161ab568330255cb54b293f50d9941a0ab36c0808ed82708d6e409e46aba3e11

Sharing

Copy URL Twitter E-mail

General

Target
Kerbal-Space-Program-Windows-0-18-3-en.zip
Size 236.8MB
Sample260711-dpe1vsds7v
SHA256 161ab568330255cb54b293f50d9941a0ab36c0808ed82708d6e409e46aba3e11
MD5 4e188d0fde48b65e66d9941d0041378e
SHA1 7462d91e9b879e1c4ebd8e640ada40568cfe671c
SHA512 d512f5cc6f45803fe9ca69d0f8002d7c92daee5765cf1a68a9f1b482052c0124225ebb88a32346c5afd34b6abd2eb492f4279b87ed80c2dc4ca3aacf35b23630
SSDEEP 6291456:KUR/W843tqFCiw1FCwJ0N4uLKDPzzBVMFX4yVkODeNr4zaBWEHeY5OOWTy2HUpr5:vpG4Ci2YH5LKDP4ZkO8r4zeWEHj5o015
TLSH
T16EC83390D051F28AF55C207C454119C8B48FAE3C61A6B6C96322733B5277FEB3EABB51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  Kerbal-Space-Program-Windows-0-18-3-en.zip
- Size 236.8MB
- SHA256 161ab568330255cb54b293f50d9941a0ab36c0808ed82708d6e409e46aba3e11
- MD5 4e188d0fde48b65e66d9941d0041378e
- SHA1 7462d91e9b879e1c4ebd8e640ada40568cfe671c
- SHA512 d512f5cc6f45803fe9ca69d0f8002d7c92daee5765cf1a68a9f1b482052c0124225ebb88a32346c5afd34b6abd2eb492f4279b87ed80c2dc4ca3aacf35b23630
- SSDEEP 6291456:KUR/W843tqFCiw1FCwJ0N4uLKDPzzBVMFX4yVkODeNr4zaBWEHeY5OOWTy2HUpr5:vpG4Ci2YH5LKDP4ZkO8r4zeWEHj5o015
- TLSH
  T16EC83390D051F28AF55C207C454119C8B48FAE3C61A6B6C96322733B5277FEB3EABB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  KSP_win/Internals/Props/AltimeterThreeHands/model.mu
- Size 26KB
- SHA256 8d17259f8eda712df718f28dfdf9d0e3322c343ad7379c52b663ef779b8a60ac
- MD5 724a9a6e5a479df9a35fb650a76538ec
- SHA1 e467bdb5ca2507a0ccd172ad7b1d0e524e7ba606
- SHA512 24ca56ed04008f8d8a9f9e0039862eea7344cbe805f4b6f9242062c83898d9d35171b3c3cdee10cfbea4ad921bfdf683e014acfe7bd01b1b1293e7e612d1bb8f
- SSDEEP 768:zJFBKyShN5DR3vH3e3z3w0Ys8R/X/ve4N:zJFBKyMH3e3z3w0YsK/X/3N
- TLSH
  T166C22955BB21835CE53189F1247B7F52C4A9C2CCA2794A337BBC841C2ED2B0DBB91275
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  KSP_win/Internals/Props/AltimeterThreeHands/model000.mbm
- Size 256KB
- SHA256 68c4c1d176ad179ba4cdc6e74aa994a5c83c0534b7e71761e63e38334027caba
- MD5 c4bf0b895f8f3f3dc95333dc4cd3e235
- SHA1 becfc6710f4c7383ad9ca989388c871eb74e33b1
- SHA512 c25d8df02303d15ef4ce7f723be0e6868cde57d4685fe451343da8e6dfe55cb265f998a2335d2333464eb29985943a4069909950e9de54ff71249ba904cf20b3
- SSDEEP 3072:dLzQ7scN+j1DUEs05u0nlJnIWhyzdSMmF8jiF4Sy:eQ/wq/nccMmFQi+Sy
- TLSH
  T1A444C590F92E0D252677B40CDF32DF948F6C255754B2FA6A70EBB032AA586507B0D60F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  KSP_win/Internals/Props/AltimeterThreeHands/model001.mbm
- Size 256KB
- SHA256 0b771e15519ab945d227b3dbfc00d295a027167a3b7685e1cf437e8c01df4c72
- MD5 e74a83801decc00b4c2398d471964099
- SHA1 401c8e1ec3f3e465f4a9fb0f7fbf8f234f2345b1
- SHA512 1ea1f1389545cf4cf992b6ff9904b96943bd0fdba1da93e99c9ea0c35fdf4d8f5956e344112933522956bfaba161ef01151e84e5bf9b7e96a4e2b4bef07e788b
- SSDEEP 1536:wtJascyeoZX1ESSXxdc3EO/HzMokXs5Iefe+R6cIZzAu+HqofUzV73BXu9dqGFki:j2
- TLSH
  T19744358792E23F45282E8762EF2E89FC770EB3408E4C7B5911199E2741B117AC577F92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  KSP_win/Internals/Props/AltimeterThreeHands/prop.cfg
- Size 245B
- SHA256 cf73bf75969f06e976186f1f01c1093bba7714ed33c1e84bf4f7adcfba1f67fc
