c549512bbbc8991b219061f76b02890d8c9b2cc9b46d3beafac432a09913d8e1

Sharing

Copy URL Twitter E-mail

General

Target
Zin_Episode01.zip
Size 224.5MB
Sample260708-vpm5xaet5v
SHA256 c549512bbbc8991b219061f76b02890d8c9b2cc9b46d3beafac432a09913d8e1
MD5 efb689959124c5b614f7f66a17299844
SHA1 4712fd5e9da4c88953002e947b4608365accc64d
SHA512 114d7327a147a2ee3eefd7a1d55f067fdab70060d6b05b8d5d4f60b1813d40be787b69b0c09e0286a4c76c03dd9673d8527d8f1a7e9d07c85bb8f1aa28311ca1
SSDEEP 6291456:VltItMSnGyVkHQTT0qstwTlMlJrZH9PGwuL9Y:VotgQTg+UJWO
TLSH
T155B833B9D0EFFCEBF416B475629F810A574C9E6B13F343039E2A74419A782A2641970F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  Zin_Episode01/js/plugins/NRP_MessageSpeed.js
- Size 18KB
- SHA256 4c9583a12b6a7672f103f350e671344028fc2ec6ab08a23a28c6e13cbd827a3b
- MD5 11209265522f454b5d16fc14fbd437c3
- SHA1 da58243805ab1beba90e7b26e0c7729ea5f5c2f8
- SHA512 f1b4f4a4b4ddb47daa54c2931c4772c2b1d7c39d2992dfabd164aa1692daedba5a2d40546ec3612bed9be61041ce2388d1ae247ef8fe918b62d3dfc26777bb09
- SSDEEP 384:43fEv9/DP7d5v9/DPw7bgcJ5Nm1bGEGFgbf8+Q91a5mo7x:4cv9/DPrv9/DPS7m1bGEugbf8+Qba5mC
- TLSH
  T16982414C2E95261940B2E17771867414EE650A56E84232FAF8DED0FD2F762E4C28DFB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1
- Target
  Zin_Episode01/js/plugins/NRP_MessageWindow.js
- Size 38KB
- SHA256 3ac35eae6d4109c97ce34a56ec6b7ae4b69bd53156a2628c8f0bad4a2b661760
- MD5 bdd485e1260cec2e0f247f216f9a898e
- SHA1 4d5bda81ae46c9dd39720a436b71fec37f64c321
- SHA512 0b6b8e75862b71e836e1f347ea6320447822fab43c806b9c4c3ba1e80d74493085efd45a5a0e4a577e2ff61ee1dc416f6a3e8dca9f823e15701914bf8f866363
- SSDEEP 384:ApCh3ORhYU43u4aYWLVhw8dIN3fGcoqNT0FMP9Mt1mYezzU0M/iW2V25rryu:ApNCDyxYvtosqfe/U0M/V2VM
- TLSH
  T1D503FF2C5FB510214130E2727B9A7281E6611E2BF9137296B89C90B57F723CAC66CFF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  Zin_Episode01/js/plugins/NRP_ShadowAndLevitate.js
- Size 45KB
- SHA256 62acd03af70fae7a6c767946e3ff95c2ea11443815590e491e7d9c74823bc86d
- MD5 0bfc69045bb80c01fad6dd5658c62f02
- SHA1 0ad26c30c28772b05d171d457d5f1e5cea784498
- SHA512 aa93382bac2c26f2d8dd8730b8d783945bf997aab3cdf83ece10082fb3a2344995a13da948a61b412c1d394ecef28ae687d3fde52bb01e3183732faad364fb74
- SSDEEP 768:TGU6yv42Fpyv1tbyJGTxuJEQi0Ib05qUyTjuBkDaNC1F+xhspx6K4Oi0tQI9l4yk:qU6yv42Fpy9tbyJGTxuJER0Ib0UTjuBP
- TLSH
  T19523667E1E6620251D71E37F9A8A9002F6661667E903A1C8709EE0603F7129CD7DCFF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  Zin_Episode01/js/plugins/NUUN_StateIconSideBySide.js
- Size 20KB
- SHA256 801a888500d5c9c16e077af0d47c93d4ef2a8379f2c1c6a06928462ccdfa1e36
- MD5 db7031598e3e27b8f5db9eec1cad9e8b
- SHA1 d59a2ad86041de77e4ff4c0fa1c1920c6ab5b29d
