aaaae27de81511cc9149a6c2d774ef02c2a7155712336048f3e88d9960a940fb

Sharing

Copy URL Twitter E-mail

General

Target
Nitrox_1.8.1.0_win_x64.zip
Size 44.6MB
Sample260620-pyjk7agt5t
SHA256 aaaae27de81511cc9149a6c2d774ef02c2a7155712336048f3e88d9960a940fb
MD5 e5b39369b1cf53442b3f80519a9e62c4
SHA1 2742a3beda75f605635dfbcb99e8a0a6f5323335
SHA512 3879e224a85692a0b9466cfe1908dc84b864489c759b9421b91a0f887a7b2aace80880edcee7f379282b9b57a5fe39405bc3254737752ccb3729a6a57c2581dd
SSDEEP 786432:ndJskZOjkFCVOwfmM6MF1yOw30kZOjkFCE92DD4Au+4cyY692DD4Au+4h:noFOwfmrMFUOw80QD4T+6Y6QD4T+0
TLSH
T16CA7331D9D675E97E889AB30159B981EE1E3C35A9162CEF33CF7B844C87E792C740A04
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Targets

- Target
  publish/Mono.Cecil.Mdb.dll
- Size 38KB
- SHA256 5dd65700e11d8a9e3461044b0e6f82abbedddd6fc90afb53c2b53744b9281233
- MD5 54016afec9a4541de4ea7fdc4536bee6
- SHA1 06016e9cc71c257e9e0dc7a6a53844233b977dac
- SHA512 a276fbb162233936b20b4dad82b19f1ad90fe3af298c4e8fd8fdf9328758db378d69f2f4d1080444e7a65cf366a0a0da834a162a7dd6ddff9dbdd1a9a1873b64
- SSDEEP 768:nrF3HuZyOt78PeWSTlNeyJOgfGNOV/DVxPZxaCCrHpTFu6L4oWk:nrFecOt78PeWCLOgfGkVzKpTJL4oWk
- TLSH
  T1E30307086FAD962BC2AE55FEE4A126191BF1D53C6603FBAB4DC4B0F3BC437444512267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  publish/Mono.Cecil.Pdb.dll
- Size 87KB
- SHA256 f5234d2a93e1e25a5ca703cadab9cd9f0218975f1a78ee6355c0a9d3978c5de0
- MD5 f100e5cf51ef9837af10b793f3ed8703
- SHA1 713edb8aca42579319ec77eb392f5714c0731b32
- SHA512 a9e5d15d854ba5f874e3160bed489cbf340f9bc847e52d1c03c82c3689c317c940ee3f92317513278a6f7ab5bbc9b2e5bd6259ab4e1e9dad4d74e7fdf08ea42e
- SSDEEP 1536:3U2qJ+tTKzlXr+wHRsh3Sv8q+KdbEAoYKHNvzpS6u6faHC9e:E2y5+weh2+KSAiFzpO6CHC9e
- TLSH
  T169936D31A7ACA96AD8DC617724B70A0A07F2D2A7D153972A59C87FF41D2F7700932393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  publish/Mono.Cecil.Rocks.dll
- Size 24KB
- SHA256 b8106c90112b3d474ed3a7da8683c010f4cb9be724c0eaf459143464e611f8a8
- MD5 519aff3818e8871e428f403b9f1bf63d
- SHA1 e1d1fc47db18e2474aa348e1d39f2c0f930f4410
- SHA512 6e6efc407fb382cf0bbee191e620de0b494d207357789793548eb2f5b7bc0ee9e1c55110fd084d0da0d1f4904cc8b965c8244b55b4a856e8c3941bccc64d57d2
- SSDEEP 384:EWLOZBsQXmnFlPQnqc9H559krjuhXcVXD9PmROMLUBLMWG1UX8JvbrjEV1O/pl/E:raQHP+qcbkrPuROoUBBLXM/d
- TLSH
  T1E1B239103B99CF3BC2FF867958D2532802F1C96A9603EB064DCC90E99A5BF945341BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  publish/Mono.Cecil.dll
- Size 347KB
- SHA256 a4ac5e4d0d66dffdae43498e95ad502d042b0fc5c9d70264b9d4c88c3cc94955
- MD5 c4b802b9b66dc5b2b3f251c8822da712
- SHA1 141e52ac972b6a9001601140442709e2d554996f
