0e43d83e1a59a2fe33133cf4c6c7ed3f3ef0bb01fb873449fd6bec5222e6c0f5

Sharing

Copy URL Twitter E-mail

General

Target
PCBuild.zip
Size 131.1MB
Sample260625-pmt8jsb14q
SHA256 0e43d83e1a59a2fe33133cf4c6c7ed3f3ef0bb01fb873449fd6bec5222e6c0f5
MD5 323b2269c9ba75700ab3152bebb08de6
SHA1 6fbf1a8d439d91ea3c8f85ebb4250d827462e840
SHA512 ed3a5e75c736f222093574fe73600eb7493bb8d540668b5cee4b115f3958996e4f1a7e8cda5191d6635f8cbffb8877cc02110c9ae86796bc88a8691b99743c4c
SSDEEP 3145728:g0Pzi0mdwQyCb1IL1VGk/H19GUENiqZ+iKhjUUMSyAvbXmHe:gt0m1RyOk/HZHiQUU/yAz2He
TLSH
T15068330B60DED5A4CDAB603E92341F5D76B704F3297581BAE396CA9C0BCB6C19B01ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  PCBuild.zip
- Size 131.1MB
- SHA256 0e43d83e1a59a2fe33133cf4c6c7ed3f3ef0bb01fb873449fd6bec5222e6c0f5
- MD5 323b2269c9ba75700ab3152bebb08de6
- SHA1 6fbf1a8d439d91ea3c8f85ebb4250d827462e840
- SHA512 ed3a5e75c736f222093574fe73600eb7493bb8d540668b5cee4b115f3958996e4f1a7e8cda5191d6635f8cbffb8877cc02110c9ae86796bc88a8691b99743c4c
- SSDEEP 3145728:g0Pzi0mdwQyCb1IL1VGk/H19GUENiqZ+iKhjUUMSyAvbXmHe:gt0m1RyOk/HZHiQUU/yAz2He
- TLSH
  T15068330B60DED5A4CDAB603E92341F5D76B704F3297581BAE396CA9C0BCB6C19B01ED1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1
- Target
  PCBuild/granny multiplayer_Data/RuntimeInitializeOnLoads.json
- Size 2KB
- SHA256 375123b025b16e12d430af397906194310ccc07c08d2f7a0480f110c5af3a4e0
- MD5 72933db9e6566fb8c8a5c14fe7a1fac9
- SHA1 8b27d22db9344d74c408de77821ce300f0726420
- SHA512 6e8576f54c3ad311e378a8f28e6df053c6eb9b0a193e307e528485726739269cba7a32861b2f673b05d380aa0fada0920610133708ec456e3da9bfc71352c1c2
- TLSH
  T1C641FF7D52878E7F8F4B8397BD371A8D39500A0F9ACA5800DEB91E3ED4B1614298226D
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral2
- Target
  PCBuild/granny multiplayer_Data/ScriptingAssemblies.json
- Size 3KB
- SHA256 27a9c88f0a6f48d225bb024365e38453e1d332ba61b70ea60d8019813d866c12
- MD5 33487d64b6d8729bc5f7756d33ea5a56
- SHA1 c133a307b7092542f8e2d02f2d03ee5af3613cb2
- SHA512 74794286e9a5ee8d9107b3502737f9ba24b26f0dc0dd00cf4b087c2d797d114e98a958315b368a7ee5b7b5bf4df3dc82a80f192f149b12dd990f2370a93b0571
- TLSH
  T1FF71E3B6C48B25D32ECC5EC39C358CCC3ED311920AA590140EAEA79FA978CD63D4D6E5
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3
- Target
  PCBuild/granny multiplayer_Data/StreamingAssets/UnityServicesProjectConfiguration.json
- Size 268B
- SHA256 119aa7938d3fb29370a091da8fe756379a974d50b5b4d6f6b2e3ec9a2c36b00d
- MD5 43e08b8383a013a83c6a6e8a31bc0307
- SHA1 fee7f80cfb3375f3350c6ec9881e9d23fd942aff
- SHA512 e61db34e84a30bbc4a3a5b4b6ee36a686b94fe8f15717c31797aae0c8b0d7df0e84344c36db5062c00f55185f50e25ff62cb61a0e7bac93c229d2377c510e86e
- TLSH
  T18ED02B32C2EAFD37F38C15C46E6A49DC2BE4130000DF2805963E6340BDB881E492CC1D
