aaed2aa04eb7410e90b6bb06db9420b0e198a16d07470cd70258310fc92b6fd6

Sharing

Copy URL Twitter E-mail

General

Target
Baldi's Basics Plus 0.14.3.zip
Size 89.5MB
Sample260710-v5tbvsf181
SHA256 aaed2aa04eb7410e90b6bb06db9420b0e198a16d07470cd70258310fc92b6fd6
MD5 5433f1e477fca284652204aea7e929c7
SHA1 60834900a17a24a5c98e5e1b788d93fe9d3b4b8a
SHA512 63fc9b7fc26a1983d921152c927e3ab40b7c79c6425abd618647ea9cd9b7dea36a6e4939de9c9af345bc0cb07595f6cefa6becf35cafc775cbd7587c139aee2c
SSDEEP 1572864:VONq8YExVzIc/eI7UdqLNB9W4lLkLLS0yDuuYjvWlXAz18bSF/7UU405W3ILiJg7:oeE3zIO4cLf9W4lLkLLS0yDyvWlXgB7F
TLSH
T1AF2833055A11A203ED09C1B76EA62782EF6A7D2D1D7310C39B15B33231F253897B6BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery upx

Malware Config

Targets

- Target
  BALDI.exe
- Size 638KB
- SHA256 b9bd86d050c90811d037a978ab246b7c06c9370bf25d0e8f83b35d3a1a120026
- MD5 aa9109839dca4d9ab3cf4d4b3cfef9de
- SHA1 2b182e300f3e70c50bb5b059c0ec549fb88670d5
- SHA512 1201c67c9ba6ce424bb4a9ca897d171c28625cbac43afcdd91fa63ee5414dd7b4903e7b81f0533e5aa45471a09753273948063ac2d5368818e16fbc795f111ea
- SSDEEP 3072:FgXpJozm2lkCspYDbM7qaa06/SxLQUOTy4cNAybFt9wDWH3TiOqoqOuV3x+fvyCv:IpC62lkCTw3SMN8Bx+Chw
- TLSH
  T126D4B8B1D6971BA3FB112E30646EC53E68A51C05D91A31D4E2C47D2FB1BC6CB06BE893
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  BALDI_Data/Managed/AlmostEngine.Shared.dll
- Size 11KB
- SHA256 3edf3999f9ddbd6346d7dcec22aece5851ead1f0ec5ea77ce214516e42fd7f6a
- MD5 e78f2bd1fc7ada1a18db202dfb0b9910
- SHA1 b7ba3008b172d2184e7ef9149a7b980f4e70b044
- SHA512 3fa9f390cf1ba3295723367b2485b1e6931d053fef288392f22348b13599b15829207240e868ae434f0c42d119a47d2968f4280fcb022ca3ab0b805a347c15a3
- SSDEEP 192:m4xeVJZfc5rhvVpKzsmYudvSRnY2E919I3yDs7Xnz439d:mueVJZfWJVpKzJYuWE9IiDs7Etd
- TLSH
  T1C0320815B3F88B17E2FF27BA2CF1010823B57667953AD25E6DC4618A5CA33581F12763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  BALDI_Data/Managed/AlmostEngine.dll
- Size 81KB
- SHA256 6e86af2782f716aace5584983f57b71f999825f890cf8fdacde1f3b92bbd15dd
- MD5 8af20eb9e91de32d4097eac44b3bbef9
- SHA1 d978ee4c0ad5fc7bbb027143f83a7cf27dc3ee5a
- SHA512 c16f9de9bd2266f85ea15270a6ab9f290488f94cf8356b310acf22ddb343eb91435c39bd4033788ee9b4529d348a964e9da20162be7f3fa48e215781f8e524e4
- SSDEEP 1536:nqF393usD1MwqwjQ6Km/Ct4CGyWYDAX/hCikscQ1UUUUUUUUUUUUUUUUUUUUUUUM:Mb+d65CqlyPAX/kikoUUUUUUUUUUUUU4
- TLSH
  T1E183287527ED0633CEDFAFFFE82089868B71A516A526FF8A1C14F0EA19523856701353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  BALDI_Data/Managed/Assembly-CSharp.dll
