Overview

overview

8

Static

static

3

Grand_Thef...VI.zip

windows11-21h2-x64

1

ControlzEx.dll

windows11-21h2-x64

1

Hardcodet....on.dll

windows11-21h2-x64

1

Languages/...ik.ps1

windows11-21h2-x64

3

Languages/Tatur.ps1

windows11-21h2-x64

3

MahApps.Metro.dll

windows11-21h2-x64

1

Microsoft....ll.dll

windows11-21h2-x64

1

Microsoft....ck.dll

windows11-21h2-x64

1

System.Win...ty.dll

windows11-21h2-x64

1

YLLibs.dll

windows11-21h2-x64

1

[Open Beta...VI.exe

windows11-21h2-x64

8

wdmode.exe

windows11-21h2-x64

3

Resubmissions

21-08-2024 23:56

240821-3zgpwa1erk 8

21-08-2024 23:54

240821-3x11qsxdkf 8

21-08-2024 23:47

240821-3s4wtsxbqd 8

21-08-2024 23:45

240821-3r6n2axbmb 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Grand_Theft_Auto_VI.zip

  • Size

    15.8MB

  • Sample

    240821-3r6n2axbmb

  • MD5

    516cb4143b5d9c7bf1cb1827c6d8d972

  • SHA1

    086f4f8fe2bdccceb548ff3f20ec0634c102245e

  • SHA256

    b57b6261d4733e07a307a3cd7a93d4c6fb689fe1ec3f2c4309bec8b1b687a031

  • SHA512

    55fe054e3ba95a7faa583e3dc3562671ff3ceeed5026d50c6bfe27de41da734cd8b8b6636e46bc677d3d6de3a653ff6acc1c7ff59e7460521c374979f77e83fd

  • SSDEEP

    393216:p7DP+M1YvDGKqT42e5VkXfLPMYA9Z4eQeSJ2Ntz31BOd+k/tFvS:pDmCcH5VkvYTJCgNR3Gd+uvS

Score
8/10
discoveryexecution

Malware Config

Targets

    • Target

      Grand_Theft_Auto_VI.zip

    • Size

      15.8MB

    • MD5

      516cb4143b5d9c7bf1cb1827c6d8d972

    • SHA1

      086f4f8fe2bdccceb548ff3f20ec0634c102245e

    • SHA256

      b57b6261d4733e07a307a3cd7a93d4c6fb689fe1ec3f2c4309bec8b1b687a031

    • SHA512

      55fe054e3ba95a7faa583e3dc3562671ff3ceeed5026d50c6bfe27de41da734cd8b8b6636e46bc677d3d6de3a653ff6acc1c7ff59e7460521c374979f77e83fd

    • SSDEEP

      393216:p7DP+M1YvDGKqT42e5VkXfLPMYA9Z4eQeSJ2Ntz31BOd+k/tFvS:pDmCcH5VkvYTJCgNR3Gd+uvS

    Score
    1/10
    behavioral1

    • Target

      ControlzEx.dll

    • Size

      181KB

    • MD5

      2d5035cb5a3678f2c2f5a889bd384813

    • SHA1

      9c4a669a30a4bf0e27d5b373919c3f6017c8ec4b

    • SHA256

      424cbe8f24a62c330149dbe0b80e214a984950c3b79b067058671608229fc2ed

    • SHA512

      fda0592126c9b9835380457e1f55d984cd5fc7649be172a0de17006e60d05687fbd5454a5b3adceb4497f6bc7a780d15dc09b70fd642f2db792571e996c8f56c

    • SSDEEP

      3072:3E0E4PCRvy5/ixiBU33nC0bZqSSvKKy/f1SV666AjwbbHyH6engMHdFtp04M9Y8e:3E0E4Pyy5/ih3zbZqSGy/fk96e9Ftppn

