159670feefb01c5168838fa65ca009e01238047ce1edbba7c0f7440820f28bce

Sharing

Copy URL Twitter E-mail

General

Target
Good.Pizza.Great.Pizza.Cooking.Simulator[wifi4games.com].rar
Size 767.2MB
Sample260504-ntq9ssh18t
SHA256 159670feefb01c5168838fa65ca009e01238047ce1edbba7c0f7440820f28bce
MD5 b91d4fe00063718b88070218db3881d2
SHA1 c4a99a287bc5db877cecf9b9d6ed062413dd7258
SHA512 29b8a8571dd4d63a3e84d48d46bc965438bdc4276bb7756af3cf991ed3bad2d605e58df5d96c60b10874106c5f68cfd8a7223b86208f7fb20b0d70ca3fdb9857
SSDEEP 12582912:tylkGDOyg1srJ65M83ZMvIo6F1pKVPVVs8trCsKqqF+A9XzBBD/mXYkwEvLLdqwo:tWkGDOs8evR6F1ePLFVVKqE+AhzBhWpO
TLSH
T194893326B87A8074E549A0BE5F01118C9BDF66CC616D79B47CBAF23370A808761F2777
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  Good.Pizza.Great.Pizza.Cooking.Simulator[wifi4games.com]/Good.Pizza.Great.Pizza.Cooking.Simulator.Game.v5.2.4-P2P/OpenAL32.dll
- Size 350KB
- SHA256 623e9bb8434b8791f7b021971a622d4dfbf3941c1cc3995bb21d539ebcda0fb5
- MD5 c0dbcf06d814579298d236c3628213c1
- SHA1 7991b01920d44d85f2cfb56a9171a399d88e8033
- SHA512 b1a615f0b0974fb9b18867a93a25c908320666f5baf82c586db508682cc05f5dca681905da30c8145bd5409d039177d4a94712dbf3c2946c1718af7c87b19443
- SSDEEP 6144:wVVQvrOmAtVwPcVXVzWEpj946Y0XNSJUM2Cx43582OMxkt:EVgOmAAclV/Y0XNau4
- TLSH
  T1B1746C62B0D2C031E5952175B3ACFF67AE7A0518133894F3CFA058C46EA91E316F6B5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  Good.Pizza.Great.Pizza.Cooking.Simulator[wifi4games.com]/Good.Pizza.Great.Pizza.Cooking.Simulator.Game.v5.2.4-P2P/PizzaBusiness.exe
- Size 6.8MB
- SHA256 75adfe016066b56d339b724175922e262f974f3bf7b21f98643d89c654c0264e
- MD5 1a08fa2be207d7c6f9cca17d97bda297
- SHA1 05090c3914699675cd3c044bc819c78b96a972e5
- SHA512 ac05879d1a946790842f9823a087487a68e53dce5aee618bb76a220d73605353c4c72dfa642c3813c5b87b21fb0b1c2b343e8b9355dd1c29c3743b4d63f2916c
- SSDEEP 98304:enRHfUBioNABBdM0K/lX3/uV+nzuALoxexAomT9E/kdANWFMKoOLYJUCx55X4Mud:ocifPM0K/lHy+nzhge+m/umKoOLgagc
- TLSH
  T13E76E126796AC0E0D15D83BC0CCF77DD419FEDB25CA4278F31A126CE3DB2194A9A5227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Good.Pizza.Great.Pizza.Cooking.Simulator[wifi4games.com]/Good.Pizza.Great.Pizza.Cooking.Simulator.Game.v5.2.4-P2P/Resources/HD/TV_visuals_205.ccz
- Size 64KB
- SHA256 9afbbb7c7a0da632e7ff912f0892144c618192f49c3c503f1ec1d1a0c7b1c2d2
- MD5 497fd929562da076207b882dbe574048
- SHA1 59de5d4563c7e6f7a159a4614d8f8003828e0a32
