13f8e1fe1051060f6e52b429f7963efedf2fbab78fa11fb1f38c586c57e3b427

Sharing

Copy URL Twitter E-mail

General

Target
CloverPit-SteamRIP.com.rar
Size 145.5MB
Sample260711-y9vx2acv5v
SHA256 13f8e1fe1051060f6e52b429f7963efedf2fbab78fa11fb1f38c586c57e3b427
MD5 3eb6df9b757720b0ee3452ff1df2bb0d
SHA1 c305cf4ef303992196cfdfe1c09beb34c2a480ad
SHA512 89b7ce134a2b2daa1fcb0b72c00bd1ce57b55e8ce1e1a2b49e34e10a1499e9b327df0e43fba5aaf04fd85e0dffa3f3563565ba00d3a988605551fdd781f8d3ec
SSDEEP 3145728:CHNkNUSUIrpGMUQCHGW9GM2MhprYQ/DgDPEQ8tFrQ5gwxqU3rb4R3aSj:IeNJUIVBUQlU72MhprVDgD8QsnY7XUqI
TLSH
T1F4783373A75EF83161ABA0B6530B7B706862F8165080FEFEB5EB95C0AC11E15FDA41C1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  CloverPit/CloverPit.exe
- Size 656KB
- SHA256 74dcfc9fdb67e02ea0e6435c5c3e8ec3be8735f16427d58fc9a66b9860c54888
- MD5 95e519edf49d0ba9f008fc8c5e57805b
- SHA1 03746c14ce4f96e46a7f9ac86e19980397d8a2bd
- SHA512 6a6678e8d03d1f02e3d914e9e3d0c202814257b799bb6ed07dec27c60a338e6da4080d311377837b294c42412af8e702f9883dea4ddabda23879112e6c1d3e31
- SSDEEP 6144:W2E4CD20ZB4Gr34QHHVW3KYWd3P69h6bweYD9Om94Y2cun0Hc6qzMROlMWrjaz:W2NCD1Jr3dng3SP6EweAsmPP8UEn0
- TLSH
  T186E4E6251748CA5BC6822738D5B2E3FAA2F89D92D978C3475EE03C937E74EC52D462C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion spyware trojan
behavioral1 behavioral2
- Target
  CloverPit/CloverPit_Data/Managed/Assembly-CSharp-firstpass.dll
- Size 685KB
- SHA256 66740e54fdee519601318c5757e2552614b17a6f270d5e20752e638c320f7ac2
- MD5 233cd059edcb4960770203ccbeec9088
- SHA1 ec21de4df6cfad5081850986b000bbb1116ee9c6
- SHA512 9f27d0cbc34c8158cce1c0351447bcb9930834f214cc872929c8e74e466c4f0bc35846f025dc8e1c27fea7f2148ea84010d078932ad651921dcc22899d9e3d87
- SSDEEP 12288:8LrNSLCl5NA02heu4cCEYgrrE6/UEl4vtp1FAcs96o:8LtjENv/o/FAcC6
- TLSH
  T1A4E45B0233F8A626C5BF1B3BB076491912F0E551A796EB4F1594E6BD2ED3BA04D013E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  CloverPit/CloverPit_Data/Managed/Assembly-CSharp.dll
- Size 1.1MB
- SHA256 7f337787fc1147498f393130c20e39f5917a25324cd1a60fa278f1aaaa4a1d17
- MD5 ad0b64b6bbff11690bcd5c7a76bea290
- SHA1 078724d02cfa8249d665acbe51b26864e6bd5c08
- SHA512 ae580c56fefac6f8c02281463364ccbda2eadd5dc7832359ba01de956ce761a7d6258ec31bdc7d87d02be2c840fc70b992613e762e075c895b6f8d53769e6d20
- SSDEEP 24576:/myTI9jhJQSDd5kybo+9uwqNIKj89GQnNbEKb2ZCeCcR:uYI93QuVs+9uwqNI56
- TLSH
  T114453B1077E80836F1FF3BB6ADF98508A376F5DA8727E65F2152916E18927484E02373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  CloverPit/CloverPit_Data/Managed/CustomInspector.Demo.dll