    Score
    1/10
    behavioral2

    • Target

      Hardcodet.Wpf.TaskbarNotification.dll

    • Size

      66KB

    • MD5

      d5d708e9e7625ab2c4ac1c1faa099350

    • SHA1

      9436c35fb72c4fd0ae1420effdbe5a8a14326077

    • SHA256

      f6fadf0375d22512b2b3f075362433c0de173adfb290b4d8999cdcb7acedb0b2

    • SHA512

      0321bbdee6a11275fd0f86696e0b244ac0415ca5cb64cdd0230bfee028e550587929c5d03402740307fa7b5370532d2e3c044b85838489a72f29ce1748fc093d

    • SSDEEP

      1536:KfgDdceepOS3u594ww89rRwjwPxvjLbPxHZ:KfgP59Fw89FwjgxvjLjx5

    Score
    1/10
    behavioral3

    • Target

      Languages/Hunsarik.txt

    • Size

      3KB

    • MD5

      07f537c2ab7d363f90a8e1dff1487001

    • SHA1

      2421ae471eae1b692900a2ca9d23caf8afd54dcc

    • SHA256

      94479bd9ac29791d961341d678b8f80220ba77307f550ff2b2dba494f4c77819

    • SHA512

      b3d64806749ad4a19f3b46106fff200de50af69c5cdf406818c2082807cdab9825ae66f6f806b56e7736e82738a764b40dc4e77d7b56932aa69889c4d63f419f

    Score
    3/10
    execution
    behavioral4

    • Target

      Languages/Tatur.txt

    • Size

      3KB

    • MD5

      609d6f5fff4b7b4382b1672f3b2c1b34

    • SHA1

      152552db6ad9f68edcd2e4d409a18f3ab2d9da2e

    • SHA256

      7b7c72b1e923e92ffa2f3137547c3a0faff770eedbb667606d81b4de0f31258d

    • SHA512

      c4968b3ac8ae433c52f489fe2befe083861c32533e7be94b9904df7e4d00f9abeab4b9d82eed48469f6e31a760fe927f2c50bc5926ef036ca2f47f1b623a890f

    Score
    3/10
    execution
    behavioral5

    • Target

      MahApps.Metro.dll

    • Size

      1.1MB

    • MD5

      2e35ff8e8a5b20e7ddc567c2cd2d39a2

    • SHA1

      7184a31a437624738e063401b9420b9a8398fcf5

    • SHA256

      06eee5028afa43dd276b874573d03743eb057024588deb1d64420e7a64923665

    • SHA512

      1da0082c822dc54e5853edf50d4224d19f0ee108dfe3e143bda719c216c3aee08244706b3e77b6728949b9772fbffecaae1f2d16212725662dc0acbfce779bac

    • SSDEEP

      24576:HqBtddqu/H4HfSQxV/FZLv4IS7gG2QiH:udQBxV/FZLv4qG2Q

    Score
    1/10
    behavioral6

    • Target

      Microsoft.WindowsAPICodePack.Shell.dll

    • Size

      552KB

    • MD5

      18a46202a1636b985208e2183d756617

    • SHA1

      7f8d0ca687ac82067d7a79c011a2688336b71b82

    • SHA256

      513d386fc084ad355d1a8668d8b4e43cc3b21f135ac3eabbc6b96adeb3ee9e84

    • SHA512

      70420dd03f338201801afb0ea2742bb08cd860192503906734de7306d1349a5524a12fc45c84dfa2e38f1178c3ad62a8656a9bebcb2bb5b9ff02f0f5543ea851

    • SSDEEP

      6144:vtIgLGv5WBfXkYlsL/Nz++R1yji08n3uzxRQKEPmBm9C5vEx3tcQ8Vub8xPtwZEH:nz81Dn3GQ/9C58x3tWXH9gvHYF9

