2d74bf6e47296b6b780ead96cbba889ceaf1f1d33c31b9b5e49ec90055962fca

Sharing

Copy URL Twitter E-mail

General

Target
Nrj Mod 👋(Updated V26).zip
Size 28KB
Sample260624-rdxcnacy8k
SHA256 2d74bf6e47296b6b780ead96cbba889ceaf1f1d33c31b9b5e49ec90055962fca
MD5 968b319c5602877fa647680154f99f57
SHA1 dcc3eed33b1a17e863b59efee3ecd83184a3903b
SHA512 c93319339a8f80d6015173976dd35142b3dd7f0da7d450af5c41ccb6ce6cdb69ce7738b17957178e9996a91228ce8ed92e090187b7d6ec9214db29d88d304406
SSDEEP 768:N4x/mtkicoNJUCjbp4kn5xmy+snBy6uNmXK3YeAoPOLf:N2lYN6c97Ia1gAPOOz
TLSH
T142D2C01AEA0EFC70E3AAB678846B7D261686CA1D03404D754CBDCD4E26760F1E39D7C6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Nrj Mod 👋(Updated V26).zip
- Size 28KB
- SHA256 2d74bf6e47296b6b780ead96cbba889ceaf1f1d33c31b9b5e49ec90055962fca
- MD5 968b319c5602877fa647680154f99f57
- SHA1 dcc3eed33b1a17e863b59efee3ecd83184a3903b
- SHA512 c93319339a8f80d6015173976dd35142b3dd7f0da7d450af5c41ccb6ce6cdb69ce7738b17957178e9996a91228ce8ed92e090187b7d6ec9214db29d88d304406
- SSDEEP 768:N4x/mtkicoNJUCjbp4kn5xmy+snBy6uNmXK3YeAoPOLf:N2lYN6c97Ia1gAPOOz
- TLSH
  T142D2C01AEA0EFC70E3AAB678846B7D261686CA1D03404D754CBDCD4E26760F1E39D7C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2
- Target
  Nrj Mod 👋(Updated V26)/Nrj Mod 👋(Updated V26)/Nrj Mod 👋(Updated V26)/Nrj Mod/Minecraft Mod Installer 26.31++/KG-UP-GOAT.dll
- Size 11KB
- SHA256 ab3d4126224246c7b8827c6aeb7401fad8a3cfdb65ec9ae5cc52086c47d1c34e
- MD5 473aadab497c944e2d3b16eafa6bb99f
- SHA1 7a0175b4d889941b861b626981c7bdfd68b21d9c
- SHA512 e528d419d7c7b9dd2aa93aedb4ede1c7d60d788dc89315e38cf283ada06c202dfd85aa226b278228d5ea299f6dd878c9a989fe51d93b3418e2174e8a4cff5190
- SSDEEP 192:XpxR1BMn3nnF0fWbCe4umTzMB8IGLASTzTMb4:TRwXqeIwccHb
- TLSH
  T16B32E64E328209FCCA46C07886EF47B9F3B1B45211165F7E0628D7330CB19A96739E49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Nrj Mod 👋(Updated V26)/Nrj Mod 👋(Updated V26)/Nrj Mod 👋(Updated V26)/Nrj Mod/Minecraft Mod Installer 26.31++/vcruntime140_1.dll
- Size 49KB
- SHA256 15b2223804ac8a3a10a93233618768413f280c08055cf6e2917dfbc9938246d6
- MD5 cdf9c7a58c4a4e096bceff52d44aa9fa
- SHA1 5e0c48770c327cb59678f17e714879e3b2ddebb0
- SHA512 d5cdee9ab2a5154a019257605676fde319cb41d5b9fb488ec5dd785b6cd6aaecc5acd21b3474fcf99462b20175b8fb886d961a056d0b8da417569c8053be81ce
- SSDEEP 1536:h1QfJ8E97+PVUDNMKCbMokoAhbdHWr0DZ:hOfJP97fpC4oQldHWr0F
- TLSH
  T1E733F72BDD1AA03BD3598C78C9435C05DE63BC968BD1B5CBA7401DE60C66BE49B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Nrj Mod 👋(Updated V26)/Nrj Mod 👋(Updated V26)/Nrj Mod 👋(Updated V26)/Work With all Latest Version of game .txt
- Size 17B
- SHA256 048801873a89cd49a4a8058e351eacbdc130858be7e9fa6ef0d29c81fb47f3a7
- MD5 a6bce6d1902557645009bb71e3382c63
- SHA1 b3e565e79bd3fbdac128553773ad90fff8f2938f
- SHA512 7939af127e5cab5ac18de976d562b08510a599facd510ad8b0c00fa4aa6b55da8e97b162403b17e8b8a872b6be1c9461328dfd4f9c6444aa5699570c2f6cd3c7
- MD5 SHA1 SHA512
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8