023a6b63a9adb9518dd666c39a385c9313b327a3e8082c375d973bc8e74a2b4d

Sharing

Copy URL Twitter E-mail

General

Target
another-fnaf-plus-fan-game-by-ehanix-3.5.exe
Size 738.8MB
Sample260519-dcf3dsft5s
SHA256 023a6b63a9adb9518dd666c39a385c9313b327a3e8082c375d973bc8e74a2b4d
MD5 73f1e1d4d30cc79237aae620e0882fdf
SHA1 79f7ce0eb1857f7c49ad1e2df546ac5d6d57fa9c
SHA512 79158d833fb16476e580ca1ca3efc3c0b3e5756952a5f4a11ddb0465e986e563be21a95cf0ab3a27837aa7001e45971c0c177e5f3cae488096265491581dc32e
SSDEEP 12582912:GiGCbNN1z9BBqWEb6uPXvd4zcwuIBDBzvQqUnIM/OdTOJ1TQsimy84H76:GiGCthQjdScwfBhX5O7xW8y76
TLSH
T1FF8933ADE1EA2F1CD4736D3886719B5453F4852AC817DC38B76A07428DDB7C7B26C288
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  another-fnaf-plus-fan-game-by-ehanix-3.5.exe
- Size 738.8MB
- SHA256 023a6b63a9adb9518dd666c39a385c9313b327a3e8082c375d973bc8e74a2b4d
- MD5 73f1e1d4d30cc79237aae620e0882fdf
- SHA1 79f7ce0eb1857f7c49ad1e2df546ac5d6d57fa9c
- SHA512 79158d833fb16476e580ca1ca3efc3c0b3e5756952a5f4a11ddb0465e986e563be21a95cf0ab3a27837aa7001e45971c0c177e5f3cae488096265491581dc32e
- SSDEEP 12582912:GiGCbNN1z9BBqWEb6uPXvd4zcwuIBDBzvQqUnIM/OdTOJ1TQsimy84H76:GiGCthQjdScwfBhX5O7xW8y76
- TLSH
  T1FF8933ADE1EA2F1CD4736D3886719B5453F4852AC817DC38B76A07428DDB7C7B26C288
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/ioSpecial.ini
- Size 193B
- SHA256 4868ee046975b35282e7a613526d3c9d7b3e0b1122794238d286aa464b0b5bd1
- MD5 81b9854cd40b04c3d50391ea6d28c61e
- SHA1 d31ae147cac2daef64aa27dab5179334e2101da8
- SHA512 cdf7d0924536c3ebd58bde52617287035d481b4b07622efd6a0e37cefeffe1a6cdb42c80b2b94e9ab57006bbf981fb8a23b87cf00783cd73e5419a5c5880facf
- TLSH
  T185C0128DD09A812548222707BE7ABFA177903D505B2718F7D1B24D17CB4C9CD58CD5C6
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/modern-header.bmp
- Size 25KB
- SHA256 55b900f6e1610f464bee6e82d1d2da8c3738f33a0f7e4c60ade292667ced244e
- MD5 eb92c4aa3a0e0bd7dc55baa43a20dbab
- SHA1 49a4eca6eb5883e06c2264db386780bde5d902bc
- SHA512 4ba97ea78b1b92d05cbe4d90b899b29014e7efd8ff3d1e0e8c73802f377cbf290b2c63f5a001d43a322f34400836f8cda28e701abf195494fa938785c5e23fe8
- SSDEEP 192:eXGA6MFan3D5chtTq562ucdzqesDvV4snWbNUZRFEoPJBSMQnOaCKtqw:eWNf16VqBuScV4VbNUBEoCMQnxC7w
- TLSH
  T191C2FED45EC2CC72479327C3B634AE90B2089112D7EA2D5A331E2E4D0DDB7BA4569F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/modern-wizard.bmp
- Size 150KB
- SHA256 921a71cc45f813d5e06a2e0903a15348205456cd837fbd555ac33fa697628a8f