- SHA512 dda56a6a1dd4aacd46072bedde582170ab67a95c16ca4847b9a39ad20ca74f1f37df2d6a64c5dff022380fee1e084f548015ae74bef395e74cf0273de331b09a
- SSDEEP 6144:N6fRR1AtYWP4aW2psE5MLv+pVRomxaSt1Q:C6tYWr/oGpVRQSt
- TLSH
  T181747C3433EC573BE69F637BD469042A42F5D816738BEF9D48C4A9F64C47B928A01263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  publish/Mono.Nat.dll
- Size 68KB
- SHA256 a4bedaca52c52d4db7aa00533937225c0169c00c29a2bfe6f3c3d63ab3f5148b
- MD5 795f5cbb1b5a867533876989b2cec715
- SHA1 7c98e4af2e604bfde198cd76b872401e95d85c59
- SHA512 6d6a2f0850f3f400a1f32cc5936490bff867cd31696ed936abd22c9b66c82ebf955925f17bc57ca8424d8b8858e6ad04e254e212239a62b37d46983fc123433b
- SSDEEP 1536:g7UdPax3K2gTxpCUsKRow2Qy86onxIkK8NqyYHu3ZOs6tkEDqbdp:LdMavJ1X6oxIkKYYOJOs6tkEDqbb
- TLSH
  T18663394123FC8A37DBAF6BBDA67582024777B6466922E78E1DDC98DD0953BC04820773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  publish/Newtonsoft.Json.dll
- Size 677KB
- SHA256 99177a4cbe03625768d64a3d73392310372888f74c3eb271cf775e93057a38e6
- MD5 9454ae6eb0c6ad77e93a95074ba29266
- SHA1 df83fcb3639596ad42d5be8314ef9d672079198b
- SHA512 8d1d2bedde2d5f33179560e1a4f72206ee1984b3f5eb96e93f94329c4c4a8044dd74d62f9e708293132de8c8f351f0e7fed74a450a251a8ade205702b29d9de1
- SSDEEP 12288:SW7laYjrY+5lqoa34DOyPsoD2AgBSjq13P:xP0iqoi4DpEBSjqVP
- TLSH
  T1FCE42A0067FC8B17D2DE93B9B9304D0646F6E417A3B6EFCF990899A91C93B509D413A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  publish/Nitrox.Launcher.dll
- Size 6.7MB
- SHA256 ba61022bcf543e7427c9d364f3c6e588f03c9490e822ceeabb5b726623a85657
- MD5 2d5ef462f382837f861434b1539163a6
- SHA1 a49f272262d48e258459e6bb3d6ec5f0857f3b09
- SHA512 0079cd1952b1a4372be4922496d57babc22413b159f5ba603d01f1c34afd3ad0bddd698e780af8e804dc7e03fa30aae17a94c6d9f025c4543dfda0ab51babb44
- SSDEEP 98304:fF54/c2uvUfc/76jlCndyknMXEodcuwdF4/7Hto/E9UKwZQNSuEe8HGgADtgNNE:fF6/1u8s6QndJnM0+bt2vKwmye8mgi
- TLSH
  T199661206B392C706CA7E2F7086F41A604E79EF2AE7D3CB5BA19CB660145F7550D0738A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  publish/Nitrox.Launcher.exe
- Size 175KB
- SHA256 f630ce312a88f4e567b88e8801e2ca5e14d648a2b29b16e348e59429b3a80b6d
- MD5 53a7bffcb96828e539bd555c45bcd2b4
- SHA1 bbb9864985d5256cf648d308178af92f0f564f63
- SHA512 f2bbaf14c49c8009507db7c2c1cfb9aa197bb25ab22e986d2ca676b941677b414c19ae708131cc439ee10cbfd78da2b373ad35029b51c84e6917c99896a6985e
- SSDEEP 3072:ypbmtWSkvEV42bdAw6O6Vqmpgx8vBpEwc1hf4LOaBdmf3p38T:ypbmlGEV42bQrvBewcPf4/mf3p6
- TLSH
  T144044A52B2A801FDD1B7A37899A21901F77B795A473197CF0390863A1F73AD0AE3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral8
- Target
  publish/Nitrox.Model.Subnautica.dll
- Size 191KB
- SHA256 9440cbddb1ed599148999ebe11652d098773da2f567249e367a199e44074d6a5
