86751484f8839d465a2dea02959ed424cda2733aa415b1eb714b28a02be39cd3

Sharing

Copy URL Twitter E-mail

General

Target
PS22PS4-GUI.zip
Size 28.2MB
Sample260620-m8v1vsfx2x
SHA256 86751484f8839d465a2dea02959ed424cda2733aa415b1eb714b28a02be39cd3
MD5 5d3c3826efe3cdd063397afaba55b4ed
SHA1 359c99e74e3fdb8721856b6c2f41703e3a9d38de
SHA512 4dffd8397237f1d45355704a9d457813733073715c0fd3c6fcb15c59bed593900f7e587a5e53836587fe8304fe52751fe307406eeff3cde6d14e3ff91c663303
SSDEEP 786432:d1z+2gu2CIOiXDWjRPyxOXzXKprYLuJOXYNzJPAKym:a2JiXDTOXzXKp8LuJpPIm
TLSH
T1775733CDEB7D3999DF0E997A252B2CEFDC352D14BD480A2EE44B0326395E3D31664A01
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery upx

Malware Config

Targets

- Target
  PS22PS4-GUI.exe
- Size 340KB
- SHA256 0d79fa3f02b7bfc5950c6b0a210746fa2d5fd5e51fc7ee7e08851a0fce1a6df1
- MD5 91013483c99543a0aeec408933159f9f
- SHA1 0db890c886f58fa1d61f643a7866460900f1de35
- SHA512 5ff774054856900084b6bd40e4839fdbd6a64ac9db7a73b155757668347c2f55282738cb639e7ed5b2856b2c4a5f9c86906c1b314cecad2138a44f10defc498c
- SSDEEP 6144:5EOSd8ybz1qMF1tdF/G4F1tdF/GA28Fs2k7TbqEANd0IF1tdF/G/:5EO7+hNd04Nd04s2kGEAgINd0/
- TLSH
  T1CA748D2133A41B87DBBF573109E1A11422F6B956967AD60C3E9D50CC0DA9BC0EEB2F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1
- Target
  bin/dlls/DiscUtils.Core.dll
- Size 171KB
- SHA256 c338a2fc6b0879f326237b32b1d15ef617f41a12356ff289e8a09cddcebf67a0
- MD5 b9ea6c772cfb2b208354e2b9db9772db
- SHA1 dfa516697b815c599870935477d024be93855e9e
- SHA512 59bceb0eb013a81c4233b1c229c27ef04e0fa15a13257942bd6963bbfc485a330f897c31373c5d8df0011c6618881a5ed6ba888bf33f461187a7da1eec83eb46
- SSDEEP 3072:z9Jpom+HpU3pp1WakEO/bd8Z1TmS87gStRLM8pUL7cArAenEymI+U9BOgli+6xRg:zzH+Js0akEO/kmS8/1vpUL7cArAenEy0
- TLSH
  T1E1045B0423EC0E6AC6AF8738B4A4704682F3F51AB5B3DB9A495C7DE937137509950B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  bin/dlls/DiscUtils.Iso9660.dll
- Size 50KB
- SHA256 4aa30f253343f3e130f4ff8df0e955232134f339ffcb279cb8fe22a05acc727d
- MD5 c7340cdf1e4af72c007fe68694b7ecb5
- SHA1 cca5352e2fe608fc0bfadbd333490371a2e47770
- SHA512 f423dd51c50344b524c22699d33d36dd4cc6b00c145cdcc10bcef9a3d270f697548f5af95f558887cacd00c3c881b59f951eae23c15b3d8aec320351e7b55a0d
- SSDEEP 768:x2JAzTUhsJXaIjR4cVssGKfgJEwg3BmhjQ/Ivl2qsXsVNET:gA/2sBXssngOwCBmhyINJET
- TLSH
  T17F333A296FFC532BC69E06BAA4B5944163B0E23FA213D7996DC5B1BB6C037C419107A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  bin/dlls/DiscUtils.Net.dll
- Size 23KB
- SHA256 f2baf60c33cdd15be6b48aa2c63ad320d5a16e0d9b2f2de9cdf29b7524a5a501
