17801e9e9ed528d7f0bfe9c57e30a829902e34fc698e26c8b97dc0bfcc1c5693

Sharing

Copy URL Twitter E-mail

General

Target
interspecies tra.zip
Size 25.7MB
Sample260701-yahtesdv7p
SHA256 17801e9e9ed528d7f0bfe9c57e30a829902e34fc698e26c8b97dc0bfcc1c5693
MD5 0b270108f17f7faf88646c4982387942
SHA1 97c4cec09e40ad3b78b8e6c8e8da198b73487a4e
SHA512 c55cea42edfda887a3ffbc562f1cdbbfb9f87b21b442367281d4f861bf67895c9962a2b6b67143a1fbbd17a0b137c8db9db1d8b0f893401043e9d8afcd302c0f
SSDEEP 393216:H3T5O9kOatYFwfb+V0AFLHjsnTrDT83d8ApFENzmI987KGrvPOB214wuUkamV/sc:H3txdO0KjWvU3dXEMOAKo2BhV0Sve2
TLSH
T166473361A90E5E46DD0720304FE4BF466143A665AF66CD0B75088184786FEEEEDF0BE3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  interspecies tra/Interspecies Sex & Transforming Girl/Interspecies Sex & Transforming Girl/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll
- Size 598KB
- SHA256 4942573e11ed1b10645421328026f50ec8437e6f156aa3bc65c072d320795e9e
- MD5 e314c0ae3e4eaba130ee758120dfc0b6
- SHA1 b3e30066467fc7ff504992a62ae234cbf984b4b0
- SHA512 e312854582653befb34e365d327afb33a1b705de3bc96395bf25baa2b06848f71b70f8f2dd839b7871b6d33b0dba2a8cbe1a8b52989b8fc14c557b7c8e3cb6f2
- SSDEEP 12288:WUUtPcgVN+wdBbuMEiyvA5t3ggKTJmP2:AtEu75tBKTK2
- TLSH
  T1C8D46C107C808262EDF620FD46ECB532156CA4B0472595CB62CC5BFEDA642D17B3B7EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  interspecies tra/Interspecies Sex & Transforming Girl/Interspecies Sex & Transforming Girl/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll
- Size 3.7MB
- SHA256 3bef967821e504387a9b1ef5aafb3d9a1ca21d2faf511bd52fe71f27a638f22e
- MD5 10ecb9fd47ad526382ba8d26dc5d33eb
- SHA1 65663f5038b840c857ef8706f8c02017d2a46d06
- SHA512 620ab93e7f343d23c388755dfb4ad007b683996bb6a0912eea73b03a0fba54fbe49692677f7abad69b1e7a199c3bdf9fa3e21b5f389100c6fccdc866b0c3b467
- SSDEEP 98304:uPT05NfOojrkQFqTt5Y1ikZjSAxZsYjMDhTrOexsLq6CFjoqxu0iqzDD+izhva1e:/NfOojrkQFqTt0CHdvJ3FEZm
- TLSH
  T1BF069E55FB42C422F58110B511F8DB76A87D2231172A94D796918CF8AA3C8E2B73BF1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  interspecies tra/Interspecies Sex & Transforming Girl/Interspecies Sex & Transforming Girl/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  interspecies tra/Interspecies Sex & Transforming Girl/Interspecies Sex & Transforming Girl/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  interspecies tra/Interspecies Sex & Transforming Girl/Interspecies Sex & Transforming Girl/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  interspecies tra/Interspecies Sex & Transforming Girl/Interspecies Sex & Transforming Girl/ReiPatcher/ExIni.dll
- Size 13KB
- SHA256 c073db2220667e6bbbfff64e13ed4f7e744af4b554c408f13ea80bfdffd859d0
- MD5 a18e11f7359e4a43993052dec5c712f9
- SHA1 b3172f6b1e7c4d0d111ca4bbc5008ace777d1487
- SHA512 4dff7545c06f865f4bec32d94b3065cf08a69dff0cd843473b0519e890043d3d24e9fa6a268e38eb144958f4c1a839c26a7dc4be2fe97aa202542df518acac45
- SSDEEP 192:eWqCcU4wagNgvvqyNSYyEpNSTtehottpuHeN+XLr9:CCcvzg+Lp4Wott6Lr9
- TLSH
  T1C6521A04A3C86636CF6B8679F6B7092546F1FB25A912EF4F0CE590E50C23B951B50B3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  interspecies tra/Interspecies Sex & Transforming Girl/Interspecies Sex & Transforming Girl/ReiPatcher/Mono.Cecil.Inject.dll
