f28ec304a07d51cfd9cc4a7cdf2ca6081bcb343ffa6f96225a75d532be94463c

Sharing

Copy URL Twitter E-mail

General

Target
Resident.Evil.Requiem.HYPERVISOR.V2-KIRIGIRI.rar
Size 13.2MB
Sample260308-vysfzset3p
SHA256 f28ec304a07d51cfd9cc4a7cdf2ca6081bcb343ffa6f96225a75d532be94463c
MD5 68340e026e713f23131abf0b68cc3aed
SHA1 12aa4b349056217704600337a3b2e19ab1afaf5b
SHA512 0a705dcdd436092d2e2b29f2745dcb23131ef3bed8f0d997fbc6af5341a2207024ff3d68e5de05568b95f4b60975334bb0f9b6b5b8b6b646e7ab2f47105a5789
SSDEEP 196608:aqdCtViS27cyB+BS4+ZdeQQys5dP142bIHVnRdQIlQX7v6nuyQmmo6mUEBe2M/Oz:4IXcXo3Qj3e2boBlCDypB6jvGTS5jQ
TLSH
T1B5E633BE7BEE7757E1B12592F475270D46C0B2046C1C98274444F2ABBDE93BDAE2C026
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware

Malware Config

Targets

- Target
  Resident.Evil.Requiem.HYPERVISOR.V2-KIRIGIRI.rar
- Size 13.2MB
- SHA256 f28ec304a07d51cfd9cc4a7cdf2ca6081bcb343ffa6f96225a75d532be94463c
- MD5 68340e026e713f23131abf0b68cc3aed
- SHA1 12aa4b349056217704600337a3b2e19ab1afaf5b
- SHA512 0a705dcdd436092d2e2b29f2745dcb23131ef3bed8f0d997fbc6af5341a2207024ff3d68e5de05568b95f4b60975334bb0f9b6b5b8b6b646e7ab2f47105a5789
- SSDEEP 196608:aqdCtViS27cyB+BS4+ZdeQQys5dP142bIHVnRdQIlQX7v6nuyQmmo6mUEBe2M/Oz:4IXcXo3Qj3e2boBlCDypB6jvGTS5jQ
- TLSH
  T1B5E633BE7BEE7757E1B12592F475270D46C0B2046C1C98274444F2ABBDE93BDAE2C026
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Executes dropped EXE
behavioral1
- Target
  ColdClientLoader.ini
- Size 2KB
- SHA256 44e451d5e560b541a98ca186f8617520f23e99def31b5a861e94877b3cdce2a4
- MD5 915d5bdc21d829e44b4d6ae242585cd2
- SHA1 8509e40b9b810ec427a0c97f5a60409a3bf84f13
- SHA512 243cbb115cf5ac1b60e32247ca3a28a811e55037b04e41ee43a7b4730d88ec495cf8a23ec77cb293b62fafe73d3450a127413918a88f1af46a186b307a43515f
- TLSH
  T1345163426B5853B5D262D208F54EACD4C32EC4DF123654A06038D12D6290EFEE37E9DB
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral2
- Target
  EfiGuard/EFI/Boot/EfiGuardDxe.efi
- Size 352KB
- SHA256 6a62ecdfad0cb6e4fa3f4d620b2c802a6805f4c553bfa4d7d7cb1b445c9d1f3d
- MD5 3b18d64d616e0eb923696c5dcc21cb4c
- SHA1 22978671e9163d7566393e6ee8245123e4c0a08b
- SHA512 ac6bfdbf0504cf00f7bc63df2ac1d09c81b41e711d1b2a8207b53441f3640a4f2b351b3c0d532f0beac4f259aa5db050355788c5579ea3b3f00add7d21401637
- SSDEEP 3072:IA8YlaeSRPFX5eQJ0I5usI/hfKdgt1qT4VZ0pfiy/MDu54yWc:6YliFBPoKqnGGuzj
- TLSH
  T1577440B3E955587BF47459309DE603A6327BA5D0C7B2C24B2A4C613E2E927902F36FC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  EfiGuard/EFI/Boot/HashTool.efi
