b22c57c392f6b033f525d5153c7c117171802cf22249e2e949adbb213c9aac4f

Sharing

Copy URL Twitter E-mail

General

Target
Night-Attack-On-Little-Sis-Sleeptime-Fun-.zip
Size 26.3MB
Sample260601-wl38dsct6v
SHA256 b22c57c392f6b033f525d5153c7c117171802cf22249e2e949adbb213c9aac4f
MD5 823a11151e0d540e0f0f74ae2302b292
SHA1 fd53bff864205d61253e71ef04f027140362b5db
SHA512 581de753726814799d27eb23bfae49af97b59b9ebea4dcf111ff9f3a8fa43de7a1652cf5a961e5776849e30de49ecde573c093ddce7fd6c8f2a3d75117daec34
SSDEEP 786432:iBbyQtTZynF16vYrTq9oFnBf3MjRoUNkk5T1G:iRygZkFEyTq+BUj2g/G
TLSH
T1C6573335E451C996FE88717113C9F919E330B4EB48152AC7EB54B1132FCF2AAAB8B05D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  NAoLS v1.13/Night Attack on Little Sis!.exe
- Size 16.8MB
- SHA256 947d031b0bd6c38a7fbe59279f4bcbe901acccc0ffab15301941f390fd01a008
- MD5 80003d8c42c8bd845fa000d0e0d651a1
- SHA1 02c289859dcb7336e494d23680f5f05d56988db0
- SHA512 331cf970bac65044cea68ffbb6fc5506d8041f04292658ebddffae2515179e4ad1e18428f861d021ba9ea62c39e5b3160b0427450ecc4195269996e989b00113
- SSDEEP 393216:+8lP81A0DPZyg0LfM+xi+Blq2TyKkDNjLpUrmrK/7TZ8kj6k5+t+tQJQYDmp+54w:esLImYWo4VVbKRr7
- TLSH
  T1EB079D61A818C170E59195B6D6BD3ABF59384D29032C41D377E41888EE742E37EFB2B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  NAoLS v1.13/Night Attack on Little Sis!_Data/Managed/Assembly-CSharp.dll
- Size 491KB
- SHA256 83ea0fb8bb8b19f031819abf07dfc8dbe2b71a5c43b7411f69a5a18896a2c2e8
- MD5 8b04397ebc75c05d8a9e4c42e245a050
- SHA1 0c793fbb13e9ee7aeda58786c169c61efccbc58f
- SHA512 ca02d01238c6d4a015d2e9295e1b252c6d5c922792e985cb44f55e146aa71ecde58fa0cbfc7b40aafb3d379376867be13e3aa6b5741f7db66c0424c215ec9dec
- SSDEEP 6144:ZYLzjGGfePu7Q7q1oHT9SPTS0mpeeq2eI1DRlyzV+OD7YfFts5Z:ZYLzjG0ePu075uApx5LIzVFDkC
- TLSH
  T1F2B44A6567E4ED3BD16E03FA54A90C0AA774E546F58BFBDF0E8490E82883B904D0176F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  NAoLS v1.13/Night Attack on Little Sis!_Data/Managed/Mono.Security.dll
- Size 286KB
- SHA256 a1ac533baaf7de1dae53cf5b465aeca28a7f20bdfc79e5a0a39437dd728c231f
- MD5 985d5ff3a3ede247c561c0ea4cedd342
- SHA1 2dcf01438cd9cf9d07b3375c4e754262e9693256
- SHA512 162b15799b95d49765bf957f69ec98ccfeaf0ec0df8d90b1881b61b8c795d33c9c0e91be02dd18850e4183dd4b4a5c28f05ca416d2ce6ff27c2f556183b43a20
- SSDEEP 6144:/ytgJ7SzJWhaeQTVJRj02oo4gKnwxEkmJ7a:NB5ceQ502o3tu
- TLSH
  T11E5439086BE8DB67F2BE63B8D0F05415CBF8A156A19FFF5E1C9610E818037519A01B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  NAoLS v1.13/Night Attack on Little Sis!_Data/Managed/System.Core.dll
- Size 259KB
- SHA256 0dfa4f42e6a79dda98a21fbc9aeeaddb19d0e405e5a8ebad833ade6cb94fcfb4
