Overview

overview

8

Static

static

3

sims-4-upd....3.zip

windows10-2004-x64

1

sims-4-upd....3.zip

windows11-ltsc_2024-x64

8

sims-4-upd....3.exe

windows10-2004-x64

7

sims-4-upd....3.exe

windows11-ltsc_2024-x64

7

updater_gui.pyc

windows10-2004-x64

3

updater_gui.pyc

windows11-ltsc_2024-x64

3

updater_readme.txt

windows10-2004-x64

1

updater_readme.txt

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    sims-4-updater-v2.6.3.zip
  • Size 23.6MB
  • Sample260628-qnrpgshv8t
  • SHA256 7864d43de129ddc55fd8afc49de24a80172aa7a275e6f6ac9dac11e78ffd0f81
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarepersistenceransomwarespyware

Malware Config

Targets

    • Target
      sims-4-updater-v2.6.3.zip
    • Size 23.6MB
    • SHA256 7864d43de129ddc55fd8afc49de24a80172aa7a275e6f6ac9dac11e78ffd0f81
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2
    • Target
      sims-4-updater-v2.6.3.exe
    • Size 23.8MB
    • SHA256 8dca70ad38c2013792a257a17e022365db837a37a25ecd9348576250362fb45a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10

    • Loads dropped DLL

    behavioral3behavioral4
    • Target
      updater_gui.pyc
    • Size 28KB
    • SHA256 53d8344ce7fb220e4cb53dc2ca1e1af9245208f125b44186f5dcb33f5b485c06
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    behavioral5behavioral6
    • Target
      updater_readme.txt
    • Size 14KB
    • SHA256 8bf1608f03347805b92d7bd3b66e43346db66579dd2bdf1e95c4e4ce74775cc3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    ransomware
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks