Overview
overview
3Static
static
3playfabspa...ld.zip
windows7-x64
1playfabspa...ld.zip
windows10-2004-x64
1installer/...rp.dll
windows7-x64
1installer/...rp.dll
windows10-2004-x64
1installer/...on.dll
windows7-x64
1installer/...on.dll
windows10-2004-x64
1installer/...DK.dll
windows7-x64
1installer/...DK.dll
windows10-2004-x64
1installer/...cation
windows7-x64
1installer/...cation
windows10-2004-x64
1installer/...deploy
windows7-x64
3installer/...deploy
windows10-2004-x64
3installer/...or.exe
windows7-x64
3installer/...or.exe
windows10-2004-x64
3installer/...nifest
windows7-x64
3installer/...nifest
windows10-2004-x64
3installer/...ly.dll
windows7-x64
1installer/...ly.dll
windows10-2004-x64
1installer/...cation
windows7-x64
1installer/...cation
windows10-2004-x64
1installer/setup.exe
windows7-x64
3installer/setup.exe
windows10-2004-x64
1General
-
Target
playfabspammerinstallbuild.zip
-
Size
1.1MB
-
Sample
240613-zbbbeazblf
-
MD5
c7e7527c8129d5bbf54754e8ecc52d83
-
SHA1
05563246e785c54c94167bbb83d52db1edf6bc82
-
SHA256
800466ad1908aeb3152d7cf464195cb184791f6803d40367815cfc1f6630b75c
-
SHA512
c0ddfcac8d32bfa60e38e805b23681ce46e7e59cffe6e82d7ab37afe33460d1addda34e7698efe5ad0dc661783cfe1110fa0d349d9a9a28c03a4d376a96041d7
-
SSDEEP
24576:19Mfx+xdZRvAIC2BWc1MYot2vDemH0moVIGjS4D73AWCFpTC/:/qxWZ5AF2Qc1MPQSE0JVIGjSi
Static task
static1
Behavioral task
behavioral1
Sample
playfabspammerinstallbuild.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
playfabspammerinstallbuild.zip
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Microsoft.Playfab.Gaming.GSDK.CSharp.dll
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Microsoft.Playfab.Gaming.GSDK.CSharp.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Newtonsoft.Json.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Newtonsoft.Json.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/PlayFabAllSDK.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/PlayFabAllSDK.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Playfab Remote Player Creator.application
Resource
win7-20240419-en
Behavioral task
behavioral10
Sample
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Playfab Remote Player Creator.application
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Playfab Remote Player Creator.exe.config.deploy
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Playfab Remote Player Creator.exe.config.deploy
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Playfab Remote Player Creator.exe
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Playfab Remote Player Creator.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Playfab Remote Player Creator.exe.manifest
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Playfab Remote Player Creator.exe.manifest
Resource
win10v2004-20240611-en
Behavioral task
behavioral17
Sample
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Polly.dll
Resource
win7-20240611-en
Behavioral task
behavioral18
