3d1b0e0d74bcbe8563db54c9e9a7343d3b4e810a8d4b2619ab655a1b093b9952

Sharing

Copy URL Twitter E-mail

General

Target
VRKanojov1.31.zip
Size 594.2MB
Sample260525-e8rdnsev2z
SHA256 3d1b0e0d74bcbe8563db54c9e9a7343d3b4e810a8d4b2619ab655a1b093b9952
MD5 4e093a48c6957dcd1e7ac05dcebe45fe
SHA1 44b6553777d9b005aec0592eedc5065f56dacc17
SHA512 ae838ef17b1e991d77953be2d173ebef50e42785a970bc0d05e755eece5be26aa81897038eee0aecf77d2e2d9d5637925fe1043680b0853a3fc9d57202aa32ce
SSDEEP 12582912:g6aIYkw3jbQVhpdZnYhjmqaP94CCRSS4FU4F1tn0XGCkQX2Wpx1USTuzNM6nqlm6:g1Ig3QVhpdZnYrC94BSSnG/nQxX5TuZ8
TLSH
T1CD5933D09DDBBDE1F61DC5360044A394E77606459FCAE0EB268253F0228ACC953BA7ED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  VRKanojo/STEAMUNLOCKED.COM.url
- Size 52B
- SHA256 a8f85c84ee74ee2b94a2c9e58834c802df0caa23ab1c3b980fa8cbff08fdd325
- MD5 985e04b2e895c7fee678f28772a028d1
- SHA1 948db493e1f1d419735d8d97782ff6fd87a6f9ac
- SHA512 d73d429347bcc284a72366a184cee2d624176b218f98dc8f40a1c964d0b4f410686fdacd0771aa7665391ef1685306bc2dee72dd03427f2e1086f88710372688
- TLSH
  T1039002564119C059971A084D4415955698422199456AC4A4D641DB0C188B15585A5708
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  VRKanojo/VRKanojo/InitSetting.exe
- Size 654KB
- SHA256 76feb18189aaa2502d68084b3b9b76f81af7c0467b6cc0b18221d272497254ba
- MD5 da49abf407b9d5f467875654fedff2bf
- SHA1 1e7a1b822cca34c9f85a7ddd37fbb970038bf7b7
- SHA512 3ba26226c9ea23158c72d307ff06889ebc5b41dd6831781bcaf95434103f01588565be34d4b1e0a3516406396de7b58f3218d44049a9380bfa6ea00764f3103d
- SSDEEP 12288:I6cCGZs1upliWCGZs1upli45lFvl8JZDUr4BEAgeCGZs1uplF:2XZsQplJXZsQplt5HvK7DHaAVXZsQpl
- TLSH
  T18EE423D2B27D5723C87A423187B60684537D541A4E32CA1A3DEE125FA73EB516B83F83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  VRKanojo/VRKanojo/VRKanojo.exe
- Size 20.3MB
- SHA256 bcd8fbafbf3ba56d96b512757e0d994d90c2392ff56f1f79f7c7ea87cd7682f2
- MD5 2e210c8aa59dd891b741bcc179312568
- SHA1 6dc293dcdc1c6bb46a399539f34a964212ca7ca6
- SHA512 78d31ffa0000769540b7fc9516e051a8406703d6a525607fae42b6a68d2326329375c796c7923b6b70f072def502f30dbf685467247a5e493b1ea31f79fd048c
- SSDEEP 393216:KZQ0XqDYVG4TB2dQpDNx/FuWOnc7DaMZk:wq+k
- TLSH
  T1BA27AD9971BC40E5E07BD038D69AA60FF6B1385903604BDB53B0426A6F37BE41EBE711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Drops desktop.ini file(s)
behavioral5 behavioral6
- Target
  VRKanojo/VRKanojo/VRKanojo_Data/Managed/ArabicSupport.dll
- Size 13KB
- SHA256 64e4226ed624172ce7654aa9ee5946d48219084bb02cbf49c5d76898409ead23
