72d6f2f2e1e145fffb8696a7a2b00daa76aba992dbe7ed75e2380b62adbbc0c2

Sharing

Copy URL Twitter E-mail

General

Target
Portal-AnkerGames.zip
Size 2509.1MB
Sample260709-g38f4sds8j
SHA256 72d6f2f2e1e145fffb8696a7a2b00daa76aba992dbe7ed75e2380b62adbbc0c2
MD5 40ac4e5b30a2dcf92ceaac2cac9b74d6
SHA1 06781f422d62ae5214c17d70470a32333a30c4de
SHA512 058f11cf5993c4a6a34b77c05d9829c94cb00d554b89b522cec64df070487cde83d84af2ee93712456484aaa89979b1c0df05d2936ce1013c248b5b33846a9d7
SSDEEP 50331648:0Ri7x7mXA1wAYjSKYE8RcyfuUKk+T55BmJMeugwmnkKECU5Sa5Wmjff0hP:0S0A13YjS5E8RccuUG5OyNlmnICUngm+
TLSH
T10F5AEE23F4D28949E97BC37FE7B02D80E1E6F595A494881F669ACFC0F063710956A34E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

ransomware

Malware Config

Targets

- Target
  Portal-AnkerGames.zip
- Size 2509.1MB
- SHA256 72d6f2f2e1e145fffb8696a7a2b00daa76aba992dbe7ed75e2380b62adbbc0c2
- MD5 40ac4e5b30a2dcf92ceaac2cac9b74d6
- SHA1 06781f422d62ae5214c17d70470a32333a30c4de
- SHA512 058f11cf5993c4a6a34b77c05d9829c94cb00d554b89b522cec64df070487cde83d84af2ee93712456484aaa89979b1c0df05d2936ce1013c248b5b33846a9d7
- SSDEEP 50331648:0Ri7x7mXA1wAYjSKYE8RcyfuUKk+T55BmJMeugwmnkKECU5Sa5Wmjff0hP:0S0A13YjS5E8RccuUG5OyNlmnICUngm+
- TLSH
  T10F5AEE23F4D28949E97BC37FE7B02D80E1E6F595A494881F669ACFC0F063710956A34E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Portal/bin/vidcfg.bin
- Size 20B
- SHA256 e0421987857fdbdc9fd04b28fb51ca6e51310e0d730806924a41a987243c8b2d
- MD5 d1d30a6949805b04d204be7e60cb1529
- SHA1 8d9037c099b5c447c64e84493789539747222abb
- SHA512 b366ba6701510d21a76bd5938a1fea7b3e492aa3c95b0c076655969e9dce27e0fd3d4278f5d61ff54661eba36d46a1e7e12e5a31646f03d03bf29855c3e4163c
- MD5 SHA1 SHA512
Score

3^/10
behavioral3 behavioral4
- Target
  Portal/hl2/cfg/skill_manifest.cfg
- Size 16B
- SHA256 aa41b4e64d2604a54a4affe7fcd1d10a0dc1a4ecec0436b2ceb0eaec94cf356d
- MD5 be93fd42232f21fb329e87a87deb590a
- SHA1 fb99dc15331ff9b4070aa8838a8edcc399f25a3b
- SHA512 2bc8c63a91d276e1e589acf9c2f613b7d1306c0c87d504bc9395725cd758e8b7e56a21dbbcc2ddd69fc29791f114c68828f241c9140b35f46fac69a8848b2a91
- MD5 SHA1 SHA512
Score