- MD5 5e2f66647d6a23432dbe912dd0355bd0
- SHA1 7ee171eac1a18a9c5eef7041f747d1b569f1100b
- SHA512 080e30d70bc3195a5d2980a3dbdddf1e6a6c61149c07bc1735db5f95e56420ba3abacc4555758ae455fccf6200c8f69837b8975fe449b89c9b0bc535e5f721ff
- SSDEEP 1536:L2T6gBjiaRCEdiEj4Rmv7/N34pfW69Gq3u7DhhZln/fp8UY:UBApu6r2NA
- TLSH
  T16DE3DAD06E46DCA133477BC37A21EED1A2D8506196E72D0422DE095C0DEBBFA867DB07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  SP_ANIMTRONICS_0.yytex
- Size 10.5MB
- SHA256 8662e4dc38f2f33ba3da0cd5a377db0a87f59ad8be9682318e20685686fcdb3c
- MD5 983de089f5633d1adc2d4629271ca962
- SHA1 3f746b1535bbae22801539f31eee35dc4e23a6d3
- SHA512 915e13b45adcdbd639db673a99a6287a3ac92a070643b07dcbcf8fdb2e0b59264270b0cab6f84eae0d0bbc2a43496e44803f0bb9a9fc42369932be346645673c
- SSDEEP 196608:a1VXHoHWGyRY/cP/MweEtS5Yg/pndVtyqQIf7tV9IfoqRUYrhAOAAQmMbMBE1Dex:8VXHSiecPEweEtaYopdbybUoUYrGOAFQ
- TLSH
  T1DBB633950302B4A1F76F9078067787D18AE48E9D64E0EE09C617B827C9F56BE4E1C7E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  SP_ANIMTRONICS_1.yytex
- Size 10.6MB
- SHA256 b6f5373f3d360ad6c1abe6e893e5dd76bc449c829c217a88f140079877194ded
- MD5 1aa8729f547a4f0cc16f8a1b68c4425e
- SHA1 80d8bdbfd9f3277eb9dba07812d25f6cd635a600
- SHA512 55b52e36cdda609ee2a27bffc96e8786405fb89542ecf9b49ea460a22f14a761d39f1a05b453b9985e974e4bf8bdc66ad5507fc3dbd9d45322f2c33c24c7345c
- SSDEEP 196608:Ak3vMBE9gS7vKiKF8lKrdmvuzSm2NNNIvMCFeJ2NQFycr6kAqWhfCPrG45/c1eG2:EE9nDKidlssvufTMCIGQFX6N2bGIGGWg
- TLSH
  T137B63335D23CA40DF87D8FB640370E6CA2C81C560E07AA354B2BBD7177F96AA49454EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  SP_ANIMTRONICS_10.yytex
- Size 5.1MB
- SHA256 ff7314ddb2de5d79b01d30eea02cfd9f1098ae7c423e18b6fb06fb8804ec4ef4
- MD5 0c40163886ec2faa22bc39e42e9ec3b2
- SHA1 fbf4ba6d6e662a5533faa622cc0531cc73efbd51
- SHA512 4c64c808cb7c90422f4285c6c6cfb9c527e0bd9d1339d6b485a8aa530620b5f450e8088220072e79396ccc8a883d71289518623cd9ee1384a04786c7d9b1303a
- SSDEEP 98304:DtS/nyI9kHH7CrXp0uKKnGIorAn3VAmOpRxE1o1J2YqXQTFERBgDbUaCRN25LRq:x89kn7MnGIokFAmkE1o1J9qgTqRBcbUD
- TLSH
  T1943633225AF16ED7D5813E78F4BA482A7866CDC823562E0C0C945D9429B4FDA7C0DEF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  SP_ANIMTRONICS_11.yytex
- Size 5.3MB
- SHA256 f61c527afbc7ebfc5588dcad0f8a671ea2ccfeff78336d38572ba0f104d3572e
- MD5 9afe69c24106ea72fa007805b1662005
- SHA1 6d9cc6bf48996cd2c849ea2af0aa785a432e69aa
