General

  • Target

    Battly-Launcher-win.exe

  • Size

    188.1MB

  • Sample

    240902-acbacswapq

  • MD5

    3b6b92297beb78efb283e0d2fa32fc19

  • SHA1

    b056d281a74d9e0fd7546bbed068a915608336e0

  • SHA256

    9cd7f45620bda9811e200380d3e43a3ea768c48d1240448c279b3321d3ae59b6

  • SHA512

    bb32b9529abe3fef0025cd8f81a4bcea6cffaa4b20112e9fbd57482b0f4ee092740afbcd788684fdae676bc7cebc17af491c9dae73b082cca31b9aabc3111463

  • SSDEEP

    3145728:IJcuNt6i+X0MdTUPo+YFawtU4odzw7Lm3436E7IkGl0BkChNw5+VTmms+B6Q87:UcuN7+QYFjmPz0Lm3J0wahNw5+VTTs+y

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

https://www.battlylauncher.com

Targets

    • Target

      Battly-Launcher-win.exe

    • Size

      188.1MB

    • MD5

      3b6b92297beb78efb283e0d2fa32fc19

    • SHA1

      b056d281a74d9e0fd7546bbed068a915608336e0

    • SHA256

      9cd7f45620bda9811e200380d3e43a3ea768c48d1240448c279b3321d3ae59b6

    • SHA512

      bb32b9529abe3fef0025cd8f81a4bcea6cffaa4b20112e9fbd57482b0f4ee092740afbcd788684fdae676bc7cebc17af491c9dae73b082cca31b9aabc3111463

    • SSDEEP

      3145728:IJcuNt6i+X0MdTUPo+YFawtU4odzw7Lm3436E7IkGl0BkChNw5+VTmms+B6Q87:UcuN7+QYFjmPz0Lm3J0wahNw5+VTTs+y

    Score
    10/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Drops file in System32 directory

    • Target

      resources/app/node_modules/color-name/package.json

    • Size

      369B

    • MD5

      328719e73b38d4d0bdd56b2cb88a5feb

    • SHA1

      2cc0d94a27a8161ea76895b13ec73c5b2a2c97da

    • SHA256

      fcae3844baef45d10ea5b3d36962c4bb517f6c0c0502da5dab6debc55c3e9359

    • SHA512

      1f80c6800d4ab5da0497702c19e3d886c14da288869620050d7e81c31dcec16c8b74b9773cc94193076ceec11bd4d5a45bfcab8b3ffa692fedc29a8357a0782f

    Score
    3/10
    • Target

      resources/app/node_modules/protocol/package.json

    • Size

      648B

    • MD5

      22f168d990e82240c04af1d5385ab144

    • SHA1

      54c6009307e41a1cd39f8bcb9544d6831c310198

    • SHA256

      1a1a2c784eb2553bbc8e55706ab5df3f07a35b36aa3c301677ce8393a0be7a0c

    • SHA512

      08d547b21f28ce8b175768e4e4a1904747331d02bc7689c6f27b4caebe7be39802b82331803f3d9b9784459a2267af917d9ca7fbb1eeca5078d667377ddb6d53

    Score
    3/10
    • Target

      resources/app/node_modules/windows-shortcuts/lib/shortcut/ReadMe.txt

    • Size

      2KB

    • MD5

      7dd3bdf130a37bcd5e7de4cf642150e1

    • SHA1

      9cbf17699f354ba7213202e5510c770de077ba49

    • SHA256

      34ccbdfcbb0b54ae4db54d50d12c0b923ab1b8f485ff93c9c2f64fe3fb574f12

    • SHA512

      35761d3536b6441dab32e6394880915239a862e2e98c60e88a261887438bc308652776eb507775cf93d4b45050ac1cde2e5ccf2088f494ea2aace88f3a48db1a

