0002b7741cc5c545f116a3f2aa041f12707de163ac836048e0e3a1a90fef7d3f

Sharing

Copy URL Twitter E-mail

General

Target
DLC-Unlocker-PD2-master.zip
Size 10.4MB
Sample260620-e84zrset81
SHA256 0002b7741cc5c545f116a3f2aa041f12707de163ac836048e0e3a1a90fef7d3f
MD5 002e0a0d50dda6fabdacff92c721f2a9
SHA1 52c360489da26879612f451f0c89f11aaa329596
SHA512 992459183eaccf485e50b49b500937231560f267ea24257db277f533884f7ee0caca6a8932de1eeb4a9228e79f487f20df74621e5bbc26815b04a753f39e290e
SSDEEP 196608:1jZOW3aX8+XZQcWMF0OYHCKoeWutO8JuaTL9YaLGICete9NqoF1HAbVKeInI+CCa:1jgqalecWMFqiKsWxL9tLGesBQVsn3Cl
TLSH
T141B633C2B5A2D878C07AE7C940F99111AAEC93324C277C1D69273FD172DD49138EAE9D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  DLC-Unlocker-PD2-master.zip
- Size 10.4MB
- SHA256 0002b7741cc5c545f116a3f2aa041f12707de163ac836048e0e3a1a90fef7d3f
- MD5 002e0a0d50dda6fabdacff92c721f2a9
- SHA1 52c360489da26879612f451f0c89f11aaa329596
- SHA512 992459183eaccf485e50b49b500937231560f267ea24257db277f533884f7ee0caca6a8932de1eeb4a9228e79f487f20df74621e5bbc26815b04a753f39e290e
- SSDEEP 196608:1jZOW3aX8+XZQcWMF0OYHCKoeWutO8JuaTL9YaLGICete9NqoF1HAbVKeInI+CCa:1jgqalecWMFqiKsWxL9tLGesBQVsn3Cl
- TLSH
  T141B633C2B5A2D878C07AE7C940F99111AAEC93324C277C1D69273FD172DD49138EAE9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  DLC-Unlocker-PD2-master/.github/ISSUE_TEMPLATE/bug_report.md
- Size 739B
- SHA256 7682f064579e969eeabe613eafa8edd0b9f4533adc90e791d57d0b79241d3893
- MD5 52a715415ebe89d8a24dc93442227218
- SHA1 c4df80b053c0c4c9556f4fe4c876ae77144bb95a
- SHA512 69303d091cb91d188e7d7cd65c9f4557bfcd68f34969aac50bac2f7e77c4756b20d06ddd14f0135c9cb1ddad6f8b9c7bd16a999b34f8e793c0a5d5b25eb19c73
- TLSH
  T1E501DCF7DC2BF5221061120B9A97CBEAAB69572901D8C62518929538138D3ACEF3A6C4
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  DLC-Unlocker-PD2-master/.github/ISSUE_TEMPLATE/feature_request.md
- Size 595B
- SHA256 1f48c52f209a971b8e7eae4120144d28fcf8ee38a7778a7b4d8cf1ab356617d2
- MD5 174545e1d9daff8020525fdd1e020411
- SHA1 f6867a2f0417fe89a0f2008730ee19dd38422021
- SHA512 b18005cfe7409fde541b934131c32c2eecdc4a8fd62cd558f274a25262c0e6b0b8fd27674ee55d6d4e4c435d49d580a077181fe8b15b095c39736b01ff4ee537
- TLSH
  T132F0E1AB8EA563075DA703841EE3DE4DA5269B612504C62499C1C4BC33CF75CC73B4E1
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  DLC-Unlocker-PD2-master/docs/README.md
- Size 2KB
- SHA256 a4ce4d93e82eae6ad277a20cad5bf95449596b8557a17cb074413fd56e614483
- MD5 d46ce7aa868de839ad6d172f745e5ad5
- SHA1 f3417963001d61b9d4d9e56c363af216b024e6da
- SHA512 0c4cb2c970ee534c692150a66763191ebecb14b86975c04b66511cbc136d9bc5a64f34356e212a4e11e296b25343911d9da87be4ffa41d6c22a5ba993957d802
- TLSH
  T1CD51638F23F3A3291B1321E91D0F77EBC517A019A6F6560B24EBD4440399197627C2E6
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  DLC-Unlocker-PD2-master/docs/img/characters.png
- Size 975KB
- SHA256 28158f75e27003e3b020a0c2a79ac86f67d8d8a44cce3bc20ff5c148da927003
- MD5 6a04a397cd781e45bf15a26e17fae229
- SHA1 6c2b50c60835b8287ad28e06e8aa1e42a26c8bd5
- SHA512 215b08e23a7cf1174f7771c8344edfd9c50dce7fb83f51c8349f5d701f82a69f3bc31a7446df539b191adcfdacf8d5dc6159fcc72001f0f5af6b2b8a1e38a2eb
- SSDEEP 24576:HIkY6oGp1jDHLEbvAbdo8xK0YXRyRvzVCnPFMyBcfvXRdbXlmJCT9:HZY6oGXrOefYXQzVCPFnBcnBdb1mJW9