- MD5 6cb0fbba1df139d8f836df2ddec66a8a
- SHA1 ad2d7a112785726a766f09aeb646fd2c5590e7b5
- SHA512 eb95ba8266e6d10d7c1dbd314730ef89e4e1fcf719ed3c27a73ff629f81c1013bdfa47af212ec8e41deaacf565941d91dfce1af3b4a307c26982ca852b92a0ff
- SSDEEP 192:+lPrXAuAQzIuiPfrEYy16gqKX+b0dWGa9sh8r65WF+bxTZ:Cr7AduurE4GGM5Ww1
- TLSH
  T1B852B9F95B531B62D9B50D3A07B3327C67A48A0F4F9ED9190DD201AF6D1D2E44BD0AC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  VRKanojo/VRKanojo/VRKanojo_Data/Managed/Assembly-CSharp-firstpass.dll
- Size 1.0MB
- SHA256 81229909ed7249a5c869f015b510c383d3e03bcce6192a6afe9739c7143c8a5a
- MD5 3f2b9cf87b7a2969cca1c4a1502634b3
- SHA1 87a3ad9bbb57802bc8c36be001b18d819b8ab0b9
- SHA512 4aa3b5018f447ad4fd22d1cddaa5dd1eb4a6275e25034959ff98fbf0888b1243e0b5601ade2af408e838af3212b871dd4f040b47115d2e6a8c874c20f339dde9
- SSDEEP 12288:eZFwJBGiFbeLR1svYmv/MyyHKUCs0rYM/hupR0xv5+KzJtUDh:ZWiFbetUYmvkVyJ/Imv5+9D
- TLSH
  T110352A8067D4AB37D2EF87FBA5A514445B31D24AEE83E39E1AC4B4F91D837104D062BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  VRKanojo/VRKanojo/VRKanojo_Data/Managed/Assembly-CSharp.dll
- Size 3.0MB
- SHA256 f9f756801ecc9665b6da1a97a1191ec4d6fd9bd3f0d9ef7df5b3716410871964
- MD5 963ac47f1e83b80f920b2bbfd74a571e
- SHA1 754afc00312f7b4d484f21f9d7689ce949029e5c
- SHA512 7d64608b922a5f81cfde80d30f32f4d2844053a047afa12aee8dad13d885a66c6075ec3d1db55ecb32b75fd3de1e96357e0d3fa6112862937fb6564350507234
- SSDEEP 49152:YGjlChotjcpl+W/05glbSfuNLMNg6unCIkHR9nBP:YX76WMulbS
- TLSH
  T11DE54B64FBE4CE33D16E47FB91A5061147B0E547A7C3E78A1ED5A0FA2C86300590A6EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  VRKanojo/VRKanojo/VRKanojo_Data/Managed/Assembly-UnityScript-firstpass.dll
- Size 12KB
- SHA256 98680533cc15d6a5f6a628347b8384e44abc834d756d4c328f0ca52198401993
- MD5 862b9cdca8ce26bc4f5e47c77461026a
- SHA1 720e19269149792e8674e443d47d7b510b8dc67a
- SHA512 97c4bfdb54adaf6941714b05331ca6f4a0e0c78c64ef878536e719486ef4dda71a92959e76a22ad37620003e112b9a64426dd1b3492d9426ac5e1877245bdad9
- SSDEEP 192:d3oLwNTScrfhdAonfC5YLhcFVDcVwivbE87boQ9Iip75+x0AKo7OEn4:zT3r9Cx8Vjv7boMlDPo
- TLSH
  T15442C36AAA9CC637D95D13FE69D2050793B00576D682D7C61CE8A8E6FC9338106027FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  VRKanojo/VRKanojo/VRKanojo_Data/Managed/Assembly-UnityScript.dll
- Size 17KB
- SHA256 07f9b7c97d727c26073b6d92d50b90f76837f5cee80a2f3dae02cd06660cf03e
- MD5 e9ee580abe2d586146f8cd04cfe35725
- SHA1 d47c0b5e0c472245f524ab571393cf9d3ddacd76
