b86198b121dab73938f25f3dfd06d5ec54b09cf92e0f3833d0fc893368f5aa70

Sharing

Copy URL Twitter E-mail

General

Target
Verity_Remake.jar
Size 101.7MB
Sample260626-3xt77af19l
SHA256 b86198b121dab73938f25f3dfd06d5ec54b09cf92e0f3833d0fc893368f5aa70
MD5 8139be7ad80cfc71df5f727b67b153d4
SHA1 006d3c3122633edacae605eb1df6d424b6885b4f
SHA512 9f9580a8a15376328021e2e111e2148bf91130070e0b34bc3b506d54649040d0ef73229fbe10f8cbc9ead109e65e29e06cd29b6f4e186557fae94559d96dbb4d
SSDEEP 1572864:3dwOoOEWZGD/vW/xcDiJapnWPqKnEGZ+WlRhwdJBIaUoHS2SP56ADhM1FMVj7Xl:3KkZKvU6uspnWP1E2fhwjU0SRPsAI6Vd
TLSH
T1FE38331A5148B753E803B6B39BCCD2B2A355610F77B97F308910AFC8B245831977A6E7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Verity_Remake.jar
- Size 101.7MB
- SHA256 b86198b121dab73938f25f3dfd06d5ec54b09cf92e0f3833d0fc893368f5aa70
- MD5 8139be7ad80cfc71df5f727b67b153d4
- SHA1 006d3c3122633edacae605eb1df6d424b6885b4f
- SHA512 9f9580a8a15376328021e2e111e2148bf91130070e0b34bc3b506d54649040d0ef73229fbe10f8cbc9ead109e65e29e06cd29b6f4e186557fae94559d96dbb4d
- SSDEEP 1572864:3dwOoOEWZGD/vW/xcDiJapnWPqKnEGZ+WlRhwdJBIaUoHS2SP56ADhM1FMVj7Xl:3KkZKvU6uspnWP1E2fhwjU0SRPsAI6Vd
- TLSH
  T1FE38331A5148B753E803B6B39BCCD2B2A355610F77B97F308910AFC8B245831977A6E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Verity_Remake/META-INF/MANIFEST.MF.txt
- Size 255B
- SHA256 fe2aa02b100e33341d8acd1e10f3b5f36148aa83fc6edda3d91945e91801b0b1
- MD5 49b8de3191f6d9fe421ae339565a2437
- SHA1 e7053457a6f02e9cfb6015aa7e1e67729794df8f
- SHA512 4777d6558fae0cb593547c45f6b6a839e27bd95fa41a76d44a29c835561ad6b429c3d3f70ca3e0065cd0a2ba15330757193a4933b77704c94771a24e57d8ed94
- TLSH
  T11AD05EC22FA0149438CB62B3842821C9BEF5298E3C93504571A345754392D05CBCB930
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Verity_Remake/META-INF/mods.toml
- Size 769B
- SHA256 2630976e91b7138f5b75245de5a014c1454e8cb4638c287cd8fea0868b6fdaba
- MD5 d97f6da0ffeddd32f484d9bfe6a4f182
- SHA1 d18d813fe5d313376c4783788c35af51995ceabb
- SHA512 dee00c7b56e70b1a3cfcf742d02fc901c044aa6b4db665fae93de61cb6a104dab9468689b74a6cf27554c4f9e506500b9f279506137e1458c3bd0e2aaeaa3bd2
- TLSH
  T1AC01B8C75461B83390BED5E31A9FA9C427B45363A9E8A168E0FC140575B209FC7A2AD0
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  Verity_Remake/assets/verity/animations/cardboard_box.animation.json
- Size 6KB
- SHA256 61cf9a885e36c52d116319bca5a48f37fc653827dc85e11097f2400cf511a799
- MD5 56e0ebb9d079d5ac21af4dea0881e1ac
- SHA1 c2f986cc2e36ca1d2987cab51e7b07b75858f13e
- SHA512 fdcfcd539b9af9de0453f1e354b3fdf639d55f1be99801b1a114f4a348ba7c5d90c2ccc38df9310191967660860c55962618b2e2535cd8712e2c58d865d8a852
- SSDEEP 48:bcmJrZ0JPHhJpHG0JPHhJQHLiuUSWcMS8bvZjfMd:/ra/fpP/fSLUSW3BUd
- TLSH
  T172D14BC3C78DC19B4F53851D0D6CA9EEAC4C40F6CAAC5FFBF0006556AA4A9648731BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  Verity_Remake/assets/verity/animations/flashlight.animation.json
- Size 144B
- SHA256 e98e1e043d8b4170710e18e5ddee2903cdbd1f1b74e449920621c1fa0fb173bc
- MD5 316c7a7930494ef6ea9c4017613c4971
- SHA1 99b30e0f1239686c8b43eecd798a2afaaa30ba8d