    Score
    3/10
    • Target

      resources/app/node_modules/windows-shortcuts/package.json

    • Size

      577B

    • MD5

      d35a29eb509d52f43ad8d7d7e57557ca

    • SHA1

      73e4a065cfca688e7f6813af77bbd5ddb63f7148

    • SHA256

      540b79de6a1c3583c8255b304849701744a9a640fa45f10b64ec983be7bd408a

    • SHA512

      b722f588a5e49eb787d0f9ac266f50baccf5fd3bd9f3023dc70833fb68f84605571fbaf8c459bfde902c98f4572132fb8590ee03548ed6fd5f53de5d30d5a90c

    Score
    3/10
    • Target

      resources/app/package.json

    • Size

      530B

    • MD5

      e102ea0d9f0e36be31e25b787c35ca2c

    • SHA1

      022ea237f37e95570872a64ba6af1e2f63cb0dab

    • SHA256

      9f66eafe35c475aaba1157c877406f448273c6e4811a1ef2fce10aa0d5eee706

    • SHA512

      426e0af432f24562e548bf53ea972636c494f0c5b840b9e6affbc40f32fdb9de3cde3c4fd83d9a221eae9832a42631b2b178a3d46f1b2a56d1a82978fe32fc51

    Score
    3/10
    • Target

      resources/app/src/ads.ejs

    • Size

      1KB

    • MD5

      d7f2205fb3ea4fc29629fd16cc13e42e

    • SHA1

      ac4addc19bdf3f56a2b2aa0b8e5a2b2d459b209f

    • SHA256

      828df948e8dd1e0fc2a88511fd1f59568a97fc2c3626152e574e5f31c89ff5e8

    • SHA512

      6ff7cbfb366642d6b1ce5ce15f335b27a8f500341bb059f6037d50409c071d9ef8a735c447a876bd986f4902e377a773b9e41e09d7d433b8365a5049a689bf3a

    Score
    3/10
    • Target

      resources/app/src/assets/css/index.css

    • Size

      20KB

    • MD5

      9338a403220d934986f5dc738419174d

    • SHA1

      33d0a93608f28900b4771b49d88259b2f70350e7

    • SHA256

      2f281d5eb03f52a46514089fd0b0af408f02613a8fcef8d506dc01f590651d7c

    • SHA512

      cd92d15c6ee9d6d9ed78fa073406462d5f3b33cc9c198a693fa51f53889ba9f5ef2a498ea3f033ef7cad73b1248e4bad9afcad8246f5b98dcde3435399dca508

    • SSDEEP

      192:zIPPOBM/UfNLh38L6wLLd949+cZaxYPrunqm0LJ4nqBDmwsNSflfBWG+ngBmb:UFUf7ML6hPrDz+KfBWtg0

    Score
    3/10
    • Target

      resources/app/src/assets/icon.icns

    • Size

      52KB

    • MD5

      a9ac947c7d14b1827647cd7232df4994

    • SHA1

      4d914955e8d9dcc566e56d912dc4227e5048bf4e

    • SHA256

      3163ed50c1b8301bb87cbbe983d87e072aaf1fa4b9c2e5917a9df858033059a9

    • SHA512

      49c664e58050a47efce4da174658bfa94efb434d93a896edc9658a0b594c818a0a98254c197e241ee9c235d0707baa7efa4f7b3f571f10c48c4bd6c2facd538f

    • SSDEEP

      1536:wu8c5oFMRj2A+zRBWQ7bxIqcY0652Ke1YfR93rkQ:wuJoFMFGyQJIqcY0O2KWYv7kQ

    Score
    3/10
    • Target

      resources/app/src/assets/icon.ico

    • Size

      11KB

    • MD5

      372b8e595552272d8980d7ce68a22a45

    • SHA1

      3458abecc3172f86c0a42f889402a700964a7bdc

    • SHA256

      9a6b51f26c9efb993a02f67582477d9b524b029af5d6b1bea046840012dc110e

    • SHA512

      bb712405ea0c0ec66add82abd04ca8f32e07bea7e4bbdcb2bce53a16caf8d9bf2a514ec8e647739e739f995931fc6d04d155e8b2f381fb93765024a4aebc1fa4

