d547300ffddc29bdf9843b88cc9d15d6b9a221c26211c8416a72363df1a856c8

Sharing

Copy URL Twitter E-mail

General

Target
Tradução para Grand Theft Auto IV The Complete Edition (PT-BR).rar
Size 14.5MB
Sample260708-rfyy9shv2q
SHA256 d547300ffddc29bdf9843b88cc9d15d6b9a221c26211c8416a72363df1a856c8
MD5 b5a6d42f7c3159903bcef007b75cc69c
SHA1 995aa0ef657b9f886ab31f9c371c860338dfbe51
SHA512 b6a84fdbcda65e24036a7e0fd3f5791d389d128a867c0f02abd9a1c1e242d5f0e0fb7cfa77e8920d0105e01a89066c2f86ce76b6d71376e320a5b287dcbbd2f0
SSDEEP 393216:ZDzu1SDbACM7RzdEoX5SINUFrHRQL5FbmIwakOJ:RkyM7RzGoJNeECI5T
TLSH
T192E6334412F11A872E01DF1B9F73562E7AB2994149008C927D5887EBDAC33D92FAF727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Tradução para Grand Theft Auto IV The Complete Edition (PT-BR).rar
- Size 14.5MB
- SHA256 d547300ffddc29bdf9843b88cc9d15d6b9a221c26211c8416a72363df1a856c8
- MD5 b5a6d42f7c3159903bcef007b75cc69c
- SHA1 995aa0ef657b9f886ab31f9c371c860338dfbe51
- SHA512 b6a84fdbcda65e24036a7e0fd3f5791d389d128a867c0f02abd9a1c1e242d5f0e0fb7cfa77e8920d0105e01a89066c2f86ce76b6d71376e320a5b287dcbbd2f0
- SSDEEP 393216:ZDzu1SDbACM7RzdEoX5SINUFrHRQL5FbmIwakOJ:RkyM7RzGoJNeECI5T
- TLSH
  T192E6334412F11A872E01DF1B9F73562E7AB2994149008C927D5887EBDAC33D92FAF727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  Tradução para Grand Theft Auto IV The Complete Edition (PT-BR)/Backup/TBoGT/common/text/american.gxt
- Size 1.7MB
- SHA256 c2ac29c1d0bfc623a60cd5e4eed17de7c73ed3fc6003e2c1680e7a6bce8e1994
- MD5 9e83dd89e4b74e82841976a5618bc7f2
- SHA1 aa25f6fa297973e907fa2294a4e5a109561f6370
- SHA512 73c0aba0df492b54241fef240b7fa951935af7689996b02933533edd68420b25faffd2218decbec26ff5bf4f2e6353733d252b81de32474a9de56f60ee731a04
- SSDEEP 12288:gSWHX6j6zwQhBM90aEX3BAxjipVH/WTy+B23WmW5FSrth3jDsGZeFHTAuf8r8OL:Q97MO1XKm/
- TLSH
  T1FB85242463FA52CAF2F7BFA11EF596620A76BC92ED39C25C01405A4D5F25E80D970B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  Tradução para Grand Theft Auto IV The Complete Edition (PT-BR)/Backup/TBoGT/pc/textures/fonts.wtd
- Size 117KB
- SHA256 eb92c8dafc2f38c1322de8b6c096e7d63fcd791b1584415e2202e820096743f3
- MD5 6701e91a4933291459919176dca6ca74
- SHA1 38ea2ae9877e06987154eab34ad1125c51cb8bea
- SHA512 e65f9fe40f31c8633b9f8217b8aa0fb78d30508e62cd586aa335c5f1b6a4d6cf900e75ee9ad13da2b49eabba511d2404ee1cdb8671cad53285e4a7fcb67f1d4e
- SSDEEP 3072:2vCVa0zCushP0HsrcN16hGJJn0wrt2Rp+SRsxWoBS0j:26gnush8IczowrgRpts9BS0j
- TLSH
  T179C301EA2CEA5746F8DE76B2978329574B4A753538A3680CF011C374F0937AAF512077
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  Tradução para Grand Theft Auto IV The Complete Edition (PT-BR)/Backup/TBoGT/pc/textures/fonts_streamed_1.wtd
- Size 55KB
- SHA256 82e635726c46e3a23ab77ea653eb8c64b421d6aa4113c85e55aa229e597fe719
