Overview

overview

3

Static

static

3

ARC.exe

windows11-21h2-x64

3

AssetsTools.NET.dll

windows11-21h2-x64

1

CoreSystem.dll

windows11-21h2-x64

1

EntityFram...er.dll

windows11-21h2-x64

1

EntityFramework.dll

windows11-21h2-x64

1

ICSharpCod...ib.dll

windows11-21h2-x64

1

MetroFrame...gn.dll

windows11-21h2-x64

1

MetroFrame...ts.dll

windows11-21h2-x64

1

MetroFramework.dll

windows11-21h2-x64

1

Microsoft....es.dll

windows11-21h2-x64

1

Microsoft....ll.dll

windows11-21h2-x64

1

Microsoft....ck.dll

windows11-21h2-x64

1

NetSpell.S...er.dll

windows11-21h2-x64

1

Newtonsoft.Json.dll

windows11-21h2-x64

1

Polly.dll

windows11-21h2-x64

1

RestSharp.dll

windows11-21h2-x64

1

SQLite.Interop.dll

windows11-21h2-x64

1

System.Buffers.dll

windows11-21h2-x64

1

System.Com...ns.dll

windows11-21h2-x64

1

System.Dat...F6.dll

windows11-21h2-x64

1

System.Dat...nq.dll

windows11-21h2-x64

1

System.Dat...te.dll

windows11-21h2-x64

1

System.Memory.dll

windows11-21h2-x64

1

System.Num...rs.dll

windows11-21h2-x64

1

System.Run...fe.dll

windows11-21h2-x64

1

System.Tex...eb.dll

windows11-21h2-x64

1

System.Text.Json.dll

windows11-21h2-x64

1

System.Thr...ns.dll

windows11-21h2-x64

1

System.ValueTuple.dll

windows11-21h2-x64

1

VRChat.API.dll

windows11-21h2-x64

1

x64/SQLite...op.dll

windows11-21h2-x64

1

x86/SQLite...op.dll

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Release.zip
  • Size 141.5MB
  • Sample241109-137dlasnbs
  • SHA256 b63a8d20507c62d05a8cb8074c3b1032370b50611f3e8642c5336182bc99d921
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10
discovery