- TLSH
  T1772533D23C88B9039062FCC501FEA0097BFD4B255453616E7EE06A806EBC9D679C7E79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  DLC-Unlocker-PD2-master/docs/img/cheatertag01.png
- Size 822KB
- SHA256 8d2c7a1ea8f5b1d33bf937f52ef28164593168752a75e223a1e0d84d9c325615
- MD5 43dbe445900d9c8b8c0ed35125319a34
- SHA1 91e17f86bd03f4333c664f6e14ab4c1b6c9430b0
- SHA512 02ed1eedac7e964daf4801dbcda53dbc2997eaf3edc03a3ed25ce27069a4af8e8c4eef3c2499c696c0e6a18fc70d8514eb9f54dab72255ccd14c3f6b0e1fd826
- SSDEEP 24576:wqPdzhSM004upnPaFG9vR0BE8PeSrB8e50a:5PthSM01u5P+oWBZPKema
- TLSH
  T1FF0523E40D38E026362DDD0184FB24D048C0EF63E39FB95E307AA7A6B3BE5E515DA549
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  DLC-Unlocker-PD2-master/docs/img/cheatertag02.png
- Size 816KB
- SHA256 e022fb4918c26ad77e962a0ea240502ac90270dff155490e94a243957c7128d6
- MD5 7bb9865038ee89e1b55ac630ba6a897f
- SHA1 d9515f9eaf1b6c13077065288d56e62eab9eb496
- SHA512 a89d1f8684723c3fd70ed8589e71cf11e903c98b93dd66a352e32929bccbb038f23239a9d46a92cc353f8f6bff4efadeb38273c52c4164defa7de3c489d5f624
- SSDEEP 24576:rHQofchQjxEaTaI2FwI/KemIlKhYAwqLZfHHk:rwofctaeIqwVIlKkqLtnk
- TLSH
  T1DB0533EB0ADD5C749CFAB7DCC67ED79CBCA8512584A97A93E70D243CAA26F4D4484003
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  DLC-Unlocker-PD2-master/docs/img/epic_local_files.gif
- Size 1.4MB
- SHA256 2486c3b29b197792aceb18e45f829283457df8077e28115db2262b83e8376d0e
- MD5 d1f3523122284b6ef462bb7bacb02111
- SHA1 98cb8d070e5e9763e12b68a82dab1b0aa2ead72e
- SHA512 0db139ca49f2f02bc31985a62d7facef061b2f85c5ba1644f6616690b45b526aa2487841217d80a1299cabcf344ba2f577997759fd12ce288551f2995f736864
- SSDEEP 24576:cJ555eYnxH6+x90eRPuZcfcLvClf90ExV3W+7B5ukDrHea6xC:a+QlxGzOmClf90E/RVXr5T
- TLSH
  T1786533E7843D4056183E7F74385619CD6D6C1CF82B25F9322029BD3C6AAA6EE36F4B44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  DLC-Unlocker-PD2-master/docs/img/gloves.png
- Size 797KB
- SHA256 3171f77056754344b51fc3cbd91aa39c140b666cf972e26934a1a248de7f9f3a
- MD5 381853333395e35fed073702ed479e20
- SHA1 6b4d7697243dee8050abb40410972ee180bc220c
- SHA512 0808efa6d247581dbe4782c26a86ce377a30e50f25936775d4b51a56d608cf0c1a237d3f87b5368c40876f468e6ed23211860f3af84432317311135a48d28cb2
- SSDEEP 12288:76xaOip4eAgKwsQSkAvXdHji8mhFGOzMZHkDEyBr4FOkOfszuDm1mZxe5eGelISX:76mXKaSjvwf28EyxaO+uC1m5GCISX
- TLSH
  T16A0533E5618060F6D50FD32D14E4D5D8E7DFE65F1C23A81E51843FA22EA623A8CEB724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  DLC-Unlocker-PD2-master/docs/img/mod01.png
- Size 811KB
- SHA256 ec5e7e249dc76d2c2259de1cab69292d8a9b5c37c4cdbaa69c350044e3ad9095
- MD5 f967fc71cbc20672a21976e03d4928b3
- SHA1 462542890f81f06a6f39313db7f5a53a33c3a9e5
- SHA512 12da65bdb62485a6d53e459b5c0fa9c0f49941e47446369fa830934d8ff0d80f1f8ca11a3c1d532290b62404c810045f4f24d00c4124eeadf838f107441ae6a0
- SSDEEP 24576:6D84lKJJwyRWlETaa1lPAqQfzYZzTCvZ9UxO:C84+JwBHY9OWv89UxO
- TLSH
  T17E05236ED53A8FDDCCAED2F0CA66CC382F5C23734C1962665BE67E1318989120C395D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  DLC-Unlocker-PD2-master/docs/img/mod02.png
- Size 808KB
- SHA256 3baf999d1ef63d8a9f9379f401613067ae9f254484a25e3753049bf2cad751c6
- MD5 a258aaec9bbc950b9e9343a96dc054d1
- SHA1 b1d99456b7b9fcce4c4295f84268f25c0f7ac622