- MD5 fc21b4213ab63a5fc23f5cb0d4f92d8c
- SHA1 8041edf4540d7e3693f0c1ef654ecc8d9b9e8bb4
- SHA512 df5f80d69e7d6b5b88ac60021173a5c7225e399e1331de455f49782f8727b8c9548e7b05afda14be0b353b9d415cb38237ccfdb1123f724c26da5a88ffcc4f5f
- SSDEEP 384:FINmHZDc8Iv5i8aD3KjkK3lx+vINIQwR6wbzJ9z+M0uhdBOMpv:FINkRc8IvA8g3jK3lAv8INUw3Lhddv
- TLSH
  T1E6B22919A38C833BC77ECE7AB4F1115212F1D218B223EF498D9CF4E72E167664901E66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  bin/dlls/DiscUtils.Registry.dll
- Size 40KB
- SHA256 6d2755946427cf06839259c656c87610a1a3f3cc77403e75707fdabbf2d27290
- MD5 ca7334d3e06ade1c6c91c2aa933f9254
- SHA1 48e88db01f765b99aaa65e2010a9984b0d678b09
- SHA512 8ece4a39ae5da4662ebe0bb60396acb80cfcdca9ecbbf111e3ac3735fde2a9f4e6358076157b5ed2cc253bd96ef610eda87ef2d7c12c7795588ff91b52118f1e
- SSDEEP 768:JXWW2gfWrp+V33Z0hBKTzUOHe6NMyFY4W:pp+r0V3J0hBKTztehyFY4W
- TLSH
  T1250328542BDC8B3BC7AD4EFCA8A1104647B1E2B6B703CBCE4D8925F53C417D15982AA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  bin/dlls/DiscUtils.Streams.dll
- Size 77KB
- SHA256 4275a6241646141419d97e30acab3b2d7f4cda51b5adc9bb12f9c8b385022d51
- MD5 e4229054374707acece62079a0037610
- SHA1 78d778d6159fac469893ccf9bfa475aee31db9a5
- SHA512 5e9ca20fb0e46b2ab4712fb07bd667089f9add8e8bb687c98fd3bd760b2812fca9d0d131a0e0dd5302ca96b76c6b00ac26ab92d7d9d33b6745e7a2aef4922cfd
- SSDEEP 1536:lz69U1ZkKba4acbcCSpCK9W80sQ1EQF/CY+fgYUUtr2VLxh5S:FZkKRcCOfgYUUtr2VLxhI
- TLSH
  T120733B6C13EC8E27E6BEC9BDF87150AA0372F8A5B213DBDD494CB4B569137004994B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  bin/dlls/HtmlAgilityPack.dll
- Size 165KB
- SHA256 37e643b9ef95d1fb21de79ad0b19825fc15aaaf43232c15e030e4c3bdba07714
- MD5 7939c27033a7c0e80022a788c537275d
- SHA1 df3260a60a4223bd0666d1d13b15fb4e4bc78af7
- SHA512 798cd9a213ad3750521cd6ec2fc4e4806c88db50e9c30a6809f067c3a063731d08b67dc9662aa3572aa40c3ba5a037aca7b590f0d9b4214d4ab256525af6d6b6
- SSDEEP 3072:VKAQHsluAGimooRjc48chGlj6q3BEkMGNhYAFBZeihwFvWq:xFluAGMo3slTBEkMiqb
- TLSH
  T1EAF309443BEE5A72E6FBAFBED8B161024679BB659506DF480C4460CC0872794C8D3F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  bin/dlls/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  bin/dlls/lzfse-net.dll
- Size 7KB
- SHA256 6d5cada3788e07233412be711ae24b7e86c054d8ec86542f78bf4c5d7a2d05e9
- MD5 30f712479f00f8831b9eeb1c2638ffa1
- SHA1 da33d7c560c55a5ae209277a54ea82a607efa3b9
- SHA512 a9bfefb7237d56dfa61944de74a930fd741a5410a3a2bf45ba72d45d18508e04ba61f6b691cc990a3ef3d39df9f8b2c1e395c6d0ce96d7d6ca2c07d2555c63f5
