c0cdbc46a775d00cdb24e1d05fb3b2a88cf78fb7a6519a96672f6991a2d88318

Sharing

Copy URL Twitter E-mail

General

Target
NIH_Hardcore_Remastered.rar
Size 198.0MB
Sample260704-se4c2agy4z
SHA256 c0cdbc46a775d00cdb24e1d05fb3b2a88cf78fb7a6519a96672f6991a2d88318
MD5 37681f3674657b929db77f30b6ad569a
SHA1 d6e9b31d8c39b0a7ab8b0bbeebaaec12938cee0f
SHA512 dec9c56f79f05bb189fe32b780685a8112a9f7ee46b210386435cfade48c7ac2e081b73b32a087a6dfac4dd095c90917cfca48b629a5cf8eb30879326d98516e
SSDEEP 6291456:P0SCEp9Df/R5J1BUEYQOEU+VEowoS8kPY7O:H9z/rJonQM+OoK8kp
TLSH
T154A833D603B228F58A249F41586136FB78244D8E6D319C14C0C56A73DEB6BF72FA934B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Fonts (Установить, install)/BLUEHIGB.TTF
- Size 57KB
- SHA256 deeae14ffb770e69478fa13a76b03799b601e4b1863ae9f45e8a7bdc0e3ec2a4
- MD5 7a763ac0958e121931e5c60e5040db06
- SHA1 5a9c1ef7538f31c14d370783fdf089cd9d4733ed
- SHA512 1329cd309fa858d7867abc6000e880d808dd65825497a8e47a17309cca7519fc71dee09ef45e9da59762c56a94cffe355e93a228bb04ccf1f3fbf8cabcf4086b
- SSDEEP 1536:beI7GlIUo1tmANsl3Tc0rsCkHZQCxDg5cu3u1U:CI7GlIHsxDrsXZQSg5f+q
- TLSH
  T1DF431897D6ECAD2B8BC70873C5175A378FD6FD249672928E1EDA17B2D3D8040B971808
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1
- Target
  Fonts (Установить, install)/BLUEHIGC.TTF
- Size 57KB
- SHA256 89567922d58eb5e5f01fd14af132a3f40797a6a4a89049a95b4bd17d418fa668
- MD5 9363b9b285a940c9beb67772b9d042e4
- SHA1 e5b4970cd5e472cbb6ca8e20cac194d3a2545401
- SHA512 e068dbb2bcf9d742400b5939816bdea66b402365961da3a6e62b1d85d247ce84607a812b4e46384f99fba9b0885c37a66cdf6d222f11e8be5ab87a03a6e0cfdc
- SSDEEP 1536:5RWYUOBlMJiYwbNbfae+qkaWEMvlgy2aeiB:54YUelMyNhk7vlg5aes
- TLSH
  T13143F8A2CBFC6D1FD7DB4972D61A46378FD6FD204631A68E1D8A2BB5D6D4080EA3044C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral2
- Target
  Fonts (Установить, install)/Boxtoon.ttf
- Size 85KB
- SHA256 de0e84a645b9ec5855f1e876b40244d6c4c41bccf2f2d18b921eec4d3c138f4b
- MD5 7a1226716afc2286cd43711a00db6ebe
- SHA1 0dac7ec53797cc20d0b0362cc440f070c4122e5b
- SHA512 bffa6f397c7cfb89a1cb273558a984750de957bd01b9d9289c26312d77477979c3494eac46b9b2fc64812560fa3cc5709d7d5af59155bd5a5493a7f23a8ebcdc
- SSDEEP 1536:lx39A0OjOyo18bgPiq56XmgIRJIyvRuxsz5mbNF0hk7n6vB:ftGjOf5GmgIRPzc0+6vB
- TLSH
  T1A7830A125FFF9E1BDF7D0E7C8AE0427692A1B902CFB1B105FD2049D2C6C76A02993A51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral3
- Target
  Fonts (Установить, install)/FARSH_MARSH.ttf
- Size 2.2MB
- SHA256 deffe41a87ff7a6766a94a2726fec833fc45958d6c0e47e559f81cc8c6a4c680
- MD5 dc7ddb79532233c81bdab50dedc30c74
- SHA1 638201e30a7e07c74ecebafa589eb370c3780d64
