Overview

overview

10

Static

static

10

Content-Wa...er.dll

windows10-1703-x64

1

Content-Wa...64.dll

windows10-1703-x64

1

Content-Wa...om.dll

windows10-1703-x64

1

Content-Wa...IS.url

windows10-1703-x64

1

Content-Wa...ix.url

windows10-1703-x64

7

Content-Wa...64.dll

windows10-1703-x64

1

Content-Wa...64.dll

windows10-1703-x64

1

Content-Wa...mm.dll

windows10-1703-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Content-Warning-FixOnly.V4.rar

  • Size

    10.8MB

  • Sample

    240903-vdghzsseqc

  • MD5

    c72c0720ec5b6b091f1ade7b408fa798

  • SHA1

    3d0ce47719c1c4a74b05cf15d51ec50c6b419a0d

  • SHA256

    a906f5e2277db56cf53f90d87f13b67d1c817e926866488b410c653711a15d23

  • SHA512

    a1ad62c29974f81bebb4b7d50c4639e62a6e4ce9cd8ee49354a9ddc0e1225ebc322fcdedb75443bebf0829349adfb580d143095941d5e99719e11b05021525af

  • SSDEEP

    196608:U7yW9CpOAu8UfXczS5C0FBswYRjcxlM3lrVYxNtiQRtB8DmaS5LEJSyLak8yKR9c:U7LMUfXKSglRjcxlM3lxeiQRWuEJmk8W

Score
10/10
blackguard

Malware Config

Targets

    • Target

      Content-Warning-FixOnly.V4/BepInEx/core/BepInEx.Preloader.dll

    • Size

      42KB

    • MD5

      24e30ee42802145447b474613f66c376

    • SHA1

      096810482069885b56fa430f7dfbcb77506f086d

    • SHA256

      9a7597d16bfc1d2564c6c1168fb077443155946b66f2041e1d1cf9548de210b2

    • SHA512

      3cbd64478650c1093e9c778408291d9184a84b5190e2d540060faf112b68feffa2d90a2fb97e82f586b40fd85ff60c77c780adf6f867a591a3c068be3718c0bd

    • SSDEEP

      384:2MEBj+RTLt5m7jJQNqgXnz2pxZqf3mjE7EP/QvlGM/3G3kDH0nMxbdgRwe5Lybru:vRwJxMejEAPMvGjgbVoLybr6csQp4

    Score
    1/10
    behavioral1

    • Target

      Content-Warning-FixOnly.V4/Content Warning_Data/Plugins/x86_64/steam_api64.dll

    • Size

      291KB

    • MD5

      f3db5801dc9b75da671b39041e2e8bcf

    • SHA1

      40d0ae44e090db49b2309fb152fbd3e11124a376

    • SHA256

      a44e5537939ae4eebc69000589aa9b2437a667813a1657cc779198bae9b815a9

    • SHA512

      9abeb8542ce48f3d263e9924a82cafa80b42b730636f1df6e594679482b6638997563b5d752d5505f25596a5d0e2f56f1255e4a94bb9523d47c180bc131e22f9

    • SSDEEP

      3072:B8Y+BDOgGIWcXSEJeRhqTMdU55UuT7+7JtN3RUOj65lhTbCMTiGu2ZvJpKCZyq+g:BYPNrQheMW5vTKxRo8CgCZyqO2CM4OYS

    Score
    1/10
    behavioral2

    • Target

      Content-Warning-FixOnly.V4/Custom.dll

    • Size

      2.1MB

    • MD5

      310120290f8cc047681f8a348ab9d851

    • SHA1

      478b3dd155c06be474efde3ae3ffb86450f78a6d

    • SHA256

      3ff601e0ad8c73ad433f158627fda8d58c52a983907f05ff0d83933230becf56

    • SHA512

      c381b20d3b8fcb19a2b483f47db11401b2196c8cfef12cb613bf60513b7a1e15d4b3150a56da8516a708f845889a353607306d2751b00f5365b622d5b4422854

