5410236d86e3f1296466ae18cd326a987bb3ff43bbd94d3fee26e57710fb6f7c

Sharing

Copy URL Twitter E-mail

General

Target
EA DLC Unlocker v2 155-0.zip
Size 245KB
Sample260708-ar6d2shv5l
SHA256 5410236d86e3f1296466ae18cd326a987bb3ff43bbd94d3fee26e57710fb6f7c
MD5 f4d43fbf319b4f3e90c183c57a113efa
SHA1 9559498f491097acbeffabb9258afcd48fb2ecb1
SHA512 7edf7e7d5b040663df35a0c704c3b577934530ec3ea9409bee6dad5ecf341763db72b194a141f1f6dd2a5fdd541b0d346fc3ce5066d995d5bf2efb0f1561c98b
SSDEEP 6144:5NjroqE/uEnemVcTE5aHk5gK+8TX25RqHgiImXA95r3ZZFo:joqE5em6TLk5gK+kaRlf5LS
TLSH
T170342334C7E59837DB278BBFC90A55C54859142017F0B8EFDD198DAC492E839EB1AC83
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  EA DLC Unlocker v2 155-0.zip
- Size 245KB
- SHA256 5410236d86e3f1296466ae18cd326a987bb3ff43bbd94d3fee26e57710fb6f7c
- MD5 f4d43fbf319b4f3e90c183c57a113efa
- SHA1 9559498f491097acbeffabb9258afcd48fb2ecb1
- SHA512 7edf7e7d5b040663df35a0c704c3b577934530ec3ea9409bee6dad5ecf341763db72b194a141f1f6dd2a5fdd541b0d346fc3ce5066d995d5bf2efb0f1561c98b
- SSDEEP 6144:5NjroqE/uEnemVcTE5aHk5gK+8TX25RqHgiImXA95r3ZZFo:joqE5em6TLk5gK+kaRlf5LS
- TLSH
  T170342334C7E59837DB278BBFC90A55C54859142017F0B8EFDD198DAC492E839EB1AC83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  EA DLC Unlocker v2/config.ini
- Size 1KB
- SHA256 a6a7afb5901a63fe5389728f5c5b1715be016b73209cc09b4a4cffb90148f0f7
- MD5 659b053da3fb5170e0834dc4f36ece61
- SHA1 d5e7c32ef9a4bc6ac956945a31ab5cd5d3c3ae5d
- SHA512 6acbe9dcb62f74ca2aa0599b912647bb53764c036bfb1360474a89ab92789820bcaa5f6385efc4e39c474a9e9bff505bce1158dccf737cc9be44993ee74aa768
- TLSH
  T11421210A001541B1213241B1684537FFFB005CA82B22FB387AA76C0E22AF50786B6DB9
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  EA DLC Unlocker v2/ea_app/version.dll
- Size 239KB
- SHA256 70553a2b4d53eddf1eeb290e346a9b562c71f52d46874bfb708e9d962469a736
- MD5 b69243228b677fdacac06ce9365a4571
- SHA1 95d0f75adc5cb2084ef022442b40a2d71f35dd5f
- SHA512 4ea0f326298917269a13c8f83564c5e54a32d9d91f903dc2577c10722c3a289bf5d8ad7c826a7280d05c88f4d25c63550ca90d2a7b8a50cae64bf96c7bf96b24
- SSDEEP 3072:MbBeHieiC4hRtKqgU8Md0aHN674LubHCZwtNtJHUSgUveq5tYDXDTsC1fxgKTu6b:meHieIhK6Yd71FJHUeNqa6wuHZWa
- TLSH
  T181343A4B72A408BAEC7B913999575E01F373B84A03B0D7DF03A0196A5F6B7E05D3A750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  EA DLC Unlocker v2/g_Cities Skylines.ini
- Size 3KB
- SHA256 ccb99a4a44eab034b26811d5e0902857667a73d113a246a67ccbf42517c3d65e
- MD5 b7f9bf30d6947aff647b416da0fd551f
- SHA1 012c632316d2141a1d38e76c3cc8e6f1cb3791fe
- SHA512 8817a1917c3b2f2bb17b0fbe21802098c67aabdd60fd2e11d8b7f33038c85677d5d6383a6327026f32f2f2c35d24da6972054f2de409f7d1a049daa009c49660
- TLSH
  T18F715A86852389C6BB84DD7D3BAA7CB2C8D1D016EEF56280664178E71E682CF21147F8
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  EA DLC Unlocker v2/g_Dead Space 2023.ini
- Size 251B
- SHA256 934211fe00d6151381796b7001d7aef5bc883daa9f1b1f68af60a7af93eb1835
