f0d212754d08b842115a6f0a95ed8d13070bdfc9d6f20526074bf5204c38abfb

Sharing

Copy URL Twitter E-mail

General

Target
fceux-win64.zip
Size 4.5MB
Sample260712-asmnbsbw2r
SHA256 f0d212754d08b842115a6f0a95ed8d13070bdfc9d6f20526074bf5204c38abfb
MD5 09a4383d922b8eee10e410289edf0aa8
SHA1 82e8bc3bb40daf1bf740e5b315edd290e366341d
SHA512 c1bb5f0a844d627d08ea84fd9b5d094edfec03950788ac53d5cffa02c951ddadb8e219723a702273b98c35df26a079d3212e5e933be8d0ea7232772b50b248a0
SSDEEP 98304:a8zr/NjLW7FkIyv+uH/64MfScWsTzu0h8BeZ3L2H7qGO7kUY+ekX:FzDNsFK7H/64qWsTd7ZbOvO7/YG
TLSH
T14126339D86058E65C3E04A77F993D04EEB6CE8DCB68058914AABBEC05A04DED77C43C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  7z_64.dll
- Size 1.6MB
- SHA256 34ad9bb80fe8bf28171e671228eb5b64a55caa388c31cb8c0df77c0136735891
- MD5 72491c7b87a7c2dd350b727444f13bb4
- SHA1 1e9338d56db7ded386878eab7bb44b8934ab1bc7
- SHA512 583d0859d29145dfc48287c5a1b459e5db4e939624bd549ff02c61eae8a0f31fc96a509f3e146200cdd4c93b154123e5adfbfe01f7d172db33968155189b5511
- SSDEEP 24576:S+clx4tCQJSVAFja8i/RwQQmzgO67V3bYgR+zypEqxr2VSlLP:jclmJSVARa86xzW3xRoyqqxrT
- TLSH
  T148754B6BF6748260D0B7C075C5D2AB96EEB134868B3096C752859B3D2F17BF6C939320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  fceux.chm
- Size 391KB
- SHA256 1cab3eb001e96b48079c48b589f5105bd00cac353098428623ae7b9bb4ae85e6
- MD5 c5272ed75d06503cc2ba23c81b6c239e
- SHA1 f8a70d0597e6ebb710b57361094ab0c30ce66471
- SHA512 e80eccf961e8ad7ad4de8c8a3e598902582c7d694e2d43614c017f3147ca53af41bd05b0a919f77d304e38ddc3c91c039792ddbbdfbe8ca63b5379b1493dd787
- SSDEEP 6144:cOX1pIaTqKBBZo1A0QA1GldWlI2TQKXAcdcaxdSfW9kPZFoz8bHOf4l2qtKOM2wL:RrBQQA1GqHQKrq0EfW98ZxPtKSwNrYs
- TLSH
  T1E384234CA6454B9CC20A15B2009599A8FD04FD66AC30F9E1F1BB1AFE538872E37D42F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  fceux64.exe
- Size 5.2MB
- SHA256 444b120d4e4a6e2b2c644ad26a117a90c2f66f71ceb0c251c4ccaf4215985b9d
- MD5 1799c7b8a31b0fe5401a0c02ffe7b344
- SHA1 fcbf18a494eae1846f1f41b911cd50c46aca8c34
- SHA512 781babd5e63c859170682001f8d5fd55f4fd715a14c1fa815fd265658a73754efc8afa5987ef7c08247fb1ca13ddc0c5ce378dcf6247257a60c0c1d537441d85
- SSDEEP 49152:5X3KzTp5L7NT3wC60umhKvCt5AXioWemRlLHoLWphhO9qrVTDTUPlikgApebJAJ8:ClwIhK6LIL8eIwDY+xZATL
- TLSH
  T19A468C46A3E000DAD473813E86D68A17E2B1BC142B6187DB06E47B6A3F337D15E3B765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  lua5.1.dll
- Size 307KB
- SHA256 23719300fa4ae3116e97c313b838945bb2c1e02094daee8165939059aaad82c5
- MD5 56b4c7af882408518952151f87c37221
- SHA1 43a36903dd87e56f068c40c6f48af23dba0f5d13