- SSDEEP 96:wuM+LkIt4OZwGl+iiAINcIteFNZ0N7oOk5KtgmC2EQTVX:R3ki4OWti+NcItaZkE4ODul
- TLSH
  T15AF19521A3D41273FEFE5F31ACB642459778BB85AC72CB1E1489006A2C59D18CB72F76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  bin/dlls/lzo.net.dll
- Size 10KB
- SHA256 f8f25be02b3f1a55a5a791a7246e3707595cce07cd4031e3b1221de1fa0ee49b
- MD5 bd24f6c05fec63ad938ab954e1665ce8
- SHA1 ef2854e8692772d13d28672ae504bdfea3d46f4b
- SHA512 7ea05c1fe72cb7402c95bf882ad49256ed63c38fe6008c00527e5c8f5f29fa30d2e5b22d8d8fad18fa7eb43d56a729c475eda0a015125b460b8614554a22d116
- SSDEEP 192:r5cuTq81aE7iQes5evVbzY3GmQ1C2O158ju5xaOWzrgo:yuxNe9bUWmHSuvwz5
- TLSH
  T10222B314EBECD217D96E0BBCA5F3160203B56C75AE23EF8F1948219A1C22F544963B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral10
- Target
  bin/dlls/nunit.framework.dll
- Size 477KB
- SHA256 322333b3237b23ef06a01d4ead50ced2546a97e83a89cc6d12038e6daee5aef0
- MD5 c58e2d058fec773888e2f0ca63c96214
- SHA1 a496d3951f9362c98ff99266cca701ed0c86f2d3
- SHA512 68f1b9e69cedee1358b97abaef22613a53c13f1b42a60d0991377ee398d8f8ace1602dcb793723df2142109112a8945ac95d8e9fbde2497055c6d0ac1bef9e59
- SSDEEP 12288:APoRUNwxhkJdW5pgyKgnBf2e/mo6SQi+MvN:APwWJWDdf2tpMvN
- TLSH
  T14BA44A0817FC4615EABE6B7CE531090597B4F412B663E75E4A86E5BD2CB7720C880BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  bin/emulators/JakV2.pkg
- Size 15.2MB
- SHA256 c8ed64b35473c8de90abae8cba35d80fb5bfadc4fcdade7e838dc810c1665487
- MD5 2cb04b369ae89e625dbf3fe6724eb8a1
- SHA1 db897534624e54f40ba525dae5444c88f231b284
- SHA512 9083cc248fa4368fdffa8c725d22e5f585c731d2cd856470582ae43f08dc7e9b7c2ebd38bbb379fd59f7a2505d82016cd43bb300b2b4b3d4118f0359bf93da72
- SSDEEP 393216:WIQoB2+4mU6ywNZ1WiyrbEfcOK2GsgZiAP:qoM+4Iywyrb+tdvg3
- TLSH
  T173F633DE2FBD3E63D7496D3715BB3C7B89362E789F941E81E29B4B0124572931982C80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral12
- Target
  bin/tools/ext/di.exe
- Size 692KB
- SHA256 1d2a2f60416bddeb9e4c93da7721f9fe9cb4b7629894e7f85057c5205cb1f4b3
- MD5 66f80b89c95092f8a2fb65234505a5cd
- SHA1 9fe7dcb1fa82e2898ba45ec3a2bfbb5f9dd90b24
- SHA512 3d9e535b7dee8e7d8598f7d1c3ba088ae7f572c11c6b1adae07405eb43bb2f870bb5720539ca4e9721ef9c0f7fd2cab89b3e90e9b83b116d4cbca7c74ead1db1
- SSDEEP 6144:L/D0hliOTerp3JXBSf17ZHMP32HHJwa2Go3grTsCsBPX9OdGlqiNsWzPUPNmmXJb:Lr0E5UNFMP32Jwa27cKzRmFr
- TLSH
  T11CE4086DFB0700F4DA231B71856FE67F9B5579148021EEABFF0A0B02E8635277D46292
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  bin/tools/ext/libatrac9.dll
- Size 115KB
- SHA256 e1b1f3db147d7996a5b1fbddb2b7322e56f25bbf689f47c50638fd268fc1d3c7