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral4
- Target
  PCBuild/granny multiplayer_Data/app.info
- Size 33B
- SHA256 f8a166445c9a7f896f863c888ac294121b2592ab2cea5a465a440f4a2954c711
- MD5 8230c9e8d375f843319c6d19037e65ba
- SHA1 b4c8248e0be1fd538143248c1bfc2f85565c634e
- SHA512 2eb68077ba89290912cc8f252e01e0b3bad378b362ec49f1dd7d48b2f955d32cdab6c97474efaf1820fc83bb8bb9701fdf112c9183a6461fa99096350337c3a0
- MD5 SHA1 SHA512
Score

3^/10
behavioral5
- Target
  PCBuild/granny multiplayer_Data/boot.config
- Size 137B
- SHA256 1ba31bd2ee0ec9324e413f2e1785d83eb2b183a551b222d8304a94c6a48f4658
- MD5 59372c9302f78a0688f0370791fb0242
- SHA1 666493a5f3fc445b46fb956e2c1c2ec446d07d7d
- SHA512 00aa8fdfb8324bf4c5100a91992d5ad388425dca62502fab144de40c7bf8cde70199dcf545d22ff47381c48bc30dfba908c1ac81db3cd7625c1db50107b19eaf
- TLSH
  T193C02B00E3F836036388C410A8B31EC3E2234505CC0250FDF5C011B9332C40E0707832
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral6
- Target
  PCBuild/granny multiplayer_Data/globalgamemanagers
- Size 384KB
- SHA256 df3ad9fdfac2d37fc3a9567e834a2b08db30dcd83f8b9edbcc89482a08aaffe8
- MD5 85d6522ea0dfaec0d16af8323439b2b6
- SHA1 9cc44aa62e1fc49a311cf16da0df13fa61e41e81
- SHA512 b5d5ebfbb1fd026a56493f03d1f6092b38dc1ef71463174610463f9709e70a63bd070d7011a6fe647f0e92e6d51b41281401d6d40cfbdc1adb6b53799cd035ec
- SSDEEP 3072:w2LLKX4Q+4U7mm2SQti4u65iYnPj8WJmLzwsMnaIf5yWwUW6Bn71x:S4QnGmZy4b53nPj8WSzwhaOXBn
- TLSH
  T10284825ACFC59E2FCC3952B689E7037133B2D4CA2716DB072A18A5743D573A85F862C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  PCBuild/granny multiplayer_Data/globalgamemanagers.assets
- Size 1.3MB
- SHA256 642a28b1aeaf6f335a483af46e1434296709199f296a175b65d2fc627a8f59bd
- MD5 a9193943d221e8d68b85fa052cd7bb75
- SHA1 9adea93d391d75cc8a10507ac536aa4e3b3c180a
- SHA512 99f65572166f66cf7f23ff9ca5b044952ab327414c15ed3784513f86bb0c6f22914b29c6f92c404cc1f0bcad13e73e1efa03ced74772f6d601fa30f0293ccf8b
- SSDEEP 6144:Avgt+zpfQVqiSaFK+l0pbdMaK+wo+N4H4AeYcIggneAzl6Y:AvHfB9RpbdMaK+wo+N4HmYcIzeAMY
- TLSH
  T14155EB76DA548DA7ED44113B9C32C37E3AA06F910AE0E52A75E03D67B07E28D0F39316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral8
- Target
  PCBuild/granny multiplayer_Data/globalgamemanagers.assets.resS
- Size 7.0MB
- SHA256 a8c000a0bd8a05af5dbec58d7f8245b2a840b4b9eaf87cb661a8972fdab21849
- MD5 b00690d6dcc143a59deba0ec57bf8b71
- SHA1 6d0ed0ac4d728cc4031c4d776ff63b7d3df787c8
- SHA512 d31b1df916af35455898a90610b0e151b2cc54b4f2c66e98ac19a1eabaa77c883bc41ed8a2900d359ec1967d2a5c6f09116a49ad17a19528823011711d6209ec
- SSDEEP 49152:QOCkfnFPUt3MVuix/PbzS3T0vrVeqmGLtZKvmqrz7RwPTD4jNhEtgAyZABzSGV16:QOC8z/PKaPfFhx
- TLSH
  T17876F853BB1EB987EAC59034C6204A2DCBE961FC867359B9389CAC3CC28D2535F6D750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral9
