1da88f26ae48afad0815c4399190d92a2941d44cada3566dd026749d76672e82

Sharing

Copy URL Twitter E-mail

General

Target
WiiGSC.zip
Size 2.5MB
Sample260508-tx9s7set2r
SHA256 1da88f26ae48afad0815c4399190d92a2941d44cada3566dd026749d76672e82
MD5 02841e25c817528fb1a9980649f2154b
SHA1 516f44c0717670383c61fe296958849c7d6106cf
SHA512 a6eea8d058c897d7fbea72858ae76a453bf17c0aca84605b7975fe38498a4eeacf6b3b1b43a55aa9268e1fb8c94b9d3e9b672ce688b8437e103b6e46e69b4070
SSDEEP 49152:f42VS84/haMqeJ3Knw4l/QjO8msPPzckc+6nOF92cbP3XHRy7n2vYBVy/s4hPfk+:LVBqhIeJd0/QjgsPs+yOFccz3By7uYrg
TLSH
T12BC533D8D28981C8D68A757AD522FD47EA75D2E7A5331117E0542B2A3EE063C0F3A31F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery execution

Malware Config

Targets

- Target
  3rdParty/wbfs_file.exe
- Size 127KB
- SHA256 4b15a50c279769f6890ff2c8565a1612e1ef409e0c2cd77b2974988a80316d7b
- MD5 fa8dcae8d7fab4837ae0958d173ad954
- SHA1 fb73e11a1ec063364fa1915fd191a8577d980949
- SHA512 4577b7fa2819f396cbaf7748b6e4b93a0aca2e45ebde31a3f9e317e9c2214d02e0d3f621702018f05182a3979016854bbbb1e3d1ea20bd083a9051e5d454a684
- SSDEEP 1536:wgYGn7a+oUZ1Aw6MRrA7lDGV40tBskL8+Ac+JnIqMs7tYi0Gnhkhoc/o:8MRZ2w6MtGUJBsm8+J+JnPM4rR
- TLSH
  T160D3E885B9874CFAEA16167CC9E3D32F173CB5D086238B12D6644976CF13A923ED9342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH
  T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  BassMOD.Net.dll
- Size 36KB
- SHA256 80bdf8004412973fe55f3bb101f98609f7996f76ac065607c9c2702a9b6ebdc6
- MD5 c605590dcfc401899b3c89398345afb9
- SHA1 f001fe3a242cd487990afdaec66abf540bc5da3f
- SHA512 0caaebbf399bad28feacd38dbaacbc356905600e15b71c5ab16d491414450462a726e83d483bd630e615ca69da1c4ec381b8084e4ba6568484ce91daf4b4542e
- SSDEEP 384:YvizfGYIpAkS0F/+51vEHqtiIviB1daAB1xBB18CqNmDlWR+hO0jj7WgPDj:TpH++5J8OifdaAfTfybSF3
- TLSH
  T1EDF22925AF5CF122C8D9873254638BB50970E9004BF6BFDB76DF641EDC622CA0932B85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  CommonHelpers.dll
- Size 4KB
- SHA256 4254539ddef0c3f8d39513874aa8f682f0573393010c2d47cd6241fec84b2c39
- MD5 4ec9e2d60374f39309d24012383719e0
- SHA1 99b9c630ff3ab7fbeba471ef2a472a4c91790848
- SHA512 d7b0c48512ef2d40f75b827ad265d4f95bb044080d9e6983b7f29a0d25974ff64724344a1285ae1e607c9779545a84abd65bed5d4c0aefbe1bebd3543fe117c7
- SSDEEP 48:6cZhou1qe6k/uycmziWh3fAIWWuJgK3/rfyXYyQXOsBtuHleWXvg3aF:ruyok4MLh3fAHPPE1/
- TLSH
  T1A991641163E84776E8360BF1AD732251927AFA408F634B2F0588531A9C2AD398F52F72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  CrapInstaller.dll
- Size 443KB
- SHA256 6ef0a5fac4ccb9d8146917a29893fe8ce6ebaa3eb7f6189402462e288a8736c9
- MD5 82e12e6e66e6711106b27012d1dbeef1
- SHA1 3d06ab461d370385815c292fbe08c601a7b69d15
- SHA512 41916edcf834f810c16defa41bbe10cae554e2eb9c3c3d9f45684b0c93ff9c96025bcd783606df9fe05825fefc368e5b29f016b1385d52cf1c27eb5c1c0640f5
- SSDEEP 12288:mUUtBBK7QgaSkrH8i1A4oY+ljM52YmHeOz:mzUQgCci1A4oY+VM52tHeO
- TLSH
  T1B4A479C3C0E314E9DF666A3923F46224069EEE051CAFDE351E0C466C4469B87996BFCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral10 behavioral9