Malware Config

Targets

    • Target
      ARC.exe
    • Size 479KB
    • SHA256 6d6314768f9665450e3d429d8083421a4f1d0e53714473540a42b713f8d0cd0b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral1
    • Target
      AssetsTools.NET.dll
    • Size 192KB
    • SHA256 3c387d20a8d87a793352fa4c5817d23b6fcff299870d07e49427c66a91a9a796
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral2
    • Target
      CoreSystem.dll
    • Size 45KB
    • SHA256 be9d69fc3de5f3e955c8d80288697b87c7fa2519fbff88a2fd251466d4616b15
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral3
    • Target
      EntityFramework.SqlServer.dll
    • Size 578KB
    • SHA256 a0dcf975c7e3a1496d8e58cc972210b4cf91193e474d2c868a0869c7643ade5a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral4
    • Target
      EntityFramework.dll
    • Size 4.8MB
    • SHA256 ce25578a749c17a559832340004ac1af2bf3594b79795ae53f8cab09999e8ff6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral5
    • Target
      ICSharpCode.SharpZipLib.dll
    • Size 184KB
    • SHA256 b4cba17e1123333356bf7e80a20e3adffd8ec335c14da1a249d1b10f3d7cfd0b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral6
    • Target
      MetroFramework.Design.dll
    • Size 16KB
    • SHA256 0a4a96082e25767e4697033649b16c76a652e120757a2cecab8092ad0d716b65
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral7
    • Target
      MetroFramework.Fonts.dll
    • Size 656KB
    • SHA256 c843869aaca5135c2d47296985f35c71ca8af4431288d04d481c4e46cc93ee26
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral8
    • Target
      MetroFramework.dll
    • Size 345KB
    • SHA256 c2c12d31b4844e29de31594fc9632a372a553631de0a0a04c8af91668e37cf49
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral9
    • Target
      Microsoft.Bcl.AsyncInterfaces.dll
    • Size 26KB
    • SHA256 80678203bd0203a6594f4e330b22543c0de5059382bb1c9334b7868b8f31b1bc
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral10
    • Target
      Microsoft.WindowsAPICodePack.Shell.dll
    • Size 529KB
    • SHA256 e6fa9d9e34ff3bf63ce782654b14e4b54a3abd1022c87bc099032c2948157672
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral11
    • Target
      Microsoft.WindowsAPICodePack.dll
    • Size 96KB
    • SHA256 808e96f59e7dd2212eace049079d25545f6c9c3f05244ec9cdc539fda18d34d6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral12
    • Target
      NetSpell.SpellChecker.dll
    • Size 104KB
    • SHA256 98c80a90d4a2c0b322c5621459720c4e4766bc952885a4d970bd9c176dbc0c89
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral13
    • Target
      Newtonsoft.Json.dll
    • Size 695KB
    • SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral14
    • Target
      Polly.dll
    • Size 270KB
    • SHA256 6e7d2973f251ddb4b377fdbcb9916dd5cdc3d4c6015b82ffc2ad340af0d4486c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral15
    • Target
      RestSharp.dll
    • Size 153KB
    • SHA256 557da2faeb4ba5ba77278b59cb83c2fad7a09f958f26fa77f9ace879fd63fcd5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral16
    • Target
      SQLite.Interop.dll
    • Size 1.7MB
    • SHA256 aba67c7e6c01856838b8bc6b0ba95e864e1fdcb3750aa7cdc1bc73511cea6fe4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral17
    • Target
      System.Buffers.dll
    • Size 20KB
    • SHA256 accccfbe45d9f08ffeed9916e37b33e98c65be012cfff6e7fa7b67210ce1fefb
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral18
    • Target
      System.ComponentModel.Annotations.dll
    • Size 42KB
    • SHA256 04113c8549185519f3202790ceb23df609644872b9c249a56d2bcf59566102c4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral19
    • Target
      System.Data.SQLite.EF6.dll
    • Size 201KB
    • SHA256 996ac5f7d5f791c8fe5473e1e0525fba594f6a1d779f2b3a1254805302770725
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral20
    • Target
      System.Data.SQLite.Linq.dll
    • Size 201KB
    • SHA256 a409e2bf0b5c7c7507e4dba46e6bbf0d1a01a75bda68a81067d11c9dabea42b9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral21
    • Target
      System.Data.SQLite.dll
    • Size 421KB
    • SHA256 9b0581b003161d1605405ab4ae2a31e03bf3287673c148f4a1d90253aaad2c30
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral22
    • Target
      System.Memory.dll
    • Size 138KB
    • SHA256 bf3fb84664f4097f1a8a9bc71a51dcf8cf1a905d4080a4d290da1730866e856f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral23
    • Target
      System.Numerics.Vectors.dll
    • Size 113KB
    • SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral24
    • Target
      System.Runtime.CompilerServices.Unsafe.dll
    • Size 17KB
    • SHA256 37768488e8ef45729bc7d9a2677633c6450042975bb96516e186da6cb9cd0dcf
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral25
    • Target
      System.Text.Encodings.Web.dll
    • Size 77KB
    • SHA256 e9c4f5eed186cb129c527c4b8d67d163ea2f2396e9d8b96e30b5e7c12203ce84
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral26
    • Target
      System.Text.Json.dll
    • Size 628KB
    • SHA256 7eb217f0a0b9fe681de288511cb230708bb1c66e0c4a8553b9c0058632cfd20f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral27
    • Target
      System.Threading.Tasks.Extensions.dll
    • Size 25KB
    • SHA256 4f81ffd0dc7204db75afc35ea4291769b07c440592f28894260eea76626a23c6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral28
    • Target
      System.ValueTuple.dll
    • Size 24KB
    • SHA256 e905d102585b22c6df04f219af5cbdbfa7bc165979e9788b62df6dcc165e10f4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral29
    • Target
      VRChat.API.dll
    • Size 1.1MB
    • SHA256 eee389b9f52093892c9868f936b810fad0a41909d8d030f45926088b49f03352
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral30
    • Target
      x64/SQLite.Interop.dll
    • Size 1.7MB
    • SHA256 aba67c7e6c01856838b8bc6b0ba95e864e1fdcb3750aa7cdc1bc73511cea6fe4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral31
    • Target
      x86/SQLite.Interop.dll
    • Size 1.4MB
    • SHA256 70e48ef5c14766f3601c97451b47859fddcbe7f237e1c5200cea8e7a7609d809
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    discovery
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks