c02b15906a4b09cccc29ed62eba7ead9c0f8fcbdee7e953f6eb6e9860441c318

Sharing

Copy URL Twitter E-mail

General

Target
svlua_chameleon_[unknowncheats.me]_(1).zip
Size 10.9MB
Sample260620-l64dsafv6x
SHA256 c02b15906a4b09cccc29ed62eba7ead9c0f8fcbdee7e953f6eb6e9860441c318
MD5 0d2c055fe30feaed2ab67295a00c620e
SHA1 23419c784420348a1b96b2ce4633206d3c0eb228
SHA512 2757ec38d73d68bd12f08ad48c21e092677376b7ac5a513c3b2bee1522f72840b0c5c28f32e53ff5b742e7fb5c9a9dae1fa1be2f50a27e6fbf45aacfb0dd85d5
SSDEEP 196608:3xdmjrSyrMoICJE7JHysI3yPa2Y5akqpWwbuRTDHMAvsc4Mm:3jmHSUXy7bI3RN5j3nrHsc4Mm
TLSH
T116B612D45AD060C2D29AC83744AB479D7E6483BCE30381B742F559D8AC6F0ABF946BF1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  5.6.1-44394996+++UE5+Release-5.6-Chameleon/CppSDK/SDK/WBP_cLeonSessionSettings_MakeSession_parameters.hpp
- Size 118KB
- SHA256 7cfebdea8d5d2351eecc04550c2cf6436e1c171345bfa4bf2c15720e3adfe643
- MD5 9f5dc064e9e2bbd3aab9463d2f1fcfa8
- SHA1 247e2fe7df6383f1a89a2620d48a0462973490ac
- SHA512 0172254541b3644cbce9f47b0328617f35d2274695c9470021a39a70102dc52ef76ddecf8be25f4ea6346dc08ee260981752434e31ff5136299568ac72825d51
- SSDEEP 768:zZ821/4yjD7UJYBbkM8fnPs9yKE8HMq2q+g:p1gPs9yKEM
- TLSH
  T11AC3CEA0F47BE2D5DDE783201771A8251B4CB29291EE8243731FDF296BD366497B01CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral1 behavioral2
- Target
  5.6.1-44394996+++UE5+Release-5.6-Chameleon/CppSDK/SDK/WBP_cLeonSessionSettings_SearchPrivateSession_classes.hpp
- Size 21KB
- SHA256 d239244d6ff46bfd25619d6c7cf699bd933f0552ccd5d9530d1e1ed9b8071178
- MD5 f4b5ba8cdfd77abc0889259718b4eecb
- SHA1 88e03b59c3ed6b3357107c203e90336fa90bbd08
- SHA512 9d88e2124862311cb3be679ae025f1d7742d82c5d5fbe1594e3328c91cb86bc28a3f13cd00b5437cc53dc16938b5d3bfbcf173b5504c56af623c2952d9d373e4
- SSDEEP 384:sE1ept+Y+mZgyDKFMwi8bvUeGefAPjcjiiHDpwsN51mCMA9oVMWWJPD7pSdlZcpw:MUz7RN2
- TLSH
  T1B4A22361D379B0E95CBA8162A3733112271F5216F6FDCB61F21FC78507AB46242F09AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  5.6.1-44394996+++UE5+Release-5.6-Chameleon/CppSDK/SDK/WBP_cLeonSessionSettings_SearchPrivateSession_functions.cpp
- Size 44KB
- SHA256 0aca11de2ce22e7a2b628713f6849dedd1c09ef9b4fbae526d01ba7965b9df6e
- MD5 490d6a0f83cba00861b4c471d3a98217
- SHA1 bd57ec335851ba16d226268232a0007ac7023aeb
- SHA512 8a916b8cd3f7b79b1a29a81ca26793cb0e6b1069af6abea2cf491d21d75362a5c4f5a1b85c0bd0d1bde98b9eb2e0e25e25c687ba146fa020e7078892585dcdb3
- SSDEEP 384:sjqc1STWn991ScWnQa1SDDWnwIkO1S8WnWg1SW4RmRBnK7l1SD4RmRBnts01S74K:tV016AmBkmnn
- TLSH