- SHA512 b20a7fa1ef11bcef845ee95c6d9a11f6af9a4b5397e92469f1e836cec2674bed479f671add0f17e42eae8f351d908fbdccb820e7347bc0304f2967a3428ea8ba
- SSDEEP 384:8laLxhQmnxRtB9gkB/xV0IAship8H7T8MbHg:8kQmnx7B94ITxbTlHg
- TLSH
  T14682B6A925ECD52BEAFF1BFE39B2090147B069634872D7D82CC4689C59937410B067BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  VRKanojo/VRKanojo/VRKanojo_Data/Managed/Boo.Lang.dll
- Size 124KB
- SHA256 a4d8ea637137686862e09111bea9e46df1e8ed7750c94db655b32cc5977e127b
- MD5 0a3df844bcef63d419e1a3f883f6ff4c
- SHA1 1e15f2d504fe69309dda0f094c20119968dc0815
- SHA512 154260a6b9cd99f5401c570d2389d26ed2e2c9a14b6300f1b99f26df516847784dcfd373107eaacde44db76e42c9810d264c6e04703ce1bb39c947dd18142a2d
- SSDEEP 1536:BqQWYfdvJU9+ENq0n2oPJKxs5BDySAF8oQhBHfrN5AKV4zmd2adBOgj7e:xVv2bPnzAxYm8oQhBHDB59dj7e
- TLSH
  T1A4C3C5906BE88BA6E6FF3B35ACF503104A71BC5AF93AE71F5644D1DE1862B404920377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  VRKanojo/VRKanojo/VRKanojo_Data/Managed/Mono.Posix.dll
- Size 180KB
- SHA256 dbb92a44df76021770dfbbd8cc353143b36ff8b0a7b4e9d33fca14ac22e78264
- MD5 5b65b4c1dcd7cd2d3cd3f62dbafc6220
- SHA1 6874c8b258e319f8d10f02cf462320a81cb34548
- SHA512 27a6db7027219135a186b3501dd2235c0f8e7e37d78bacab6ce89e496199c75ff25e17f8b066a57bbc1bde4e9b95e06d15814c81c2ebeb96db1fdfb2fd2e55c8
- SSDEEP 3072:YFA3DSzUU72u9dBKZXxZJWUG6e2uRUlRy2NeB0GytfUxxlZNhVDJw:TSwU72uAU2uRUlRycUxxlZNhVD
- TLSH
  T172047D159BB44B0AE29E2334ECB31B0187B4F45F7D53E79E1B99A2781C7338166026E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  VRKanojo/VRKanojo/VRKanojo_Data/Managed/Mono.Security.dll
- Size 288KB
- SHA256 3608450423c113ed6ad3562f5958ac6d21385162d552b6929197ecf9c37e2433
- MD5 02020c1b5b2e0eb1f5f63f276f3d37c6
- SHA1 d09276e5b6dfad7a0eb79158e2d8346ea4126816
- SHA512 9214537249f5deb3b1781e9ec5149f8f79414f0fa6f4c3717d2d43049b89bb292241f7853b67c26e7d03697b324b78dbb530a71184ee07340e7d8dc5279bc9b1
- SSDEEP 6144:rxtgJ7SzJWhaeQTVJRj02o0nF2yUpub7H:0B5ceQ502o02O
- TLSH
  T1DD5439082BE8DB2BF1BE53F8D0F04415CBF8A556B69BEF4E1C9610E818537419A05B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  VRKanojo/VRKanojo/VRKanojo_Data/Managed/System.Configuration.dll
- Size 122KB
- SHA256 13c1efba2c088620517fd6aa53344f2cbcb390c2ac643e4ebf63dfa41a0ca843
- MD5 f310ca2065a57a6bb022b537c2a03dc6
- SHA1 3df40d3996b759cd54b15fea581015801ad05911
- SHA512 9ac17720b3bda9843a16857f91627c58efabf73c1d9f8b9082e01866305f12019476b3b3208eed51cd4b2f01be8b0c8208264585fd62e7e10b3fccbff9f264cb
- SSDEEP 3072:BbskauEF9UGiyY5LiFj5Kqh/8n4UeYvP:2gKF1B
- TLSH