- Size 39KB
- SHA256 110242249c808e8d2f689680ef259126e5d44fcf62eb4c87457e92c5dd30d824
- MD5 c5919f79c1e911ed41350c0f9f7ea0d8
- SHA1 07ba274e3c77b4e9682352e3b9694fc2b038eba3
- SHA512 0602c13dc50e7f61a38cb54870bc33a51076b26747291750f52dbe1fd8e655b2744ed14d45624beafcd370e8d5de95c9c362c987211a3928edbcb6b7ccad7ac6
- SSDEEP 768:Yb9JmIJHL+JLqE5rIzA2wNutXGLARkdxZOtqt5:Y+IJKJ+MFtJLARkdCtqt5
- TLSH
  T15503A65037ED4A15E6FF6F78587225920BF2BC56ED31E74D0EC460AE0D62B818960BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  interspecies tra/Interspecies Sex & Transforming Girl/Interspecies Sex & Transforming Girl/ReiPatcher/Mono.Cecil.Mdb.dll
- Size 43KB
- SHA256 856c74c63f9040cbc0991deae7c379fa106922a846f2298e11cd9b792ec3dcef
- MD5 9a51c7944f310d07270ced400cfff49e
- SHA1 fb4455a52f6514dfdd778b74f59683b428cc5497
- SHA512 a378a9c7d7c1bfb6e16775a6daafbf78bbac56710d5d1bf1aebadf19829b5e816f98b0638ddd0f0f430f8c303461b822dd9623ffcbab82e48f1a4213b9a51437
- SSDEEP 768:3bO7Bp/FDlGjTmjg8BYuLX1fzdt7KTbwqy+gPlaN/KPHsV2IJGIpynRL:raBp/FDlGjTmM8yuLFwngta0i2IJjpyR
- TLSH
  T179131911A7BC8F27CAAE4AFDA495110207F19139AA13F75A4EC4F0FBBD47786450227B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  interspecies tra/Interspecies Sex & Transforming Girl/Interspecies Sex & Transforming Girl/ReiPatcher/Mono.Cecil.Pdb.dll
- Size 80KB
- SHA256 b198d4c5c28b1f513bae9532c2b044defdff8af6679ac996f20e76202c325bde
- MD5 15c73470576c2e33cedb84adc42fe9ac
- SHA1 d6aa2ed9fde3ec6571a2459e9e92f026ff4e2a1b
- SHA512 487f964d5571715d849ee05cccee37b6f6c99f802d2183f922fbb8975d392296790d265c0ddecc79d15fd1752f4b3787b9832c258501eccafc830ec5ca5ccdf1
- SSDEEP 1536:lXgabA0keMqoPWzadnUeyb91D6nPJ8cMPO6xYcD5:lwacvPWIUeyb9J6PeG6xYk5
- TLSH
  T1AB837DA667E4EB7BC8DA65386DD30C0103F2D27E9223D74A6D88AC7AEC07B1506117D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  interspecies tra/Interspecies Sex & Transforming Girl/Interspecies Sex & Transforming Girl/ReiPatcher/Mono.Cecil.Rocks.dll
- Size 23KB
- SHA256 c212e19da92eee838fc56fb5775eeaabe4c7782ed7e5945d38a31cfd2672e638
- MD5 79ad89d3ce09ad1dc0c2e844d27a3608
- SHA1 a5f2ac1c52b15ad4e409bfeae71182429bb958fd
- SHA512 69ddac5a1dc2319bb0316dd7355599e1f4a8681463af4c0b84686d1a4383675c997cfaabc62a157641023bc5c0c4429a63dda6fd2c68bb46f16ef6145feefea5
- SSDEEP 384:3IpMsnw5FLlkFZiE8RNcK5uUqQMGnbmCNkhF42hiixgn5BNHo2RGFZMzEbSjr/hH:3IpMsnw5kfiFNG4MQbZeX4iiVbNHpGTB
- TLSH
  T16FB20B1623DD5B3BC9EF467EA4F021150272E4A16043CB1B5DDC61AF488BBA2A3517EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19 behavioral20
- Target
  interspecies tra/Interspecies Sex & Transforming Girl/Interspecies Sex & Transforming Girl/ReiPatcher/Mono.Cecil.dll
- Size 273KB
- SHA256 aa16074961db13ebe44eb4a0127a85947dfc975eea4034f2319526e27dfdda42
- MD5 4da5a3500c6f8b8f7823f7d65316b184
- SHA1 7c26061c0a2902e532a626cad2f506aaa13b9c8f
- SHA512 0940257582891cbb0f51823ae0f0de31c97fec4293a87f48067cb9c10a1a8d3a12c70acca6d626a58cfca7443b241013ac3f8ed30d39201cf186dcc61c590599
- SSDEEP 6144:gdaBaIKx2EsD8xi6jBSKMVYGvS+iZKdJDkP0bAV:3yOqevS+r
- TLSH
  T152547D2527D89A3BC6CFA377E09309254AF5D127F24BEB4C9C9885B61D43B65CC422B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  interspecies tra/Interspecies Sex & Transforming Girl/Interspecies Sex & Transforming Girl/ReiPatcher/Patches/XUnity.AutoTranslator.Patcher.dll