- MD5 6783149154a8ce94b267182560de1e39
- SHA1 056e897eb3e6e45a765de70cfafcb95584d1d916
- SHA512 ed71fbb2532895afa49e883b7ee8e119a54cb6df34bd6cf4012a1c1379c917d7a5455c492f8c525eab466df9cec86b29c4b1fbf83accc59d4106d1cd70f6832c
- TLSH
  T1BBD0A791708F832843B6A72960132508BF7E532A3F0B900D701DDB505E7ED13D1C2D0C
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  KSP_win/Internals/Props/AtmosphereDepth/model.mu
- Size 11KB
- SHA256 032f0e5897a9d534af0c5bb158420f4fac39357cca72f3db8805cff6bb8a453b
- MD5 8dff4f5454bcccb9c9e497f87e288ac2
- SHA1 89952c5b3d79fb376c0d2b945682d151d705c419
- SHA512 8b459e4c6d06eeb8b86a86d901ebae2445966b61dcd70611f5a9f68c5712fd77cc39f15b6f59ee92e77f147b3b140366499c03b105eb5d76ed9732f537365596
- SSDEEP 192:TKRVcNR4/oMpMh/FeDqJ1feDqJ1Y2Sibp+7Lblp+7Lb3gi1coXw:TKCheDqJdeDqJlSSsZsjgYnXw
- TLSH
  T1B1323D65B150831CC974E63660BB7F39A06BADCE8B354E3763B9A01C2CC63CC64987B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  KSP_win/Internals/Props/AtmosphereDepth/model000.mbm
- Size 256KB
- SHA256 31b81a20c2dbb86891ea748c8c5527bf99f69c5d2de50e09a50772592705aab9
- MD5 f16775f59bb4082f899f74e01f313cf7
- SHA1 98a37d6e2635d1f15e6b92f8afe0f0825ab87a25
- SHA512 26eba6771862a4b9779cb01a8cd8b0633972a3974182dbbe56ed861b5fd73ebbcd2340e94f46bae80e9f5cee6dc63f4ad38442e9530d8dd9c3ae24d5c2120d36
- SSDEEP 3072:QNuyGD6bWjeYfpYCCO3TS9OSl9i+S9b8WixKcQ:6rIfiMYjYb
- TLSH
  T1A2446621836F585E89577B1886AE308D8DE6E16EE41EF46F700F6815C7B2CC2887C5BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  KSP_win/Internals/Props/AtmosphereDepth/model001.mbm
- Size 256KB
- SHA256 653a3dc59c6910a5c7a9bcb8bbec75bccdb9836ef7bdc8b5a08f4b477e9a1659
- MD5 7cb3769faea0d561cb0e95f0dfb5de13
- SHA1 4840b060f3e6f9f75cd9380613f6a58ee5589ff7
- SHA512 068f4090ba5cd9d1cc75a3b9621691b7bb4d38b7937e990dbc147212b59bce512ef4256d085c7e3b85ab3f9de159355b371e488eca8cc1db85a343b5bca617fb
- SSDEEP 3072:HzOiBCzd1+OlkLZq9ePLcPZIt2D7ryPLT4Sh9hXTywuVsQUBJQ:Hqd6lPgofmR
- TLSH
  T1CA448812832FB85D8D973B5442EE20C94DE5E16DA429F56E300F2C16C7AADC28C7D6B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  KSP_win/Internals/Props/AtmosphereDepth/prop.cfg
- Size 255B
- SHA256 0f416def6f7d89320384b9dda2c12120126722b952420dcbad08ceed22a53957
- MD5 91d8dbe5986b28174ec73664ac58a34e
- SHA1 fc3fd19a0e9c65014386390c4538fc7983d7743d
- SHA512 b3a4bc632d6d7cb22a01b129d925835e308b1137de421f20b7e8abbcff8f2d45c7617f391db27ad8a3b98c9ad44250c8d844b7163de06a75a8f25716ea16ec32
- TLSH
  T1EBD05EC301A70202A2B9FD3888D52A40AE9A29721FC0480979584589EABB8C19A18F8F
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  KSP_win/Internals/Props/AxisIndicator/model.mu
- Size 7KB
- SHA256 b98aedb81cefd27691702ac1e8610367136dacc3e077efd0441a450de488004d
- MD5 f036a2776c4a9c78e5618d3901cd57bd
- SHA1 e1fd4da12460fda7f5c73cb8ef23f8eada9195dd
- SHA512 6728f05e85542d96662e31fbe458d2a12dcdf268bfeac8b025a69c9a1648f513454c511f291e84db6e31a13e340ffd195f4c653d4e51cc301e85f9d5f504821a
- SSDEEP 96:Cy5aey5azcYO6DgaRaQHoaoMp+7Yz2/XXblp+7Yz2/XXb3gejYa1coDrUjvni:xadaxp+7Lblp+7Lb3gi1coXr
- TLSH
  T1B3F1EB247250420CD474E736A07B3F7E954BEECEEA390C2BA3B9A54C2CD53EC65542B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  KSP_win/Internals/Props/AxisIndicator/model000.mbm