- SHA512 e265f3ae7868f9d369d10fab157b263c2c4352fa05f6f8751d5942e2fd9e438a16565e2870496d32cf601c8269d17b3ddf123cae51281cd8686a9c47255c93cc
- SSDEEP 49152:zsbT6sQhzWuwcjQNeDyTtJEuCN0u2+f8bkeNsjabvBzgTmV6tAcBBsrxpf6cg4:z6T6sQhzWuwcjQgDyTtJEuCN0u2+f8b7
- TLSH
  T145B575E5B868D446D84AD52A7EA0DCAD5911FF9498941C721BC93CFF980FF5F8232283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral4
- Target
  Fonts (Установить, install)/Zeitmax.ttf
- Size 89KB
- SHA256 3b6810a62d6d5cd2c8bf97970b4eadb5b2eb8a36be8e63ac4668904e7a1a8d01
- MD5 c4f84a93798cc3296a7410f0621de363
- SHA1 5eefaeb8ba9e38468e738e6047dc83fc4d0de67c
- SHA512 f01a4de2f6e29e288efa114059427e1b6d66e845c3acf6d407e87e7930da75d325a21cc0f6dc357233574732b09d87e24a5d6c081c05a819af144df98734475f
- SSDEEP 1536:nwbmVYVfb8y3HUXXXXXS1r7sHf1lHUfBgqX6po8MdDfLo:nwbmVYVfwy3H+Hf1lHUfBgqX6pozhjo
- TLSH
  T1A993A9A31324D309D4052DB7D9A5E258F2EADD174A13E38E883BB9FDCCD23C907A5261
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral5
- Target
  Fonts (Установить, install)/acmesa.TTF
- Size 99KB
- SHA256 f3e90b07b85ea4d5bb82ea465565c93cc291a59b79a1f701e89c060e51e573ce
- MD5 ccdd40b21e859aad3f7c4aa72fd3736f
- SHA1 b43fbd726f401bab783b9ae2cdadc753b8855e28
- SHA512 9119f35e55088651f5a76bedac8b396d3146a735799fd1f35bd9876ab643ca7bb299b0372d8f182e224a25bdd1a7066b5537aefb48e7e7db792d483fecb88c4a
- SSDEEP 3072:L0zOXevqc9taAd8tpFTNxpJEvparrrG+ao:c2VT/yW
- TLSH
  T117A3E8D6C3B9B58BCF6B8121C151961B4EE9FE28F158C35DAECF0BDC41A04C4A8F9458
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral6
- Target
  Fonts (Установить, install)/acmesab.TTF
- Size 99KB
- SHA256 6f98cf598dd00ee346f65f4e3baf4195dcff55a05fe8ee1d0a2b5ad5f930c83c
- MD5 9c3427dfdf33c5258299bd526456da20
- SHA1 8cc7758acc7e42e90ccced3744020dc7d9790d8c
- SHA512 b62540e5ea5607e168dc8f4da1d35e97622f1fc4e361ced8a482500ddf7e537dbd234946f34c7ec4ac468c40e5ba81c30a348cd262630c96d584cefdb5ded983
- SSDEEP 3072:mzOXevqc9taAd8tpFTNxpJEvparrrGjao:G2VT/yx
- TLSH
  T17EA3E8D6C3B9B58BCF6B8121C151962B4EE9FE28F158C35DAECF1BDC41A04C4A8F9458
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral7
- Target
  Fonts (Установить, install)/acmesai.TTF
- Size 100KB
- SHA256 e9f87f8116bd88c3664793f56d509d1f89d06ea3ed117f00c9658ed1999193a6
- MD5 5dfaa1cdf7f0bb30561325b21a12f940
- SHA1 934cc47e093b9ee3117ac6a5c3d36d5feb1adc21
- SHA512 7c35043afd1daffdcd025319596c6c1735c390e4bccda9e8297b5c29780dbd124ae51c158b6c5a437c80cbbf061b92cfb14d1950325322795f37f80d2b837813
- SSDEEP 1536:13YKOwJkMr2mWzBvOs278Qg3qyQzyJv8H9/+tmrkX48ao:1NCMr2m+7278Q5w8Hh+tmrk9ao
- TLSH
  T1F4A3D7D5D3AAB44BDF67C531C14190174EE9FE28F698C38DEEDB0AE851B08C598BD068
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral8
- Target
  Fonts (Установить, install)/bluehigh.ttf