- MD5 c878a972781e4d5c70666c45b92a155a
- SHA1 579a0fce04851bf57a9d143f3cc926944ab5ce34
- SHA512 36e44582bd6485eca4399202696b2fb544b139195e99bb16dd1d4021c382181394b8b311220c13bbfd5aec96159c4885813d37de6780ddf27e5afe49a90551eb
- SSDEEP 3072:Z5tVPq/1fdYeJNxRy/9XIO/YzQuaBI6lrwxZsjyuJDK7WJ9u:zd/2OYzQD5DEM
- TLSH
  T182C36C41FA8143A2E46A123D14F7A6376B295221CF198EC3A6D07B6AFCD31D19F713C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14
- Target
  bin/tools/ext/sc.exe
- Size 1.0MB
- SHA256 32389fbd3dbfe62f140db1eb81e8d968259cd908d66aeb7a656de8e0a99abf35
- MD5 2b0e372b7d2bd1d7da721acc5bc835fd
- SHA1 6f327d25326970d96c0ae4bd8980d52fb0c5fc89
- SHA512 99dec97f75a746c4b1ed7a89971340236ef37c9e92237549c049676f75fd90e7811be880fd6117cd6a2b5412c63b9e85fd38ba67a0d51e3e680cde2e53c792f9
- SSDEEP 24576:IwlR4h8a9VWcXcWd4Devxo8qlvOfiXlthVLzD/j/3f:xD4P9Vn9Rpo5l/jH
- TLSH
  T1C4352919FB4B90F4DD131B71851FE27F9B207E088026EEABFF8A1A02E8636277D15545
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral15
- Target
  bin/tools/gengp4.exe
- Size 658KB
- SHA256 65042f9982e6db4c8610e8e735ca296e685518917cb71e7db42451b5069846e6
- MD5 cbbb5c7c6944f33886262d8f8c27ec97
- SHA1 9d819873f6c60e11155eb07e2d90829978f892b0
- SHA512 f4713641ac4e6c126a13312a6b7c732e29c45eacf377890a11edbef2e3070b30d485ce67551056062f495760a17978e3a79043b2379a5045169976352e9399a8
- SSDEEP 12288:Rl4axzQlopnW+xecCGTQJ5wBhebihMKB3/EId2s21qqQEzLEZEdMReVMG2:fp9Qlow5SJ3/jdhHqxQqdkG2
- TLSH
  T117E42335A6CE3802F60D81774CA743C43B57F52A53B94E21B95C1B0B3EEF12619857AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral16
- Target
  bin/tools/gengp4_patch.exe
- Size 658KB
- SHA256 65042f9982e6db4c8610e8e735ca296e685518917cb71e7db42451b5069846e6
- MD5 cbbb5c7c6944f33886262d8f8c27ec97
- SHA1 9d819873f6c60e11155eb07e2d90829978f892b0
- SHA512 f4713641ac4e6c126a13312a6b7c732e29c45eacf377890a11edbef2e3070b30d485ce67551056062f495760a17978e3a79043b2379a5045169976352e9399a8
- SSDEEP 12288:Rl4axzQlopnW+xecCGTQJ5wBhebihMKB3/EId2s21qqQEzLEZEdMReVMG2:fp9Qlow5SJ3/jdhHqxQqdkG2
- TLSH
  T117E42335A6CE3802F60D81774CA743C43B57F52A53B94E21B95C1B0B3EEF12619857AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral17
- Target
  bin/tools/libmbedcrypto.dll
- Size 1.0MB
- SHA256 d5031cd7bca8821e472e2048fec67a22ba999273593165ad8b994cbe26e135cb
- MD5 0a44661127cd7163c2f75d24b90db906
- SHA1 4759b18473145df1bae96d8de55c23bc0b733b2f
- SHA512 803d234c3f3e996f07237ed1797970aa4b83dfec888d5a267093c81024f6116093d17ea1ff5bf7741ba8d2efe9c8b3761778acf5eb8a8aae480a94b45f0bbe42