- MD5 74fb2342c41e60fd61cbbb0d154dea9c
- SHA1 4a2f55034c76555b11aa12294fe47ec843f35e2b
- SHA512 62c4e3898c0d3ad32f4066cfe1d08478d63f2b69b4526399f65923a0a37d759f55080d6c5a60e3b5d57b2b48f41627366a11229f854692468ecf24f12ac4338b
- SSDEEP 3072:FsRuJyL5GwMvMlP8gx44WmibKp4ayAFhIXWM0YnLuB0eTcBgx+DRvCH4zjiwY:sRla4Wvs4xIIXWM3QARvS8+w
- TLSH
  T1F114291123BD577EDBEF0B3EF1A41412C636755A3621E276AF0CE8DE6427B026814A73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  publish/Nitrox.Model.dll
- Size 290KB
- SHA256 5498d9f45ab0c5b534d1aacf17dcf920d210d37430dd74d241708292d7d53f9b
- MD5 090faf34ef1e8dec6725fff1be0be8db
- SHA1 3bf28f2af43799594e22d3ff858a482622358e5b
- SHA512 dd2615fb2ebff591ec284d9e38b3be8bcbe8734c3b46e25506589a8021068462474c26d7ff3f46c19b997a872027595b3750bf10bac9bffa5df45f0eb38473b4
- SSDEEP 6144:Elf7vQ0bBeXuCqNQTbAKn0fEPfx27EZFlKHJgKxCDx7uRr69G8iMzR6R5p4ABIMw:EF7vQ0bBeXuCqNQTbAKn0fEPfx27EZF/
- TLSH
  T17C549F0033FC8B1AD2BF4FBAB4F015568732E847A557E78EA6CC91EE29933519910763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  publish/Nitrox.Server.Subnautica.dll
- Size 353KB
- SHA256 9c529aec77b44c3febf63e5998a8a0edbb80d3b02d738f5ec67aea7cab75ca1b
- MD5 f94157cba000209858c46481d72a2714
- SHA1 ed5b443d0677777f466f356a707a9286e203b521
- SHA512 8bed6dc63c3e9f28adbbdaf340bf89c84a76c00a8392c722c69ab625ede6f33962a2f145f318ccc4054dc7dacd7ceb12d680d9f2ee060bd5ae002b54aa9ec312
- SSDEEP 6144:hGOqqo6d+8H4m6CSO1fah+ztv7rH+mPhy8KYtyawP00DkF4xFE8okdiPckD:Sw4mTPExtDkFeFakdWD
- TLSH
  T1DC746A1123FC0329E5FF2BB5B4B0092846B2B907E4BAF75D5E85A9ED2D9374098107B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  publish/Nitrox.Server.Subnautica.exe
- Size 142KB
- SHA256 92c140942cac986b8d0eb09d51490e18d8efa955d41bef475cfe22391072f704
- MD5 17cf854c59c8c3de23cc1fc202ba00e1
- SHA1 06c89880660dc1212b5990545314b5712ea21a0e
- SHA512 e42bd6f50aec4a87e5d064e119e110e40726d7cc989946bffb5c95fe5025d481dd51bb455d33352b72cd3e6e3d5391f89a60fc559d6bbbbbeac127c3c6d88195
- SSDEEP 3072:fpbmtWSkvEV42bdAw6O6Vqmpgx8vBpuwv:fpbmlGEV42bQrvBYw
- TLSH
  T164E31703B2A911FDE1BBA37889A24901F7B678194B7197CF0350857A1F67BD09E7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  publish/Serilog.Sinks.Async.dll
- Size 14KB
- SHA256 1031cd50ee3f0d62bbfdad3e07de0e953f26b90edac475e1b06fc65d2b42619c
- MD5 78251f8069115231c1cddf8dbb57788a
- SHA1 4e1b3adbe820deedda6e7e89ba74ec1af3c0fef8
- SHA512 ea6ba00374feb9292a82734257892ac66f35beb55e85fe8933541773d34db266a7f7bc7f73b5606ab925d452989773416b2b18ae0e7d2b60316f9a7e5dbea86d
- SSDEEP 384:w8GGAFa7wY6silzFBTER7YTWuZwj9g/WqqchX5Wrm/5WGJszMvaU/H84OMjnsC0H:pGxFa0YJilJtjNT
- TLSH