- SHA512 af497d792438a00b402b3a5d9e64cc372b42fc715ecfd766ce78a1c9d043e523e3f297e5e9da07aba36c001d5c1ea4bba73f31488b18af48437b7ab298218c42
- SSDEEP 98304:sjY/VyRoQq97LuUh22/TAzupQLqxM+wv+yDyoHY3n0z0ixBsXNLwc:7NLQq9vTAapQWx5w4oHY3pyBsLb
- TLSH
  T1C646338D3E9E1A02D958C43CEA49F97523702CD9A58039787A547E1B3E74A9CCFC72D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  SP_ANIMTRONICS_12.yytex
- Size 13.3MB
- SHA256 7c8de97c1e439586d50fc0aab85da9ac35962fdeef0f47f7d44dbe8ea1ace938
- MD5 f7278495387427915b088b6d832b78e3
- SHA1 efacd58ed3b8c59e18523bdb8bb17a82734a5a63
- SHA512 3bb38ad8535ad5afd7f2aa47f7951422a1e60336f54ccecbb0436727e4b68afecab33bd36eff99feb66c8df918930cfaa621789f731ab9b0209f1da2c068b855
- SSDEEP 196608:v20vpK9HLQgEfKt+oq/2i3iVJXmHwyFsa7iqkhY16zOKC51YV0RpSbVwrhNdtcUu:v2DVsgEKJpJX4xf19551YV87XwIglj
- TLSH
  T126E6339D1D0A496EFE978EB083F38848D5E7EED45B6AA34CDE946D80B87030531685F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  SP_ANIMTRONICS_13.yytex
- Size 13.4MB
- SHA256 3433e94b81e66720f844fe183b98254e7baa76bbd5e62ba0e72280c64420b2d8
- MD5 7a291deb28454eb5ed553c7bdb88306e
- SHA1 bd80e29f588d1ae77774bdb87db8cd52068ccb38
- SHA512 27ee7a85d6489132b433798d2472a215467177440da43eb212c7595926c4ae282601726d9a57cf58b2b946de8ac924ec4a54ae08817fab56d417e5118752ed6e
- SSDEEP 393216:TS1+/qXHkq4/wFcElloMHsry27xhm5F0S7h5Gxv:r/1q4/w2ObWb8Fp95GV
- TLSH
  T13CE6333BD35FBC6FFB421178F28666B68AD32D312A15485E92B774009DB9827C5C3293
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  SP_ANIMTRONICS_14.yytex
- Size 13.7MB
- SHA256 f1feb4ccc2dbbf4f601d6f061bcd69817cce0cc8d7f3ad3cb2d7e34154d02731
- MD5 104da562f4bd12c8a9179764b88c26ae
- SHA1 f58731c0986ae9574c710ec28ac6c48cf916dcd3
- SHA512 d2964ffceefcab62460df749677ff251a68f9a3350a9f030c222afd49a2d367a451b1dd99ac8bc2f2bdec416770dc2fd87497332d40bc83d780fdda5bdd52515
- SSDEEP 393216:BUaJ5CNCijYiALf9hmZUchIR7BwSLJvkHS/G:6kCNCijYiAXMIoWJC
- TLSH
  T1BEE63332F596C76CCA56F53E46265251CBEB2A31D4C3BEE9C8D99A8C6BF040B614D0C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  SP_ANIMTRONICS_15.yytex
- Size 10.2MB
- SHA256 d74059246d843a583f903109529d3e1d49cdd9414a2234f42e5be7087cf20ac5
- MD5 64ea74a8949d7eb55addd6aec41b442a
- SHA1 967a3d02e790bf5c3742f16fa1666b0d83ca407d
- SHA512 1398f11cc8e0dbe6812478d14c02145c6bbc005c5f6b585d23b4c3f7412e044777bc4392bf6c05f57a1b7d0686ddbe632e940bdff4b8fb2380ee17f16908da96
- SSDEEP 196608:dZpfjIT0Xie7WBhZdf/NcfgathlKBYjyR3hqWRIDnYw9xI7AH1LH8:PRj0K7qvf/qfzhlKB484I74LH8