- Size 1.7MB
- SHA256 d03da842dab30d6db414ffe55c9ad82e9fca43a63f4057b964a0a2a8b870c2a4
- MD5 c69d8fcc4266c94c14c28853a29f535c
- SHA1 4a6d25a5c4ebcd80579cbdbc4e5942696b7cb436
- SHA512 e715a8403aa419d0da565cfffab60f62a2bdc0ee66606b34591518fc1e625f3f0f17c415a4be4089ebbc3696f125733e0c333aead71213dfd8334f54ffdd48e5
- SSDEEP 49152:6kNZLQS2OI+M/0dtAfsHgdxkYlBq+Bm1GoqdeYEo:hLQzOI+q0dm9K/Y
- TLSH
  T152855B5233F80F2AD5AF9BFAA0B5051A53B2E8556362E38F5A40F4F92C833541D533A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  BALDI_Data/Managed/Mono.Security.dll
- Size 303KB
- SHA256 8c47b23389f9eede068683ed8b64b5a466f986499112983290778b30accfd1ba
- MD5 f7acab1e09deaa11c9bdd0d723363016
- SHA1 e940058cff5dc584c11dc6e4b111e85a3f6ca06e
- SHA512 ec73a3c841358113a33829b50ea14ec860ccaee883c327515b369d08e3979643466fb57dfd550c62eb1468b6c92c0cb03ffb07505ec77e62bb83fafcd51b2894
- SSDEEP 6144:Buca+sTOwf+31OE5FXNywY1URfxArXj5of:9Ui9kgxY
- TLSH
  T18E64592973E8571EE2EE93B9E4B0442586F0B506BDB7EB4E5C8240ED2D43761C901BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  BALDI_Data/Managed/NavMeshComponents.dll
- Size 16KB
- SHA256 99eabe3e43657f97df595ba735cbfe982abfa2b71187c0ad52cd02b6cf486b94
- MD5 1ca764209f69514fa675d5590164718f
- SHA1 2d49b656c65d59c743349039509da811029993cf
- SHA512 0b15caced302efcfb37831d33c9a798386adc68975af71a2fa396ad32da936aa0126744501a791d8af5ad597914d6577fb36385fcf253469012214e5122fac68
- SSDEEP 192:E62JXxMfL/KunIFwtAffzoNvQ7mM+iznea1PfvIARsQTxIR9hIHrciEXwaDH9LqJ:12Jz+yw6MNv2mFi7/t3DEdE7rf7Tr
- TLSH
  T16372F8766258C62FC6AE0B3DE571472A43F083457D42F3A99EDCE09D2F53398085A2E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  BALDI_Data/Managed/Rewired_Core.dll
- Size 1.8MB
- SHA256 7d72446190a764b782e6bac465b7a687c1b62d4a669be8c8c036821e422e878d
- MD5 d31e76f38a2570985b581b57adafca6f
- SHA1 8e2ed246a1292b109f69af4a12359c3280f10a71
- SHA512 38eae4f8a056f96f4d15e4614c5a74b6dfff56c6923dc76731fbefda200582cb2f9e73226b2a5b11b6b353e177d994cc88be687808c55c08e24ae71147c844d4
- SSDEEP 24576:k+UmGUV5mZW7hsXYf9j71oIdxUdqcAwERuLMMzezG:FUmh7hsXY1qIdKdqcHwuLMM
- TLSH
  T176956B1223FD5E3AD5AF137BF472010967F1E86AA396EB8B1788E4782C837505D52363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  BALDI_Data/Managed/Rewired_Windows.dll
- Size 1.1MB
- SHA256 2d4b94381d6744eae691854930ed2ec016b1c4d3c86a64b81825d1b7f7b28807
- MD5 d9a197710263f1e728b96d05be119985
- SHA1 606922df11c51d3a80bbfd06266949e926464e90