  T1B7628519B79C6736DCDF2F7A74B242A01334E7F1A825DA0E24A866D4CC779110BB270B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  publish/Serilog.Sinks.File.dll
- Size 30KB
- SHA256 fe02a7c70b0669b0e0449bf605d090be868eff0b11556db3156ec3d9834c47c6
- MD5 5c857c5926b0e7fce94fa5301759e49d
- SHA1 477a1d5941d796e784feb93caad41e54db3aac03
- SHA512 eff3d65bbae69de2f05167725924a8e63285a46b826b4a64e5a7c22c7e025441949c923fb8146cf83fab5932748d479d285c29356317c6791c01fa449c64bf24
- SSDEEP 768:oOTQws5P6l+m38DHBXLSycBHdDVXR/yx0PtmF4zx:VQVPW+gKZZcdXR6HG
- TLSH
  T1CFD22946A7EE021BD2EF1F78E8B092620735F9A6E873EB0D05CC65AA1C17B844D117D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  publish/Serilog.Sinks.Map.dll
- Size 11KB
- SHA256 1a40a67a1043325826428895a504773436dbc6fa670ff23d98c270d98e1d46d2
- MD5 59e22d42dcf0b754b5dfbbbd1acef489
- SHA1 929fde8b36e0f6ab25540f511b070e54ebc18244
- SHA512 8884ff2602436e75e8182774c7fd2d4a519cc02e4d63e1a886ae0e79233ca74839da00fedc1339747d7db00ba168c169b07417dbe73fa1277b9f04badf788a0e
- SSDEEP 192:SRxyVM/YcR//TIkakykg7FjS0+O4V3f4/hI6OX4DscfY5RJTfRqS:Y/JOkakykg7RS0+O4VYhI6KoscQbJTfn
- TLSH
  T15B320A0DBBACD36BDCFB4BBDB5F022865670F504B512DF1A088D71261C2A7644AE162B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  publish/Serilog.dll
- Size 157KB
- SHA256 ba73b4bf7c8ef54303ad3ce540ac61855e0cd0d8396ad622059d43ccdea1c854
- MD5 748b0abc3047c6b359ec6bd4ace59260
- SHA1 8d6070fa66f51c4d14db8e9a82bf0950f3f07923
- SHA512 c5e8f5f7622410b3d680e47cad0539f3c48858dcc6f0bb06d8ea67371da905dd231d9d6625bdbdf51288bc3f19cb5b2fc980059dbbe21beb311ddfa5e4b05cd5
- SSDEEP 3072:Iodxwj5WkwlaYlWEhJ2Lmz9i6jJIQuUbSart2vQvVbryMc7fXM70fKN:Io7wj5WkwlPhJ2Lmzz6QF52010oP
- TLSH
  T189F35A26B3EC4A72DAEF5A34B2F491402771F51AD43BF78A684D7AEC1D16B804E84317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  publish/ShimSkiaSharp.dll
- Size 153KB
- SHA256 75454712ab2aef35d74f32476fb942a9cc66ab52d86ac379e0b18b75f080c99d
- MD5 862144cca8e7ed6cfcdfbc301c489561
- SHA1 7ada1a89775ff5f0ccc94f304c456ed7568145b0
- SHA512 946c1d21e9f36dd514d279bd4888d6505cdd56b0e659eed789d15e4639c46f905688bbe50c8292c1124d27fd96442523bcaaa83e6da988d7f77a3730dbbcfebc
- SSDEEP 3072:CTGGsMpifwGU6KbcH3wjU9d5aMgCiBRThrDL68zMEHay:C5s6VGUHM9dgMFiBR
- TLSH
  T110E30A51B3B9851BC7CD9139B0299A18C369E55E32A2FBFA9F05F8F76E933020440D67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  publish/SixLabors.ImageSharp.dll
- Size 1.7MB
- SHA256 df2815a7802fd509ab941692ff5aac0fc4c8e0568abb0c79969dbc9e7e3a070d
- MD5 251163e424dcb68e96f80a1c86276fbc
- SHA1 43612a663a0abe19cc90666b837ee7ff6459b146
- SHA512 b44ffcb44740649a91b8dbe86353a9462573040278e869ce606e8621f57d144c61f1c278be635e0fe84adf87c43473c3862d85d07a64342e1b266d4c8439a022
