General
- Target OTClientV8-Noobwar.zip
- Size 44.2MB
- Sample260707-phrxmahy2w
- SHA256 b253868511fcabd9cad355d29add563c4941c564e1a165b6c60c39a10d5be417
Malware Config
Targets
-
- Target d3dcompiler_47.dll
- Size 3.5MB
- SHA256 7d0d1290382ea0e44a3178446a0c202696237e27dbb5f8f0827691092b8f2228
Score3/10 -
- Target modules/client/client.lua
- Size 3KB
- SHA256 c2d8bdbb12bd2f4b5fe06d546651e2cb72d24645405e70891fe22eb0c5075c16
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target modules/client_entergame/characterlist.lua
- Size 11KB
- SHA256 2d50a85ce24e6224d4501f3c9ac7f4bf3901589d6f08ffaeb5aef473b97cda72
Score3/10 -
- Target modules/client_entergame/entergame.lua
- Size 18KB
- SHA256 b9258743c9cae4397407be13aeb3e9e8eaa0b1f55daa2e34022926420585ee03
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target modules/client_locales/locales.lua
- Size 4KB
- SHA256 300ada69c4f9fb9dc29af9e32cfa213360f354b11063a0016e409916e3faa058
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target modules/client_options/options.lua
- Size 13KB
- SHA256 00d8f3f8de0d4309b22e5ec685d01719b0f8c5f470fa549e068fa4c38f9aa513
Score1/10 -
- Target modules/client_terminal/terminal.lua
- Size 10KB
- SHA256 9a1af512ca1884bc4901af9944d23491305379837815e5aac34a645c17465dc0
Score3/10 -
- Target modules/client_textedit/textedit.lua
- Size 3KB
- SHA256 8814cedb7a74f6649d61863f29dc00ec3d93757ffe08b5e12020d66503b87df7
Score3/10 -
- Target modules/client_topmenu/topmenu.lua
- Size 7KB
- SHA256 756c763fb886707ae6154060240133145c5f207a20893dc09e2349f695d0f1e2
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target modules/corelib/base64.lua
- Size 5KB
- SHA256 e418d092b6323bdd628ca42bff54601e72b0d376a1102f4e0afe07f9e17e68d3
Score1/10 -
- Target modules/corelib/globals.lua
- Size 1KB
- SHA256 89b28a6db0db7f7387af669db9f8c205bb5848a11d1561528128315ea93be601
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target modules/corelib/http.lua
- Size 7KB
- SHA256 58bd10fb760eeacac23acd8bc4e73c9ba7d360c607ba733d5316b5216c2836d2
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target modules/corelib/json.lua
- Size 10KB
- SHA256 38c42e8400990dfed19ab52488305bec879c3e64dd4e79cc66ad42df37265dc0
Score1/10 -
- Target modules/corelib/keyboard.lua
- Size 7KB
- SHA256 98f75daf8111e874084f26372e2df00119410c54c1ef73e6f4fc4ef27547899d
Score1/10 -
- Target modules/corelib/mouse.lua
- Size 1KB
- SHA256 f01741146f02536ce932a06df4ea18f99c0b645aebf0225a6f7c4caac3e66e86
Score3/10 -
- Target modules/corelib/struct.lua
- Size 4KB
- SHA256 2c84ff80c35abd34f80eefa8c9e3a07af679bb080c4091121bf2ca3efa60d2e8
Score1/10 -
- Target modules/corelib/table.lua
- Size 5KB
- SHA256 abadc38747faa1e7668365587ca5d1080926db6f32a3241cc3d8522cc3bb400e
Score1/10