General

  • Target
    Battly-Launcher-Windows.exe
  • Size 183.1MB
  • Sample240702-z2askazbpb
  • SHA256 a1941786149857faebfd4f2731022d8af6aaa984b981bffd40bd123472b0beb4
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://www.battlylauncher.com

Targets

    • Target
      Battly-Launcher-Windows.exe
    • Size 183.1MB
    • SHA256 a1941786149857faebfd4f2731022d8af6aaa984b981bffd40bd123472b0beb4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Target
      resources/app/node_modules/adm-zip/adm-zip.js
    • Size 30KB
    • SHA256 cb49867d6ffe8e7c08ad0e6466c86450b0f81910069ed1ad9d5b7b9c27367929
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/node_modules/adm-zip/headers/entryHeader.js
    • Size 11KB
    • SHA256 d3ca0adfd642be6287daf5a7cc8d3959332f31ba52b6ef1a53e4520bf4175f3f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/node_modules/adm-zip/headers/index.js
    • Size 94B
    • SHA256 536e4b5bf009a3d9f6eccfbbc4157cb6de663d889e0826ea5f6e5fa17aaeb8bf
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/adm-zip/headers/mainHeader.js
    • Size 4KB
    • SHA256 3269b558fd8990df8ae1f500268e0512854c04bffefcaa0e584360de1809b84a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/node_modules/adm-zip/methods/deflater.js
    • Size 1021B
    • SHA256 6dc41b2460594cfa5136b797653c166b2f7403820a40f2fca17cca35a5de1b5f
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/adm-zip/methods/index.js
    • Size 128B
    • SHA256 d67714f1a04be942f90be77069af3ff4214aa8ee84b26edeff3a87eb0d8e2dc0
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/adm-zip/methods/inflater.js
    • Size 936B
    • SHA256 ac2c664bd94fe9daee76174aa00d149d60bbbe6ae5d5865b14bd76e9b7d2d612
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/adm-zip/methods/zipcrypto.js
    • Size 5KB
    • SHA256 2b76c14cac47da833e1bdf690faf68acc0f5ceb645605df876f42e67801d2f1c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/node_modules/adm-zip/util/constants.js
    • Size 6KB
    • SHA256 208e943a2e5faad056047f3c7991cce3cde637d8e272a564f2546210ebdf2069
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/node_modules/adm-zip/util/errors.js
    • Size 1KB
    • SHA256 56ee85e2b90ec4a41df0813c4e7e08f617da69a82663149a8f9cc110deff43ea
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/adm-zip/util/fattr.js
    • Size 1KB
    • SHA256 cecf4e89cd49c408dacf19894756926cb73bae801f4f44e66011826230ef1975
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/adm-zip/util/fileSystem.js
    • Size 353B
    • SHA256 c0e0fdf6ca6d8dd98041adc6d8674f6bb02b94145abc98f08f24f1d0e4a8b5ad
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/adm-zip/util/index.js
    • Size 179B
    • SHA256 a231e422e9f88464dbaf2ca91c0b7acd141f84e475de7847538d3f53890fd274
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/adm-zip/util/utils.js
    • Size 7KB
    • SHA256 476362e756eeab1eb18548732f27ed8786cea36d6c33aa27d75a74fb70b4a2e0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/node_modules/adm-zip/zipEntry.js
    • Size 11KB
    • SHA256 699358b454fd68983c363f2df22ada2fac0ad3ebfc4890f80efe7e49461f8c78
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/node_modules/adm-zip/zipFile.js
    • Size 13KB
    • SHA256 015cb9553db23bc281ee784f7eb974cbd026dace0322a0989b0a400bbcd68e8c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/node_modules/ansi-styles/index.js
    • Size 4KB
    • SHA256 d3f197d370760ddd8753c1355b4bdb585a787f1baa92bb8ed217f170c138b594
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/node_modules/async/all.js
    • Size 3KB
    • SHA256 ece0cc0d74146d57247415a3b4adcaa6fd807150489d60eeb6bfbfb656469b2c
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/async/allLimit.js
    • Size 1KB
    • SHA256 98a3b10fe47ff3c6badee2bff517542fd191af1b9eb2026663e1be5290053e07
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/async/allSeries.js
    • Size 1KB
    • SHA256 220c55b8ff121b0be9407af3bfc9df6d663b45d9ddef78bffa2314ad5c623de6
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/async/any.js
    • Size 3KB
    • SHA256 7700408ab16a80d509d14c0de299547fef3877915232c6af2c4a5c106f148c38
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/async/anyLimit.js
    • Size 1KB
    • SHA256 e8cf3c5eac466034ee0e2aeb4db77650b5c653889e95f471df548a789747cc5e
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/async/priorityQueue.js
    • Size 1KB
    • SHA256 94d8c234c7afb36594d85e269cd9ee1658670a0f226479c2f4278bf8aa695bb5
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/async/queue.js
    • Size 626B
    • SHA256 a6bfdec06514c3aad59877c955650484549e7a064eccc69d9fba9d99f56752e1
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/async/race.js
    • Size 2KB
    • SHA256 62113d91a847ab782b566f81fcc18a24fa6fc3faff6e80d5b35efbe9ea66b2a8
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/async/reduce.js
    • Size 4KB
    • SHA256 f1e4594194164d2504946c85c8e983346b25f9be8239178defec27e912b56c21
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/node_modules/async/reduceRight.js
    • Size 1KB
    • SHA256 208fc2365801877db94f1a64ea205783809a8852786e9e638898f26d6cb23c89
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/async/reflect.js
    • Size 2KB
    • SHA256 8768cd08c4a162c46ebd6baf95fe450c3755096dd9bf2a2c60aed82cba25a1cf
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/async/reflectAll.js
    • Size 2KB
    • SHA256 4d43aeabf089d7c98479bc29b29c9b557e281acb8c6e01b32d6c78ec1e15f1b7
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/async/reject.js
    • Size 2KB
    • SHA256 9ba2b7c360fc5feb1042eff789da432a4612b9489e83de29caabf300236a99b9
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/async/rejectLimit.js
    • Size 1KB
    • SHA256 8c787ca4a475033406fda243c8de26a98abd8793fa222c3d3ca465a0b2a5eeac
    • MD5 SHA1 SHA512
    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

zloader
Score
10/10

behavioral1

Score
10/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10