- SSDEEP 24576:z8ZKA6f4HQD2DVPbAQqgxthDQOsxapWYZVz:zfpaNbAkfmO
- TLSH
  T1D2856C2473E4DB3BD85F5D36A922050533FAD81787B3B38A6D64ABF62C633961D082D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  publish/SkiaSharp.HarfBuzz.dll
- Size 23KB
- SHA256 b72494162f0ac8deaee8c344dd6d6fee2ccfcf0a7756c09272e35baed82b5db1
- MD5 f42bd5daef89358c1bce662fdb054164
- SHA1 e99a30e20e06372c12691a5a031a57615229c1c6
- SHA512 0edb87cddbc08de4184d67595152472309cd15e3bf76078acbf28371bc47408a8625bf676c7e7dd0afa1e299d8f0792aabb9e3f14b481c95a1cc0fe2ae4bcf28
- SSDEEP 384:KvbY0rAsOsBFEYhHyw8WSCFT7nHRN7WIBHR9zschY:qpAsOwJ371/f9ztO
- TLSH
  T105B27C955BA8831BDD7F4C30A9F0C6462E7DA786A811EB6E0D94E0181C53BC9AF3072D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  publish/SkiaSharp.dll
- Size 470KB
- SHA256 a307f6055a8944c9c9afe7ad0a0e03755587c15c70cd42d34a35ac41035a259c
- MD5 a37cbcb1892915d63cbdcb5c3376b8c6
- SHA1 1b2f69977be134edf44d2a31a695a0c196f9140f
- SHA512 976fec96dd72a72b2cb88acb1df353f187efdc7b0dbb296769a652389e8ed33b796ae1e0755b635f02665e2b63bab58857dfe67e1919676104e91a68207620f0
- SSDEEP 6144:j73MGgujAAC8SogVNCzyfGUjwPizg/Y7WzxEKinHcrLpEPL:jLMGgujAjVN55jwKzg+wxEKi8RiL
- TLSH
  T1A9A45B14B3FCA937DADE5B39E0255E9452B1D0C5A71FE74302C9C1B4ED52B868CB22A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  publish/Svg.Custom.dll
- Size 717KB
- SHA256 9bbd9213ce662b3b88917bd28d81c90b216211c92cd398c8559e086295f39794
- MD5 101bb0ade2c5d56896306b8cee0116fd
- SHA1 be524a5d34d58bcf3bf581e34abe395098b45196
- SHA512 b4124753c20e3265b78ccc0ec957f0c25fa98901fef1782883143012ffe600a266febc965c64bbc113b019782aceb1716f73072570790a8a2005ae1f886d4d61
- SSDEEP 12288:e34ieIMqdhI9m0Lb0s/kvUV1jnQxZdlCG3pFb6KtXX2nrfSNT6v2q6wwTnj1Eagm:HieIdjWm0LevUV1jnQxZdlCG3pFb6Ktp
- TLSH
  T19DF4182864963133C63E6738B8641D28EFB1CC4B65599A793ACC44A73FB772548433EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  publish/Svg.Model.dll
- Size 143KB
- SHA256 8fd59b26fdaa52076fb91d2e169ee3d1e295a7a8f7db0b1567c817e8d1f50dd4
- MD5 432d15bb61a4fae21546fe50ca06b69a
- SHA1 e172d6d3fe2fbed162f5a017d816f10193189509
- SHA512 d5907f96bc0c0e8bfa07f549326a87b26c61102882d525ba7c820552af5a620d4fb337c89e1beabafcf2b4876c22273500d2bf3b738a256864083600f6104e30
- SSDEEP 3072:Jq6rppNvuT7AivONjCvVyedIJ8PRNhb76GzqFE4meA1oJO:Jq6rpPuG+iJ8Z7HzqF3meA
- TLSH
  T1B2E39E1863A98B3AE64F5BBC7070101C17B2D203E663F3555D9D687E4D6BBD32608AE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  publish/Svg.Skia.dll
- Size 54KB
- SHA256 62adc5d4946330fdc49123d65a03fdc51bf2b99ad0fe13cd77bf678f9c1d74b7
- MD5 195d9e0c5df01b703704a926b29a5512
- SHA1 a0fef4f6e33980ec262d572a6a51e98d9cd4d6be