- Target
  CrazyInstaller.exe
- Size 16KB
- SHA256 236fe4dd5adac51e61822113b15187cfac67f15e375f9dc40677db134a196fa3
- MD5 676839fa5d6e736ced7022813dfb8490
- SHA1 8bb519e2614fa74d9be92e96d1476ee5707c7b12
- SHA512 6056d1f6f5d79275c02add494e4adee1fa920ad0032e88ae57a6b86e49e4df50e65bd02a4c207749bc882207b232e282480a248709f03f7c35a847b83fb3377d
- SSDEEP 192:xkk4iGTvP96k9z3ao2H2Ga84ICOEptTfWQFXUQ5Il/wJW:xkWgvP96uz3yHtR4NppBfW9zw
- TLSH
  T1DB72F75533E4413BD9BA1F712C3356914B32FD128A72DEAF1D86015E0EF2B048A62FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  ExternalLibraries/BassMOD.Net.dll
- Size 36KB
- SHA256 80bdf8004412973fe55f3bb101f98609f7996f76ac065607c9c2702a9b6ebdc6
- MD5 c605590dcfc401899b3c89398345afb9
- SHA1 f001fe3a242cd487990afdaec66abf540bc5da3f
- SHA512 0caaebbf399bad28feacd38dbaacbc356905600e15b71c5ab16d491414450462a726e83d483bd630e615ca69da1c4ec381b8084e4ba6568484ce91daf4b4542e
- SSDEEP 384:YvizfGYIpAkS0F/+51vEHqtiIviB1daAB1xBB18CqNmDlWR+hO0jj7WgPDj:TpH++5J8OifdaAfTfybSF3
- TLSH
  T1EDF22925AF5CF122C8D9873254638BB50970E9004BF6BFDB76DF641EDC622CA0932B85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  ExternalLibraries/irrKlang.NET.dll
- Size 432KB
- SHA256 c29a1fa42e7fd1d5a844a8a1686160c8976f147fb6aea0f263309886aec437e6
- MD5 6be3efd04667f517e2f292c3ba9505ac
- SHA1 ec6f2c03a3b029ad618ec10f847e93c2586837a9
- SHA512 65652f1ecb2f40bdc52471829d2152bd738bd311ee8cc82b8afde730a757d623886e80d2a27bcec5203af8e15fbb057cf8e83bafe359692aff1a66468aa69740
- SSDEEP 6144:kRSQ3HqvYZjVjmo8uzAhgcNN95g+PpniViEoj+dwLSf9da8bCuVd2peCMwR01hj:1QrjVPPgfg+BSE8572pHIR
- TLSH
  T183948D3362D2893FC0DB12B656467AA9EAFDCB5E81F6AE930F0418F51518D478E583C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  ICSharpCode.SharpZipLib.dll
- Size 188KB
- SHA256 71df669b79cb90305f3e9fbd6c7ba7bcadc39cdd6869e3e98342e6042b9f601c
- MD5 b6c6413803d21915fd60b86b0a5fc13b
- SHA1 fb9ad07294de59e0e1e46ba8aac4c055eeb8debe
- SHA512 06e981c499a86cd30cdd465c0957a711b94eaec4cc760253b8a6314559fd1227bd8a10a5975d3083375588dfd9e9f8ac17be87a722575cf48353122711c4600d
- SSDEEP 3072:VOrnIiXObo/bDmFkCVNMOGc2G9dnxSCWovacOsvKhU/amDwR9f/kI3zjrAf:unIiXObmHkNNxfTOsIt
- TLSH
  T12014171537EC475BF6EA9B78E075155483F1B997363EE78E8E0580FE1C22BA08921363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  IOManager.dll
- Size 27KB
- SHA256 2f6e485bbdd29e79576c286db782a6b7e16c67a1e5bd2c39b92a6f7ee7bdaa45
- MD5 50929a744e9cd4e1f26b690297ffa280
- SHA1 5f02e72c0529b9cf7f3f7d8fe2a3141c6eb9014e
- SHA512 ee4dba41220d78c7ca587e0e473aea4cd016861a5266095e67e87d22536cb02d6863bb4a29c4ae9ad2409abc029331ee835e46912dc5df8905b0e0b2d8d381dd
- SSDEEP 384:bT30yDKKkfx8tgs/Ps2zV3JUKHDRygMGGSZOyZwYgH1pHFujmTm2:X0iKKkp0083dRySz36pHFujv2
- TLSH
  T13FC2E786A79E9E37D10D47FE94B36322A772C2F56903C35354C8019E2433795BE22A3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  InstallerStub/Form1.cs
- Size 6KB
- SHA256 ce43639973b8cbfba86046b94f55b4779a9a43f218c345d616d8258100bb05b7
