Overview

overview

10

Static

static

10

Content-Wa...er.dll

windows10-1703-x64

1

Content-Wa...64.dll

windows10-1703-x64

1

Content-Wa...om.dll

windows10-1703-x64

1

Content-Wa...IS.url

windows10-1703-x64

1

Content-Wa...ix.url

windows10-1703-x64

7

Content-Wa...64.dll

windows10-1703-x64

1

Content-Wa...64.dll

windows10-1703-x64

1

Content-Wa...mm.dll

windows10-1703-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Content-Warning-FixOnly.V4.rar
  • Size 10.8MB
  • Sample240903-vdghzsseqc
  • SHA256 a906f5e2277db56cf53f90d87f13b67d1c817e926866488b410c653711a15d23
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
blackguard

Malware Config

Targets

    • Target
      Content-Warning-FixOnly.V4/BepInEx/core/BepInEx.Preloader.dll
    • Size 42KB
    • SHA256 9a7597d16bfc1d2564c6c1168fb077443155946b66f2041e1d1cf9548de210b2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral1
    • Target
      Content-Warning-FixOnly.V4/Content Warning_Data/Plugins/x86_64/steam_api64.dll
    • Size 291KB
    • SHA256 a44e5537939ae4eebc69000589aa9b2437a667813a1657cc779198bae9b815a9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral2
    • Target
      Content-Warning-FixOnly.V4/Custom.dll
    • Size 2.1MB
    • SHA256 3ff601e0ad8c73ad433f158627fda8d58c52a983907f05ff0d83933230becf56
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral3
    • Target
      Content-Warning-FixOnly.V4/DESCARGA JUEGOS GRATIS.url
    • Size 113B
    • SHA256 96a001f21ba2aa780ca1b0aad681724e5554d9275dc6888188c405ef70b382db
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral4
    • Target
      Content-Warning-FixOnly.V4/OnlineFix.url
    • Size 46B
    • SHA256 3cb526cccccc54af4c006fff00d1f48f830d08cdd4a2f21213856065666ef38e
    • MD5 SHA1 SHA512
    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

    behavioral5
    • Target
      Content-Warning-FixOnly.V4/OnlineFix64.dll
    • Size 11.4MB
    • SHA256 14232bd5332d950291bc419d3dba5d8794079adfe108a3fd0688af8a01ca5e6b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral6
    • Target
      Content-Warning-FixOnly.V4/SteamOverlay64.dll
    • Size 114KB
    • SHA256 f784b4b85b627c7ea541bd2a90c9fc6e9736a0731707c31265aa86fe684dc2df
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral7
    • Target
      Content-Warning-FixOnly.V4/winmm.dll
    • Size 512KB
    • SHA256 ba37009eef6c041bc6d0a271c13679fb9e14a005bd7e038cee596cd4064cf8b3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral8

MITRE ATT&CK Enterprise v15

Tasks