Sample
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Polly.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral19
Sample
installer/Playfab Remote Player Creator.application
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
installer/Playfab Remote Player Creator.application
Resource
win10v2004-20240611-en
Behavioral task
behavioral21
Sample
installer/setup.exe
Resource
win7-20240419-en
Behavioral task
behavioral22
Sample
installer/setup.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
playfabspammerinstallbuild.zip
-
Size
1.1MB
-
MD5
c7e7527c8129d5bbf54754e8ecc52d83
-
SHA1
05563246e785c54c94167bbb83d52db1edf6bc82
-
SHA256
800466ad1908aeb3152d7cf464195cb184791f6803d40367815cfc1f6630b75c
-
SHA512
c0ddfcac8d32bfa60e38e805b23681ce46e7e59cffe6e82d7ab37afe33460d1addda34e7698efe5ad0dc661783cfe1110fa0d349d9a9a28c03a4d376a96041d7
-
SSDEEP
24576:19Mfx+xdZRvAIC2BWc1MYot2vDemH0moVIGjS4D73AWCFpTC/:/qxWZ5AF2Qc1MPQSE0JVIGjSi
Score1/10 -
-
-
Target
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Microsoft.Playfab.Gaming.GSDK.CSharp.dll.deploy
-
Size
26KB
-
MD5
45addffcfcffd441742f1d44a022230e
-
SHA1
d2ace309e4f613a5fbbd821dc9a851c1d55d4cff
-
SHA256
50842f949db6bf2ec6723a4d4f16bb3592d02baf32e62f1c20c6ea30c1796b69
-
SHA512
73fb7a583770a66d2a6071bc887483e5424d3a8fd956d0714c52ecf7cc73810f37ef521860a7a80a05ecee78018e9ac40283dee57f8d80a5d90e2c44878022cc
-
SSDEEP
384:rM5KKWMp/jqJH/V/TRkc0yFCXTOAQha2C3yPo3EvrEwMW6iJX+Hdt2ECE/WNMnW:rM5KKJZj2/gc0kQTOi8B5+dsGl
Score1/10 -
-
-
Target
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Newtonsoft.Json.dll.deploy
-
Size
647KB
-
MD5
5afda7c7d4f7085e744c2e7599279db3
-
SHA1
3a833eb7c6be203f16799d7b7ccd8b8c9d439261
-
SHA256
f58c374ffcaae4e36d740d90fbf7fe70d0abb7328cd9af3a0a7b70803e994ba4
-
SHA512
7cbbbef742f56af80f1012d7da86fe5375ac05813045756fb45d0691c36ef13c069361457500ba4200157d5ee7922fd118bf4c0635e5192e3f8c6183fd580944
-
SSDEEP
6144:3o4V9ynqKoxhi0gAsfLBhJJzhGIVrdhoHuLFGAJmKApt5psaLGBFahKGRd67XLEm:LyncxQRhJJzhoqgH5sB4dxHG
Score1/10 -
-
-
Target
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/PlayFabAllSDK.dll.deploy
-
Size
1.9MB
-
MD5
2cf2b5012d3a268d649c1f61c48ad583
-
SHA1
4a69e26077b4772f60a7153f00d17f8d1a9c0157
-
SHA256
6e7fb9efb9b65ee95a79fd9023c2c063279666babbfad906c1f2a7ae5048463c
-
SHA512
7fb3461538691da21e96d11d548c7a2eef90a91c3089f8016da9bd7025d697013cfcc12b83c6cf39a044bd3fcd786f590beaf51c14e68540d1dade69e0c085bb
-
SSDEEP
12288:z5OGrnlPWmNa+JDOf77oHqsdtX74hTOaEUckO20x5+1Bb9yviDttm/89HmbbdIxr:1LaAKdhTOaEGOb5+XUviG/80o
Score1/10 -
-
-
Target
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Playfab Remote Player Creator.application
-
Size
5KB
-
MD5
d183381c8d3a83869863e21f318c6b49
-
SHA1
a0bcb95cbfdb22a49327b5914bdbb343243ed3a8
-
SHA256
db77f94940734815b2bbd06d1295b99b7763d5e53966a542f355b32275508a25
-
SHA512
1e6345b03449b3f2b22eca2229d1fb033257944bdb3a38f7a3b46d02051f85cf5bb4c91ad3e9dc3d442b3fb2d4f1a00cba58051c7b2dfea8ff38cfa5818dee59
