c629e744079daf644e051f34a0525d472886f9edcdc3079cb0ff1ffbcb1e9eab

Sharing

Copy URL Twitter E-mail

General

Target
§8§lSmall crosshair.zip
Size 2KB
Sample260705-sxrf7agy6n
SHA256 c629e744079daf644e051f34a0525d472886f9edcdc3079cb0ff1ffbcb1e9eab
MD5 86bb77bd034c23352e6c5503e522f261
SHA1 b49ff73d4e8ae3e7e1c07344691d26759d88a7dc
SHA512 2734fb4698fd925fcc7eecd745be05992ac13ed58dbc916dc6d875110bd800b146b46352c59df8edbef13c7f24685dfc9f7f720a4714b46dc455c6ce7abc8ef6
TLSH
T1D3512358C7677D10E05BF67590B78AC7EAB083365E3CF2DF4178A000AE9E995094763A
MD5 SHA1 SHA512 TLSH

Score

8^/10

Malware Config

Targets

- Target
  §8§lSmall crosshair.zip
- Size 2KB
- SHA256 c629e744079daf644e051f34a0525d472886f9edcdc3079cb0ff1ffbcb1e9eab
- MD5 86bb77bd034c23352e6c5503e522f261
- SHA1 b49ff73d4e8ae3e7e1c07344691d26759d88a7dc
- SHA512 2734fb4698fd925fcc7eecd745be05992ac13ed58dbc916dc6d875110bd800b146b46352c59df8edbef13c7f24685dfc9f7f720a4714b46dc455c6ce7abc8ef6
- TLSH
  T1D3512358C7677D10E05BF67590B78AC7EAB083365E3CF2DF4178A000AE9E995094763A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  assets/minecraft/textures/gui/sprites/hud/crosshair.png
- Size 114B
- SHA256 85210a9ae6112fab18f80bac5d592bfd4628a5b8173953b52c6814f5245309c9
- MD5 3c4da8aa5fda7ac9c6f1a3dde1f56206
- SHA1 e7ac830dc457dbb8adff639af7733a54d28a77f5
- SHA512 363ea2f6c12f90f6c474558700c960aa06eede848f214d37f121473041f5e1f572dd3f2e349d101bc7f5f178f6aa084b37f33ee282227a0a1dbb30a155e23170
- TLSH
  T1BCB092C29AA48A78C64207638A299A55E8B1C62C053E890480A4A6245C19D88C29A68F
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  pack.mcmeta
- Size 908B
- SHA256 88e32bcba9c3a1e3b614d94263d992bf564cc7ae0327370e384e51c9539f928c
- MD5 4e15c8531aae4c12678fe4e8b5a5a223
- SHA1 961ad1903c9fcd56b9ca4fad0ecca508ec0d9a00
- SHA512 971772b98d66ffd7eea4c5c9e8ad5896527dfaf8785d991c97973256547c39e74dfe1d5f310677601fe60262a38901c1492fe05a6e2ba6666c5f1c43f6d5bbcd
- TLSH
  T1D911B59AD4A42D2352F163A9B9EC4307EF5157D3939888973F7C058C0F32E65414BF1A
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  pack.png
- Size 733B
- SHA256 a5ed25dc577b4fc3e8ce5e0b47e22be601d2fb7a12ab8388c3868fa01ef2f23e
- MD5 bf0d68edcaeec0b4f4ba453d2c7117a0
- SHA1 7268a114ec40428b293859de9eff001c8fd2df7e
- SHA512 6dd8c4652706e88255cdef6657f775d652e38aca1b3afd2688a712be1ce5e6a53ed21fe3eb67f397bf52a9f65aeea5cda3e7552dd5ebb11bec6ada2b4ef93c7b
- TLSH
  T18501655DAC9119C0CA4D9C3390FE21D1E4351B0843507419FAD6E8D72D040E95A5B1C3
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8