    • SSDEEP

      24576:1uILGblwKgf70b6sAUmLuBUJ/KE/dFdy8goDSGIt6:1wlS0bBmQKRynqS

    Score
    1/10
    behavioral3

    • Target

      Content-Warning-FixOnly.V4/DESCARGA JUEGOS GRATIS.url

    • Size

      113B

    • MD5

      438433a51e67896ebdb909226217830a

    • SHA1

      867df7e8d986eadbab203b98b2c0dec77a833df1

    • SHA256

      96a001f21ba2aa780ca1b0aad681724e5554d9275dc6888188c405ef70b382db

    • SHA512

      d2cff74b3513ca9105af44c49c66dfaaa7793a8720c136a1bc7e595a3d1f17c70269c3d20ca139e899d4aa3af8c8c8b498a39a8cfa24eeb6b92130bfe47ab697

    Score
    1/10
    behavioral4

    • Target

      Content-Warning-FixOnly.V4/OnlineFix.url

    • Size

      46B

    • MD5

      59bf167dc52a52f6e45f418f8c73ffa1

    • SHA1

      fa006950a6a971e89d4a1c23070d458a30463999

    • SHA256

      3cb526cccccc54af4c006fff00d1f48f830d08cdd4a2f21213856065666ef38e

    • SHA512

      00005820f0418d4a3b802de4a7055475c88d79c2ee3ebfa580b7ae66a12c6966e5b092a02dc0f40db0fd3b821ea28d4aec14d7d404ead4ea88dc54a1815ffe26

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

    behavioral5

    • Target

      Content-Warning-FixOnly.V4/OnlineFix64.dll

    • Size

      11.4MB

    • MD5

      47405758b967aa564aeb20fddf06ed77

    • SHA1

      1d9f52eedbc5f5d7df844baa0b9a9094a4c1a278

    • SHA256

      14232bd5332d950291bc419d3dba5d8794079adfe108a3fd0688af8a01ca5e6b

    • SHA512

      77a5b85093d797aff5a02fee74fede49dd24f736c10660167ecc49a10fca7715e5bf107e9318143858a24c8bdb93c4c8442388154ddb4290a7f7ace07df1e3ab

    • SSDEEP

      196608:L15lPjdkENulnJCLYG+ag8WraGyI0s111IwR+QfgpjHh93OoE9KmG67os:55LkyYP8WrLyIn1uw/IzOYZ

    Score
    1/10
    behavioral6

    • Target

      Content-Warning-FixOnly.V4/SteamOverlay64.dll

    • Size

      114KB

    • MD5

      0a5429b888c75f6525e1100e32dd2b69

    • SHA1

      8ae224580aa0838a7b1570c79d4d8f27a1b46d19

    • SHA256

      f784b4b85b627c7ea541bd2a90c9fc6e9736a0731707c31265aa86fe684dc2df

    • SHA512

      5f77ac9619ccb5baebabb2e406ce265148ad18c6e1162c7d4c3a5656f38abedf90f756a829da856312689a738a3258382f37a279843bf7db0c14ac953c6992ef

    • SSDEEP

      1536:h1iaPnCtV4+1/IGiaA7bSMhP3rOy843NxnpWJtRsWkd09dl38s6BtcBRXh4:h1iaPn5+uGi/7bpxaX43Ni3aMLJB1h

    Score
    1/10
    behavioral7

    • Target

      Content-Warning-FixOnly.V4/winmm.dll

    • Size

      512KB

    • MD5

      e59aac558d9f9c5d1312ac24d09c51d5

    • SHA1

      2f11c4b00f5f92d4466348f9501aa657c9bf6fa7

    • SHA256

      ba37009eef6c041bc6d0a271c13679fb9e14a005bd7e038cee596cd4064cf8b3

    • SHA512

      1c3b357074d62d5ca11c92d71ffdacb4a7e3d6fb17cbd4b489e5bea0032cea43650a6809388e98e4b98256b477c6b5dbd8fd2c7f4e3e08af00ef68e0ed4406d0

    • SSDEEP

      12288:XQxOD9ZC0WKOy8zMtJKpBmpMgBNwQuQmMzWq0hNwnoAZwl:XQxOD9ZFKpB+N7JmMzWq0hNwnBZ

    Score
    1/10
    behavioral8

MITRE ATT&CK Enterprise v15

Tasks