0c6ce97a240d696ffe348150bf55e7cd60808dc40231b07625ce01251867c702

Sharing

Copy URL Twitter E-mail

General

Target
Combat Master CMLite 4.1.rar
Size 30.1MB
Sample260620-hm96fady5p
SHA256 0c6ce97a240d696ffe348150bf55e7cd60808dc40231b07625ce01251867c702
MD5 ed41d133ceb3a257731985363ddf3a3a
SHA1 d173abdea33e33b00ecff015bd00747cd18594d1
SHA512 a6be4d915a578c34757956182b121836dc32423193acf78fb30d39f0e017722d492e6433814582006d330ca0abd13512e041669380df9110f0feec4393116ca3
SSDEEP 786432:nwQ/JQz14O1+HltDVbGdJAx/jYzFsKeBFI4jI9z7gKE:nwke+FtDYdJAVbKerz
TLSH
T1B9673397EA94E27710F312153BB481AFD2ADD300D6728DC20FE4E5C590973A16A94FBB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Combat Master CMLite 4.1.rar
- Size 30.1MB
- SHA256 0c6ce97a240d696ffe348150bf55e7cd60808dc40231b07625ce01251867c702
- MD5 ed41d133ceb3a257731985363ddf3a3a
- SHA1 d173abdea33e33b00ecff015bd00747cd18594d1
- SHA512 a6be4d915a578c34757956182b121836dc32423193acf78fb30d39f0e017722d492e6433814582006d330ca0abd13512e041669380df9110f0feec4393116ca3
- SSDEEP 786432:nwQ/JQz14O1+HltDVbGdJAx/jYzFsKeBFI4jI9z7gKE:nwke+FtDYdJAVbKerz
- TLSH
  T1B9673397EA94E27710F312153BB481AFD2ADD300D6728DC20FE4E5C590973A16A94FBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Combat Master CMLite 4.1/CMLite.exe
- Size 2.3MB
- SHA256 35bbb997958723a543c906b2c014da4e73d28b935260a58a46c5c09d2920bb89
- MD5 616a65eb66de1b0218401d55bc36e8b8
- SHA1 3c61c3844590cdffe11218fb8f5bb13a5555d52e
- SHA512 c77ace0d3a8a9dfb5d18e5099b2afef1ad5bc0add6a947fcf1efc8c32be2f8ccab7405bccc8f7514b4f2a884a4c01969e097bf87e724b60effca333628e03004
- SSDEEP 49152:C3Iq8lWFDP5E73BgWmU2p77Qqs10y3SryMqf:CMeDPYCWmn5QfbSryMqf
- TLSH
  T1C7B533A7A63E0D53D94C5735F940ECBBEA6240E60EE5BD310E97DB1A90C0E81DA1E707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral2
- Target
  Combat Master CMLite 4.1/CMLiteCheat.dll
- Size 43KB
- SHA256 cea291f1eba4be1ca1df7eea2325dc329f9d80c9941b3e4249601516d936afab
- MD5 693940b075f709d7e5da0aeff57cb231
- SHA1 1cab98b1fa0171b68d7258e57ccc5d37bef1b73d
- SHA512 793595e31e78b7f9c5735b93bab902775726a767d47c1afd72a96a501d20c1f661865d1091f72346f14042a27358da9b4a28f1436472655b00e0719919fe4010
- SSDEEP 768:kbRrK84g4wqqELX8yODSP7u8arA21Mv1ExC89whpmB8CSPUi6Wn:I34g4n4SDuf9yv1ExCjnmB8fUiJn
- TLSH
  T1F2135C24A3EDCF26D8AE5776F9F5110427B099439912F6AC1F8BB8DE1C573D105086A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Combat Master CMLite 4.1/CMLiteFiles/.doorstop_version
- Size 5B
- SHA256 b4116d6e880009dc1440ddab7ec054bcea529aea394ec5bab7943b415a359281
- MD5 495063beeac89309a2247ce9c13ed292
- SHA1 063ee00ca80d81e068dd404b59ceb2a03b2e7109
- SHA512 cac6de984822cd7cf97611897611873cb5951b9a63f75a46a54aa6c0d2f3565419a1aa574c657df94a7057d85b99515753615b7336d96a7ff9463a0f3dbf3ffa
- MD5 SHA1 SHA512
Score