- MD5 cc851874990749b5f0fde74c553e0ad1
- SHA1 f2c11f64c5b28ec19014254d5f419b1f464b9c91
- SHA512 ecc05480d4a1c20432a1059b03d10c865a896bae8de169c6273c25595226adc1b7d3c0733f22953e6782418a7929d6a09721b413f6b07c6fefd78b94ceebd482
- SSDEEP 768:aSI3Pw++CGe+OCPBN3p+52c0wNTpAeEoZFHRPHsHQO0kbZxxFKPG0aJFapH81cRy:aVw++y2HcztZ1R8/tJv0capc1cUP
- TLSH
  T1D143DFECBE7F252CF1CE72B4D9E76F0810D86AD838C75544E097E762D22473A258213A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  Tradução para Grand Theft Auto IV The Complete Edition (PT-BR)/Backup/TLAD/common/text/american.gxt
- Size 1.4MB
- SHA256 3764f312fc3810ea18dd1a16acf9091443b4afb0d0bcbc0096aafbfed806fbec
- MD5 debf0c1cf2816cf2444c9e0a2ff72cde
- SHA1 f6f699fc07f0535a35c74abb97da9aa585f1955e
- SHA512 af0f4ff122ebfd2d13cb9d09d9c2996e8d4340a2e91b620e82eb13eb12d0c61061b918169705fb978cf810037f47eed94eb53b4958e17cbb72f1510b289d5051
- SSDEEP 12288:GJu7+eSr+mCez69mAYrpmMhgzsAGxtoT+iHLj:gBnzGFao
- TLSH
  T18A65F32063FA52CAF6F77FA21EF592660E76FDD6ED39C25C01005A0D5A35E808960B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  Tradução para Grand Theft Auto IV The Complete Edition (PT-BR)/Backup/TLAD/pc/textures/fonts.wtd
- Size 309KB
- SHA256 19eeef68c17498b1033c0206bba53b4cdf1bcf068c34fe946396d8782332ea25
- MD5 4f09d1da28b3b020c9d3aa8b535f9dac
- SHA1 51d3550cf64ee6cd5533a182bdf23ce96d0bc815
- SHA512 4aeca87c74480794bb0566e22ac28c132fce4a97a3465c55fd52d0b23216cfc7724b3cb272af60c09b93563c5ec9bc3636a38b3f1822ffd2ffd0bbe81ddb4527
- SSDEEP 6144:lFVXOJsVQ55h5mneM3HvG0GVaFMdAqU/hxOBug0UX2sMqFKTqCkySKq/1:lBgzTCH+0GcIK32umAqFK2CjSv
- TLSH
  T1EB6423A75ECE858C24DC342416A7DF62332251597CEFB69CB12828E5E4E0F48CDD68F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  Tradução para Grand Theft Auto IV The Complete Edition (PT-BR)/Backup/common/text/american.gxt
- Size 5.0MB
- SHA256 a08f7271ec89e656734c32a1396a1b3dd0a570806bff8e9358a977619a83422c
- MD5 648f53d37eec19dac87c002e4a2cb7f2
- SHA1 d66f109532d72bb02be81946af45145bbe71a2b5
- SHA512 a4483a62e77dd79151bb1a8e79b0207cff8c3d92113b3b637a241cc455e862e755e654a46068661ee81d70affbfd4096cbdacd61160db21db5732dd39e95a8e2
- SSDEEP 12288:JD/QLWi/cZZr1wI3TyzTccKicrc/cVcscHc9c/c5cuc5cJcXc5cKfRPrmaWC7OLu:N/QLW/KMGRj70NcMGPKdF+ZmQt5c
- TLSH
  T18336DD2163FA128AF6F77FA16EF552650E76BCA6ED79C25C0200560E5E71E80C970B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  Tradução para Grand Theft Auto IV The Complete Edition (PT-BR)/Backup/pc/textures/fonts.wtd
- Size 98KB
- SHA256 e62bddba5af89072ba55b1a94754d859044465890015fd4e2bc6bbaff860cbfd
- MD5 3a51b35dc530837a894dac47b3bcdc2c
- SHA1 408b46984223070a93c3e82cfa6610e1cbad5dcf
- SHA512 644812de780a29087c34c7c41b75157fb4dc1ee75ed144cc30d86000d73a459d6d47ea52c47dd51979ad2fb798fad0d28b8ab8843352758b4ba32a6437441270