  T13413BA9450AED0BF8AB78761EAB302416FBE92D3B7F45920F74F85442F6395C92A740C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  5.6.1-44394996+++UE5+Release-5.6-Chameleon/CppSDK/SDK/WBP_cLeonSessionSettings_SearchPrivateSession_parameters.hpp
- Size 119KB
- SHA256 541d6347f89467a108944c630afbdfbdb243890b058be9e9370df6210d48f63d
- MD5 31e2a5f915f7b2071488c9da6063b117
- SHA1 1d85e0b5d88c2cc4cc554103f17f36d1af508bc6
- SHA512 7a9cde4b2299f7dea32ec2f1e1461d0728d4787dbcbf6fd178f5f6dc1813dfc92ed5bce10788a949e993320965926eadba83a59808f02dea3a78fd2ecf41e158
- SSDEEP 768:IvGt1/4yjD7UJYBbkM8fnPs9yKE8HMqmOrb:91gPs9yKEC
- TLSH
  T197C3DEA0F4BBA2D9DDF7832057B165251B4CB28291FE8643731FDE296BC365097B01CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  5.6.1-44394996+++UE5+Release-5.6-Chameleon/CppSDK/SDK/WBP_cLeonSessionSettings_SearchPublicSession_classes.hpp
- Size 21KB
- SHA256 bc24d2faa0928353db430f677a0414a2f6054a3ca28db469eeca109260c7bdfe
- MD5 c061c3bd042d154c1872835f6bf91b25
- SHA1 d31ba359a458ef1b236b7711c1d013293880b593
- SHA512 271c2183c319931c00dcc6bcc9c9331487d164ba1a5ff02af8c98155d93486b8cc16e8918f63255ef344e265d6470f7fbea8b25ae5f4a9a3e3497fb0f53c158c
- SSDEEP 384:Et+Y+mZgyDKFMwi8bvUeGefAPjcjiiHDpwsN51mCMA9oVMWWJPD7pS9tkptsT:QUz7ptw
- TLSH
  T184A23361D379B0E96CBA8162A3733153261F5216F6FDCB61F31FC78507AB46242E086B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  5.6.1-44394996+++UE5+Release-5.6-Chameleon/CppSDK/SDK/WBP_cLeonSessionSettings_SearchPublicSession_functions.cpp
- Size 43KB
- SHA256 f433fda02b5662ec949e6b2d4cd845756d08a4ceb44d63774a19c719ac014c8d
- MD5 8739bdefe63d41c9901d3bd033249518
- SHA1 6875aff4f951f4ce25db01e5b5eda48ee929a43e
- SHA512 06a8822b5132232e9393d28443a7add7135e3d0d636a38ae59a0c99f719a2aa5a2b2edc76554791aed2bf796f3535767fe1889ca4d19f77febf113278a188433
- SSDEEP 384:HTWkcWuDDWSBz8WoW4RmRBhD4RmRBc74RmRBBDzRBxGRBYicjnVRwRLR46KR4MRH:H1Olosq/H9
- TLSH
  T1E513CC50506ED1FFAF739A21AA7301817FBE9293B7FC5520B68F854C2FA295C938241D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  5.6.1-44394996+++UE5+Release-5.6-Chameleon/CppSDK/SDK/WBP_cLeonSessionSettings_SearchPublicSession_parameters.hpp
- Size 119KB
- SHA256 be1f8108bff477aca14e52073e56047f2e6b9198092f0bdd975edd11700acf15
- MD5 a29aea1f01011dea1b5b5f07191ab0c4
- SHA1 dcb4a86cf5f4370286767be8e7efad9b2bba32f5
- SHA512 72234332c971dc5b7f48debd665a26ec1c3f0a9df24faddaa10abeecdfda57fb62c9744b746ec163fd19c5be597ae22dfaa76fafcd40c01cc027a6e9d9eec115
- SSDEEP 768:4ZO11/4yjD7UJYBbkM8fnPs9yKE8HMqYOX1:H1gPs9yKEu
- TLSH
  T159C3BBA0F47BE2DADDE38310176164252B8CB29291FE8643731FDF296BD365497B01CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  5.6.1-44394996+++UE5+Release-5.6-Chameleon/CppSDK/SDK/Water_classes.hpp