- SHA512 f1471959621f0d5d722224061ec1f63c77cbcb7159a6a370e0eab2902982f70847efbcb84c3c7e2b8907b3b78ff48e5bf61f27c78e250dbad046ac3ae09d9dd2
- SSDEEP 1536:xW9mQYF8tKPpw4Cnvapy6XjCS0H/4OdLXUGQQ5kL1NPk3OOes95GLVy:xWQQY+YCvapTwH/RXUGQ+3OW952Vy
- TLSH
  T1685301EC18869AD24C6D0C77313BCA77D29B2DDE6E32C16C6E93D7037D899B1A0E1614
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Good.Pizza.Great.Pizza.Cooking.Simulator[wifi4games.com]/Good.Pizza.Great.Pizza.Cooking.Simulator.Game.v5.2.4-P2P/Resources/HDR/premium_autumn.ccz
- Size 129KB
- SHA256 a76e799a9a492e7a61eb5c4be56bb7816cfd16ee8c2590066cbaaaea66e8b784
- MD5 ec1b2429a3bb6450179ca4e8462b01e4
- SHA1 ac43656734eca7a20f9f34fe8d583ad452d41d17
- SHA512 33945fc636a70077a76b8926598925955397caf8970bdf87f254180c2531dbf13eb48cf17d19b584448072b0f71cf107f126c45d269e12f12d12b62f8f86b9bb
- SSDEEP 3072:8SVDe6YppqiqV6NBeUAJvH19iLP1fIb85Q63D0Bos2rKuBt:8Se6YpYue7Jv19Qdwp6T0BoHPz
- TLSH
  T193D312543F5EEA11C4E328550733AB4E1AACF53DFC6ECCA7E2A45DA3F84C5068329916
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Good.Pizza.Great.Pizza.Cooking.Simulator[wifi4games.com]/Good.Pizza.Great.Pizza.Cooking.Simulator.Game.v5.2.4-P2P/XInput1_4.dll
- Size 36KB
- SHA256 92409879fbc826450b32346a23d20765b4ec73d3054b39238ed68b98cd886e74
- MD5 f970284490118e10c3148afe4a544c18
- SHA1 e797f565ebf4ef0087eb340f714d4937b2b44324
- SHA512 04f1f80618bcc3e078ea22a3b368d7979b09658b7889d037ade6d0b0f4a36e2ff931b389d71b64b031479167477a4f5f2ac6bab8a16dff629fd658e59fbe3944
- SSDEEP 768:+a/MoP+uQwOMmzeNoSIrx0sAY5wbS8lsT:dnP+2Ok6SIlzMbSWQ
- TLSH
  T16DF21A80E36842F3CFD76178199D362A467E98140BD651C34B225EEDD47ADF0BA34B8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  Good.Pizza.Great.Pizza.Cooking.Simulator[wifi4games.com]/Good.Pizza.Great.Pizza.Cooking.Simulator.Game.v5.2.4-P2P/_CommonRedist/vcredist/2010/vcredist_x64.exe
- Size 9.8MB
- SHA256 cc7ec044218c72a9a15fca2363baed8fc51095ee3b2a7593476771f9eba3d223
- MD5 c9d9eebccef20d637f193490cec05e79
- SHA1 15d032d669078aa6f0f7fd1cbf4115a070bd034d
- SHA512 24b56b5d9b48d75baf53a98e007ace3e7d68fbd5fa55b75ae1a2c08dd466d20b13041f80e84fdb64b825f070843f9247daba681eff16baf99a4b14ea99f5cfd6
- SSDEEP 196608:n9A3D5MBD0vwqMKgL29M2JWMWiKV/nPlnqIaAAVINqsAsbPnpCxmz7dU8:23D5MBwZMd0b4oSQ7VSrAs1gEdU8
- TLSH
  T189A6332DD2128E2EFEDB3730E1EE94EAD064D244C25722C3F15BB186B6B768D171E641
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
  System information is often read in order to detect sandboxing environments.