    • SSDEEP

      192:5oE/UpLYcasZP5WUZ0iClTa8VhjO/wulukJ4M8JQTtDdtEDQ76nE/Vcb8VM8eQvP:j40cNZP5rqiClfhQwuUek6tDEsiockfP

    Score
    3/10
    • Target

      resources/app/src/assets/icon.png

    • Size

      19KB

    • MD5

      789fc1c35197db8ea9870e1c66f847f0

    • SHA1

      62638e9d9631714e7eb8f83ad3beafcb4f6b2e53

    • SHA256

      9f3d301cf823e1d227b8521a83ca50de4719eecad1f31ec17e70c159ce70a19d

    • SHA512

      1e1a0d4c8b544b06edecfadfd36c2614671ccf77d80e88822adcd53bfa305f2ab1b6a532728c867200d781f1519d940fd45bc8f7f4a645c48b4e9e3c746e0890

    • SSDEEP

      384:rlJPiprOzKXyyu7AQ5KwmrCLAhWfylRZrq3+lhxp+3IM2:pJPi9OIA5KxrCLAhWfyFq3Gxp+YF

    Score
    3/10
    • Target

      resources/app/src/assets/images/background.png

    • Size

      713KB

    • MD5

      54d3046d693ef7dc0e06a32ff629e7a1

    • SHA1

      1d14c54f2db92c94e467dc3b3f6480fe737ed830

    • SHA256

      62a7ec1cb750aa28bcfdc93cebf1521f8cdc352992938652527aacb79618e57c

    • SHA512

      b4e123d3bf4b21bdb1c73ab9374bad0e1090e5cfd0b758bebfd907d4f3736c9f4e87e73e693a85eed66bd0e1eee85fbcf1a152eeb83ea6f317e85022d67fca3d

    • SSDEEP

      12288:U/xhayudk53PLRv6C4UxLj5UE8VYJXgf/FVxenbd+pf5TjXVmhgOAX7KOJreROM0:U7fudk5/dx4Ufhw33xg0fYgTrKOuOMHU

    Score
    3/10
    • Target

      resources/app/src/assets/images/flags/ar.png

    • Size

      761B

    • MD5

      4259ceccb7747b79119f669f4e096e10

    • SHA1

      d17d81f676dfa2dd8c0f6dd91a29a05306b23a69

    • SHA256

      761cba50b4fbbc720f4a594947834239bb0556452a53ca65dad3b89a60790738

    • SHA512

      e6583326099e2b70b3a4b61c7e604f17227615a9062f9948aa291e04d5c1c78b99d136a537f4d65c5a28e75f4c9f960f0b8ef10e51975b2db095775ef9e69ee9

    Score
    3/10
    • Target

      resources/app/src/assets/images/flags/de.png

    • Size

      274B

    • MD5

      0c730750c8a99bc30cf20b83d235aea6

    • SHA1

      8ea6cd3bbdaae43607b4882560c4e04ef8eeaf8d

    • SHA256

      b9d2aced61236662459e3acaaeaf44ce7af28405847c9a54d42fa4ae344f045f

    • SHA512

      2fc3251378520052892b529b8c3638cbc3dd9c4ac471dc20382930c103c886826f05969400d7d1054b066cc81d00813ba86532b20be646aa8910efec9dfc6c23

    Score
    3/10
    • Target

      resources/app/src/assets/images/flags/en.png

    • Size

      310B

    • MD5

      c2de03c4d117d87763d4e1e5e28482db

    • SHA1

      bfbecbfba4c5a871894c6784da913fa495a2aa3b

    • SHA256

      e423db68a40835ac299155e365864461e37115a96f996091d5af026103d753e2

    • SHA512

      628f47a91c2605a66dda06430f26d8685384136c0d04bc3146dd033462ef7def71c7d9ddd43cf3d07e892a400d089faed938a91317a94fce4febfd01183e1301