- SSDEEP 3072:ltmBlL+3Da+jAOxCl7ag7TpGa2XHNRM7FlbnhnnbfMl:lEBlxvOeWeMDYFpnNbc
- TLSH
  T1AAA3F1172FEE6F01D8CDB73E20F36E5B66139835B3F32A4C7126D0E26E548934985266
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15 behavioral16
- Target
  Tradução para Grand Theft Auto IV The Complete Edition (PT-BR)/Backup/pc/textures/fonts_streamed_1.wtd
- Size 55KB
- SHA256 6434f32360cae5ba646938157cb9f4eb56303d335b0bf2c658fdbe0d09f6caf3
- MD5 768f40eba0eb94947ea1eaddf4f855c5
- SHA1 dad9ad1b77ada025b06cd441d23fb984200020c5
- SHA512 b66c43bb7f230ed0d3c16393510ba1854ed381455a231fd64ed89e3eb0b2f83ca7d3dff9e6b55f5b4a14d3ae572f0f3fde13d16a3ff348d590ea5d6ae4aab35d
- SSDEEP 1536:gKGpXjUlEJF1C60eM5nD8BmxwwrARx/M6jBDHSFyEo02:gKoXjUmJF1C60eM5D8BmxlATf9+Fi3
- TLSH
  T15A43F18DBC7C009EF7DC3271D1A77B284AE4B16038EB81969727D3736960763B816463
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral17 behavioral18
- Target
  Tradução para Grand Theft Auto IV The Complete Edition (PT-BR)/Backup/pc/textures/loadingscreens.wtd
- Size 9.6MB
- SHA256 73df6b988c6a8380138b6f4131d82b748f6e19159107d64ec851e4f4c0e9872b
- MD5 421fa91e0dd1e692142c952c8fabb97f
- SHA1 f9f47acac5327ae5c38b772b3c857fad2f4f2e93
- SHA512 890de8231eb334856d6f6d0f35fe844b23ddb4e5a2eb03287f525e14a018e752f282ba772d4f514fdbed20ee1f7c2cc0e23f61704a60de77f0bacf480cbc1a2c
- SSDEEP 196608:mLMHWQQePaG23R7dc3HGyfPgGi2Q/rqLD3tchoFkXVdgwdNqvlIaK8b5QJOV36Dx:mLE9nPaG2J+3mvVt/ct8oF4dgwdsWcb4
- TLSH
  T161A63306C3778E42DDDE62732E0B65F07D80120FBABD5668CE3E127F47FA69481A9506
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19 behavioral20
- Target
  Tradução para Grand Theft Auto IV The Complete Edition (PT-BR)/Grand Theft Auto IV - Tradução/TBoGT/common/text/american.gxt
- Size 1.9MB
- SHA256 e0bdf14e19588eddaa11668867f1f7c3242cffa72f1860a3ae0ee8c2b2110e36
- MD5 454e591c1136c826de2e91bb6cb34cc5
- SHA1 f897dd83d1f36b69a2192a7aedd8ff1709846c63
- SHA512 682204aaf1ca99079cba3cfc760a9a70628fbc57203f3e29d20e551c076fb2e15519409964dbcd83ddca4884e81ebaa52745f7abbd16aefebd657ae69c527580
- SSDEEP 12288:RNmFMG/N/HBqyADnewF7yM7hwxovIvOCaeque1q0sFW7vmo5npqmAAttzP0JogG5:aADewhyM7hwxvqu
- TLSH
  T16795FE24A3FE5295F6F7BF625AF5A6124E7BBE93ED39811C01101A4A0E70E40D974B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  Tradução para Grand Theft Auto IV The Complete Edition (PT-BR)/Grand Theft Auto IV - Tradução/TBoGT/pc/textures/fonts.wtd
- Size 117KB
- SHA256 a04e7186e54804a1bf3ad0d59e3610a5af8193c8488120bc47695a4cb11d18c5
- MD5 f1d03500d6fc50062ec66a3ba45f8f15
- SHA1 f53af27718c517755b275205d35c53f0fb0629e0
- SHA512 817490bbcabb2cded571b6609f01b4b94c9b11938cd9344cac9342acb8e412ba82542a50a399fbe9e8502c32367a49ee87bf0a15fe01500ef2d90ff2aae3c57c
- SSDEEP 3072:sLOEIKWc6hJStbNJq0+PDz07WBStb8c86vwbGUTqhe0/UGtrL/Qm:sLOErG6bt+PaWw816vsNTex5z