- Size 6KB
- SHA256 c43245c6a8d6e0563a68a59af32c8d38b4d20554b7e050b667d54ce30a99645c
- MD5 21a4bff45ff07c2ce198c4d6db4e6827
- SHA1 179d03ea95c5911fd8541bb2f2596d260f2f2f9d
- SHA512 817986dbff8f3965d824c5dd94013529e41450b9025b2c0b383a541355f2c5a71c1eaff60be63c008b156480edb66dae5cf3521613d60b8d69d9ae8d6f51b03f
- SSDEEP 96:iQfWbw6H4trr3tmw2JTVz95t1GCIzEJpJkxkaX30pQYHM:ffZrrc9JTVJnQIJpGuw3x
- TLSH
  T13CC1C715ABF80677ECAB1B3D4EFA83511771F809ED72CB5D289C062D5D25A040B32B78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  CloverPit/CloverPit_Data/Managed/CustomInspector.Helpers.dll
- Size 10KB
- SHA256 cc59bd73337819ca6d51665cf2e93f773e8f4212a426c4a29bc6fab151895c23
- MD5 1b00885c433ecd68ade4052f33e97a4f
- SHA1 a1860ab2793df006138ce7568c73984648b678d5
- SHA512 43479dfa62f7d4efa46f90e540fa72641c36e90bbaa1b970a582eb4736f48feae308f61ca3dcfb65860601becda6502346e5003d3ca86de277be9c3e6c5da28e
- SSDEEP 192:ke1j8rTirThOyagX3EXGohK0N84WboR/fiEhDs04szUdvvDlxur1:kY8rTirThBaOyGo0oR/Ls04b41
- TLSH
  T1CC223915BBF4463AD9EE033A1CE2466082F2D1A76A62DB5D0FCC12B93E617441F173B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  CloverPit/CloverPit_Data/Managed/CustomInspector.dll
- Size 87KB
- SHA256 2e3757a2253294389a5bde022b26c97a78ea872731557739c8e1917b2b0dc10f
- MD5 9101de56afcf362ec33bd7284cd22123
- SHA1 581f710c62471c3728a567e65ecac46058dcf4ad
- SHA512 0e7dfdf87a98a7393e2c80bec2924034d020b59261302810e44c39120c1e4285203e8f7535b23940ca3825bc50d372c98ab5b2e531a9358e842a49faaecf9048
- SSDEEP 1536:62fnXOmoHXyThWhMwLcMAL353w333bhOFDfB1B2Sc7wrMm3hHdrqLqC:ROX3dLgkMj1tVdrqb
- TLSH
  T10993C61063F85B73EDFF1F35F8B922910A71FAAA1873DB5D124C906A88A1B411B60777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  CloverPit/CloverPit_Data/Managed/ExcludeFromBuild.dll
- Size 6KB
- SHA256 b56afd7e53419c41c66d76e8d13ab55bfd7fdb104445744a788f4c5520366f16
- MD5 97f004e51c3f32ae07d5dc6c4489546b
- SHA1 0b75e4ffe1fa9d5c70182e7ec4164575a249e51c
- SHA512 868b47cb2ec6703bcc503c62d6f7e9644cf550cde04c6f57ebb4b32bb088fded076430a769fdc9933a62808d8a572ca585f91d9809e6557f2523e78d050b724a
- SSDEEP 96:UeULVka9NU2kQbx8W0JETNvF+mkxkLkX7imkGkVkYkmXqwmw:UeiVk+phN0JETNvF+buLScHqZc
- TLSH
  T118C196519BAD4222C95B13F45EFB931233B8CD60EEA29B2A3481484DAE253641E397B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  CloverPit/CloverPit_Data/Managed/Facepunch.Steamworks.Win64.dll
- Size 561KB
- SHA256 5455938d4c11f198103c6151897563707b0a27625be451d6accd12df6bc7db40
- MD5 dacfb79e89b1fb5dff1ad3049f78f8eb