- Size 98KB
- SHA256 919f3561eea5cb20681d90986b1ced7b627aead09496194325f681c7ccc14468
- MD5 45639d23aa5f2a394b03a65fc732acf2
- SHA1 860064a8509bdbd2c58557483aba97f11c809a9f
- SHA512 a51ce176c93417e53ec6d78c16afa5e8b9545e623d98d4fc55fc3762f33cd942ea1dce1211b2ed80703df08fe4fed84aff1fa86063c27b08413b3882019c4afd
- SSDEEP 1536:zYWOT4K6ju2aDeGj8jucuSAJAg+2Fut5meMRMimS5:z0T4Kh2aOjuVJ+J5FFS5
- TLSH
  T18BA35C03D6D218FEE1FAD37016EA55327B75B8281B72AB272344D5323D21FA45F29B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  EfiGuard/EFI/Boot/bootx64.efi
- Size 98KB
- SHA256 50906114c5a3f93c10102829d057206e3c32bedff4aed3f89a576de1c9e9e5aa
- MD5 4f7a4f566781869d252a09dc84923a82
- SHA1 f9eff9ca458f7d3f47c7d7c56752ec208416f4b1
- SHA512 c73583439ad989f5eb3a68753df56a06dc2f04b637415e3c515c74654651e0991a1d5f0ab84da4cd1d681d29a35271ff584a5b988b28ce1b810f94c0d0a57aff
- SSDEEP 1536:SXORuaKsUT4K6ju2aDeGjlfYFOYg+25dKM278vMhmSc:SXfgUT4Kh2a3fYK+JMSc
- TLSH
  T1BCA36C17D7D218FED1FAD23046A656327B75F8582762EB272340C6323E22F946F29B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  EfiGuard/EFI/Boot/loader.efi
- Size 48KB
- SHA256 ee3b8e01662216fe6b1b5ab1552484594f86c095d46346413b0964e1f19303e5
- MD5 528fd99a25e499e0dc99d6d24c1263ac
- SHA1 78c1975eb61657d8468ce6fc2c8fe41874b9b6bf
- SHA512 649dd5a26d4a0d24330ef23beb2a61dde93133d6ac80207141424073315bd4fd91249eca36c913d6ac8bbef3fdcf17eccdee1d791e5d044c90967002fab7f484
- SSDEEP 768:bOaXcWKc3r9e8LUHeph22u4Hel5cuNIaadw+HFYyy/hkqCXjT:bZPKc78B+/wtlkaavlYmj
- TLSH
  T1D823296663E80128F173EB78CDB6465BD7F27846757483CE13A081CE6FBBD205A18762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  EfiGuard/EfiDSEFix.exe
- Size 21KB
- SHA256 923ccf2257bfcb6e0a386977f4ce79f4a1a9a9a7c58620979d691e8a20cb68b4
- MD5 210d874edc49f624ce78eb7ec9f0b73f
- SHA1 56ad197f3683d9427e3fde0fa257ad7e966fd266
- SHA512 cb4533d97849860d58f2fc589a51aa53e59b79d24c80b40bc0f62ac35799be598f92f49fcd505f36d287d2746c1bc1ddb660baf3119005bf6b2e461a882cf347
- SSDEEP 192:ve7MmoiTlnU9OmnKkTkBh0zKkfpuptOAbm4biRA4ojGnN/2XnkG5G67KjYsH:vegmxiQoKokBhsuLLi6jG92XjPkYK
- TLSH
  T183A2A59173ED619CF1B73B75AFB6C1565B36BC816232CA5F3090822E29F29805D31B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  KIRIGIRI.dll
- Size 33KB
- SHA256 eb246d275a07d4e4f44579b9c6879f1a52382f22b4fe2440583ed217d4ec4c70
- MD5 1098656bfcadd7ae22a3d3647926307c
- SHA1 d9e3b0a45c50085e74d08385f8ab66d2b8936b91