- Size 7KB
- SHA256 d95c8992d3fbd240fe9d3d234c8871775ebaffe982fb8ed34b8c37079057f636
- MD5 a0b944557e14c92d6fa325e79a98d198
- SHA1 10d5dd8f7811f55ca4e5f603a9afa4ba0f6d2bbe
- SHA512 78df72ad9539efd62d57ce79450742ce5736ce0dbb451e18bc999cfa082e19a704ecef6da7c10d5c6e801e19bde2d5d2665400f8d185291f0a06db604a7891fa
- SSDEEP 96:xJUv9+RDCD0mP6+ydFlbVVAd+ZnJccZRPrpcZypOhY1gWUTB6YOVzHB7:xXt/VFlVVAo7cepqycWEs
- TLSH
  T10CF1A71A67F54716FDFB8B75BAB31201127AFE26A915D79E1818005E8C733200A63F71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  interspecies tra/Interspecies Sex & Transforming Girl/Interspecies Sex & Transforming Girl/ReiPatcher/ReiPatcher.exe
- Size 32KB
- SHA256 b889e565ff507269761b6c588e14bce545fbbef2d771e237139d359fe7458741
- MD5 27e23623ae44fc70db4578de2dd11676
- SHA1 5c5712fd469fbf49c67a65739afb9f34462daa74
- SHA512 85291d566ceeba47e578e303894c4930d3c9eda033862a6eb2c1c46a976346b72ee67676be4c2c2a095b185b8d340db80c23a381810669fa7ae91d1224360a86
- SSDEEP 384:kCzuEfEopPNGnru4CtGhoGmgF2PVGiEMrEgmpLkviQ28xQQhQ7cbKOSWGIP:aEfVNNrIo+cPQrM9mdMil8KUDKOSWf
- TLSH
  T150E24C8027E88729D5FF0E7979B156110E76F66BB833C69F6CC9549B0EB1B801350BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  interspecies tra/Interspecies Sex & Transforming Girl/Interspecies Sex & Transforming Girl/UnityCrashHandler32.exe
- Size 901KB
- SHA256 9b5fd5e7403dc2b9ef75df9103cbf3da584a9d43d5839d762cbd7cdb2b778290
- MD5 b0fb45b3839ae5ee7265515313da8b7c
- SHA1 e16a43b511516e126b82d0453f40327fdb1bd285
- SHA512 8eaf3e83eb518be4d0ae090505c83c3909f49172baeef8a3ab48805cc5dec5ff278fdb7976387b55332ff8d169abf771a0e2f70817f5b344e2040bf107e66278
- SSDEEP 24576:mduaF859LKRJc7juGF77/vLAfCTGxKj2N6FnsSYzda5M1fLmwiU0kdQNxMTHohVO:W1GFnEfCTLe
- TLSH
  T1B7159E227442C43AD1B202B1C9B8BA6D55AEBD201B3555DB73D43B6B0E305E2BF35A73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  interspecies tra/Interspecies Sex & Transforming Girl/Interspecies Sex & Transforming Girl/UnityPlayer.dll
- Size 19.1MB
- SHA256 ba9222d46d4cfacb718cf66b677b986431b9695b232c39a6f18cddd9750e3be7
- MD5 0ab42107e519279120e118bdcc9fad18
- SHA1 ec253a2a72ff6d8a0be1790c0d14f58f1fabd529
- SHA512 cdde434d245a1d3eb39ebbbd0f66cf016d903498fbbba26ec38a678d3f3816a5d2d04554e5b21ed5c425fe6d20651c1c77a54d63337722d9fc260a48abece19c
- SSDEEP 393216:nnH5oyLYz6pM3Nk/9JpiVY+G+YuOSmAfa1v98D8a8UXO2:nZoyX9JECF+YRU/
- TLSH
  T10F17BE307465D276E8A101B1E66DBEBF65BC4D68033849C363D89C95DE700D33AFA6A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral29 behavioral30
- Target
  interspecies tra/Interspecies Sex & Transforming Girl/Interspecies Sex & Transforming Girl/Uploaded by Kimochi Gaming - Eroge Haven - ゲームエロゲ -.html
- Size 162B
- SHA256 139ee757854b56dd7b5ae19c65dbe94bdc93e3af2af243eee133d2b4638ac721
- MD5 cd37695416038915eeb6a61b90d9911d
- SHA1 bc08e921963a807f23389260015694c3dd2727da
- SHA512 cb9a9e2094098b3564b47052ac96bd600ad6218193d5f1836d6d21c1e81c8a6c2f3eb2afe08cea29eb1c40938a91c6b9ef4a8a1be23ab4fe4f4209600ed7892f
- TLSH
  T1C4C08CBB08103C1A837376F038E6F00A5263380266422A20E48030AB2DB6A24CE83313
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32