3^/10
behavioral4
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/0Harmony.dll
- Size 258KB
- SHA256 64c0107e10f57d34ec2f8097fcb04e3face1b06d6fc77a3df347c6bea06c43dd
- MD5 16e7d81a6e57c118fdc45fabae6201ba
- SHA1 745ea9fe92bf92a0900553f88e40b1d6292674a7
- SHA512 41d05b9c6b74bc820449549133d9a8819577ca676fcbb76a7f70e4d3f0f32375216e1a769bbdcb133946928a9471cde238a66e94d4b87cb22ecd3e034509afba
- SSDEEP 6144:Myfun3+4iQOLqP+GzsCt5W57IZc1M0+a:MyWpFTtDWC
- TLSH
  T1B844499123FC5A19C3FF17B5E4B410148775E826F96EF78E4A99E8E95CC5B06CA003A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/AsmResolver.DotNet.dll
- Size 475KB
- SHA256 d85eaa0e01e513469baf38d383bbf7e1c00874999c13a740721ee9798c18e73b
- MD5 e7d2d142823660d6859e9132ae1fd569
- SHA1 c75c02b45aba5c51308fdf036f9fc1894744817b
- SHA512 5469d2f69c6c25f178e6ca54be9644eaac653bdfe037939cf719f12bf9de306c933f872312d574007093c6b46147898d756396d4130da457dd84ec002b9aecc5
- SSDEEP 12288:uOhL5KoC5kiq6fQwXQXI71TD99wKjLGHlaF:tZC5kiqQQwXQXuKLF6
- TLSH
  T146A4491037BC633BE6AE173AF07244144AF0E94BB2BADB5F5D099AB90D43F519D017A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/AsmResolver.PE.File.dll
- Size 38KB
- SHA256 2458656cfa416876b192421603ed92b64a985dd1395cabdf2c46af0314b54f02
- MD5 8095c6e2e64d36fe102b8db07bc9dc04
- SHA1 ad014d30c1db6289eef070bd03b33649459a2fad
- SHA512 b3b08612bde9a0feb76b6b96d26dc4500bf12f178d77467412d42506e7d4cbbaae2f33148ce0c50f69d0c20fecd4f81d8371cb52294c95b94a0f665385d984f3
- SSDEEP 384:gFBtPL2+OeN4xnHRxiryu+0Uf4SLSokqbw0qYRYNzDibnZMTiBFtkSO49Q4JhRCN:0rOeNUn7yyzf2qooj24kymsBvz/DCSO
- TLSH
  T137033995636CC73BCA4D023DE06040485AF5D34E3646E7ADDF84A8CA3E937D52962EF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/AsmResolver.PE.dll
- Size 305KB
- SHA256 d311dcf58901db2c515ad6e4a5555018371e4f30a78fb31caa6b1131171bb8ce
- MD5 1e54a627191fff3f07b61933bc3b3592
- SHA1 fbdb3c204f3a9e0fc1aafb8620ffca49fcbae231
- SHA512 241cb3876d7d6da1e9b090226c602a3445bc4cfb978c3a596802e831c4a685b6df3726ba77d74db7e0174ee63d485b7ce98e62dcdc5ac0c44ab50e9084c26f30
- SSDEEP 3072:wUnFcOCY7NYksZQS/Nug4BtHwswFbImtfmvP+KHgfB0sSGadvyuGy2khc+1zMplb:YOCYVCQAGlwlIk+H+K6RQKRyv2Ki
- TLSH
  T1B8642A1023FD462AFCAFA63AE0F105244AB2F4167166DB1FADD998AD5C33B40DD42763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/AsmResolver.dll
- Size 55KB
- SHA256 e84aeef5d63d26729d4ca5cf80abf6ef8376bec2f2370c5f97544225f2640053
- MD5 dba13b95b446b22403310aa69e5b9012
- SHA1 4b1532ab96d3a7a8ae315d802d680a2daa7e5647
- SHA512 5dce86103e59616ca7ad0d87767cd86280e9d21ecbcf6077e1190945fa17a1ac17a6714b6b1420b3f5d33feb83f9b84168a3f723a5bc5e103f5f553a3d11a224
- SSDEEP 1536:H+pUYnpOJdkS5xVWX7aIoyaPHG4+yrdi2aV:epUOpMkSfgaBPmFaiPV
- TLSH
  T189434B3C73AC4F3BCBAE057BF47051514BB1E12A3E67C75B9B49E0692893B94392106B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/AssetRipper.VersionUtilities.dll
