c2627e4cfb2704a1e843ced77c252552787f530b18b080939746a4676a50bcae

Sharing

Copy URL Twitter E-mail

General

Target
植物娘大战僵尸电脑版1.1.0(1).exe
Size 795.0MB
Sample260604-krlpracw7k
SHA256 c2627e4cfb2704a1e843ced77c252552787f530b18b080939746a4676a50bcae
MD5 e1c235d9798c6b8f656946c6cc30d1e7
SHA1 136d5e63a544328a4af361655e3bde8b7d54c90d
SHA512 9e05e98153f01a70a9e6ac65e85a495f4de65b368627d73eb5a73ef931fd65dbc8e49dd6af6cab92b67dea6bde11aeb1628c83dcd59b15ef4c7069688245e8ea
SSDEEP 25165824:WvI6eX6nEK14S6N4recyPkOouzG6Rs7CZHilmrry9B1u:gIbKEK143AecyPkOoqGGs6HiyrL
TLSH
T198893390A186ABAFE12B343CE435A84577DC17BB788175E03194A3EC16EBF95C270C79
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  植物娘大战僵尸电脑版1.1.0(1).exe
- Size 795.0MB
- SHA256 c2627e4cfb2704a1e843ced77c252552787f530b18b080939746a4676a50bcae
- MD5 e1c235d9798c6b8f656946c6cc30d1e7
- SHA1 136d5e63a544328a4af361655e3bde8b7d54c90d
- SHA512 9e05e98153f01a70a9e6ac65e85a495f4de65b368627d73eb5a73ef931fd65dbc8e49dd6af6cab92b67dea6bde11aeb1628c83dcd59b15ef4c7069688245e8ea
- SSDEEP 25165824:WvI6eX6nEK14S6N4recyPkOouzG6Rs7CZHilmrry9B1u:gIbKEK143AecyPkOoqGGs6HiyrL
- TLSH
  T198893390A186ABAFE12B343CE435A84577DC17BB788175E03194A3EC16EBF95C270C79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 245597797e73ddac0b2408a6736e883461c5030dfcaf2f2a6c08ba04b6989c34
- MD5 5e422c6ab294bb8cff15996622c8ccce
- SHA1 b63a4c61d8843f56058d9706167fa9b26e422f42
- SHA512 edae552c2af7a64fa7c1fe2b43c9f15585c0cffd4c652977333525a2dafaca70b9aaee589d69cb2efd358482e14f4ea95f444fd338b58c418d404b585168b1c5
- SSDEEP 192:f8TiS2p6uXjL1ZRcFsMaRqllbYIlcXvh0NqesZ6r6OMc5eWL:KiHXjpPcFsMvlls/SBZr6Ob5NL
- TLSH
  T154425C426BB25AF1FA25073625B67F170B3CAE5803D44A9B8FE79444E8B01E710367D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  lib/encodings/cp037.py
- Size 13KB
- SHA256 fa3ff4b328c72315ec622cd62feac21189a3c85bcc675552d0ec46677f16a42c
- MD5 a28de4284dfaefec5cf40ee279c388f3
- SHA1 5eef5925ac2c77227a03067e17808b5f10c41018
- SHA512 8fd7fd3c0a099a5851e9a06b10d6b44f29d4620426a04ae008eb484642c99440571d1c2c52966d972c2c91681ebd1c9bf524b99582d48e707719d118f4cd004a
- SSDEEP 192:HHhsuOTDvR6UZkPS9BC4KNVFIhRNvcE8bV2H2QB:KT7C4PRcE8bgWQB
- TLSH
  T1965299702A93183D337A8B3BDEDB5AD0E16541C308B5AE9E780FD2C55FF46569900A3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  lib/encodings/cp1006.py
- Size 13KB
- SHA256 1fdcd59d3277c3768de74dd8ce4f5f8beea569c00cbaa3a20714500f3508b8cb
- MD5 8e2d801694a19b3a569f383708a5f7cb
- SHA1 b1803cf5ff75a77bda42ced7c15e74861273b713
- SHA512 8dc24dbdc779c89cfa22e28d8175c2a32562ea1f9c070333565a7a8449deb5c8bf65a886e7a5360ef540e321b3a685530b1e53ae4638232b297450acec68b1e8
- SSDEEP 192:0HhsuOTDvRbUrXPLouhIAs2+ijL5YvwKpVMY4Uq:RTZuhIAlr4C
- TLSH
  T13E5210722D67083CB375973BDECBA9D0D28545D305F1669A342E84DA8FF2310EE6193A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  lib/encodings/cp1026.py
- Size 13KB
- SHA256 8c1d85be11a3a0a5e6a40101c68548480d0378df0414e3c16d9cbe9f923c028e
- MD5 f453ed24a766166472b48010c7712629
- SHA1 0f269160e99fa1acbc12b882aa9ed1976488b11e
- SHA512 420cd9363a0d72fca7b22300ce4ac0868320d945e0fce4c1f09659d4601168f96993d640bea0fbf9112948d17de08a41f674df5e65d34859b9bfb46d89d120d4