- SHA512 2c1ab1de9641f26f2d3eac6d2596e5e876d2b290d691befd2dc22fa16b7795a177df047ac97d9d044d215660749a60e6365397f7e93e3bbe53fcd34043a2699b
- SSDEEP 1536:4Wwq+UDR6PCTNKChBUadd2OJvoY/7KvoH:4Wwq+dhUd2OxRfH
- TLSH
  T156434A0A33B8C72FCA8F4A36B5F9091452B0D3479723EB864CA1A5BD3D573D66A053D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  publish/System.Text.Json.dll
- Size 603KB
- SHA256 b736b4bda3f257c1ef42ec110d8caf7dfff6dfd8f51615e35bbf49f423d6f678
- MD5 db96a0cde7d9b86b9e41c52e8dcadc53
- SHA1 3b7854200ac52fa3070f56c5a94969e577967df5
- SHA512 bf6d8b58e6048311709ffb5cbda35624ec6a4d1d48c8bbe23d11a370b2d61ed51c5c7418404eff59c1607661422a4430d19bc9203ac6f1752b5ed9977a9b3d76
- SSDEEP 12288:40AQHZmwTVvZjm6vwN2DNvqq+jLW6qb19e:xHZdLm64NKb1Y
- TLSH
  T1A5D45B6073EC4B1BD9DE4375F47080298FFEF92A27A6E78B441454E909937848D227BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  publish/Tmds.DBus.Protocol.dll
- Size 196KB
- SHA256 111fddda3d7f523e41d8fe55380fa60ce4fa09ef0984972e97030790d18aa7d6
- MD5 ed4e18c6142488a943b2f8c90cb226e6
- SHA1 68d7c6fbb42cdca212c8d788f28044ba7f27e02e
- SHA512 4642731ffebd444058372de30976ebab134db399daaf86c33a2f9dc4ab4834a576f70216593d3e53f00fa2d5d615cbc56b9fdd2b606a0aae9ad849d6ce3ce981
- SSDEEP 3072:4+OFQaXbabcUDu42TaOPydte9N1fDP0G2HR6Y6Hb8zIf6zYzraJ6x2gmdHP:4+7u4l0NdPaHA4zIf0Yzq60gi
- TLSH
  T158144AE473DC8F35D79F4736F961A119C7728A83A5ABF7CA1498D1F8186338498422E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  publish/av_libglesv2.dll
- Size 5.2MB
- SHA256 9b203e40323b49dad29546a52b8b67d200bba8ff4cab9709a79cede23ba847d4
- MD5 11a4a07f31e4a91fff678c019b7736af
- SHA1 9912e11aa9c351be136474e0d0975e7964b1e124
- SHA512 4197cd706c7abb4782f05ba73177a018299365060c6368305b030f21733f3209545bc7d8f61968c79b24088ced4acc4eda92044821fb8347c3370bc6925a4bf1
- SSDEEP 49152:FJ2uagzq2YgAoS2tNydAOlzwn56aCqQ2iUAqC2rCnsZ1LT/Tq2XEoxEf6m8s47eF:9PTjAurCnsZ5T/lXEonmn56AL
- TLSH
  T104467C03F39690DEC409D2B9874B8622F776B88507257ADF229497242F77FD06B3A724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  publish/dnlib.dll
- Size 1.1MB
- SHA256 c87ad7414772597f523bae08d7fc1a943e58abf65d93168c5219922776c26aa6
- MD5 9b71cbd3f4e0a8eb55697d7f85cccaff
- SHA1 16c329802e60122f2bbe9b96160a5d23abc85ae2
- SHA512 802d11b9c910e96bfd0cdf8eb781c70cb20c0de5a1a52c0b4967ca33c71fb43883c6e294e5a6a4fe51bdc7f2f8ab23e1566c20ba50d45f714334336b06747e30
- SSDEEP 24576:KF58K2UNnhU9BXVoJqYq6Ck6enhYUDkVl0byv7f2AL:MwtYLhKo
- TLSH
  T1A8456B0577EDDB37C4DE8B7BE87205640BF1D80AA797EB1F5620E6AA2C827549C002D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  publish/lib/net472/discord_game_sdk.dll
- Size 3.3MB
- SHA256 a6b6d7df00a58dc50248d91048578d0fe52182286b487ef89a961fd10467dbd1