3^/10
behavioral5 behavioral6
- Target
  Portal/hl2/cfg/undo360controller.cfg
- Size 68B
- SHA256 3e0aec8506dad77c1adfc8fb174dd6087f6924aad44e859ef5d30166b1920bde
- MD5 0132159ee528616a331c3ed339edf398
- SHA1 5f9b509f9ec1ae914b005d7a41fc28ab566840f7
- SHA512 09f5c56f3226f23fa5e8cf23d8c2d52bac2e0ad9a9d8ed8ba4309f526fe8d24c3a77067662c93b672fa6113f1d3df1b6d912a69445b5b8f59d75fd43118deee6
- TLSH
  T1A9A0021EA5A9EA9E502BC36D10BEB4597EF7CECEC7DC4442C61D09415A590D39CD2424
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  Portal/hl2/media/startupvids.txt
- Size 17B
- SHA256 8e56a14c0a788cccc12768b07f67cba4c0426da095b68e2d41a615bfe4fb578e
- MD5 535d498b5420462ca3590449ecb475ea
- SHA1 0ae5cb56f5de76dc7243b48da47cc21d3696cea4
- SHA512 93b3f3d6921986b977a2e4d98af610fbac2cb6af6196bb8b35a1a3676f57d1d5c8f4c96e99cd787cde202a9e4dddadbfd51494252fbb810aaa019d3fc95e4d6f
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral10 behavioral9
- Target
  Portal/hl2/resource/bugreporter.res
- Size 79B
- SHA256 04e0b48c5dc91332be05c01fa78aeb16e4341ddac7e6365c7530a03000558a4d
- MD5 d9c38c52363fb7a2341aedf3ab401e2e
- SHA1 42170064f0a90c32f7d5fcbe2bedb92a0c910c09
- SHA512 4d91d6d273ecd31991c57080cd3ac7e8bf054842e54499cf0f58f9d3a707b23515f51c70f326cf6a4b6513629972ecc2e0197273e730974d93e5982c9a8c2056
- TLSH
  T1E1A0112A3288E0AAA2A20CCC0A320880E20E2002028F2A00EA20AE0A828AC883082000
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  Portal/hl2/resource/sourcescheme.res
- Size 30B
- SHA256 f6da3f357c8678d9af72d2f889b77b7a24ef806da57383bb019c0b69ad07c857
- MD5 b421eacda6f4941dad94926eead5d30f
- SHA1 6618307038635651c1f579f3057cda9fecd76774
- SHA512 8b882540f26f7e6ec5c24b86b182f22e2cfc4723aa6ffb253ee40445ef5adcf3941824b32cc1f960ed600861409d1a7c0144c285c0e916da52c5b58184c37e2e
- MD5 SHA1 SHA512
Score

3^/10
behavioral13 behavioral14
- Target
  Portal/hl2/scripts/bonus_maps_manifest.txt
- Size 43B
- SHA256 7ceabfaf88ce7a25fb60adff6eef71cd9ab66cb5984c0d2d510318d493b8e61c
- MD5 202c4a9d2d9aca6da3676c9e54b5e2b7
- SHA1 81a2af1ced9353891d9df68b79650c62ce0f03b4
- SHA512 8a71d84c64ed0e17ea2b1f99dc7d338ca24db5429594bc128b0c46543b2aa7246ddbdc53f61fd6af6020c801b754f51cf96054f7e8f6cc6a1d6970f247e41c87
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral15 behavioral16
- Target
  Portal/hl2/scripts/bugreporter_defaults.txt
- Size 19B
- SHA256 ab19c227eaa2aadfe7ab78a47466a108f94066a9b48225de81487567f4568782
- MD5 18dd9e7ccb849d30fd28a40b05bbe765
- SHA1 2a1daa19683a9607ece8f7b5c21f2c8aa8d75ca1
- SHA512 221900b75114a4a4b500ced4d698ca86269aeca8d5038cdaa5283bd7dc66ea36b199439434120ffe1f28532ae9d2cac0f2908229b75936b0e2487743335a1510
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral17 behavioral18
- Target
  Portal/path/relative/to/dll/settings/configs.main.ini
- Size 94B
- SHA256 b19971fb48a6ee5402b49c02ffc2e3af3324f2055472a03b97363c3331046bc4
- MD5 7d16d121c7c2c284846de7cbc25fdf0f
- SHA1 c2fb40710b5a20a09337e19a7eac5edbb7910267
- SHA512 88fabca55f911893e787c642d913cb4cd2d3e8f3663e90c6cbc1be28b4c2aac67dc1cbc69c5f97b91e9418e4d7ac90e113a1859cd75f04efafe8027263358510
- TLSH
  T177B012407002232312DBC20F040587C4970D81605610601C3EE47AD19352A81028C5CE
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral19 behavioral20
- Target
  Portal/portal/cfg/chapter1.cfg
- Size 17B
- SHA256 3ca6c2f7d1c8a3c641928e1ee0bbeec6eaa6a705c6effa751df533b6ab698830
- MD5 73783ab84eaa8aa26479e9a2bf57413e
- SHA1 676920f789efe7091af09e3569fa897149953157
- SHA512 749d5325e029a01c993f8ef71e5395af055e0924cd198fcd379003b16b5c6799e5b2b522bce4c4c6cdfa342d6d26ada2325b520824960a1384b300750707d414
- MD5 SHA1 SHA512
Score

