Overview

overview

9

Static

static

3

CampPinecrest.exe

windows11-21h2-x64

9

$PLUGINSDI...er.dll

windows11-21h2-x64

3

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDI...ll.dll

windows11-21h2-x64

3

LICENSES.c...m.html

windows11-21h2-x64

3

WorldWars.exe

windows11-21h2-x64

9

d3dcompiler_47.dll

windows11-21h2-x64

1

ffmpeg.dll

windows11-21h2-x64

1

libEGL.dll

windows11-21h2-x64

1

libGLESv2.dll

windows11-21h2-x64

1

locales/af.ps1

windows11-21h2-x64

3

locales/uk.ps1

windows11-21h2-x64

3

resources/...nts.js

windows11-21h2-x64

3

resources/...ent.js

windows11-21h2-x64

3

resources/...ode.js

windows11-21h2-x64

3

resources/...age.js

windows11-21h2-x64

3

resources/...med.js

windows11-21h2-x64

3

resources/...rse.js

windows11-21h2-x64

3

resources/...ver.js

windows11-21h2-x64

3

resources/...ver.js

windows11-21h2-x64

3

resources/elevate.exe

windows11-21h2-x64

3

vk_swiftshader.dll

windows11-21h2-x64

1

vulkan-1.dll

windows11-21h2-x64

1

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

$PLUGINSDI...7z.dll

windows11-21h2-x64

3

$R0/Uninst...rs.exe

windows11-21h2-x64

7

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDI...ll.dll

windows11-21h2-x64

3

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

Resubmissions

02/09/2024, 21:14 UTC

240902-z3rgpsxcnm 9

02/09/2024, 21:08 UTC

240902-zyvnkaxbqj 9

02/09/2024, 20:57 UTC

240902-zrx54sxapk 9

02/09/2024, 20:52 UTC

240902-znsffsxajm 9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CampPinecrest.exe

  • Size

    79.7MB

  • Sample

    240902-z3rgpsxcnm

  • MD5

    201e78f670e9e14aa6a28e5dac81c23c

  • SHA1

    471234e194d5c2eb5c5b44fb76140b20c4aa7541

  • SHA256

    6f630e829c89ab5f88750bac15739301b9cb43d13bc247c94e70b0e4295378c8

  • SHA512

    639b649e069c280084df11037d30d1b02ec50096b687869f813f49542cf23b76f22be83ecb381f1aff921c30df876a9ba4eaf4beec192c0a6ebf04683660404d

  • SSDEEP

    1572864:XBJ39KZD4y9MXs6IB8ceyIS7nqYdd6hIEhSmn6nlN/RF/:X4j9M86I/vP7nMhJnUXRR

Score
9/10
credential_accessdiscoveryexecutionspywarestealer

Malware Config

Targets

    • Target

      CampPinecrest.exe

    • Size

      79.7MB

    • MD5

      201e78f670e9e14aa6a28e5dac81c23c

    • SHA1

      471234e194d5c2eb5c5b44fb76140b20c4aa7541

    • SHA256

      6f630e829c89ab5f88750bac15739301b9cb43d13bc247c94e70b0e4295378c8

    • SHA512

      639b649e069c280084df11037d30d1b02ec50096b687869f813f49542cf23b76f22be83ecb381f1aff921c30df876a9ba4eaf4beec192c0a6ebf04683660404d

    • SSDEEP

      1572864:XBJ39KZD4y9MXs6IB8ceyIS7nqYdd6hIEhSmn6nlN/RF/:X4j9M86I/vP7nMhJnUXRR

    Score
    9/10
    credential_accessdiscoveryspywarestealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates processes with tasklist

      discovery
    behavioral1

    • Target

      $PLUGINSDIR/SpiderBanner.dll

    • Size

      9KB

    • MD5

      17309e33b596ba3a5693b4d3e85cf8d7

    • SHA1

      7d361836cf53df42021c7f2b148aec9458818c01

    • SHA256

      996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

    • SHA512

      1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

    • SSDEEP

      192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY

    Score
    3/10
    discovery
    behavioral2

    • Target

      $PLUGINSDIR/StdUtils.dll

    • Size

      100KB

    • MD5

      c6a6e03f77c313b267498515488c5740

    • SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    • SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    • SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • SSDEEP

      3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v

    Score
    3/10
    discovery
    behavioral3

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      0d7ad4f45dc6f5aa87f606d0331c6901