- MD5 4402cd4891c256ee40046c6092afdcbf
- SHA1 914e01743c7591beb79a61417b262caeb23e2c20
- SHA512 78da4181132a02d7d17ba4b2839018dc43d7d691c8bb01d34e5f7439df9c92951ce687e9487df158c44e764275b45d6800f6629ec2a175cc4ecdf868292291e5
- SSDEEP 24576:Q/NGmO/w02OFM7zWIyjQYS2tBMPfL+8T14rbXojA4F8eEcu2sqhA+cGRlZVIH06R:3oOiaQAtBMPfCn/WDcGRxIU6iIdAk
- TLSH
  T1E8F539217A5A646CC0AAC474838B4A722A3138CB1F35BDFF04D595793F69AF46F3D218
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  publish/lib/net472/protobuf-net.dll
- Size 178KB
- SHA256 741bef5c3c2fb0d81f68362dfd3d97affb7ca42a1ecd6e5ab31d700054e0fad2
- MD5 9bc371cc54cac02a4f017236085b4190
- SHA1 cd0f8c516575ad9a585e6b6f345bb1922312e9e6
- SHA512 b25b633fdb0c36ba5efd9530486ad948603127cff4b95100d58114df9ee4ca542336c14c7c29da430c442b419b159180a8f0209d7a615a3d36d6b0820c6e06b9
- SSDEEP 3072:JVvKkOhm4OX9AaEgULsm9r9whCO2+CIO40SSsd9cYX94I4:n3OM4yXEgULsm9e2mO4P7qI
- TLSH
  T1D0043A082BF98A15E5FE6BBCD4B1110047B5F612A52BD79E225090FE2CB3B91DD10FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  publish/libHarfBuzzSharp.dll
- Size 1.7MB
- SHA256 eb76238c9e8e41d44b5a5b18167c4c5b39ca5db4277af5dbe92d730f0fc14a7d
- MD5 e0c86bbd88d6b8f5643c1ab1c050a4ee
- SHA1 f6c72b1fd89d0f9e3d7825a0450ae0c0af092c5a
- SHA512 023a1054d7516ebb99b46ca3f9a17b1ee00e55a46356586513fdd45c42bd6ccca16139a8e93e7a9bc533afa5abed121cb5fd40474bfb27bca22da3598ebef694
- SSDEEP 49152:MG+tDvarn9O+3KVv/s0upzEpOqw8k25Pj4LneMdTaGVW:FS2be5Pp
- TLSH
  T1E3859E4AF2AA10E9D9BFC074C666950BE7A274050314DFEF65E08A95EF23EF5167E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  publish/libSkiaSharp.dll
- Size 9.2MB
- SHA256 043d1bf891995cde5fc50e1a07527f732f275908c6043bd2f67665ed962d1d8e
- MD5 335c91ae3de8a600a6e2dd13cbf9c6c6
- SHA1 a5c56865b72d360896f14c5ab39c18b36bc2c4a9
- SHA512 c91612d508473f005962c910a2c77d4de5c60046063d1cf218443850b419d50bd84172bc8b7e909b0a721659e6de51ac361bd9b2965a7dd7fb1572964fa57991
- SSDEEP 98304:/uEvbY4BSISaagsXUsDFCoPUJ/CR8wx/3T:G8RQDFCU
- TLSH
  T11DA64A17766B64ACC05AC4B4934B89566D2038CB0B35BCEF41C5A1393FB9BF42F7A225
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  publish/protobuf-net.dll
- Size 178KB
- SHA256 741bef5c3c2fb0d81f68362dfd3d97affb7ca42a1ecd6e5ab31d700054e0fad2
- MD5 9bc371cc54cac02a4f017236085b4190
- SHA1 cd0f8c516575ad9a585e6b6f345bb1922312e9e6
- SHA512 b25b633fdb0c36ba5efd9530486ad948603127cff4b95100d58114df9ee4ca542336c14c7c29da430c442b419b159180a8f0209d7a615a3d36d6b0820c6e06b9
- SSDEEP 3072:JVvKkOhm4OX9AaEgULsm9r9whCO2+CIO40SSsd9cYX94I4:n3OM4yXEgULsm9e2mO4P7qI
- TLSH
  T1D0043A082BF98A15E5FE6BBCD4B1110047B5F612A52BD79E225090FE2CB3B91DD10FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32