2a775c91f27806bde541ba179dbcc904ce2f405affb1848297529c28513141de

Sharing

Copy URL Twitter E-mail

General

Target
rls_bruckell_ravix_0.2.7.zip
Size 726.1MB
Sample260621-rfq9esev7v
SHA256 2a775c91f27806bde541ba179dbcc904ce2f405affb1848297529c28513141de
MD5 811cc92fed842d6e7cc44b7413d05461
SHA1 22f8f5ce5e6d0375982f6350f16a5feb21ce979b
SHA512 136892eba141fc360387462b3604f1bff6ab0074c5827aaa79d3011acafc30c4eb584cdbe65f06922ebc6573c5f50943a12068fb63aadd590f6c7836bd8ec255
SSDEEP 12582912:H0UbwtW03DF406b2lsHcGu0SI2cY0GLoI3GMOuXR2h/rhXKGuPeIO7gTC4LAD:HsT63b2lM1+0u3GMOuXUhIhP80OD
TLSH
T1268933E9E5CCA47CC98F9231C1796B91A0E1F0313BBE5C92A211D7F4681E7D1E629B07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  rls_bruckell_ravix_0.2.7.zip
- Size 726.1MB
- SHA256 2a775c91f27806bde541ba179dbcc904ce2f405affb1848297529c28513141de
- MD5 811cc92fed842d6e7cc44b7413d05461
- SHA1 22f8f5ce5e6d0375982f6350f16a5feb21ce979b
- SHA512 136892eba141fc360387462b3604f1bff6ab0074c5827aaa79d3011acafc30c4eb584cdbe65f06922ebc6573c5f50943a12068fb63aadd590f6c7836bd8ec255
- SSDEEP 12582912:H0UbwtW03DF406b2lsHcGu0SI2cY0GLoI3GMOuXR2h/rhXKGuPeIO7gTC4LAD:HsT63b2lM1+0u3GMOuXUhIhP80OD
- TLSH
  T1268933E9E5CCA47CC98F9231C1796B91A0E1F0313BBE5C92A211D7F4681E7D1E629B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  art/sound/blends/NA_flatplane_V8_engine.sfxBlend2D.json
- Size 3KB
- SHA256 15d316afbbd2b7e76fc001104cd792f3b9871f9b1a3a876ec7064fdc850ccbfa
- MD5 f80f598092d32237bc607052207f1a37
- SHA1 f57c41c717bb076e151c87e709badb8c01f06ebc
- SHA512 a36a8a82ba08c87c05993579ba9279dff0279b4442e6b18be97aa5d193c8db620f479c78b7cf4faa82767f0ce51914410d8199d1493e23a8dc7d4a8c790cf7ce
- TLSH
  T12F713632AAF4C8C588D43BF2C3EA5F5648B5B4435598C3EDF5C816163E18B827E75A4C
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  art/sound/blends/NA_flatplane_V8_exhaust.sfxBlend2D.json
- Size 3KB
- SHA256 0088ffa73ad759f66ba99bbd6c64464273e58b501ded389a4953fcf2d1748c21
- MD5 09e999bc8b6bce4dd38505845a1dbcc9
- SHA1 a0753ff7a200eb1caa9e75f052193798ae5a93cb
- SHA512 905e0a3faa68cbb24105e25c83f8bff7fa6b84d30fca586ad607f4fe18eabacdf8bdf5dc11d130d3304c97033cd18de0544f7cb06c0032d72b9f0bfff97d478d
- TLSH
  T11871D81DDAE4C4D584DD23F9C5E20F4288B9B089A29CA2BFF5CF1D1B3F18A836675900
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  art/sound/blends/Redknee_LT4_BorlaEXH.sfxBlend2D.json
- Size 2KB
- SHA256 f8673ce4e9b195bf7b630fa4503e02d093420ce9aa852657b08f41929d81a5f1
- MD5 d9cbb0a120883ffbfea7a869cf430ea6
- SHA1 00b070f77e6c2979b5b1566c2808d1074dc5a54c
- SHA512 5d617febd054614b5695709fe108e5f5fbda26a4e1d2ea929b2ac0a893f449e6169450e5eba3f2fc6b7794bc2c47fc17089db99577d15b29c9a33a51d4dff68a
- TLSH
  T1F7412F2DA6E2845489C41769DCC077B17C30649A396EF17676AF0E337B7C9837924E2C
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  art/sound/blends/Redknee_LT4_ENG.sfxBlend2D.json
- Size 1KB
- SHA256 bc0e8cc691bf75b0a147510bf9e267378d2338529d73a7a69de016636d21d9d5
- MD5 bb6e77a00678addd252c45317c7579bc
- SHA1 59a0bb05b70e0decdeb1b3a80308188fe4df6381
- SHA512 5be1834df1cc1a72bfca84ead3665e5987cb09c93739658de70e75b69fcf888407e45022d6b5f1e713ba40dcddb11e89362ce1c6d87eb6ddcb6d005a08929401
- TLSH
  T10931C26DA6D7584818D49719DCC8F7756C34188B367EE469B6BC2E232B38502BC34E6C
