5b8eb82ae04bb21b75720ac535e78c26c3f068ae116e5e00c68eb828a7495ea2

Sharing

Copy URL Twitter E-mail

General

Target
zork_installer.exe
Size 1.0MB
Sample260710-cx6ccadt2x
SHA256 5b8eb82ae04bb21b75720ac535e78c26c3f068ae116e5e00c68eb828a7495ea2
MD5 f4dfd31744da1c33b95b170e510ca3a0
SHA1 731d6bcb3000ac7e7ccf29c3d88d80ba1e830f1e
SHA512 5648f960c594a3cbcfa648bee497f6f346ebd79dc5807a3a8d68bea20dceced4a26f4b5a42af94e953d3fe8e26387398f1cb8946c3d767bc1176d3cd733affee
SSDEEP 24576:jyWZ0l93BKuDMX7pSyRz2Gru/0tzT2xUaUDaZa4TgalkC3U0bQFH97ks:u9NMuDMFdNao8a1d77
TLSH
T11C352309D7709BB7EB4027B97C115E5B02EFF661053C1F4B47802E24B937B9AA1B7291
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  zork_installer.exe
- Size 1.0MB
- SHA256 5b8eb82ae04bb21b75720ac535e78c26c3f068ae116e5e00c68eb828a7495ea2
- MD5 f4dfd31744da1c33b95b170e510ca3a0
- SHA1 731d6bcb3000ac7e7ccf29c3d88d80ba1e830f1e
- SHA512 5648f960c594a3cbcfa648bee497f6f346ebd79dc5807a3a8d68bea20dceced4a26f4b5a42af94e953d3fe8e26387398f1cb8946c3d767bc1176d3cd733affee
- SSDEEP 24576:jyWZ0l93BKuDMX7pSyRz2Gru/0tzT2xUaUDaZa4TgalkC3U0bQFH97ks:u9NMuDMFdNao8a1d77
- TLSH
  T11C352309D7709BB7EB4027B97C115E5B02EFF661053C1F4B47802E24B937B9AA1B7291
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
behavioral1 behavioral2
- Target
  Frotz.exe
- Size 1.8MB
- SHA256 b29c05cf3c96cf28da29bc08bbd4d5ca4b09680a5c474cda16843dca4dd22227
- MD5 389f47c588ff877b49ad90313e2e6ada
- SHA1 03b325c14563baf741fe28da6fb1dc4832dd1338
- SHA512 10eab2d502908a0c1b2ae9a511e925b28881268601c3523953011fc21e3f392028433928bf5da2dd414406eab9a2fcc2e7ec2a94614165054aa77336a31a1937
- SSDEEP 49152:OZhf4A5U3/C5+oV5EhGZKVjvtuLDoMM6VT3McMMT0DC0xQMF:Mx4xq5vkVjvcLDoMM6VT3McMMT0DC0xP
- TLSH
  T1B0857C02B552886ACBD20030CC6AF6B5DB287D2C4BF689FB77C07B6D78709D17A35616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery defense_evasion
behavioral3 behavioral4
- Target
  zork1.z3
- Size 84KB
- SHA256 37084966477dff679282de42974b2077156b1bd68fad92a65d4ea94d8eb64d79
- MD5 1d4606016ea58ee038da53d994392323
- SHA1 c4f162274869b5433e4b9dfa7ee770fc3b789525
- SHA512 34730ee578c36270230f795de451f8cd186143d072598266f4adc8baea083ef19ba8662f2eb77dd8a71deb30fdb7ae80d13ebb7cb7059f43d5052971ea2ff0f1
- SSDEEP 1536:r9DT/bsEUAE5uRWmRm+/xDtVkYITzG6ultUkgDXLp/HTKqkbh7Y:ZDTjtUAhrIWxrITS6It6l/Hu9Y
- TLSH
  T17583F1834E496C14D82784390EA56F75F37C9295732BF35325B1B6FAEE936928F090C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  zork2.z3
- Size 90KB
- SHA256 3ae7d5558943e9721f3e4b273c8a7faec1a03a604e1ae4ee1cde472c21cb24ac
- MD5 e3fd4c0a04481c2b5f66fbee163d92a1
- SHA1 6e5415ace76ad235a307a5d4a2e88a8980b9f193
- SHA512 3177a621719f124aec203c8d6397bf5d462526c0ac570f41933ea8dbdbb6105538d642da629d1fdf594d7335193c97861e42d97f2c419e9aac4c17c93d82aae9
- SSDEEP 1536:ODucM8IwEp33wNIjdqw1h3IkF86kl5wGT4tptGU7JU3Pmn+1E:8M8Yp3315usasJU3Pm+m
- TLSH
  T16A93F1C14D828044C835283F9DB76EF15735EAECB34BBB530B80647C9AC17D79E269A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  zork3.z3
- Size 85KB
- SHA256 b637a242865d059890184164ce8dec28554cc80901dcbf26c740b2d1ed0d4eb8
- MD5 83fbb273398fe3c7b5f731188b1958cc
- SHA1 0340b09fe05cf3ba0f01c04a7699236e15ab2aed
- SHA512 8c8d7949d39f8276b7fd0b090377d25af3ac08a580563148ee96f1b7deb706b32a1f3f288cef1a5692ef9bf5ea112fded6c641de50176882a955ffde0be85f6a
- SSDEEP 1536:V6bEPz8DFWZrLQGwMN1a/nSUEeb1/fYadrd0+UX0x1Lqt4y+O:zPocZrlw23eb1/1d1UCa43O
- TLSH
  T13683D0106E45A811E827507A2CB1EEE1F3AED1F8D149BB030CA8367CEDC62FA5E47575
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10