- SHA512 a8b6f64763605be146bd19ff8cf252209f65a875102f255c64b2d575239ebab5249c1f73129b1b8bedc48aa27488a0d9f828cc0db5bf692491bbf6460c39e31e
- SSDEEP 6144:BPmr6FULtvQWYszmepAeOcMSHfqgZp+5J4w1:B86FOtCszmepEcM0fjZA71
- TLSH
  T155647D55B1A0047AE567C03C8F62810BC7B2F4A603619ADF25F86A231F17EE57A7FB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  lua51.dll
- Size 11KB
- SHA256 a85ced1c2078348684b74bcc20074f63a73d02881e5dcd002581ed757d8adf86
- MD5 1c64b1afd93402a76727518bdfb08a93
- SHA1 6da8ede4aa655c60de6ce51b171055200168d09a
- SHA512 9ec2de8f203cc35c4c8ed1f556d36b00e3502a4f1c2bd1af281b510238871e28f1e867089586ae1f6c91edd866d1b5c9b5d09aeb965c193fe9b45311211a3bab
- SSDEEP 192:wF99X3pvjJYkjcyFZNcvqr0Py3v7ub8Iys91+mlXzI+eN1qyOd8cw/RsT9QwhzBE:wFn5v2vqr0uzub8jqyOd8cqsT9QwhFYf
- TLSH
  T18932200CD65270BBD95257F528A9420689106682A3D2E6FC77ECDD33DF1233DB12E61D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  luaScripts/AVI-HeadsUpDisplay.lua
- Size 3KB
- SHA256 666ad36b9750842e387ecf7cefc71b40792ac8591a3f097e727e2b37436182e5
- MD5 1e05a3f3bc7ffa93cf3e302c3590dd3d
- SHA1 922bfc7e1eb7b30886cf6061d80613251fcc38c1
- SHA512 fc1f55f3bf31a7b198643a473f2643f6ae89d023875ef91688d2dc2033fb8f5ecd09cee22d3f8797be63397ecbc2a6d0dfbc4f0105e989abc30859c5d3b61a59
- TLSH
  T1F871947E721B8B0AD5965312FD379408FA24C4819C107A03BAFCC9E2B714934CA7397E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral6
- Target
  luaScripts/BoulderDash_AmoebaAI.lua
- Size 24KB
- SHA256 851fddbeecc341234f1499d2fddc9d1866e3439b3996e5bd91619c7f59844963
- MD5 9ca736f4635edd008b48a9bed8aa5696
- SHA1 962c3073970f2a49ce5361abab7d587a33e781f9
- SHA512 21bd0c3ce838afa95987024f58180aab0612cdc8aefddbde3db2be3143d7e33031ff4ef660aa2292ef872d9d935602927bfae3633063844ef817d17d1c2cc564
- SSDEEP 384:eBHBM+pMLUfrbjmjexeB5Z6aZp91Csv2B6jW:IhKO/jmjexeB5Z6aZp911OIq
- TLSH
  T15EB292DEAE1FD125C1D2D32B713B00F6D169A01A52994125FA1C23CCA7F89A872DF23D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  luaScripts/GUI-iup_example.lua
- Size 8KB
- SHA256 e07b8373332449e7a83168e733871e6a6b99758338405b5c82b0a8bb0610610f
- MD5 69eb6b5ef2fc031e7359cc0333f8d0a6
- SHA1 eb7cebaa7c0d3b8a068e1d30122378283ceca01f
- SHA512 6af359df56af0f586b47230a58c3f1e5407d61852f3963adfb2c03e3277ea27ab16e0a8d596ba2e04452efb9c7c306e25e1e7b292c7db9031f4c6bb789b63a75
- SSDEEP 96:QF6zZLMtIe4wCgKzS+IXGG6yUlNAGLY6LHzzQiWwHLGDHsDC77DCV1p1X8D:7zZL7/2XrGCDHsDC77DCV1j0
- TLSH
  T162021D0A33DA6AEFA29C046036B9D25C9DDFC136C8788275FD749C6D7F3909450709AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