- SHA512 4805af47b60e20b8b3568a86ff8795ea55d7171896b5d4d83228144c606dccfa4a2ba96cd9b357471da994b788bce965ca35f561059bc6979e365018980b3b03
- SSDEEP 384:ja4FwWKjJTW5Gjh3a4sCjtlEkNijEEPw5n63kGVy/6LS1l3cILSKVNKWkyVB3kaP:ja4+a4NEkjEPrVbEl3cUlVNN7VMYmgo+
- TLSH
  T15692FFA92E78E124CA70E3719ADD950DFB34152BFD43698C384C80A61FB149DC2ADF6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  Zin_Episode01/js/plugins/NUUN_StateTurnCount.js
- Size 5KB
- SHA256 0b9b98886e74053bb1dacc6c8485cf4e38e92f9c12f26d1b1dd46d7e35929b7e
- MD5 35bfc372634ae31cd76ebca987ae2d6c
- SHA1 f7d908e8bf37dee7ebd4d6966a11919321b50422
- SHA512 b2d5c5c5e78c6a9281133a9b3fc60629784cd37054e1a5e1b381bd01b942f76e1a86115d95724e469b4d109d252e96b0f171cfac598ad882eb7d973c67c16e63
- SSDEEP 96:eO70sidti0f2ZcH63IMqKqfihTJE4hkACRFbZYv2K38Kl37QZrqW5Dm/:18ffH63IMR6mlE4hkAmFi2G8AkZrqW5c
- TLSH
  T1ADC1380CEE64B005FAB3E2D9286A4F7AEE95015E7C0B420A748C85D52FFD424C59DE7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  Zin_Episode01/js/plugins/PauseSignToTextEnd.js
- Size 4KB
- SHA256 2ad8b7328fa69cece1f7cf4ac4eee97d13cbcf643357975fccf13951acdc1f88
- MD5 93852f97be630f906309596b4c43beaa
- SHA1 6cd95ffb79681b5016ecf08233c16e9974769362
- SHA512 929b7714e7c00d832be27ba47ca8fbf1d5d54959f149d5f6b95b8be67d7a6bea7ed098bd5a259e4ada51fc8a49e1350ce7bec6004a46f8c2ed2cd62ca1fdabb4
- SSDEEP 96:4IaqNGkQ1NCFtsn4SDSn6mfQ6+KrcoYtCAJTx7bwFc3:kqIdKQDhmDNY0AJTxQFc3
- TLSH
  T17FA14F1E5EA990184420D0A0198B7291FB814E1FF8467417B83DC094FF757D9965CF7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  Zin_Episode01/js/plugins/PluginCommonBase.js
- Size 19KB
- SHA256 2a0e307ddeaa640bbe7abe4eda12b13bb8e4dbfa31ef602ddb502e8d3a61b80f
- MD5 dad9fc1abe0c6eae8769240bd63bb192
- SHA1 724b34546161d86633439fb7609b6318d4db6ac2
- SHA512 9bc1f9c7466070f5cd6a0b1c0ac24ce48b438110f028b61214d5dd3fa07c596d077a6502a410938de90924874d61823e5fa7731a282bd6a640a9f9dcdd8081e1
- SSDEEP 192:ivGdgwZzDy5kxmeAhmYhaAytY5uXPX+9L40cH8maAGchODRLrbL6W9NHrO6/p0p/:i+FZC5kSjytY91sULraYj6kdHtc2vB+
- TLSH
  T1AC92760E2AD65112C172333A266BF0A5F73D0AB7B454E251756CD8643F32B64C2A1FF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  Zin_Episode01/js/plugins/RED_ElementsFix.js
- Size 3KB
- SHA256 68ea68a3bed67ff3687d5dba2752d0d4c33fb01a67f8aa0a602dcd02682959e6
- MD5 6dac25b3910194e244cde621e04a8d9f
- SHA1 4f00dd0a9eddcff351d11448f2859f7588a17427
- SHA512 455195a0f50640c0f9dc766998b09fc65f4212340b7bbdcba59b35048ba45cc025599d7176f6595db513d5d43bc03802e2051916fa11415dbde558be73c73f03
- TLSH
  T1FE619EE9B6EB511A53A3324E247AC40DE13D4429D50F629E788CC0EC78AFB5447B9E64
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral8
