88f01962a04e08d6077f4a6d3fe3988dfee513043886af36d0e1bda4cbefbfbc

Sharing

Copy URL Twitter E-mail

General

Target
Titanfall_VPKTool3.4_Portable.zip
Size 4.1MB
Sample260623-hht9esbs6t
SHA256 88f01962a04e08d6077f4a6d3fe3988dfee513043886af36d0e1bda4cbefbfbc
MD5 37139a1afc2df6df2ef369e14796725a
SHA1 1eb2cae379499244420516586f4a202cf9fabee1
SHA512 59dfac9170f6d97f1b06abb9576d601598dc5a2eab86ee2b3f107ee18b2b22302338a4367870daec9ebb8c21696f3241edf39ba2ecfd23862fbfb05a40f88349
SSDEEP 98304:5/mg+sBnabP4QA1gpuHrnRENxQXfkY/nDSN:5Bnugd13rn6Qf/Di
TLSH
T19E1633182D536EE748F1C45FBF36D982C13116D73AFC1A578018B23B99892D2F923A76
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Titanfall_VPKTool3.4_Portable.zip
- Size 4.1MB
- SHA256 88f01962a04e08d6077f4a6d3fe3988dfee513043886af36d0e1bda4cbefbfbc
- MD5 37139a1afc2df6df2ef369e14796725a
- SHA1 1eb2cae379499244420516586f4a202cf9fabee1
- SHA512 59dfac9170f6d97f1b06abb9576d601598dc5a2eab86ee2b3f107ee18b2b22302338a4367870daec9ebb8c21696f3241edf39ba2ecfd23862fbfb05a40f88349
- SSDEEP 98304:5/mg+sBnabP4QA1gpuHrnRENxQXfkY/nDSN:5Bnugd13rn6Qf/Di
- TLSH
  T19E1633182D536EE748F1C45FBF36D982C13116D73AFC1A578018B23B99892D2F923A76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  EULA.txt
- Size 2KB
- SHA256 7e87255a78220a5905e36f3dd5fa1130d71f30104894de5cfc8dee1ec7e198e6
- MD5 3ebc74ddfb95d46aa79b05495c9f2fd2
- SHA1 cfe0aa7e82ed4ab5bfb16e5873c3b87052843050
- SHA512 d0e6f9bffe335c1632e0cefc38f699c4fefd5105e39992c24833a4441d42e9d149d956adfdfe929a85431450b6299d7e14e2fbfe05b391f90427ea82be4267e7
- TLSH
  T1844177B8FF57433201B0C392561B94C9E61F92BCB35AAB40B159016E33F2938857D5A7
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral3 behavioral4
- Target
  Readme.txt
- Size 528B
- SHA256 9f202616cfbb682114f38f19ba6b1768abdee818fbff82e831490b3858db0225
- MD5 aab172ef7916781366fcf117fbe3c8ae
- SHA1 b461f51dd4c22109688a5acda4ea691fc90ee4cf
- SHA512 b10fcdeaac7fe6092ace44dc33a028fb986cb0c52164c7090529c86ec60a59db7b2b49e88910ccee5838e8989d01ff723ce4e37f351ca418009c089d38b5495e
- TLSH
  T119F0260AC00B0046A07B0A0D08A4D281BCA1A968CC6BBA05354C66B46C23B9866CB24E
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral5 behavioral6
- Target
  TitanFall VPK Tool.exe
- Size 4.6MB
- SHA256 24457e3942cff3535ea3c6f23be67e67a647fd93c135a0e3aec94dfae5f19478
- MD5 cd7f704efc937c9ac91d7baf84a22988
- SHA1 c734079b142e2037b148bf3efc85e8bf25302308
- SHA512 61582e9255349a8be1bda64b97ab44900bebf4df363ae490b947915825e9fe21b1e436c7444b198600485d21ea9dac8cd77e0bf5e11bdbac3068de3afa8cda98
- SSDEEP 98304:2e++bF+7Pow4xCj+XpXx4VRKpJkMRRrZ:xbF8Q7xrpX0KTXrZ
- TLSH
  T11626125227E64A77E7EE063092B305158BFAA62723FCF74BD5811169D892B539C32333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  changelog.txt
- Size 3KB
- SHA256 52d065e4838db1d5850434cd8bf82f9c60acbf3ddffcae6fdab7d8adb532a11a
- MD5 c4cc4d06c150f525ee27fa6394a44a50
- SHA1 9ea80657fd40f96536e3a0b4c2ed90a3acef03bf
- SHA512 2bd62b823809d35a4d90d101adac0d192c2a7008273b04663a26e3fa368efa1f5851abfc3f9fd3040a0534d74eaf51befcb74cc4faf5bed76e48ae2fee5aba95
- TLSH
  T1F961668734DFF2F648D30155130A72E2967E056C43DBA1460E5DC29C21215B6F77B6EE
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral10 behavioral9
- Target
  xcompress.dll
- Size 33KB
- SHA256 c478e0c5fc8ee53e564b61fe43cd2d5daaf18f9356634ef635bcb81f1ed6567d
- MD5 973bcbbdf07942f0833c4499561dee7e
- SHA1 a5f9aa51620f18b245a521ec5253b6226142e5ae
- SHA512 ced0f9b8edc42971192b379edbf8375f4607b9ef78624a570750da4ba07eba7b25f9e7b9eb02a584659916e45a5b95e742d1ebdf89cf828584b0ae9a5d02bc28
- SSDEEP 768:C4Dc/rWGd3HoH0oxwWrBxF1Ru1Pyt4F9zUE:C4D2TXzWVxFWIt4FtUE
- TLSH
  T15CE28C867A0990E3C3D61130D52A77BE4BBA53F61344B5D77B7029CD6B012E25873B93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12