143ca249862e84c044a919d0619722d1a096fe14d8ae444a88af33f6275c181d

Sharing

Copy URL Twitter E-mail

General

Target
Steaxs ReShade.rar
Size 24KB
Sample260710-c6r63sdt7s
SHA256 143ca249862e84c044a919d0619722d1a096fe14d8ae444a88af33f6275c181d
MD5 6910c25f9e002b9bf65c3d3d38366c49
SHA1 a72384072999cc05cf683338ace4406bd4523d74
SHA512 9b08d98f90411c99a67d434da9f7643bfca9cbba7c822b74088c1912960ddea3d678593d73ae37fc6570cba711f7071ce9a4a04b306357408dabf15330e2a471
SSDEEP 384:vBVWCtmChC606QoQHfIl+E9YEeDBPcnnMxY0jJqmtv+ASGbY0vpR5RJ/Jp2FRMp:vDEMwpa+QYh0nmljgIvbfzx/
TLSH
T1CAB2D1577B3E7908AADFC6318867F6060BB307C1AB50ED5A424B68EC5EEC1361E72154
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Steaxs ReShade/00.STX.Lobby.ini
- Size 3KB
- SHA256 04357e5745b2f2cf6874f4d26c065986553c5e8a29193d9533c32d9453e67c6a
- MD5 577989201fbbbdd157eab17b3beeca3b
- SHA1 5c9560fef84475cd1ffd16c6351b8e6c812c60ad
- SHA512 3bc5c2b176d656a345dcf0d91cab9b57198f77c5efdc15291aca6e526543653aa2ccf6fb4d9a565aca93b16dd42881cb2b736476eb9154ebd7ef95d6dd008482
- TLSH
  T163819DD26EFD8015C6816F022D70F97396F1B34F4CDAF67816E456D2099DA26BC0172E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1
- Target
  Steaxs ReShade/00.STX.Stream.ini
- Size 3KB
- SHA256 3a139a8c9d939ddfa05b628fd453dd875b236d0e9b1aeaeee179e784a64c6315
- MD5 087ed4f267fc7aec5edff0cd5ddd8f34
- SHA1 2fd6fe479eb73d93cc1a60b6c2647b6afd42e4a4
- SHA512 ee8fbe7569bd4ea6c6b14f9efdbe58f9296bb707caede8cfd2c7a95e244d9b1f70441f17b8ade685709b47e0dd5daf67033e160b92961b1fe3550f2b0bf5f1b7
- TLSH
  T1905128D26EF54005C7D57F422C54F9639AF1B38F4DD2F2B826E852E7094EA15BC02A2E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral2
- Target
  Steaxs ReShade/00A.STX.Reaper.ini
- Size 3KB
- SHA256 86010b0bddc0016a1ceb4f59695eaf0102c11e61e7f4533e1b43ed198b51168b
- MD5 e065d0f905e8c27a364f8e6ef7f98de3
- SHA1 fd07eb3aaf18c3887ff7857863f64dbd75220842
- SHA512 47db8d16db2b69b5703519e92262733e945030f306b6cfe2c8a41afad0b7c0b1f600f524df8ee9d4212dfadc3f4532928577342bab1376dfded11c1033b4bfed
- TLSH
  T1A26148D26EF54005C7D1BF062D54FA67ABF2B34F4CD2F17826E412D6094DA16BC42B2A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3
- Target
  Steaxs ReShade/01.STX.Autohaven.ini
- Size 4KB
- SHA256 2f9fde651e2317cf1758896cbef41f5419ba2a2e7ae31e18b302fd1c76f48a83
- MD5 251a42fdfa8e97eea92f2ca31e3369be
- SHA1 411be7a627839dadb91012e8a1fc8f8c4cad329f
- SHA512 9da4dc572a02a1e0cecc62d4d35237023af9b5e4255c504fb86c54ae86a9efd5bcd8e934525fb5b81835b2c84d911c2b1d69b98a74ac2e28d6cd2f420bf533ef
- SSDEEP 96:642tcPuU4DXJY8BXAJBN29ZXpgQINlfnIG1ZSp9xb:Utc/+KBN2PXpgQiI
- TLSH
  T1B2A16AD25EEA4005C6D1AF022D64FA73EAF2F34F4CD5F5A426E412D2095EA16BC01B2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Steaxs ReShade/02.STX.Backwater.ini
- Size 3KB
- SHA256 e8e4716ab472791231490da9600dd6106dd1f4305fa9eb27976008f79b3839ab
- MD5 a91e7e6d827bf3227aef94fd2eff8c14