- Size 256KB
- SHA256 31b81a20c2dbb86891ea748c8c5527bf99f69c5d2de50e09a50772592705aab9
- MD5 f16775f59bb4082f899f74e01f313cf7
- SHA1 98a37d6e2635d1f15e6b92f8afe0f0825ab87a25
- SHA512 26eba6771862a4b9779cb01a8cd8b0633972a3974182dbbe56ed861b5fd73ebbcd2340e94f46bae80e9f5cee6dc63f4ad38442e9530d8dd9c3ae24d5c2120d36
- SSDEEP 3072:QNuyGD6bWjeYfpYCCO3TS9OSl9i+S9b8WixKcQ:6rIfiMYjYb
- TLSH
  T1A2446621836F585E89577B1886AE308D8DE6E16EE41EF46F700F6815C7B2CC2887C5BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  KSP_win/Internals/Props/AxisIndicator/pitchConfig.cfg
- Size 246B
- SHA256 b2f259112973c7be67cbb9e082936653b929571eea6a0ca217f91dd34c2ffdae
- MD5 b5b96b9354a3b27c106d0690bd12a2c2
- SHA1 496e7ad2ce9f21b38b453b1e5f9f9aecd8b061fe
- SHA512 29b1e1cd8eb64b110f81a645e546a8225a59609e01187ee1c6be4d3768c1f273c7c9fd110dd7e52482d4ec426af73b79c1a52d5d087814ad0d4bf06e841dae42
- TLSH
  T1A3D05E76418B420353BAFA3CC8C52A856D8605721EC1440D706850949E7B5C38B21F0E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  KSP_win/Internals/Props/AxisIndicator/rollConfig.cfg
- Size 244B
- SHA256 5d6a6d6ac4ea617a3b611f5b27224dcf51dc73bc27b17a50388204b9e5b7c9b6
- MD5 cad8efba4cdb29ed4e3a752b32af60e1
- SHA1 a4bd90505c3ad8d0a6c52d8e98c5eb6d1ad8aab1
- SHA512 9051117cdc2a34f780d6be7e7900ac86d7e155ff36884b52bc4e734d3fe716b84b2be758e45b45ed43c5490d8cd9cbcf5737655146def85224c872c878634094
- TLSH
  T168D052AA028B0203A2BAFE3C89C12A44BC8600322FC5480DB0586090DEBB4C28721B1E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  KSP_win/Internals/Props/AxisIndicator/yawConfig.cfg
- Size 242B
- SHA256 3405599ffd6cad3364c2d2e799ba9c8b8dde19ed0af5f906ab34ca86c50554eb
- MD5 68564fc0d93b2db277ef41d177c5a66d
- SHA1 adb399420d11420cd98fa467533332e3f6219d8b
- SHA512 f2e1e7e4b28ac5ec237a31f0621cfcaedfc74ac1d2d6e9b875adbfc7c5bfc8e7df8aea2154c5132f473af5505f81d285d6cfa6963a5d80bd85e044b06fe40128
- TLSH
  T179D0A92A028B021392BBFA3C8CC13A44BCC600322FC1480D709C7890DEBBAC28721F0E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral27 behavioral28
- Target
  KSP_win/Internals/Props/ButtonSquare/model.mu
- Size 5KB
- SHA256 3338fc065144a6b249ca108bde94d65a0015318ba1c86929576b12e3f0e75116
- MD5 28e9fc1c68d240293cae8ab3c48e5582
- SHA1 65fe075fc4c9505c5af94d33e369878c7c3f31e0
- SHA512 0f674c77d974a1fb829931e7552b987562ae3a6b4aadac2038cf06a84b76e9ddd02eac98f881d977bc3bc4b82541f0a479dc66c07613770984cce2d0672b126c
- SSDEEP 96:9ELZxZxZ9PZxZxZxZxZxZxZ9pnXJteoYN/ccDzDrn97MJqs6:92ffHffffffDnXHedN/ccDzDrnSAF
- TLSH
  T1B3B1D966E4510A28EC34C6B550236F26A94BE8CC613F617383B477ED4CD6258AE0B2F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  KSP_win/Internals/Props/ButtonSquare/model000.mbm
- Size 3.0MB
- SHA256 dbb7ceefc14232e06000aa674d6a3ec71968f50c79d9da6c42c2280ed3a995ac
- MD5 7fdae240fe959937f1644c5e316b6bb9
- SHA1 533097969e6d02809b77873438089472f70cb763
- SHA512 59d2a89ba4fa9856ac8a6b74330c4091765a78eaf042f5e0fe790a01525fce1c5c27f37752c492c824cf050976231e06a09be5d1f7a4c09c38a04b16007746c4
- SSDEEP 3072:m/Y/X/b/tx6FEz2zdKR2m5hF3Dd3if7HXzXuXBXRXdXSXbnY7HpHbHc9RD49ZzxX:5432xeW/
- TLSH
  T148E570947337F6115428F43A663C46C7BA9F5D066630BDE18AFB2B3A7979278090BC13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32