da1039aaec6f4b49566fe6b30022bf83c793a211b009d8f164099a2727467af2

Sharing

Copy URL Twitter E-mail

General

Target
19a3e0-Awesomekills_Graphics_12.23.zip
Size 18.6MB
Sample260531-mrrbcaey7t
SHA256 da1039aaec6f4b49566fe6b30022bf83c793a211b009d8f164099a2727467af2
MD5 b39f40f60b0a660b6ea12bd03f010756
SHA1 4b78835820d3a344fe62a97c818832666b41a7e4
SHA512 01245ef86998ceb3a1b6b7b2d52160c2c777c36d227f165a17778a95d47369f9a9ba1109990afa4ff1df78b4118a07a0c5f81224fe5f6a27973dc10d17a15813
SSDEEP 393216:IVTkjphOihZclNuk65G6qmgfmNErkjg4EvnOp6YdsI9V8u:pjbLkcX5G6wm04EfYKAt
TLSH
T1181733EBE5B31350C062873A544EDFB9745FC016D28A369F2CB5460070FE6ACED56A3A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

ransomware

Malware Config

Targets

- Target
  19a3e0-Awesomekills_Graphics_12.23.zip
- Size 18.6MB
- SHA256 da1039aaec6f4b49566fe6b30022bf83c793a211b009d8f164099a2727467af2
- MD5 b39f40f60b0a660b6ea12bd03f010756
- SHA1 4b78835820d3a344fe62a97c818832666b41a7e4
- SHA512 01245ef86998ceb3a1b6b7b2d52160c2c777c36d227f165a17778a95d47369f9a9ba1109990afa4ff1df78b4118a07a0c5f81224fe5f6a27973dc10d17a15813
- SSDEEP 393216:IVTkjphOihZclNuk65G6qmgfmNErkjg4EvnOp6YdsI9V8u:pjbLkcX5G6wm04EfYKAt
- TLSH
  T1181733EBE5B31350C062873A544EDFB9745FC016D28A369F2CB5460070FE6ACED56A3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Awesomekills_Graphics_12.23/Installing/1. Install VisualV/Link.txt
- Size 38B
- SHA256 38b425be14936dabaff9203bb4453d266eebf6da3e134111c109bce38720c6fc
- MD5 933ea5ebb54151d0ad0e6cf6fab73065
- SHA1 406b3bae1e31b9cedd49cf7b2c1bf8aec9764b7d
- SHA512 8ec0ffe94167b3f04017e0438f4c215c20c202c71fef1b8d5d5c594874b87bccd2fe8dfa0856df5c3db4aa8e019c7b5a1902e2dead32d59bf501f96f37eb474d
- MD5 SHA1 SHA512
Score

3^/10

ransomware
behavioral3 behavioral4
- Target
  Awesomekills_Graphics_12.23/Installing/2. Install Awesomekills Graphics.oiv/Awesomekills Graphics.oiv
- Size 5.1MB
- SHA256 5a4f9b854b6d803276f7e666f89a089e66046593db287c76b45f56e354bfdf56
- MD5 5ccbe449dde21ae082c4471cef39ddac
- SHA1 581eaabf93130104a257e6d39a174a6cb2acbe0e
- SHA512 f24bd76667162db89fcd2dfc7c5297521ff24dd43120935425810584c5a1ebec96816414ea1b4bbca9e1f19ed8f13884aa1f9e0434101cb23cf164b4eb91eff3
- SSDEEP 98304:s5G2kUJfUO6OUMyl6kvI8uW6v6moQPO7E1cRuY1KvK06vEzo0xB:UA/cbyhv8l8ysEelKvKj4
- TLSH
  T1143633A3E3379B2CAD6081B2DC0A77F464FDA0290643BEE7B8D13D50D5967946E811EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Awesomekills_Graphics_12.23/Installing/3. Install Reshade/Link.txt
- Size 19B
- SHA256 e3ed320ce5a4b94594fdfd8e4029e8cc17be8885b7638560ed55977f8e0556e0
- MD5 70ce42de34316794af8bcf4dad391a5d
- SHA1 f5721f87ca6b4d3f63323eb8da0d38d916475d4a
- SHA512 74863d0061b0d8fe20de2142980ce874a9cbba59581c2493b9ffadea46242d405cfd3275bd42bcf3fee0a79eba82f438262ad2a4f06bfbe22684909baa3aeb5e
- MD5 SHA1 SHA512
Score