    Score
    3/10
    • Target

      resources/app/src/assets/images/flags/es.png

    • Size

      370B

    • MD5

      ff0df90a5a69c16ef24fab173a89ee4f

    • SHA1

      02b14de1912f54b2b0630346c2cfe75a8da6d5b9

    • SHA256

      c79f2cdfee1e6666b8180b7ee33d1f06bcffb113e602e8ec47b668d4db4f18d9

    • SHA512

      4387449064aada45fba5e933304c5f931c29187acc025d291f1a758c6b2453085faa42693b2395fb08829b62187577988149514e133c2d4c58d6a2ed851f7ccc

    Score
    3/10
    • Target

      resources/app/src/assets/images/flags/fr.png

    • Size

      284B

    • MD5

      d03e36af77543804318d6a5e220724ea

    • SHA1

      58f8df12d68e055019dce59a93afe17207d68bd8

    • SHA256

      9914c4861965f03acbbc077509a8dbe76471a4b3c26eb3932427f9972236edb5

    • SHA512

      8b10141b6411d05c4f7f7a1e3139fb0e7a8223c470b5f6a2ab84e07c482d39a56820b3e3a867263321744e2d5272bf9fabc81bde61fbb7e79e2ef31a37cacc12

    Score
    3/10
    • Target

      resources/app/src/assets/images/flags/it.png

    • Size

      279B

    • MD5

      b9673fed0ded2c7a6a3e2572b60ebb5c

    • SHA1

      b4c6de948d9d7fb396dee563804fb161dc541cbe

    • SHA256

      7ed6102d8a617b6cc2f7fe101ce130b037bf4fe7cc41deb011430f8def81b14a

    • SHA512

      0f5965e93a08ea0a4f2a38de0e9f4accef71dea85d56f07c771ca62a966ab2049d611b1749544343e4389cea203137cb037fa2b7bd420087acfd3ddec2fc52f8

    Score
    3/10
    • Target

      resources/app/src/assets/images/flags/jp.png

    • Size

      384B

    • MD5

      5fb03d0cc7e23866c5c3d8840e1669b7

    • SHA1

      8ef5dc569dc21e387f239b104735c352a36da0ff

    • SHA256

      ce828ac3320a66f1f24c7bc1c10729fd9c9d477a150436395b0f25ce92ae7333

    • SHA512

      b1c802f3e0075725c2314ec5ca8e0231963775d77f08e662f72b1ff43aa3387b7eddf6748d73f81ecbd0b18542a023001b8f80df6c19ab8cc0bb0e02f0f11653

    Score
    3/10
    • Target

      resources/app/src/assets/images/flags/pt.png

    • Size

      806B

    • MD5

      188d843e650bbcb429950217dfc0131f

    • SHA1

      ec3a3cbab918dc69f797f96b718fc22e398771b0

    • SHA256

      60d97aeb01ec6481d1c9f5be24082655c880a4ec947e42713168e3c36d6015b6

    • SHA512

      8b8aa9535194304633d229161377c73e0b13fb757a2661620a4ebb33d0bf6bc7d56fe2456a062e7ef9f6224fc2aabeaad9d472b83c96f2643e4e44b9e46015ea

    Score
    3/10
    • Target

      resources/app/src/assets/images/flags/ru.png

    • Size

      275B

    • MD5

      87df9a04278355cf68db9e5065478884

    • SHA1

      da3cb10ff587a10478fc8b6e9ea5c3709e4fe8d4

    • SHA256

      53c5c5866b9b53e2b77d75e2966561eb2585de936dc657d5fb84f13b0eaea6dc

    • SHA512

      2d0f05350084c52fd2db1cad59a3521aa1dfc94ab8d1cf9900cf41d30ddb3393fcb6421665ca63bb074ae11643b6c6bce6d5959a3ed78feb12c361908d049e14

    Score
    3/10
    • Target

      resources/app/src/assets/images/opera_banner_de.png

    • Size

      471KB

    • MD5

      738a7ed9837ff9fa2c60bd28a44af894

    • SHA1

      89ca1707c01ec8acc6163d9e7cbf12d76006e352

    • SHA256

      c583af296383d87c3d45b86cf154ef97226ce84a71a7a9bd6900fc4be68a0a48

    • SHA512

      98c8e0402bcc8723bb7cf416992a4017682238904ae78a2a81f4cd5bf240611ef17d3dc954d7e69c32887622e0cfc9f600c62078480b684f425020bd4e534060