- Size 57KB
- SHA256 77c4a806743c37ba4b0c0078345776832bed126645510fcc83148e5c0821c96c
- MD5 cfd8e54c7287d8bb0c7ddaa170e9fb8c
- SHA1 9e36fa2be674df33630bccaafc0d0a0953c852a7
- SHA512 da67fd7a4d5f2af2eacc4d0682bfbeb23e33e93c926b4eb4340b07a5dead0559292fb4c8228ca08de32a3da33db49d5c1a0067eb50b7580e649513ecc79b7378
- SSDEEP 768:n7Mp3UPTOEeMCijAjXU7+QIOnzl3Tc0rsCDwYOeIxHSBn5ynBEP/HLFdG7:n7MpkPEtmANsl3Tc0rsCkHTHSBsmH5dS
- TLSH
  T16C431BA7C6EDBD1B9BC70C72CA5256374FD6FC249672A28E1DCA17B1D2D8041BA7140C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral9
- Target
  Fonts (Установить, install)/cattedrale.ttf
- Size 31KB
- SHA256 a42867c9841718530b846b561c57271b21d904fc2fd249c63cc1901a1f81b600
- MD5 d886e0c0b346311868a505c4411b88bd
- SHA1 ff9cb5d88b8b05bd161e3657d1a3d1cde56286ac
- SHA512 a663529cb34374f3bbb041c16894b967ad6a6cbd899bf27b6e995e30c89d0dd31dcbc003ab20e1d9049168644247e3925ab49e1bf1859d3a0c8ccdb6e75aa92e
- SSDEEP 768:M1lg7vSXUVSR4n14X+kCIbuXK0kzS9+Zvi2mZVUmkz5kdWcC:Y2vCaIbuXKVzS9yq2mZWmkGa
- TLSH
  T1A2E25B49E323B60BD462FA7C4A5DA213CF06F92457BD920D49D069BBE08C8990CDAF57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral10
- Target
  Fonts (Установить, install)/d_romeo.ttf
- Size 131KB
- SHA256 38a5a7ccd99bcda21ffb3306b1ecb05ed3a97a62cbed66df0ad39c7beb0f4c6e
- MD5 c012af82e283b8a2ce932a912ebd1c99
- SHA1 b056ff7c4fe0c7bad30ec7807b1de7c4d0706975
- SHA512 b17f9a2b91228b8bb3fe075134539b6bf5767f3e27d4e67105d50a20dca9da09e1f9aaa0edad256f9f1102393d152c5a0a419041ffc23dcb37e0afb95acd23f3
- SSDEEP 3072:c9V16XeXw3iPhBsWsTWfEHWaVvEgKhh1WeJW:cjzP0hWfSXvjKhSaW
- TLSH
  T1E8D38E8737823A05F4E6B6F7C6943179CA97A2018A3F1DDEBD470B78404A264DFA5E0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral11
- Target
  bin/.GameEnglish.exe
- Size 3.1MB
- SHA256 7bf80b0f30643688c7c15e4beacc9884cd770615a554cd6255a595beebe80a90
- MD5 d1408aba0c955cc3ebac5de9df2f4931
- SHA1 40dfe5b3c8b93c140b72bd4a7e89fc2a9a135378
- SHA512 a1717c227d76ce8330150ad81782d5b8aa83e0dadb348a0b7a41c526e7c3e1a0e728c0d76cfb0e9d9499143f13b8771a3877e89fabecabab3a988276b6b7c8ee
- SSDEEP 49152:IGiFB6+3tHyIauIZ1E099sjdTxHnAbNCoAsguWrDgjDvrWzEEvUqjTj:it41Ea94Ra3kc3ez
- TLSH
  T1D2E59D12F6D70079C5A5007424DDB639D63BABEB0B1B1FA3C754DA08E6BD9D0F43A06A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  bin/.GameRussian.exe
- Size 3.1MB
- SHA256 ca551ce66b5cfdacc98820075ccea144eee3d843d255ec50bfb0aee7efec0358
- MD5 04330a0407d521f5405e071727fdf356
- SHA1 849678d42d8099c24a0d1a2bee02d9163c913f9b
- SHA512 e2d16cff094fe9aac7ab67fbb94845146ff56c61c199e173cc68bfbcbad619b332c636e247f23250c88bfe39e463c7206d94f69ba4f5987949cf6270d75456a8