-
SSDEEP
96:0WLwO9ZcR5n8pcYb24icPk0J2cNIykmO2d5aiE0kmB5ZKto2GBDA:fu9892Hx0McGyHlDIFQA
Score1/10 -
-
-
Target
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Playfab Remote Player Creator.exe.config.deploy
-
Size
187B
-
MD5
15c8c4ba1aa574c0c00fd45bb9cce1ab
-
SHA1
0dad65a3d4e9080fa29c42aa485c6102d2fa8bc8
-
SHA256
f82338e8e9c746b5d95cd2ccc7bf94dd5de2b9b8982fffddf2118e475de50e15
-
SHA512
52baac63399340427b94bfdeb7a42186d5359ce439c3d775497f347089edfbf72a6637b23bb008ab55b8d4dd3b79a7b2eb7c7ef922ea23d0716d5c3536b359d4
Score3/10 -
-
-
Target
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Playfab Remote Player Creator.exe.deploy
-
Size
8KB
-
MD5
5d4d5c0e4454d54f31bd81b0b7ee30ef
-
SHA1
e63bcd5f0cb9044a41880619c176dd8d7f6a6de6
-
SHA256
b1e3617c88a14b921f1d50cd4e01b8880767b65c8a31120e8648ccb34351c623
-
SHA512
2a26f0e77a2196d82b5aec29e6ccfdc9580db3b9cb20bd8135bbdce94562b48dac8cc2eba7e0bda9fc6a618922414a098c7768feda46ae2c424911f1f33f2219
-
SSDEEP
192:erF9n2CvQV1Jk1spJ+SOtQMzS+GQVrtRPpGlh:w2pu1tzVrQlh
Score3/10 -
-
-
Target
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Playfab Remote Player Creator.exe.manifest
-
Size
9KB
-
MD5
9424d22ad455e66f42b6eea532eac7c8
-
SHA1
5ba5a6db4e084b9b93fa69dc69fd14cf89c6c426
-
SHA256
16c99d8e74e496fc80884a14c255a2821de1263e30928e34fb2bf14421b48138
-
SHA512
8fc535c64f49d4d88d12d8215a5bcf35608065a56b3bea762b5cac481c28109f2b35d542c2b108bac83542051e23f909576260b2876075eeb58bcc1a8a205ef7
-
SSDEEP
192:fn1SqVyw5tUebzT6SDQoC+WBhxdh+qHRTBk8DIFQA:ceyw5tUebzT6SD6+WBhxdwmT7kFP
Score3/10 -
-
-
Target
installer/Application Files/Playfab Remote Player Creator_1_0_0_0/Polly.dll.deploy
-
Size
268KB
-
MD5
a59b64eb80ceee01188925f7a8a82f07
-
SHA1
d40d09b9bc8b46ebfe63c6b8e605827156146983
-
SHA256
a320e0c3639470fdb47d097255a5e1b4fa217e3e03c6e850b72dde19dbb2c37a
-
SHA512
102b8bd1da26dc273d888746b2d7d960e714f4c0dc6f73fd843fd0e018c8ea4a6cb53548c21830301b78110df019dd11f5008c67b67116f7e2fad4118d2659b3
-
SSDEEP
3072:SZAWDkTmokB1QmoA5XoQAUk27ZGasJMaRtWct14ClZv3YpsPl:SZU0B5jTAUkGwBXbt1Tz3YW
Score1/10 -
-
-
Target
installer/Playfab Remote Player Creator.application
-
Size
5KB
-
MD5
d183381c8d3a83869863e21f318c6b49
-
SHA1
a0bcb95cbfdb22a49327b5914bdbb343243ed3a8
-
SHA256
db77f94940734815b2bbd06d1295b99b7763d5e53966a542f355b32275508a25
-
SHA512
1e6345b03449b3f2b22eca2229d1fb033257944bdb3a38f7a3b46d02051f85cf5bb4c91ad3e9dc3d442b3fb2d4f1a00cba58051c7b2dfea8ff38cfa5818dee59
-
SSDEEP
96:0WLwO9ZcR5n8pcYb24icPk0J2cNIykmO2d5aiE0kmB5ZKto2GBDA:fu9892Hx0McGyHlDIFQA
Score1/10 -
-
-
Target
installer/setup.exe
-
Size
550KB
-
MD5
b26bef8474c5144a8462590f4fe39dd5
-
SHA1
b080311569b8c01023a3b09385571692843cc6f5
-
SHA256
de9c8cee34632b5ba707224a1600253fe409fb16cfe046c7856728e8dfddfdbb
-
SHA512
376c2ec965681bab3f360669a5b8b2f592be7af818edc2a44608a5a00c32dcc1356e0faa289ce42e3cec97bae6322d6d3b5ddbad20c2552fe4806e31ec8befe9
-
SSDEEP
12288:uzJrNX03US0UrNsfHCCImrm+ueMb01JQntLOCFz9Eekf:uBF0kS0ICJuemFze
Score3/10 -