- Target
  Zin_Episode01/js/plugins/RegionBase.js
- Size 16KB
- SHA256 833e46e49b9e2a5d76a2ba17e85eb888ae467d0244c40ea128acbf3f1d26cdec
- MD5 75d40e0a2fa3e72974f4217e69d3d2f6
- SHA1 12478e951fd240eac9d482197f795aad9407d1c7
- SHA512 0187e848be4f5c5377d87ab289defb1e22542e87a85156938395b6af3d407e64b7221873a5da026a8a35bfe8471904bd556d349e3d0776a61d534f7c4df4a226
- SSDEEP 192:RKgVKZtSWn+mJo8X8hRGSClJniDyX2Vzkk7t3EyfoLrooYNE5/N/:RKaJW+Eo8XYrClNGyX2eotwLzww/N/
- TLSH
  T10672542D3AADE151C0B132BC12CAF484F6742B2B6403615DB96CDAB43F36398D656E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  Zin_Episode01/js/plugins/SaveFileDrawFace.js
- Size 6KB
- SHA256 e5ef291be3ea32bd04467a6898b3462ec14ced7a0dfb122dc8aea7274e36a0b7
- MD5 864d300b4efa2463d87d9be39f2e0b21
- SHA1 757db23221e7d9f21074971d29529b1ec50f2613
- SHA512 997f21f17a21e925e953fae136a8488d0d5e1147051dece297577ad1cad6ff29d9c7556900063481f4a926c32d16d80674e81cb1dca789e311f116f7b685bc8c
- SSDEEP 192:jI/G6WutqmQ23psXbaFeZPTsdYeYOg+Gf3uPr:jSG6Wutqm/yXbaFeZSYeYOgtf3uj
- TLSH
  T14BE13F1EAFB960118020E1F505CBAE84F3168D6FFD03A44A3A9DD1647F41798E29DF3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  Zin_Episode01/js/plugins/SkipControlCharacter.js
- Size 2KB
- SHA256 6ef4a9805b9ec765a3ec1123cce5ec3dc442e169f0e26374f1a14879c83d0fb6
- MD5 a4dd3fa6ce1db84080432d7e443d778f
- SHA1 b35b1ccbaaf32569e47495bcedd27d16751cb344
- SHA512 0d1f482898228ece96f1fe6485ac1439cb2c413da81e28a652eee2e5d3311aa608ba5831392fd2d0d50585e69b51a61036a2346cb350771b37a7a7f53ba17c77
- TLSH
  T1E641E02875FF05AED2F230983027FE83F8D85919F11A2135A49CE552BD7A1CA8606BF4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11
- Target
  Zin_Episode01/js/plugins/TextPicture.js
- Size 3KB
- SHA256 4ec28b5df38b26c358b0b0b618f13800f2ed232c5a44daf7afaeeecd2ae33908
- MD5 126682ee75b34b3e37b6ecf1fea81fb6
- SHA1 45a626fae2fcf1cf8ecb4c59133e4cf894aae3ce
- SHA512 f0d808c24f029d11ff73b5c18bad49421c121bfeb5fe06010fc7cb317759036c00e27cab5739246fe94c2afd22285eb5ede3355e31aae52f1b3cb40c6d9991e0
- TLSH
  T12181CE0D5AEFD110D16290B8369B7E81F260498FE912C58E399CC5506F7676DC2F2EBC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral12
- Target
  Zin_Episode01/js/plugins/TorigoyaMZ_EnemyHpBar.js
- Size 15KB
- SHA256 719b04a4e0929bbbea910e3d0e33bce4921a2b690157346426260fcd4a5c77c6
- MD5 4c393344b62c39e79f9d8dc864e0828c
- SHA1 58787c49519040919f18fabdea830a0f002fe3d8
- SHA512 add6c6208a233bfb52ed84dc90b12b94ac0f0e71af842dd80012a61f0786b863a0beb2bd51b294b0c4c7deb9539ae9123c7aa17f222c9233424d73f44ac6f095
- SSDEEP 192:Z1sr20VEcsPecJFGLJgZy+j/VrqGb71oBH4s/jvF1t53mSvK+hrdYOIQPCndz:Z1sCYLJ+y+hTcYQebz
- TLSH