- SSDEEP 49152:IGiFB6+3tHyIauIM1E099sjdTxHnAbNCoAsguWrDgjDvrWzEEvUqjTj:itx1Ea94Ra3kc3ez
- TLSH
  T1AAE59D12F6D70079C5A5007424DDB639D63BABEB0B1B1FA3C754DA08E6BD9D0F43A06A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  bin/GFXEngine.dll
- Size 924KB
- SHA256 ce26d699f4b303ccb25ab7c4434cbf7c199929ef6dc7a09744af9fb868b51250
- MD5 8a9f6f91c781e72eb59be44ede99d3da
- SHA1 43fc2bcc59baac8c74a0fbde0492bf6ac6985f68
- SHA512 8d15c0630ceeff388b649e2d677303992259dcf97f34765bd9fe6d4b11823439a296575c9dc72c2a2eb54c775330c5ac18da91cf60ddca1f4a5566d706c51bb4
- SSDEEP 12288:5evux5JgwIQrYCVcDhVGLSLP83Jh3y4f55lapViMN6czt3ENxhaYWMGqaK6qaK6Z:5evux5JgwIQr0f4f55giSJ0NxhtWL
- TLSH
  T1A01571126EAB4079C2AE02746AECB6B89A7B4FCF03D76B83D544D64DE6F9480F433055
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14
- Target
  bin/Loader.dll
- Size 272KB
- SHA256 01bfb40336e60b0f29657e4d7542b984276f0f9befd4f101be115e32b07c6f93
- MD5 aa985896a15949a244ef7441498e0585
- SHA1 3776dbf7d800c75a09afe2364284830330f4a251
- SHA512 7531fa795e1d06191be6e2ac59f48d3ba1f6f73fb8c50f7f25eb3d5fd584d13bf835eb6825770b279a25436cbb0002ebd2763b6d272c18e756c4d0f5a2077131
- SSDEEP 3072:B68co8Mp1/haupAqsIf02H4+Fe7fy0OF//bkx0H:B6HMp1/hdA52H4We7XIjO0
- TLSH
  T14C44B2023AA3807CCAED017925EDB2799B3B5BCE47235B879A44D858D7F7041FCB21A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15
- Target
  bin/SFXEngine.dll
- Size 112KB
- SHA256 c082057df38619863408690714eb79cadf640cde0a34b0e5125cf503b9b4f535
- MD5 9be9b3dde583fbe04b5329a67afddf2d
- SHA1 3d4895f0c454eb73261fb0ea859d780cf5e2d4eb
- SHA512 40b1a31ed1c791273129ee727d829b7567549baf23777b75d1288687c0fd24bde5350341641bae95cb4a7a7592919f63508d5e4e538b7ef8284fa2ba9f0e9b1b
- SSDEEP 1536:db6xzATXuUDTiWtgHVOApH/SZck3aTdpgeDuGw7x4SvMmomINfFp6E:SALDVXAoZ0Kl4SUmnINfFp6
- TLSH
  T103B38E6271618074D18E013918AAB73EB77FAAC48FF18EC35F68E60D5A356D09D3B217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16
- Target
  bin/mss32.dll
- Size 341KB
- SHA256 e9bad6f7ccc40407e990608d1d78117feefd55d4202ddb0fe564bef0effe9ed1
- MD5 3897354f1a90ea6762ac803d8f751225
- SHA1 1de823b60f0735e5fc326b9736b8ea2ce5168166
- SHA512 b0cea1db46e0745d72ba20361588f79c581a22d89c6e9a0be20753df843efb3694e1bdfe697daccaf822faaa2539e24f8d8c3f941feb0d9deb591672ba440c75
- SSDEEP 6144:qj2QNV8XdPHKQttNH34wzQSMKrBgPrWUS4aHrmtcIS:qj24VmFzttJeSprBgyoaHrmtc
- TLSH
  T141743A11BA8002F5C4CF3D33A45AB73AADBDCB18451A561B6284ED44D92FDA3728F71B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17
- Target
  bin/mssmp3.asi
- Size 123KB
- SHA256 ad49c5364794e95028664f8aacdfb2c9980f30986a16fb487a5ad6aab700daa7
- MD5 1c12cc2a943a23159a01812c8e9d4f74
- SHA1 bc285be55ba25e473d70c697d4a9a7351f2eda6a
