General
- Target Plants Vs Zombies Endless Edition Ver2.3.zip
- Size 25.0MB
- Sample260706-tgl27sds4k
- SHA256 4f729ae874a0b0e8b46e9e0a764684f450b872150a6eec68f1a5d3c31313488b
- MD5 44b3193d4286d5d8210433cd326c5cfa
- SHA1 bc653e0f0ec8b536fe9dc0d96addcb3edeb34b2a
- SHA512 66a3bb974256f9d3f53ec34773ee817083788ea85d6c05533332aa13f066c88ce9593a7f95b2da0a1a4f734aedd3d8b2c3bb043bb99fd263c66977ea342447a7
- SSDEEP 393216:yCltYO1QJVuU06pL197r3as8HoSZCrCs68yBy92SdsEIQ1SitrEBpSoMn:BPYQmV3pLsHCrCs68y42Sd2yWoh
- TLSH T1404723F2C589A3B2C31FF133658AE101A630D6CE4CF16D19851C93F98A52EB5A257F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Plants Vs Zombies Endless Edition Ver2.3(1)/PlantsVsZombies.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Plants Vs Zombies Endless Edition Ver2.3(1)/PlantsVsZombies.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral3
Sample
Plants Vs Zombies Endless Edition Ver2.3(1)/bass.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Plants Vs Zombies Endless Edition Ver2.3(1)/bass.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral5
Sample
Plants Vs Zombies Endless Edition Ver2.3(1)/reanim/AC_RunActiveContent.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Plants Vs Zombies Endless Edition Ver2.3(1)/reanim/AC_RunActiveContent.js
Resource
win11ltsc2024-20260629-en
Malware Config
Targets
-
- Target Plants Vs Zombies Endless Edition Ver2.3(1)/PlantsVsZombies.exe
- Size 2.9MB
- SHA256 48a76f11126f3e2ce59a058b2465655eea4adebf485498147f45f2408e2192d9
- MD5 9c46bcc4dfaf4fa16540dbd2619707d0
- SHA1 0df5b68ade14ad277c71a21525862ec61882f311
- SHA512 85f0f0b433b8fbad1848e91e0ef3de7b5c197d5d4467e3d3d665869eba086a98f5b8451d96dbf2831c1fc6f5be3a55155acc3d57fdd945db6669c5d40e1efc43
- SSDEEP 49152:EwdwMLOsx3R+ijGgz4M/wZgFyUmaeeDRgh2xOfpDyYJNo/8nAMOghx96S7ks0PA:KSf6ijFUCteeD2hnYNMOg0I
- TLSH T1A0E58C51F3DB90E2D91B1A7141A5A73B84315F611334A6E7FB943F2F98313E2E83A219
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Plants Vs Zombies Endless Edition Ver2.3(1)/bass.dll
- Size 90KB
- SHA256 3627adef7e04dd7aa9b8e116d0afc11dcee40d0e09d573210a4f86bdc81a80b6
- MD5 6731f160e001bb85ba930574b8d42776
- SHA1 aa2b48c55d9350be1ccf1dce921c33100e627378
- SHA512 07ae0cb85464b015b35e6157228775a6ac66e5e62a1b47f9395307b61176b6df835e00a1518846507718acffc271263008cc8a9b2c1e8a0192c5438774e12437
- SSDEEP 1536:lyKkZPP882+8hMJ8Y8bRVYvVqGWWkaloy4bFcx/Rus5Ay6X0T3VzkxH9J:NmNN8bRVYNqGzCy8RQwXQ3pKdJ
- TLSH T1EF930199F5D17627C41A713D6BF203F3D0DDEA88C42B9F8D4E055B8028E79D96988F28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Plants Vs Zombies Endless Edition Ver2.3(1)/reanim/AC_RunActiveContent.js
- Size 8KB
- SHA256 dd4af212d2dce74565cb3360308141d23548e15a5a23d9a49c9cab69b55d95de
- MD5 f5f9c2a58c9aa85cbd602f61665da2a8
- SHA1 7533d59497555d3a35c7f0e125304f000d0039db
- SHA512 02d53485153b912338bd8d3a853424ff88c8c382d7fd5cd7bb76f2804854f6ace9685da4c3a7f04c02877dd131a61c24758b65b234c31e9b7711a8f3c8ab6b2d
- SSDEEP 96:4wQrpaYZ42Bf0HHyDL7ULELdPJVvgJYxfHzx/zLi2N09ts92iy0+8A:VAaMf0HSDL7ULELd37hLi2IJ
- TLSH T177023F18BCA9E83B5A725308443BD590FFB8C686A15589EF74EDE5C41B7212C033BEB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10