- MD5 0074de37f5c0f201a3262ef989b48088
- SHA1 6aa6ddf88f4ce8ce87164d1af2b65f99b668bc02
- SHA512 956b65b1d4eda0da181f81f53523b7b36dd92b40327fc84239f90d630397e933c9b3c899fc8b9b8648a572f22ce6e7be91205c931274c8ead593f2ab7bbd7a1f
- SSDEEP 3072:mpfu6kH59QZKcxWnXnj+jC9oqZlz7OFrM5EimTyLABkJnNuaENAbGCkbwjuOIV3H:mpmPQIcxWnXnj+WWgB4yLHnAxJPV3I
- TLSH
  T160443B64A7DD8112E7FE6BB598B014050BB0B4E2B4B7E38E19D894E49D47741FF023AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  NAoLS v1.13/Night Attack on Little Sis!_Data/Managed/System.dll
- Size 1.0MB
- SHA256 d30ce8b558bcd85635679254d46af335a05ed77653e8e432cab67fd29a0ce46b
- MD5 351938626e7eea709bb7908ac01c011c
- SHA1 2a0ee178bc50c0df35177833c18ac106893e5559
- SHA512 8dd1b53b03f92f700fc05499ff95d64ec8ca09e061b67a711d1d13083b536e75737126b7e30abfa0304ae16d6349bb5672bd944b952a5d3d1fbafcffbaf70eaa
- SSDEEP 24576:nT0CTFqquDtZYz3l2rwlEbjpICyE2H/ObLwUVJG8tAFPvDS2:nTEFxVJG8tAFPvD
- TLSH
  T1AD354B1077E4CB2BE1AE27BAB07110129BF4E145F353E7AF1598A5A82C93B105D463FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  NAoLS v1.13/Night Attack on Little Sis!_Data/Managed/UnityEngine.Networking.dll
- Size 230KB
- SHA256 8cdbaad4180acd725b8dcb9a01bd5cf1ed8d12522ebad3e93f65584a47ab7491
- MD5 144202bc0adf0f3b9fd9208dcf5b257c
- SHA1 d488d3ce02ce6a504df64809923277e3c945710d
- SHA512 664cd8ffdda5d61b5edf58d4fc8cd32824831ceaa68c69e1391b663eb893ce109d97b27d021c9572e02b95958f7f5c572f57609aae4680705d3388988b3f43ba
- SSDEEP 6144:pIparQ3axIePerlz71b8nTl4xHrL/rGg5dVRa:pMmQKeBFBdVR
- TLSH
  T16F34E72017F8C92AF6FE2BB4A4F590044B71BD02A56BE7DD158020EE1D62794CA563FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  NAoLS v1.13/Night Attack on Little Sis!_Data/Managed/UnityEngine.UI.dll
- Size 216KB
- SHA256 2fc9107919554d8d57355aee13fbe5b675cc54c0d46ef6f8be2d836bcc2350d6
- MD5 28a75398337e6b34618454df4c3d87f9
- SHA1 e97b97c401295bc71385c4c270ea4587aad533dd
- SHA512 9f92a96bc4d86814cdbda6d0e5888ecec11cb1f6ac1139a99bb5e7c6745b50318b0fc080823ac37ddf4222e40b48b4afbeedc7d117f8f11017d7c809de66257f
- SSDEEP 6144:X88pTe/gIcPxppQhrsceEHQMn507oiAFMuep1U:X88pTe/gjppQdscV
- TLSH
  T147242B2166A9CA3BD79F077ED4A45604C7B08246F5CEFBA94CC0A5ED1C43351AA073AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  NAoLS v1.13/Night Attack on Little Sis!_Data/Managed/UnityEngine.dll
- Size 1.1MB
- SHA256 1b186a4d9c9c318e074af6b5eae3a1d879007838231a9630b772d2763c1fe88d
- MD5 154dc485d9eb2175628bcb4f6c774673
- SHA1 428283164c0911440ca98b826087b8c9eccf9ebe
- SHA512 d0ce65afccb3124dac3dd7df601bf62ab64ec78345fdd21eb3262f80cecf349c07313332b276bfaa5b1a5e7ee9af55639ab391772e7dafff2e6b8b221a548037