- Size 74KB
- SHA256 a3d3e2bf0e0be13391af40978a03c44d501f33478552260badaeb63e337475d0
- MD5 89ae8f3c26fd056b876cb034d817bd54
- SHA1 24f2a3104eff1be7efcea102c3457f0fb3c4f6ba
- SHA512 9193820d83cf9aec20dd013a3f8349251ebde7b11e7dd4f798d63a185ea1f5aa6e925d89fe22cc6fcad7fd95b996084b979d5a00d7d4ec8871262993a80fdfa9
- SSDEEP 768:tDsiB9Mnnp4bi2Z7pWpVHGArzRLug8oJzJSZQFeg2pmaoST6aa4i5:L9WIpoJ4Fzo3
- TLSH
  T1207310707B61F1DA8ED30331A77178526998E051E6FE9B82B0AF8B8DC38755183AD1D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  5.6.1-44394996+++UE5+Release-5.6-Chameleon/CppSDK/SDK/Water_functions.cpp
- Size 75KB
- SHA256 f1056d8462dc7422ec6785f12ce8dbee46692067fe2627b74b9ed0029b3eb6e4
- MD5 71cc8b2c9a38a167d9d8d3d1589226a0
- SHA1 594c3d1025d0ce4fb89c58b2457e29d9b435dc17
- SHA512 a39eb42ba68d92bc8b498493b61e3ead88a8af4c306854e783842371afc59f875244f08b6fbb4f29a7701c6acd64b0de517566c15098835581026cce47ee6452
- SSDEEP 384:6RdXPSTpC8qUpo5RCLU6ty3Gs9QnpxZr1ZMoMNOroxokoIJSoY/QuI1Lklzj60nb:2PSTTd9lzj6kt3zN
- TLSH
  T13073019D621BF0AF4DF122708336604769B6A12297DE1705B0CEE7CD9FC762C436E899
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  5.6.1-44394996+++UE5+Release-5.6-Chameleon/CppSDK/SDK/Water_parameters.hpp
- Size 44KB
- SHA256 c0e35dc6d13a8bb2991e155f9544da6e721a91c63e102757e4ce4aa39b079c99
- MD5 fa006ce55f8dc482d87c0c26fd29a378
- SHA1 657de52d43ec79b7490a465edd1fcc128d86eda7
- SHA512 6e53e390643717859fec55d4acec22ecfa4dbc6e41379490468a0203e4c0b857e6dc3f5fdf772c21249d9a33e4b0dfcde2940132654c263940dec3b921bca946
- SSDEEP 384:CItHIvyWvDO+cvs1N+84AZI3SfVBQlYYDHDijxJ/qYxDNu2M7m:CItSEu7QM
- TLSH
  T18D13BD653799E09DDDE1623097103C0746A8F16244CE4243729FDB8CEB83BA59BBD29F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  5.6.1-44394996+++UE5+Release-5.6-Chameleon/CppSDK/SDK/Water_structs.hpp
- Size 38KB
- SHA256 d971b41c0d7c3411f61b1c4d6f10fe8a7dc0d9efc439634d87b528a6690708db
- MD5 6fe630f443537af8577d198a31afe4c8
- SHA1 829614c4d632b2a761fae0cb8c31dd6cbb1cb3bc
- SHA512 95ac5dfc0b7a986b2b644c6da80fd6ecbc1c0f734b380feb1fecde9873b515331904efddd16798ad68b7e0fa17cc8588052cd177678ba5a0c646f08c3838e289
- SSDEEP 384:7q5YRXFXUuvVt8uYhYR3tDSdCyE2rPVGn5iIWuzHKZhA4em:7q5EXdSDGn59WuzqZhJem
- TLSH
  T11103F3717B6AE0C5AEF10324AE603806178CF2E546ED8353B21F9F595BC72604BF468B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  5.6.1-44394996+++UE5+Release-5.6-Chameleon/CppSDK/SDK/WaveTable_classes.hpp
- Size 2KB
- SHA256 f42519d81340b39c7ab561e7032485c384ef1918891806f09a455f6f22b1d186
- MD5 4e16f1cfdc4ad3cee60f4f8cbbc317ce
- SHA1 ca08dac6502892526ea876ac08b6451cb1daaf68
