General
- Target funkblox_54873.zip
- Size 184.9MB
- Sample260627-ycevjsc161
- SHA256 139b1f327e27a20393f262bba6e8793e553a2f57886faaa530b17ab2f67aa4be
Malware Config
Targets
-
- Target funkblox/data/s-laughter/s-laughter-blox.json
- Size 48KB
- SHA256 e034a3a0f83888bb79fb9b4b739b43b1d70ff7fd6f32bdc26bef6708122d228a
Score3/10 -
- Target funkblox/scripts/aspect.lua
- Size 392B
- SHA256 40fa507c1f383869226e248e6eb87a1f9658d534775a54bd356cda2d5e5d39d1
Score3/10 -
- Target funkblox/scripts/middle.lua
- Size 178B
- SHA256 251e26ebeff89ef7cbc9bee7b459564897383041eab3b22e62814a0ca9af275d
Score3/10 -
- Target funkblox/scripts/readme.txt
- Size 234B
- SHA256 f4c2de0958e237970b697a6528790fe7d055194f14622fd718d3a91e75763a68
Score1/10 -
- Target funkblox/shaders/readme.txt
- Size 175B
- SHA256 fb951bfd34fb5b98f2ee58762a2a35de63a5da94014042c265f0752e268ab487
Score1/10 -
- Target funkblox/songs/gray-sky/Inst.ogg
- Size 6.3MB
- SHA256 756d1eb722d906b53735df85b0d89617643f4c6b472a2aecebe36e3d9b064df9
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target funkblox/songs/gray-sky/Voices-Player.ogg
- Size 3.4MB
- SHA256 5f5209f46aa3d78be8e6719c3226d7bc634697b9e62c8220c5fa5e24a8f59dc7
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target funkblox/songs/gray-sky/Voices-opponent.ogg
- Size 4.0MB
- SHA256 cd9aa7e93a0630c4ae28e7b756fad6f5be952d88ed8915d9fd315bc9368001ca
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target funkblox/songs/gray-sky/Voices.ogg
- Size 6.2MB
- SHA256 fda14bd221fa633f52966cd18623fd3046f43485f8eeddbfc8f7093484bb5f16
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target funkblox/songs/pizza-song/Inst.ogg
- Size 3.5MB
- SHA256 fc78fe8aab67411e7002d6be169059784198622f850eb4b252b0f0916f8a30c0
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target funkblox/songs/pizza-song/Voices-Opponent.ogg
- Size 2.1MB
- SHA256 a2eec4b287e5d5d4cef967651e688f5b250c14ccd16a4deb095a380219a77d45
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target funkblox/songs/pizza-song/Voices-Player.ogg
- Size 2.0MB
- SHA256 fc94738843adc1a0dc96e982c08005b34cea4c7cd87c098f2dcd9857dabb3455
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target funkblox/songs/readme.txt
- Size 150B
- SHA256 344df4486fb8b43e61418744e35bc8f41f9790fc195e9801a18eaf1dd45b5c86
Score1/10 -
- Target funkblox/songs/s-laughter/Inst.ogg
- Size 4.0MB
- SHA256 b62778b8e9b27f60b6cecc8868bf856010b7ec0849c01c006178f38fd03b35d9
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target funkblox/songs/s-laughter/Voices-Opponent.ogg
- Size 2.6MB
- SHA256 c5a0265cedfa5b4d131042b7e3e26777912222e588602d317c39fa1ba58e175e
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target funkblox/songs/s-laughter/Voices-Player.ogg
- Size 2.9MB
- SHA256 ce752655a2498f074fbe0cf484bd5bcd73e67dd1b09825343aec2a0f0da8c9a4
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.