General

  • Target

    Battly-Launcher-Windows.exe

  • Size

    183.1MB

  • Sample

    240702-z2askazbpb

  • MD5

    777dae8f41c5c9ba97b798fcd52612de

  • SHA1

    03ec3ee7b1e1a47dc8b0e7f5f980ebd7071c469b

  • SHA256

    a1941786149857faebfd4f2731022d8af6aaa984b981bffd40bd123472b0beb4

  • SHA512

    792ccba986338f3a3d5475d615fa276a73c52eb483484ee2fda16a143f1100afdfd0dea2bb309bfba54202e07707df7bb025677f6477bf44ddb8f2282093f592

  • SSDEEP

    3145728:qJcuNt6i+X0MdTUPo+YFawtU4odz5zA436E7IkGl0BkChNw5+VTmms+B6Q8k:ScuN7+QYFjmPz5zAJ0wahNw5+VTTs+Bl

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

https://www.battlylauncher.com

Targets

    • Target

      Battly-Launcher-Windows.exe

    • Size

      183.1MB

    • MD5

      777dae8f41c5c9ba97b798fcd52612de

    • SHA1

      03ec3ee7b1e1a47dc8b0e7f5f980ebd7071c469b

    • SHA256

      a1941786149857faebfd4f2731022d8af6aaa984b981bffd40bd123472b0beb4

    • SHA512

      792ccba986338f3a3d5475d615fa276a73c52eb483484ee2fda16a143f1100afdfd0dea2bb309bfba54202e07707df7bb025677f6477bf44ddb8f2282093f592

    • SSDEEP

      3145728:qJcuNt6i+X0MdTUPo+YFawtU4odz5zA436E7IkGl0BkChNw5+VTmms+B6Q8k:ScuN7+QYFjmPz5zAJ0wahNw5+VTTs+Bl

    Score
    10/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      resources/app/node_modules/adm-zip/adm-zip.js

    • Size

      30KB

    • MD5

      9b6da3cd4a4ce0963e80d0e6dc1a11f1

    • SHA1

      fce6550c2231f60425661f2f7db99efff491cdff

    • SHA256

      cb49867d6ffe8e7c08ad0e6466c86450b0f81910069ed1ad9d5b7b9c27367929

    • SHA512

      38f325ced4315f7fd39f9ec885e1a35f8d5c49bfe9721c3ae0b54d040c76e7df3e6d557f76bb5783594b0fe5c15f9e73f8c7a21fee373ecbd97ed9220d3127ba

    • SSDEEP

      384:T4XzvHf944AOOLlPHWuFz5AjHxLPVzVbAB1kfVeHW3W5SqdCLFWYi82et/2Ktvbe:UzvF4DPHzFn11IqdCpoFaU

    Score
    3/10
    • Target

      resources/app/node_modules/adm-zip/headers/entryHeader.js

    • Size

      11KB

    • MD5

      db0294dd88cf4922e3cbb5e45d087287

    • SHA1

      f46ea2a1a7e9cb0c6c25fc436743b78d95da1841

    • SHA256

      d3ca0adfd642be6287daf5a7cc8d3959332f31ba52b6ef1a53e4520bf4175f3f

    • SHA512

      2f77a248db215a4d7287dfe7227adc1bbd4239d31731a743994dd4a4e4f0aa061dacb3fc9d79f22364d3771ac3b36d41dca5788b34892c94f8cb8d2d95a6b661

    • SSDEEP

      192:ybVz3fxOy27Ad1mMcyfPrzq638jfhDq5YoYfXSlAHhDQf:y5fxOv7VMcyfPXqm8jfhD+

    Score
    3/10
    • Target

      resources/app/node_modules/adm-zip/headers/index.js

    • Size

      94B

    • MD5

      64bc889b89f1c8a04a698a8f74e24e5b

    • SHA1

      68781da04cf1ebc4f03434ea5b2b65f10cca07e6

    • SHA256

      536e4b5bf009a3d9f6eccfbbc4157cb6de663d889e0826ea5f6e5fa17aaeb8bf

    • SHA512

      9eb207fa61862aebd9cc5a89f85757313c7f163ea0f5a15c16250f79845b9caa1d8109bc3e634a9ed3fb0616c71aed3005ace48eff0941518c778c3063613975