- SHA512 53cf9282d20d6932c5bd91a17bc29dbdd1c0c27f682d60005073fdddeaa42710662096c74ea0627dcc00da0d21f0b6165498ff67376f9311d9cf75373b6305fe
- TLSH
  T14DC09B45D7600DE715D61A76056C04416F70841708453E3939BD531C9F05BBE17A7B54
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  Verity_Remake/assets/verity/animations/verity_anomaly.animation.json
- Size 27KB
- SHA256 2236fc62bb8638b205b1b0a0b23c2986f2621b8700962d455641b61c183e38bb
- MD5 172b3ea52bd57019de26ed44adc5d443
- SHA1 ab625e5d7bc34f1514300c5002daf98c6e1e528e
- SHA512 c682ab7593545d52cb0ca8274a2b571d9b15efbcaa17b030e6c011f16017f098451ccc5c79939c5a96fa2d92ee4c827165910011036043e3da7607526b15813b
- SSDEEP 192:9yGW2bpq8EqWVf+pTbth3rPVWvFIccsnca6ARR4:oAbk8EqWl+pNh7PVWvLy
- TLSH
  T163C23EC7C78C81A70F67891A1C3DA4E9AD9D40F2DEA04FFFF150A50669584388B767A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  Verity_Remake/assets/verity/animations/verity_anomaly_breaker.animation.json
- Size 27KB
- SHA256 2236fc62bb8638b205b1b0a0b23c2986f2621b8700962d455641b61c183e38bb
- MD5 172b3ea52bd57019de26ed44adc5d443
- SHA1 ab625e5d7bc34f1514300c5002daf98c6e1e528e
- SHA512 c682ab7593545d52cb0ca8274a2b571d9b15efbcaa17b030e6c011f16017f098451ccc5c79939c5a96fa2d92ee4c827165910011036043e3da7607526b15813b
- SSDEEP 192:9yGW2bpq8EqWVf+pTbth3rPVWvFIccsnca6ARR4:oAbk8EqWl+pNh7PVWvLy
- TLSH
  T163C23EC7C78C81A70F67891A1C3DA4E9AD9D40F2DEA04FFFF150A50669584388B767A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  Verity_Remake/assets/verity/animations/verity_ball.animation.json
- Size 1KB
- SHA256 42c56f7ed8b19bd3ca254e9a075234b06a1755993cc9a859d81e62dfd2c62481
- MD5 f3647b9b40ea4106ba4d705420cb12f7
- SHA1 909665fe3f4509e61744ed3ca7c24e3da80be583
- SHA512 22e98232de1ac4a31447554935cefbfdc82f076b26d8e5c625167c07acf9e008826d595cf55cb6f43ac5a8739bd20791bb9abe242e8828b6c7b486b5321f5fbb
- TLSH
  T19D110AC7CB5C81E70B5B451E0C3CA9DADA9D40F28D945FFFB450B602A54853847BA7A2
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  Verity_Remake/assets/verity/geo/cardboard_box.geo.json
- Size 2KB
- SHA256 0fac3f4aff7896105340b7ed326d3c62bd0e0da1765dcbb57e9816280a5bf5fb
- MD5 73a2da9b9b9cb6356ae3299f6c06c858
- SHA1 292e04808402d055cfba9a875fa6833ab726e214
- SHA512 89a597ae44e423a3d57ad152270646ec1b2b511c1e2f7106ddef1611f3bb2b5d720a3ed1ac599b8acced70f1534ec60a56f030c589a3c3bc1d8deb44c80b0b4e
- TLSH
  T1F741BD874F0E8276AA655E8E083FDEC7561D01F605C453E2723E5C0AE394B6C54BBB38
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  Verity_Remake/assets/verity/geo/flashlight.geo.json
- Size 1KB
- SHA256 cb36fa735fc0714f6dba26397d0d44ba365a25b05d61cc410c630c4b1d78afac
- MD5 570b15178e03c8a3cacb8202726f7203
- SHA1 a00e9f2f7f6eb28d387e69e91712ef831163ab93
- SHA512 07284217669282217d20fdcdace015ed3486b8c2c9e700190ac38751aa905166c2501dec1e8c6f2dab695fd0c657144392bb4f80dd3a2b9278331c4e59689738
- TLSH
  T1ED21B4874F0E96769A256D5D087F9DC3451C40FA06C483E2B17A1C0AE380F2C64BFB78
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  Verity_Remake/assets/verity/geo/verity_anomaly.geo.json
- Size 224KB
- SHA256 76d8d296d7fd2ab23225ff130b893bbf338d181328abdfc1e0feeaa4be59bab3
- MD5 7448fafad7dae4c00931bbb4bf93b64c
- SHA1 90245fdc5f972a24e2eb1fe2fa9404e9bb70685a
