46f4d727d502c9b8f66ca8d51f14ec148bc71bfedb1020b9a4101bb305fa4fd5

Sharing

Copy URL Twitter E-mail

General

Target
directx11.7z
Size 54.0MB
Sample260625-dtrkfsg14v
SHA256 46f4d727d502c9b8f66ca8d51f14ec148bc71bfedb1020b9a4101bb305fa4fd5
MD5 ac04b89de208b02e82f79996d79858b6
SHA1 05286dbb4d2d5536e7045d2faa6305539b73dc3c
SHA512 6f09140c5a9ad5c502f518a98783f47038f260ba6b59929c01e122480dd445c41426cca3f6a06f0e6d3d33f9e85d64e0e99bdf935970784da7b5b1bc13fcd90b
SSDEEP 1572864:7ZqS2Wc+EPomfOPTktZ8kKjxJgtguxWTDl:7ZFc+EGPToZP4x6x8
TLSH
T179C733101EB7151279B6DC05857C0BC97BEFB80B6023B467F6F6AE6368D1268BB7140B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  directx11/backends/imgui_impl_wgpu.cpp
- Size 31KB
- SHA256 a04b211068a346f0be53c0de49239c40268e9feccb80d4fd54620df7325f794c
- MD5 1f6123d07797cfb8b7569737714f3e10
- SHA1 62bff3783da6447d7b2d56afcf21d80a81922d8d
- SHA512 317171d7819644e6d8a9b5e2a7352445be2ab4aedd30111e7e945b4723c22ef554e7129908b946c5a330392b80bbfb40be67c488bf991d3f79efd5c8366a72f1
- SSDEEP 768:LAYJRuDZOZygDz0LL7Yy5/B5yhoLPlD2oYvsJQTN590jLRh9v626kmXAM:B0BMsJW590jLRh9v620B
- TLSH
  T167E2E7895C3B2D810D73F40BEBDB1986CA45457F57A8D390BC9E32092FD49A4F91C3AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  directx11/backends/vulkan/generate_spv.sh
- Size 254B
- SHA256 c3abb9fe51a4c033003ddabfd97c79583c89675572225b2d7b615619b58ee798
- MD5 a09d099e97faf2182cf8f37380f38437
- SHA1 9df03ad0145980bb29350970440eec4fd544fdde
- SHA512 f12ece36c97f82b1d36cea0ddb29fda90a7a4976acc62a3d3e837522a468d42b5d22902142259c670530041eb860c4cca35a6fef74eed69ffe2d38ff3815f5f1
- TLSH
  T1DCD05B117086653D1D36FACA52266DC704CC967C59020594D1C8054A67F1B835581AFF
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  directx11/examples/example_win32_directx11/Debug/example_win32_directx11.exe
- Size 18.9MB
- SHA256 d7ab37d36d8b91b0654b984c6936056ee326d8e12ca3a55048b3ebb0a4ba9301
- MD5 c361fcd7362941a9435e42752d1117c4
- SHA1 81330779ca2845a0558dc0ee8a3f5e4aedadc7ea
- SHA512 0bbb0f33b0020d3ce23f51f29670d2e03d4397e965ee9b9317d337e839d6902f4ec8371d52014fba13b7ef2b3eba8324b7aef629f96cc7c9c0cf1e8cf29fceb0
- SSDEEP 393216:v5BM1cJmOLjuBzJVgV01+qhHGbZTCHChMbsmzWauGVsi:gOZLIbr1UCihMQm6auGm
- TLSH
  T106170222F701A10CF582163B6AF9979953767C304FDD41C3B2566BE5D66F2E00EBA2C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  directx11/examples/example_win32_directx11/Debug/freetype.dll
- Size 555KB
- SHA256 b9ea9444d937db2f70b50f3ac16c83ad4189ac103b2e2ffff324295db4c492bc
- MD5 411d9b6e6dc1b349504f606eb44446fd
- SHA1 5d2c7a5d424ac144079021af58800a8a62910c1c
- SHA512 637683ab74b3080042c25266fbd0168224c2c7f2094c2d74bf0405f121798a3d39deef6a449396909f2cab83c73e97d57f2afd0d305401d4aa78eff7a967bf88
- SSDEEP 12288:uZOXn4VeYQtuYh8/Kn3uP/Wsz/I7i+ClwvmOATRhFMzcfEWmP:ZMKn3uP/Xz/I7i+Cl1ZRoZ
- TLSH