    Score
    3/10
    • Target

      resources/app/node_modules/adm-zip/headers/mainHeader.js

    • Size

      4KB

    • MD5

      1d35f59aece6922da87e6183e7f8379b

    • SHA1

      b772c6b2285d6f7c099bfd7ace005e730bd12c78

    • SHA256

      3269b558fd8990df8ae1f500268e0512854c04bffefcaa0e584360de1809b84a

    • SHA512

      3cb59c8fb586a89936ad4fbd4d29c54cfe8e0ae9abcc4ff70ef03a3cdbefff9b4a5d91658da79e6746ab01af9cfc57dd908b8e478ee4aee5848e0252a1f68603

    • SSDEEP

      96:riWDe6p2ciGztwfWH7gNJzaI2mhUJfPok1:rFDe6pPyEp1

    Score
    3/10
    • Target

      resources/app/node_modules/adm-zip/methods/deflater.js

    • Size

      1021B

    • MD5

      41fd6791497f7d74ee56a7753e08da66

    • SHA1

      bd62d07bfe703da89172fcfeaa8848d6ba5c68b4

    • SHA256

      6dc41b2460594cfa5136b797653c166b2f7403820a40f2fca17cca35a5de1b5f

    • SHA512

      5f16aeb477321470986a8c9807ebf3b75e979e5fb34156028ef56f44f38c4f4d72d9d086784e9dfedeffa61f91f973b6ac7e7ba1730eebd86bb549de2dbb4761

    Score
    3/10
    • Target

      resources/app/node_modules/adm-zip/methods/index.js

    • Size

      128B

    • MD5

      74d54dda1e050cad9b31da325f92fb01

    • SHA1

      683b0412f3bdb3ae54cd809e37f456dade4d046a

    • SHA256

      d67714f1a04be942f90be77069af3ff4214aa8ee84b26edeff3a87eb0d8e2dc0

    • SHA512

      88ff974e69207c427ce1c9161489a275c4328ba392da65b268614fd5c66ef9feb10dafe1464dcc5873221de61bdb045dcf47092760c973ec06825158978df3e6

    Score
    3/10
    • Target

      resources/app/node_modules/adm-zip/methods/inflater.js

    • Size

      936B

    • MD5

      ddf58fccf9d270a32d6fe17fe86a26f9

    • SHA1

      c720d51c923aa71bce2a27a3d081af09de0e2a67

    • SHA256

      ac2c664bd94fe9daee76174aa00d149d60bbbe6ae5d5865b14bd76e9b7d2d612

    • SHA512

      bc5914af2950f7e87b0071d54f885b7ef494cee1f036e9fe2e31365506ab78a6327dd25d2c565c09b0ecd465ddc79bb8fc5ff7b6c3a9b15a4d4f044fe816d610

    Score
    3/10
    • Target

      resources/app/node_modules/adm-zip/methods/zipcrypto.js

    • Size

      5KB

    • MD5

      84d22177957b42a5f8cef39e729bcaef

    • SHA1

      6a6dea4aab4c6c8b1b4b19a246f01b03cb114711

    • SHA256

      2b76c14cac47da833e1bdf690faf68acc0f5ceb645605df876f42e67801d2f1c

    • SHA512

      a94de7eb1aac18bba8854041a8d9a2f035dacc338e007462d891c6557f68c7a6d179d82078f0bddc047e29766f961e7c83c5a278a08e8b3b72917f61625320e0

    • SSDEEP

      96:kRFxIiQ1K80cAAbZPxijV/7jRcDG2+2Ihpq68rMyA+GBBEF/yJ/rshl2kJGWvLoC:kOiQ1fUAbZ0jxdz2+thJ8FoDJ/g+K1EC