- Size 20KB
- SHA256 902a6e284952af51756914fe5a5972be40d8c949f8c55e4cd3b7b0fae8d49251
- MD5 4dadd810012ed13fc9a107c2d4ac78c4
- SHA1 c9380edd7d8ae46c3f0b7e1fd89467f9fb7d0cda
- SHA512 256f8e6eadbfe386da8bb2b54272da001c6ba4dbd8cb5188a8419b93640a3fdd9c900bf365cc270cdab0cc6143c896a2a7d5ac583c3adea063ddbb104f272efc
- SSDEEP 384:763uJ4IW2CKlBGNQBKqIEtRzVNuJpjSPAAkgE0:76+J4IW2CKloOKqIEtRzCJpjSPAXn0
- TLSH
  T181922B282778833FCAAD4B35E4FE690282B4E20979A7EB57005CD2B561173FE05563B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/BepInEx.Core.dll
- Size 129KB
- SHA256 889877953af4130add71d4cf0abb9d1c4800ef939a638624bf4750f8c8d261c8
- MD5 c823836b37fcbdf87a5224ccd0608351
- SHA1 31c3ded08c3dc2964885750eff8cf32d85085a09
- SHA512 d41f2286eb18cb0683a4a479ae31b23dd3417a2eb8e5b6a096994f9b085f9beee82637c3f46e8edbe308344eb15ce159bffd815ada032cfb3402e8e6c022e871
- SSDEEP 3072:BeNesQm021Z1TkS1mvuetWoIWBPqWh/z9+rZA3Yv2:4HxjwS1mvTNdQrZCYv
- TLSH
  T196D38D2573E88B2AC2FF2FFA78B050154B72FA06E026F75D4E8C759D58133915A22772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/BepInEx.Core.xml
- Size 87KB
- SHA256 1a19ea693c0c2549d35b95b04e4a5f51b419a43a0fc4bfeb998349ecb80b5762
- MD5 883834ad35832a5da43ffb817eb38cbf
- SHA1 eeb44aa0e58f7d0d6174c407eb28ac89814f592f
- SHA512 ba55181e9ba53789d12750f2cd614835ba60dff1ec86c9be9da5271a2ca9a49be115a31156fb859609e1824c6a64e21f97a6128e827f50f4cbb74548913de493
- SSDEEP 768:fHJ9LEKl3qVxKAfqap+a3t+LGd12sLAXvwaUhmb7NINDCe:fpREKl3qVxGaf12IAXomb7NINDCe
- TLSH
  T14493FF39B7F4FE5208420562AD983980BF340DA3311A9679B1DD7D1B9F0ECD712BB6A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral12
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/BepInEx.Preloader.Core.dll
- Size 50KB
- SHA256 537d26f30ccc39455914f50f5f5cd321e10bab10dd410837d4d4284c22713ef5
- MD5 97382604c2ecdbec59f448ce6356f8ad
- SHA1 71d21e12c7d94ceafaddf136fa1b63f13d68d0e2
- SHA512 4a2d17718bc567081bf5485c95fe533962994ffa2ad14915ca21ad6a5b6f51702ac85b3b48f1e6448842555f91959cd2312ce7eac988b0025effc64f97cdda43
- SSDEEP 768:0ngNl8FcZBXfZPWkf2P7O3cwd+JeYcIOplCKgbxQzJMot:OgN2FcZNh9gqd/tbFgbut
- TLSH
  T1E2334B0177FCC36AEAFD9B70B8B0125541F6BB45A832E65E6E88349E0D36B844520F76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/BepInEx.Preloader.Core.xml
- Size 16KB
- SHA256 f7e68941a96a6bbb42237b428f0b38077ac139597ac24c7cbb51e661f51ae3f1
- MD5 e6c77437b282a3617afded8096571800
- SHA1 263bdbef16bb05af8c5a001c4160ec212c3781a0
- SHA512 19dcb590c4647b4e7bb56be8bbf4b17419a52bf022acc0c34f5ea97af1c953fdff17f95c2bde30aa168923c54cb8845ac3b0f7e26770da0706548ccfbb20217a
- SSDEEP 96:6mjWu3boToPN2MokDDGbPqKRIa8tjIcdJOjO+1xyIw+eOoOtfcDTtl3GvsluPDN1:6mjJ30To8MxDD+UaUcD1oRfDxMLKI
- TLSH
