23a365f7ae216bf34be336f348f1c0bbbdf19e38d72669568136dcd0b72a47aa

General

Target
ScriptHookV_1.0.3095.0_modland.zip
Size 1.5MB
Sample260503-d7d7aabs4x
SHA256 23a365f7ae216bf34be336f348f1c0bbbdf19e38d72669568136dcd0b72a47aa
MD5 1f3b503318595884a1f7dd327c12ed88
SHA1 b7901407c02e284aed7df07d713d36f21b7751c0
SHA512 3c72d0caf6d99f67b957c642d0d114cbd7b021802f14bd8766b0ec39d9ea7227878847c630fdb51f6986e8f066802180ab9c058132dea1c53c3762efa72b39cc
SSDEEP 24576:LNCmXQ/I8pl20I1ugqrOD5g/LUIeHGw6Utg9QH3YwAC0eTpyiGKPixbUc7GuHBoe:RCsQ/I8pI0Od5gzUh6ggeH3dAC0BxIcx
TLSH
T1B575333D7DB60CB660F8770DB261A2055A1D7B56B393E031EE71C6304A869CEFBB4126
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  ScriptHookV_1.0.3095.0_modland.zip
- Size 1.5MB
- SHA256 23a365f7ae216bf34be336f348f1c0bbbdf19e38d72669568136dcd0b72a47aa
- MD5 1f3b503318595884a1f7dd327c12ed88
- SHA1 b7901407c02e284aed7df07d713d36f21b7751c0
- SHA512 3c72d0caf6d99f67b957c642d0d114cbd7b021802f14bd8766b0ec39d9ea7227878847c630fdb51f6986e8f066802180ab9c058132dea1c53c3762efa72b39cc
- SSDEEP 24576:LNCmXQ/I8pl20I1ugqrOD5g/LUIeHGw6Utg9QH3YwAC0eTpyiGKPixbUc7GuHBoe:RCsQ/I8pI0Od5gzUh6ggeH3dAC0BxIcx
- TLSH
  T1B575333D7DB60CB660F8770DB261A2055A1D7B56B393E031EE71C6304A869CEFBB4126
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  bin/NativeTrainer.asi
- Size 211KB
- SHA256 f2302573ced45cdaaf190f332deeafd3f32e179d7e9102d939608a9ab774b3cf
- MD5 e107b94ae23ec9a56bfa1faaf7118e85
- SHA1 191d9a3a09ee0cfc0754226988c0373a5f074068
- SHA512 86720525ebfa76628a4540a0344de29cf7135ed89dc0c38665fcc2d9ea83c0a2b9341f7d8945e54083317e2dbbb120c68afeb4a7cbbe182db5711c3638d04e90
- SSDEEP 3072:UPjp1DjzsOn9DTtDs5hmmFlPV1GuV1YTrsof+/3YFoYr6SXvfVd5u:UbbD/PFTK3mydcuDa40iYr6SXTo
- TLSH
  T1F0246B4E7679057ADC6AE438C86F4902D37334158770D78F6A51462BCF2F390BA3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  bin/ScriptHookV.dll
- Size 1.7MB
- SHA256 d4264f76c263438dba613ad7e25025fc85a70f42a99c0dbc7d4cb66f2c2c4268
- MD5 2ff24d81ae7ae428c0e15ed5d991a0f0
- SHA1 82b2385b181e6044b1329c6d74f403d45b04a7e4
- SHA512 d29b24b3b18c1316f84246b1b240d7b903bfb352cd45f2d4bc73a67d7b579026676da0bc722fa9c73758bcc379226b905fc2492d1a3b70f1a4d23888f480bafe
- SSDEEP 49152:zET/NpsHf6q+LdoVnZUM4KfeMuIArxxuuuuuuuuuuuuueV:+2Hivden8dAArx
- TLSH
  T1D7851284A1A185BBDCD2A078C9528719E6F93C728B31D2DF875C13799F377A04B3A325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  bin/dinput8.dll
- Size 128KB
- SHA256 9fd9e02353b7d39fe07b9667f7ea2697229a7f2d0e7d389eb79eb212b1bb181d
- MD5 c9b973183908a6631b31ca29f863b4d1
- SHA1 6b32c09f1404be8f9eb21e6c1b8955f4bf00e51d
- SHA512 aa63cfba16d5c134b7478fc27b32e4b1e588f5910205e050d94b59a15f95d886ecaa4c2d494c7c3496b2bb8f386e7a540ec999190714b6e048c6bc07d1a43755
- SSDEEP 3072:OBK5kXMCQ9hTn7TYgESRbApwUEfo9c+SJwVvjPIB:8K5kXMl5TYgXR02UWPrJAjPI
- TLSH
  T16AD36B4773A450BBD4A7C678CDA34A06D371B85643709BCF43A4429E6F633D19E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral4
- Target
  readme.txt
- Size 6KB
- SHA256 349390da5b6b5ad4a109a1ea3946e895f4c05029720a0a1d38dba7971b37025d
- MD5 3045999ed07ff80cf310c20fcf975b77
- SHA1 1373757c51cf7ba48a23b160c321aaf2c7d58bf1
- SHA512 ad674384a9a8b58bfa1091f1f58c528f00390eb0091cbe3dc45361de99946c72d317927fcc1cb99d406a40c191a17f3b1b7d84b276a881ea179cfc90dcb5578f
- SSDEEP 96:hIKsPMQH9jO1uuy9DzQ9Yt/RmAAChLij1Z1D1lNR43ZNKnKy:hIiQH9K15y9DuYtJBaLRLRcfaL
- TLSH
  T185E1F0F643E3D27981F07119943B36C1EE1AC079AFA5F460B4CD9538931B5B4BE2CA58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  www.dev-c.com.url
- Size 42B
- SHA256 8250e69c27be10f67c387b69208c4df4aa7823c487a58abffb18a47c02e5ac58
- MD5 6d1062a38a2c835b32bb73df4af90fc0
- SHA1 6283703aed023c2a67ca5caa524f352885d0f3f9
- SHA512 ae3f4280cc87311f367a9ecfb355024d242de0ed1f4dd0733580d9b3e8d802888b2fa2e7ad867ba9ab398eaeab4bdb8e3bfcb245130470d5f80981c5e796460a
- MD5 SHA1 SHA512
Score

7^/10

discovery
- Loads dropped DLL
behavioral6