA512

      aee127e05bffe2aa019a84e6decb372bd230217d5dd660ec2869aeac75a3bd7692d5452b71ae0c03285da7e0b18062d94a21bc0b12dc873183422a3f198c7bf5

    • SSDEEP

      49152:3xMF3y2r4loaf9RuHHH78oO7VZASYOdfRVSZKes:24UHHH7Pbcd

    Score
    1/10
    behavioral19behavioral20

    • Target

      Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PxFoundation_x64.dll

    • Size

      53KB

    • MD5

      1be17dfcc6677d73e600cbb6dab6933b

    • SHA1

      34efb58dec78408ee7fcde40083b9d967db8f6ec

    • SHA256

      9823910918df038c0556da8ae15ee68dd249d47b7e427cf9323674269044be56

    • SHA512

      1ff6f2c063652066b2e24079315e70e718f45f65f7d354b5fad4df810c45e9bf588d6cb3a5a0823f9e5054c0d76d835ebf873bfe6d41c80459584a438bc4d164

    • SSDEEP

      768:SNadQlOR566VQm/KQqFlr1Kd4PCMKB06bHFwZDtN:SgdQlaQ6Gm+lrMKYFwZDtN

    Score
    1/10
    behavioral21behavioral22

    • Target

      Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PxPvdSDK_x64.dll

    • Size

      185KB

    • MD5

      929a425e015478351a1226402b1f7778

    • SHA1

      adcca6e9a547d1529037b550ed7be84f37754c82

    • SHA256

      eab03caf26ab9042ed0f1000710d6a6b0df35ceb318a19c8070a82a03c1e81dc

    • SHA512

      61ad4ea2bc06f9291bd6b5ea0fa0e31e29385e9a6ec15e94fbd8c2db752be820c5d1f9609399f292c3a70af5f44f70c5f2f02125f6a34db19f81050ca0e6d0e2

    • SSDEEP

      3072:yKO0nhsXVN/MQKRncJsU40H1c8ao59d94hwaruKC:y9lIQK2X40HXaDhwaruK

    Score
    1/10
    behavioral23behavioral24

    • Target

      Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbis_64.dll

    • Size

      1.6MB

    • MD5

      ce94029c20227191bf97f6d719b651c5

    • SHA1

      aab805e149c4d8e79005ed190e60fcf11cd2639a

    • SHA256

      0f66dcb5837e9b59c499277fd272b862043356aa9145802cf0a63e00a1bcca59

    • SHA512

      3a2aab9532b249d289395bded693d29e611322fbcda206e011877512764e6f2a55091cb93099282e02ce0ab2b4f98aa1b9f7f7343bec8297898f3d2331cd10fa

    • SSDEEP

      6144:XbbUbUwlPxtVNA0ueMSMMYGUXoz0A1VoqxRCv:PulPcDe2XNS2

    Score
    1/10
    behavioral25behavioral26

    • Target

      Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbisfile_64.dll

    • Size

      37KB

    • MD5

      f453241dec90dbfa5b7322cc4a67a143

    • SHA1

      abcb7d34014ea23a64b8fe077ff629de6f10e9f1

    • SHA256

      a9d6f5538f44011c1f65d7ace64216a237636717cb0c8c59f4f89cc08dd3d24f

    • SHA512

      1648b5ece47cd2ab447c02a8fd0086abc60bbd2e498268311bbe305dc8cf2407ecc110cf266e8c95ae9c6a3c48c78b92aaa763c45c63335defa62f61672b9cba

    • SSDEEP

      384:Me2rmsvpGwK9QaXYBZ9b/kwmVkSA3/pTNYTdk1aLPHXrgP7gpw5WOOBp8F:ynv89iBswdSAQS7kWW/Be

    Score
    1/10
    behavioral27behavioral28

    • Target

      Engine/Binaries/ThirdParty/Windows/DirectX/x64/WinPixEventRuntime.dll

    • Size

      43KB

    • MD5

      ddc606a35700e5b41019b4669a71fccb

    • SHA1

      669768620446f0aac1a18eda98cf6a8decf1b8fc

    • SHA256

      0afaa35527ac034861ffa5564e5f6bd9e4d54e79132b3283cdd98e41f5584d19

    • SHA512

      55e6afaf01ef061f3b1526324d28de2e62a60ec550d1f9a8235eabbb6a6fa3832c98fea1b3a5484e7862f1d5f83a88d6b359ccc6b907b6bb5e4f447de6357d89

    • SSDEEP

      384:k5oadsaUntw9WjiLaODTsr2vdWhGlYscdzpswlbWZelMoq0GftpBjfWS6ERHRN7x:RaU8Wjja71lYFB1lbyaiES6EBI5er

    Score
    1/10
    behavioral29

    • Target

      MediocreMapAssistant2.exe

    • Size

      1.4MB

    • MD5

      219c2cb38b7d4eef41a4bfaf0dfbd867

    • SHA1

      7ca8ea956d0e00f298bc754a0829562c9f95dff8

    • SHA256

      6f2d5fdb307e46df2bae4463a4b5ef19b5cb7d9ccb3df20480074853999e9d81

    • SHA512

      b950262ea048a28a4a037ee033e6d19ef83c7e13c2f680347f87f68c34768174b7532c7a348e5c16362dca817b6e3ce544312cc051aeed5dd38ba3b406b64b9a

    • SSDEEP

      24576:Km1lFmvmHHNuaCzAt1SwYjWhFQkMMdfSHk5BkA1BIlhLFBshUI:X1lAvmnNuaCzAtwrafrSEcA4xBsWI

    Score
    1/10
    behavioral30behavioral31

    • Target

      MediocreMapAssistant2/Binaries/Win64/MediocreMapAssistant2-Win64-Shipping.exe

    • Size

      42.3MB

    • MD5

      31225b73410fd60eb8a7f77ad9f53ec1

    • SHA1

      5017ad0147326d23dcc08793c3a2d809570f4b7c

    • SHA256

      c798c122b08a7f31d5237d7c50aa20806b1f73ff75ec12f6a560d3db80934b86

    • SHA512

      eeb3744d8142bf5d858ac88fbcc046ad8a058801e63e473c5fb935326042894fb344f8bdf7d391a7fcce13a178063d186491c6d825c4c5c2df4f1b948e4b6449

    • SSDEEP

      393216:sQPWN3vB8waBwZr4Jl+6S3Hm5wsSUj09/VQGd:xFk6SXi0F

    Score
    1/10
    behavioral32

MITRE ATT&CK Matrix

Tasks