- SHA512 ee89c2cd4190e9c4c321fa7b4f4163074fd05a070b7c400ee66de118f5545886d9730b6d710371efef02a62ba29d27d429a3e9c01b5167d52c40567ccebafa2b
- SSDEEP 768:w+jDQXKR2l4kZ0nT900BlBONhecXnt0PJUZtVlvVD:wvKRaZWJZBqbnkUXpD
- TLSH
  T11CE26C64A3E90FDEE5FAE7BADA71A121467A3E139730D2CF0424169A0DB16D06D34F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  READNFO-MKDEV TEAM.txt
- Size 6KB
- SHA256 0bc1f0dc2dd71ef5d667987850519554bac5f1fe175b63f1978575976518d61e
- MD5 9944fdf2d5cf90414cdc941f32addcec
- SHA1 ef9039acd04269cf51f2aaa9426d21bb68173939
- SHA512 c271ca9777af919af4d0e030daf34cda968733c950d4206271541320116e2478dfc0a08d5df489493c072c5cbb2aabfeef3cc979d09d69e36996f4ac19309e97
- SSDEEP 192:UA8e5f4c7RaXLkNd8YlG1nAxfkaZ5x0FO/KEb:ue5f4c7RWLgd8iG1nAxfkaZ70FbEb
- TLSH
  T18DD1ADD2FD71EB1063A3D98E0A01BE18EE874C040FDBC9B9E4FC45B8E1D2CA6A55E154
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral9
- Target
  SimpleSvm.sys
- Size 17KB
- SHA256 a58d017166617156729a3e380ed49e7a768af871f3b2eda0d57d09bece90ad92
- MD5 453df07cc26ac3a5f3011f655fcc8c78
- SHA1 1ed2c33162d45be1d93048c3765efc398f679bb0
- SHA512 05bc81de901f02666317317cb18db9f5c19c7dfed9aba02720e4dfa19244b026dbb6da2f0da8a22904265898a08d1eb73222c9dfbc605c4052fd5c80ab33a6ad
- SSDEEP 384:vY69M3IsgHvLzSy3CTxjCpStwLFCztxSFcK:vX9M3dgzz33qCpStbzyFcK
- TLSH
  T14B827DA0774D64F4C96181BDA6965B13E8B1B0650B62EBDF807081142F6FBE1AF3D712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  amd_ags_x64.dll
- Size 166KB
- SHA256 3ff29dcbb7267ac98455c7661f9a07f07672f4232723dbc7e6af62811962d746
- MD5 f2460940c72fee2c051ea594fd495712
- SHA1 056e2954f3659742e5f0d740c28862a65bf653f7
- SHA512 94a9abed4fbf1e28c5cb20b31733d6aff1440e1a9c5192843026ba1eec900a0542f08697f904cfb991899457ee2c1c5378a2d18ef934d87cafbe617864a51ef1
- SSDEEP 3072:v4qOjrlq994NtUbhut1yDwqQ/ps4J/qKriVb:AjjrlEKNtUbhuEwqQBbr0
- TLSH
  T120F37E0777A400BAE5A7C238C9674752E7B2B851172197DF03A0437A6F7B3A19D3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  amd_ags_x64.org
- Size 175KB
- SHA256 b27b070ca39dc37984fb3dde0187515d36094e72cb881d7a99bd1055befd8da2
- MD5 9352802fae8e6ff020afd9257f33af23
- SHA1 4f80ec7d8174a31a1fa75036c8ae0923b5ef262b
- SHA512 257eea97f8b526b2bb5888074bfdec048acf0c2c2bacb08fb29138f6f796bf440c8f327ed7dd2b86caa7c6a39693e6f2f119a1c01ecc281a24b86626e7289ecd
- SSDEEP 3072:viqOjrlq994NtUbhut1yDwqQ/ps4J/qKriVbDemA:ajjrlEKNtUbhuEwqQBbr0P7A
- TLSH
  T1F8048E0777B400BBE4A7C638C9974B12D7B2B851172197DF03A4437A6F6B3A19E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  coldclient/GameOverlayRenderer64.dll