- SHA512 c16e2f39dec1f7ff1dff06b16445d544cf7599e4d653ea6a5ef41698bd8b13e29072f6fe73ab4cbb1b47c37626d9b9ee3f40b988d42f6a8424e0b134a15d1be6
- SSDEEP 1536:hC5NGAHO9jq3/VfHBBRRhynX35FpsoTTdq0HV0gN/BL3k2FM+Z9+oO7yHsuPYQO:hCex9jq3/W5FpbTTsYBJ+oOP1
- TLSH
  T177C317B3FE854070CC9FCA3194DDBE1E196979E7C2D248C5A3BC14968E60FD88D26636
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18
- Target
  data/1.TTF
- Size 99KB
- SHA256 f3e90b07b85ea4d5bb82ea465565c93cc291a59b79a1f701e89c060e51e573ce
- MD5 ccdd40b21e859aad3f7c4aa72fd3736f
- SHA1 b43fbd726f401bab783b9ae2cdadc753b8855e28
- SHA512 9119f35e55088651f5a76bedac8b396d3146a735799fd1f35bd9876ab643ca7bb299b0372d8f182e224a25bdd1a7066b5537aefb48e7e7db792d483fecb88c4a
- SSDEEP 3072:L0zOXevqc9taAd8tpFTNxpJEvparrrG+ao:c2VT/yW
- TLSH
  T117A3E8D6C3B9B58BCF6B8121C151961B4EE9FE28F158C35DAECF0BDC41A04C4A8F9458
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral19
- Target
  data/10.ttf
- Size 2.2MB
- SHA256 deffe41a87ff7a6766a94a2726fec833fc45958d6c0e47e559f81cc8c6a4c680
- MD5 dc7ddb79532233c81bdab50dedc30c74
- SHA1 638201e30a7e07c74ecebafa589eb370c3780d64
- SHA512 e265f3ae7868f9d369d10fab157b263c2c4352fa05f6f8751d5942e2fd9e438a16565e2870496d32cf601c8269d17b3ddf123cae51281cd8686a9c47255c93cc
- SSDEEP 49152:zsbT6sQhzWuwcjQNeDyTtJEuCN0u2+f8bkeNsjabvBzgTmV6tAcBBsrxpf6cg4:z6T6sQhzWuwcjQgDyTtJEuCN0u2+f8b7
- TLSH
  T145B575E5B868D446D84AD52A7EA0DCAD5911FF9498941C721BC93CFF980FF5F8232283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral20
- Target
  data/11.ttf
- Size 130KB
- SHA256 49bdb5b0d153ab6070581520660aa3d7c845382a1362548ad625114ede2a2488
- MD5 2f9da83de27c154a1a9c87bc17eab7de
- SHA1 db9be0420c938f2a448d16ae18d6e3bc30ec0197
- SHA512 d1da948d0c79e687ee9af11ae0ffa18147d83d72a594cf92661f73b814f8203621bcc37e1b1114e32095a4fd740bf3a4d4278b509ae6a72a22c9ab360580b49b
- SSDEEP 1536:uT21YvW4oDndjRaR2YB19PKiWgdyu+OY25N0qMFkDA7vdDfLk:mDoDndN8/BnWo5l5DIvhjk
- TLSH
  T105D34B3F5FD5E358FA059DF818A34F56A2F29E125B0383FBC0EF28A450676F9550A182
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral21
- Target
  data/12.ttf
- Size 89KB
- SHA256 3b6810a62d6d5cd2c8bf97970b4eadb5b2eb8a36be8e63ac4668904e7a1a8d01
- MD5 c4f84a93798cc3296a7410f0621de363
- SHA1 5eefaeb8ba9e38468e738e6047dc83fc4d0de67c
- SHA512 f01a4de2f6e29e288efa114059427e1b6d66e845c3acf6d407e87e7930da75d325a21cc0f6dc357233574732b09d87e24a5d6c081c05a819af144df98734475f
- SSDEEP 1536:nwbmVYVfb8y3HUXXXXXS1r7sHf1lHUfBgqX6po8MdDfLo:nwbmVYVfwy3H+Hf1lHUfBgqX6pozhjo
- TLSH
  T1A993A9A31324D309D4052DB7D9A5E258F2EADD174A13E38E883BB9FDCCD23C907A5261
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral22
- Target
  data/2.ttf
- Size 99KB
- SHA256 6f98cf598dd00ee346f65f4e3baf4195dcff55a05fe8ee1d0a2b5ad5f930c83c