behavioral10 behavioral11
- Target
  Good.Pizza.Great.Pizza.Cooking.Simulator[wifi4games.com]/Good.Pizza.Great.Pizza.Cooking.Simulator.Game.v5.2.4-P2P/_CommonRedist/vcredist/2010/vcredist_x86.exe
- Size 8.6MB
- SHA256 67313b3d1bc86e83091e8de22981f14968f1a7fb12eb7ad467754c40cd94cc3d
- MD5 1801436936e64598bab5b87b37dc7f87
- SHA1 28c54491be70c38c97849c3d8cfbfdd0d3c515cb
- SHA512 0b8f20b0f171f49eb49367f1aafa7101e1575ef055d7007197c21ab8fe8d75a966569444449858c31bd147357d2bf5a5bd623fe6c4dbabdc7d16999b3256ab8c
- SSDEEP 196608:e9A3DAnfudQZKuNK0kMp2Wxw2tr3aA5Jegn9kaK6Hj0aaNz9ZBJ7C:t3DAnGKZKuNK0SvAn9kaK6gaaNRZbC
- TLSH
  T1789633D714300ADFFC07BB70F7568555D8E9496233A8D7EA4AC60CC89AEEAE4C0B6750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
  System information is often read in order to detect sandboxing environments.
behavioral12 behavioral13
- Target
  Good.Pizza.Great.Pizza.Cooking.Simulator[wifi4games.com]/Good.Pizza.Great.Pizza.Cooking.Simulator.Game.v5.2.4-P2P/_CommonRedist/vcredist/2012/vcredist_x64.exe
- Size 6.9MB
- SHA256 681be3e5ba9fd3da02c09d7e565adfa078640ed66a0d58583efad2c1e3cc4064
- MD5 3c03562b5af9ed347614053d459d7778
- SHA1 1a5d93dddbc431ab27b1da711cd3370891542797
- SHA512 6c2f4eeb38705c2dafc4d75d8de0036a0aed197f83e9cb261d255fe26e4391f24b0b156e9019c739dd99057041c2bb80f9ab80f56869bc1e01f0469a76f24f75
- SSDEEP 98304:vRWKtOl5CCGomEBkHUBmExJrIUg32t9RRyvo7VnOcyP24Vc35re94tb0eYbY1poo:v3tO3CCT/hBxtVtyUVnmSprzVIY7QKAk
- TLSH
  T1B876333286989427D1A32073F618D5217FBCB15C1F1048ABD3549A6D3B68AC6BEFB347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral14 behavioral15
- Target
  Good.Pizza.Great.Pizza.Cooking.Simulator[wifi4games.com]/Good.Pizza.Great.Pizza.Cooking.Simulator.Game.v5.2.4-P2P/_CommonRedist/vcredist/2012/vcredist_x86.exe
- Size 6.3MB
- SHA256 b924ad8062eaf4e70437c8be50fa612162795ff0839479546ce907ffa8d6e386
- MD5 7f52a19ecaf7db3c163dd164be3e592e
- SHA1 96b377a27ac5445328cbaae210fc4f0aaa750d3f
- SHA512 60220a7c9de72796bd0d6d44e2b82dbdd9c850cc611e505b7dc0213f745ff1f160b2d826eaf62fd6e07c1a31786a71d83dc6e94389690fd59b895e85aba7444b
- SSDEEP 196608:OwKjLs+UIkzHlAv4X6zQRgiwHLD2LQIX/:9KjaxFFP1iLD2LnP
- TLSH
  T149663333B9549032D26214B3E555D670BE3D70282F2048FB9794DB1A39B89C6BBFB247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral16 behavioral17
- Target
  Good.Pizza.Great.Pizza.Cooking.Simulator[wifi4games.com]/Good.Pizza.Great.Pizza.Cooking.Simulator.Game.v5.2.4-P2P/_CommonRedist/vcredist/2013/vcredist_x64.exe
- Size 6.9MB
- SHA256 e554425243e3e8ca1cd5fe550db41e6fa58a007c74fad400274b128452f38fb8
- MD5 96b61b8e069832e6b809f24ea74567ba
- SHA1 8bf41ba9eef02d30635a10433817dbb6886da5a2
