Overview

overview

8

Static

static

7

Seamless C...1).zip

windows10-2004-x64

1

Seamless C...1).zip

windows11-ltsc_2024-x64

1

SeamlessCo...er.exe

windows10-2004-x64

1

SeamlessCo...er.exe

windows11-ltsc_2024-x64

1

SeamlessCoop/ersc.dll

windows10-2004-x64

1

SeamlessCoop/ersc.dll

windows11-ltsc_2024-x64

8

SeamlessCo...gs.ini

windows10-2004-x64

1

SeamlessCo...gs.ini

windows11-ltsc_2024-x64

8

SeamlessCo...h.json

windows10-2004-x64

3

SeamlessCo...h.json

windows11-ltsc_2024-x64

3

ersc_launcher.exe

windows10-2004-x64

1

ersc_launcher.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Seamless Co-op v1.9.9-510-1-9-9-1776812412 (1).zip
  • Size 4.4MB
  • Sample260706-sxjfkshs71
  • SHA256 95e9db8fcec02c9148eee42d0d20234eae0729ded5f91b2bedb17d84037e0dfa
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarepersistenceransomwarespywarethemida

Malware Config

Targets

    • Target
      Seamless Co-op v1.9.9-510-1-9-9-1776812412 (1).zip
    • Size 4.4MB
    • SHA256 95e9db8fcec02c9148eee42d0d20234eae0729ded5f91b2bedb17d84037e0dfa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      SeamlessCoop/crashpad/crashpad_handler.exe
    • Size 805KB
    • SHA256 d799b428ecc200a47b08b27f6b33ed5fe1f1e065136f380f6a6e78088c404649
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      SeamlessCoop/ersc.dll
    • Size 7.4MB
    • SHA256 b34da36f537dfce14551e1083c5f19ce7e33d8235034ef03cd549de4a9107594
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral5behavioral6
    • Target
      SeamlessCoop/ersc_settings.ini
    • Size 2KB
    • SHA256 10cda8bc8ec0c456541530ec8d11028cd1688640698a2dd4099ac5c114529c46
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    ransomwareadwarepersistencespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral7behavioral8
    • Target
      SeamlessCoop/locale/english.json
    • Size 9KB
    • SHA256 b8d5d3db86365a6b5e78ce888934d6fdc8308ffef3e1ae22fde24c2a18d90f3b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    behavioral10behavioral9
    • Target
      ersc_launcher.exe
    • Size 171KB
    • SHA256 e005b67d0d1d594e1e0571243c3f94acc4e1bb7bfc48af76bad1d1a85b43368b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11behavioral12

MITRE ATT&CK Enterprise v16

Tasks