  T17F72545C2FE764798102F1A95ADF9452E12A4957F04FBD48398C82E05F864BCEA3DF38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  Zin_Episode01/js/plugins/TorigoyaMZ_SameEquipType.js
- Size 2KB
- SHA256 031d735480e081c910f14f8eef372efa3f26a16fbbdc341b2b664d3a727edf90
- MD5 d8114a25daa2898c7511710438665574
- SHA1 2ecd602cee41184869ef7eecc0ffda1e1f3b8640
- SHA512 ddbc55ad640038e54e4c7497e76e9bbeb8319cb0b90b8bc168bbf89ef7929f257fd71bcc28a5563e5c2d559f5d92b5452d759d0e3a2e5cdafb46e1cc5d5f6fdc
- TLSH
  T1255124ED2FE6A0B14221E0A60A8B719EE364CC13F505B724B16DC2340F3A61CE51DF78
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral14
- Target
  Zin_Episode01/js/plugins/Transition200X.js
- Size 86KB
- SHA256 470dae860fe440e2582683ed033ff937b3546aebbe3e8274a800483f1326fbb7
- MD5 8beb8d0f29e406894ffc3f86bfab7912
- SHA1 d6540d6036d06ddcdb6e01dd446b7dffe0e06f56
- SHA512 ed7e09678a73d6db76e00d6f3bfdc2971f36e03a9a154a099bb80fad30df944f541dde19e1ab20099e8f948d619a447fa67ab53a47fbf3bdfdd66433a74a347c
- SSDEEP 1536:dDGf6KpA8VBqVKIQ4B9/fp5dLjE3soQU/gJrMAXTC:M6jVKIQ4B9/fp5Njah
- TLSH
  T1BC832B5D7F6D270942B2E35250B92008F93DCA69AA0295BD749DF4EB209A01CCF1FFB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  Zin_Episode01/js/plugins/VE_Single_Actor_MZ.js
- Size 14KB
- SHA256 5ba9882037bee42c81ff878255725d6554ed53188e16a7f802d375bb5c15d16b
- MD5 ce71d20b6d0baab4e039bc83109677ec
- SHA1 6ce7db9a2b8e33deab47395e5af042b4e1987183
- SHA512 42b16e51081fecffad40a878560f392cb5e9a8eb0ae65ddd07f1335e2debd6124a55741105729779eae693b517c7480defce0916d03a19c96b16a73d1319268c
- SSDEEP 384:TfrX8a3491HqC9P58/YYlt4GN/CSCidwZKvjBK:Tf424+YGV5g
- TLSH
  T1F7528505ABBD1020C470516A0F1B4A08E67602AB7607D28F7D7CD3984FB7686D7A9FF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  Zin_Episode01/js/plugins/WindowBlinkStop.js
- Size 1KB
- SHA256 7b87201c4a585a102fc2d1266560f375a7bbc60c02542bb4f665532b0b09d4ae
- MD5 3010dc436f863a3c859218971a48bf5e
- SHA1 069f7a8b3e89e9d588f9a97cab845d5cf2ff675f
- SHA512 d582d8ab8cf7f057d2d1c482550769f9531383b78b15bf3b8ab8df159a6b8f83fc61adc84bdd80bf7f1f544666e663ef79ffb0d99132e23b23641273dc8dd062
- TLSH
  T17641336C7EAD80961732C1A1649F2787F7158D4FED067866705DC0106F6A319D50CDBF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17
- Target
  Zin_Episode01/js/plugins/frameVisible_true.js
- Size 685B
- SHA256 8483ae8d4e63c819416086ef0aa4e7680d850f06de2d3ea74a82f9d74075e7a1
- MD5 e47662f6f9fe8b63c8e133c52b1b1454
- SHA1 bcefa04586a8f9f272a5600e41df602023e8d5a3
- SHA512 9ad14720de9237d06b2b3f77fc020d9267a629a78c8eccc49dcbb2374dcb455388815a736ff91d218dc8267111965512af8bdf210aa791af45491894e50e45e1
- TLSH