  T17F72DC7436E0D9510E810A85EE9E38C0BEBA0EB71063553A30CD6D9FEF55E8711AF8B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral14
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/BepInEx.Unity.Common.dll
- Size 12KB
- SHA256 926ef21b442c83f0cf9d0a547c04db297d27ff6370b5287e3d2127a034c291a4
- MD5 ee0f8fd1d161bb0540a21ac23ee0d6c3
- SHA1 55cee8625cf8821ee04b83bdd112ecfdabd4e004
- SHA512 182ba7b0ddc27d433a214a7fe28571fc387afefc45bd3c9ae953f23a55144abeff984fa0ddce4afe9d284d7d76d1b1b9d238ac73645d0ff1570057ab7421e788
- SSDEEP 192:b05d8pn7L+9b8Zf4yLoBNXsl6R8db+7bIQJTWOhKWTXN:bAC7L+9b8NxCNXslbgbIQ1hDN
- TLSH
  T184426B31F6DC83B6CD7B837BACBA53855770F7A6A983DB7F5A4461071D122080A01B71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/BepInEx.Unity.Common.xml
- Size 1KB
- SHA256 d3164c64d07fffbd4e5a28dd4a7201d4971bf15f5d471fc919d4707009fc9114
- MD5 fa6f41a8095aa901a2b21d1450c51769
- SHA1 dc51c6e39f602964b12e6b9b0ee6a7766b3e6465
- SHA512 66570e494c28ef99378e496dd3733477efbf21cd470dc31e5999c33cdca7b105fc59c6e3c5ba5ec44974e55024ddc350dff7cc28eb8485a433149a3a48877445
- TLSH
  T10C213838A1F0DE670C026A421E2C3880BF674E675096423A764EFE1ABF54C572AEF164
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral16
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/BepInEx.Unity.IL2CPP.dll
- Size 73KB
- SHA256 58d90ee0327cd90d092ea041d43200e7ff26933a9868bff7e7ef3f8fa72bfad3
- MD5 cef97d74c8618b113090cf5e1459ece3
- SHA1 ebbf426262aa5ee139c23ad97f41ae5b7d1b662b
- SHA512 47f07f9d73bb125e0050eab6f43e0332b4d905338f3886401e7f019489b36824d9472c5d18e544d2dc7989cd4e33d8bfc3cd6d58b1b1d7f49c9ad04002c8d54e
- SSDEEP 768:PXg6hYajRsrNK8i2h5563ySdHdL+4ZJpor229PSV4xPF1nUk2UUAHBsaS5h7CMs:POa1splb037XiisapVSd1lNa7lCMs
- TLSH
  T17C736D50A3F49204E6FD273D3AB315441FB9BE131822EA6E64887EEC4DA23844F527D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/BepInEx.Unity.IL2CPP.dll.config
- Size 456B
- SHA256 ea4436344d4cc4c29f3382655c99828ace3df659107cb2e6b985227027e48cd6
- MD5 76d7a066c78977dc5da916f9c5cfd84b
- SHA1 479fed379af9bac51c3074ac871f9afde28ed91f
- SHA512 56071bf329e51e6063d81c1bd55c636edcd6a0f194378b362bc8c637d64e713d896dee84ad1c71193b334d70bb0eac7e6f87d7f4bb09fdffac6c0daad2e8b17b
- TLSH
  T17CF02B5099E8EA62969106D33BA720545FEA1373259C018CF46DBDEA8F08945520A176
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral18
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/BepInEx.Unity.IL2CPP.xml
- Size 1KB
- SHA256 1dc768a64b78e9a409d3ea420e62e884c883ed488eecf204b71c2ef4e337ad31
- MD5 ab542884a56d1c85563210e30cd42202
- SHA1 ebbee898fdf592825f2bc3dd384f1b2529d9780f
- SHA512 43e82fdb6c265492fb2961a12c1793a0c258de3b6eff9bc3b6ee5a11d59f9a6907e9daa4357e2c7fd09aee8b6e48da85bbf7e81903852a39f74e049a44abe467
- TLSH
  T16931A535E5F0C9131C8032069F6A3884BA798C1BA6D3483931DD1EAEEF1B816496F1A5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral19
