da2da0d778cc7297f938919a4f303fee65a594a818702f532eccbaa4fb3538be

General

Target
[Ryuugames] RY-RJ01490381.rar
Size 653.6MB
Sample260603-e8vq4aay7p
SHA256 da2da0d778cc7297f938919a4f303fee65a594a818702f532eccbaa4fb3538be
MD5 ad532432f9d46822545115b382581dea
SHA1 2b24a656bd06f95850faf2cef02d5b331343a286
SHA512 257491b1c95549c50da6c8401b3b842f3a2df67d01246e0a24638f4a7e67cd33516e643d3612d4fbff0416c9d472b81b1e0f8f6b1eb7763ca5fb1917904625c1
SSDEEP 12582912:/K03XOrSEhrdaghJ9jegs/F8G7L8PFdCZ3a5Gs11WBfru5p:SDhrdZJlevcdCZHG0lS5p
TLSH
T10C69330D16F67EA8EDD2B4C7A92D2548B4E30782D488DD10DF14996FF67402FD8DB8A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  ネトカノ！/Game.exe
- Size 2.0MB
- SHA256 b2fe0f8cd0adb1d221d662e5f33b36b8245413178d8986b0d6dd3c42fc6d78de
- MD5 f760c2f862cf7d98b570bae41364e05d
- SHA1 e318735c83ca25fd4e7509eddb6fc0f2df90fc2c
- SHA512 6e759cd0b0f038e1c1158d5b58dcb5cc5c90e3ef85124010b55ec5744bc66b0cc74441ccb552402882af5d5f3ba4684c5e33d70889e0d2a930b3e0438c95a65d
- SSDEEP 49152:uMKeLJ95d90stngnOIoYcGfXZRcu+CsT1mTvj:G+sSuJj
- TLSH
  T14DA56A07A65504EAD199C078CF06D135EB71BC494BF5A5EF3190ABDA2E37AE03B39B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence privilege_escalation
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  ネトカノ！/nw.dll
- Size 136.6MB
- SHA256 dbb533037434e1c4fef54a1e3d01b3499f652beb727864ac35eff33a03dd2a40
- MD5 ada564ba29dbf01c995f71c027939855
- SHA1 9bf9db4792d88038c986597814a16145c064464b
- SHA512 0ca301bb674d1340d152f9396b03bebe46ee362a7acf6adeed28ca7d96245053150a85ad787d4962b19b401232c6c8afad3328db3e7eeec4bc1aaade873d8bc7
- SSDEEP 1572864:Miv6Wk2oq21630ONenQRVo0UFZAsAim4fv64CHxd7yIqIc5ZG:bos/Gnz
- TLSH
  T18F687B03E29610E9E05CD2B897178A36EEB6BC854735B6DF16911B212F67FE02B3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  ネトカノ！/nw_elf.dll
- Size 880KB
- SHA256 aefb146d3578d50fde8fb889e90ee9afc904f41cf3e7c87851dc4e53e73e3d0c
- MD5 295b3bef2bf9467c570d247105f5423e
- SHA1 82f2a6a9a97071caecd26a03810d032b602a0bc0
- SHA512 a2f798778da840be5df5dd85d7a51949b726bf9aa1f9deb8b96586ac43dbd5310530a19e3e7087daa3296f5f539888d9b2e39e525b5dcad76f33570ba5db2a1e
- SSDEEP 12288:ujG/4x69rfgwgbrzz6wcA9ZxTTtLNK7ciNeR5+nJoWBS:9gxSfgwgHzn9ZF3K7cilzS
- TLSH
  T182157D17B7A900B9D06AC178CB574532EAB1B8470B64BAEF03D092693E77BE05B3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6