  T16301991ECAB36831D5B0657229EE55C1D2219D0FDD173097744C91A2BFA128EC280EBF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18
- Target
  Zin_Episode01/js/rmmz_core.js
- Size 170KB
- SHA256 25b698bbdc2e6d6b9cc601593d75ad08d96ab54a9d077c1a062ba7d8089c17bc
- MD5 edc2432866c6a761122bc0ec15175fa5
- SHA1 d82667b528286958acb0a3b1a9facb6992ac92c6
- SHA512 398e4b38f5fc89bfa426430104a66e1093c4f42fe855e33b693e28a23a8a7949d89a387689c727dea9a30c31fa5d82b70abd842e64e04caba1c48cd0d220848f
- SSDEEP 3072:0mm8H7ANYx2qb+wtR/dAQhKZVOVBWrLiY5s:0mm8H7ANYx2qb+wtR/dAQhKZVOVBWrLo
- TLSH
  T1600432596FFB1122C117F0A94F6F984AF639900F641BD58C754C82EC1FA943886ADFAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  Zin_Episode01/js/rmmz_managers.js
- Size 80KB
- SHA256 5b1e2d0a8d1ba2d908bbc2cd0fd8bca1920ba72080be4bbd16a07c311ed1aff2
- MD5 e0271f3499e2db6f491a4a0ea0f24111
- SHA1 cc470d00d6d9c1c686816b9232ece5ea769c5b5f
- SHA512 0e7ed1949032cf54793627c4f37d35dde71cc2a045402204aa8c82a3b5c61d7652ab28c9e92f1a174b5a32f95418c39f665abf03cf8cd224d9d7d434b1b2a4f4
- SSDEEP 768:AHIUojzg3PtEEFOoL6K6K6g6wB/O4JWQVizGcIqeiVAf4p6d696U6BD+J6pguCkC:6IUo8nJPZ65UCDgD+JNash
- TLSH
  T15B83E11A6FFF2012C11BF46B7DAF5405F1395547284E8A087C5C82DC1FAA07A87AEF69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  Zin_Episode01/js/rmmz_objects.js
- Size 298KB
- SHA256 5aec11663daae996c8d85ac208c50573dddf6e425388d4ae7427fd8f93638901
- MD5 54b94dd90f61722bce4046e1eb629acb
- SHA1 db2632999e6e1d0726b515aa71e67523f1ca6b94
- SHA512 734e84208b4fd6e3fbb35a965cdf390ed51f90dafe7411162b20d3c52d8df3288bcd8b10effcb36a9ecf5b0a35a952d8d036e9d12ac4729d18e24db8b91303bd
- SSDEEP 3072:sjcvMhS4kFcFnOWTdza8RpN1wI1EZ1smff:scvMhS4kFcFn1ThHaI1EZ1saf
- TLSH
  T13554AF48BEFAA011C217B07D5D5F9509F53D404F784E8A9C784C82DA2FFA0744AADF6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  Zin_Episode01/js/rmmz_scenes.js
- Size 106KB
- SHA256 2cecf3f75e83340f012197b3244e126f7d402dca8f9040bb1b15ad1cc1965822
- MD5 993a9b32d469e536386743124d02c0d3
- SHA1 e211a45fe4202bbe3abcde3fa565c893a0ffcc45
- SHA512 5bb66424e1581adb2981f8e715d11c55c83b7a1a72032d6aa9e5ba8bd0d87edcbf3fedc0cbf019fce4dad29ddbb9c21eafb800640a6a7201e7aa962b549efeb9
- SSDEEP 768:HvuY0CxeKC/hc/WCXo3A4LAA/kKlHNNne8NWdMvW8hUPCvXoN8uuBKkBsat2HIQ:Ahy4LAEkKlHNNniMvW8ECvYu5K0lkHIQ
- TLSH
  T12DB36E44FFFE2021C572B0951E6B5B45F534402F6406858C356DC1ECEFAA0A68F6EBEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  Zin_Episode01/js/rmmz_sprites.js
- Size 102KB
- SHA256 d28c7b018069775e1c7bba47fd50f347ad9b2d31a52cb1bc0abf20a8d7521914
- MD5 c3fd0c3896304f1ee0ffadcdb89e3856
- SHA1 4d7efa3490e219073d49d5fb780fef5f277ba5d5
- SHA512 07335250ac3a1bd3a9e98fbdd2b695ac87f1efe74b7f031395be974137b47459da7e2a618fb83136748e8280338d777edf8a31f94e36c75c5172bb4915770655