- SHA512 6f445f8cfdc84db74ef1f2e4ed4da5d1a29b3a2c91e7c8cb8d1d69b6a322174b98eee3ae5935152a5c69c890d45673123a0aa4f1f6fafb859a4900280970f867
- SSDEEP 3072:EzDCb06dDgDo22KIkvhwLLctYrrmHmjGZ8QLzF1fPik:f06dU2KIkvltYrrmdLR1fPik
- TLSH
  T146243E8B4B8E8777B3179EAA483F9CC35AAC51F511D88299B27A0D05F384B5C107BB71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  Verity_Remake/assets/verity/geo/verity_anomaly_breaker.geo.json
- Size 224KB
- SHA256 76d8d296d7fd2ab23225ff130b893bbf338d181328abdfc1e0feeaa4be59bab3
- MD5 7448fafad7dae4c00931bbb4bf93b64c
- SHA1 90245fdc5f972a24e2eb1fe2fa9404e9bb70685a
- SHA512 6f445f8cfdc84db74ef1f2e4ed4da5d1a29b3a2c91e7c8cb8d1d69b6a322174b98eee3ae5935152a5c69c890d45673123a0aa4f1f6fafb859a4900280970f867
- SSDEEP 3072:EzDCb06dDgDo22KIkvhwLLctYrrmHmjGZ8QLzF1fPik:f06dU2KIkvltYrrmdLR1fPik
- TLSH
  T146243E8B4B8E8777B3179EAA483F9CC35AAC51F511D88299B27A0D05F384B5C107BB71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  Verity_Remake/assets/verity/geo/verity_ball.geo.json
- Size 338KB
- SHA256 aa3e889f66fbec93c259a14dec26e8cdb2c53248ef7a8a5413bec89612670426
- MD5 98ee314f634d451e26aec26d408d0296
- SHA1 c7fff21f4c04c4be4753f9acbf807f8e371dc93a
- SHA512 94605d38583edb947a4366b03a33ba4476a0cfa1e80d3569109c0e326e083ab5520b40e842986c1a1435b7eccabb02e5ed7e08eec75044961b7b0c60923ef7ad
- SSDEEP 384:wXLlq95RmZGIa7ki7gM8iEZFJWEsz0X4b84U1:wX6gvFxsN8L
- TLSH
  T1C97442BF13CB07BE4997D2480DAB5F82BE5990FA2BD0A5A023318F5BC7508745ED6724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  Verity_Remake/assets/verity/geo/verity_ball_item.geo.json
- Size 338KB
- SHA256 8113a88896c40e81a0139d0aab759d4b77ce7107fe218d2ab63b2181a8ba2e20
- MD5 387550a01ae468142095c9bfe1eb016e
- SHA1 08a6c6ead97e5864289b91bcd95a7f4e370b13b3
- SHA512 b9e860b63bee79fe37fab673ed7dd6eaa6dd859dbf6f0cb1f94343504cccdcecbf9f7caf9a02cd2fab4009090bb2f11edc78d5630c8861a351569f1508f32d54
- SSDEEP 384:6XLlq95RmZGIa7ki7gM8iEZFJWEsz0X4b84U1:6X6gvFxsN8L
- TLSH
  T1FC7442BF13CB07BE4997D2480DAB5F82BE5990FA2BD0A5A023318F5BC7508745ED6724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27 behavioral28
- Target
  Verity_Remake/assets/verity/lang/en_us.json
- Size 1KB
- SHA256 061967cc527a1579ff49b35dd5bbbfd98d3ea7cbb6cecd6e64712dd707782b64
- MD5 c65064ab6c0fea5e30f52095551f1328
- SHA1 026f5eb11564aef9e9d43f2e6cc92ee0319e63c6
- SHA512 7cbb1f80bf3e7d1957b212b43a226f94213fa64aa64ba18a7519ca9962374859a0353e4730f5bc68eac6514c720c726afcd7c2b32e629890801197f7a8472ff7
- TLSH
  T138116A0B3048225F05DFB0725597225A5F8C8B7BA9C0B8ACD3838A41331A57FE37A99C
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  Verity_Remake/assets/verity/models/item/flashlight.json
- Size 1KB
- SHA256 d716c156ce9b66c9190f25efd0b275ddbdc1cf37bee45421e45ca0549df0dd41
- MD5 3103a79e1ce56f47745225a3a43b1ca1
- SHA1 fd34ff11e516aca54141a4acc7f8956a5bb500a9
- SHA512 e196dfa3ec94cc8a00579434434ffee8068a4f3c644c153174f6e22012da9497cf4378bdcbd22639653f4ebd26a814ab7072f61f2e7951c99b7dea5f955a1b02
- TLSH
  T17F211C9B89285A06648ED33798BD86C0E03880D7ACA73D04399C875D4F7C43D1BFEAC1
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32