    Score
    3/10
    • Target

      resources/app/node_modules/adm-zip/util/constants.js

    • Size

      6KB

    • MD5

      9557c90a448baec12cf2cb2f97e2c5a2

    • SHA1

      19ece17c4aed05723601ec510ad2020fb462cf52

    • SHA256

      208e943a2e5faad056047f3c7991cce3cde637d8e272a564f2546210ebdf2069

    • SHA512

      433a683e049a8d2fa321e9cf6932c2f5075c83f1713a9d0514956310174ef2959d0c8378a039d27d0a34f321262f6cf7eee40066ca54da1b57c5483b6d00f089

    • SSDEEP

      96:Dtbl0W6xP0XM0gly+ESo5Etdt0f2cnHBE8WdQx8Z5h+IrrOnQTUlZmsA:DxyWCsXM06I/uSjG8WdQx8Z5h7rrO72

    Score
    3/10
    • Target

      resources/app/node_modules/adm-zip/util/errors.js

    • Size

      1KB

    • MD5

      ac3d2bb07fc89b31183b6786ce467fb3

    • SHA1

      61964b0caf0c374fb311fbc914e7adfee6911f0f

    • SHA256

      56ee85e2b90ec4a41df0813c4e7e08f617da69a82663149a8f9cc110deff43ea

    • SHA512

      1ae94c25cc424f1a4ba7cbe7b08d9809022ac96d4f7ea0f98b10cf4e3bec913793957da17bb811c41153724d0da4f7f8c2850b0140fc4ba74ed553fc25695cd0

    Score
    3/10
    • Target

      resources/app/node_modules/adm-zip/util/fattr.js

    • Size

      1KB

    • MD5

      943088ca25b0e25de119778524c8d91c

    • SHA1

      6cbf8576406db664ea30c0ce8085cc590a248202

    • SHA256

      cecf4e89cd49c408dacf19894756926cb73bae801f4f44e66011826230ef1975

    • SHA512

      9892ad5a63788aa2e2a50927990caf7371b3432cf0a7633d6dba3d6f861d1e59eb8a43f6b5ad7127c16cdf153ad0aef1f9163d2c59af9058f427cb55c70662b0

    Score
    3/10
    • Target

      resources/app/node_modules/adm-zip/util/fileSystem.js

    • Size

      353B

    • MD5

      85d7973afdda48fd2333b486d4b4afaf

    • SHA1

      dd0ab76f06f12996cdb07bc8613d7f56aed7f0ac

    • SHA256

      c0e0fdf6ca6d8dd98041adc6d8674f6bb02b94145abc98f08f24f1d0e4a8b5ad

    • SHA512

      ea038e326f763da409672e4e1d87170220aa8c1fab1144a3d5f62d1a5db44f2be2c456a08ca4d1c3f776f9c5020e9573b6b146a28a74c329dd51daa961d6cbfe

    Score
    3/10
    • Target

      resources/app/node_modules/adm-zip/util/index.js

    • Size

      179B

    • MD5

      6eadaab125a2caf89f2e762259d16df4

    • SHA1

      680d2665f43dd5074b5eb34d7a22f337d39659dc

    • SHA256

      a231e422e9f88464dbaf2ca91c0b7acd141f84e475de7847538d3f53890fd274

    • SHA512

      feb0b65be5cf28c68fcd414a4ba0d659e9298a3a029c1ddef0b5f0d4ac77a355ddb6592aa9c3808b6f40266232c244456a28d49f24700941c6505adc81086eb8

    Score
    3/10
    • Target

      resources/app/node_modules/adm-zip/util/utils.js

    • Size

      7KB

    • MD5

      b7a147df232c33b9733089d358e8919f

    • SHA1

      62f476f4fd0f58d0f6affedadc39da4eed9622e0

    • SHA256

      476362e756eeab1eb18548732f27ed8786cea36d6c33aa27d75a74fb70b4a2e0

    • SHA512

      e0c2641d2b2626c145fd829d48c2154431179011946898714aca55be10209c816649ae79cf0fdadf76933079c28114b2c9000ebcd557a5e324448561cbd62b72