- SSDEEP 3072:qdA+ItXfHLks8UCQsCxvKEg9sRQyM7xceMIb:qdA+ItXfHLks8UCQsC5KEg9+M7xFb
- TLSH
  T1A5A36A586FFE5114C213F1A99E2FC545E639401FE80ACA9C785CC1D85FAA07C8A6EF78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  Zin_Episode01/js/rmmz_windows.js
- Size 191KB
- SHA256 74fc39a4cda557202914c0d2c5a75b71fde7ea5eb399470399c60329474d5587
- MD5 84ea304fc374cfbf6fcc041964fba37b
- SHA1 3b08c7a7b8e140e347b44ea8563f01cd9eb694a5
- SHA512 d4500c335083b5027328ece21dbd71db3b27f7cd3ba5cd60006895f13606094dcad666527c72fd3c3b918aea43946ce4a5b28660ae37fea30bb4d85beac369b6
- SSDEEP 3072:5IP+Wi5U8NKhK3fP0PI+gs5QLQUP/dwIvwvBzAdO1iR:5IP+q8NKhK3fP0PI+gs5sQWw+wvidN
- TLSH
  T15F14FF54BFFA1120C12BF0A55E9F5608F639441FB40A8588BD4C82D8BFF60B9466DFB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  Zin_Episode01/libEGL.dll
- Size 377KB
- SHA256 ba1098da107ae08e9f1dd4498af51693e25b35a8d8ee887f7c3939e766357604
- MD5 17daddc07f535596dae54552d74247f5
- SHA1 23ce01ecd79ea32d5093f10115a112578ad04f3c
- SHA512 159b4e374519183cd14975796289da20e0da8b2557c16af9d3990e5ca79b0dece993ee36666038a754266f14007a709c3fcd862bc26b67f9cbc309c4bcdeaf06
- SSDEEP 6144:34rfILBPBpxNkI6bx6Td9HphnxDOwsXsNYf2IN:Q6PBpxFHhnxDOwstFN
- TLSH
  T150846C15F7A048B9E066C034CA334606DA72BC9E0E65E69F23E5425D2F7BBE45F39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  Zin_Episode01/libGLESv2.dll
- Size 7.8MB
- SHA256 2803555788f6895777984fac4f183267d4e88489e2bb731511f223f602e3117b
- MD5 91746e410a23dfa13d6ef0ad4a693a77
- SHA1 42dd7816be1214fab2568e67221a7e4efa422a17
- SHA512 614dc031fcdffef720836f7179a1437637fae82fb257faa15b4921ea7d88e48a0acc1fddd9f9586d04dd6e9c1130ca4251194f2e567dcd16599db11885a533ab
- SSDEEP 49152:OvqyBTgvgCuc7dPecGJ7dmuvnrRJrQdBdpRy2+pF9+jlq6Fx1vmlww7NDHui1QWU:iBTdBV7dZP5aiVCZqRexuEfSqP8u
- TLSH
  T184866B07E1A140E9E15DC2B8CB179621FA31BC891A65F29F365472203FB7FB05B2EB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  Zin_Episode01/node.dll
- Size 11.8MB
- SHA256 5da238980ca8363592caeecb8beb5fc7d1d756738589e69e40e46e70fd953de2
- MD5 97756e7cb6f3b96524da3b3e3df50a98
- SHA1 51b56db6c9873c2b2309c37c5339bbf11993a004
- SHA512 e5946f45ff37b647331a068999e43404dcd13068a0283eda815496b9cc41ab3da74dd44a92bb351db9b96d7b0ffa150299587dadfbcf4acced115a99830e74ba
- SSDEEP 98304:uEAgiVZ4SxmBn4xy8lP40XV1t9jaD7s235jhBUf/Z2Gi0:uEAcSQQp9eD7t35jzI/Z2Gi0
- TLSH
  T1A3C68D03F6E201A9C477D178C75B5222A632B8065B34EADF324C53252FA3BE4977DB64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  Zin_Episode01/notification_helper.exe
- Size 898KB
- SHA256 08f37950e5171683f359d52f82014ea95feb0525a941355b4732fd7635b1584d
- MD5 4b41c87962feb05d253fcb8a861e4406