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  art/sound/blends/redknee_c6z06_engine.sfxBlend2D.json
- Size 1KB
- SHA256 521aeca8c019b1a53694c34e5c707f1f3a2087c20baf254ea8aad97d1c45ca26
- MD5 86e941ae6f6325b20deecfc1ab3837e9
- SHA1 cf5eefe3a755bd586eff97dec47bafd8088b11f7
- SHA512 f181faee200c0af38b5b9e9341451a91f0cc284eb48fccf37ec4d69b97428e268e8b8e9ace02f50df43fd1e665d578d3c996f0d1941bd8eb7336f08440e3e7ad
- TLSH
  T14E41B036F2C15C44AAA8E735D0447BA1680019433E6CD55FBCDD2E263B28A5FBC25E3D
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  art/sound/blends/redknee_c6z06_exhaust_clean.sfxBlend2D.json
- Size 2KB
- SHA256 47178b537dee1c5834c8c9b0d8647e0797b001d2a6046bc5955fd00fa095aec2
- MD5 32820710b577642b899596ea17eb4a0a
- SHA1 9ef1921b1cbfa21e60e1fcf97f5aa48d9bc28731
- SHA512 581d22612d652b97d069de29b8afb638edd4458f974bd8b2dd130614f311d5f13eeb29d73cb73c504101ac47b107f7c0509c538137933ee2204268eee607a2cb
- TLSH
  T1DF414029A7C09E445AEC9778D0403BE66C4425436F6DA15FBCC91C772329A4BFD68E3C
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  art/sound/blends/redknee_c6z06_exhaust_pops.sfxBlend2D.json
- Size 2KB
- SHA256 a1780c7d7da48b4dba99e54b207e75c49619af74c0474394e120bdd8b3aed8bc
- MD5 74ab73fb3b8839b0f7a7ca0399bfcaf9
- SHA1 05fdde70027548fe90370321b575adc733b93f57
- SHA512 282a69b15bcada89ef3814e891350a548feedb23b41e30d6b33379d4e3d90c2ee19abb1810d5d35c09914fa8ed3ea454435e4c6a96892d1064a98fcb1db18923
- TLSH
  T1D9413F65A5E08C446AE85779D4803FAA245061437E6CA57F78C91C33B328A4FFD28E7D
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  art/sound/blends/redknee_lt2_engine.sfxBlend2D.json
- Size 2KB
- SHA256 a24bcd2df04278aea57fc06a6880f6cdd0124948ec6206f16e1d85775415655c
- MD5 c1e45db6e7085f7d9a115865d3b9c3dd
- SHA1 1d8195ed45ff0f8e7d27d70cc5d9631086b72d5f
- SHA512 364db923ec897b1e3cbb2efde806ea8e8b51eaa753db69c447091bf6859c9bbeef6f61cb9491dd7544b78016d31d3b30d8e5479c4318b6dd7fdb2380a7bc3357
- TLSH
  T117417C31F3C0CC8894546754D0883BB5982125633A9CD79671880FA5BB7D967BD3AF3D
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  art/sound/blends/redknee_lt2_stockexhaust.sfxBlend2D.json
- Size 2KB
- SHA256 4ba7e803d02e7100098708164697d38039acd76dcc6769e86f0535810aa4c0e1
- MD5 8852486b1af769d75d45ca7510881b01
- SHA1 2cadeb908f16824ec07ef8526e9dff0e277865d8
- SHA512 e5c5c7bfce8c4f104ea0e54d1cfb786f27eb9f50a3f61990c23025a25a079305c093e92db579dfd38ecbabead7990d23e5b59156c60d6d2411ae671fee52a0cd
- TLSH
  T12951F71DA3E4CB6469EE561CF24C2761589C39CA3F5CB277708E0E12F7AA4C27D18E16
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  art/sound/engine/NA_flatplane_V8_engine/flatplane_engine_off_1669.wav
- Size 1.1MB
- SHA256 cf96278eb0262f7a952b3ba501f4b21e88e3915f3f84211d8680370ed6a53572
- MD5 3e73240d897ceff9249472cf13b9677f
- SHA1 31fd8dcbdfd557b0076e0ca9a254ce98f8e25f0a
- SHA512 78bb7cf317f7e77db65097f53ea007a7829ed660385cca74ba29b2b3baf4be27c13e1c27ec1995ae2fa3da089e70a3661fdc411b4f4e8bb0684b82d0ddc0bcd5
- SSDEEP 24576:k78kq6wK2RX/aMRv9CIBG4Xc+HpdaamUETTaIG1lT4excOQKn6PsYGDnR2oV:k78kq6w7RX/aMRvAIBNHpdJlEPa3Hdxj
- TLSH
  T143351293B7EBB1E3241D3417AAD95BB49D43253AF7FA09C79610C20236C161FEAEC149
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral21 behavioral22