- MD5 9c3427dfdf33c5258299bd526456da20
- SHA1 8cc7758acc7e42e90ccced3744020dc7d9790d8c
- SHA512 b62540e5ea5607e168dc8f4da1d35e97622f1fc4e361ced8a482500ddf7e537dbd234946f34c7ec4ac468c40e5ba81c30a348cd262630c96d584cefdb5ded983
- SSDEEP 3072:mzOXevqc9taAd8tpFTNxpJEvparrrGjao:G2VT/yx
- TLSH
  T17EA3E8D6C3B9B58BCF6B8121C151962B4EE9FE28F158C35DAECF1BDC41A04C4A8F9458
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral23
- Target
  data/3.TTF
- Size 100KB
- SHA256 e9f87f8116bd88c3664793f56d509d1f89d06ea3ed117f00c9658ed1999193a6
- MD5 5dfaa1cdf7f0bb30561325b21a12f940
- SHA1 934cc47e093b9ee3117ac6a5c3d36d5feb1adc21
- SHA512 7c35043afd1daffdcd025319596c6c1735c390e4bccda9e8297b5c29780dbd124ae51c158b6c5a437c80cbbf061b92cfb14d1950325322795f37f80d2b837813
- SSDEEP 1536:13YKOwJkMr2mWzBvOs278Qg3qyQzyJv8H9/+tmrkX48ao:1NCMr2m+7278Q5w8Hh+tmrk9ao
- TLSH
  T1F4A3D7D5D3AAB44BDF67C531C14190174EE9FE28F698C38DEEDB0AE851B08C598BD068
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral24
- Target
  data/4.TTF
- Size 57KB
- SHA256 deeae14ffb770e69478fa13a76b03799b601e4b1863ae9f45e8a7bdc0e3ec2a4
- MD5 7a763ac0958e121931e5c60e5040db06
- SHA1 5a9c1ef7538f31c14d370783fdf089cd9d4733ed
- SHA512 1329cd309fa858d7867abc6000e880d808dd65825497a8e47a17309cca7519fc71dee09ef45e9da59762c56a94cffe355e93a228bb04ccf1f3fbf8cabcf4086b
- SSDEEP 1536:beI7GlIUo1tmANsl3Tc0rsCkHZQCxDg5cu3u1U:CI7GlIHsxDrsXZQSg5f+q
- TLSH
  T1DF431897D6ECAD2B8BC70873C5175A378FD6FD249672928E1EDA17B2D3D8040B971808
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral25
- Target
  data/5.TTF
- Size 57KB
- SHA256 89567922d58eb5e5f01fd14af132a3f40797a6a4a89049a95b4bd17d418fa668
- MD5 9363b9b285a940c9beb67772b9d042e4
- SHA1 e5b4970cd5e472cbb6ca8e20cac194d3a2545401
- SHA512 e068dbb2bcf9d742400b5939816bdea66b402365961da3a6e62b1d85d247ce84607a812b4e46384f99fba9b0885c37a66cdf6d222f11e8be5ab87a03a6e0cfdc
- SSDEEP 1536:5RWYUOBlMJiYwbNbfae+qkaWEMvlgy2aeiB:54YUelMyNhk7vlg5aes
- TLSH
  T13143F8A2CBFC6D1FD7DB4972D61A46378FD6FD204631A68E1D8A2BB5D6D4080EA3044C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral26
- Target
  data/6.ttf
- Size 57KB
- SHA256 77c4a806743c37ba4b0c0078345776832bed126645510fcc83148e5c0821c96c
- MD5 cfd8e54c7287d8bb0c7ddaa170e9fb8c
- SHA1 9e36fa2be674df33630bccaafc0d0a0953c852a7
- SHA512 da67fd7a4d5f2af2eacc4d0682bfbeb23e33e93c926b4eb4340b07a5dead0559292fb4c8228ca08de32a3da33db49d5c1a0067eb50b7580e649513ecc79b7378
- SSDEEP 768:n7Mp3UPTOEeMCijAjXU7+QIOnzl3Tc0rsCDwYOeIxHSBn5ynBEP/HLFdG7:n7MpkPEtmANsl3Tc0rsCkHTHSBsmH5dS
- TLSH
  T16C431BA7C6EDBD1B9BC70C72CA5256374FD6FC249672A28E1DCA17B1D2D8041BA7140C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral27