  T13EC3192563F8872BE3EE2778F4B508110BB0EA16B427E75D9D8971E868537804B5237F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  VRKanojo/VRKanojo/VRKanojo_Data/Managed/System.Core.dll
- Size 290KB
- SHA256 a1cd46f48ece75acd0802e143f112fa01b8fd7ee4894bdeae9cbb51763a15a7e
- MD5 cea9f3c787a1c97c7896c66afe120dfb
- SHA1 115cce1ba9e05e95fbac8bb52689266b19c76399
- SHA512 f50d787ea163c5d68aed120fb200cb8bf778bc406322fd9d5ea30ea227bbdced960592b810fcbc295f98e8955dfeff2b7af4f52829471f7fb9879d575696d80b
- SSDEEP 6144:h0rxcnyyZrWiXjnGtL5HDx0/5tZwfms6dQhFxsNhGCzlMpOMGDV3u6GZD+o:AcnyyZrWiXjnGtL5H2RtOOKxQhGCzlMJ
- TLSH
  T104544B54A7DD9612E7BF63BAE4F0150143F1B8E379ABE75D28D840E90C9B740AE013A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  VRKanojo/VRKanojo/VRKanojo_Data/Managed/System.Security.dll
- Size 132KB
- SHA256 9c5ab48b61677ae7dc8fb81b6d595aeae144d12d06b5083e331d07b4349648ed
- MD5 ef7fe5bd7ee08bbbac7787aa3985011f
- SHA1 448705dbebee180bbe540b2c87d4106803ca64bd
- SHA512 4ee4eba6c5f903a5b2ac2afb41dbf3ed2aa2bf05d2916923c1dad9c363430da0dc2eae2feefc7f2f01b6c4eaf3e1e7715066b5eadf47786865f1ddd0cb8d9c4f
- SSDEEP 3072:ArllZ36AZ36px3y6fnpv5oWmdXtYzqKDV0QWOIs43OrJlKcczHu8qOY9LF93Ifp2:Ar3Z36AZ36px3jfnpv5oWmdXtoq2ThIj
- TLSH
  T1ACD3192867E8C71AF7BA67B9E4F1001067B4F916B113FF8E1D8111EE0427B915A12A7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  VRKanojo/VRKanojo/VRKanojo_Data/Managed/System.Xml.Linq.dll
- Size 104KB
- SHA256 06cd0b6387c41f2684e8a56259568e4f223588222bb0c080bfb9fd0d800848b6
- MD5 0a0ed2b882e66d70294a3743db3263d2
- SHA1 85de418c77dc6920a05dad8591b895a7a77d3679
- SHA512 ba7ede57bbf3c98d22f9f537259e151b0d692bc5b940431bac137a2b707f1b36118144b1010e65d53bef9a0cb9b1d535cc6c3817c9e8c8d73c6c027d84bfa9d7
- SSDEEP 1536:2sU3+OzoOLkxBRVF4VzghF+a37tV6PrsU7PSDfbzA9n7/FO3SUh4W34TZ:1osnL4VzExt8zsUrUhKZ
- TLSH
  T19BA30824A6ECCF23E6AE23B9E4F005914BB8D152E55BE78FAD9821CD1C073415D127AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  VRKanojo/VRKanojo/VRKanojo_Data/Managed/System.Xml.dll
- Size 1.2MB
- SHA256 25335204b50fd1445b44d26a9cbe67dc0e63532a2805befe11dfb8b08e592bb5
- MD5 ba2fa40efaf0d9a406ef68dbf23d14e1
- SHA1 7f53b6e4e315dd066b32b3a6a85e7bca720b0a3d
- SHA512 237db675f76f10160f4ee1f6e83c54c7dd8ce4ae18b153a4711176b8b8428aec298a3f056411e9b6ab708ef3de31127ae3088ea19c3ce4e296bea803962ec7c9
- SSDEEP 12288:pY/AQi7KrtoHqE8KBvdWfFb3X84qoECPqTJOCjbr9hSFswDJZi:pYtT5CqEdBVKbAYCjbr9hSrDDi
- TLSH
  T1744508006BF8DA1BE2BF67B499B016244BF1B851F2B6EB9F284124D91C537009E5277F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32