    • SHA1

      48df0911f0484cbe2a8cdd5362140b63c41ee457

    • SHA256

      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    • SHA512

      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    • SSDEEP

      192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6

    Score
    3/10
    discovery
    behavioral4

    • Target

      $PLUGINSDIR/WinShell.dll

    • Size

      3KB

    • MD5

      1cc7c37b7e0c8cd8bf04b6cc283e1e56

    • SHA1

      0b9519763be6625bd5abce175dcc59c96d100d4c

    • SHA256

      9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

    • SHA512

      7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

    Score
    3/10
    discovery
    behavioral5

    • Target

      LICENSES.chromium.html

    • Size

      7.9MB

    • MD5

      8303b3a19888f41062a614cd95b2e2d2

    • SHA1

      a112ee5559c27b01e3114cf10050531cab3d98a6

    • SHA256

      9c088caac76cf5be69e0397d76fe9397017585cffdba327692ff1b3a6c00d68f

    • SHA512

      281b2ecc99502a050ee69e31256dec135e8cb877d1a6ba9f1c975fcfb11c062980ee6061d2368b62f91e392953ae6235dd726a9d98e6efc1302f7ed713099179

    • SSDEEP

      24576:dbTq6T06T5kJWSIRWnBIl70mfT76y6E65606F/HXpErpem:t4scj

    Score
    3/10
    discovery
    behavioral6

    • Target

      WorldWars.exe

    • Size

      154.6MB

    • MD5

      225cd570d533705a6798559e90ed99d9

    • SHA1

      dadf3eccaf2b6c7183128941e3b854b8e6f21cec

    • SHA256

      b4f796f1cd929e6da285b3469f8ad9a2ae9ef4d383295abf0a746bf053ea4c0e

    • SHA512

      67aefd4d858caacf7129671081cf8eae9762a5e27cf63832226da7a25f9aac3b3c19a8b4d9cd3216b6565f066259c2d7dadc86d9ca1277b659d9351054759405

    • SSDEEP

      1572864:ITmw0ciLNpDPuAvHxJLkY2O6Ea3f9kwZXeT6EivLp1vUAtdjtZn+f4FnIvGaC9dU:7v6E70+Mk

    Score
    9/10
    credential_accessdiscoveryspywarestealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates processes with tasklist

      discovery
    behavioral7

    • Target

      d3dcompiler_47.dll

    • Size

      4.7MB

    • MD5

      2191e768cc2e19009dad20dc999135a3

    • SHA1

      f49a46ba0e954e657aaed1c9019a53d194272b6a

    • SHA256

      7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d

    • SHA512

      5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970

    • SSDEEP

      49152:KCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvhiD0N+YEzI4og/RfzHLeHTRhFRNc:xG2QCwmHPnog/pzHAo/A6l

    Score
    1/10
    behavioral8

    • Target

      ffmpeg.dll

    • Size

      2.7MB

    • MD5

      a007299c49fa50aeff594655859780ae

    • SHA1

      d202f1f617023763a0e9418878e8ecac96be9fd4

    • SHA256

      b78f0036621ad1d5833289f2ad509963ef78f1a89a3c7df0f1370fd2d35a2804

    • SHA512

      444c4baa1e1d941bd04f78184cec519c6eb53a83fbc3aa3ea30522bffc9ecde73ebe7b910c1a37c345429298ada3c0ffcb3e3849e21b2009487b5cd1a02cb2a9

    • SSDEEP

      49152:WdTodIrn9wbFV6Ps2cA7SJ/W1C1fLPzhkE7hjU7gUxGJwDw3lCQTQY/N3lzl3heH:C79fe/CmP6w3lXQYef/3

    Score
    1/10
    behavioral9

    • Target

      libEGL.dll

    • Size

      469KB

    • MD5

      ca5bb0794b7700601e9438283d458665

    • SHA1

      7fcf090b19820b9450937be800575c526448b581

    • SHA256

      4a8be3b4d9fe790efdce38cff8f312a2f8276908d6703e0c6c37818e217cf1e3

    • SHA512

      36ebab858fe7e014837548575389e7df2e86676888e4a9039c736d0f2e6463102e68989b794d949ddb16d9bcce43ce55737fcf2a4b09b1667bf968a9540e9f32

    • SSDEEP

      6144:afuE2DT96QHENooSYBjLkt4sasMHemPwlrX+nZiML7hn:afuE2DbkGoS2jLku/wWUiNn

    Score
    1/10
    behavioral10

    • Target

      libGLESv2.dll

    • Size

      7.3MB

    • MD5

      05b585464f18fe0e3bddb20527697d66

    • SHA1

      8bcec2f0b409afa9ff054e25f3ce85eb9bd50010

    • SHA256

      0bb7c6c08b569c1d2de90a40e6c142591e160a7c6cb15d21807f3404a48c4287

    • SHA512

      f680ab9c3070f443c7359bb3f0c2032f5c58c88c7823e4592e8212ce8815ea5f463c86df113f5320944c62d3cb4e8d45b9b4dcaadccc1ac9bf203ae4bb52083c