- SSDEEP 192:RHhsuOTDvR1UZkPS9Dc24sOtV5I8pgYtxj5u1a:ETcc24HXpgY/loa
- TLSH
  T100529A702A93283D337A8B3BDEDB5AD0D16541C308B5AE9E780FD2C55FF46169910A3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  lib/encodings/cp1125.py
- Size 34KB
- SHA256 5286e2162d53a6b189d83b242bc04ab59a48bbbc4ecf094c11bc1542c0604279
- MD5 127b6641ae648ff494cd9285be4c61cc
- SHA1 61464aa653d2aee959ee90809bdbf98075b1736e
- SHA512 335ac036d6d88270e944ff01d3dcf1b1f1dbe38a75c534836e839deb474e776eeab76c08aa4bf150cea33594aafab33efd593246f958956a4894c2e1819b4c96
- SSDEEP 192:WLsuYDvRH0CnFdiaYzF0wrE0PXRN/h4wcuSMXY3uD8HtIMpWx449jBRWJn4bkVdO:r6MBkjh4wVXYrx0HWJn4AVd0kUMy
- TLSH
  T141F278642280046DB33A8B336D7FCDE9D05705C305E0AE5D702EE9E1DFBA56CE8549AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  lib/encodings/cp1140.py
- Size 13KB
- SHA256 0451016f6a4b7013dea1ba35925412fbad743ddf46e857be2c272f2a2cb8d403
- MD5 c2f88ab320d40c3b1b6394f57a04af81
- SHA1 a48b25abe903efa9c2b073783087ed06f23bca0f
- SHA512 19732a5b121339bd14bd0c7285fd7ee696e7432a28a7b140c92b6206e69011f2fce50b8b52bcae7c14db31444ec9808f27ce07ea4390434ecfbda096a5e022c6
- SSDEEP 192:sHhsuOTDvRiUZkPS9BC4KNVFIhRrvcE8bV2H2QB:ZTvC4PDcE8bgWQB
- TLSH
  T1915299702A93183D337A8B3BDEDB5AD0E16541C308B5AE9E780FD2C55FF46569900A3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  lib/encodings/cp1250.py
- Size 13KB
- SHA256 3ffea0100abef80f916bc2920b296b2eddd6ecb06fb3ca07549f95fc92ca1f11
- MD5 164a9c1a625524fcb480dbe56076d738
- SHA1 c21a1a50bbac7ef8d1cc3a2e093fe5ebdbbd35c4
- SHA512 ab0160965cced9e7bf45d6a64c34a0ac363b4cf5d2447c303397db79c5f04ed861d9d0d5ff833c0685029e702534defe3ebb5ab5b05c5a5842050221cdc91a5b
- SSDEEP 192:mHhsuOTDvR+UrXPLouhIAs2+icI2DCYCTG3RKjV:DTsuhIAlquq4V
- TLSH
  T16352D07029835C3C737A8B3BCEEB56D4D16541C30CB5AA9E381F92C55FF26269A00A37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  lib/encodings/cp1251.py
- Size 13KB
- SHA256 46fa091d1822434e8d0af7a92439607018872598fcde44026f413dd973f14c98
- MD5 e81de8e87bab1deff99125c66229f26e
- SHA1 5800d009e3d4c428b7303532aad20ba3bbbe8011
- SHA512 b14bfe809cf20e5fd82cf5e435983dc5feaa4e5de19d16aa4bed7fd0cbfd18a429dd0129aa6058053709ce230ce38224f7ce15cfbcd75a803b04abc85fa9440b
- SSDEEP 192:YHhsuOTDvRBUrXPLouhIAs2+iEI0DCYnWEDp+/:lTPuhIAlYrWEo/
- TLSH
  T10252C2742A82583CB3369B37EDEF9AE8E15901C309B4AB5A741FC2D14FF1265E804977
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  lib/encodings/cp1252.py
- Size 13KB
- SHA256 7acb7b80c29d9ffda0fe79540509439537216df3a259973d54e1fb23c34e7519
- MD5 52084150c6d8fc16c8956388cdbe0868
- SHA1 368f060285ea704a9dc552f2fc88f7338e8017f2
- SHA512 77e7921f48c9a361a67bae80b9eec4790b8df51e6aff5c13704035a2a7f33316f119478ac526c2fdebb9ef30c0d7898aea878e3dba65f386d6e2c67fe61845b4
- SSDEEP 192:OHhsuOTDvR8UrXPLouhIAs2+i/I1DCYkZt6VN6ATdo56G:bTeuhIAlcoZt6to
- TLSH
  T13152CC7029931838737A8B3BDEDB5AD4D16541C308B5AE9E781FC2C55FF162AD900A3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  lib/encodings/cp1253.py
- Size 13KB
- SHA256 e0b0afbd19db367c34c505f99a2fccafc6bae3dfd4e316f86375179dcfc60a28
- MD5 e86052cd641a07aa72686984073af47e