- SHA1 a6ca9228b0dd8fc0f8dd8ddd43fa98153cdc7ae6
- SHA512 1d74f52ab334d3fd6182fef8ddb6ef844d146fe1adc96505d91ece6450b1b4573fbb6519457c0f4299b82d28faf4ae35f1c4afdc55b86c3320b8700902be2ef4
- SSDEEP 12288:UEU6k6nz3x18btUDoxkyxVQvVM1JWa8JCotVB+MUReTRx:UEbiNxVQoJWa8JCotVB+MaeT/
- TLSH
  T13FC45CB1A71C6A7AC69E4636C0524E0F56B0C00B5692EF9F2A88D17EEC923417D773C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  CloverPit/CloverPit_Data/Managed/Mono.Security.dll
- Size 235KB
- SHA256 d0841a01f6007125e65357eece0ee23c2968da4d73abd5f0f8b1f83e5ae4936b
- MD5 d01b669af495af0f2f3f2864f61a480d
- SHA1 b9105b2688664b6656f1ef770527e0d0caa278a4
- SHA512 6161fd980a7cbe3f711013a8f971796171478a93142be76c63c3269baa819ea7df1b8b7198395b5da48941d28b1757ccf5515022f278147940c44ec797825b09
- SSDEEP 6144:WUjTQ70cnf8MoVRxS9iJdBF119RJXG2yB+Q:XEiH119RJXu3
- TLSH
  T1C6344A1863F9531AF6EE8779D4B15019C3F4F50BB9AAEB4E5C8282AD1C027918C41BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  CloverPit/CloverPit_Data/Managed/Rewired_Core.dll
- Size 1.9MB
- SHA256 9da2fbad35088293dc897cc8454aad20f4d77b2564bf4169cb05176787b03bb1
- MD5 ec98aae8ab8a24770c58ab503eba8bc9
- SHA1 b650476536a2b95150fdc475b424a93a946bcd4c
- SHA512 02a18938ee91e7a9087e08f0f92acafc33230a491cd1b69b937df9952765afd707e80d307604db2f5e384684c85ca0896fd22392d517e571ea053fba94b687ff
- SSDEEP 24576:ny2vLAB1vQuc1cUJ05Ij3CEB94epYPLjUA19dgpZ1U3uVkI:ymLAzbUJ007YPn5dWs3uVkI
- TLSH
  T1C6956C46A7F85E2AD59F173BE071111963F1E8A9A397E78B2384F6B83C533506D02363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  CloverPit/CloverPit_Data/Managed/Rewired_Windows.dll
- Size 1.3MB
- SHA256 32053c5e8793dc6176cfb703ef0a224c97b409ed97b6b977a6408fdd7f6b095a
- MD5 8cc4919a1ca779b051040a68028715cc
- SHA1 90c493c85055e4198ced83e868d3e2d6c9f1b70f
- SHA512 62c0aea37c4067b7cf7719d1bfe51e0e3126a5bedc470104fc8b3edc2aa5ddd0f724f9cf71cb4b04c54a769e5dd805478af403f0cf7bba0367f3d2525f5f528e
- SSDEEP 24576:3q5xP9n5Yh7a6k0w5ByN7aHCMVhoe3qDKj/:3S9X6ABW6CMj9qO
- TLSH
  T1B955AD81E7944E2AD95E437BA4E60B4623F0E509F7ABE74F1390E2772DD77409E012A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  CloverPit/CloverPit_Data/Managed/Rewired_Windows_Functions.dll
- Size 5KB
- SHA256 c7712042f632e2297c05bc443918c36641dd0564c6e45ee2096b190bbfca6da9
- MD5 b11a0e6078cf31bdbec7bae94902e133
- SHA1 f66f337ec1b684aca1efbbe6d09aca05c00f11b2
- SHA512 f3446780181f3dfd439d67eb27c64a5efe4340b1b5be2f34dbaaa899db9b00b8fb865207a7c535d52a9bf1c00955f5034e3a312e2b0438717c83ca9fb6fe553b
- SSDEEP 96:WKqKha2eTh2g5XrRj0ckvfkxkHPXS6U2Xn:BhveT4Ir6FUuP7