- Target
  PCBuild/granny multiplayer_Data/il2cpp_data/Metadata/global-metadata.dat
- Size 8.2MB
- SHA256 674a951d0a6dd14c81895acd469ae1439374b454770bc2546de0b653c02acd0b
- MD5 4d9b0f7cace3583e999b7558105ce9c5
- SHA1 93dbb6954bc7fda127ede548265f8eb4b4fa56bc
- SHA512 6a088d47ee12ec808ef7a37b20dc0de2a08a408b4db830097e11853389ab0dbfa2bace619595d017e30b69d579c69e53ce0abd1b8481061f7db9306954f89647
- SSDEEP 49152:wVkJBI3QNe7Lq+AnR/h8gnwUKWGrGk+8UCAs9Ob2NcHvtFvCASxub+kZRhLqlnJl:2qHIrNUF8OPJqlJfC1vs
- TLSH
  T130861810FABDCB66C115B17E8C57C2C46320AE5F5E0583AB3349B72E79B62445E1B2F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10
- Target
  PCBuild/granny multiplayer_Data/il2cpp_data/Resources/Newtonsoft.Json.dll-resources.dat
- Size 900B
- SHA256 531de49e73ddea25554c9f656f54da2a665946f3fec57048e0cfe3b9e49b03f8
- MD5 f1fbe4ec4c9abb5693bb0144c50d9f5e
- SHA1 34bf3f1b87e3d7c6686d2aa1a6cc006fd9c55873
- SHA512 064ed35f91e58d3dfddff3ac8995d38c5a5c379f1f46502653b218bf0c46a531cb4c49bd746d1befa8a9d75ad1097db986e8c6188a229a374a7613b0318207f9
- TLSH
  T1501176762B806FBF8F01206B1D2EB2D0B7328DB8259C36C63171203BA780B2012727E4
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral11
- Target
  PCBuild/granny multiplayer_Data/il2cpp_data/Resources/System.Data.dll-resources.dat
- Size 91KB
- SHA256 98a7950ec6de3242c2e190dfa630188dfa32511a125542b94baa952d1c757d49
- MD5 4860ddd4350579f8fcacb1881582335a
- SHA1 493c03e9cfef6f72a00f92023cdb88527dfdf72c
- SHA512 51421a1e79914cb6d828305103c5f7cdb020d98107586abd7e04614f65bae8004101e5567a873f52fe2daa3a7984bf4f7a4930e628cc5f86e709e3a37f812a95
- SSDEEP 1536:lgFLFsFLFac1cWcvFMF+F1cIFaFnF0FBFdFzF+FUF8FvFOFvFNciFEFvFxF5FHFj:lgFLFsFLFac1cWcvFMF+F1cIFaFnF0FI
- TLSH
  T1C693567CA75073DEDD4A3052064B2807766CC276E15A80F6BE9C4004EBBBD7626BBD6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral12
- Target
  PCBuild/granny multiplayer_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat
- Size 329KB
- SHA256 c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f
- MD5 21d06dbc8af6432b2b49536ed30609af
- SHA1 11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d
- SHA512 2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e
- SSDEEP 3072:c5j+evAPQ48RhHkXKSmLZsumnWpevI1kMqXkD3by+BEL:crvS8rHXSmJmnjvXkSr
- TLSH
  T1F7746CD8B5728E76FE57A9BCE85E928D43D9C1E2C182523B3D75C2E04D52386181EE3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13
- Target
  PCBuild/granny multiplayer_Data/level0
- Size 232KB
- SHA256 4ef0058e723caecac4070bf888d9c50c630760073388d974a34a1f761056f9fd
- MD5 dd6e6caa314560f99723df127ade7742
- SHA1 e25f1d824ad4f36930e722d77135a0e7e9744896
- SHA512 7585469e1b07dca069e4e1a37a9f40c5ad3f9fe1b0981b3d4555040918519d09441c3292364a3f31f09e6636c3fb228651a34d7c043987d22e3889a775d9465d
