4e573749575bd55e064c6bca53239d7c676ab3b438602a186a93e9c572106a79

Sharing

Copy URL Twitter E-mail

General

Target
word.factori.rar
Size 22.6MB
Sample260624-sdqesac19r
SHA256 4e573749575bd55e064c6bca53239d7c676ab3b438602a186a93e9c572106a79
MD5 34c27a4254853ae3f56d4355d5575594
SHA1 96634564c431665e10069a96c96872b0bc77e243
SHA512 0a5b858fab6e0b15e96f6a0daf71ddce6be71c6500031e6348509b2910c390c30f8a321a5ff18b127e66a29f12327d0f44a122a450a47a45e50870aa480c2753
SSDEEP 393216:B8wDe+3anNXgflOAz9LDX2EC4cHZWlJ95rRDKjV4UFRIsYWsysNie6HQwmds:a6BanNQflOoP2ECdWpD4NusVsyXHQls
TLSH
T18D3733B2F1F72249D0891DB38540F369E154BC724E25A1C723A0EBF885CEF99648F66D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Targets

- Target
  word.factori/IGG-GAMES.COM.url
- Size 196B
- SHA256 6d905d76e7d807c5831231d791f2510160dd56018ae423a037e7ac88fd19412f
- MD5 882e17d630d74b64a8176e38e2fadf7f
- SHA1 d6652d568db451c03b73eede688e0124e2d54ebf
- SHA512 2baac743dabdbf133583c4d500699673e0bb2b2ade89f0a660eb17bfb440f1d74814ade3b82eb07d776f6a7c1b1975f25c6c1c500edc589897bc304a9c9fb3b0
- TLSH
  T188D022188709C2D5E683A8433270FC48994E7D1808DAC4289A48CE8B4CC46C1889CBE2
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  word.factori/PCGAMESTORRENTS.COM.url
- Size 202B
- SHA256 c4d6ac03d1b51af3f4127bdd12f2317da8ebf4a7f20402f2139c61d5cf10ab23
- MD5 420715a04de8367bb8d37d57ce1d6d41
- SHA1 710369a636391e43be7149416d8e9b390863babb
- SHA512 8737cec4730f412c18e508076d9fb7af2ab10b4b1637c70c2f76c1c6ca7bca27021cbe56dc3305a4ea7704f7ac2c6e005d02c605a4e7f9b0a709bb94cfc7f457
- TLSH
  T1C1D0221D8705C2E5EA43A5473270FC48A84F7D5819D6C4689748CE8E0CD47C0C85CBE2
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  word.factori/game/Steamworks_x64.dll
- Size 490KB
- SHA256 4e1b8d29bfaea8d0dd7bae80737f3d06ae1a64cbe2199abf6a794874f8c74480
- MD5 8047ef9c2ce48ec7b0e989d52ff9a555
- SHA1 5173cb2e1408f2f8df5668952ded7cfb06ac01ac
- SHA512 f36b547799175cac205a7c50fb6487cdc6a03e58966a75228ac7c5984f915286dd99db8dd675f73c41ad3b9621370d7fffc4e57fa8643546663be6091bbcfe59
- SSDEEP 12288:hMElxlfKVAjpzvp5/gqzHdaMQcoRruZIVeFe:2slKqzj/gq4MzhHFe
- TLSH
  T1B6B46B1A73A410A6D167D178CE539947E6B2740603A2DBDF03A0936E2F7B7D06A3F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  word.factori/game/steam_api64.dll
- Size 1.9MB
- SHA256 0cfe547ea82071953cf99daffa3bd11bb468eec0e400961e7e33e4dc36674ea8
- MD5 c7ce820020b0900eb44d2a72f2ab9294
- SHA1 f057a14bf15864c83bc99809ee248034d55993f6
- SHA512 61a99f16e162f7590e10d18577aadfdf8aad203d7539627318ffa0c6c06a0370ca56709dd6f07ea3406978cdea7afd7253a80aeba3c199a23ccb41af439c5933
- SSDEEP 24576:XeaHJvXu6zYPY6+UYHAjnQGuJbySAN6onVZEpYKXtR6IyefCg+alA:XFpmwYVTXm+SANj6YKXtRxfCJa
- TLSH
  T134954A296A6C40BAD17BD17DD9478B8FE7B1709A0B306ADF0264035E5F277E50A3E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  word.factori/game/word factori.exe
- Size 11.5MB
- SHA256 e7325b3bce82b25b5a7195a01e45072d386ffc8ea3b27161cca4751027cc510d
- MD5 c445a69bca1f170f3ff3f2986f199b11
- SHA1 aa731bbc494f9e24319aaac8462c290672d84e8f
- SHA512 a70a1c699b52a589b4ad471f77ab86333c6edb1f1cd67f3067ed67bc159e2626d468003f8d2c5e058c3617fb37abab071bfe1fcf21fc2147a98e47d7e42114c2
- SSDEEP 196608:qPjnJmpGZyZmHucAmq23smH9U8+Ne2TBQOGZ6/tyQBYDmEc9l9ych48ehLvBjKUN:EjJsOQpYB
- TLSH
  T109C67C4572B5C0D9D16B8038C25AA6FBE2713C44CB5086DB6AE07E5C3F77AD41ABB312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10