- SHA1 d9caa17b52a5f48087f587b2996388da799955bf
- SHA512 7f87b2577902646c394fcc2d7a5407b05e23ac3cd07e7749cedc9898f3e357067729f586011862d9fc8604db13d0921b060471c3a52b6c17a0f7c5694dda7788
- SSDEEP 192:EHhsuOTDvRPUrXPLouhIAs2+i/I+DCYdlRfA21XHHjfvK8uHZf:hTBuhIAlvRlNr1XO8Ax
- TLSH
  T11052F1702983293CBBB68B37DEEB55E4D21901C309F4AB5A741FD1E15FF2626D810A36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  lib/encodings/cp1254.py
- Size 13KB
- SHA256 0986acd9a25fe91c4720c912322253ad105ab951a2d0d364cf0e522e6e52c174
- MD5 490756413a61fc0954efa491244cd487
- SHA1 849ec325801a2e2cc784a54590482593ff89a5a1
- SHA512 bcdc7cb6c94600d15f9a3bfa51bdc0d289c997ac40ec4da1cb0d91b6bfe875968b6c2834fc03d306ee6a3d022955c1c3435864491af8548e82acc60e2a215601
- SSDEEP 192:OHhsuOTDvRiUrXPLouhIAs2+i/IfDCYuZt6B5TdjN:bTQuhIAlK6Zt69x
- TLSH
  T11D52DE7029932838737A8B3BDEDB5AD4D16541C308B4AE9E781FD2C55FF1626D900A3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  lib/encodings/cp1255.py
- Size 12KB
- SHA256 c039ad62ee73102915d989cf390f76896c335ca8dbcdd4ca27d5441f76e081be
- MD5 8b8e1cc22bef6ede6e44c4dd2a287ff6
- SHA1 304930955df0499cbfdf90bfd9bb9a01d0059b23
- SHA512 fa779a6e599816aaaa84c1fb715217de2341399d47e70a440a06e312ba69780e14cb3014d048c7005f5a9025b3ab8d508da052bfd678ad4e269f10cb1b35ae66
- SSDEEP 192:IHhsuOTDvRVUrXPLouhIAs2+i/IRDCYLSC51N7jG6ZZPHxvTh:VTTuhIAlQ3Sm7b
- TLSH
  T1E64234701D57187CBB359B37DDEE99A0D22A90C308F89A9E781EC1D25FF2265D90063B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  lib/encodings/cp1256.py
- Size 12KB
- SHA256 24a69e11902cc4054280ec2de38ee836d0be22eabdb9cdc56d9a7b63c8cddb06
- MD5 2ccbf9b374ce98453955dad9848c90ff
- SHA1 0e7b99d406e72af59f80405b9676988cd6881c40
- SHA512 4a97c524f951de4cf08f2ef86f9aa9f4f421ba3327d07e0b883958057e6204a410f42e82e0c7dbbac8f3252065f96a4255a820753bd6ebe80254e1afe160fd3f
- SSDEEP 192:2HhsuOTDvRgUrXPLouhIAs2+i75IiPEFPDCYljorsWCdxeiu5it2uncgYejC:TTiuhIAl4P6rsEr
- TLSH
  T18C42FF722D43183C73768B37CDEAAAE0D19944D318F0AAAA791F81C55FF1321E91063B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral27 behavioral28
- Target
  lib/encodings/cp1257.py
- Size 13KB
- SHA256 902262c0640fc0f21cf85a86456dc33d43e51b07e6c961526bf7f7ed4ce2ab8d
- MD5 544a8ace12064e96c3e6a7db436f9f09
- SHA1 adade6dc415731bcc23386df031ca5b003d09881
- SHA512 4830a946da25cbecdd1aeb5df055fd1961ef8e32936406889c39ee4f9acd6a15605dca448aa73df0a4be721bab6b04c03d02524918fcbb1499c4e7b60863bce2
- SSDEEP 192:8HhsuOTDvRzUrXPLouhIAs2+icIkDCYwoe1X:pTluhIAlI0oet
- TLSH
  T18552EF702993583CB37A8B3BCEEB56D4D26541C30CB5AA9E381F92C55FF1626D900A37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  lib/encodings/cp1258.py
- Size 13KB
- SHA256 a9e1e891dd1f28dea5abb5819aee1477156d288733eb2342f0696f1e5dd0a11d
- MD5 11328d7e1cd433053c29bec6c739fb67
- SHA1 fd2d141516eef65b903f552ac68ce30ae45a40a8
- SHA512 e643affbc683b99169fdb236184e25ddac58803fb11799bd56be44376953dd16f5e4c982cdfca8d8f79d0b142e294abab72f25202f012f4149371b20f408a3e0
- SSDEEP 192:2HhsuOTDvRmUrXPLouhIAs2+i/IZDCYAZtTBd0HXIGPf:TTEuhIAlIMZtlJS
- TLSH
  T15D52EE7029931838737A8B3BDEEB5AD4D16541C308B5AE8E781FD2C15FF1666D900A3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32