- SSDEEP 12288:pku2jvapn+JDZMt0ExJa8hIzj3ugVHFrFwdtYbaNRmmIj6qMNMVSrCy2V5v6hV:Su2jvapn+bMt0Ex0ggVlrF6q0rCy2V5
- TLSH
  T10F3507543BB59DBAD45E8B35F0B0112CA2F0E5856303EF8B2675563C2F83B056D22ADB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  NAoLS v1.13/Night Attack on Little Sis!_Data/Managed/mscorlib.dll
- Size 2.4MB
- SHA256 77df3e16f2bb262efb77abee61993e3965e2ff1de38f0e6fb184d6b6de06b5f0
- MD5 03087aa2f4928f677bc54fb963fb0b6e
- SHA1 6d9a5e235afd932b6a6f98a5fd6445d6d1daf5ac
- SHA512 a32e510120ec4a13341989178f31ea44ccd2762935c9061748f4f1252fcc357ff9eb6f64635f7b1f73f29c9d909cae8b058f9401c8092adbfd5e22279f6867da
- SSDEEP 24576:7yYCFVJT+aB1hv96ShOTbghP6BLMBmznaGG+lyp9XpURpZM/Y+5bzBX:7ij7EShsbgGRn1iXpURpZMg+53
- TLSH
  T138C55A506BF5CA2BE67AA775E8B101141BF4F846F3A3E30F361912B80C637449C56B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  NAoLS v1.13/Night Attack on Little Sis!_Data/Mono/etc/mono/1.0/DefaultWsdlHelpGenerator.aspx
- Size 56KB
- SHA256 d87d5196b2ae2abf4e673315e1fd22c3a44df80192f23e89b78108579c287524
- MD5 66fed2411c14a0fc8ce4c593ef601bfb
- SHA1 4680a34aae1193f1e4a6aac1a5dd3c307de257fb
- SHA512 331874a9956c87db0646e4d21937a88009804a59fdf5f5882ea5b1dfb7dd7ef17724e09877d98f52e7327bbf38a46dde0c54d5c85f1e860b88322bdfad64679d
- SSDEEP 768:M28utHkOFpMgMwP9h5Ij7khsp/6JtEZwMxVtkUI353cXyEyk3VbNb1gNuoT1y:ZDF6CdsCOZwMx3k5JYyklhxgRw
- TLSH
  T17743C4A0EF5C8D36499A52D9F88140CCB9BDC43291199CF3FCCDA12AF09CD6DA274766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  NAoLS v1.13/Night Attack on Little Sis!_Data/Mono/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 ae044cd9cc2c7c42f8864195125ab440472d657e5f0d55e131f7890bd45c518a
- MD5 3b3452c399f27a24ea5a589c7bfe750b
- SHA1 b06cb1d09ad3bbdf1d8214c910e3da2a228d113c
- SHA512 41c099350159e942be8bc04c8f59c7fb0fd4bd99db46f1c0158f0fa053c08ae0c73e9d169f6816b77376283cce5beafdcfe5d3d5e3b98e8b358d67c34b954a04
- SSDEEP 768:6CEPutHjWpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/q6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T19F43D4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  NAoLS v1.13/Night Attack on Little Sis!_Data/Mono/mono.dll
- Size 2.0MB
- SHA256 502f09b07ef97fbc0dd7f4a0e8df910f4f65435986aef1d4e64a7d3ff9b47b6f
- MD5 c031ce7429c7f9095c6e702dc791978b
- SHA1 ee0dbf3a2a319c93db040da4bb89a72f4c140990
- SHA512 7c16b2198e2e45e5369d68587d711b64aaf43e78d1edfa4c228a25dd2f82750c9f6087cf16b18ea9d12e95435ca9d5730c16c4149c5d126e0f83b09b0e8be8db
- SSDEEP 49152:hUKV0Me80JHS33iAbfzYPaojVxt0xjYohTuMsjWZreuJa1x:qjYniAYjDBR7umx
- TLSH
  T1DFA56B51E542D332C082017D4465572A1ABB6C62FF3698D7668CB4CFE9B02F0A69B37F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24