3^/10

ransomware
behavioral7 behavioral8
- Target
  Awesomekills_Graphics_12.23/Installing/4. Delete reshade-shaders folder from your GTAV folder/Delete reshade-shaders folder from your GTAV folder.jpg
- Size 473KB
- SHA256 6314854e82c577458f8477e32068368120aa308768400837e332ae3a74dc56ef
- MD5 4b57ea286d48d8f79f743f002aef63aa
- SHA1 4559535bcd7364691d1da858e3cfe93146c4d2ef
- SHA512 3ca9780dfe4a7903be665a90897ca9ca4f0052f9932e6b41af600201789e1ea7665cc1de61b19c6fa4dd3a841820e2cbed6185ae58565d62c675f68820d98039
- SSDEEP 12288:gJOytnz+Ls1SLJo+e4gCny6moftWzXjB4:aPnz+4SmT4gh6moftSB4
- TLSH
  T1A3A4C1A289B57F12FD220D2953A16FAA114D182F5BE51308F49ECF873387D9A709F842
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/Awesomekills_NORT_Gameplay.ini
- Size 23KB
- SHA256 e914e33afb3473ce256798bea953ad084b8652c06d67d81bf51c78a24c5b8e18
- MD5 f7f1e6ae10c6ca0faf42cf383460c695
- SHA1 0c8529bbf0f16857b67fbc8be5ed47f9d9bd40d3
- SHA512 49cb9bc1a92bc525eb366c35fa8c7ed3434286ff221631f89eeca965a80c5b789ae60b3a8abb8047f947e3d877b35c6d20872e37ca01e2b31daccf71a9066c34
- SSDEEP 384:kfPFgE5undrAXWRJwD2P6prygefbhew7b35t+EBpXBd9q/sdTObPtCVWvVgimtsU:kFghndrAGRJwD2iprytToE3P3BpxLfhz
- TLSH
  T190B2B5E1152D8EC4E847C941B7B6F7B420FA35CFEAD8EA6871F810709C8AD96054E72D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

ransomware
behavioral11 behavioral12
- Target
  Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/Awesomekills_NORT_Screens_BigDOF.ini
- Size 23KB
- SHA256 3c00828a628bc50323bb1f0f693e546c2b11d89fcb15168b776f10ff6e71895e
- MD5 58bc7095bba0eba23215850b09ed5fec
- SHA1 1b62b04f3d8d1a56590a5c88ee6076bcd9238552
- SHA512 ae7c325acee38f9ed9be774bd0763de3f7cf56959d6d33bcb475e6a7a0ec7c53b9ebb5dfba3e8da880bfa668879d7d43fcb9b17b38c294806e146283f2c54a3b
- SSDEEP 384:kfnFgE5undrAXWRJwD2P6prygefbhew7b35t+EBpXBd9q/sdTObPtCVWvVgimtsU:kNghndrAGRJwD2iprytToE3P3BpxLfhz
- TLSH
  T1A6B2B5E1152D8EC4E847C941B7B6F7B420FA35CFEAD8EA6871F810709C8AD96054E72D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

