b27febdedc43ae74e4a9b1ab63bcde9db7750c7524992321ff5c187ba2cca6c4

Sharing

Copy URL Twitter E-mail

General

Target
ballgameo3win.zip
Size 34.2MB
Sample260525-pg9faafv8j
SHA256 b27febdedc43ae74e4a9b1ab63bcde9db7750c7524992321ff5c187ba2cca6c4
MD5 7df36ed855d86c534fb84b5e6ada2a87
SHA1 55ec877573ad7627fa5b93e7232f749bc5d6743d
SHA512 c38034e173e4135980c783be16e335468063de43879bf6cbfa0bb808ff344731a8f193a95420e8f08cdb287848328d4a1be7505e039b686097121a484cf9ab52
SSDEEP 786432:GKfDb/etSqWhIdDNbbYaGfskvTY1Z1rMybpiF0Ne21lD09RAEMH+9xCoTI2:GODbmtSq8IzMfTyRbpe21loSHEZZ
TLSH
T10B7733E5C4BC1D95DC5FEA77C66CE600FCCBD7302AF2E403A2199695E02AC44B6166CE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  ballgameo3win/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll
- Size 596KB
- SHA256 9798d1e4c44c926437f0b87fa9650f2c28f8cda600df55b383aad623013b0c25
- MD5 ccedacd6b8dc79cddbff620d9f5d5630
- SHA1 7478ba7ac6005de76bce5cca40ee0af567c1a2ce
- SHA512 520e2c0854ae585e6bb8f50a6d1c14bc798837f30b0869ba349a2f4eac128f1bb65afa3d18a622a80fed0c72bf3fd508cebfbec510c44f036edd87d737a0827b
- SSDEEP 12288:4OmNAmdeVH9Mwe9Ek/7jY4hOTBPyX9Ga/:4nAmdcMj9Ek/7jYSOT8R/
- TLSH
  T1EED47C56B7A402B9E577D138C6834B5AEAB27811572093CF03A897AB1F137E11B7F360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  ballgameo3win/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll
- Size 7.5MB
- SHA256 ee20573d43c95a2e2b9a7e6e68f8237e0ae57be38cc6c64232bfe10cbb56fdf9
- MD5 9ad2f9ceceab6f22d6a8f0cd7adf59e1
- SHA1 052f6023f69326c4e82fd8fe74b485aecd515422
- SHA512 279ea179ccb29a574e916ccbc0a611df4f6ebfc8181a078bd14da6d52c09ec43f3c81362ff23dde14b60b76395c3ac708a32e84d8810645c60f69e10dcd66b8b
- SSDEEP 98304:9hhIT/uLH6NMFLpMlvG7I1KLtMOvYu9EGYlODEnA/:9rlLH6OPavG7I1AjYMEGYlOwnA/
- TLSH
  T1A3867D5A92760068C8ABC23DCB676B33D775700443306EEB46905F6A6F23AE1537E7C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  ballgameo3win/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  ballgameo3win/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  ballgameo3win/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  ballgameo3win/My project.exe
- Size 651KB
- SHA256 76a4560e40ec43334f5300f52d45e74f55579709d5ea01eb838f24c7ac9e568b
- MD5 64bad1c1547181fd82125cc27fa70fb8
- SHA1 74965302e69c3782cf73ffbb503cf857d572aa8e
- SHA512 26f7b46c6e3c2d48960535138ee6a094b2ea7a5f6ecdf1dd5e1c99c4f277bbace87059a7e3e1fdbe106624c37e13006ea6ebc549856b471079bb179c0a2f1cca
- SSDEEP 3072:lQd/VdFg4W9mYucJ/OD8JOsI9SRAN7G2E1:K/7Fu9mpcJ/OD826
- TLSH
  T16BE4F192231A64A5EC5205F4CC5DC7387EA26FE52E10D6FA22D1FFFB39B23827915610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  ballgameo3win/My project_Data/Managed/Assembly-CSharp.dll
- Size 8KB
- SHA256 29e07395d97937bc6d20a5106468fc2f612e7c712b2a68f59867b396d2265563
- MD5 dad3cfab96eaaf3fd78027c64dbe8d7b
- SHA1 b234b279b7fb286db265f0d8cbefd344f67a1441