    • SSDEEP

      192:giQAJ3zMRGhO3l3a2iCjgqiuA7cHBrQrlMh6n2d+MYKI6j8Ok86+IEiQkGyTh9d:bz2wSqrl7kZIlj23Yak87Ih7Thn

    Score
    3/10
    • Target

      resources/app/node_modules/adm-zip/zipEntry.js

    • Size

      11KB

    • MD5

      c553c1da54ed2015dea9f514d4dfbd42

    • SHA1

      fc47ac41e724cac3f6deab99730276fb7e4b76a0

    • SHA256

      699358b454fd68983c363f2df22ada2fac0ad3ebfc4890f80efe7e49461f8c78

    • SHA512

      808c6912f5dcd11afe4f130dbadc28911fa5402eb60cf2e2df66fd82c80a74772a9527cb731d4b16ea67abf6255e8f5a28e81955bfc78af90f5e6df98cce8dd4

    • SSDEEP

      192:SCNPhBeY942jhUHaD8QIyrjHqgshbokySgyuqyDYyyyn32S2WsYlr98bvxrgLxOB:SKBeMJjXQQdq9EYUfp2SpsGr9WNgtI

    Score
    3/10
    • Target

      resources/app/node_modules/adm-zip/zipFile.js

    • Size

      13KB

    • MD5

      e6dca10b65f08b4623cd2c5f186e85a4

    • SHA1

      cec0a45acdf6d9688db89be2dba81fa85761d29f

    • SHA256

      015cb9553db23bc281ee784f7eb974cbd026dace0322a0989b0a400bbcd68e8c

    • SHA512

      aa0a7f6e81ba719f9e25796453ec72d62a9894d3dcdef860ee6d22a282bb351ee19439c5f7bb2a747bd1d7187fd467a1a721409f38e064885fe9f9717ad8d604

    • SSDEEP

      192:OsWm/ZVXhCztlExKoOlvJ+6nV/VfZNybEwmLuYiKRw73V7zdqDeZmgm4yDfmUFEa:OYxyPExpu+yfrFtieeQDVmhEP

    Score
    3/10
    • Target

      resources/app/node_modules/ansi-styles/index.js

    • Size

      4KB

    • MD5

      9d4acb14d5449b232b22bfe40453b00c

    • SHA1

      5f96df8b074e4854c03db87ef309eb6c741f4618

    • SHA256

      d3f197d370760ddd8753c1355b4bdb585a787f1baa92bb8ed217f170c138b594

    • SHA512

      34ddb9208914ac53ed7c0e7162f74d0313a8f348f34db824414028313c03de674995ac98bbf856f5219d44d1af1455fa41678eb14dbc4639567b9227ef11ca31

    • SSDEEP

      96:gojeeng/nq55QwQIiZz5x36AYWND6brk1k+c6hj+pz/1nd3VOaGcAGTAG2sqPIdi:Weg/q5NQIiZ91dNWbr8k+c6qnRVOaMlR

    Score
    3/10
    • Target

      resources/app/node_modules/async/all.js

    • Size

      3KB

    • MD5

      6c9c5e791341f1eca157c9b71fc8136d

    • SHA1

      271034a9847242ea97482fc963fd35892a9fd6c8

    • SHA256

      ece0cc0d74146d57247415a3b4adcaa6fd807150489d60eeb6bfbfb656469b2c

    • SHA512

      deb87d1e92d4d0cf40797d2313863e4541248daccdd71126f33a9c0d564858a724cb55f2d9d3b0ddee7fd7ecdf2d118b23daea13a749fa03bc17c30f502f412f

    Score
    3/10
    • Target

      resources/app/node_modules/async/allLimit.js

    • Size

      1KB

    • MD5

      a609703c2671aae5ddf2d83dd6ad453c

    • SHA1

      e45f016e6ad89d52fb790c1d02f326c8916d33c0

    • SHA256

      98a3b10fe47ff3c6badee2bff517542fd191af1b9eb2026663e1be5290053e07

    • SHA512

      f7ca50a989c0dd5dd99f35e9ed0cb09bff42bcdcc17c1c62087b87b1655d3b20377aaba44565cd835d616af3234cc99b0c597ec02459e4dc684d4e33cb88a62b