- Target
  art/sound/engine/NA_flatplane_V8_engine/flatplane_engine_off_1989.wav
- Size 1.1MB
- SHA256 46daa7ec605c9bf50f985db128c559a17ea3be97e4eaab4bf7cf3207b0e45ca0
- MD5 d9b79d41a0d28c9d8e42fecc97cecfdf
- SHA1 8fbaf805e9ee1264d246a0533d5dce1bbcd268b9
- SHA512 9682aaf8bc5942ceb526467718904a2d6b984f54f80ad30135780d8a09ce533cb895812774c3f905446690d562ca213fcd831f3562028619e9119c3f293426c1
- SSDEEP 24576:UvXIDORTCWG+t+qjzSNB5imFoj/ishXudXekPrlGmewKyh8:3CRTCWG+t+qjzSN3ZOj/iMXuokcmeQh8
- TLSH
  T1CE351247FB5565A93025384B6E9FA38CDD03682DE7FBDE8B8904C1B1334611FA9ED089
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24
- Target
  art/sound/engine/NA_flatplane_V8_engine/flatplane_engine_off_2412.wav
- Size 1.1MB
- SHA256 d1c47ce4557cec07253e4289ba47099ff2d25451e04f51da0595113dab744d5a
- MD5 c687916b9ed786f7346157ec0b723a6e
- SHA1 9f61be1186da7a8a39f26584b9cfea0b3cbe1140
- SHA512 ace9d2c14df04957c0d599abdf55517cd31061791a22cc77d39de3b777105c354c3ed0abc349ebd779f67aaf612d0cc3f4d1efeb69ce9ce070fdb87c52e4cfae
- SSDEEP 24576:TzcbayGBs2Q4zIJu+3mXMomJ4Z07NALxvDoStkGiZS3NmzPR:PwaRiF4zIJoXMomJsmq6jGiw3Md
- TLSH
  T1F5350293A3A974B5042D500F6ADEE768AA47981C93BF4F87AE05C2F3334915F45F628C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral25 behavioral26
- Target
  art/sound/engine/NA_flatplane_V8_engine/flatplane_engine_off_2800.wav
- Size 1.1MB
- SHA256 a80cb76006d6a6be4ed576a8ee2a241392474bd13684e59487446cf5a41266a3
- MD5 13729744362af66b9f0319f85dd56bc1
- SHA1 54221a48e83e9178954b223bb510e7273eb8c6c1
- SHA512 62b1c189dd981690f9d57b5914c59c0d48f006aa0d6cae9de84ac495087acccdf44a154fe376015ff48346db04521bd83fd85655d24301c11075c5b033ff0936
- SSDEEP 24576:8tW0CUFHaYzVuWO80MfLb9rjEr7hs6EAvwfX3pzId8u2H89TK2yFCeGK:8tW0CUFHaw0MfLb9rf6HvEX3pzIZ88FM
- TLSH
  T1E73502E3A3F9B1C2293D301BEBDAC7709B86D96DB77B0C475A40C24522C525BA6F518C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27 behavioral28
- Target
  art/sound/engine/NA_flatplane_V8_engine/flatplane_engine_off_3225.wav
- Size 1.1MB
- SHA256 0b34e23157754839bfb09c33af3cb24c1b8755367e6447419150e0c819849746
- MD5 eb2bbe395dd77e229397d96586863efe
- SHA1 090cb8c745c02bb0e922a6ac6765a381c653db88
- SHA512 61c9365e63c10d8b2e6cb32d6c5fd5219263f8b64d645dc24624460a3c13e1966f0fc75a95269856ad6cdf6c7c3dbed26ed9e65064f6973322cdeae27c50226b
- SSDEEP 24576:vF7JWqwF5yf+ZBIduQdjG/LYHQa7a3rmB3vv0ff8KSzVbIQilpmdrXo/Q:N7J7wF4UBIN5GLKQa7a3rmB30ffPSzVx
- TLSH
  T15F35029363F9B283362D2427B7D586A48791C55DBFB60C8F5640DB0D26D022BFFB1289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral29 behavioral30
- Target
  art/sound/engine/NA_flatplane_V8_engine/flatplane_engine_off_3612.wav
- Size 1.1MB
- SHA256 44693289d18b34d72593bb7f8303b5caf4c43240afd9c3af5da2b27b06b4680f
- MD5 2120a47e279e05fcbc74844b8586d2e4
- SHA1 ee6dff86ec22a37608a5aae127c0c40fae83c1c3
- SHA512 53f04784f731f7e29dbbc109566f6c102c9ea1e37ca968e55667eb5a71a33172743db326813a5493008a388607d2cd0a1011cfb33936a97e379df58ff62c04fa
- SSDEEP 24576:JhQ+06nvs35q3QOKrSOKhv5CHH1NKI5roFJvS0OKToiPycbAW03dNyTQt:J++06vs3g3QOcchxCHHfKcoFJ64oiPyH
- TLSH
  T19E3512F325E6B2A32D098137F7E8957204C376DCB39B0E596F48878D43A06A79F5018E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32