- SHA512 70ee6a9c082b875c9e5b10bc08302b01e157ee90d806b44fc79710e7dc53d8c96a0640f33f393255a2f58dafb9aa48dd1b4065a8bd604d8ab9afe7d7dc4d5110
- SSDEEP 192:sYFUJpEAdKzvPDEt97GcEdzOGjAIPhuwXca:GkZzvtca
- TLSH
  T111021B61A3EC872BF4FD0B3978764301737DD2065513D39E2D8D60D5682235C0A51BFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  ballgameo3win/My project_Data/Managed/Mono.Security.dll
- Size 235KB
- SHA256 576f911be2e0db795ea78f78828f3faf4b20900baf1ce8e33ca8fe599370fc1d
- MD5 8c3dfe3622f2d3f424a86b4ce9ea4323
- SHA1 621dffdbd90aef247d07115c4b427467520929d5
- SHA512 028af0733a157c1c3884f86f958a68a3b419885c5a5a8e6342862f5f9bc710901f09c68c51946f3249f0c9ed080426676e2f09558264a74da1ff41da2f4e53e2
- SSDEEP 6144:qUjTQ70cnf8MoVRxS9iJdBF119RJXG2yc+Qu:rEiH119RJX73u
- TLSH
  T1EF344A1863F9531AF6EE8779D4B15019C3F4F50BB9AAEB4E5C8282AD1C027918C41BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  ballgameo3win/My project_Data/Managed/System.ComponentModel.Composition.dll
- Size 251KB
- SHA256 2535fd6fac676852936cb435d917b2d69cc6fcdd391f7b3009898153ba04919f
- MD5 994e7559cecf548da3b9c9fa5ca8d557
- SHA1 22b20ae69b2f22cb5703b9dbc6c315187bb8caf1
- SHA512 1fef5450624369800861da84b1d81fab1cd94fb52d7efac2a710c771dc8a25cc2b6a722be32b95fac8b1df8f0c716b8f20dc5cef6c41ef727dd2d0cff4596d99
- SSDEEP 6144:RkwkYfxuS0ZNORl1X1XYZGFU+22kUgUlAwU5e81hXJXee4jsURlXXMAX8O33iEP3:RkwkYfx8ZNCxL
- TLSH
  T1A344281533FD0366EAEF0F78B5B480148BBAFA06B95AE71C2C8951FE091379499117B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  ballgameo3win/My project_Data/Managed/System.Configuration.dll
- Size 122KB
- SHA256 ec883b49c12ab0e5110337e817a72cf781878d7faf904aa8abb1ab1c4b99bd78
- MD5 c135ee67e8a950804c9edbef4e7395c6
- SHA1 be7973deb1ba181bb158f995647391456517a4c1
- SHA512 0d1f463d944300ef8127c83042166e16258ca18742311379756a437622be83c34e3cbf6f8bf942ea8228761f76d6208e2298df057dce2e929feff7e2b92b1cb1
- SSDEEP 3072:9GHTFkizuGCOE/htnREcacWown5WJGL0MIeWgNe:9GHT5+H/33vJQ
- TLSH
  T195C3F92563EC872BE2EE177EF8B515100FF1FA0AA436D74C5D89B0ED1827B804662367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  ballgameo3win/My project_Data/Managed/System.Core.dll
- Size 1.1MB
- SHA256 f1b33eb1ae8522edcf9ba4c2b85f532d4bab68bfa2a51527264bb61619bed4ea
- MD5 9aebcd90094a77fc1e4ad2c50948f6a5
- SHA1 3da6e99cf1252905ee90c980afc4bb44abff7413
- SHA512 e3bca285f7086b08d4883eec1586b355e54b14c6bee8a872d53854f3c1f6ac67dd51910a8b212836f934090144577c2a08edcc18bc33bf1f4f1a8c4732cabc0a
- SSDEEP 12288:AWK8Xi19FV57751umv0RX15PgLdfJ18VjjvM44hvetIX6e++xHzR:Cl/umv0Z15PyC9vMNV1++F
- TLSH
  T19C354C01B3EC9B27D5FF7776A4B442A007B6FC46AB3BD78F104891A95D56B008D887A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  ballgameo3win/My project_Data/Managed/System.Data.DataSetExtensions.dll
- Size 29KB
- SHA256 1c88d17e686caf77551a18d3672a1589143e6b8ae83bfcf7c306478cdb64ab90