- SHA512 3a55dce14bbd455808bd939a5008b67c9c7111cab61b1339528308022e587726954f8c55a597c6974dc543964bdb6532fe433556fbeeaf9f8cb4d95f2bbffc12
- SSDEEP 196608:19OaQ54oYY7jLwXjZ41OON2uk3bQWgtyccMEL:Gz5x7jLXkmkU4cFe
- TLSH
  T131763331E7B05023D6F201B2E411D528BD3DB2291F109CAAD794DD2D3AA9AD6E7F7213
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral18 behavioral19
- Target
  Good.Pizza.Great.Pizza.Cooking.Simulator[wifi4games.com]/Good.Pizza.Great.Pizza.Cooking.Simulator.Game.v5.2.4-P2P/_CommonRedist/vcredist/2013/vcredist_x86.exe
- Size 6.2MB
- SHA256 a22895e55b26202eae166838edbe2ea6aad00d7ea600c11f8a31ede5cbce2048
- MD5 0fc525b6b7b96a87523daa7a0013c69d
- SHA1 df7f0a73bfa077e483e51bfb97f5e2eceedfb6a3
- SHA512 729251371ed208898430040fe48cabd286a5671bd7f472a30e9021b68f73b2d49d85a0879920232426b139520f7e21321ba92646985216bf2f733c64e014a71d
- SSDEEP 98304:hQEKzHx15bWUuBrNatjJh2eNUrzKRL/RaIswn7aBOC5qZxVqFb2iExMc7FvxwGvf:WRDnuBotjJh2emr8L/YIsG7MOgqHG64
- TLSH
  T13566233296642033D6F10873F469E2217E3E721C2F1188BAD294DC5D3EA95DAA7F7352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral20 behavioral21
- Target
  Good.Pizza.Great.Pizza.Cooking.Simulator[wifi4games.com]/Good.Pizza.Great.Pizza.Cooking.Simulator.Game.v5.2.4-P2P/_CommonRedist/vcredist/2019/Microsoft Visual C++ 2019 x64.cmd
- Size 121B
- SHA256 c39c8d1d2065c790e39ec9dbd242d64340774e12db6ef90dbe2933106b46864a
- MD5 1c39b0799c57e7d2e97ba432faefc85f
- SHA1 8b5029489d50b8b93ef9864dd056bd035d98d591
- SHA512 ddfe19d501bdc713d85dc1ba96bfb2a14ea01661b5115e1374fc80c83d5d6ab6fffb2375ca5e0121725a3f6d853fe7ba72cf6791cdab699a3171bdd288d05948
- TLSH
  T1F9B092AC220049BE68A6A3EDD041BA5681BB828230835411854EACAC610EED92A8CDC0
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral22 behavioral23
- Target
  Good.Pizza.Great.Pizza.Cooking.Simulator[wifi4games.com]/Good.Pizza.Great.Pizza.Cooking.Simulator.Game.v5.2.4-P2P/_CommonRedist/vcredist/2019/Microsoft Visual C++ 2019 x86.cmd
- Size 121B
- SHA256 8098ebcc001ca152aec47352e9b7d8f086512519cc430a8ec9c82f67fa9c29a5
- MD5 a8d147a22093c77cdf20d663748877c6
- SHA1 7fe518339330ec20fc78352beb841e7a7b070b87
- SHA512 642676197b92ea837d475ccf2754217d1ed0bba7985cbd72202eb9b27541b08093c37dd3217b8946182bfd6b8a7f4f54357f294fc32d1449279390aa65a169d2
- TLSH
  T153B092AC610049AE68A6A3EDD041BA5691BB828230435421914E6CAC600EED93A8CDC0
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral24 behavioral25
- Target
  Good.Pizza.Great.Pizza.Cooking.Simulator[wifi4games.com]/Good.Pizza.Great.Pizza.Cooking.Simulator.Game.v5.2.4-P2P/_CommonRedist/vcredist/2019/VC_redist.x64.exe
- Size 14.2MB
- SHA256 c2d74d9b85d0030eaa134679a2392268baa773185c5a21657390e43f8b518f69
- MD5 ba584d9886d6eaee8daa852a0605dd00