    Score
    3/10
    • Target

      resources/app/node_modules/async/allSeries.js

    • Size

      1KB

    • MD5

      083c43efcca1e589556ffe47875b2d0a

    • SHA1

      67be41dd4412f9c6098bb6b6cd8f02ee45a4a092

    • SHA256

      220c55b8ff121b0be9407af3bfc9df6d663b45d9ddef78bffa2314ad5c623de6

    • SHA512

      3cfd82af8047fd6b9908aff7a68d0c5856d7c691806dfb8d2adc0873f1b327f296c5c1b7fcf99a320f1cf4d4abc5f5639a7055fb7e927f8afe47fa45fa70815d

    Score
    3/10
    • Target

      resources/app/node_modules/async/any.js

    • Size

      3KB

    • MD5

      dd1d46dcf0067e976fb81c43cd677448

    • SHA1

      445ea3bfd270ba215429840f5231c1b4424befa1

    • SHA256

      7700408ab16a80d509d14c0de299547fef3877915232c6af2c4a5c106f148c38

    • SHA512

      8e7a13c13594aed306d966d7c8ce7238f7529f14a55db67b01fae3fd6e39bd4f2b6140ab136bf248c3e57e9caeda439f82e7f8bba2ba59e657f8404bcfe0f5da

    Score
    3/10
    • Target

      resources/app/node_modules/async/anyLimit.js

    • Size

      1KB

    • MD5

      4882ebfed6d40d01b563bacc413f8764

    • SHA1

      1992217ac8a3ceddab3347d165a79f987f46c1e6

    • SHA256

      e8cf3c5eac466034ee0e2aeb4db77650b5c653889e95f471df548a789747cc5e

    • SHA512

      3b13de88030267e2abbed40c5a377d6d1e3403648550db4987e4f3f5705ce447dc94c403eca7f8dd3d58fd562d17a8d529fd7ff8f2504ebd206d4c1cd77d5e5c

    Score
    3/10
    • Target

      resources/app/node_modules/async/priorityQueue.js

    • Size

      1KB

    • MD5

      29ed2fa84e849d8aba4b0ab7347d3af8

    • SHA1

      ecec70da03ee70b5f319ab7e78dcb94162714cc7

    • SHA256

      94d8c234c7afb36594d85e269cd9ee1658670a0f226479c2f4278bf8aa695bb5

    • SHA512

      d992ac97a2e7a36901f3c67eecc5fc9a8549c39ad37e91964980494c25e4d1ba916e51e1d848152cd48622b1c0ff4c3808cb03c41342f8a127e89cad0675f0b9

    Score
    3/10
    • Target

      resources/app/node_modules/async/queue.js

    • Size

      626B

    • MD5

      8ef42a12006df6ea77bc14b285168a17

    • SHA1

      36c2c5fe2c2bd8bfdb11980f3eacd304e481dbe7

    • SHA256

      a6bfdec06514c3aad59877c955650484549e7a064eccc69d9fba9d99f56752e1

    • SHA512

      9912e1745b2672ebd1a5b37a9025c8d02278d75bb6782ce2d2ee499c77dd75041b30f340aa9b6eae226becbcea4839959c82af5d197c75b25a1d853e3cc3c132

    Score
    3/10
    • Target

      resources/app/node_modules/async/race.js

    • Size

      2KB

    • MD5

      8d84158730f3ba6c5ef43ce856a24bef

    • SHA1

      4e1bbd2302346c71c564aa4fedd6093f63daa3ef

    • SHA256

      62113d91a847ab782b566f81fcc18a24fa6fc3faff6e80d5b35efbe9ea66b2a8

    • SHA512

      7bdfd3d2468d436e16d37adcef317c38111e9aaec0b4a0279a7f8847cdf8cea4b27b3ca03e9b59987191265903f5603f4510051a93fe8e615426f80343d49e44