    Score
    1/10
    behavioral7

    • Target

      Microsoft.WindowsAPICodePack.dll

    • Size

      125KB

    • MD5

      ace419174e1e0c792d028f25f60d6e5f

    • SHA1

      5325579a4d960fc09c359c2ec7f2b03a27a9a698

    • SHA256

      90d56b0a1c7e631e5a12985f9b7cc943a1ebc31e40ec53d56dc9149bba74ba24

    • SHA512

      53177394027846161c296a25527f266814157430c8620e474ab1c2f6b2b54f7c401a4db087ea26af7e854ed07a006413e99f0384e06b1b4b194acb61981c5542

    • SSDEEP

      3072:QfBa6TWUNuRhicznzcSZRazyDG43vjyMcnFlizejgxKmjkx7:VUNuZjAI+mvuMOj9mjk

    Score
    1/10
    behavioral8

    • Target

      System.Windows.Interactivity.dll

    • Size

      61KB

    • MD5

      e991d47605bc04629af29939ac2cc9b5

    • SHA1

      70dcb9c81d5c8351d19d3a3fbc5530085ca8faff

    • SHA256

      eda12487c479ff31202a3c60f88f1f0e2bf7392919099315d0d951683f14609c

    • SHA512

      25355edf41f7e08b1a725a920fcab7c04d4c91c3c015a8a9ab6c7d1224b5f3f83baa81f867167369ae91a8f11f317e9a3a1092348ee4e44f89dd8b086a67f2ca

    • SSDEEP

      1536:23wBccZdxuB8mQen6JxKjrlMZgR0Eo1jwPxb/JjAPxH:wcHmQPUk1jgxbBjwxH

    Score
    1/10
    behavioral9

    • Target

      YLLibs.dll

    • Size

      36KB

    • MD5

      3744d4fd7ba093923174696b56d05f9f

    • SHA1

      f5ce183eae50c86baae034aed1ce11c0ad15fecf

    • SHA256

      3101a828d70c878e777a15ebb522b6a2f82e30fb2217ce66df0f161a57656301

    • SHA512

      2269e1b99f2998accb13a23f55806a636edfe374ab14ffbe93eb653868b935b83ab38c998905e8878156f96b4f2c85c18bd61fb374c9079eff5fba7cf6ec9800

    • SSDEEP

      768:3/ImTZNNBGXjO9hwjLZEJPx4SjL8PxWEY9iYX:pT/u6wjwPxvjoPxm

    Score
    1/10
    behavioral10

    • Target

      [Open Beta] Grand_Theft_Auto_VI.exe

    • Size

      368KB

    • MD5

      c2382a28bf44e7c192731c4de8280565

    • SHA1

      8d4fdc701337d0b48e2842f1e53176b4b9e9a09e

    • SHA256

      c8ca10f889807948a2a3e1b73874ffe1125004c929ada039ea04e3a944e4ab9f

    • SHA512

      5a0e41dafe24f74cea04fed427a9665a81280e477f02d078f25a778a40752b96e2f1e8457719d3d3a67f7ea4ea5cb779bd1640e0cfb2b65d1d6d0216c3251595

    • SSDEEP

      6144:VeBvNMIhP7ERrjTPhSVQBFD7sxBUXEe9OmGC0GoCwwgVQBFvk:2DgRrj4QB97sx0d9OmGAwwoQB1k

    Score
    8/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral11

    • Target

      wdmode.exe

    • Size

      574KB

    • MD5

      42badc1d2f03a8b1e4875740d3d49336

    • SHA1

      cee178da1fb05f99af7a3547093122893bd1eb46

    • SHA256

      c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf

    • SHA512

      6bc519a7368ee6bd8c8f69f2d634dd18799b4ca31fbc284d2580ba625f3a88b6a52d2bc17bea0e75e63ca11c10356c47ee00c2c500294abcb5141424fc5dc71c

    • SSDEEP

      12288:myyKdVnyNhXCV4EkP7AIfzNXZ0b5NrnkcAqIV0A1caRI:mKvyNhXCV4E8BXAfrnkcAqU0A

    Score
    3/10
    discovery
    behavioral12

MITRE ATT&CK Enterprise v15

Tasks