- SHA1 47d05c3a677c784e20ba3e892fa26a6771dc1216
- SHA512 d8b78b72ca4f15b3a9041948afbc8ee92aaa34f73e8ca249e2736d1abbb7d13ec7d94b7b0e0b95d9f3def439a037ffca3c915eb52638a8d47862a02ae89fcd99
- TLSH
  T13481EDD22DFA4005C7D27F022D60FAB3AAF2B28F8CD5F17816E441D3069EA25BC05729
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5
- Target
  Steaxs ReShade/03.STX.Borgo.ini
- Size 3KB
- SHA256 c68fde4144a28c0099c94a43c5a16bd8680155492d1aa7b147cd340bdf9360ac
- MD5 f85fd8e5a910cf70bd90f15d8653e189
- SHA1 59ede1388ddd46904d79b2619b547bba4bd4a08a
- SHA512 f263a32487bc3d30e6333cd232b21862dccbd43548f61db4da1ba187a5c28e68231642e7dd22a4e02f6599c54bb660788e5dbc9c80d27fb79be093f87d0159d3
- TLSH
  T1437179D25DF98005C791BB022D74FA73AAF2B24F8CD9F57816E442D2099EB22BC05729
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral6
- Target
  Steaxs ReShade/04.STX.Coldwind Farm.ini
- Size 3KB
- SHA256 07e20d3a11ed938280bf455ae4e41a284232aa01db8bf340f5687893c31bb40d
- MD5 4340bfdc3d4458761251a68f936fcc15
- SHA1 0befb86f1c09d6d038a2b47985daaab5508a2150
- SHA512 4027382964defb195bec2f13b8bdab60bd47fa55bdf1862ed460b62564c15a6a5509ccf4355243b5b25d6c3cf7c564026060ae326bffa61f095d45ba79bc7e94
- TLSH
  T1EF717DD26EF94010C7D1BF022D74FA63AAF2B28F8CD1F57826E456D6095EA35BC0171A
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7
- Target
  Steaxs ReShade/05.STX.Crotus Prenn.ini
- Size 3KB
- SHA256 e8e4716ab472791231490da9600dd6106dd1f4305fa9eb27976008f79b3839ab
- MD5 a91e7e6d827bf3227aef94fd2eff8c14
- SHA1 47d05c3a677c784e20ba3e892fa26a6771dc1216
- SHA512 d8b78b72ca4f15b3a9041948afbc8ee92aaa34f73e8ca249e2736d1abbb7d13ec7d94b7b0e0b95d9f3def439a037ffca3c915eb52638a8d47862a02ae89fcd99
- TLSH
  T13481EDD22DFA4005C7D27F022D60FAB3AAF2B28F8CD5F17816E441D3069EA25BC05729
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral8
- Target
  Steaxs ReShade/06.STX.Eyrie.ini
- Size 3KB
- SHA256 e8991c4cbf714e815e772cdefc3d699985686e70de7d91076b1bf31b2d2caceb
- MD5 c84434eab32778b49a0c6023ef97ea28
- SHA1 b97cc74ad0054e5a35af254ea26207b4af64615e
- SHA512 49edf9dd2496ff74ffcb4f2c1f6c1436ef83fc3426800c61dbd54cb172b66db1e48207407c6466e7e2f3afd4ed98fe94ba69aa0f4d40124ba8b08b7e1719176a
- TLSH
  T1E7718DD26DEA4001C7D27F022D70FA73A6F2B28F4CD6F5B826D445D2055DB26B805B1A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral9
- Target
  Steaxs ReShade/07.STX.Fallen Refuge.ini
- Size 3KB
- SHA256 6c56118c4605ba19d4f99b0f10b83dcb5d38d25d6eeea33270eb5c1932dfa444
- MD5 a861ce0fb6497d0f814c034379eb98d9
- SHA1 5cb3cad76c17a5f6caaae3332e43d9dfb8ac6f6d
- SHA512 ee5ad8778512a9a280694ba275868d99a372e6cae4539a5489f31a0a9555cd232475dd750cbacf7b39fbde9dd06e15e284e0e87a5d61b968950f06a4de6b9bbc
- TLSH
  T1277148D22EF54005C7D1BF022D54FA63AAF1B35F8DD1F1782AE412D6068EA25FC4672A
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10
- Target
  Steaxs ReShade/08.STX.Garden.ini