antivm discovery execution
behavioral8
- Target
  luaScripts/Gradius-BulletHell.lua
- Size 11KB
- SHA256 b6bda6dbb984a806d3ebde642b1b828197f4aa4e65a5ab2fc9f77870e7df0980
- MD5 88a9ea03438efafeb714027c47b5cc48
- SHA1 68c34aa1526e56edb0850a9d50993af16380f79f
- SHA512 391c51adb8768dd98f677e44295c1b9515cca940f79831b6ad5b8661d736d6e70ede3e63297ae2f073133410366da055a61d325e62daebee7e9ec937a5ddc776
- SSDEEP 192:DXHBh6hZ6QB/JEMPH0DMZT5dofpRXl4DeHjoraxOs9fmUC6zZEz7q:DXHsZ6gh0QZ0RXKDeHUra17zZL
- TLSH
  T10632842EB50F227D0DD9E1A4957E4CC0DE9DC057823649E0B9A49CF0D77E13E80E9AB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  luaScripts/Luabot.lua
- Size 13KB
- SHA256 26ed9941fbc280c99dc57545688a2775c84066112b052db7d2ac62110bf4f491
- MD5 4cb924eb074e1b27440f6a30b35ee86c
- SHA1 38a8cb0e8cf5d64f38782aa339057769867b6d70
- SHA512 0c9321776c0247b3265406b8f6306e30849ed9899aba78b274d8cfc8bfbe86ca17df0e355c17be16769a3eda987bf525e26bbec54392401afc5ec69fea46952a
- SSDEEP 384:nW1WLGx3GBjcn0UIH0+OEli09gFmh7yU/rzhjwIqyN:dGxU/0TCiqg0uUPHqO
- TLSH
  T174524049B70B7DA689B9D06AD4BC8355C489D0EA4434AD74B20CF48CDFACA2CC3D5DE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

antivm discovery execution
behavioral10
- Target
  luaScripts/MegamanII-LaserEyes.lua
- Size 18KB
- SHA256 6bb2c3ea5dc604eff23c24f71e907c21f1f02242c739654d4d0060c4d61ec02a
- MD5 0ef67c6c38e37114953150f48edf6a5c
- SHA1 c15f1561efe797878992a9a8b3625013b6e7737d
- SHA512 72457c5e8216bc7ebfa2fae21e7b5a847389a25fa747d95559ab164fd95a762b9f7b0e09cc003d52c0c8dfe44930c033ebfbeb2e52c53672812884d9e899d9ae
- SSDEEP 384:rlQk3kqUugy2XmKedvmboDt7bmG1wTy2T6:rl7Uugy2XxOwoDt7bmG1wTtT6
- TLSH
  T1A7824FB9BA4E8EA68ACD0759D87E0781ED0DD072913C23C0F7F1AA65544DD3F40E66E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  luaScripts/Multitrack.lua
- Size 26KB
- SHA256 0f2e5bf1b2e6eae35382084a562f2c78582d085e043d7a60df46c56785ffa011
- MD5 4b65e9f02b8fa51e5bba87813426690e
- SHA1 43a4c5d5bf71c418f0e4e2fbaca0cdbbf8f2c7ac
- SHA512 c111e3665e77f95bd716bd979eaf04baf648acc3cbd9ad6f361328105c6bbcc80607cdfc71c98dbfa88a0c5eef9f322ecc283b8f5c9215aa61869ac8ef8e3a9f
- SSDEEP 384:/xIrPzClQh8YTbwLdsI9Gb1691FSBUbd1/BiOjJ+U8jVPU:J2GlqTbwhsr09PTh1pwZU
- TLSH
  T16AC29327651A5E7509F391AB68CB50C7E3384063425162A478CE75C42F7D268B3FBBEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  luaScripts/Multitrack2.lua
- Size 43KB
- SHA256 8eab5e8f7b0f257acfb1b20c71e54734f4871f97f47acea93c96fa81106bb286
- MD5 9d4fcb67b57233bfc7d1c6872fc0ba28
- SHA1 a5cd60c9225112d2f0d8af9738c20a9777141b3c
- SHA512 c48f9d2c03d6c5c83c6ce0dad7907070da0c9296092fa69d72994dcb15192574e860713772b7a4eb60ec928a13e0bc7dcce117eb2c5765f4207d6ded84ebaaf7
- SSDEEP 768:mRxsPVsew4b8f0vAb4zOhGu81VNAUV7TpM:0MjAb0OhGu81bAU3M
- TLSH
  T12813C56BA1070E3256F3854E689B54C2F3294033456561A67ACF36C42F7E2BCA3F57AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  luaScripts/Registerfind(CheatSearch).lua
- Size 5KB
- SHA256 8e9e6c4642e8720447ae3fd2a5a6d8ddfa3ebbdcc26c36f41acf59ffd909f2d7
- MD5 bc4ff6c0ddcc66633c0673ff8239b0ef
- SHA1 db87aecd37dbcb9e4c79d60598acd8c7f4fa8662
- SHA512 16fd20a0ddb1ea28f2214dbc17709b3bf2f42a8ac785a87e82dcbbc4f654490d2346a8ea233d045aeb4e48113d3b2d5b9884bc1282dbe52b4e9c4a56ce3922f1
- SSDEEP 96:WHaOPfRPzR8nUZ1rleXhRnUZxv5YfACez8q2PCeGvFS/CeQ7nF8jCe3TaFqRbKFD:W7PfBzGnUvlJZk1A8q2aJ4KLe+HMk5au
- TLSH
  T10DC1DFABF3EF9EBDE5182194A43F98446C2DC160C15EBA1E708E749103F45EC8BEA435
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