ransomware
behavioral13 behavioral14
- Target
  Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/Awesomekills_NORT_Screens_SmallDOF.ini
- Size 23KB
- SHA256 1f2f8af097c379380d56dea94cfd118d54942b0ab929f9afb40622129f172f9c
- MD5 bcdd30836ef2867100e654711c2beb74
- SHA1 76e5f3d89b3a916faaebfea983d915dd470e9e31
- SHA512 e2d4391e41b16fd04119da489542870d9ca46539a047d6800aa61a94d26789d879ec9bf50ac14605efb926cf0e5c95a19f86d57175d30b595596f0ceccd1e365
- SSDEEP 384:kfnFgE5undrAXWRJwD2P6prygefbhew7b35t+EBpXBd9q/sdTObPtCVAvVgimtsU:kNghndrAGRJwD2iprytToE3P3BpxLfhp
- TLSH
  T1F1B2B6E1152D8EC4E847C541B7B6F7B420FA35CFEAD8EA6871F810709C8AD96054E72D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

ransomware
behavioral15 behavioral16
- Target
  Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/advancedblur.ini
- Size 95B
- SHA256 e29223d63b49822d8df41edb4db5f9afafe539a43e8a4d27e04fcdc88a7f4e29
- MD5 0f82b273b055b63dc83c5f95c2ef51bd
- SHA1 5ccd2203af10eb3fecdfc44463ccbe62f105b8db
- SHA512 77805f770258ed30ca6bcb1b24f5819435de0928b21607dc6f0de727659ba3fc27654892ede29e18b0e4827649c5f58b5a2d72a15f9db9a91dffb14c3b42d5aa
- TLSH
  T115B012031A731BBB46D17529C980077190532BC4B0380FFC0E4800154F85F1DF01CF15
- MD5 SHA1 SHA512 TLSH
Score

