782f23c105582df00910deb8c6246e31438e158540895cdccab0a095bc6521b6

Sharing

Copy URL Twitter E-mail

General

Target
Dscream.zip
Size 3.6MB
Sample260425-wt8svaft7v
SHA256 782f23c105582df00910deb8c6246e31438e158540895cdccab0a095bc6521b6
MD5 a764a1855c47ebaa413b440d1757d165
SHA1 14168fb5193d70e67e295d7aa17aafc193b7d965
SHA512 ce83f2f6a86cd1a93ad608d86ee926a3716e41c2fd6a8b983fdd410212e0dd396897cb91abb23172c97f9455e6c99321f476eff76ee70301543c1e2373d2e3ed
SSDEEP 98304:YVe2wATqkep4gYA02WeAfHerr/3woc7VJI:YPwO5e3fHKnbJJI
TLSH
T14C0633AF3337D9C7E40C83AB7DE04FA2B0AD125A38A12475E6C549471358EE6D5BB708
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery upx

Malware Config

Targets

- Target
  Dscream.zip
- Size 3.6MB
- SHA256 782f23c105582df00910deb8c6246e31438e158540895cdccab0a095bc6521b6
- MD5 a764a1855c47ebaa413b440d1757d165
- SHA1 14168fb5193d70e67e295d7aa17aafc193b7d965
- SHA512 ce83f2f6a86cd1a93ad608d86ee926a3716e41c2fd6a8b983fdd410212e0dd396897cb91abb23172c97f9455e6c99321f476eff76ee70301543c1e2373d2e3ed
- SSDEEP 98304:YVe2wATqkep4gYA02WeAfHerr/3woc7VJI:YPwO5e3fHKnbJJI
- TLSH
  T14C0633AF3337D9C7E40C83AB7DE04FA2B0AD125A38A12475E6C549471358EE6D5BB708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  D13/Minecraft.jar
- Size 3.0MB
- SHA256 f3ad5a61a5d66b96fe5f5ae2b04d6df3dffb0d394a6c3f6e82cb2aabd1d65467
- MD5 a9f1e94a871bd02840b0456666bfb85f
- SHA1 2f1850fc213cf7857b082ff98faae40f7622d766
- SHA512 74173f599ab60205c405e3e2f48d966a70f956ed04719431559c12a7fccd3b680a9a452b69d668cec53da3760b0c2f1115a0f537e6ef8cd8fb44080038465fbe
- SSDEEP 98304:R3SWeC03xM5/v0uCQaln5M8qQ2psC/GM5bMt:ICdsp5M+
- TLSH
  T1C8E50127FF9BE029E69F913D0641C122B83C22DC9906D7AF25B405896D60C961763FEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral2
- Target
  D13/deathscream.mp3
- Size 287KB
- SHA256 082294686b07048109764d581d0f0f23c82d23927aa29dd889b05778879054e5
- MD5 9e421d4169971ee4e027c2f36872ff5c
- SHA1 ec1fb384b42d77912637b3ebe3dc9d6052f27bf1
- SHA512 fe883cc9626d911856fc801a3a0292f3d68a92e2c906cd252cf82b47fa15aafdf83fd2c038fc8d194bd183640f552bb15630d5661126b30aebbb0aab155a3114
- SSDEEP 6144:QzlXu9EqsvYLtI4j+s7hFKzKxdE25/XxI/NZxJO+H7UiiP:IXwbuzBGmZLV7U1
- TLSH
  T1675413532FB3D06C88A60B695FC6A81071272C5FD8B450E6D97CCABA6D3BC90BE55F40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3
- Target
  D13/natives/OpenAL32.dll
- Size 105KB
- SHA256 ef9a58b90887e11c515299010f998f1e3ec6cb86d9a8245f9843bc4ac7f269d2
- MD5 60009e325f0df47a0463ff3e86dbba61
- SHA1 febc44b139687703100473fc872adee339dd79b1
- SHA512 e12fdae5646e44540a0b02996fa573ccf011d874e26bd81b794794141ad9c478af15660f07eab339fa4e780825e197e9440564087189a19ed2aab5f89aed2cbf
- SSDEEP 3072:GibH0CM38GCvPZRT0AwQFQpxa2topVmt2WupqRRbalm9ZQfu:fbHS8GoPjApqg7aPA2HpqcK
- TLSH
  T118B312D7BA745C58F0EF8F3160D87E32FD1745A1E8E8A70CC6B5C2816299FA9F42051A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral4