    • SSDEEP

      98304:WJTPQhRQ4t2fzqJ3IZ155Rl5F/tpcAgsOMN:Wm2foIzRJosr

    Score
    1/10
    behavioral11

    • Target

      locales/af.pak

    • Size

      368KB

    • MD5

      7e51349edc7e6aed122bfa00970fab80

    • SHA1

      eb6df68501ecce2090e1af5837b5f15ac3a775eb

    • SHA256

      f528e698b164283872f76df2233a47d7d41e1aba980ce39f6b078e577fd14c97

    • SHA512

      69da19053eb95eef7ab2a2d3f52ca765777bdf976e5862e8cebbaa1d1ce84a7743f50695a3e82a296b2f610475abb256844b6b9eb7a23a60b4a9fc4eae40346d

    • SSDEEP

      6144:ebGJWQdLX/Wi6fR9a5DhZ2FQPnUGSBhjA636Zi2Jyn9Ybt5KXpgmLwSVxJsVxSjf:6GJW2bOi6fRmZ2OPnUThjA636Zi2Jynd

    Score
    3/10
    execution
    behavioral12

    • Target

      locales/uk.pak

    • Size

      688KB

    • MD5

      e4c4e3700469704b936460ca1a90fcc0

    • SHA1

      e809990fc07a1d39fe623046382699e648e343c0

    • SHA256

      29af2abc75a35bb9e3f9bc6e2904228ba651ea4e0ce8e9c7a2d7e272374b9ebb

    • SHA512

      68e33f471c5bf2d4ed9cb00ace3e094ef102a5f1566a6e2c8a3007ef7fbd8a24c36eb36b08745f3608e70940444e9fc7a36fabe1a9945d1f00b4f3f28c7bdaf6

    • SSDEEP

      12288:FkzOqMnty/KiZswU1nbx05kB3IjUUmEg5KuoLNiXElqnOyh:muGN35EEK

    Score
    3/10
    execution
    behavioral13

    • Target

      resources/app.asar.unpacked/node_modules/hbo-dnsd/constants.js

    • Size

      4KB

    • MD5

      d60038ca3804306843710c6133a88562

    • SHA1

      e1150954741d817c0b74464fbf51a58bb8af3fc5

    • SHA256

      9025865a58a901ef55a2bb8ac88490299a7f354c88569537023a145556d2aca1

    • SHA512

      d656ddfc626ae3caea2bf450184298045518bd901c3a6f3d9886adf8e1bf44b3ff916f0ac22bd642ae8274349f02d29231716b702b05038a88c3d17e3c1a81c0

    • SSDEEP

      96:o2Yrd7hbuCagrO2Vg+IDfY8hiCHdGqekxv+yQQRsvfhi5N:oBKgLg+IDlhiIGxkxlQqOhin

    Score
    3/10
    execution
    behavioral14

    • Target

      resources/app.asar.unpacked/node_modules/hbo-dnsd/convenient.js

    • Size

      3KB

    • MD5

      923136765bba57b0acb76adb31ea9352

    • SHA1

      600798d0eddb57ccef3cd07fe6f2da3bfa4ca5c7

    • SHA256

      ec23f12a104e427d23684e25248bc2b85e1547221a7f8e1a69885cd37918580c

    • SHA512

      f2a9e6bdff7dfbfcf370c15a945a11c92adfd043d0f0eb1a97165f95db811edbf8af849ea07f176948180b9c019de25afc6ca3a42e4fea2de144397c624399c4

    Score
    3/10
    execution
    behavioral15

    • Target

      resources/app.asar.unpacked/node_modules/hbo-dnsd/encode.js

    • Size

      8KB

    • MD5

      94d51b81902b1c08faa1e84bf685653a

    • SHA1

      4d18b12f4527912df001a635745d1a1638639b5b

    • SHA256

      59d738342d0b0e45d08b48a3fba7312121bed06de5f4c056e4ea59d717e23e46

    • SHA512

      f50daf6db7e00d3b18d88b3ead3d791b402caffcada455f78ffca7d6df7e6b2e730759f07bd4ea1a2023567912104b6f828be4b38690d81fb42d3d71201afdc4