- MD5 c1b5a02a79d0e9ec5f9ac283209f682c
- SHA1 8bdfb7f32e7aed5065711d18020da55bf4d14456
- SHA512 55331d2dda525fb1bbefabcbb12cf7f0601699208a793dbb5f1d10bf060713a29fb23de1101be27d890d41075acb4281c89b3f1550210f7a7b3c29ab170d02d6
- SSDEEP 384:bEAjm7aELetOdc8l4LodMqokNv2Y2rsFKOlIcMYOx1snRbli3ESmMadMkrVr5UhH:bcZC8Ll4LiMXkv2Y2Mcdzsj5Q
- TLSH
  T134D2C915D3EC4311E3B727B5BCF9518A8AB2B913AD35D79D288E23CE18127804D62B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  ballgameo3win/My project_Data/Managed/System.Data.dll
- Size 2.0MB
- SHA256 534ac87e6a7c1e3ce02ff2d88f4ffa45e7b5fc44e6236922c2f46f8174a29e56
- MD5 58923ba4b2abbea9b2e2c64d1ed09b6a
- SHA1 ba738301e76f0b124597d1cc93795a36cab643c9
- SHA512 b9c8c5c040d4007d1b52b2c3b63cea8f95d74abdffff377f801a452e1df9f55416f3841bfc16f8631f44b69be1a251a6f40e6ed2348037546cb1f000bea32e61
- SSDEEP 24576:3Ty8NQuznGO4TiWB1V0Nt8OZUuhHwjpj5zuctRoOB4MAQ4cggyT:jykz74VHV0MOZUsgoOB4MAi
- TLSH
  T184A5185077FC5A16E5FF2B31A871101567FAFC16EB72D38E6508A17E1C62B508CA23A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  ballgameo3win/My project_Data/Managed/System.Drawing.dll
- Size 478KB
- SHA256 435cc673a1aba5af488d8af379d96f7e351a4b5ed2a1772892287a8268567deb
- MD5 e7afc0a4290c9ca619e212903a26b9b5
- SHA1 5bc47329baa3d6258c52956a4ceb0bd639d88a40
- SHA512 2a76cb4ece185938916a454638ede321fe226894777920b4bdef48e0b442801af789472c85cf60e44be87c9ff7f4d41738c7bc6cb137abf25e301b0e1d250e1b
- SSDEEP 6144:zHutOmSUsXjt/z5B4CqvhOgEGKPx+Jg/NY7c/nENZ4k7cheeES:zOtOmVsXjt/PicgEN/MGq4k
- TLSH
  T143A44A1077B4592BD5EF2B38E0B24968A631FC076B26E75F4681B62D1CF2B809D417E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  ballgameo3win/My project_Data/Managed/System.EnterpriseServices.dll
- Size 43KB
- SHA256 03f240d259b9cf27dbc5c9e8f42b8746a50cc5c52395d8e2de5730321f9de3b8
- MD5 354b3e901ea9a94956e072233f2c26cb
- SHA1 a3216f319705da76ffae2a69cd9a213e5f9d92be
- SHA512 9bbb8e9eb7b618e699773c815a257b289bf29d44608e88ac1db185bde933e1adc2a5ea51e87d375ba3b73beb85bcff4e6e870543cdd747f12d26e8f04fd4bbaa
- SSDEEP 768:nT7LlB8tFJutlA/kUTr8yI32JVmugdQbwGHZgm5S:T7BBk8tlA/kVy7JVmugubwGHZgm5S
- TLSH
  T19613D51043D48B7ACAFB4BBAFCB342264676BB026F37D3EF2605D2995E4374C4412666
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  ballgameo3win/My project_Data/Managed/System.IO.Compression.FileSystem.dll
- Size 18KB
- SHA256 02f749fbe31e54cd8b86a35738e1dddae00ccc2e9fdb8990b93f1a494e6e753a
- MD5 5c1290e725b3596882f59f2fe3eac632
- SHA1 646da710f32683556cebfea1df37796cbfda7412
- SHA512 edca2f30589ae3fd950610196bc0ba54e588c147e8544eafc614d3d880fd8b80cd7833cfbf6e6666abfdd93209d890ee8f3b805cf8a28aa7bf4b6b7200a2594f
- SSDEEP 384:GPQA4DgKGRwrtLsWTRbli3ESmMadM1vz2a:GoA4D/JCq
- TLSH
  T16782602493E44315F6FB4BB4ACF7428686727D13AE36C79D298A135E0C327884D63B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32