- TLSH
  T172C3029115F55FE8C6C6B6F481E73D0352E6E2A972B72C0CF036E3BB9954620C793A05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24
- Target
  Tradução para Grand Theft Auto IV The Complete Edition (PT-BR)/Grand Theft Auto IV - Tradução/TBoGT/pc/textures/fonts_streamed_1.wtd
- Size 54KB
- SHA256 282504e75367b67c13276a41c608fbc24cd0c3fc76a081a9296d605334d3a82a
- MD5 04432e4f7423c6189f1471cbe80c9287
- SHA1 9bb0084fc9614fe6a34a12da05395e5eb5477aba
- SHA512 825c4a88027e2a692e21c5d65249b3f02ae53c425505b9eb7a9112781f3d9b4daaec6e6c683dbcb8f7e7e4d8a5dc85bea828df31c761eb90b84ba2206a488ed7
- SSDEEP 768:GlAy/CseIGXlkWF/8yo/SQL+Egy2yy3vUCrB++oC6wsiQfyTG1bheFgVma6Dyq45:GWvqGXlHCER3vUCrB+2qiQf91ugVRZ/z
- TLSH
  T1EA43F1999860366C21CE7CB8202B1FCE46A16D9E71E30DCFF943E66935612B4F1749F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  Tradução para Grand Theft Auto IV The Complete Edition (PT-BR)/Grand Theft Auto IV - Tradução/TLAD/common/text/american.gxt
- Size 1.5MB
- SHA256 1ac94ed43165f8baec915f22b1ebc0313f212fd3dcabf8c7056adda7c00c0747
- MD5 d488cf1de2d0cc20d998815260acbca9
- SHA1 59c5ef6e2bb3521514bcc7a3acd1067a93e811ed
- SHA512 4f2a70ba86d819f08a3170cbe9256bb763758dc015dc615e972e76a2ed32e94eb6b6b7f76168841a8f43c40454ac95aea765db56cee001d29a8f08b26125f490
- SSDEEP 12288:yviu036dnUstRrD7Wk90H+lDtUXABl9URtJl:ArD7W80z
- TLSH
  T1C465ED60A3FE1295F6F7BF625AF5A1224E7BBE92ED39821C0110164A4E71E40DD74B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral27 behavioral28
- Target
  Tradução para Grand Theft Auto IV The Complete Edition (PT-BR)/Grand Theft Auto IV - Tradução/TLAD/pc/textures/fonts.wtd
- Size 309KB
- SHA256 7c702c0df15042f780419032b500acb3b8143e55dc4b6c094c412029a3e9c2e7
- MD5 be745947c87d5cd54af9e3d03cdbd43a
- SHA1 96399e0a2911c822b843e9f23f3e6aa36881cb60
- SHA512 4f925a3dd5035fe2251c8f82d1ceb25ec9c673481498ea7ada71d0eaa6ce7782a8972c1457389c7d94c0b62ab763b2b1d1758cfc73ef67e4a2eec83d92e05f1d
- SSDEEP 6144:hQ3wzAHuo0iCXfgxnwJFoFxF4wavMXuGqfUdb0QhIK3FtsQ7ro:ygAOvi7j4wgpPUdb0QhIQsWro
- TLSH
  T16E6423E1A96EC4A9F2F6A11BC8275E19C1FCE592F1D6108FC591C3B0C2727125868DEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  Tradução para Grand Theft Auto IV The Complete Edition (PT-BR)/Grand Theft Auto IV - Tradução/common/text/american.gxt
- Size 5.3MB
- SHA256 6c3e99871ca400ee55f4dca188c7ba084a46d05b727683d0f0af34dc6e405dbf
- MD5 a21fb843830a93e606b813770c703f2f
- SHA1 176ed2eb2ce2e8523b1b1935e475e361132bbae8
- SHA512 3ffa96db07e6944a415fa3ed68e83f4bb00f2d3fb928469d59a76a190493dbfd90de74f7d1ef337f4117e56d9f5883bb30f9506c8f73832aa2edc798b56ef86d
- SSDEEP 24576:xlYfjBhdoOQGMNAHdOKwiFuoARFpS+bC1GT:xKC75
- TLSH
  T1AB46CD60A3FE1295F6F7BFA29AB552664E37BD92ED3EC21D0110164A4E70E40CD74B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32