10de826a332cbfe1e3451e7560d8a1f9268585314efedf18d62865122b370c40

Sharing

Copy URL Twitter E-mail

General

Target
MousePrecisionHelper_[unknowncheats.me]_.zip
Size 25.0MB
Sample260701-ethszsf13s
SHA256 10de826a332cbfe1e3451e7560d8a1f9268585314efedf18d62865122b370c40
MD5 e5e2ad88da27311d9e7626a144b461d6
SHA1 ca040a54f8f54b34e23fa5d0cb4c404d18cd935d
SHA512 28a77ef4854a485923427ad6362d88b60006714b536589983c91d2134ce2547544619700f1452fab9cc42133fe0d8e6f03441742fd1ee605369c9953e91ce01d
SSDEEP 786432:d9xOLPVqhfrVXoK7vBzJ2wpcYr9AEGK8aliF61Xb3V+ul:VfJXoKZJ2yr9AEGK8D6bF
TLSH
T18447339CE9FF6B94CB4E2C7238375815F0211CAE0EF902257952E2918AF7092B756CD7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  MousePrecisionHelper_[unknowncheats.me]_.zip
- Size 25.0MB
- SHA256 10de826a332cbfe1e3451e7560d8a1f9268585314efedf18d62865122b370c40
- MD5 e5e2ad88da27311d9e7626a144b461d6
- SHA1 ca040a54f8f54b34e23fa5d0cb4c404d18cd935d
- SHA512 28a77ef4854a485923427ad6362d88b60006714b536589983c91d2134ce2547544619700f1452fab9cc42133fe0d8e6f03441742fd1ee605369c9953e91ce01d
- SSDEEP 786432:d9xOLPVqhfrVXoK7vBzJ2wpcYr9AEGK8aliF61Xb3V+ul:VfJXoKZJ2yr9AEGK8D6bF
- TLSH
  T18447339CE9FF6B94CB4E2C7238375815F0211CAE0EF902257952E2918AF7092B756CD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  MousePrecisionHelper/MousePrecisionHelper.exe
- Size 17.5MB
- SHA256 4adf55353bdcca11d31811081a480e20c759b8320673d14498ce0a450d302443
- MD5 96734e35b8fd4190ccd627a3879da09c
- SHA1 bb392b674ec397b5ed67507783d1fdcb79dd12ab
- SHA512 8275d54c2c4bb21419018f74b3100af00575a2b8e4f59eb4d6058f6eeacc9805469b986ce59ceacf6bdc74ff7ff7906ae0044d8c18b3601d7c61d26b9a1c8ccf
- SSDEEP 98304:3owWTYwSNKU0QB9r0Jwjef6CDL9BLJLP9xe/+FOvSmaRf+UcDN9NppBLxAHDfyLH:30TYwY9gJwjeyW5BNLP9xz8N9Nppp
- TLSH
  T1A2078D0DA7D80F3BC2EB5F7BE4A1A132257595162743E70B5A0AD33D0C963C48EE16DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  MousePrecisionHelper/e_sqlite3.dll
- Size 1.6MB
- SHA256 dccbabb2bc7e7d4302c44d9ce41b70721a7d0914fa4d289e2f340d39766ad102
- MD5 d93fc939cf4c875fc065c37e771da367
- SHA1 5a035170e758c13913a41cc427de556485c5ef5d
- SHA512 e442dc97c14522e675067a85589698b657b43aeff91bbd75efc2db8fd7bbd0c5939dece270eb0fc4c108113b1246ce7268f8f38fd63c754f364d19dec40551e2
- SSDEEP 49152:KFpe/1CmBo+xp1cXQDd7H7GZjAkjDOnDuQ+7X:7JhcXQD1GZjAkjixi
- TLSH
  T1BA758D47A7B900ACD8A7C27885179707D7F170051764ABEB55A08AA92F23FF61F7A330
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  MousePrecisionHelper/libHarfBuzzSharp.dll
- Size 1.7MB
- SHA256 eb76238c9e8e41d44b5a5b18167c4c5b39ca5db4277af5dbe92d730f0fc14a7d
- MD5 e0c86bbd88d6b8f5643c1ab1c050a4ee
- SHA1 f6c72b1fd89d0f9e3d7825a0450ae0c0af092c5a
- SHA512 023a1054d7516ebb99b46ca3f9a17b1ee00e55a46356586513fdd45c42bd6ccca16139a8e93e7a9bc533afa5abed121cb5fd40474bfb27bca22da3598ebef694
- SSDEEP 49152:MG+tDvarn9O+3KVv/s0upzEpOqw8k25Pj4LneMdTaGVW:FS2be5Pp
- TLSH
  T1E3859E4AF2AA10E9D9BFC074C666950BE7A274050314DFEF65E08A95EF23EF5167E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  MousePrecisionHelper/libSkiaSharp.dll
- Size 10.9MB
- SHA256 96a6d73dc9b641a2f391ad09f15c264a1d910004773d262aee7941a28e1a0029
- MD5 c85cd7dad9c20cf5bd5e90a58840d8fa
- SHA1 495d8b102167f3831252ee143570c11ee418ec86
- SHA512 b0a998b0f79c84676a244ed128826eae338eefdc0e9db8e2b783150a15e1b50a51d285c2596bd9aa92e0970a6576a2d7a2705150ebbf7b0afa23ae859cc8cb90
- SSDEEP 98304:+ufP7IvpZiRk+EINj9/e33Db2es98grJ8mGqyGo:+w7lejbb2vo
- TLSH
  T18BB62A16766B64ACC04AC4B4970B8A526E2038DB0B35BCEF41C5B1393FBABF41F79615
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10