d66e851cd5321cd8238fa939e56e6811f87ede20c1f91a220ea7fac3ad823d0a

Sharing

Copy URL Twitter E-mail

General

Target
Tsukihime.zip
Size 252.8MB
Sample260707-ecyg4set7k
SHA256 d66e851cd5321cd8238fa939e56e6811f87ede20c1f91a220ea7fac3ad823d0a
MD5 a3372221a84dab44d03e5200847acd0d
SHA1 f00fe3b8751b557d73099e50f089e339e1dadbe6
SHA512 82267787003fd9d36e670cb7b49fa96e3f119653d85b80da998afe64cc0e1e7f6ca1dfb2556694ffd68f1cc3ba6e0d4c38486dad742e45abd2948021c7c97969
SSDEEP 6291456:FFZ49eb8PYF5GgC1YXyyVT9/C3BadAUklUau7vWV:Bz8PY1COXf/CRiAFOas+
TLSH
T108C833E39209585BE556F9BDECB416C9DF2AC93467C8073981B63831B7C00E8676E90F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Tsukihime/Extras/Flowchart.pdf
- Size 300KB
- SHA256 900b1f343195ab0bfb18f01fb156778da6a9a0f3fe45901568800bc10f746649
- MD5 698e31c38ae40936b5f1805cb58c3050
- SHA1 cb6c3a3af7461c6700531172557b1a08f94dea72
- SHA512 03d9b2bfc1b527614f496281f52231a59679afc69877995af165c8ec78dfd99b976ef9a3d029b72c283ffc8eda0b4fc6ae1407bff8c04dc768f0f6e716265806
- SSDEEP 6144:+WQnqvj8vfyBbObjB8PXWy/TwmkJq+ZFt4O8cSJLeLkGGR:JqK+f2PGyEpJhZFrygwBR
- TLSH
  T1B46423DCC66014BBE4A1C46F2913A5245D3FC33B68ACB57F5A2D0DEDB1C1269A627F02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery spyware persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  Tsukihime/Game/SDL.dll
- Size 314KB
- SHA256 15537c9176d7e6d5c28c607c4b147c8c2a7c45102b1b8e836b38d2f9449fc8ce
- MD5 fd7e7a20a9cb5cca5dbb81ea3d207de1
- SHA1 15fb67a5ba30a63257d5875a609652433de1ac27
- SHA512 e3c5b9d07064991a0dbfea2d6b8a17212f79816bd398ca823af6550db5c1f70ae68d7c9d08074fd34a44aba3e1e5acc1613704112bcc4d37486eb527dbfcc665
- SSDEEP 6144:zyC0rWmL/86i16+OFP4zd/sVuu0mxAnoxYL90CAKmzLB5wb:zyC0amT86i16+OFP4zd/sVuu0mmnQDg
- TLSH
  T1F5646C52F61711F6F5230AB4029ABFFB8A216339801194BDFEC0DD6CAB677E1661D207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Tsukihime/Game/Tsukihime.exe
- Size 9.6MB
- SHA256 4e08150648a3dd2850b10506f8302411a737fccccd53c77401ed93fa7c207657
- MD5 fe63a5e6e7d38f8f8e92a15df06fac47
- SHA1 22e5286f7a356e62b636666f3b52dab951c7465f
- SHA512 a3fe88b9f8f97b41b1657892d9a6a83c8103e36f123aa29759c0965f0d011862beef88a86f6bc6ad0d3af456d28821ed420cc5fcfe9c1f850d8956beece03253
- SSDEEP 196608:ztegKSoG4SJF/6Whel69RJ3TCN4stlacZ8NRWDHQp2eRAFhMWK2mQp47kP+lf:ztegIG9Tu4EkcHQp2cWiWK2mQp4B1
- TLSH
  T1F1A68D85E68358E2EAA35170C98BE77B53346A1882F2DB73FB4816E5F8337D13905346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  Tsukihime/readtsukihi.me.lnk
- Size 2KB
- SHA256 60e786a3483ceb978aa9398dea23622837f60312421455cbc9e416e80c84e8fd
- MD5 f59d092ca16729d5293aaa0bade23a5d
- SHA1 969a16f70fc035eda7e01ee9733f27fa008605c7
- SHA512 4338e361f915e0bf43917af7b332ea35672c29a81d76c0cea89d50a6b5e644fac134bd865af526ef4056ea73b43e85e669017a0f1b87579779f6c7e89a9c31b5
- TLSH
  T19151EE127BFC1215F3F796B5BDB676A09F7BB8A6F6884A1D004052090CB2E005D54F77
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral7 behavioral8