- Target
  out.upx
- Size 204KB
- SHA256 409d7d865606d490327f703c9f39db2d69f6d14fdd251b53b17b3f3bc8e57d5d
- MD5 ee68099cc0f91368bb0fd7776825997d
- SHA1 ceca56c76b482067ce778458a0c636fdde631e4b
- SHA512 26e7142c2210dbc13b2c479baaa75fa47efc956f1c05d084c4f63461624b40bb8434e1f64a406b2e8a632a54eabbc6c304bc195610c206eb342b637a98a3fb6b
- SSDEEP 3072:fNbAvbcQX8kh8FFrL6chJ/ZuHwfXredwXBNwAg0Fu6DMPX:fNjseFdX/dfTOAOI+
- TLSH
  T12224BF12B5E3C473C0AD15B0085AABB55F7A643702B884B73FF50E6B8E743E087A7695
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  D13/natives/OpenAL64.dll
- Size 190KB
- SHA256 6c1b80aebda8d22fe6c18e55052b192cddfb29d603c4e8a30a6235a25ba499f8
- MD5 5a4fb0e69f0064c2caa41c2650d15f5e
- SHA1 3e9c93deda869b1d08e4094f0603541fc220c9ae
- SHA512 86cd8263286d641e3d0b2e6316df76da0a2446ed98705126147f884891c5c6946cca18b913713bedd5ef76aa6c468bb47ec23fe0c47dccf76d96781d84e5ccca
- SSDEEP 3072:ptqsbT77rxg8knxY5I6F2D6pwZcfQhoLYZHZsJQrn5lJXJqY9cMVdU1wKocQLuzn:F/1IM2Wp+hyYEJQbbDqYTXB
- TLSH
  T1B5147D8AB3D204FADC6B9574C8D3795BF231B40A0374839F07A456AADF7B361A91B311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  D13/natives/jinput-dx8.dll
- Size 60KB
- SHA256 f6ee33701bfbba481870f4a370d707b87001fb3213efcc60bff325013b4e219c
- MD5 ae25629d223b95f73f2f27800da6bbb3
- SHA1 8bddc9f7498593c38d8b46e4742b9da676ac2ac4
- SHA512 bc6aea591ed3feb4ead2d62c61b20309b1f00c284a3cbe0014dfb6999e2a3c6e11dfe9d69d498be3f8fd445906f4cb1597dbca8bfcb1bde2a7160293b329c373
- SSDEEP 768:LRCDZLedvA5Z3cYlqcMOml0V6jY/MDS5TQkuzFqIn1pCXFEmI/RnkE:ENLwvA/cYuLpYMSp2zJn37/R/
- TLSH
  T141536B113652C872C05B74355425D3B13A7E26306BE899D37B9A1BBD8F252F0BA3E34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  D13/natives/jinput-dx8_64.dll
- Size 63KB
- SHA256 511dc50c2001d3e25845dd479ca82fdfc9d42403f9aa69c6493257c66ddf0266
- MD5 f1a51706365a44ea21aa96a9a04bfb37
- SHA1 5d155b2cf48bd73371e85698770fda6e8a040e8a
- SHA512 5b00792904d3843899903e1e9c3602109672a660f87b03097a244cffaa03125eb743f690d4a642280393bc8d644925bcdf20339789bc16cdf6f29d4c929d4a17
- SSDEEP 1536:dVt32LOgsg0Vn88QhCuUDhsI0CSS2u4mL5Ie2J6:J2JsLV88QguUFT9DL5I9J6
- TLSH
  T104534A1773A540F9E4579278CCE34E4AEB32B415137643CF1B6886AE6F633E2563A348
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  D13/natives/jinput-raw.dll
- Size 58KB
- SHA256 0fcd33e00ba5c51f3fdf3613d89c6e9e00381fef03b550412ea73bc837237dcf
- MD5 88f04991b739b891d8e30f02db3b933e
- SHA1 4ac5b7b6a70538abda0d430463de5c87ea94778c
- SHA512 4b792933d5aef2d1e1de814580a697badbc0d61b45dfe760467eb2368f1190a5b515fd3acbb32dbee42b49e26abff58a8bf3987c87f9a1452f10fba0491689e0
- SSDEEP 768:6xAM8x3LQmQhccHXx+LHfFCxMJvI/+q9c6LTZsTUkwS9/FEF3I/RxoJCRX:LDI3+jFWTLTiUknGFWRGJMX
- TLSH
  T169435C117601C073D06A60396526D3724A2EBD3117F5C9C3BFAA0B7D9E613E2B67B34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  D13/natives/jinput-raw_64.dll
- Size 61KB