- SSDEEP 1536:uSZXYRphqwIYv3jAOs39X6AhI8bAiE15DtxLvh0LYJRwmSo6KTqq8Ju7UDFHUvsT:uNphBgCrt5De1
- TLSH
  T18C345011EB91AA4BD835373759A30F94F330DA994B3E833713A8A23D3CD33996E85585
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral14
- Target
  PCBuild/granny multiplayer_Data/level1
- Size 62KB
- SHA256 50ffeb979dca9a36e09b9c6ec1b334e7f83ad46caec19047ade374e11f961b57
- MD5 6df35b7e91578436999960d4ffe762bb
- SHA1 b2550e739a5b62b39911f250cfe64a23f66d5b8a
- SHA512 0b4654c02ff09d4a5a4e1fd385728f10cbdebc6ceba4941d7f02a24a66cd9bf3ce1c06973f5de0d89ac24ca0469e72349c42f1470dfa3769400d4609a02f6b6f
- SSDEEP 384:rpxGbIuFtShlbvJStfLcC/38ya7ZiNXeFWWzZf5J8z2Y:rVuFAl9SRLcoQ7INXbUOz2Y
- TLSH
  T124539642BB49CA0FD539373359E75F98F330E5994B3F273722A8562D2DE23886E89504
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15
- Target
  PCBuild/granny multiplayer_Data/level2
- Size 1.2MB
- SHA256 16b7aa59cea89c5f22749c6dcf0f381aa42d2572ab303844837fc20632fa6d7d
- MD5 2c7233a0ce9a924e9e7c8f3514f4f166
- SHA1 935a097f200434dde3da1fce4d8e37d1d80b1d63
- SHA512 d736418fd355c0d9514d29219a033e6b01bf72c38f2a71810c87f7d5771c266216ac7f56820b0cdf428d4d09f9c5ed043732f3a52dfe7842c139a912a3694bf9
- SSDEEP 6144:T97Hkykk0hlgzvvj1E57pZMspmpNJvxneFNAma6:TQw3jK5rMzpNJRaT
- TLSH
  T194452E46FB459B1BD83A377359E74F94F331D1884B2F632722A8A62D2DD3388AF41149
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  PCBuild/granny multiplayer_Data/level3
- Size 80KB
- SHA256 1bc74f954d03f88f2595d19f449143f6a600eaf0bd42beef2fbf1f50889caf61
- MD5 dea572bb4a70688490eed93ece17a793
- SHA1 f580fd434b25ac3f895d08d7a0a0f064033dfc22
- SHA512 6e76484495ebe2a8a4a97746f5ff5262ff673cedf2354df5771d8d1e2442526dc06f835ed3fe9a1442ec0553edd831e5c4019c515489f0b17344f4fe87fe02ae
- SSDEEP 768:bJJ0+FEQ6rcHks+VIP+kGK4GbAnmtUHiwCOgjxpwGNM:VPEQZEsOS+rK4G87CwCTxpXS
- TLSH
  T10683DB417B18C90FC538373399E71F69F334D9AA4B2F172726A9923E2ED27D84E48605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  PCBuild/granny multiplayer_Data/resources.assets
- Size 5.9MB
- SHA256 534337716a513f42af6e8c2d7f8f9bc2de92c29bb1087959371ec6779121bb8f
- MD5 368bb7f4ab812b4d03568513155dd4c1
- SHA1 b3a65d957a11217be5227ceae221d93b0ac1ea88
- SHA512 054635b65c0286f19b9de39a4b831bef7388776cd9067bed45a176e8024f1ad8596c4afe6cd3ee7d2c70ecda0cbd5e8a7514098d0574ba4542910c360e174f42
- SSDEEP 98304:+eM5PghyLJ2BTTux8wiMSmYKEFa9wsorPUoT7gTK75mQUcQ6zGkWS2VnK4r4o1CL:zM5PGtyOwvxEYorPJT7gTK79E6Kc2Vng
- TLSH
  T14B5627967282894BC027673394A7EF90EAB1DBD44F3A46336E20722C1DF779089D55BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral18
- Target
  PCBuild/granny multiplayer_Data/resources.assets.resS
- Size 15.5MB
- SHA256 f1778ef21ee273ec087bd3bc9435efe9129cc831755e70c936d32e1ef9898b02
- MD5 66ab283dfb43182d2c1c1a6c3124f09c
- SHA1 e97df5f18f362bd15db7fb598737a6cdc612928d
