33d8e87b5c536d8b5618b2d8220d2b68bdd9e7f762ef2744e9134c751c019db1

Sharing

Copy URL Twitter E-mail

General

Target
Voltix.zip
Size 52.0MB
Sample260623-2hl3lagx6m
SHA256 33d8e87b5c536d8b5618b2d8220d2b68bdd9e7f762ef2744e9134c751c019db1
MD5 d1d5110149fc5421a3b0061ce85427b5
SHA1 e966af8c7e034a838b60a13c1e63cbaa6b06e4dc
SHA512 f72bd9bc06833c464d8f6e0a2023ab9832b7787627660185be20b0e6a169e0659c4cea364669697a838c7dae8f63dab8ff50e7e2adc330cf13ff6003977979fc
SSDEEP 786432:kaOmZfBN05H7PDDqjLo+vWaU3N8q9ZMxYFo6m6ZXlT4184opO2KWl5oIiCZwTH:NOwT01PD2jzvWXdp5FRT4184kO2Ksohf
TLSH
T16CC7332AA2361411C976793CFDD100D16E63F104DB25951EABD85482E8EBEF01F8ABFD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Voltix.zip
- Size 52.0MB
- SHA256 33d8e87b5c536d8b5618b2d8220d2b68bdd9e7f762ef2744e9134c751c019db1
- MD5 d1d5110149fc5421a3b0061ce85427b5
- SHA1 e966af8c7e034a838b60a13c1e63cbaa6b06e4dc
- SHA512 f72bd9bc06833c464d8f6e0a2023ab9832b7787627660185be20b0e6a169e0659c4cea364669697a838c7dae8f63dab8ff50e7e2adc330cf13ff6003977979fc
- SSDEEP 786432:kaOmZfBN05H7PDDqjLo+vWaU3N8q9ZMxYFo6m6ZXlT4184opO2KWl5oIiCZwTH:NOwT01PD2jzvWXdp5FRT4184kO2Ksohf
- TLSH
  T16CC7332AA2361411C976793CFDD100D16E63F104DB25951EABD85482E8EBEF01F8ABFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  bin/fonts/Ermilov-bold.otf
- Size 19KB
- SHA256 313853834af268849fa2cc950f72c8ec8476762357f243c0b0041bf1c01b2cd9
- MD5 46bcd614caed5a6160502337ae3be4ec
- SHA1 068686e8303eae02b07ebc7c06b584b4436f840a
- SHA512 5f0ab318b2fdb24fc9659db1c3122756128d51565e2512164b842003c4ca0407f1003791ceddd191bbb493b534f87aea8138033a00c4f1815b540ab41e89f531
- SSDEEP 384:BRdcyzfWkdiVuo0w0bgylLqffH3CRcxHtiUX9DymoRr7mDkbB:BRdmii8mnyFqffH3CRcxHtn9e/SgF
- TLSH
  T16F926AD8BBB64364DE1599310715C7596738BCAC970EBB32B39C2E40A2547D0EF243A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  bin/fonts/noirpro-bold.otf
- Size 46KB
- SHA256 b012d85155925bbe2106b20234b96522dec7914f03b09bc6e2fff71554f31bf6
- MD5 e57b6bc24b970a377574124e026a7c01
- SHA1 00184aedd4ee4d2ca6b5c87cf41e78f64304c89b
- SHA512 c162cd8a7130d2c94dac5c3dad58794f368436cbf782e8063c245d4cae405af6aa25c2f381549defd520c3f7cdbc04a27f891798697e9c291317d3b3ba82efdc
- SSDEEP 768:JpCoXk4xtsCZDUqJB8WA6JIPvX0isBZspMBdgcOpgUd0AkMKc2dAWBYejEARJWsl:C08CZDU+FrJIPBTu89gUd0AEm7A2sfag
- TLSH
  T12E237D5FE38A8B12C3CA0E3416B0637563BBA91045158B5DF7889F10AF868B67D6D3CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral5 behavioral6
- Target
  bin/fonts/noirpro-light.otf
- Size 45KB
- SHA256 3c9ef459625f995c62b993b64da299204b741e153ba8e6d988463aaa86b1aa44
- MD5 d10d77b03ba3abe6ccc1c142d9852595
- SHA1 6108edf0cfb3d5f25e3c593949c301c5c2aa5f25
- SHA512 71c4fc3b6f43b4125c5ea5ae09297d72446de81ffc2928fee33aef386754e60dab11cc170c4d6689dd6eeac451f2a57b9d3372278f750dca6ed39ec82fcf9368
- SSDEEP 768:UVKxtsCZD7MXJXAWYO3LtAgTPpOKp0mKNTiamxAvq7jo03xfzIhZ3t+TXLu3w:0K8CZD7MXJX1hJxpST/omq7jzBLmZ30p
- TLSH
  T1DF238D0EF3594B02D3CA8F7E07B053366712A26A85004F4EEB849BA47E515B7F66DBC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral7 behavioral8
- Target
  bin/fonts/noirpro-medium.otf
- Size 46KB
- SHA256 a728e91375dcadbdf6ef6d7e3cd0bbf5c56fb992d5b1be6640b83214c9d015ed
- MD5 df63e8855d04ab0e25d2bb6a0b1fabfb
- SHA1 5512dc285f36cdf7da5ba5eabaca128ca3442537
- SHA512 eba8afd3289089841e4eda4abd992c2e2020d18d44741733b5a51a2a1e0c0982ffd9da187aa56ba3b891bc259398ec156e08e45265f7218e87eb914794ca69d6
- SSDEEP 768:iuEi6qnatxPsnZDkt+BJzvAFEhe/SJI9mqbN6z8r77Ty5CYs2K9ffBwOmzPKYTAd:tEi4unZDk0vHhe/SqmqbN6svKCF2KUOz
