General

  • Target
    Battly-Launcher-win.exe
  • Size 188.1MB
  • Sample240902-acbacswapq
  • SHA256 9cd7f45620bda9811e200380d3e43a3ea768c48d1240448c279b3321d3ae59b6
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://www.battlylauncher.com

Targets

    • Target
      Battly-Launcher-win.exe
    • Size 188.1MB
    • SHA256 9cd7f45620bda9811e200380d3e43a3ea768c48d1240448c279b3321d3ae59b6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Drops file in System32 directory

    • Target
      resources/app/node_modules/color-name/package.json
    • Size 369B
    • SHA256 fcae3844baef45d10ea5b3d36962c4bb517f6c0c0502da5dab6debc55c3e9359
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/protocol/package.json
    • Size 648B
    • SHA256 1a1a2c784eb2553bbc8e55706ab5df3f07a35b36aa3c301677ce8393a0be7a0c
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/windows-shortcuts/lib/shortcut/ReadMe.txt
    • Size 2KB
    • SHA256 34ccbdfcbb0b54ae4db54d50d12c0b923ab1b8f485ff93c9c2f64fe3fb574f12
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/node_modules/windows-shortcuts/package.json
    • Size 577B
    • SHA256 540b79de6a1c3583c8255b304849701744a9a640fa45f10b64ec983be7bd408a
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/package.json
    • Size 530B
    • SHA256 9f66eafe35c475aaba1157c877406f448273c6e4811a1ef2fce10aa0d5eee706
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/src/ads.ejs
    • Size 1KB
    • SHA256 828df948e8dd1e0fc2a88511fd1f59568a97fc2c3626152e574e5f31c89ff5e8
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/src/assets/css/index.css
    • Size 20KB
    • SHA256 2f281d5eb03f52a46514089fd0b0af408f02613a8fcef8d506dc01f590651d7c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/src/assets/icon.icns
    • Size 52KB
    • SHA256 3163ed50c1b8301bb87cbbe983d87e072aaf1fa4b9c2e5917a9df858033059a9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/src/assets/icon.ico
    • Size 11KB
    • SHA256 9a6b51f26c9efb993a02f67582477d9b524b029af5d6b1bea046840012dc110e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/src/assets/icon.png
    • Size 19KB
    • SHA256 9f3d301cf823e1d227b8521a83ca50de4719eecad1f31ec17e70c159ce70a19d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/src/assets/images/background.png
    • Size 713KB
    • SHA256 62a7ec1cb750aa28bcfdc93cebf1521f8cdc352992938652527aacb79618e57c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/src/assets/images/flags/ar.png
    • Size 761B
    • SHA256 761cba50b4fbbc720f4a594947834239bb0556452a53ca65dad3b89a60790738
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/src/assets/images/flags/de.png
    • Size 274B
    • SHA256 b9d2aced61236662459e3acaaeaf44ce7af28405847c9a54d42fa4ae344f045f
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/src/assets/images/flags/en.png
    • Size 310B
    • SHA256 e423db68a40835ac299155e365864461e37115a96f996091d5af026103d753e2
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/src/assets/images/flags/es.png
    • Size 370B
    • SHA256 c79f2cdfee1e6666b8180b7ee33d1f06bcffb113e602e8ec47b668d4db4f18d9
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/src/assets/images/flags/fr.png
    • Size 284B
    • SHA256 9914c4861965f03acbbc077509a8dbe76471a4b3c26eb3932427f9972236edb5
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/src/assets/images/flags/it.png
    • Size 279B
    • SHA256 7ed6102d8a617b6cc2f7fe101ce130b037bf4fe7cc41deb011430f8def81b14a
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/src/assets/images/flags/jp.png
    • Size 384B
    • SHA256 ce828ac3320a66f1f24c7bc1c10729fd9c9d477a150436395b0f25ce92ae7333
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/src/assets/images/flags/pt.png
    • Size 806B
    • SHA256 60d97aeb01ec6481d1c9f5be24082655c880a4ec947e42713168e3c36d6015b6
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/src/assets/images/flags/ru.png
    • Size 275B
    • SHA256 53c5c5866b9b53e2b77d75e2966561eb2585de936dc657d5fb84f13b0eaea6dc
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/src/assets/images/opera_banner_de.png
    • Size 471KB
    • SHA256 c583af296383d87c3d45b86cf154ef97226ce84a71a7a9bd6900fc4be68a0a48
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/src/assets/images/opera_banner_en.png
    • Size 459KB
    • SHA256 989ec90852ed693177e8ab2248087d81753ecd349e353b107eb09471ca5f7c6a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/src/assets/js/index.js
    • Size 5KB
    • SHA256 863203fb3952d5a921208ceff5cef705fc35bfb29519799ac5c1f8ca228fe437
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/src/assets/js/langs/de.js
    • Size 2KB
    • SHA256 d3c464adc6d797c99d327ca99a44e8f0c09c27f17697b46ef5e18827447e8a00
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/src/assets/js/langs/en.js
    • Size 2KB
    • SHA256 0b13760ed920334039a7101c261b459afaba6cf54ce38141a0ca01240bd6c2a3
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/src/assets/js/langs/es.js
    • Size 2KB
    • SHA256 0bfb77caf7b42746b6738f4127ea215b43ed7d9e311b158d8776b22ae6a1e531
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/src/assets/js/langs/fr.js
    • Size 2KB
    • SHA256 1c235fffe490afb6c0a7d0430fa9a25bfb5758eb35a538302c9157e7ba534896
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/src/assets/js/langs/it.js
    • Size 2KB
    • SHA256 fb0081fb62ae85e7cb8e54ec6bd7c32c074e2bc248004482ef71f56a225d923d
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/src/assets/js/langs/pt.js
    • Size 2KB
    • SHA256 40adb344950d94f896d4d87837183296351fb0a59b200f1c4a61f737d3d1157b
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      resources/app/src/assets/js/main.js
    • Size 31KB
    • SHA256 f3236e7d97f4c534491463f81dbe871296ced35373cb0f61fd8d4325d523ca6e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      resources/app/src/header.ejs
    • Size 38KB
    • SHA256 3cf434b126e4369ffb8e9f4d489daee1aad9f47828850386984b3c752cdc7042
    • MD5 SHA1 SHA512 SSDEEP
    Score
    5/10
    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

zloader
Score
10/10

behavioral1

discoveryexecution
Score
10/10

behavioral2

Score
3/10

behavioral3

Score
3/10

behavioral4

Score
3/10

behavioral5

Score
3/10

behavioral6

Score
3/10

behavioral7

Score
3/10

behavioral8

Score
3/10

behavioral9

Score
3/10

behavioral10

Score
3/10

behavioral11

Score
3/10

behavioral12

Score
3/10

behavioral13

Score
3/10

behavioral14

Score
3/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

Score
3/10

behavioral18

Score
3/10

behavioral19

Score
3/10

behavioral20

Score
3/10

behavioral21

Score
3/10

behavioral22

Score
3/10

behavioral23

Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

discovery
Score
5/10