- Size 1.9MB
- SHA256 ed41c49b18b9f29427b1d4330d3f1a743a460ea722fd33cf5f389301a19e3925
- MD5 bdb340f609a136b0d81e486d6e8b7be2
- SHA1 b0aaf60b730b343a0cf1f4ddd56a36c0dbc1eb8f
- SHA512 f0aac950abe240c249baab393e31b9d274af2402306310a6e26c5821d788ac4c9f8937282dde6eda5dc0b47577e624dd8bf048208fba27bcadeec1b387a2819d
- SSDEEP 1536:IFnIxKVEWneqdJJfeATHaSHWB2A7gAhmkdOwPnsWpdi9dlg3VlPGq5HE:Isrrcfes6wWB2YkNaFyGlleq5HE
- TLSH
  T1B4952854B6E930B8E076C3788B773A47D57678100751AAEF0360425A2EE3FD2C579FA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  coldclient/steam_settings/configs.app.ini
- Size 410B
- SHA256 51de7a34d85f958880f1d6787143e6b157d70fc81842d726c026e962d302bf43
- MD5 7f43980c384fa5cf5fa0d1a421031135
- SHA1 483439b030015b92fe79548e97fa70392167a367
- SHA512 f9502424b2c53490d18aabebf6f0878a9e4cc238881558b9b1769ddf6c1ecf2ec7ea38d5f48c737415eb7c601cb34e0469a000a027abe6932397f10b005fe2c1
- TLSH
  T12EE0AB8127C51568332B10A1F606B6DEB62581304721F84BB0DFE2500614806C237EF3
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral14
- Target
  coldclient/steam_settings/configs.main.ini
- Size 1KB
- SHA256 5dd219df4b0bb37c07ecd90ccf5215ed182e229d5d7d24b6ba31429ce46c91d4
- MD5 47a31fc4b75a0642c7cc5675fe8fb4f1
- SHA1 9f3da1ad357117ddbc2dd63ebb3193831a7270a9
- SHA512 58101904058e74010df8c1976c1379ddf88518b16df611f15ebe27f92ecd09429b0dbafa87a35898ed30d640e5cde326da3e4aafba64ef90fcbae692d2cb67de
- TLSH
  T1DB2112235271F035063720651F2FEAD177A4D4B62312345860E45DDA6B2191A362AADC
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral15
- Target
  coldclient/steam_settings/configs.user.ini
- Size 220B
- SHA256 6910fa848124f4858c8a3c97f0348556be9f46360845a39046ed337288dcdea3
- MD5 9026ea52b22c80bf7c6e5fb4dda04324
- SHA1 5a07926d7a5e9f4ec538b48315b56d0130540c21
- SHA512 4f8d8746c0926419e38c893aae78d988f9ffba45dcbe52da3470fe0640f966078a88636b084e2d87c4471f78dc056a7c0eb78cf0d97a1812c1bda3d7af8da52e
- TLSH
  T1D4D0228E0E0002A22FB3038832E8C3EF0B0EC2E88C800AFE28E2A3820020CC00028B00
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral16
- Target
  coldclient/steam_settings/steam_appid.txt
- Size 7B
- SHA256 c0d7c219dd57927835839c3a3bddb73e2e81c17687d2d7697813dcc7c17f38fd
- MD5 dbe81a5523f97f0feb305a325b505c5f
- SHA1 28c0eb193d9e8e76280e8490d63b9659fdd3a06d
- SHA512 5eddb9d76f8abc16273a0f08fad2b3456961119f3ecfcbdd58a636721b05c2c93d19e85d8cffa114e63157a7b6c2406032bdf51fea76b44b83235178214bef76
- MD5 SHA1 SHA512
Score