- TLSH
  T1C323AD1AB74A9BC6C3C34E3A17B1432973A29818D53A8F9FF7D0B7055BD19902D0A3A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral10 behavioral9
- Target
  bin/fonts/noirpro-regular.otf
- Size 45KB
- SHA256 c7fc6d9f2ff611073fa09a6c61a8c086da0ebe8da841a9f4ec4087a3e9b52152
- MD5 d969db6adb881f1dfa91a5b7ec0154d9
- SHA1 d7b44b20eb246b0ff5c41147c0d0fb96fde47c48
- SHA512 2a225a8c12b46aa14e14dd547c6a55c80aef6bfe8cc791dcf60a14ef91994eddc4dec473d856f7c2446d62a41d017d256b64b603d87ae45e75fdeb2230deb5b2
- SSDEEP 768:DOWxtssZDH8PabnLLjnAfeVnHl0RoW+KIBGGuJtdIaUSCtLbyk2qdhuGtRfH8Txd:qWgsZD/nLHncehWaW+5pAtTUfNbykXds
- TLSH
  T1EA23AD1AF71B8742E3CB0E3A07B043B57B27A24589124F1EE7445A647E414E3BA4DBD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral11 behavioral12
- Target
  bin/fonts/noirpro-semibold.otf
- Size 46KB
- SHA256 50000ce2f0f8bf3018f1d04aa5c6716583b808ca05c802c46a9de4f084a91f7d
- MD5 5177edfb54762b59df676052d11b363d
- SHA1 fa18815bf4914b93d587c2758b65e234ad51b38b
- SHA512 7475fe248eafd528a05acab94f3973eeeb0d169203769ee6b42d007b5fa0605a58a290e145d74d57e17486367bacffed22e4a88e576fa9f65d000e487aa78e27
- SSDEEP 768:OZxrsZZD7GhsAHrQzDQmWw/OQuyQDaAumdLgQaVVcUiKv+xX7u3w:OZqZZDqSar4jQnD0iqQKGxqg
- TLSH
  T14F23AE22B34D7BD7C6830E3647725379F3E68926A5378BADF78097006FC16E02959398
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral13 behavioral14
- Target
  bin/gamesresources/Game-1/Bannerv1.png
- Size 23KB
- SHA256 6016932b55daeea37721c186749099caa01d708b87938e1d4169b977b6623f38
- MD5 f60427087958fd7a3930f05618445572
- SHA1 8f8bd976f837847c4c751a86fb860132acb92b28
- SHA512 5a337dd5c32656f5ce40bc452555c285fb06ab914d1da997ac9b6ae900948c7cbe1d8c1f2e2afac3128982c91dee5fa5332dc533679a60f4d37c4923f8cc6216
- SSDEEP 384:HRAhmF6qsdmmD5/MIUFfflMDs7C+hPTPO4usnnfwz0Bvyk3GXdM05mCvNvx+A:xAhmFrsL9MIUFXlesu+hbnnYz0BvyYGD
- TLSH
  T1E9B2E0D203FE6435B52FE651DAB5BF18F3A0044E8374CEF50E061A68827ED6256237E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  bin/gamesresources/Game-1/Bannerv2.png
- Size 54KB
- SHA256 24820d5922f2979d632af15d53e5039e8b5439eb66e925e4061f1ce913a7e9dc
- MD5 116228ff51df45317e9e9b0526d2fc57
- SHA1 7ca67e49c8bb898c762471b656a8044f26a0b64a
- SHA512 91d24e44c9a55ebe22100531d331dbf7b04460c1b87a0c4395d311b25e60b46364df67d1bfd20e6b1177899d3f3b8006c6b0cc07d09eee92642738a3b7bbeba8
- SSDEEP 768:P3Ib7dS1/3ot3U6XtuEVxPW5RxoOgVYHpzTwAQeoiZyvw61S0pUag7tGXBxdVUGW:PmdEotk69uEcRxJgyJzTZof1SPpGXjkB
- TLSH
  T1514301E8D45B34BC6C8CF2CC8A6EA05C84AF6CED001DBA8C41179F5A99F9483D79A571
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  bin/gamesresources/Game-1/Directory.cfg
- Size 8B
- SHA256 5c3040726288ea0ff422c7a94cc35ed9459f3c1f3d377d86376a4fac7e045762
- MD5 0e7732400c178c2bd4c5b889365f6acf
- SHA1 ec404124f7128466897b32faa19c7c61ecff73f2
- SHA512 70d15325cb59616d9f8a2bccb735e0b6ec841f53ac8392794d9992360a2af56c7d2db925caa3782e017c15fd9f933d28cb2db1e6485b189af83fcb8acea17c51
- MD5 SHA1 SHA512
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19 behavioral20
- Target
  bin/gamesresources/Game-1/FilterStatus.txt
- Size 3B
- SHA256 11507a0e2f5e69d5dfa40a62a1bd7b6ee57e6bcd85c67c9b8431b36fff21c437
- MD5 22af645d1859cb5ca6da0c484f1f37ea
- SHA1 c2a6b03f190dfb2b4aa91f8af8d477a9bc3401dc
- SHA512 aa54def9e0bb11c1ebbfc97a9ee63af9e95c4fdf1d032b1ddcc0f21661f748651d2b2b8fb94e9ae041780554db29815daa1c0fe991ddae54eff0c4c28cd9d20c
- MD5 SHA1 SHA512
Score