- Size 4KB
- SHA256 69727b3e2a9fab3b057ff7257553ac36e80c578d500f409d5c69bbab764eb001
- MD5 a9f0b8e093c6e34b7295533a9c9bcda3
- SHA1 d518f7ba2fbc4a2aa885ffbe6bf96e536eaa5209
- SHA512 a8ae5c995e80b3bcebf13fc0c3c1a4da3daa8f6d2606ac75089327da134fbac0403f46ebb9e3756965d3d7b113dfbff8a587c4793b7c1ef27b647a776cc77ee0
- SSDEEP 96:61cyo0RMTkTJYwZjjaXXAJBN29ZXpgGjl3YIG1ZSpjkYtF:G5jjaXKBN2PXpgGjH
- TLSH
  T1D391BED229F94005C7D27B062D64FEA3AAF2728F4CD1F5B829E451D6094EB36BC0672D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Steaxs ReShade/09.STX.Greenville-FNAF.ini
- Size 4KB
- SHA256 e3d0f2fcc590d644c93f08e58fe22c2e3256e25a52de34d60dfa9a398adc128f
- MD5 a165f778642a5c7e249c6e461399af76
- SHA1 9bd620009253d3064cfab350adfb03186cf6a436
- SHA512 0e37480aacca9ffb5480f77dc06c081178e691cf1ee0c59c85318313dd6c6ea48faf0a1d408b34f176865afff7a727f9add306fe0d4201aa6ad1131687e78bc2
- SSDEEP 96:61J60J6telqxjsOn9XAJBN29ZXpgGjlqXg6nIG1ZSpooKU3F:XHtvxjsa9KBN2PXpgGjclY
- TLSH
  T18B81AFD26AF50006C7D1BF026D54FAA39AF1739F8DD1F1782AE412D7064EA21BC4571A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Steaxs ReShade/10.STX.Hawkins.ini
- Size 3KB
- SHA256 24543b3f32fccee92c908d89685c09a0b5243600a0b8475bf0553d075e003358
- MD5 ae6a917fb139ae129f57c8f0ab7aa6d7
- SHA1 f430094279c274e3cacbe1733cce5f5356d9fe42
- SHA512 5c38417926a8dd5b6017df09bb1c4e656817f0d994680656c9da136a80824d8f25b17fcc8e872fd944d50d7f9436a0a80de39f3ce790430aa867b0ca108f5da1
- TLSH
  T1DE6169D22DF54005CBD1BF022C54F963AAF2B34F4DD2F27826E412D6068EA15BC06B2A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13
- Target
  Steaxs ReShade/11.STX.Léry's.ini
- Size 3KB
- SHA256 5cf07a5180a3f01bb6d0e49a7e6b392bff79e8cc32e8e9e0cd011c6f45a33174
- MD5 c5d3b2a427158c6defcfc862cb1d1932
- SHA1 02837a15b2d0d6a8c0e1b959ac15aab7c46842c1
- SHA512 07e9a8704fb294d84952ec93e013d36a42d9a993220ad03ed97eba907d12dcd0477c653807f48993005426ded5bd79cc5f18323747bd0ff64bc909caf9ed87a4
- TLSH
  T18B7168D22EF64015C7D1BF022D64F963AAF2B34F4DD1F5B826E412D7068EA15B80572E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral14
- Target
  Steaxs ReShade/12.STX.Macmillan.ini
- Size 4KB
- SHA256 31d3058aa4d4e7feb6e7a6cfc55f520952fead0b964f98e789b2f56dcee29c55
- MD5 e9740fdd2c68dbb4d554e075ea7673b3
- SHA1 f08081c79cebaf638ed7d2a7ae4591fb15287806
- SHA512 6847f80f033b47b49dcb56ec1925020d2449eaf55f8acf5c4ba63430179faecd81a4248f70ed7a4f69b9501ac5439bdf8ef280d7e907f3d1b0eb2f5f9e748706
- SSDEEP 96:6Z20O3XAa1BN29zXpgGqTlCnIG1ZSpxUg:K20O3L1BN2FXpgG41
- TLSH
  T11DA12AD26EE60005C7E17B461D54F963DAF2B28F4CD2F1B826E412D6055EA25BC42B2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Steaxs ReShade/13.STX.Midwich.ini
- Size 3KB
- SHA256 d3cffd3311dc6d653e751e3e58d1800d8e9bcc46724e43dc267e3051672c890d
- MD5 43b4f695fc67f737c571f50208456240
- SHA1 4d02dd92213c1aa986cc0aa5f6a4f336c8f64d0e