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/Cpp2IL.Core.dll
- Size 298KB
- SHA256 bd94848606a9258a10bc91a9c387984a9b35b31c3c3d54ad8f71c307d7c811d5
- MD5 4d148135a49f52cf2f2f370ffb1c1fb2
- SHA1 e6c45c8ffc9e128d391c1e95a8378a3d19d82566
- SHA512 1074049111d5d529467313937957b36ddafeae4ed79cd04675e46e4458451c14ab2f30322cfc989a611b5b74d5524fcf25aedd66e68854edabffd1551368e143
- SSDEEP 6144:yYE6y5kkce5Z9tpedELv6wuahgVQDzNer/lg2a91Jk7qt+N:Ry/9tpedELfhgVwxer/kJAqt
- TLSH
  T1F1545B2477FC8726EEFF5BB9F4B421480671B917E86ADB5C18D864ED08A7B409920733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/Disarm.dll
- Size 95KB
- SHA256 15e4c49f00865b8a13dd75f4b2c66486c32f5eb28fb630023fb495db320ac93b
- MD5 a2ce6454e16492fa90f83441d9af0f5b
- SHA1 7251a770691b4fccd95784c0c8ef0450e7d34f98
- SHA512 9bb4fcaf55d9152e41869411cd3539edb2056a50a22e8e892ad002d23d9e8f51d7f283d89b78ab36ed8822cc5074af55a8a776b27d9962cf399696506aadbd5c
- SSDEEP 1536:3SqeSDtf3om0tu3A5+oVashVlqCJ6mNBS0Nwd4SLhxMqXIYoeMR9Hmph6:iq0m0tuCU46mNBSySLhNXYeUGph6
- TLSH
  T1EE935B05FFFD416BFAFDAF3288F266010AB5F95A6B31E34D6444D0A90971BC88564B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/Gee.External.Capstone.dll
- Size 286KB
- SHA256 c52e2ac8d02a630dba7f2a31a0437463a88437917dd1aa2f39e7949c8d2ca98f
- MD5 3e6beefac4be187af6422776f17c2cba
- SHA1 3f56fbf76c0bb2a4537ddf46272a546d5e1b936f
- SHA512 693c7061d9dc5e1dde3d2196fa0c45452999a4891a9c0772945ba8ab8b69efd61236635c09493101bd45cde6e431eb2d3bdfb9f0dbbe31b48ef36e1d4699fdec
- SSDEEP 6144:nTRPpzdswxOCA/IlrQZE1ytVkJllWPH0IPa2Gil0SNF56jBZUU8:j31y4rlWra2GE6jc
- TLSH
  T1D35495313EF40F2FEAA747A068AD45030A27D72D5A8D43416315F1AE58E9BAB11DCFE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/Iced.dll
- Size 1.8MB
- SHA256 1f4b7851d77310880f1e279aecc0d7cc4d876027dc490779c7196e93f17bfda7
- MD5 479d2079a3222aa150fd436a1b36a712
- SHA1 5116c132bad87465e57d01f86dbf12e371f66036
- SHA512 1337f85803d3f763770142ebf9d211b98f79f7de1c04aad9b752e081e9ac384e080afcc2c1e1974b1e4d68c053dfbff1e905a4ab7337b51d8205a54bc8f7b564
- SSDEEP 49152:vQfadafzTMvtB3PAf9Xj1PSxv0FzZtOnligkvGcDZ1znJvg93G1X/WlIsGfVmorU:I9Xj1PSxv0FzZtOnligkvGcDZ1znJvgh
- TLSH
  T143959385AAE8CEA3DB5A9730E4FD16782261E9CF3B17E723C0117064585BBD50B131AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/Il2CppInterop.Common.dll
- Size 39KB
- SHA256 06eff078af1c41a275718329bba8a04bf0c9386cff78f93287cf3392d5971c9a
- MD5 531842c1314f13abc628dee4bd621a00
- SHA1 d1d096afb331322c648e306ee2a0adc95d7c313c
- SHA512 49fdfe1f084645b69c6eec2dfa8862bd526e58d51a74a6f6a9ed0eeffce9184b9a623e85480e50baf522fd7f31e28c906dbaf8fa0878ae63844987472410a085
- SSDEEP 768:Mij1Vq3OVAxHytDdZaW/4tSINXqzkBA0YGVb7x:l1VDXDdZp4cI2kBA9iZ
- TLSH