- SSDEEP 12288:B4ikuHoQqw8SEA3iukf+SKjoiYNbDZsdJhip5kbfM8AWPhkF8/49OL:B4iDHzqw8NA8KciYNQJhiggNg
- TLSH
  T1B2356D49EBC78BABFE011A3789E7C7160739F140DA47FF4BE24AD835E9162616D47088
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18
- Target
  bin/tools/magick.exe
- Size 22.3MB
- SHA256 c9e972af0b6bfba0243618fe9144bc103d1a14078394f05682461867abbc5d9d
- MD5 86c81931d2d1b183e7debfd565f8c867
- SHA1 d2500e6fa1a2a1469490e8bc7dd36107cbcceede
- SHA512 a8ed9cdce06bd0a2285a055edefcdbdbab79b4b82a09fa42bf09bc7ffbbe6260c3ae600113d56a9dfd49ade4ab359d748d2217e9229e8238eff05e7443f63fe4
- SSDEEP 393216:s4WSKJ1GeS2f12pywmI7/XLbXLRjELT3cxiCV:X0mR7
- TLSH
  T173379F03A26014E5D577C038CE6B6717EBB1786907B157E727A846DA2F2BBE0393B701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  bin/tools/orbis-pub-cmd.exe
- Size 3.0MB
- SHA256 10f39b739b9d146f3d447ae2bc3a8c66e9d76181a35413bc42c3c25cb317a864
- MD5 75cc4073efe568e64623c3be960b3d63
- SHA1 d27c24bb98f874706e50e8871a523876c8f5c7ab
- SHA512 4a7ac6b08c6354bb59a0aac921d29098807f60939d245aade8c32243e6d945e194ae8b0b680f0d1f42f2397a0088e478b10e5ab82ed9477d2bf0e337fd08ca87
- SSDEEP 49152:HkuvAQSB4XtnQV8WueT6Ki+ypKtA0Rgt0ArZlw0grOTYm8k3asYIMNna:E0nQVKzUTWt0ArZGN
- TLSH
  T105E5B042FBC780F1ED47167611ABA76A9E36A3160334D9C3E3A82E554D113E16B3F389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20
- Target
  bin/tools/replhex.dll
- Size 7KB
- SHA256 a8c40d718b695adf50fa34bd09efd02195849d522411061f64ccd0285a1ce791
- MD5 42ce1e658be9e2041d37e09e7a591389
- SHA1 e002b3f12ac79b2dc11dc87c5903e3d45f6413e8
- SHA512 552cd2403e9a16d35f8908ff937d5a8d27bf5fb19431726ccd8c79c00df495d7039e304bd449b34796e34ca17f357ef5149f10b42c432e52950a55edfee41ecf
- SSDEEP 96:eGWY52RvYK8JfgegarElr11r0UwTKD2e/zEVhytCtoXbdm2fMrxBNKFzNt:vXcvJ8Olfl5wTKbktoXbsU
- TLSH
  T145E1B7027FD641AAF57B4A302CF247121739BAD18F36DF6D2981871AAE27714C171F61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  bin/tools/replhex.exe
- Size 144KB
- SHA256 9af926594f75b86d66ae356a2f53e2c71e2a64ecea4ce7a374d579b689349e44
- MD5 9228cae18d0fc674ee19add4341f791d
- SHA1 ca4bb6709818c08872ded5f7ebdfddcab1e4a7f6
- SHA512 23bbdec91e870e34fd2d3681790855648c1f56823dd99a1e03b1494608b76c8aadcfd8b2544a82c5384f2ebacfb32b5149117b1442b9c9d787e505e2a125be11
- SSDEEP 3072:o8vbzyQ6Y1YXrbNK+3FNxacPEMk6jRQAATWH:oszAXNK+3FVHRQLTW
- TLSH
  T155E32817B2AD11FDD1ABE23C89A24A06F7767826473597CF0390463A0F67BE09E79311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

UPX packed file

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22