    • SSDEEP

      12288:zmeGSj6ePXhsys92v4LQdcjWKfzut3HcMdUZnbRw47Pj:zgSj6sXays8CDfzuNv2t377

    Score
    3/10
    • Target

      resources/app/src/assets/images/opera_banner_en.png

    • Size

      459KB

    • MD5

      d95425e78dbf6b10549265626d607d0a

    • SHA1

      891962fdcd4ecd1003c0effab0ba04cce765e426

    • SHA256

      989ec90852ed693177e8ab2248087d81753ecd349e353b107eb09471ca5f7c6a

    • SHA512

      af1927001c9952011ba23127bff0c6f3deb188641620682891687355aa67bf3f01169386df7deec07c2386d50fecfd42bc1d8f18cb01f13870c46b267651ca1f

    • SSDEEP

      12288:b1L6DTYLSl7nvrU4G6Tm1tz3lM9XWUH402innl:b1Lh+hnw4oz3mGUY01

    Score
    3/10
    • Target

      resources/app/src/assets/js/index.js

    • Size

      5KB

    • MD5

      959306e641b1474f109d59c7320d2663

    • SHA1

      add0e58d53d96050af3a55b07bef4e2b3aebb443

    • SHA256

      863203fb3952d5a921208ceff5cef705fc35bfb29519799ac5c1f8ca228fe437

    • SHA512

      dcd41217bc980b5817456341fa07c9d7301f0188479850942042d07c0183068b621445dc6903367e3ce809afbfe52ee574c69cb9913da9175b3f1b1bcad1b5dd

    • SSDEEP

      96:T4Q7+Jxx97Sf32ji3zIU5pRpwWNZ2+fO2eLILip9ih:sBbvi3kieofOfLILip9ih

    Score
    3/10
    • Target

      resources/app/src/assets/js/langs/de.js

    • Size

      2KB

    • MD5

      7e92d2cad7c8fbc818773cd36fbd3c1d

    • SHA1

      befce8d4b6c9a70aab397b21bcb6126aebd04014

    • SHA256

      d3c464adc6d797c99d327ca99a44e8f0c09c27f17697b46ef5e18827447e8a00

    • SHA512

      a19940ee4bc94428bb6dc4150c5aa33a48e43cddb5ce8390f0c5d307dc17e6099f8d9f2f6910ab2f49e283c88f469f6de595a45a18858145d8e351ec73d56cc5

    Score
    3/10
    • Target

      resources/app/src/assets/js/langs/en.js

    • Size

      2KB

    • MD5

      fabd52d878afce034dcadd66d3eb4f89

    • SHA1

      6c6fb98e987ae270c645ff8c0fa92d1d8335cc35

    • SHA256

      0b13760ed920334039a7101c261b459afaba6cf54ce38141a0ca01240bd6c2a3

    • SHA512

      cb92ea868e9579bd0d96c240567df0ed056b8901c415bf84fca23f7e2fe88f2e7727a1ef2592ccf0f81ad53fbdc1bb8db91cb5ea9062c0feff6da3e950bcdc0b

    Score
    3/10
    • Target

      resources/app/src/assets/js/langs/es.js

    • Size

      2KB

    • MD5

      6e6fdf68120d784a17b10a8e1d87c2d8

    • SHA1

      e6ef1aada60b098a9cbd60028a64a5f5aacf3407

    • SHA256

      0bfb77caf7b42746b6738f4127ea215b43ed7d9e311b158d8776b22ae6a1e531

    • SHA512

      be6b434436dafea7f545b208e525335d72013b9ac967b3a184598ecf06ed6fba1d5b6fda5ed59973f598648af3de4cbd1565622bb934300a238c733fe16760cd