3^/10

ransomware
behavioral17 behavioral18
- Target
  Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/d3d11.dll
- Size 1.5MB
- SHA256 e0b752d304f4d049f30c412b7b461127ccc6249e07dae65b333342053ed91306
- MD5 2c5470cf22671c9665d7ae358efeef06
- SHA1 3148a76b9bca2f968fd07512b28e64c1f3062cd9
- SHA512 6bd2279669e3c314d2d028b9081ff0d41fc5a990c861849e4ab06ab32c5ec252ac341cea7c997de17c392bf76e0b7e59580951efc2246e70a383c706b8d01ec9
- SSDEEP 24576:sRTcY28Xsu+WIrad3FciER4d631OfVq7LUOGI3grJuNM68BsuvRV7q6:sRTcY3X8W5FcxR45qcOGI3AJuNM68BsO
- TLSH
  T12E657C4AB27524A0C09AE57DDA07DA06F37174494B304BDB2AD51F1A2FB7BE0893E731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/d3dcompiler_46e.dll
- Size 3.7MB
- SHA256 ff2fffaf99916720914753d10e1db6e364011bb23da143178250cbea7dbfb945
- MD5 24ea5c9a9db56b51d23673eb20dd5fd6
- SHA1 d248255e107d1b692ebaff28476b526e7af7d2ed
- SHA512 f1a5dce642014b3bbdb477da1cf4ea212f0444fee58d3a636f0f8fc749d0b243dad3fc980feff4f793b352732db404cba5cc5e6e7be5e111684994189c4d533a
- SSDEEP 49152:8gDlykaqe0Pvmypvtmkd5Vd1uopk6lnc0dg20kBdDp/0n:BZGy3Ftukl6cB8n
- TLSH
  T141067D46B7A440F9C1BBC138C6979717EBB0781423249BDB01509669AF73FE26E3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/dxgi.dll
- Size 3.1MB
- SHA256 bd0e3ebdcf7d0b5ec36c661d7f29d5b63952c09854c203ad7c52293e3b729e2b
- MD5 af4612f6932923202338d099338afc8d
- SHA1 d43f532fd5546f350f6b1e638c36c3c1a15712f5
- SHA512 38d8cb69cf7b6fba12d3459c4d5429d12e8ba569f5ec572c88a2c7a633e7fff866c987516701f5acc17eead4bae5ccfd083a8439068ab25b9ae0a07b251b6c9d
- SSDEEP 49152:8OjXVbjXqWMiWeUIfMbwND8N5XLsW8EtndIefv6a5W:njbwIfakTaTM
- TLSH
  T1D7E57C2A769841A9E07BD03CC9475A47E7F6740947308BDB1398026E2F7BBE14E7EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/enbadaptation.fx
- Size 7KB
- SHA256 c4c92e443e3e028f5a6e54718dc1044360e5af782f31c19d5e457db3db3f1d5c
- MD5 69031b246768116f89bd88174180a13e
- SHA1 b1d7b8bf1516a60e6157bbaa0d0841a4bd076175
- SHA512 c7b6ceb6b88a384c1fcd55128e69324cdab8e9ddc5531e550fb707089bd02c0d412e7dd4311276f07a5c6a04b646f39a53fb9ac8b59a687f9af1b8558c0a5b99
- SSDEEP 192:BAY+MfZIff9TagkfBDb3NeHoScQWzGhckhT:GY+Mfy+Jx0hZhT
- TLSH
  T121F196A56A6B817B4F4761178D3119BB57B8C4C0BBA986B6602C821C57C3C28D73D3CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/enbbloom.fx
- Size 10KB
- SHA256 1ce526231a51005551330a15044ab8c321f8e6f064ef4886226640f282f198ac
- MD5 b2e5b0ec9a2ca55088767fd9fdf7ad97
- SHA1 77042b32b4bc887bf279e5366acf5a0bf49b9206
- SHA512 c55eec0cc81a2544e263d3f410c4dd0bf027f7bdcef9553cf078725ae4b62783ec5782f1a7dcebfdbe99aaeb7c407b5e2eca3027c0870bd9a0d249aadd4c5fe7
- SSDEEP 192:omyAY+MfZHITB7s7C2L68RQfSxmizgHjt5AYDqD0EzYsXIaLIeBT+7BEEiBAEoki:omxY+MfZI2tgA1LIa+KU/CVpo
- TLSH
  T13432C65BE65BA2B61F439222E6710E07D3A4C0C05BDFC7B6B86C815C2BD3426867834B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral27 behavioral28
- Target
  Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/enbeffect.fx
- Size 19KB
- SHA256 8b3148e1423c64ce99c5126c5229620733ed1e951a8ccdea2bb47f3ab78ff861
- MD5 d67e6f8df11ba42f4369a214d1bcce45
- SHA1 4e1f14ce588f3312280dc4b64d90258614c95bce
- SHA512 b77e6a6053ba1a0485679f632afa6bcee68451bb0f23040758a561cd61466f37875cf3f57e02c1b8c7a5bcefbc581f88e1cf939744b5acacc9c9dba5f0c1afee
- SSDEEP 192:UXYmwAY+MfZIOY3f5XhOo61osxMAwqPfXGXIA+yXjZrm0XRwzMJGMnMJGMThMJGl:UomLY+MfIR2+YA+EjZrW8UiQxqlMP836
- TLSH
  T1C592630AD26F44AB0D8F983E993BC11662F4D4C16B69D3B9B06E50381C87674463BFDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  Awesomekills_Graphics_12.23/Installing/5. Copy all files from this folder to your GTAV folder/enbeffectpostpass.fx
- Size 9KB
- SHA256 c4696870c1aa20f51a21fa40536198ae75b2620e73d4a4f960f27d58a964c0de
- MD5 d374df601fd4f1d7096b54105bd916a9
- SHA1 011cd580791ab72a19942bcc0c756a07aa33ece4
- SHA512 8d46601786613be3cf80e40955b93cd26d8e7d29d118624c6cec612a7bd5e70a0912460716fd66a69fef4efbc3cba8d5ab39e227f0a5e5f2e9be3d18f9e15660
- SSDEEP 192:qmGrnJnyAY+MfZGnB7Oag1nEfJ0ESHuXz0ES7V90re0JcIS5sa8xc2w3z4BdsBiX:qmGrnJnxY+Mf4K52q8xc2w3WlLeS
- TLSH
  T1FC22C61AA49B61B70ED742259D338E1387E4C4C04FEAC7F1F49D52682AD7826D9783CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32