- SHA512 bd685f34a92fbcff4dc87b661422f3ed9188e4de3b30a56e22cb9fc4d466dece8004011dce6397f2bfd0206c5d3f2c55260517ac8ede3cac47cce650c07a95a8
- SSDEEP 24576:dq/pPwHVFPNwV2VYtIArARB6SNbOKxf1P/:dmP+1wVWuITyS5OKxfB
- TLSH
  T1C5459D02A7A40E1BF52F937EA4B6170353F0E609A39BF71F1742A57A2D937509D012EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  BALDI_Data/Managed/System.ComponentModel.Composition.dll
- Size 242KB
- SHA256 596500c15e90d4b63573a19da292009c95b02e05005f48077d7fc0850dd220fd
- MD5 7cfe714806f245e2571e58be288ea10e
- SHA1 4820ec4a7558e18aa1ea151d22cf1920b82b23a7
- SHA512 9e5808152c5921b69f1080644ff84a1ecbf1358475c4c28191bd07a061e504c72264854777c2be38dadb7c250d890285f55d94a394edf8277692a83fe9d79bf7
- SSDEEP 3072:DdpvT15KXwrqrkRixoK47Sr73v/1fLExXEGgDX/EOoRlKPW10QgFLqRRRRRqqS6h:DrvTmUTTOoRlKPk5gF3HoJ0XtCeaK0w
- TLSH
  T1B8343A1633FC0366E6EF0B78F9B584408BBAB916761AF79C2D8461FD09237949901B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  BALDI_Data/Managed/System.Configuration.dll
- Size 42KB
- SHA256 072b1a1c48998733a2d52e1ac53e2d8bd5c618eb4dd17638347a4d9494b08dd6
- MD5 a8841ca20b0ef176cbe7e88ea7401cc8
- SHA1 8e4a9f7fef53e53bd062a6add7e43d055ff9e485
- SHA512 ffba27866803a586d0963883a27da07731de1feb497189d90ccf3f9b6bc759b71ebe9a4a4428f17e8910e9813e6aada7c5a0f2cc3c43179b8e7070b352e55f6c
- SSDEEP 384:HzC2yuMNMMZJN56g8mKo/hjp0r4ourMVSzciDqnjdiaFg9/Ses93HE7LDaXTSv/+:H/yP1Sm3ScrMdWgdVl93kZAarx2ZJS5
- TLSH
  T1A71363253BA3CA7FC84A4775F88381345BBDC3252557EB46E16D7C38585B3A8C2533A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  BALDI_Data/Managed/System.Core.dll
- Size 1.0MB
- SHA256 2d702d211d34e9b94ca18a5ef10a6c2b0fa40fb2cb09751348c7d5bd4dffed02
- MD5 caf99bab07df42b6e4544ae64dc4d908
- SHA1 cac81132ef8a76cc0bee99dfa5ffc2096c02b848
- SHA512 312ae4f3baa0bbae11173961f99d4ca1ff35473fa7432076c36fe07ede4f16b882e03d5dc4216f20091b47763e269be113fe95af9f31927b789c3bf953569c19
- SSDEEP 12288:7HJ2eJWqejMiMRDm3l2fo+5HcXILaRbm57iNC/UB1658SYd5kcowul:7HFGoqCUXAYdecowul
- TLSH
  T12925384133EC972BD2FF7B7AA430023957B1F866A77BD38F112091A99C627448C917A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  BALDI_Data/Managed/System.Data.dll
- Size 1.9MB
- SHA256 23dae8379e8c412f69caa0668be411c87672a775ce473e18faf01f56c114e079
- MD5 d314b95fb863cdd6119abc7e28e7c1fa
- SHA1 5996b5c782631a2e7f276f5f660809c421810916
- SHA512 bd74f8a6d19bbf45ae67117ad3fa8eafc397c16657197eb4dcbad3829ffa6096fc29c692b7dc8649a75c9d6078c8ed123806de27db290a9ecf445143187801a9