    Score
    3/10
    • Target

      resources/app/src/assets/js/langs/fr.js

    • Size

      2KB

    • MD5

      a35d19500b06754a3308ddb92c262511

    • SHA1

      e449a9695a57b08391885cc5d91c567e49c99abc

    • SHA256

      1c235fffe490afb6c0a7d0430fa9a25bfb5758eb35a538302c9157e7ba534896

    • SHA512

      d1771f415ca5d57ab3b206d0cd3407ae34f7fe02c153a58b705752fa97600993a722edb6e4a90ac68e293c9f35b2479aaae901c2bf2641a9c2fd5e3fe98c764d

    Score
    3/10
    • Target

      resources/app/src/assets/js/langs/it.js

    • Size

      2KB

    • MD5

      cfb1c019bf8ce6a54fecac85fe977c21

    • SHA1

      58ca965580e469268907367383a22428809a5ea2

    • SHA256

      fb0081fb62ae85e7cb8e54ec6bd7c32c074e2bc248004482ef71f56a225d923d

    • SHA512

      3f187905cb9e5ce62383307a655df103a403882257358be4c25d8b15a09998459b093b04c77a6e32063d9541b704409774b288df2ad8cb88d51929c00409d7fb

    Score
    3/10
    • Target

      resources/app/src/assets/js/langs/pt.js

    • Size

      2KB

    • MD5

      4725585d5f554ae09bcb1a5cbdfaadcd

    • SHA1

      b33ab03f201c43b8daf3c7b3a757eaca9e7f6d18

    • SHA256

      40adb344950d94f896d4d87837183296351fb0a59b200f1c4a61f737d3d1157b

    • SHA512

      e0744b221f65c797a56ef00b1a776ed181e33904ffdd422653e0beb7d79313cd88fcbefa0a5714668b325d8701b00889896b87d1bffbfd7f9f7c14f985917e3c

    Score
    3/10
    • Target

      resources/app/src/assets/js/main.js

    • Size

      31KB

    • MD5

      65ff904994ff8f987e4df244a8d82053

    • SHA1

      aba40b79832fe2baaca9d0e33204541965cf1c0e

    • SHA256

      f3236e7d97f4c534491463f81dbe871296ced35373cb0f61fd8d4325d523ca6e

    • SHA512

      cab16921dda8f27f6af4b2347bcbc34d6ff05553b6f891b942ba5514eb4959c68facf6b1184c7125932e3950bc7de77c40ac696b56d3cc7b5aadbbcc566ad1d3

    • SSDEEP

      768:yREsGjnY1Ss0znYHisOffnYnLJL4UiW1DSj757HVPEf:ySsGjnY1Ss0znYHisOffnYnLJ7oX5ZP6

    Score
    3/10
    • Target

      resources/app/src/header.ejs

    • Size

      38KB

    • MD5

      eef60d35e9f75d3c7030d0574250e56f

    • SHA1

      6d29148b90187fa1583652bc8799e65efa10f637

    • SHA256

      3cf434b126e4369ffb8e9f4d489daee1aad9f47828850386984b3c752cdc7042

    • SHA512

      529bf36dacd2fc808e63a8091a8aa92f5d3d39c23077bc72298bf052f1bdcd6fc05282608ce5337643d3c1a794bdde2b8d364f7deb0c4b7ae75810be3bdb165b

    • SSDEEP

      768:Xkos/1jkos/1kQj9U38pO4MftndjyQj9U38pO4Mftndjh6:c/a/OQj+O9MftdjyQj+O9Mftdjh6

    Score
    5/10
    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

zloader
Score
10/10

behavioral1

discoveryexecution
Score
10/10

behavioral2

Score
3/10

behavioral3

Score
3/10

behavioral4

Score
3/10

behavioral5

Score
3/10

behavioral6

Score
3/10

behavioral7

Score
3/10

behavioral8

Score
3/10

behavioral9

Score
3/10

behavioral10

Score
3/10

behavioral11

Score
3/10

behavioral12

Score
3/10

behavioral13

Score
3/10

behavioral14

Score
3/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

Score
3/10

behavioral18

Score
3/10

behavioral19

Score
3/10

behavioral20

Score
3/10

behavioral21

Score
3/10

behavioral22

Score
3/10

behavioral23

Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

discovery
Score
5/10