- TLSH
  T106B1A97797E81272ECAB43364CF7831526B4D8114E93872B6A9112ADFD311A84BB2F74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  CloverPit/CloverPit_Data/Managed/System.ComponentModel.Composition.dll
- Size 251KB
- SHA256 9ad27694f7d30fb6094f4cc692dd35640fb467c44ab23d5c452145d82f0d686e
- MD5 d02087ea471a3529ae604c35e468ec10
- SHA1 1d66b0e7e415aa458456e104a78e16dd4714761d
- SHA512 10847b60851d44fb9c07e060ae5647e094a24d57128e9b7ed0e1c494afff82aab4612e9c1881b57f6fd649c78b26398042144b76bbee73131fdd7c69f94a821b
- SSDEEP 6144:AkwkYfxuS0ZNORl1X1XYZGFU+22kUgUlAwU5e81hXJXee4jsURlXXMAX8O33iEP3:AkwkYfx8ZNCxL
- TLSH
  T15744281533FD0366EAEF0F78B5B480148BBAFA06B95AE71C2C8951FE091379499117B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  CloverPit/CloverPit_Data/Managed/System.Configuration.dll
- Size 122KB
- SHA256 33aed102dfc5fdb9cd93c1178bbe84993edc4efce890c04ddafc2508d68aa33a
- MD5 3a1af0eed68641002d7c9e61de5da9eb
- SHA1 c4e1ad3f98db4964b6fd3dfd23809d7313dfc0c0
- SHA512 d7f92fa07ddf28a6fc38e899bed553cb514bb68a5f77a6e4773810b36e5ccd60ee4b9ecefd442af858107fc24ef38b9ad6fb1694d42032229174c85c63d9dc28
- SSDEEP 3072:oGHTFkizuGCOE/htnREcacWown5WJGL0MIeggNe:oGHT5+H/33vJy
- TLSH
  T1B9C3F92563EC872BE2EE177EF8B515100FF1FA0AA436D74C5D89B0ED1827B804662367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  CloverPit/CloverPit_Data/Managed/System.Core.dll
- Size 1.1MB
- SHA256 1f7cd3e9d8013fad396891463208cd5644a8bf0c537f142ac940465985ea2696
- MD5 e6b381051605ca4ccf3e80040bd43de7
- SHA1 df608ac1ed9d63f80c6cbfbde4121c5153cacf95
- SHA512 c0348df8c7ec09ddcd7b76bd43f3923dbaf0570a8184f5cd6781553adf8a86a147791ff11e8e6eb8ffb032c4d97a7fcc3fda291443b48152caacd124ff1e0f72
- SSDEEP 12288:KWK8Xi19FV57751umv0RX15PgLdfJ18VjjvM44hvetIX6e+CxHzR:Al/umv0Z15PyC9vMNV1+CF
- TLSH
  T1E4354C01B3EC9B27D5FF7776A4B442A007B6FC46AB3BD78F104891A95D56B008D887A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  CloverPit/CloverPit_Data/Managed/System.Data.DataSetExtensions.dll
- Size 29KB
- SHA256 55b48f1e94427bb3bb6a52cee30f75d56e735986e77928702ba73dc182f15180
- MD5 1bac798a8705e2c25b14cf3e56f2ecde
- SHA1 fc73c9aebbfe69cebdd8be0f0d86f24813c092b1
- SHA512 818afb9b5fcd6ec470152456a24db296a6652f48179b636d29fbe866defe1b7dbc86db696d3e171b9ad3769b9f77f9f27988c8623dbec68a65b14fc43a683f87
- SSDEEP 384:BEAjm7aELetOdc8l4LodMqokNv2Y2rsFKOlIcMYOxnCsnRbli3ESmMadMkrVr5Ux:BcZC8Ll4LiMXkv2Y2McdpCsj5Q
- TLSH
  T181D2C915D3EC4311E3B727B5BCF9518A8AB2B913AD35D79D288E23CE18127804D62B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32