  T184037E1127FE4733DEEE0BBD6CE1310007B5D666B013DB9E49C865999C93B416B623A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/Il2CppInterop.Generator.dll
- Size 171KB
- SHA256 4c79e0bcff0b8b0b7c0a94b556c20388500b79f57ed3b26d2c51c1f04133b7cb
- MD5 32999b35a623118c8b4e76f036381853
- SHA1 e740be1652bd50d93387eab8d1e0f35f07d0cd6f
- SHA512 29cb82239554eea6ce27827a321d378d45528b1168fbd566d9f2065c2bbcebc6ab7f628475018012d288cc8ff4da11468ebea4c8551fbeb0d5a814c6ee5a96b0
- SSDEEP 3072:qb4HZaReZvcp+Fqqj4ot+3jovoFhhoq1uaF40Rd3D33effzMW/kcwaO3tdbht8mC:qb4HZaRek+oMtkUv8zoqEaF40Rd3Dnem
- TLSH
  T156046D6437F88B17C77E137650B0104C45F2A106A513E3998DD778FBA9A3F826B066B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  Combat Master CMLite 4.1/CMLiteFiles/BepInEx/core/Il2CppInterop.HarmonySupport.dll
- Size 23KB
- SHA256 12939e68bd5eba05ff5e3633fcdeb9118dc964d641e9c7293142bac9f839d3cd
- MD5 d55047dd5093806101f5b4e0e535af03
- SHA1 904f8b5cf68ea03cb5066331469b393daea9e9cd
- SHA512 be2336ef19796b5207f29ec22326a2b1cc8080e56cada05311bd87060a49f77681adbb5c0475fae267f22a06c488b12f3c95bfe3afc6b6634d573c20cfb91608
- SSDEEP 384:pFiuu8Wej0+BwdalZFJ259snMqSD2+tWVx4GiFE4ffDAeIV9UlAf:p8w/w0ZfG9qSaeWVzaVD09CAf
- TLSH
  T151B25B256BFCDA22E6BE4A753CB6275452F9F0114803EA191CC411ED7DA37C42BA13E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  Combat Master CMLite 4.1/CMLiteFiles/changelog.txt
- Size 6KB
- SHA256 0915672c54b607edfadae9bfff9419e053921f2c1746187a074680f5de927a1a
- MD5 a7be400a882d4134040f9c76f2a135fb
- SHA1 1159689d5d392ab5746fe97f90ffaff3f8692cf9
- SHA512 b6281109bd19b0290a53a1ab568cb79117803f1a0a0f86c5a5175b448819e4cf4171f75b45d97e33fd7fb3aa6b4e9699a60f8a83bbba758875b2430699cecdf6
- SSDEEP 96:5voCrsHxuCS2tnbe2NgNnkyqek95Ru+JF9n+Np9bb1IWTta:5v6092pHNgNnXqV95RuOZcpp2Wpa
- TLSH
  T185D10C14019B97EA4C7C01953931DD5DEB38CBD9A273AD229C67CEAC93BB013C93A132
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  Combat Master CMLite 4.1/CMLiteFiles/doorstop_config.ini
- Size 1KB
- SHA256 2501fbaa65595fc5a9c1151ff113d37fa3e64d9ad486c01ed4cf0c05843dd9c9
- MD5 30706a5ee11709c50bead0093313047b
- SHA1 23bd07d8c0360ba7ce8f062283fdb5eb495635f3
- SHA512 04cda9816951fed515b1c4038d7441d08775a4ca431f9749167065f7fb7c0675e5e5ef3a0e1a0198786b970b3701dbe4428d18460e4a72ae7558d99149e518fa
- TLSH
  T1F0315536258873797B7B8143C8E637E7571D845DC29A363069C6C32F73114A54A67E70
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral28
- Target
  Combat Master CMLite 4.1/CMLiteFiles/dotnet/.version
- Size 49B
- SHA256 4052ab33b00d0411fc9ce103ac9d51564cf8630fddb7464d82ddcc168d4d302c
- MD5 42786a0624692125170e4a81f6583174
- SHA1 eab9a830e665b7eae35cd4f4958a3f0133de2652
- SHA512 377a9d9e7db39215de22a429bf1a92583d3d306fea75442c3d6f8d6a952d6260e4d753956ce4fccf2d12206860964c8901b9965bf4f76ebce4d2219e9a080f09
- MD5 SHA1 SHA512
Score