antivm discovery
behavioral14
- Target
  luaScripts/SMB-HitBoxes.lua
- Size 8KB
- SHA256 84df2f3e1c714e57ad9d09b039c5668947c36b85682bdea7a1fdc4f1a160e4d5
- MD5 972d4288b163a3839bd8fd32cf7af422
- SHA1 956d81d81a2f59942f191ec93864cb7022fda0a1
- SHA512 422238554fac7b2e220de5bdf0657aa68f5306aa86e5f62a6c30b4689db90acb4e6d3bedf4a09b0f1993c4815dbfe6cef7b6874f133a2b77ca09c346e6860f98
- SSDEEP 192:XQYAKYAK9tZwVEImzDxJMwQZmHbtargBoZG3:XQYVYAVa5fxJFQZmHbtargBoZG3
- TLSH
  T18F029951E9BDCA09D28935DDF77212DD791CB930921E5C733226F622E3882E482977BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

antivm discovery execution
behavioral15
- Target
  luaScripts/SMB3-RainbowRiding.lua
- Size 14KB
- SHA256 8b3f9c8d86aad6eb238a3c95232ebc3321f79d81005e70c2e4b3e1f268025f38
- MD5 973f759f2b2b4a69fa9d83a804b66db0
- SHA1 1441988e3fe160aa702050cdeb45c6d91700face
- SHA512 5aa0597412c9afb47b9840689a8286c45c4ddd3c02c5151f6016e45a226afd80b3ac30e9bdb1e5cd2e64b94cc2b4378b7baff897d4537e52d583b81f36e6c502
- SSDEEP 384:KyeuAiFlg4MekPG9FTIdURfwRzsJuNJbcgXwg4GEX1SOntzSgKj6E:KyaiFlg7ekPG9FTIdURfwRzsJuNJbhXH
- TLSH
  T1B762962CB41FA53A89D592A9D97E8840FC0FD032453E35C176894EB5605773FC1FAAB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16
- Target
  luaScripts/SoundDisplay2.lua
- Size 13KB
- SHA256 85168f3f8ee69a645741fc02633012d00f664ac60aefa3e038ade27e032b135a
- MD5 b525996f4a3e281baeddfd65779e78ba
- SHA1 08bbdb0a2b1d9697a21e2774c6a14c88e8ef73cd
- SHA512 3e7d20bdcb95b51ba0e530f9d4817cdacc882f4a8c619cca6866ab5a0c4a1914a8401edbba3e46e03b8939e948dbca99934851da8ef5c9556ddf73bebb3c4854
- SSDEEP 192:kc+GmT9fTrdGlXSIKbqHpfdogBfDL+9MYRTfPwsAFD:ZPyr0CdRTfPwH
- TLSH
  T117523D65FECD0E018E00F8A6A4BD5444E70EF831D87C1ACB7EAC31B1066E476E169EE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17
- Target
  luaScripts/scrolling-pitch-display.lua
- Size 5KB
- SHA256 1d82684b1d27fd415581639a455a69eb1149d9a71a38f56119e9d4950f2c8aab
- MD5 234d832c39e9103e51b0a87bf4730554
- SHA1 079e1d51f53b85db19d084ff515032a7c9b2c770
