782181acfaac6485b40713cbeff3dbd7cc8a293eff157d5273be36c64384d337

Sharing

Copy URL Twitter E-mail

General

Target
DELTARUNE.rar
Size 565.3MB
Sample260625-b8d7kag12j
SHA256 782181acfaac6485b40713cbeff3dbd7cc8a293eff157d5273be36c64384d337
MD5 e7705e42c49dbeab9f536036de97e662
SHA1 c427a1a439e08ab8c6a2203debc92b5839ab5055
SHA512 5735dd6fd045fad2c80c48f80e36183e85b0fe24940653aa6e49a388894911eb72d01d0346097b7f6c9ddb26050d52ec932a2ec7e9c7e56037ed649fd62ca16c
SSDEEP 12582912:LvO1q8vE48ySZkfPXkBtWTOMZZ3tzLx3oXGm11cWSy:LvCqz41SZkfP0BtWTVjVdo512W3
TLSH
T13A5933A2F1CF0128202D4263EDB5362DD39F20511F150BEA6A661D15279FB9CE68BFF1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  DELTARUNE/DELTARUNE.exe
- Size 6.8MB
- SHA256 b882cc1879ad8f24c63fa6e4f47a8fef9a01065ee61ad6220beed9932b04e7ed
- MD5 7bf3cccc2e54481ced3a149e1a083684
- SHA1 ddd9992ca1ae2e7eb8f63b4b20c63b430dba4026
- SHA512 9e29c01120c1f145363c1d0e2cdbd764a50dbe875191b98839ea37a7cafaed160a654d88cfbd84b73c5e3e5cc4bea863373d2a3062205f768191fe6ccec843b9
- SSDEEP 196608:nbP4YyBOMDt0q3LM76lz38SmJPcZoOxCeW00q+Ux/agp:HE8S2P5Dhgd
- TLSH
  T108766B8632A4C1DDD167803CC55696FAE2713C41CF5197CB2AA0BF6E3F37AD409BA621
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral1 behavioral2
- Target
  DELTARUNE/chapter5_windows/data.win
- Size 157.6MB
- SHA256 5485a622bf8aef28ae3bd89d770e32876cce889da96acfcfea543fcdafa87e5c
- MD5 8e205589ce55a0512ff5666a5cba3d55
- SHA1 666b77b9dfff5b63de2980b0f2acbdd3b1fc6543
- SHA512 15d9bde660e3a81fa78b1d61febbc7ee22e9c472c8daab4f9644ba4f8af66c4f6806657005d60db4d45308dc1d6a562eda16adec3e48f6f17593da5d06de8390
- SSDEEP 3145728:T/3eYBM0qByIUR5O9l8ihdGZxC6ETdl4NLoMIFo:DQUYwslCUF
- TLSH
  T15078BF53F542CA62C8369A39CDA2AF512232BD54FE46061B34C4FB1D6D733C09E1E79A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  DELTARUNE/chapter5_windows/execute_program_pipe_x64.dll
- Size 122KB
- SHA256 a594a7205f6a4ccff42cb460dfa08bb54442cb3317c7bdc0fa0437d636359402
- MD5 50c347cf03c0885d26b9118538721218
- SHA1 9bea3f10425abc7d65a55d3edd4714eeabf07abf
- SHA512 ee1e8f7ddb0d29cfd27f882ad9cd418f048b2707f869412d43332a11db18d67cb3041fab174943a1aef14a22e3879efa1d0818f552eb8073f01883528d5b2839
- SSDEEP 3072:PCkZBW7aSOC3SFFatkeLmRn87Q8uiBf7Q1je:aaWDByFatk6IeQ8u
- TLSH
  T1AFC37C5773E000BBD4668339C8A35A06D772B8520A34DBAF43A4535A1F273E19E3EF61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  DELTARUNE/chapter5_windows/shader_replace_simple_x64.dll
- Size 150KB
- SHA256 c10210e3cd619774d63947116bd22fb3f60f2d992b21f3ffb0121393e596b124
- MD5 073bf090aedbb91c4e12fa4dcd2ad82e
- SHA1 6f55489aa34e0ec0688f53c7d849e28d368520c7
- SHA512 6b9528272bca7617948f3a578f98b272c4c876f3c0024d469b80b490e54d82d59dd16a7670bc3b5e64a0ec1fb5643fb984bdf0118532da76327682192dbb8296
- SSDEEP 3072:4Uz8MVVIwkYoAVVoAtqV+Qa2wRs3plNPWSfdx6+2U:4+pkYoqVo5na2wY
- TLSH
  T142E33A07B2A540B7D47682388953DF47B7B2F49A076097AF13648A7E9FA33D08D39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  DELTARUNE/mus/hip_shop.ogg
- Size 942KB
- SHA256 62acd3d2de7e4ad81e99a2b31e40b90b1b121d93fc0c79ec724a7f1a47892a66
- MD5 3d407240e2758034892ba7b6789e55db
- SHA1 e838b6a21e5aae83a5128dabd95cefe645f44f6a
- SHA512 a7236222b68841738580bf793db341b3f0c968ba47b4ca1043f8380036d1e24aebac9b39d77e983fce6568c3e9e44eabbbd116e62f7d7024ab0406919577fffa
- SSDEEP 24576:asuGjE7Os1s564m7ImX0Jm61SPV0yHVLw7EVzDoHC/BtR:axGjE7OsO6x7Icb6IPVTEAtDoHWzR
- TLSH
  T1242533FEABDB4718D823743DF58C2FC6746EEF1D496986D18DC87E12CA7BA051821842
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

Network Service Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10