- SHA512 0c4ad4d1a8cb085514047785c8e05b5eeb9fb2f19b2ab845d4f39aa66106e77ee6818f383121a9bd070ecca499fdff1bb8dbf1d9c2ccc344d9c020acd61c97cd
- SSDEEP 196608:YSZ2ozPDEWNioIqDFvaFLdnZLdfozFYXcItjI:F2ozPDEWNioiLxozFYXcItjI
- TLSH
  T10BF667538510E097D945707CC826DCF6D14E0DB9E2951A8B2BD7BDEFFAB30A362068C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19
- Target
  PCBuild/granny multiplayer_Data/resources.resource
- Size 2.2MB
- SHA256 f828accd61cffec41c52974f2bf7ff911eb95a878029498786d286821ad3ee79
- MD5 d1fc2d75aae29aa162e73b20297b36ae
- SHA1 95f4aa3acfac2ebd95a1394a1cf035c27ec0713c
- SHA512 5b019d183dfc5abf96812183b3488b95da5f958285dccb80ec454cb8c099daa64885435848b552a3512383639f465345ee6668d4b0a206a0b8d7bc9a98c43832
- SSDEEP 49152:80UKoheOsHlPK1qOJm8DGijTl9KADXJ3K+aUvXFDcbZh:dUKohJkUvJm8DTjTlLDX0+PfFqZh
- TLSH
  T138B53303BA93B0C0FE6C55BBBAEDBA736435B51B091009ECE1C3B645D9D6A138D4DB81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral20
- Target
  PCBuild/granny multiplayer_Data/sharedassets0.assets
- Size 7.8MB
- SHA256 63367b8650b969d7dc7f27a91d43d8ca314eb4433d1eec9c194107c5a0713c13
- MD5 518dabb6e8a0c29ad31065ab617abe19
- SHA1 9ac28406cda28908211766ffa3a9b6cf6ee332eb
- SHA512 6623af312f8f9f42766ff015545b34681966ad10111ccf68e562a30fd7e7d4dcc77f73566bf77b84ea386b700a587f4ec20890e2dc36283078d71cacba1e0ae8
- SSDEEP 98304:pT64tf2jgAoAzcxN189vjtS3pXYaPjvgbXR0G+Fn8IXm8CRdeNsVH3ZBR68tKarW:Y452jgAoAzcxNadtiJFhXoRvtjB
- TLSH
  T1428660257246866FF42522B350A36F61E636D8ED07BA0A2B1BFC766C1CF3348F750664
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21
- Target
  PCBuild/granny multiplayer_Data/sharedassets0.assets.resS
- Size 48.6MB
- SHA256 88b095391f15d63728915cc10afc168519e947f3957012e95980068715a95cd5
- MD5 0f50bac5aa5582ff6281fc699d8584ca
- SHA1 6e762c8ba23262a089904e97f37648c486d61a8f
- SHA512 62c305b13ea7501445340a90c38de3699ef0a695907c51d4ed07410c926ffe61258da9a1c4382b10d1bfe8e1a498538749e58fa1e53a518278d8e5eb69d765fa
- SSDEEP 1572864:gAodJSoANTxfUu4zujks35uwHwgPGnv5WNZ2+zKvhnidOaDic8l1x8UyUf+PrWAb:gJVANTxfUu4zujks35uwHwg+nv5WNZ2X
- TLSH
  T169B7B2037241EC8EDB9860FCC42159F1BC8A7CA2D2E19A973F173F79B7B61603569291
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral22
- Target
  PCBuild/granny multiplayer_Data/sharedassets0.resource
- Size 1.9MB
- SHA256 06b27a2bd2d0e34b1bfd8880fbee2cbfa721d95e61f92d1385381ed2bb46cd21
- MD5 d4862d3e89b82cf7ae68a865bac259d4
- SHA1 cc897fbbc37d5430300927cd9a8a6817c07a0758
- SHA512 c3fc412e9d74689502fe4edbff6aafbbe659ae655b74f272ad5a4ce6df239fd34d4892c5db33423701fdb41e08d00194c5a1f0792f53c0397fc55a1376bb96e8
- SSDEEP 49152:MEsMZYSQ8RpZm1CwrAyHG+wn3E6Y6dwPYr:MEBqC7ZpwrE3Jxw
- TLSH
  T18C953366BE025ED7CC840235E2BD0FAEDB9EF0C007A55F765980A12DDCE5D86AC2712D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23