- MD5 fc3f0c4d744a4310c775b2879399c468
- SHA1 71e7b406a5c5d07dd0dd714739a08c731f3c245a
- SHA512 92a0e721d3bdbe8c8bc46c118643be8d76dafed3610149cd57feb8ce589bbb7ceabdd70746d1e1fcfcd6c280110e2ae4ab7475c10966016a936903a12ff8580a
- TLSH
  T197D097E780A7C20EB4000907B0EFBC234743202385EAF42076483C901D3C9EE0788CCC
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  EA DLC Unlocker v2/g_Dead Space 3.ini
- Size 1KB
- SHA256 8996053e41ce56f0822a2a3e9449f3960ff1d395c6587acddb608ab306a3e6ee
- MD5 19f5deda4368c463d16687109abf543d
- SHA1 9b729af1301eaed240f39a52d5e507e84723d698
- SHA512 70a4718b5a37575f4ebfc7648a32fb6a3e458b984a55300b9a0140f664707e8f8c54a57a02df0bef0eea198336ab0cd2c8e96b0a67730edd38cbe52064178322
- TLSH
  T1A931BC447153DFC4E1CCA54F7AA93CD7D2C9B481A4FA4B25BB0372720CEA12F43A9919
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  EA DLC Unlocker v2/g_F1 22.ini
- Size 755B
- SHA256 8ee50a42af9c0c5c2a9d520173b262c983e6de716d5eb1c753687ff3170686db
- MD5 51fff0fdf96929ece2b1ca964d006550
- SHA1 4950af012a0709064211959991a700e4fe526630
- SHA512 b5a4e06d7fd2aa9e758e8d0c2b09e608b22ccbe6378591b69cee1413a6a1b996242d7f6d96f9a791ace3fe22421729b07efd5da41a8f792a6d44c6a9a86220a7
- TLSH
  T19701B1D46142CE8DE5848CBF90F7FC179139616BC4D69C85324126D35D7463A1164CCD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  EA DLC Unlocker v2/g_F1 23.ini
- Size 346B
- SHA256 cfbe14fc02f08a2b941db25de2379a5849ceda301e529514004948d0088945fa
- MD5 18416efa57d527355f065064172a821d
- SHA1 173ead24118a0c0d0440ec11123c5f4e452aa337
- SHA512 2cc6d884f9e1717af8b5adc07e07d25d3951df786e7fae4f00d96aac342d3a681852953b7b7af72abff0fa51d98464c4c41e13f2887a1fd18cd4077774c5f782
- TLSH
  T183E0D89A8212C209D444866888F2BC524802613B4A9A6AC0750556CEFEB845EA6A9C99
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15 behavioral16
- Target
  EA DLC Unlocker v2/g_Frostpunk.ini
- Size 502B
- SHA256 8a28296795fc669c047ed3afbeb82791c4c86d3160b5a6843a144d814ae578c2
- MD5 fb2516caacebcdb02e9f2194ba72de12
- SHA1 433cd4db6456c99c9b03dc8eb3152c691c225f50
- SHA512 1a15a6b45e14e78a4e85749d12e5248c7556f91f332c203c5fa55aedac9e3bd58b6d308633942a4aab4a8708e3df498b85ec4c64417e82629e0eae0836b6382a
- TLSH
  T175F059D2B85E8644F1DF4A8AA0E7FC054742212BCADB50D0A60196A22AA8DAE26540ED
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  EA DLC Unlocker v2/g_GRID Legends.ini
- Size 1KB
- SHA256 1d958849692862c419812dbf80570edb694f7c7e1c4758b6fa897be09c705b08
- MD5 c2dc8a3df7745fc6bafb633d4ea33fb5
- SHA1 90e5361c9f4edbbe9ee75258183a71f53396acbb
- SHA512 d6572977d2162e0307b389a9b8018ed33c92e89e53bb6e331ff782cdc720c72ecfbb6bf1c1d6ff2dd6df5c29e742fadc78424ec3cbd11c83791238b26515e94e
- TLSH
  T179213A8565C6C795F0DCC94ECCE6BFD79146711288C690D93B53A3812E66C4F2227E9C
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  EA DLC Unlocker v2/g_It Takes Two.ini
- Size 70B