    • SSDEEP

      192:g3n0lXdqLGshzgyJrN5O8YlfYzZJ28uKKfYmDQqp8Ec:g3phMyRTO1lAzZJ28e6h

    Score
    3/10
    execution
    behavioral16

    • Target

      resources/app.asar.unpacked/node_modules/hbo-dnsd/message.js

    • Size

      9KB

    • MD5

      5f587bc9a026d6ac93151c986aafcafb

    • SHA1

      379574f2efc8007d38bb18746b623dbfbe9edfa2

    • SHA256

      38634e0e41c5a9774793333bcbc80c213050cabde0fe8d5c96528daa088f8330

    • SHA512

      0fecfc29d1ffe7dd95096a6d9fef9314f6b80991c07ef3773cf6ef345ba03e1b6f4fddad5abd3fd3ade33b5c765cbbbc302ec8b4785c42ac0c9fa0d88d2f81a5

    • SSDEEP

      192:A5rlve6JHJBAru/MAx26xoaAPGbMVqxiO8y8Z/yTLAJlxPPo2PDHEYz5pd5XTimq:A5BdhJBAru/MAx27y8y8ZqUxPPo2/zLa

    Score
    3/10
    execution
    behavioral17

    • Target

      resources/app.asar.unpacked/node_modules/hbo-dnsd/named.js

    • Size

      530B

    • MD5

      71615fcc4d3e31a77d898fe0bea7ae56

    • SHA1

      c4db62de9d522e738b76a064cef6560d8984da40

    • SHA256

      1ba87c94981bd352cb0367f2629490d08e443335f0d7a399e44d1c2f754bbddf

    • SHA512

      6b8d6bf598471c2d90ee4c12c47e98eb501143a2d3e71793226e786b466479e6b83fa9506271bf7fa3dc2218722e4ef365f51faab487df52a97b5f8a78584e86

    Score
    3/10
    execution
    behavioral18

    • Target

      resources/app.asar.unpacked/node_modules/hbo-dnsd/parse.js

    • Size

      7KB

    • MD5

      57fca5f2b61bf7c5925b81a5b34ced75

    • SHA1

      b0efd6109e60bd208f1b9ba656840015186d2144

    • SHA256

      b398d15e2edd071fe92dcf64dc33953b86dba810109cf327fcd9bc720960feec

    • SHA512

      58c83da33a64ffe5d6e0466a9f3da1bd2b0bf25fba411c7416046612bbd7e7d41a46213b0be48185111349e96a41220bba4bc2cf822333254e6f906099806681

    • SSDEEP

      192:Ti5wE8gy0uDn1Uh5623UHLNKOnmYbUo519TiPP:TL1hn1UkpKFo51ZiH

    Score
    3/10
    execution
    behavioral19

    • Target

      resources/app.asar.unpacked/node_modules/hbo-dnsd/server.js

    • Size

      5KB

    • MD5

      b463cd4cd07b19828246387cdd9e4a73

    • SHA1

      af4b76d4ea96b36d33c6b6615ad2d3c329ac46b6

    • SHA256

      223e3c08b2ce4bf48134e183b55e87e0a3d68f4efc8edb3430e8cfdbee06668d

    • SHA512

      f4cc60fcb43982207f314e81366199fda73f65a3c69209620009c4d0ea29d1360fd5fd5a74e24047243ce4d3fc1e45716555a02ecb628c68076409fb73217222

    • SSDEEP

      96:Oo6Gg1i54zdSIzSsXBFJOaJtR/hP6ZmfxJOxrxtIUD6GCElJ6p2/RJwwGGhtF0hh:Oo6Jd3zScbOQpP6cXOxr7IsiED/hEh

    Score
    3/10
    execution
    behavioral20

    • Target

      resources/app.asar.unpacked/node_modules/hbo-dnsd/util/null-server.js

    • Size

      451B

    • MD5

      c87595aa0fba05f882ca0a3f111f18a6

    • SHA1

      f70b06b74acbf49e2fa3fc269df296ece1524139

    • SHA256

      b73f31d4321b0c5bfb964353bfa5df33dd859f3ce7259dd9511fb4aed80333e4

    • SHA512

      c8ad72c846cd6451400dde61690b037b73463cd544ca380e2addd48dc99a129962d09b20ba120d21e8eee686274cf1d407196c33408afca222d54c355a282417

