Overview
overview
5Static
static
1URLScan
urlscan
https://steamcomnumn...
windows7-x64
3https://steamcomnumn...
windows10-1703-x64
3https://steamcomnumn...
windows10-2004-x64
5https://steamcomnumn...
windows11-21h2-x64
5https://steamcomnumn...
android-10-x64
1https://steamcomnumn...
android-11-x64
1https://steamcomnumn...
android-13-x64
1https://steamcomnumn...
android-9-x86
1https://steamcomnumn...
macos-10.15-amd64
4https://steamcomnumn...
debian-12-armhf
https://steamcomnumn...
debian-12-mipsel
https://steamcomnumn...
debian-9-armhf
https://steamcomnumn...
debian-9-mips
https://steamcomnumn...
debian-9-mipsel
https://steamcomnumn...
ubuntu-18.04-amd64
3https://steamcomnumn...
ubuntu-20.04-amd64
4https://steamcomnumn...
ubuntu-22.04-amd64
3https://steamcomnumn...
ubuntu-24.04-amd64
4Analysis
-
max time kernel
1798s -
max time network
1794s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
31-08-2024 06:52
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Resource
android-x64-20240624-en
Behavioral task
behavioral6
Sample
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral7
Sample
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Resource
android-33-x64-arm64-20240624-en
Behavioral task
behavioral8
Sample
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral9
Sample
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Resource
macos-20240711.1-en
Behavioral task
behavioral10
Sample
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Resource
debian12-armhf-20240221-en
Behavioral task
behavioral11
Sample
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Resource
debian12-mipsel-20240221-en
Behavioral task
behavioral12
Sample
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral13
Sample
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral14
Sample
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Resource
debian9-mipsel-20240729-en
Behavioral task
behavioral15
Sample
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral16
Sample
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Resource
ubuntu2004-amd64-20240729-en
Behavioral task
behavioral17
Sample
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral18
Sample
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Resource
ubuntu2404-amd64-20240523-en
General
-
Target
https://steamcomnumnlty.ru/app/1643320/STALKER_1_Heart_of_Chornobyl
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.android.chrome -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.android.chrome
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
151KB
MD50616c2e6c3c01448f23b628a498c33fb
SHA11dc316fb84036b5e43ac1cf940cbe52dc9c294e6
SHA256fd246fcd7d0c6636d875231ddfef80cfa4c83797dcdf7302e200780692b286ca
SHA5121b485b6a717c9549be5f919923794040df02444d22638e4c5850a3c48e35a07c066c7234e13efe92d714befde7edf8e6abd0f0c53b7f81c1c120e912d56c1cfe