3^/10
behavioral29
- Target
  Combat Master CMLite 4.1/CMLiteFiles/dotnet/Microsoft.NETCore.App.deps.json
- Size 32KB
- SHA256 879dc0cb9c9a7a41681e399fc4f18c15ef1ac9a3410f68b94a8d13dd0c6c391c
- MD5 c78a13ea8516a22b60b31b40aa79c310
- SHA1 225dddee736b30214150f8b935b8dd4237d28d55
- SHA512 ea26a813c414c70e4bbbc77aad581adc07fcf5a24dfe66662575da4a1e1dc483260244a19b4ab703eb9e4f4e7a8b8ad75e4ea3ecc6b6d403614d02ad56f423e5
- SSDEEP 768:+6XeVEsIhKPMEPrT3XCGjDyiEc6BHa21Fe8kFN92uwtEeCJyA:bOVEsIhKPMEPrT3XCGjDyiEc6BHa21F6
- TLSH
  T122E2D206D9809EBA05351BE62C388A54F672032F7585C81EB4BC641E9F3FFBB1255B78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral30
- Target
  Combat Master CMLite 4.1/CMLiteFiles/dotnet/Microsoft.NETCore.App.runtimeconfig.json
- Size 159B
- SHA256 1b7aa545d9d3216979a9efe8d72967f6e559a9c6a22288d14444d6c5c4c15738
- MD5 3fbd84a952d4bab02e11fec7b2bbc90e
- SHA1 e92de794f3c8d5a5a1a0b75318be9d5fb528d07d
- SHA512 c97c1da7ae94847d4edf11625dc5b5085838c3842a550310cca5c70ba54be907ff454ca1e0080ba451eacfc5954c3f778f8b4e26c0933e55c121c86c9a24400b
- TLSH
  T15EC08C61DC107EA312F2167A84B2C483EE21B33300251890B9FE69082F2B1A21017F51
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral31
- Target
  Combat Master CMLite 4.1/Features.txt
- Size 585B
- SHA256 b64d1df1222ab03ccbfde74383787bf8a9a6227d3d6c98afbf0bc84321cf9e0a
- MD5 6182b454ea305070437bec453e9c73b2
- SHA1 b0e5c0712d1a760ae72f5da2e3c7015f006df74b
- SHA512 60d2f842a86141114e1d3d9992a3ae7ff9c01bfa800e1555145dfc83e57b7951c6b8cff7edfad55a7a5008e1796e763f3664ce5003115e0b4aeda2d404b1333c
- TLSH
  T197F0AC4AE50F602910B4C4863B0B4091BBBA5260C33EB74CB6292A0EA1A88EC507115E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Obfuscated Files or Information

T1027

Command Obfuscation

T1027.010

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Badlisted process makes network request

Checks computer location settings

Obfuscated Files or Information: Command Obfuscation

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32