  T141C49E22B9108066E4D201B2D3BD9F761D3D93261319A1DBB6E41CFDAB249E3B739707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  directx11/examples/example_win32_directx11/Release/example_win32_directx11.exe
- Size 1.4MB
- SHA256 fd819140ae04a04e4ff7b716b6a3a2fcc67dccb8783724e9e6f7e1b79f93c2f3
- MD5 ebd9476e5238656e37c5ab7bfceac34c
- SHA1 980e8444cc672c59871d4ff7d0b9c89a9b2cebb5
- SHA512 39dafc577c45091f0a3ea65a0a9d99f8aa5005432e8f2606b483e5d88f788de63ad01ac5e2a54186be59b592bc8b5534aef9b5c8b83f2d5ef22f198e7a14892e
- SSDEEP 24576:skViEdcURDdETUZJue2XPT4399DxhmQP22dyuDSZFZTHnU9aagTlx:fiKDkUZJn2XPT4NIQPryuDMn2aplx
- TLSH
  T14265AD87F3E142ECC5A791388296A31BE7327442172087CB77E41B596F63AE12E7B351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  directx11/examples/example_win32_directx11/build_win32.bat
- Size 621B
- SHA256 e51ec8807f532ecc2e40b6309942304e9946fb12caf6788c69824fe6b44b90f3
- MD5 5f21ead814c9d3dace3671cd3ba1c7a5
- SHA1 48eef47e3236bd60d71e7ecc0036cdc2f33859df
- SHA512 ac29b34441b5c830969eb43e98a2641cb6fdde34186c353a10ce2b8e50f30141b8dc7ce43dae1588980a4530ff656cd9bdcea3ac303337540d0cef2fb9840726
- TLSH
  T152F0D32B5CEE3D4253783E2E1A9A8B43A150A40B0FB0D85D14C0E469A15DB43503E5A3
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  directx11/examples/example_win32_directx11/font_defines.h
- Size 729KB
- SHA256 48ef009fde933cd5ee94aeb8f6b18bc0cb77c069cfddb625e37ebd265948146d
- MD5 0a0a1c0240bb1acbe78ac6723085763b
- SHA1 cd11063b4c1e5581d262712280cf164c9e18a1fe
- SHA512 4534af912a0660e2010cb9c5c9c028222d8ab59d83438d9fb73c1a284234b9da6f333092f7a7060fd188c9cbe7b3d91091dcf63a58853c7800b60c45ce8c12b3
- SSDEEP 12288:xu1W8xxE9dCGbE90oIBtRXZDvgjU3qylVwWtZeB1LXRpuzsCjqzOm9LpoukgWI8+:xu1WYy90GACogRXBhqylztgBMOFouFW6
- TLSH
  T1EEF45A6C9DC611D465F4F47B8C9E9E4F800A99B709027EBCB81E4EAC1C111AB55F2BEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  directx11/examples/example_win32_directx11/freetype.dll
- Size 555KB
- SHA256 b9ea9444d937db2f70b50f3ac16c83ad4189ac103b2e2ffff324295db4c492bc
- MD5 411d9b6e6dc1b349504f606eb44446fd
- SHA1 5d2c7a5d424ac144079021af58800a8a62910c1c
- SHA512 637683ab74b3080042c25266fbd0168224c2c7f2094c2d74bf0405f121798a3d39deef6a449396909f2cab83c73e97d57f2afd0d305401d4aa78eff7a967bf88
- SSDEEP 12288:uZOXn4VeYQtuYh8/Kn3uP/Wsz/I7i+ClwvmOATRhFMzcfEWmP:ZMKn3uP/Xz/I7i+Cl1ZRoZ
- TLSH
  T141C49E22B9108066E4D201B2D3BD9F761D3D93261319A1DBB6E41CFDAB249E3B739707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  directx11/examples/libs/emscripten/shell_minimal.html
- Size 2KB
- SHA256 335ca4947ffdf270a47fa2ed6d8618715b1aeb6850065e115337611c555351eb
- MD5 430ae8eb02369124d891f571dc5498d3
- SHA1 83c7eb35922834c8518cc4a4ac991a45af071b0f
- SHA512 71261c9470a454d6201f1b842ee36b5e40309a8544944e4c87620850babc9b4c44a2abbdd1857413cf505762eeacdfcbf08531d2b927fd78d380272d7320abc7
- TLSH
  T1084133697CF32101E017B294BFAFB50C22A6455BB208DD487ACC97298F6C4550AD7BD8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral19 behavioral20