- Target
  PCBuild/granny multiplayer_Data/sharedassets1.assets
- Size 7.8MB
- SHA256 51662cb101252431b6e5bc7e43475cd79f9cf2b3810436d606a5c58f0a5dc2b8
- MD5 eb0137cdef9b3b827cfb99b07f7dd605
- SHA1 08f62980068d78743690ecf906a3949992f223e8
- SHA512 34b241cb6c16774dc1bd2f15bfd4761116295701b23242588c4db67de2706b822ad40140c3f2d69abdc9473f936bb9f2acbfd4e1634181fa410961a1942c4bd0
- SSDEEP 196608:55dgrr3QeRjLAjdGI4smF/ZykQFAa/moUH/n9PTinIxbuVQaLPYLtls:XW/TvHlRBGAa/moURinIxKbgLtls
- TLSH
  T1AB861729765A463EF970727755632F62D231DDE886BC0A3766FC2A5D0CE378CB740222
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral24
- Target
  PCBuild/granny multiplayer_Data/sharedassets1.assets.resS
- Size 1.8MB
- SHA256 be82c1e51948c7718df2fcac4e03464245370f63f9e21f7e51344cbd875d17c1
- MD5 2ae3c107604baab136e8443f1bf6db0c
- SHA1 9348af90c931d7d7bcef65e7f7eb4d8703785f7f
- SHA512 f3146c5b6113a2a31c86011a933d61cb1e6bf337e78b092078198404e5615de395cd25e47b1db4db8eddfc901ca208447e9fabb1f91cb6af840fb5e19c108410
- SSDEEP 24576:WxuDzydqWzowTYqRAJ/qI0qL2PgwWHVFJUrVAhfzmO1ZX5ngRZARv0K:0u/6qmowTQ/FhL2O1g2hC+15gRvK
- TLSH
  T19985010346921037ED8B19718A8F3BB87668481229DA892FFC057F691C777E5EFD7482
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25
- Target
  PCBuild/granny multiplayer_Data/sharedassets1.resource
- Size 829KB
- SHA256 01956c8ae840d2885dcedb69848399bf7ce635d5006d123d4a194f32fddcdce9
- MD5 8d5a01a66f36b89bc14feffcc038798a
- SHA1 13e333dd0530f4f2b85b401262fadd167393b36d
- SHA512 7d4c32d9748874b46d8971622d0df6bd906467944bc9164892d92c349e6e21a4d5014409d8214c929cf4b136a566fc96b6b0a10daa5bd42f308ae488e5f7ffce
- SSDEEP 12288:9EjzVSllTTaItcspaBbLi2vpAKub+5r+mlkta4sAw9s+a8KYFsgVioFBZngvSUL:9EVSllTTBEByGGb+smEIbs+Sisg9Fre
- TLSH
  T1B00523A32BB1CEECEFC844B199FD496C375DE10F1B78A3B9464CF91588601216D6DE22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral26
- Target
  PCBuild/granny multiplayer_Data/sharedassets2.assets
- Size 15.6MB
- SHA256 fec4564b2c605b0a5a88192c718f98f1365c91faf094c92cdf102d4aa401ebde
- MD5 c7e170758311fc6bc6e5fddc74dfb6fa
- SHA1 aeece3db860aa7b9eb2f624e4a40d8bbd494ad15
- SHA512 5453170cfcab1c9d3469c0795aef98e0af3f77a7960adf3f0f792d5d149c8de00fb6025b1cdfa5678e027285269f1205d7ed2b2211d9c01124e2ca85105f3148
- SSDEEP 393216:cdAh6M+hbNV8lVzx5A3rThDTxH0tGRUdgpyjWeL9wtbLHrCIs1M:JoM+ms5DV0tG6dpjWeWt
- TLSH
  T132F6E102B146865AF16166B2647BAF62D62ACCDC0735463B67FC762C1CF3388FB80675
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral27
- Target
  PCBuild/granny multiplayer_Data/sharedassets2.assets.resS
- Size 107.7MB
- SHA256 75d46c88dee0b9bd139ec1b0bd7910a98f49abafa717fab6b2d4d2355d23a1f4
- MD5 9cd501dc81ee96d441210755f36d1afe
- SHA1 becd22b1081d38871befce33b0779f30780129b1