- SHA512 47a13d8ec71a6da3242f1f6ca96c1aa04db6463f915fc0c98e92486652a9b07aa573f02b2b718ad82da3b87745fc0cb7c6ddcfb3cf4c23e83332d4b8e14a570f
- SSDEEP 24576:VVLl/JVwagtFAWwoppEscMPOvEFYAsabLA3HORS4u/:Vxl/JVFywozfc1sY7kSb/
- TLSH
  T1D00533953B86A2B927FFC36390E1C535AD39902D2DB24369858EB36BD04F80271A5DD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  DLC-Unlocker-PD2-master/docs/img/mod03.png
- Size 796KB
- SHA256 33b6bb25cb0736315e0ec8c5fea6128e1a37da62b13b720fd933679698b526c2
- MD5 b561a17b86ee0ca7b691ee4e48b21928
- SHA1 2613c27373e2ad2517821dda4bc7ba672950f95b
- SHA512 6e41fae1dc8e632fea09b31630f29596c4f69abcd2374baac2d02ff51463337072183e973a7204bf24ea0a278007f822a8d36a961bb8a501ccc77732c58e03e2
- SSDEEP 24576:ZWIYxHb0wN5Hq/2hbKhk4IqUwswkl2gI9:ZWThlXK/29Khk4IXw9QY9
- TLSH
  T19A0533A19261E3E730682E9B41752693F5A123ADCF77E9348C6E7AE4158F4E871F300D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24
- Target
  DLC-Unlocker-PD2-master/docs/img/outfit.png
- Size 768KB
- SHA256 d8d3bf160f77434433beafa0845f8d9b89f08ea13f714881eadc08fd88b088ba
- MD5 9a5beeee9c08f35798c710076fe96e26
- SHA1 23d70570ae22fada28503cc796791eaa42a9e208
- SHA512 612ca26c418daac02c2ce02df4861d5b3d375656ef0d6ee8746e00315dcdd8ae8fab6779f44503b974b33e4316491cb6317426550ba136bc2c02ab10a74d8ff5
- SSDEEP 24576:8qiLdeRv24XxMkXLc1FVNMFVZMRhsF0XYRd:Ri4RvjXx972neVyv+Rd
- TLSH
  T133F433AAD33ACC778388D5BB3FC15C2165E769B44932A96B9D13420B5D6F043BC3A6C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  DLC-Unlocker-PD2-master/docs/img/perkdeck.png
- Size 708KB
- SHA256 b5c41bb1b642dc68ca189a7dc95a4ae99dc195181b5c63f8ed2ff8d7ee588580
- MD5 3283cbd957b1de929535a6cfab633517
- SHA1 b7e85d817eadaf8f9fe34aa209a44d9927997340
- SHA512 062d19aa2d2fc7a5faac8b272461d5222d16840f648ee66af2b1a5134f5b1d1241c53a7db19a937ad3346b22016431a786dcf0faf423892dbe362002668cdb6e
- SSDEEP 12288:YUWToj4ivKyXIIXeUQVC5wUZ9/+ZfzPpW+6p9rIu3Ok7LutkLHi3oJTVMI:pGojTSkN5bZ9/+i+6p5akymymVMI
- TLSH
  T147F43352E9D31678CDF9BA4CB1CC92EF60A358814A0E1D049E330F85EA46DB5319ED9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  DLC-Unlocker-PD2-master/docs/img/steam_local_files.gif
- Size 1003KB
- SHA256 eb8f3c292ae4fc397e8e04c2839082638fee21c9574502526d2af5e941a61ef6
- MD5 fc9b246dedc12a39437bae4ad8a65575
- SHA1 6d9490632855a7aedddde9be0a24818fbfa64f53
- SHA512 de392870523f9db9d29e9f132342cda81f7a5a0ca8e995a4256913f0ed37b84a88b0bba86556e8fa74bdcb3fc5d6b695696aa983b43b467ba35a926860c30395
- SSDEEP 24576:o9nQMeVPK18NQAfJyovsygAXhwUD0BNTdyFCa:bMeu89fJdCU0NpyFCa
- TLSH
  T1CC253344858D44894EEB0CB2D2170E8847C9E4B0794EDD2DA4A846EEDB09C6DB2F7F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery spyware persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral29 behavioral30
- Target
  DLC-Unlocker-PD2-master/docs/img/superblt_popup.png
- Size 3KB
- SHA256 c1d8443ae353a746be1e11818a5e3439bc814a6b1ef54affcfe25e027f8f5e93
- MD5 2dc6c00c557156ef50ff6bba2aa6b85c
- SHA1 7c1bdea6b54ac9149f978d3d9be30a48fac6fca4
- SHA512 f3ab0a08978c20d3394eb20e5553b7aea92c214779375795804ed8e622eed17b91d804c921c533575370891401333be2a5f10dcf4432eccdb91571743f72a4ea
- TLSH
  T1B3814A9DAF3EB57ED8D29F0ECA2D38506442AC5888C3100CDF844D1825281BED9FF042
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32