1^/10
behavioral21 behavioral22
- Target
  bin/gamesresources/Game-1/NameText.txt
- Size 9B
- SHA256 ab5606ebf394b57ca553821802c126369bdf5469d9c80a144ea07b5131cc9d23
- MD5 273cca33152ea6a7d84dad9b18af05bb
- SHA1 5b374bb8e82f3429f1cbc22ce5e395c1ed7fa23f
- SHA512 a482b059c87435e9f6af5945cee231af09b70b78c4a738f62fcf99e8ead6f1151c064720670e9da987895b6df4ccc5b1f1caef7180ae64dbbba4c3fb20e0c0de
- MD5 SHA1 SHA512
Score

1^/10
behavioral23 behavioral24
- Target
  bin/gamesresources/Game-1/Status.txt
- Size 36B
- SHA256 9cc2b87cf9721a147929d61bc775c1c9a4bfa0f9b19b6ddce793c9ccf9aa84ea
- MD5 bf3af32f04ee511bcca7de2d77f30ea7
- SHA1 ea8b7d6ef777fd299111d7a8ca6f09c035a4fde8
- SHA512 e56de19abdd16095e865f84f0de7ca0ef9e14cb04b7ddd207abb6dfa3fe010fc3d183b1bed117b2a4c2c16aa2ef44d61f69083a3951eaf37d5f66f7e84236453
- MD5 SHA1 SHA512
Score

1^/10
behavioral25 behavioral26
- Target
  bin/gamesresources/Game-10/Bannerv1.png
- Size 25KB
- SHA256 a84d6f953587d87252901a3fde1cc69bcc039640662b1527fe92b1d955325f2f
- MD5 ac0f8d0f489df56d46b8dd88bd09f981
- SHA1 173f1954b21d518e21ab81fe695c3ce99184ff76
- SHA512 06d2953ccabd1efe8993623b6b6958afe16a75bad31f467a0734348d41bafdae74559752e2f828e175eac8e361e4b22cbd6152132cf017bd4956fac4d06f6ee3
- SSDEEP 384:HKvQQ+XAftsjRwlg8S+fRu0iOkCKUkW/onyhww6GptvAiQLbsSjAYC1GLy7:qN+XAftgul7dRC+myFLvVQLbsePSx7
- TLSH
  T122C2E134BFD0F92B49A134D624E522E34679D7638F199386DC8189A72CC97EF301C9D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  bin/gamesresources/Game-10/Bannerv2.png
- Size 64KB
- SHA256 8aeca93d316479f5da951f1cb930b31ead2815ebbabdf972f3f47460286a0442
- MD5 38d31b0078d73487aef06b38731cb908
- SHA1 ddb857f42e5b5f4a0c0ea67737cc32487ad5fd58
- SHA512 478f2a9a26561fb99d76db2b61af2c44f3357fe20d168d46b052616362dd2c7a7334f81973ef98a687d6ee903f302d0dc71dc16dba053435798d56012e485e16
- SSDEEP 1536:pKElWSp6oQCLZqREG3+jPgjK9lYLi03DNKvoZc6Ta82kN3uFDQ:EeFn0EGsgjI03DNKvoZpTjNeU
- TLSH
  T1F253F11A75033D31FEB4B759E1F5B95FEC2A368F1F471C38E0A189BA830516A4A5228D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  bin/gamesresources/Game-10/Directory.cfg
- Size 8B
- SHA256 22db9ba91df4621b66732ddef9eba070522cd6a713ae73b50b9d6013a286f163
- MD5 b66f8360f09caf061da307577305434d
- SHA1 009b517d00de14ccf6ddb1e6fea92d58e8465cf7
- SHA512 1d635f0a35197ab0af42ff117e77b7fdc6cb161bd37e6c78b953d29457ed87d07655a36a7a987e739fa08b3b321d9317f2fa901c4c3d6f74b71a56a5fbe392f1
- MD5 SHA1 SHA512
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Checks computer location settings

Enumerates connected drives

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32