- MD5 6471294abe3fe7ffd048115a738c2bd9
- SHA1 987cec82ed62427bc814f2db1b985f237ef339ce
- SHA512 f83177fa4174d6d429575aca3db31e87903b3a41ccf481d963ccd6e0813c733080bca1c8e2a721cd80e0e102d0d67865b67cef463261f216152efed40b28a4da
- SSDEEP 96:Jo4h4Dcz0XyUlVGbnIFqbqAqZaHmmkmqdoTYx6xoSC4ugrkngYcb/t1u1a+GwfNB:9KGQpgQZ6mmkmU4Kgrkght1u1a+JfNB
- TLSH
  T147D174388F0749FAD633923ACF514E1DFB221207A216139CBADD45185F32164CA74EAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  InstallerStub/Properties/Resources.Designer.cs
- Size 2KB
- SHA256 18b63f724e1bfb2c1de78eb2ea861282d05402f738d085a16039945cfa48ef0a
- MD5 d23f7a2b50224b67d3ddd850db73c4c4
- SHA1 f72e922f1b43267e4713b9faa711368a93c049fb
- SHA512 c0704eb8a00e24d891eb420be61a3e9e6d317b68689d9935461c71cf981398af1be72266fb1c62b6a0c0f728297a69b8d578d0a62b61d7b455ffdd575c426b49
- TLSH
  T13551AAB71F95C1324934D99B8701F851CB662113CA7CD578B8EE02640FB739443AEEAE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  InstallerStub/Properties/Resources.resx
- Size 5KB
- SHA256 66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262
- MD5 0cd8c971317d19bbed44757809bcb92b
- SHA1 47b15748ecc8e952c5935170090db7c269ce4b4f
- SHA512 883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2
- TLSH
  T17FC11245B1C09D220BF3482DE6527988F7A8923B0235AC54B4DCA61F5F73C85A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Ionic.Zlib.dll
- Size 96KB
- SHA256 e807430987409061556bfc603b07659df515ef3b519f4b95bb4adc666948ec2c
- MD5 e9b7d2091ac935464a65410ca9deabb1
- SHA1 11a866270d23be30cca1de6eb5f255be73af1be6
- SHA512 ddf90fd8115a74bce84cc31563d19472aa1ff470a1f88d0344d2399cf12172118c03fa40437892519ede4c020e67d066d2f9a9d5f4f0bbb3281da1e1f641326d
- SSDEEP 1536:5HJLSQbe61w3FoG6Ypn4cL33O/iYC4Z5BCdI/KpN73WmU8Ij:3LZbDqB6UJL3+vf0dI/KpN73WmY
- TLSH
  T186A3290855ED4FBBD4744BFE54F522B113B17065EFAFE78A58A820EE29223406A143DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  KeyStego.exe
- Size 25KB
- SHA256 e7bb93cfe7adf88918ce9eff9dadf5eb5b09e65c367285ac1046fdd5c0abf9bd
- MD5 82fc21e0104b957c03831b2d109f1fcd
- SHA1 1fda99d3c09b2572bba9c50fdba085311e60cd68
- SHA512 4cb845642d322352bd00a14479a04bbb962a75e70f7f7fe22208e7325eebf07dea00ccd8229899226afa47b3e1c1eb495960e7277ef27d848a822cd3c37ebe1f
- SSDEEP 384:+xrdpxq0ocOSF0vDI3p2dqsHuxgb2vP96uJLY53vf6QzUn4KlAlXJ947aRULY5f:+xrUSF0vDIZ2dqsHuxgbqTQWgw8U
- TLSH
  T114B2B72133688A27DAB816B1C87791EC0370BD169D54D69F2DE37BCF2EB1B040255E5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  LoaderManager.dll
- Size 12KB
- SHA256 10c8a47b0b60a37ebfa0a78419dbb2132191764f0bd9e37e1ad162b1ac55b24d
- MD5 cbb50dfacd33b29b8b3ef1b40fd4d494
- SHA1 e019c4fd1283588dba169cf8599abfc45a0e7c6c
- SHA512 7b6479ab8378dd71bf5d687d955b48ed29022b0b609ce0015d0e2c30f93033b8c05850e7bdbfefbb3abe9865d8db48fc6f8aa19e593bf3610730eff26e88e182
- SSDEEP 192:gfUIRcbpv/4Ir9R1nHWqHU20cNJRMleYy9a:gepvjVHWqeYklRy9a
- TLSH
  T18942B71763F9833EED6AC739B4B20A174078E7163613D67A0DEB918D1CB6304CA5267B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32