- Target
  data/7.ttf
- Size 85KB
- SHA256 de0e84a645b9ec5855f1e876b40244d6c4c41bccf2f2d18b921eec4d3c138f4b
- MD5 7a1226716afc2286cd43711a00db6ebe
- SHA1 0dac7ec53797cc20d0b0362cc440f070c4122e5b
- SHA512 bffa6f397c7cfb89a1cb273558a984750de957bd01b9d9289c26312d77477979c3494eac46b9b2fc64812560fa3cc5709d7d5af59155bd5a5493a7f23a8ebcdc
- SSDEEP 1536:lx39A0OjOyo18bgPiq56XmgIRJIyvRuxsz5mbNF0hk7n6vB:ftGjOf5GmgIRPzc0+6vB
- TLSH
  T1A7830A125FFF9E1BDF7D0E7C8AE0427692A1B902CFB1B105FD2049D2C6C76A02993A51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral28
- Target
  data/8.ttf
- Size 31KB
- SHA256 a42867c9841718530b846b561c57271b21d904fc2fd249c63cc1901a1f81b600
- MD5 d886e0c0b346311868a505c4411b88bd
- SHA1 ff9cb5d88b8b05bd161e3657d1a3d1cde56286ac
- SHA512 a663529cb34374f3bbb041c16894b967ad6a6cbd899bf27b6e995e30c89d0dd31dcbc003ab20e1d9049168644247e3925ab49e1bf1859d3a0c8ccdb6e75aa92e
- SSDEEP 768:M1lg7vSXUVSR4n14X+kCIbuXK0kzS9+Zvi2mZVUmkz5kdWcC:Y2vCaIbuXKVzS9yq2mZWmkGa
- TLSH
  T1A2E25B49E323B60BD462FA7C4A5DA213CF06F92457BD920D49D069BBE08C8990CDAF57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral29
- Target
  data/9.ttf
- Size 131KB
- SHA256 38a5a7ccd99bcda21ffb3306b1ecb05ed3a97a62cbed66df0ad39c7beb0f4c6e
- MD5 c012af82e283b8a2ce932a912ebd1c99
- SHA1 b056ff7c4fe0c7bad30ec7807b1de7c4d0706975
- SHA512 b17f9a2b91228b8bb3fe075134539b6bf5767f3e27d4e67105d50a20dca9da09e1f9aaa0edad256f9f1102393d152c5a0a419041ffc23dcb37e0afb95acd23f3
- SSDEEP 3072:c9V16XeXw3iPhBsWsTWfEHWaVvEgKhh1WeJW:cjzP0hWfSXvjKhSaW
- TLSH
  T1E8D38E8737823A05F4E6B6F7C6943179CA97A2018A3F1DDEBD470B78404A264DFA5E0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral30
- Target
  data/english.bnd
- Size 256KB
- SHA256 147893da6a4edc92ca3054335cbc97060fc5c59c1ed9f0665c04c17edcae2019
- MD5 1c5665d347431201b58859f342b0684d
- SHA1 60c91ea5d9e883e0934b660ec46ae4968755a77d
- SHA512 f3ad26fdc96689219fdc5e22ef57bf9380e917f01ddd7cea6dadfcc75c5336ec7df9234166d616c0b94b1d2f0087d44bd494866a0c5a47f391e9e210d930ce3b
- SSDEEP 6144:0FcAnbFVPARxWl0rbNs+1TiGZEl9yekJCEd3dn15:Q7bFVo5Rs2XeLe
- TLSH
  T10E44CE28D71AC01DCE6B7734328D2212FF7455CA212AB096A5E4925F4DC39BC1F27B9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  data/game.xml
- Size 340B
- SHA256 af9f5bd59ed58e093336c778f9832eb197612d5d3241fe7f82be21e27b437c03
- MD5 496f4822ec19ae6e0bad915e97d001b0
- SHA1 ed6fdddf7456c13e27bd0b6b46b7fa5e78af067c
- SHA512 0314fc4b5f6c8e219884fe4897c421d1ec3e989b397aa2b9c5e718bad70ea8001d1eb34e3c99ac34fbf08349437de82c774e699b723a92186fda700046489c50
- TLSH
  T133E08C6327EA2008B6B37A44A87000291B2A3842ED39D49D0160980ED8F3F52C833FE7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32