- SHA1 1effe7db3f42d670a1352c5c9b451c4db3e57ab5
- SHA512 3076aa5583c2ee719f9755fb6aefc1f01f37a33491a7d336c39f9ad303e671574498a0dc16b64e3744098c86ac43ccb916557a4866caf1a5f4b1f5ec68446d47
- SSDEEP 393216:ZKlptVYmfr7yBG/4BVgOe5PFY/F5XD6svkzYlejH:ZCpttD7yBG/igOeajfSYAL
- TLSH
  T1FDE63332B245453AC7F30173EA55F6382E3CA119A31489AAE6DCFD5D2A7409323FB716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral26 behavioral27
- Target
  Good.Pizza.Great.Pizza.Cooking.Simulator[wifi4games.com]/Good.Pizza.Great.Pizza.Cooking.Simulator.Game.v5.2.4-P2P/_CommonRedist/vcredist/2019/VC_redist.x86.exe
- Size 13.7MB
- SHA256 5c7dfa4fd52809813cf9350c4e5807434d78a0bb1fd0d61c85e02b41646a5780
- MD5 fedc87470a950d6c723e6538c5f27817
- SHA1 17674fcc6cf3a2ffdc391bdcde082aa936e37a89
- SHA512 17d286311f8aee8866fb7dfbb12fc28fe98e57a460c086fd30bce421c1cd8c0549d92ba5a90c4557eb263ad29a0655da9022603979079022a414c0c5805cf9a1
- SSDEEP 393216:0x/zlptVYmfr7yBG/4pfpAsyMD599+ZyDESN2pMgyAh:0hJpttD7yBG/efpAsyk9+YxxG
- TLSH
  T16AE633329548403ADBF70973A998F5346E3DE224231489FBE7DCDD4D2A751A263FB242
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral28 behavioral29
- Target
  Good.Pizza.Great.Pizza.Cooking.Simulator[wifi4games.com]/Good.Pizza.Great.Pizza.Cooking.Simulator.Game.v5.2.4-P2P/discord_game_sdk.dll
- Size 3.0MB
- SHA256 d8e7d9feb3de8482b186ae44fd1c9abb41fe2b3b3d2c7cd3a4d742ebbad30cdf
- MD5 955af9be4a97316d73afae1e7365e97e
- SHA1 62cd6f527be6c82e1c1669fde807a4b34774691b
- SHA512 6b077ae45e7eed9623ba17d9b3324b3a25fd6eb7313cd1dda57a1419f3fd06cdac2cfdb287e052dc5154e2d142c6cd2ee815a42536439165fd1250020ed8fc31
- SSDEEP 98304:1veNFVrTtZ6UFFEQ9KQS3YBimf6grv4vWr2O8+2F:1veNFVrTXEQ9KQS3YBielrGi23ZF
- TLSH
  T139E55A42B711A0FAC58F43B4B01EA73C9B73565A63158DE382A49CB46DBC6D12D37A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30 behavioral31
- Target
  Good.Pizza.Great.Pizza.Cooking.Simulator[wifi4games.com]/Good.Pizza.Great.Pizza.Cooking.Simulator.Game.v5.2.4-P2P/glew32.dll
- Size 324KB
- SHA256 1ea8aedc46418e08aeabcb91c16fb4a0ab669924dd0a6071d143f13cd932a022
- MD5 7399bc6fcbcfe81b6437d37d45d27e00
- SHA1 254ac4f5e56cd5ce14d31f824de7949b09597c78
- SHA512 bfffdd518b1a7a4890762e38861db465e187dc197aa6b02f2644ac798e0e03e6f6b2543e24e92e3a16a82ee3d9f795ff12845caf174b2d1b5f6800d7ae1941ea
- SSDEEP 6144:GzLQ5Ht2YVVlGSAkApyg8YifaTzaOAz7Du:6Q5HkUVzH
- TLSH
  T10064C652F60D5CA3E912113205941FDBC3AE6BC5F96FC7C3368AA066038CB96767533A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks system information in the registry

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks system information in the registry

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32