- SHA1 96fb61319c7f35f8916f53bf90326ada94f1eec3
- SHA512 f2a1320424bce808b5f937db268efe6b85075d4d2447896f81b02a9ac447b710fb3f39de5fd21bc85d985f2e8c3698fee1f7b2f0aeb155b19128fb95300cdb40
- SSDEEP 12288:01e7kxIlHJKS6xglFyizbJjjKXTOak9luwcHcp4eR5+n0obkohLu:PkxIlHJkWlFysbtbaile8pTfGu
- TLSH
  T1BF157C1FB3A900F9D06AC578CB568131EA71B8470B65AAEF02D183293E67AF45F3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  Zin_Episode01/nw.dll
- Size 136.6MB
- SHA256 dbb533037434e1c4fef54a1e3d01b3499f652beb727864ac35eff33a03dd2a40
- MD5 ada564ba29dbf01c995f71c027939855
- SHA1 9bf9db4792d88038c986597814a16145c064464b
- SHA512 0ca301bb674d1340d152f9396b03bebe46ee362a7acf6adeed28ca7d96245053150a85ad787d4962b19b401232c6c8afad3328db3e7eeec4bc1aaade873d8bc7
- SSDEEP 1572864:Miv6Wk2oq21630ONenQRVo0UFZAsAim4fv64CHxd7yIqIc5ZG:bos/Gnz
- TLSH
  T18F687B03E29610E9E05CD2B897178A36EEB6BC854735B6DF16911B212F67FE02B3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  Zin_Episode01/nw_elf.dll
- Size 880KB
- SHA256 aefb146d3578d50fde8fb889e90ee9afc904f41cf3e7c87851dc4e53e73e3d0c
- MD5 295b3bef2bf9467c570d247105f5423e
- SHA1 82f2a6a9a97071caecd26a03810d032b602a0bc0
- SHA512 a2f798778da840be5df5dd85d7a51949b726bf9aa1f9deb8b96586ac43dbd5310530a19e3e7087daa3296f5f539888d9b2e39e525b5dcad76f33570ba5db2a1e
- SSDEEP 12288:ujG/4x69rfgwgbrzz6wcA9ZxTTtLNK7ciNeR5+nJoWBS:9gxSfgwgHzn9ZF3K7cilzS
- TLSH
  T182157D17B7A900B9D06AC178CB574532EAB1B8470B64BAEF03D092693E77BE05B3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  Zin_Episode01/swiftshader/libEGL.dll
- Size 397KB
- SHA256 476aaf084f2008408c634c655ce6cb91b0b3a357dc94da5946217550dffcdf13
- MD5 f389f9883cd882db62a3d5b92e4bd7bf
- SHA1 32f9302764d535473c4d475af0e690e9c944fac1
- SHA512 89f97505a0a9dabb684465a581c9171ce3255e881ce8d51c49316d1e928326d51b6a013e988eff928bb9da8399bab4acf6c8411c72a2e11e5aa6d8132aa02d8f
- SSDEEP 6144:ycH+A7VSxtpoJFxUylV2z+8Bvp9p/AhJBEPKeF2:J+VoF29j9dAhEPKe
- TLSH
  T19D846C15F7A448B9E066C034CA234642DE72B8DA0F65E69F23A4025D2F7BBE45F3D720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  Zin_Episode01/swiftshader/libGLESv2.dll
- Size 2.6MB
- SHA256 ac0bfe25bfd0e10bce8d89e5ca5c199683d71f1865cf8e44709e7839e7a43db3
- MD5 08effb07e789a411c6a4702fbe084829
- SHA1 2083ab83ef753d52b0df1cb1cde2da5325c84c44
- SHA512 fef18604a757016c1aab31a01e556ebc3cbdf318ca054e1776f77eed10c5a9fa0b6f35554017207bbe7b21a53a1a4141498f5e654457304ee7acb18038f527d4
- SSDEEP 49152:sFQ1RphMoY6yhU0ro3Ny7nhfbSxA1Lesmv+RFfU04A9HJFXELj5eEhSy9zWxMb6q:suGHf2xA1uAy9t6q
- TLSH
  T17FC56B43E595C0E8F05ED5BC8707AA2EF572BC801AB2B2AF23D4AB121E77F605719744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32