    Score
    3/10
    execution
    behavioral21

    • Target

      resources/elevate.exe

    • Size

      105KB

    • MD5

      792b92c8ad13c46f27c7ced0810694df

    • SHA1

      d8d449b92de20a57df722df46435ba4553ecc802

    • SHA256

      9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

    • SHA512

      6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

    • SSDEEP

      3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l

    Score
    3/10
    discovery
    behavioral22

    • Target

      vk_swiftshader.dll

    • Size

      5.1MB

    • MD5

      750cbdfb01943e28e08708183ec208b5

    • SHA1

      1bee0cd3d0970834b2a47daf384354f243fd1ee0

    • SHA256

      a6d295dcc3afcb55aa79eac5f896bceb15ccb2b798db3bb076ceeea78073791a

    • SHA512

      dbfdf76f40558ce2f23ca315b8719e283f0f22f46e733f37c2ae237fdafd23cf7962f36547ba1bb2d5b219de11546c3dc06859fac498a7da97df41018c0d80c4

    • SSDEEP

      98304:5aTPSALpajr/PMMPTZTOWvYQ7klZz8Wd4iRk:Elajr/PMMPTZTOWvCJ4Z

    Score
    1/10
    behavioral23

    • Target

      vulkan-1.dll

    • Size

      906KB

    • MD5

      6c70aab071c4febc5921e0d39811937a

    • SHA1

      20d87b3a5333ea3f6d0d7b0333f2c30a281937aa

    • SHA256

      2233fef6788711089fc5c1a008bfff6559cf2fc3e8363cd8a50196e90d1d9825

    • SHA512

      7f786c44376b59be7d7c51d3c40ecb80f30645551b582d042b641ea0a6464daf367ddf7eafaf00a1558e1f11570d99a699d33d224b01048d09f8f00ea501c4bf

    • SSDEEP

      24576:yGZKHQwvuzUrfafN/iXxT+R6Z5WODYsHh6g3P0zAk7a:GwwvuziiV/iXxc6Z5WODYsHh6g3P0zAu

    Score
    1/10
    behavioral24

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      ec0504e6b8a11d5aad43b296beeb84b2

    • SHA1

      91b5ce085130c8c7194d66b2439ec9e1c206497c

    • SHA256

      5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

    • SHA512

      3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

    • SSDEEP

      96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr

    Score
    3/10
    discovery
    behavioral25

    • Target

      $PLUGINSDIR/nsis7z.dll

    • Size

      424KB

    • MD5

      80e44ce4895304c6a3a831310fbf8cd0

    • SHA1

      36bd49ae21c460be5753a904b4501f1abca53508

    • SHA256

      b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

    • SHA512

      c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

    • SSDEEP

      6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck

    Score
    3/10
    discovery
    behavioral26

    • Target

      $R0/Uninstall WorldWars.exe

    • Size

      135KB

    • MD5

      9c109b564d088e169d142cd43459d081

    • SHA1

      b968fa772cb41ec102d93983130f8f0f0ae54c3b

    • SHA256

      66064423c03a9f2de9ffe5fdc45a5b3e1dac21641173a6936118a5d06b899664

    • SHA512

      3dcdbea075baf0b25a96cf6d09274fb02d382fb2148b10c8e48eea94164b9c5a1521a4b2956814959293a641e34fb101dd553fbd00dea051edf896307d359993

    • SSDEEP

      3072:In77v00hEoDEtau8ceAqHj0JUNCoIaH2tvhOEA1RJCir86SrSrv6Ia3B:I740IMmqD06CJs2t0EyL+yaR

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral27

    • Target

      $PLUGINSDIR/StdUtils.dll

    • Size

      100KB

    • MD5

      c6a6e03f77c313b267498515488c5740

    • SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    • SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    • SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • SSDEEP

      3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v

    Score
    3/10
    discovery
    behavioral28

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      0d7ad4f45dc6f5aa87f606d0331c6901

    • SHA1

      48df0911f0484cbe2a8cdd5362140b63c41ee457

    • SHA256

      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    • SHA512

      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    • SSDEEP

      192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6

    Score
    3/10
    discovery
    behavioral29

    • Target

      $PLUGINSDIR/WinShell.dll

    • Size

      3KB

    • MD5

      1cc7c37b7e0c8cd8bf04b6cc283e1e56

    • SHA1

      0b9519763be6625bd5abce175dcc59c96d100d4c

    • SHA256

      9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

    • SHA512

      7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

    Score
    3/10
    discovery
    behavioral30

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      ec0504e6b8a11d5aad43b296beeb84b2

    • SHA1

      91b5ce085130c8c7194d66b2439ec9e1c206497c

    • SHA256

      5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

    • SHA512

      3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

    • SSDEEP

      96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr

    Score
    3/10
    discovery
    behavioral31

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

credential_accessdiscoveryspywarestealer
Score
9/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

credential_accessdiscoveryspywarestealer
Score
9/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
7/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.