- SHA512 f76f751149545b326e29a911213bf603c24f9b2051aaf59407ad0d0a8eded341b72a965392e2b1758bb79c7b1ef148faafb2a30aa516e8373bad21794011857f
- TLSH
  T1E87159D26EF54005C7D1BF022D54FA639AF1B39F4DE1F27816E812D6068EA15BC0272A
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral16
- Target
  Steaxs ReShade/14.STX.Nostromo.ini
- Size 3KB
- SHA256 9981a9fe56da0d304efe95218004468d7893bfea4ac3f9a2832ee78cf78793b1
- MD5 5ad3ed4b5bfd862ca8a8c8649ad562df
- SHA1 c272cc21c8419f3441eccd2023fd71ff0751ed02
- SHA512 4223a88997ca2a4716b77cc17c1c9553ffde1b60ec242e952c89727e1b3390cb8b1ea334090f3540c2e4a754caa17908c5f598baafc50160fc16cb8160325f22
- TLSH
  T18D7159D26EF54005C7D17F022D64FA63AAF2B34F4CD1F1782AE452D6068EA15BC4662E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17
- Target
  Steaxs ReShade/15.STX.Ormond.ini
- Size 3KB
- SHA256 1c07a4b928740f125d5a40d28457ce5bc2a45c60d84b10b912fca4d164ae889b
- MD5 5cac80bcd51bea248dd7d6910471754a
- SHA1 ffccdfbf11e226091f0d5e52c1cd85f71df5af85
- SHA512 16756e6598746563d332c489eb27b4a34227d3ccd2d9eb7a1acbc9a3a898e4014b687fd78d36bfb17f6ffab2db6845c775bd6a37e9a2bf09ba5516feed937522
- TLSH
  T13C618BD22EF50005C7D1BF022D54FA639AF2734F8DD1F2782AE452D70A8EA15BC4672A
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral18
- Target
  Steaxs ReShade/16.STX.Ormond Lake.ini
- Size 3KB
- SHA256 c54d9578da6d5b9e817172cccc9854d1168dbe273cacd6b9a0ee3de09dab2fe0
- MD5 ef01d2fa0b17676386bbc5dfdd648ff9
- SHA1 f52735e782f06d78eae525aef63ca8f72e6fea9b
- SHA512 bdb34fc0e63ac0d07f4221e2bfa807b3ae85a8972c567a1fcd7c95f0ebd7146ce5edbee32803cdf153d904bdc6762a6c21c40ba04678aa828822400d9a16d014
- TLSH
  T187718CD26DF98004C7D57F022D70FA73A6F2B28F4CD5F16826D845D2095EA26BC0172E
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19
- Target
  Steaxs ReShade/17.STX.RCPD.ini
- Size 2KB
- SHA256 1f0266f4cbf6b4bdfa13a57c179bb46893da2e931aaba33dbe5dbe1d8d5de379
- MD5 2725079c3729788151fb224367eb138c
- SHA1 737190987381b684310bec68039cd1b7dff2d3b2
- SHA512 ae3de1becce62ce9d51efe166fba81a5a789bd4de4b0fdd6f72c5c4758cdd194811272c0482eb6578966b05057063e25da8d5c970b8961b35fcf90df8b29be49
- TLSH
  T1CF51F4D26EF14005CBD27F022C54F5639AF2B28F4CD2F2B826E456D7064E616BC02B2A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral20
- Target
  Steaxs ReShade/18.STX.Red Forest.ini
- Size 3KB
- SHA256 7ddaa9dfe94a98b1913cd57efca1560be857ee47940276869d8a8445b7608598
- MD5 4aecfd81d6741e3ec2344e5086a86fa1
- SHA1 71295bc798c91a2ff49c83a71a7491f38cdf06cf
- SHA512 34403331ce350bd4397f40a44f3572218a085b702a8604f1c6e75c7aae675a416699d9409b203523bec6271efc9d5fee54e79a545db08f736bbf4790bb3db55a
- TLSH
  T18D6138D26EF54009C7E17F022D54F9639AF2B38F4DD1F27826E852D6098EA15BC0572E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21
- Target
  Steaxs ReShade/19.STX.Saloon.ini
- Size 1KB
- SHA256 30a38efd819c0ec1e833bf4b8ab9303b9527c1db13e555395e78bfa5800a9104