    Score
    3/10
    • Target

      resources/app/node_modules/async/reduce.js

    • Size

      4KB

    • MD5

      724bb52915e1158b4dff6f26ef4baf72

    • SHA1

      ad0aa6a0ac5576433051167524923e6aa794c96a

    • SHA256

      f1e4594194164d2504946c85c8e983346b25f9be8239178defec27e912b56c21

    • SHA512

      657c3dec82c5c6c34accdbc9d96e2be59a592e60241960810f10a662f5305c21dcef8cf006fcdefb0d48d30ccdd30d9dd6c263c089a88591f18a83a2f390eaaa

    • SSDEEP

      96:y6Kcr3mvLCw7I20odkC2z2yS4NBsBMV30scZ2OFbnkhdQ70M:y6KcOLfdkC2zpNBsBI3zo2skhK70M

    Score
    3/10
    • Target

      resources/app/node_modules/async/reduceRight.js

    • Size

      1KB

    • MD5

      e36ee4d4e33d0a23862c360842105b44

    • SHA1

      84e0166688b5fd278ad22a724f088bb947b75c07

    • SHA256

      208fc2365801877db94f1a64ea205783809a8852786e9e638898f26d6cb23c89

    • SHA512

      b0c7b73c3321b49ad37db3d8a323ab82c98b7adc820c83c3c015a83a305c99463473840689cd898c8a88bdfde293298096f71ac83eac42373abab2dcbf161619

    Score
    3/10
    • Target

      resources/app/node_modules/async/reflect.js

    • Size

      2KB

    • MD5

      250df19e4944b1e1289ce6c312962826

    • SHA1

      8811c06d02fb70392f02f89ace526736a6c37ae9

    • SHA256

      8768cd08c4a162c46ebd6baf95fe450c3755096dd9bf2a2c60aed82cba25a1cf

    • SHA512

      27d78c1798ce96cb73bd67650bfc7abdf4f978b75b31e6c39e8057a1a731cb33d70cff5936528ce69832173cfed2e42a451d001b8a0b3b4dc2bc3590a0baf5bc

    Score
    3/10
    • Target

      resources/app/node_modules/async/reflectAll.js

    • Size

      2KB

    • MD5

      4fffc0f082f132c267b936ae6cb2ca3b

    • SHA1

      eb08020b2a58c11f21748cb4481a0916cd5a7fac

    • SHA256

      4d43aeabf089d7c98479bc29b29c9b557e281acb8c6e01b32d6c78ec1e15f1b7

    • SHA512

      f9ace6c2c8757b4c70c82d2a345546c89db95fc0c5f69766078cd2df2c72f4472945861393c81b0bdf3a3533673cc21097a106abcf43bcddad48e31a6a529fb1

    Score
    3/10
    • Target

      resources/app/node_modules/async/reject.js

    • Size

      2KB

    • MD5

      b8f43e0673e6162e5adf5dd59d6319d8

    • SHA1

      241ba6008e432a8744aa0b429d77a22ad677decd

    • SHA256

      9ba2b7c360fc5feb1042eff789da432a4612b9489e83de29caabf300236a99b9

    • SHA512

      8f5c574138ac9b6f7910eb5a322c4633dc53a1e935266b3d7414d83a81726497c6d5e4b8ad7f662a79ee48db90ebc889a935944b6769cc16bd7e4b304c824ace

    Score
    3/10
    • Target

      resources/app/node_modules/async/rejectLimit.js

    • Size

      1KB

    • MD5

      8349a228f314a4f9e2d3d2a8e24c5d41

    • SHA1

      da12508f737db9d9c0755c33aa879c9025ddd710

    • SHA256

      8c787ca4a475033406fda243c8de26a98abd8793fa222c3d3ca465a0b2a5eeac

    • SHA512

      3166e0429d58ca972e94b74b844457b9d6cfcf3aa4d2c744635796515d07d885c306ebc896a4e23cc84744deeec9445a49aa408a93aed7381be464814c1563b9

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

zloader
Score
10/10

behavioral1

Score
10/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10