- SHA256 74cd74d55ea20e8fcea7aed8b97c2cf096da1fcde3faf183f815a4dce9364ec3
- MD5 4d1cfc36d1b5b1dd496d6e3090044cb1
- SHA1 49ec2c5265cad278104fc0c39450a180cf3794a1
- SHA512 099c7bcd49881dcb351dde05ab21cdeda9d299a00d6c0df2b3ee75d229f722ae033aa5985dab6f4c70fc56b5fbb833e92788eb6db42628030478d6e5a94771b2
- SSDEEP 1536:AFG7/fQHJY7EJsvjf30G8DbI7RfnBUVEGhM0q2Jhmf6:AFG7QHy7EJsvjfkG8QnByfJhm
- TLSH
  T17A535C06739500F9E86B8275C8D31F96E672F41613B243CF5B78C66A6F233E1663A315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  D13/natives/lwjgl.dll
- Size 188KB
- SHA256 a81e22e91c831bf3d60569b6a1d9b0e9bab283e20be819da8117dcbb731e07a2
- MD5 517d0f050ebbf8a7d2c6a4def78218dd
- SHA1 dbce970a2d4cf6485519ef1b730bd3246fa390d9
- SHA512 fc0bcb4cad490cf16239aaa381ba65817682bef36418347630df4d2df39c95b0280ecc2346baa561c5c4dcf6a952b315767276efc9c2969b6ea4e47ed0be945f
- SSDEEP 3072:mQGYTyjZFpcdL/9UmgEx+zfqqbYXZheRSfYI3:vjI2UmL+zyqbg
- TLSH
  T12514BA63DF27D53EAE43327A019008B5724D6DE12845AB86360C6AC7B1CE735C797E3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral11
- Target
  out.upx
- Size 257KB
- SHA256 a39cbee4bfe77c682702bbb63493e836d307bbd302dbecdeb4a4bcf624dd8922
- MD5 d4f75f6337814a8fa410088c896fc251
- SHA1 68f48e74e0df838bbdb4a7b0ad407a98952d4eec
- SHA512 fa4facc6d3eba83d01383655b8c7453bf0f61053bd30d8d7d151912a10d10fac55cb0f0a8014004c132318f9df1830ff1746ed6da10c9a074816833120bc7f84
- SSDEEP 3072:zG3gqIj2L2yl8gDbQ7Tw2Kgf2LgIx7aFnLB24AoRdH5R5iTSUg:z4gPj22MxadvAoR2
- TLSH
  T13C447D52B771D831C44AA83E104AA77B173BB6315361D4C7AB243E7A4F783D79A392C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  D13/natives/lwjgl64.dll
- Size 267KB
- SHA256 f81fafba810b85f697191e1d7eaf515498f5c5919db065418ef490f25bfdbea1
- MD5 10fe2f603bf0fc79da41711d28d71a3a
- SHA1 ba7833cdbd9a942fc4213226d1a31158b70a6d77
- SHA512 9648b1309db35e0c90e8d0566198bd732ee4b26d0a1c9258e1eeca16fc70e8c32b4cdcda4a9788f75f390d22e11b130e30ca8914750797cf42351ee45badb322
- SSDEEP 3072:hQzebXbFTXZb4qpHBnLzc1KV9WGtWfh6pDSv5mQPEuKGSFnk1ZxZOTSUgLQYNN:Xb4oBLzL9rtWNJKGN6Nm
- TLSH
  T11D444367EF63C47EEE0B323A45C00875B21D74A01A5493C7260CAAC7B5DE77487A6F29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  D13/ᅠ.bat
- Size 144B
- SHA256 3437579b50b549d1e1b61c3c28372687f27efc40149b8275aaaf133ecd7fbeef
- MD5 c0b83ed689fbf12c58c9994aa9268570
- SHA1 ae567059beb87daf1fa1038ab88376d169db8ff2
- SHA512 987757c579013d93e1bc89d0781c9b7ffa60e3f77080804f8c6d46d70939986adb764c08f9c41140b534cd21c01f0bba1429bd95e9d533d5fc804eeec0e6738e
- TLSH
  T1EFC08C068342903433F32303A93906D804260EBD808404A868D08232361292233467B2
- MD5 SHA1 SHA512 TLSH
Score

6^/10

discovery
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Network Service Discovery

Drops desktop.ini file(s)

Enumerates connected drives

UPX packed file

UPX packed file

Network Service Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14