- MD5 a722575fbc85d44a591882fe2d0f3a6b
- SHA1 a947b9e41115b371387667cf2d573573b36147f7
- SHA512 23c23735eadeec9aaf3c0f589281419370aaaae45fab3bb3cfd1dd92211bfb4961deb570fa20b9fa056b4da74e366368aac6405510d716751a2eaf591fea5ba7
- TLSH
  T15F2166C6A45E8154C222861AA775BFB028F3719FDADDFC6832E899918DB1FF30856304
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral22
- Target
  Steaxs ReShade/20.STX.Sleepless District.ini
- Size 3KB
- SHA256 2c64cc1f6823372bae39655da1798a37ba277228f08e0f0283a02021ba3af01d
- MD5 f6569fe8cded1cdc64831b0b6b8bf341
- SHA1 6286b4220e0761cc556798b688e5d1353e08afe0
- SHA512 db0f13daa36f1cc14cbb780d77cc146334c4749baf1ea5f9dbbcaf2587bb7e3d5b65b1c3c28d441decf1f594682060d9875599dbbca8b504c5e59f8059128a89
- TLSH
  T1FC81AFD22DED8005C691BF022D74FA73A9F2B34F4CD9F57415E442D2099EB26780172A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23
- Target
  Steaxs ReShade/21.STX.Springwood.ini
- Size 3KB
- SHA256 783e8195424f578c692990f8b286280a345a09457e518b2e14d01cc24f36a894
- MD5 ee581dc248aaef0b8aa037ec78688eca
- SHA1 1988f950d224db4d29d34b769cb1760a7b9ac25f
- SHA512 8ea578b5b395d5ca5739cfc5e0965e4b5d82a91d31a8a02d141c822e62f3bb7f9b51c7654d4cd4826e054f3ebf8e45b05128a7c39c2a52c64d02014bd71d9bb2
- TLSH
  T16D714BD26EF54005C7D1BF022D54F9639AF2B39F4DD1F27816E812D6068EA15BC0272E
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral24
- Target
  Steaxs ReShade/22.STX.The Game.ini
- Size 3KB
- SHA256 6ab23be14bbfd1c5a2d8c622f6564bf9e3719ae4a013d3db3d9d4a381b4be481
- MD5 67ca307295f5f09289ffd8e04c96e116
- SHA1 27c258f17e45fe1c373f98067b545b536c00a8e0
- SHA512 5ee618dbfac3ece28ef985087c934a739876808f4710d8ee13171b07f8b516a166caf2bd02eda2abf7c113d66b0b6b612278b52332b6112b3aa02e7dd1c8117d
- TLSH
  T1DB7136D26EF54015C7D1BF022D64F9639AF2B34F4CD1F67826E412D7068EA15BC0562E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25
- Target
  Steaxs ReShade/23.STX.Toba Landing.ini
- Size 3KB
- SHA256 99eb1cafd1367f4d5eba462630301c289c7ef5fcc4ce46f5112a20b0a3551501
- MD5 4f187754d8a91537df3a6ba9d6a8f550
- SHA1 c4bff2bc57f049ca5a16e76be5b12ea5b0e824f2
- SHA512 5ca85468fe59bc26b0897903297415410f7b68f1fdea64f202682d5591cbd5dfd2b61f115d3e4505cda359dcad02892d4ff65742a8368ac75705b3881f48a3f5
- TLSH
  T1CF81C0D26EF54005C7D57F021C64FA67AAF2728F4CD1F2B816D806D6494EB26BC02B2E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral26
- Target
  Steaxs ReShade/24.STX.Yamaoka.ini
- Size 3KB
- SHA256 783e8195424f578c692990f8b286280a345a09457e518b2e14d01cc24f36a894
- MD5 ee581dc248aaef0b8aa037ec78688eca
- SHA1 1988f950d224db4d29d34b769cb1760a7b9ac25f
- SHA512 8ea578b5b395d5ca5739cfc5e0965e4b5d82a91d31a8a02d141c822e62f3bb7f9b51c7654d4cd4826e054f3ebf8e45b05128a7c39c2a52c64d02014bd71d9bb2
- TLSH
  T16D714BD26EF54005C7D1BF022D54F9639AF2B39F4DD1F27816E812D6068EA15BC0272E
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27