3^/10

ransomware
behavioral17
- Target
  coldclient/steam_settings/steam_interfaces.txt
- Size 629B
- SHA256 f851b4bd9af4ca83f9374a9cec31079327628876d854606e9ef9cfe78cfdbb7b
- MD5 b160e3f00eefc9ab4ddeedaed51266e0
- SHA1 f3733fbdfaeb37b877cc1540ebb24df49415f25f
- SHA512 005ffd586975b903032cee5b16ff9402c59c6d378ff66d913cbd54b5c5d5d706c6afa803947c4850c6f5244398eb5b08b83eb844c2a3bda6c30f73c72861c6c3
- TLSH
  T100F0491B75213D794F28B4EA01F2B923E198366796C0D8FDDEC7B7C10364A1413AEA01
- MD5 SHA1 SHA512 TLSH
Score

3^/10

ransomware
behavioral18
- Target
  coldclient/steamclient.dll
- Size 15.3MB
- SHA256 e29aedac4769e51862e96116063419bac6b27a3b687e773813248460d5b66d1c
- MD5 fce3578d6ab6b1ebde776765e7249956
- SHA1 b2dd38753d1a33f8d63c72ae577adfd3632bfcc1
- SHA512 e07aa4e7f9fe26b71fa17b93cfb8d572ececa2e2ba74577c87f2c07b839b89acae45f7422bd596ebe7f86cc5980447af61c2ec067aab3a431672f38f4987a13d
- SSDEEP 196608:S16MBSDCj3mu06WW4+6jIk9DQX9b7YFLbANKkx6hFeFwB7wciZgA72D8Uyaew:7y+lI7YFLbANKkpwlwcIgA72Wa1
- TLSH
  T19EF6BE02E655D035FBB701F68BFA06BA5B3C9F70271142EB72C075598A66AD0FE31623
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19
- Target
  coldclient/steamclient64.dll
- Size 17.1MB
- SHA256 ca54cad7913279985734945907973f5b37c957d69fdaaf46a058470de12aa55b
- MD5 8c4a558f0a3ddc511c4da97dfb304392
- SHA1 3d967440a8717ec3194d40aa80bcdce23abdc2bd
- SHA512 da41efb09bb52694447d0cb6dbff266c6e1bfaeeb4cb524c2ab3edf1b33e0f27a0d8ee3493f13bdf99bbd94cac5d969efc4e6bc45c481f3e9fc6cd68460dc1be
- SSDEEP 98304:1I4XLEuJspu8NX3OYuq2m5j6nrZpGyq2j71y+4AxYZgAE6EZDi7QZakOoVwj+Ju:lv8NTrSrn9N7wciZgA72D8U7OKu
- TLSH
  T12A076B47E7BB12E5D6B6C03896B36227FA717499833097D7AAC056064F62BE0DD3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  hyperevade.dll
- Size 6KB
- SHA256 0afad063e2bcb59871ef4232d733e4ca8b7b710ae63eef917a528040ddb30ce9
- MD5 0e156d2e7e3c3132171d4ac2711f9ba5
- SHA1 a4ccf2e440963d5eb0afd1774170a28ac4747972
- SHA512 232298dfc65d57bfe10ac71abf9a763156dc1cfe17b8706d4cc90cfc5ff0ca138be064ce8c59c394d563b9100fe497e153d0dcaaba6820494ea6bc246e0bcd06
- SSDEEP 48:afx0QNfTjK8ZCl/bnlF6NwJJCQUCeh2OHixiiIk9+CyhdtgXdD:OG+fa8k/jjMuNrezCEin9+RfgtD
- TLSH
  T198D1A4B29E16D4E2E51B06BC41EB4E19B376F35003524BEB2582840D2C8BFE87D34A0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  hyperhv.dll
- Size 520KB
- SHA256 0f8406c1332bc066bd6c592b654ff076ed067585c67d64ae0e4a31e94bca5063
- MD5 6f85cd3128f11226d4e3c914e2a9994e
- SHA1 c34f0bc4987fb6c857c97215ed50d1efbe44e9e8
- SHA512 4c4188f8adf10b142c1231757d47a588d94dc228e1593f2a80a2a87752c5fc23132ff3d0007d5618b0343a5ea4f8f6bfbdab591d2aef390e4118f1b8179a0f50
- SSDEEP 6144:UKCmpZVoltWepRWNKG23uuGurUqLcowsEZyv1wrrH1k:/Ckno43cuuGMUQokMk
- TLSH
  T11EB4A3B7EC0474B3EC30613489A707AB267BA580976287C71659362B9D937D42F37F88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  hyperkd.sys
- Size 11KB
- SHA256 b5f5f93190ecf89f94feaffdd77f25fcd9b922160a705763e4c875a88a91cb0c
- MD5 a3a24945bf08b74b9e375c130966d6d2
- SHA1 f9f57d2be4bd22effe1f49623cfc1dda04fd6dc0
