23d5dcaa0c75fdd8d7325cbad990665cdebdd8896da236bb95ca7b36e08a5621 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
KenshiMP-Install.zip
Size 721KB
Sample260608-zbjmsaey71
SHA256 23d5dcaa0c75fdd8d7325cbad990665cdebdd8896da236bb95ca7b36e08a5621
MD5 4f40bbba949c6a229046dce21f626143
SHA1 e7a4da25d565c50de630941ec62b2f3fac0dc566
SHA512 836704c020e2ed7cf9dfdffd1b762007da4f1758f69c5a1c96807e79f129d481ae0907744a904a3e8c16b1da581a472b1064b9cf213b215dd2efa30eaf5413c9
SSDEEP 12288:1yNQXF3VY8Rb1Cai3muDOQqyYkprjR7Qs+2suM9H4clR1SJ6YatYphSHQ1QHb2C+:1yNQXF3VY8x1Cai3mAOQqejqKlM9H4Ki
TLSH
T199F43339A69DB134E9372A7CEA9B162FAF2A1C6C50D59035ACF44F0067C1C5EC669C07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

adware discovery spyware

Malware Config

Targets

- Target
  KenshiMP-Install.zip
- Size 721KB
- SHA256 23d5dcaa0c75fdd8d7325cbad990665cdebdd8896da236bb95ca7b36e08a5621
- MD5 4f40bbba949c6a229046dce21f626143
- SHA1 e7a4da25d565c50de630941ec62b2f3fac0dc566
- SHA512 836704c020e2ed7cf9dfdffd1b762007da4f1758f69c5a1c96807e79f129d481ae0907744a904a3e8c16b1da581a472b1064b9cf213b215dd2efa30eaf5413c9
- SSDEEP 12288:1yNQXF3VY8Rb1Cai3muDOQqyYkprjR7Qs+2suM9H4clR1SJ6YatYphSHQ1QHb2C+:1yNQXF3VY8x1Cai3mAOQqejqKlM9H4Ki
- TLSH
  T199F43339A69DB134E9372A7CEA9B162FAF2A1C6C50D59035ACF44F0067C1C5EC669C07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  client\KenshiMP.Core.dll
- Size 1.1MB
- SHA256 1be43f3a78417c7f14410cbf31d4fc5229465602b3242006e7a908708fd7eb7e
- MD5 be2b55ef6da526a32559135c263822e7
- SHA1 ab70702dc8c4e8711872929008c7e00313392e4b
- SHA512 c54e1f589d1e6374b354612227ea5502e61b8613bc93d7eeb80405ab1fc054befe81a2da3bc516eccf9d39b4c26c4a239fb3753daae273be25f74085894786ee
- SSDEEP 24576:QrFIT+jd/RawI1SW6k38vtR8o6SaWBOJCX:Q3hAsL38oVqJ
- TLSH
  T13E456C26A25941BCD0BEC1BDCA579957FB71384A033469EF07E04A912F677E09B7E302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  client\KenshiMP.Injector.exe
- Size 64KB
- SHA256 c9bc30a3469ef1f8571dd5971035a1d8b18fbcffcdbee8082058e884f8234553
- MD5 12a97b48c403d2391f3c657872156b18
- SHA1 ae4dc17ce0f3ab5966789493bd8a146e68f916b2
- SHA512 0b089511db0d2b9407cc6e4fe776f501ad981a3f258ad6bf07b3e82c11abe0a0fbde6cec49ea122967cb2f1cda01ee0415e12bd1254d824bbb19f17226a1bccb
- SSDEEP 768:y4IIVG+EzKFr7wwocAfOlveSfZz0fxOHXNzKgEnxhhgUCAii9ZNYf:y4IIVG+EzKOwocAf+fZz0fxOHls5iGU
- TLSH
  T1B5534C168B59506ED3AADE74D6534902DF737C828BA0B2CF97905DD10E25BD0EF3A702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  client\Kenshi_MainMenu.layout
- Size 4KB
- SHA256 67e292eb9d92948eb8b8bfc939819e9ef845226f1c4a0ad08b371341d7afe9eb
- MD5 827260f76ee49635691a51f063b0e7a2
- SHA1 93161934710d5c1fb2eb27eb49fa9fb6999e75c9
- SHA512 940898744e5f35d5d339837aa08360bb33694aec59dc4722d3756a1784fbc43aa5db7e5679c71c6a465a32a43e46d89e3b79f609ebf4e5772033ad509c92953a
- SSDEEP 96:gY8vJKi8OdQu6tmNa3cCw6E9LrWZYWOzHwB04VX:d8vJL8OibcEsCwf9LiZszQBXVX
- TLSH
  T1709169564AD09C1192B257681F652A82C96CD3DF903C14AC7A8FA7A74FF7DC04423BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  client\Kenshi_MultiplayerHUD.layout
- Size 18KB
- SHA256 ff13d49b0d3888243756eee4ce70e89658a2ca05e345d0cd6599def4c9b23a77
- MD5 1dcba7c79d025b611e33ca1281564b56
- SHA1 19bcedeb7884402e3871a1cc76000b778acdaec4
- SHA512 af0c7a6de1895700e5045192b33d3f85e73449f6afdafd94a0f0618e265fb4e6d42d40304c5a95d0830037437cf4268b4e7df026cebeead5d61c63394a2a99b1
- SSDEEP 384:6T0nCj82tUe3vO0I3RJarveoh5XQ8qYHshh23gNaDohzuyK+miqf:OAg
- TLSH
  T138827C2B1B89DC11D6F64B5E5B986A84D56DB58FB17802CC3B8EE34E1F3ACC24413267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  client\Kenshi_MultiplayerPanel.layout
- Size 16KB
- SHA256 a7d4af0e56faa9a5dbc088d9e1a89e069091642c439a840db42c09fd2dd848fc
- MD5 c0ed298f510ae51f2320db381b3aa132
- SHA1 5ff8eb29e7dc4f485530e75b7324b729c1ffecee
- SHA512 38e26a550bb384cd7354b64fb92d51352e54dd9199585a479704e994922835480fe623f4cbfa70af9961c00d5626598b06096356dcbc8d588fecbce64231b977
- SSDEEP 384:2d2y8/12pHN0HNvRHNfuvHNaa4ZADD/BQ4oyl9mE9hRvf:H1K
- TLSH
  T15372CF1B5ED59C1196F20B4A6F646989CBBCE69FA078009C378EE24F0FB7CC44513667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  server\KenshiMP.Server.exe
- Size 479KB
- SHA256 45eafd342584dc14650c61e2f5ee750e948b87b4c37034c20f9cebfef7b4bf4a
- MD5 4a9c574898a823982e0be064c39ef1d2
- SHA1 87dbd81a09ada2cbec725a5d2ecacf3dfc0219de
- SHA512 1f102f9fea194b5076db55814bec53f0ee609cb34b881cc4b4200a39fe27adc1f06c5be313adb4c490312ea6500769410791afe3d074727fe8584b8c70ca52cd
- SSDEEP 12288:ibgn8h9WdDkpNHmAJ/j1imhBt21YPyL5WuJiU:BkpZimhBQttWcf
- TLSH
  T114A44C25F65942F9C17BC1BCCA47D912EB713C4943606ADF17E0DAA62F176E0AA3E301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

adwarediscoveryspyware

behavioral10

adwarediscoveryspyware

behavioral11

adwarediscoveryspyware

behavioral12

adwarediscoveryspyware

behavioral13

behavioral14