- SHA512 bde11e8cefa9be13e524de02b44180f169c01fd66e38ef7480e2a7f8817b9ff9a2d32d2cecc18ab0980ec4ed8b924e198e4165eb81697a82da5c929cfed504b0
- TLSH
  T16E4112207BA3F285DEC3430419B478006649A06156FE55B3712FBFEA63467A04FA91E7
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  5.6.1-44394996+++UE5+Release-5.6-Chameleon/CppSDK/SDK/WaveTable_structs.hpp
- Size 8KB
- SHA256 cc235c0dc6574c6fe759b0f25eb6f2c026125abf7bde09fb4f41ad965b1db23a
- MD5 4b66ea62bdac72c0faf7ec1d9dfceaa3
- SHA1 6af53858ef425705bdf2172b112883c2880c16ae
- SHA512 3118d405defcf1b72f0b1b52cd93be7305f08d9f2d1b8f09f7b27f77f125df14f07cca747a12c956365ab240306dbbd4c9a5000e27ae603a1438e5c5dd890961
- SSDEEP 48:1oV0YASwytwWcziGYD9Si04oxv2OBF3I4gmfffbAlbqEWOKCmp0duX3gqjHRM6PC:1ftud9i2G1bQmEWW8xJXsNgM
- TLSH
  T16902EE616BA7F29DEDD243006EB478056248B09006DDA253312FEFAE67867604FB47DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  5.6.1-44394996+++UE5+Release-5.6-Chameleon/CppSDK/SDK/WmfMediaFactory_classes.hpp
- Size 1KB
- SHA256 9ef28d3c32597b602adbb5d793741728661ddaf4f271a8adb7043a97d58f1d5b
- MD5 c4d5f7863d25c944bdb24c32890ca740
- SHA1 5162af780843e45554a88079729ae6079c067bd6
- SHA512 666689d2de773d141c13ba63183a9ba4418bcc8bea04010b07da37ee8bf53a64b3e3cccdf41c44d474aedcb270c62c926eb8bc5cf051804895f1df28cba31eeb
- TLSH
  T1CA31F0307F56E0DB9FD24304EE61AE126944E1A456FC90B6720F9B70A7647E08795187
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral27 behavioral28
- Target
  5.6.1-44394996+++UE5+Release-5.6-Chameleon/CppSDK/SDK/WorldMetricsCore_classes.hpp
- Size 4KB
- SHA256 4f36b7405bd86bf35c1a9da9c9aa1ba3423255bddaa9f97b4271ae34f15558f7
- MD5 1c8abf8bd19a14eae8adafe4a7569ee9
- SHA1 4d77a96ca4860a651deeb170db219eaa5a131fc6
- SHA512 7eab77ad1f4ca00d36aae7332b9f529fbede9218b3e04a28237d2f61453b96b94b527d2e746b516bbb0f2ef3bb2f4896377e8804562c61695e8bd8963314ce80
- SSDEEP 96:1KOfdGI+FqETeBUdKIVIPWuZmofdDQ89VzuWu4mtfdID2VqFWCbkGqafdU58aVCJ:4OfdGXFpeBUkaI+usofdDQ8DzFu7tfd8
- TLSH
  T16D918A903A92D0BDDF7302A159B16C649E5C5C30B2B978C9B2EE5650A3639CC4E162FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  5.6.1-44394996+++UE5+Release-5.6-Chameleon/CppSDK/SDK/WorldMetricsCore_structs.hpp
- Size 1KB
- SHA256 460999d0615e2bf5de21151c12c0b1d3d915ea60e95dbb7ad9bbb9320347a417
- MD5 ac84e81216b7610586176436aa32cb54
- SHA1 cd9f5da432da6d438d8ae0f9fe087edd73e98b29
- SHA512 80bf19e7dda5625461f98519051526fbc4b88a2cfd09ed2bb8537d4047d73a232e4eae9472d6193c25877c97d94ce166b53b6c88378307691edfa756d0054046
- TLSH
  T1742116B07752F1A4DEE305686E442C59634CF02011FC954A33EE972963435A44B252DF
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32