- SHA512 2fdb809007038aca52629d04233d16e7b3f664aa6b970039172e710ca668b5fe370906eb7b6b5a4be4b6a5221652c573689bdc314c320b6409fbb02bd66b3b16
- SSDEEP 192:Nq4qGmnydcI9U6mycymyJyJyC6AVGs6m1zCNnchal:Nf7cI9U6mhnoQD6AVNmcy
- TLSH
  T17432C661A387DCD5C90681BCC2964C2E60A5F104D32757C79BB698B4CE4E7E12F3BA23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  hyperlog.dll
- Size 13KB
- SHA256 587ec95aed2e1707129cf958010b77d1af4eaff98ae06f0cc6edacf130f9ac4a
- MD5 f28aa9b5c7598806bcc6b78f29daab8c
- SHA1 0553b2413888610f46a9c28a820a9f954fcdfe8a
- SHA512 96274e0abdb3c11e4547ba122a3f0a96f959bb998adbf914d8d3a6e47558bbeda70edfbe6ae1f62ccf64f39527d473e8ff78a12eba64f92ac7dfaabb655d6c7f
- SSDEEP 192:3v2Ikf6QZh7V77O7Tm5ITwHYcHylqaSyxU5KzCNncos:f2zCSh7xO/mSwH5jDcos
- TLSH
  T15F522829218124F8E81E597995B71E0AEDB2F8111B3262DF1576C3BB4F26BC1373DA03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  hyperlog.inf
- Size 1KB
- SHA256 7d72feb2ab1a3ad7a8d6d7c367d3e8589530b5373bb17a4debdc448cd8c4237e
- MD5 3cc4065db0d5a9aed9f58575c488452a
- SHA1 69e16aebd7e2de1a2ee1021a6b8b1f5d8309ee7a
- SHA512 884327d101bd64960beff31a4e6ef088634c39841ac434afa24acbbde617b11526ab64c1de9db02352784960677eb0ffe9ca1f94a188f6ec6661d0ca5665e809
- TLSH
  T123419B090E5E4FB83593A3165F27D6E3F9C0620B539F342BB19EB2255B8C918423D76E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral25
- Target
  kdserial.dll
- Size 29KB
- SHA256 d7ce65448e021af0233caa3b27b0eda5dc9e3c4b461b917d5378db38a790b363
- MD5 c3ede4d9aa30b30effd25cc1cdeef8a1
- SHA1 4410fa4f2aa184c7f506104fe0536e3190c8f301
- SHA512 31e418fd657edb17386cb3d7abe7506e5e61d85559f1af27e9dd4fdf1db7ef94ac3abaa1b3a2362b41aebfa91ec6f2ca8d1a23e2af7fb5bfcb61f75224b88e7e
- SSDEEP 768:tKRkD9uVFoZpRZ5Z2Pz7iePkO24lVvgA+8yfX0jxh6sJHcB:tQTofZ52PPkO2/AUX0TN6
- TLSH
  T167D22B9A12F424AAC559827DC9536D1FC6FFF8281310A6DF0320627E6F23BF15A39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  steamclient_loader_x64.exe
- Size 342KB
- SHA256 551a28422e1cd119140aad059f9d44237ebf8c850037ef4ff4522a02627b3d65
- MD5 e3901b3d2889dcf02f3fb9174f806f94
- SHA1 5280bd47fafbb32f34839f1d74eecbec162410ed
- SHA512 52329830c36a356a9e28ceb093b6754e79e5489289aa06de3b2aeaf8ced644e19272ee1f76009c593a5267c82ce726db40af5e8e7126395bbc7fcc8deda70625
- SSDEEP 6144:BGq6IsVjtdVb8z9G0SDUpkT8kU+W4AxTjaK2F/lrTw072T4:BkJ09G0wUpkvWnxT52trM14
- TLSH
  T16E746E66F79414F9E1B7C138CD428905EBB2BC5A4761EADF23E04A962F236D08E3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  watchdog.exe
- Size 65KB
- SHA256 6fe71d7bd09ba6518f49ce27abfc3eab6d83b07cc990a72682b421e106fd80e5
- MD5 f912a8cab09669e2b5cc40d01d2c1f35
- SHA1 d3b5ec43075923916b2f4d42e60d84fc7d07504c
- SHA512 35214a1c6e0dc68238d35ac96b7767a0d23ddc35ff826270a4c29fefa680ce44a097544f6398e26866882e00c861ac63a3c7bb76e142e9ac76b533e8c9265802
- SSDEEP 1536:TUD5ndR4ESf3r8qaSfjUxvW4Tlqe/LRjlFEZUIf:gdmfrZa3xlrd
- TLSH
  T11563F194A6DE0AD4F8E086B7D3370648B136B9A6E33035DF42B2912D193ABD05CF1257
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28