- SHA512 f3cde3601852313d20934cf98634027bf04771d141d3e1f05f6113604707576b838bc553414317f7ac6614eb9680c434dd6cdd8b78607fc38d4585413b486c9c
- SSDEEP 96:Lvi5hw2E0T1oBMSQoBMSa1Q4dfnluIzI22akdFwoGt9drQ:LviXwc1oBMJoBML9ltU0BrQ
- TLSH
  T1E6C154EE261FC6304EB1A0386C67050AE659C163612A575533EC08E45F7E897C3B6E7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  luaScripts/vnb.lua
- Size 16KB
- SHA256 0a66437c8e83c2eb3383edf330bd530d94a16458fcb0376b3e6d1d9cbf66fe62
- MD5 70ec63f350ec1b3782d04e65e27d8c1f
- SHA1 a8543c4cfbddc38e65530fe2f2b410d20a96a30e
- SHA512 745deb7a02169e471c317a5efd0e433781d4f9fa7b4ea67b8533e503d89f0040b5f014bfe866f38c164da33149e2362c98e44f235b3b969db7765f8adbf07dd0
- SSDEEP 384:GplggokwJJJ1boHCTIjNWc6ZkY7x+HrYnIoTv:i07xTIjQc6Z77x+HrxKv
- TLSH
  T13872B6ACF11F4E86C9A2709991B928C8DA35F031B36EC508F6AB31EA555DC5542F2E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19
- Target
  luaScripts/x_functions.lua
- Size 6KB
- SHA256 ed91843e9e4f82dee06bf8d67e680eabd27541ed8373e1ea7ca822bc1d04f826
- MD5 81b4c65db42614ee704a81eda27af6ff
- SHA1 b8108beccc72176b88579f2ea31bd8c0d735bfd7
- SHA512 9486e626fe7aba0930590a864f9d858d0b6153bea70ddec26b4bdb20a450434521d33c1b25c41f364fa5dee5377ee4a5748d39205b6f8581a283e0383a8dcf57
- SSDEEP 96:U2jxm3kGYcw2rbs7ridqVSjk4DOvYOvBXPISsChcQfAPkRpzQUq0j:U2k0s8FVAOwOpfIpCq2+kRhjB
- TLSH
  T198C1767FF1874E2BD7026119423B8CD48728E660A6189666B9CCB1D23A7D15CE37BD3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

antivm discovery execution
behavioral20
- Target
  taseditor.chm
- Size 906KB
- SHA256 66678b210e60da71589a6c801bd09e1c47c15fb54db5c759e8ae8dd331306337
- MD5 54a1fe31a05d047ffa62e99cee3846ae
- SHA1 c4513f159d008b59ca1cc3c352bea97c0b89409c
- SHA512 a5610c604eaa277425b73a8358a4aea3bd98985d57fdc360031c933f7cb9bd8660bea1201fa8cdf25f3209eddf9661711e038e67545d7780c6b1deacef7c938c
- SSDEEP 24576:dOoT710OAvhgwy+vhO9sAJlCABhAZ/Qrju2zIBlQy0D:dMnTYRwAPRzI30D
- TLSH
  T10B152384061FB109EBD82B7FDACDE0EF7358382CA25E1E650ACAA7909C455D865F50CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21