3^/10
behavioral21 behavioral22
- Target
  Portal/portal/cfg/chapter10.cfg
- Size 19B
- SHA256 fb8f7151143ea21842bc069642bf0fffd18eca75bccb54ccdf5540ebf50d1cae
- MD5 f8cc136ce2860793cc1cb978f11d599f
- SHA1 fa626225a7c45a60dc2ae01f4c16994e4e532b90
- SHA512 e11c81b7bb08fb54ba88a0f85726ca92f3bd5470b2067ebf770dc6cab79989f9db9e76c8170faa085c49d786bec8351697692050fd5f3bd712bffbe8af38f701
- MD5 SHA1 SHA512
Score

3^/10
behavioral23 behavioral24
- Target
  Portal/portal/cfg/chapter11.cfg
- Size 19B
- SHA256 0a328e337728182bcb0914cf5d19a4b1999d775c1f34c4e6f8d2b5a50ec7be96
- MD5 66d98aa500b01a6145c1942524b72d45
- SHA1 956e40fc0fee348587f1654169fcfa12b5e3da8c
- SHA512 006af788db57188a9831efae1b7a072b944a2b466ec9303c00af21b5b475fa963be685f23c43d421573e54302828c341f2c3974b4a1c0b409027944f22720ea4
- MD5 SHA1 SHA512
Score

3^/10
behavioral25 behavioral26
- Target
  Portal/portal/cfg/chapter2.cfg
- Size 17B
- SHA256 b118124879dc4dbb9d30842c2b8b0c40d9e3ee4981a33356ea22c66b2181242f
- MD5 278e722069f027a87002511b7f896706
- SHA1 ef33e3f9befc99ab6c3c0fd76b6db0ac748c3a1c
- SHA512 309580717c62b10b154d627d413e0a3e1d114637fb28f2e552a969ac249a1b5227c1cf64523f1092c4d0648f69e8b220d0c49576916975145680bba6fd1aec52
- MD5 SHA1 SHA512
Score

3^/10
behavioral27 behavioral28
- Target
  Portal/portal/cfg/chapter3.cfg
- Size 17B
- SHA256 7c17644a3f8b8c4a3691ed097915f4afd39d9dc16b9332f6097ae6a39b5b18f5
- MD5 9f8e26a85d57672f0851a71912d1e882
- SHA1 b2d10186dad17a430f0af8465fee6678aba50565
- SHA512 f3d92944ce1e32578656fa46f0a1d265bd782bef63d9f9da7e9546cd89aba55dbb8d6171a2221ef83a48313f6c9f5107489d70c3626c7acb9712299accfab392
- MD5 SHA1 SHA512
Score

3^/10
behavioral29 behavioral30
- Target
  Portal/portal/cfg/chapter4.cfg
- Size 17B
- SHA256 b5410e8ef08f86ed5f49ef927856d8ecaa37fd4813d1c4734c0db4f488a99fe8
- MD5 c5720ac83168527942ea6a5fb7bbc452
- SHA1 f24e5b94a197c519444ffcf12511207be487e510
- SHA512 b46c9e4f80a84b72b1c0d898bcdd7f21456c3df02ba4e65de6fb87d9f330440346ef622ef7bf58e924e9a18195f42843ccf97a39481c4d661bdb005d1f8f9203
- MD5 SHA1 SHA512
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32