- SSDEEP 24576:+etFgYwMkru3rrFdx0dkR9VUJLdaD7y7X5bLid1EB80o6Dpc:HFLwirZ0CUJL4f1EB80jp
- TLSH
  T10295170037EC9A1AE5FF2B30B47505216BF6FC46AB76D39E2544962E1C63B508C727A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  BALDI_Data/Managed/System.Diagnostics.StackTrace.dll
- Size 6KB
- SHA256 4701e843059674accc1c87038ec41f3cecbadce2a65755f527c8b65b0cebc8ce
- MD5 1fbb019db62578427a660fdca39139fe
- SHA1 6c5cee9a58dcf493f94df27b7de17f19bdf021e3
- SHA512 7571a6b15a03b2ac408d219b798b964d90cea0b58ec9cacc2709c1495dd4edd24fd35327e496e945e297f1fc976f128db6ee6a75e1d22752adc7a79a65f3d4dc
- SSDEEP 96:Z5SzrdBy6UFfVGJfFPlcaxvtV6gOCua5fpbe1xa0:Z5QfnUF9GBFPl5xFVsCFTe18
- TLSH
  T12FD19720EBF042B3ECFB0B316CBF57114574B9C46D63AF6A2144421EBC65A945A32B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  BALDI_Data/Managed/System.Drawing.dll
- Size 180KB
- SHA256 41d7f9907c43d1c9dda3cd4a9eda76c836dcc7daf7f657ba993f6b6d9c146ae1
- MD5 1afff3a67c365aed5c2603e9c69d8c51
- SHA1 9a95855ddf016638e72c3bba8749823969fcd9e7
- SHA512 9252dba52939c852f8377a58b2f0ff673775f409f41d5efb463c50cde72da8d1c6ef595f3d1ef94db3351d3b41a66711dc6ed299a8fd1b5a880c04af25614c7a
- SSDEEP 3072:EigawrUmay+yV3XOe3QpYbh+q6FR3F7lx:v2VnOppYbh9Oxl
- TLSH
  T1B504F90867A5B61EE827C639F46081306730EE556693E3CF98583F18597BBEC83273D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  BALDI_Data/Managed/System.EnterpriseServices.dll
- Size 32KB
- SHA256 350fcaab11c39fbb2d9210805fdc4e6abdcb8d6137d4d071fdc9d6460a8664eb
- MD5 cf30632a7fcb7ef32dcf5c3a027079ff
- SHA1 35d5e6d2cb50a3e6ff72d96298c88c3179f67ccf
- SHA512 a25302a62a9de244e39658dd335a0b435a34a8a8b6c42d8ea411f7bcaa5a6894588c64f16bf070df714403821444b195715a019bae29376899be0a279c53f348
- SSDEEP 768:YttFDPgwXPjXVB1SeXbtjfLWifV1jmadK/wDS1ubnJkQK:YjRPgwXPjXVB1vXbIifbm8KoS1urJkQ
- TLSH
  T1FEE2D5769BB1CE6ECC476336FD63023423F4C3087637EF17A605A96A1D877AD8212585
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  BALDI_Data/Managed/System.Globalization.Extensions.dll
- Size 6KB
- SHA256 4e8c5ad3450450ba6bc6a474300f2445094870f2bcc9ca16472fb2f3adb88ebd
- MD5 f09c5ddef200f21725e5fde17d3b9016
- SHA1 44bff1f24b235f742f84e4f152e912fa0452ec9f
- SHA512 d966eede100800f13f6c759a59410758b137379aae5ad4f770e705197fd02b6b7e7ea26f08a9bddc10fbf5e01948117e3721248603d5e40756f458f20edbf6dc
- SSDEEP 96:ZA4ggaqpBVwEw8xv1lOH2OARPtcRQKRWen0R/0:llLxXOZARPCRpRWen0R/
- TLSH
  T139C19721FBB44226EAB78F35BDBF92C15677BA51AD23D2AF5440414D6C062088B32F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32