- SHA512 9a394775b8703ad8a99cc1838b01435f1dc8bbbe98819f372c953217552955870538cd47157179266ba38e8b9fad2ce8857b0c4e7b46ae3fa3ad5c82456d31a0
- SSDEEP 1572864:foynLD4SRlXvBtaW4x7bYHA1d0xjTYNV3YYV5:woDj1pSZC3jTY/l5
- TLSH
  T14638F19B7F40C813F58D82B9C1E2E9F08507AC24E28F15EF25E5BE5736BBB519B24490
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral28
- Target
  PCBuild/granny multiplayer_Data/sharedassets2.resource
- Size 1.5MB
- SHA256 32e9f5284adc41e303d5829cd83d173f1dda64fbf301ab16fa2d8960850118f2
- MD5 bef6c8be15175940327075fed29fc8e2
- SHA1 32ae8f8d58d950e3def3cf372691455ae530afd8
- SHA512 012a641b9680b68b2c2541e3f048a9f29068ee6c54447c15dc619cc604be2c6fc044383c0d8725222c793a860ffebe93895f45a0159792d42b80a7a3cdf214c6
- SSDEEP 24576:sUDZDlfktom9PMuqgRXVLsY1lb/pyTjNF9KaR0Il89Sf8cJ1T8grilt:xllfDQ5RllnENF1yA0Sf8c38gw
- TLSH
  T1C0753332B9D308C1E60F9AB60F78932A2AECE6515A15F36B5746B71CDC1BB18705FE40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29
- Target
  PCBuild/granny multiplayer_Data/sharedassets3.assets
- Size 437KB
- SHA256 87f0a4098de554faf7741d2f54cb84a59c8bb022af5849ea824f228a1f702560
- MD5 ba757c8bc2834f0025fbfcc6b217adec
- SHA1 f3d5af7db1b493f793617fd9c2be3ed09734adf1
- SHA512 4928b5850b32b8f36307445dd852016acba309a444edae970f4f84518c492bb5869c7a6500cb48c7796f9f293bc740d6c75935f4ea3d97e73d822515eb29bdc8
- SSDEEP 6144:i3aJu1Y1olaI1JGNjZQxAHmhIM1W/wiwEEW2YrSafY:eY1olaIHGNjZQxAHmhIM1W/2WO
- TLSH
  T163941A9434451A2EF2B022B694733F22C566C9DC6AB6863B03FD26AD5CE7B5CF742131
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral30
- Target
  PCBuild/granny multiplayer_Data/sharedassets3.assets.resS
- Size 356KB
- SHA256 59fb8d8b2901363a1be84892e8222699efe0de08e4a26575331f04454a078444
- MD5 6b137772cc2548b9d7b74475868139bf
- SHA1 6051cdf98759c13056311de4a6501c0c7fa420dd
- SHA512 faae0390e79e83c11fb2637dd7932924bdb5d8d2a3ad8ce5481eb1e7883fbb26a7b367eedbb5194551adf29dec726508759f84a4a390ecef41d80c594c57cc47
- SSDEEP 6144:9AubMW83DSKcexhEzy14vRCZmOFLNOYdidfbQQr/7VMWmbrLtfFFXv9EEc:iuYzSK13Ezy14swIOYdiFQsjVX2rLtfc
- TLSH
  T18C74BC4F9157E5648F2F092081EB2FB90D92FC1977449E722138B49DFA726F93C88287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral31
- Target
  PCBuild/granny multiplayer_Data/sharedassets3.resource
- Size 254KB
- SHA256 fe4b68f99dd967ede377e71a2e9d79426f767207e8ae80b2c3604dc4f5a57f76
- MD5 00b0be1d9ed131f53c8f86a4eda501a3
- SHA1 e63a772b438c36624dae50d9bfb828c07b89bc26
- SHA512 c3521d3a70fea011a0d2644e9730f08bf2628c386e9e2887d216eecd179d558f73846f75915dbf87b02543b20680c6ef74a7c3942e578097afa086e9b2e7b326
- SSDEEP 6144:rwPFbBDfGUdGTcASHklya9qJIs05aHSnrAiRhJAZrl5i4y0csWFZipQ:MFBtGTSEcJA2yrAiRhGZbhyr/ii
- TLSH
  T18944122393E1D2DEDB7252B8515C8616D238A5578FCB6CEB21B7E008DF9D2015A8FDD0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32