Overview

overview

7

Static

static

3

RimWorld.O...ip.zip

windows10-2004-x64

1

RimWorld.O...ip.zip

windows11-ltsc_2024-x64

1

RimWorld.O...ir.url

windows10-2004-x64

1

RimWorld.O...ir.url

windows11-ltsc_2024-x64

1

RimWorld.O...pk.url

windows10-2004-x64

1

RimWorld.O...pk.url

windows11-ltsc_2024-x64

1

RimWorld.O...fe.url

windows10-2004-x64

1

RimWorld.O...fe.url

windows11-ltsc_2024-x64

1

RimWorld.O..._0.ico

windows10-2004-x64

3

RimWorld.O..._0.ico

windows11-ltsc_2024-x64

3

RimWorld.O...un.inf

windows10-2004-x64

1

RimWorld.O...un.inf

windows11-ltsc_2024-x64

1

RimWorld.O...-1.bin

windows10-2004-x64

3

RimWorld.O...-1.bin

windows11-ltsc_2024-x64

3

RimWorld.O...up.exe

windows10-2004-x64

7

RimWorld.O...up.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    RimWorld.Oyunindir vip.zip
  • Size 656.2MB
  • Sample260704-vlt42sd19j
  • SHA256 6ce6897d0a0c705324870ed78d2330078de5190c1e33f5603f232f01cb8d86b4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryinstallerransomware

Malware Config

Targets

    • Target
      RimWorld.Oyunindir vip.zip
    • Size 656.2MB
    • SHA256 6ce6897d0a0c705324870ed78d2330078de5190c1e33f5603f232f01cb8d86b4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      RimWorld.Oyunindir vip/Full Program İndir Full Programlar İndir - Oyun indir.url
    • Size 62B
    • SHA256 b2823b511435ee9f346242337699b781ef997cfeb9f131dfb99e50f147c1819b
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      RimWorld.Oyunindir vip/Oyun İndir Vip - Program İndir Full PC Ve Android Apk.url
    • Size 52B
    • SHA256 f2509c1980ce573d45aa69368267d4c0c80e5c3b6ea8b1cd926f14516bd90dbd
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      RimWorld.Oyunindir vip/Oyunindir.Cafe.url
    • Size 49B
    • SHA256 51acf293ff46e30a4bcf4531655ef55462c80dd575c0fcf4b4b4d7d65563cd1c
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral7behavioral8
    • Target
      RimWorld.Oyunindir vip/RimWorldWin64_0.ico
    • Size 136KB
    • SHA256 08b704366589b849e1da0ec896e9dd9a15c4ad4a9c846e631628d09cb51f5316
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    behavioral10behavioral9
    • Target
      RimWorld.Oyunindir vip/autorun.inf
    • Size 67B
    • SHA256 9cd67b74fec05d30e71a560d3c0f96bb9750ce9fe8a133036d4db2b52818cb89
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    ransomware
    behavioral11behavioral12
    • Target
      RimWorld.Oyunindir vip/elamigos-1.bin
    • Size 653.3MB
    • SHA256 d178be510d5da68dafcf35e3cbb32bf3753c2e1421aaed515fc63a01f40644fa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    behavioral13behavioral14
    • Target
      RimWorld.Oyunindir vip/setup.exe
    • Size 3.0MB
    • SHA256 1f2a3f26eadb7b4e7e1ef4efc18e59c7278f4fe4dbbd52c2a90c4b0f45ccbb4f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryinstaller

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral15behavioral16

MITRE ATT&CK Enterprise v16

Tasks