- TLSH
  T19FB6336B5BC440D4D71A5B7850E0A4E3ACF448C0592DF55E08E664B83FE68B29DFAC3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  SP_ANIMTRONICS_16.yytex
- Size 7.1MB
- SHA256 1887bc58b70ad9284560941668128b79beb14ea15f8305586936514d82cbaa31
- MD5 6806e4c8bedc06560908037b425cfeb6
- SHA1 125630bbb40730f61981c0c916c871cf923b48a5
- SHA512 2cffa760aeac5213b77297a1c55b07492c5bda8e2c029d77bf2bc314aff9dd274006cc6cc1b99434175bffd33b26bc2e4c9e26af5908fc1b0ca469effbf1b5ac
- SSDEEP 98304:1/qQgJOy+zoVE0E9MLxtpMuTh6sXeTJDnnkQhe/dAPobuIeiVRIly4HPRdjH92N:1zCh+MtAMbpdTh/eNoZWPanxRo/jIN
- TLSH
  T1507633DFADF62A47E09EB2F711868666E3732C64633244900BDF7B14686FA301C5A5CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  SP_ANIMTRONICS_17.yytex
- Size 6.8MB
- SHA256 1f2e81a59c65fd5cb3111bf14a7cc029ac887f6b7c5ad346a903d9976f6a8cf7
- MD5 682d67b177ad5ca083eee717f48789ee
- SHA1 eb93dc5629c6b03e61fd4925e148fe0b720d3bd3
- SHA512 52a92236a108c54790107284acfbcf10225c0ed72d4fa9a20b9f9bd22706399d00c7eb6f38ff4e0e515d683f6a68bf240b08c8d59fad99cf51c0b23b009f1c27
- SSDEEP 196608:YUBC2WwUdwwxtQ7I183WrQAwK9fi6GtqsmDbsnRuSMzU2:xA3VlxUx4Xw6GtqbDQRr2
- TLSH
  T11B763306579B4B83C9101F74895A1D0FB9FB0F55488A6C182FE5BC0E0EFF94EE0665EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral27 behavioral28
- Target
  SP_ANIMTRONICS_18.yytex
- Size 6.2MB
- SHA256 f5eea4768c8ebca07107aa328c3bcbf33de402589792c28275f2da153953dac3
- MD5 3b008b496b72d024489e66a4735e93c3
- SHA1 a616f328feb8877d6fe9d9818ad3fea17fb2a059
- SHA512 87855245b677569e7bc2ed717488bf0f993419d18077f77f987ff1b506649b0674574b8863d1da1de1d66b31f375e9ace56c0398ddb9f9a4f4f7977576f822ec
- SSDEEP 196608:NEzUppNB6iuoZnKAqxNeKCvUXBixJNXK3kLe4:2Y3NXnFhKLBMNXs4
- TLSH
  T1406633453B8A5BCAFB8E58B65B6251AECDD848474B9C0614FDE0F2C3B16D1F10A14AFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  SP_ANIMTRONICS_19.yytex
- Size 8.6MB
- SHA256 8afe71a3fa7173c5730df6e2eee4762ced33840c2e9f1a0423fe9ccb75969e90
- MD5 4ee825fc03417db8844b55bf0d089c8c
- SHA1 10250b47040de0c90c1926ce7862334164ccbe75
- SHA512 bda933ddf62a3e402325a4c887ca461c47ae57d5aaccdce98626601c2eb3b1335474712efeb6380b3667f4d8f5ed354e5c9c58e49c18a88f86d7de1bb610c72b
- SSDEEP 196608:QCCr0zILfvNPNWgKb4sPWO93XVom8oVTgWRvQYxsb:QCCAKvPJI4sPfxVfpTQWsb
- TLSH
  T1A696332A970CF933C5918F31539AB83065B2AA4452F52DDE071FB3A01E7506F8D7CA6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32