- SHA256 3435be593ee7214a75789417b0b6e90fb7939b26dc43a8cca197620e72ec48af
- MD5 31561acf01f495280b2e03ec26b7812f
- SHA1 0ff9ca665efd6e30f19dfb05bd1d00fc552027d9
- SHA512 9f5028cb2823d219fd93f7981e14e8c9cd8c64ab5a550f07111cf08de8922c84679c431e73c49f8410c1a913b6005e92a311cb50256d67cc2b3f05720806af70
- TLSH
  T150A022CBC23EC80FF8800000B08082002F8B00A200002832E80FBAAC3C0C0C2CC2A0B0
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral21 behavioral22
- Target
  EA DLC Unlocker v2/g_Mutant Year Zero.ini
- Size 183B
- SHA256 20340c025af9a426c6d25a74910fa63cad2318a87495ff131ca26999313bad82
- MD5 d2df62135af50232e599c5be5f1105b3
- SHA1 b2492700fc88476b23b8008c1bb4ef452f05b7c7
- SHA512 9246cc5dd6fdbe2dfafdb15a834f0e262c997299c8f9578586ca372cce37d47fe220c4dc5021789e543ebdc4949e0a8ca62d05c8b6d475d7a4a5cc46ffbe193a
- TLSH
  T15DC0224A401B404EE86418A9C0837A21391381BA40C8C820A60964B924FC8CA8A668A8
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24
- Target
  EA DLC Unlocker v2/g_My Time at Portia.ini
- Size 333B
- SHA256 d7812cd7633cbc13521c9d7a862541eb13a93a8f42d1e56137d4be8d7225f90a
- MD5 ede7b7058e8c95575ef5517d36784fe2
- SHA1 9556c3422391a728b93830031f615dc5d7809af2
- SHA512 9a131019e0a1d575afc5af6d7afc8e8a017e7c11253ab3ae4186c5fe2fc65f4d9386bfd2f60367de191e77335801bdb1ea88131668862daa0300949fed529169
- TLSH
  T1EEE020CA958E45C6A0C54D0EF0F1BC13501731138CD654D0F506D1F719788CF5965DDE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  EA DLC Unlocker v2/g_Need For Speed Heat.ini
- Size 750B
- SHA256 fda16758bdf3aa61baa0b598bd419f1dae695787d8f8dd9da8fea4629bf041d2
- MD5 c11c8268aa87fd021f691d4ae9529ccb
- SHA1 c6e713906693b39a24785cad1a6a98490f6bfda3
- SHA512 1483c699e819ae414de6295b64745bf995b289d9e52b95e021b7fa0e314759f6bc128a6aafd1521c52ee434606bd9ad7a2d360d15c9c27bd27f2da152c0dea74
- TLSH
  T18C016DC84177A2C9E8444ABE84F5FC035555502741DDE980B20166E72FF4C7AA24CDFF
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  EA DLC Unlocker v2/g_Need For Speed Most Wanted.ini
- Size 1KB
- SHA256 070ac609263921f4c91061f8c8ddd78a3305038ec3f13f4fe265ae715f2c0b89
- MD5 53020d0ff8e79ee8305061d5d3964927
- SHA1 402a80809661b99fa4826777f785bf75ad154a1f
- SHA512 62f95e172dcac670bb6210cbbb59e525556041a74f71a2633b6d9d10e56fe21fcfc84700eb8c83d5c046245801f1b1a66c623cdcb4ab05166cdf7de9bdda88c4
- TLSH
  T137213ACBF6C39785B1C8209F9D9A38E7F3165A1284D502D27B0367A61EE855F0229E24
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  EA DLC Unlocker v2/g_Need For Speed Payback.ini
- Size 1KB
- SHA256 c58e8c92876a1656d417fda84f43093c0bd4c52dde42cd9addcd001e9a38879e
- MD5 c49b925d0158a9c34e976d436c8ac2a0
- SHA1 b4402cab3c3ad47686333058ed720d64c4982f27
- SHA512 fc37ca358fc85118c56b73a2c95f1353a31200f3330274432b476e2b19624d1e63a0060f4bea9f8a0af903dd0c24f5070eea7cebcc49cc12470bff0df0ceeb7a
- TLSH
  T1A1319C8C95DBD5CEA2D8C56F84F3BD17802D613784D970C0B54226A51EF449BA2CDCEA
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32