da40377a92c1563aa3b7f3704ab0409c9f01ac2516cc08f4abef05ac2e359650

Sharing

Copy URL Twitter E-mail

General

Target
Sl12m3R4n1ch3r-1.4.3.zonaleros.rar
Size 828.0MB
Sample260712-gg7mpae15t
SHA256 da40377a92c1563aa3b7f3704ab0409c9f01ac2516cc08f4abef05ac2e359650
MD5 ccc8f04353021d901633e335aea2fe1d
SHA1 e1c81a2b2d9b5290e50dc2be094d11a392b7321c
SHA512 c9652087d374404680537c64896a0d95f06ee0ff636ed813ebf4a76837899b297852d5c9ea3119f8b227ffac1532ffbd15ec1b03977a9039a949b0f402ef3bba
SSDEEP 25165824:8TJ6uNzKX2gNSq+ad/w9vT/iy8P9wOP23zcJhnW3x:ErINVN/+vz38VwOP23zcJhnWh
TLSH
T1F899337FC5546E278B0EB731517D3A5897F4BA9FA8CA38603183F41DA468614C83E2ED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Sl12m3R4n1ch3r-1.4.3.zonaleros.rar
- Size 828.0MB
- SHA256 da40377a92c1563aa3b7f3704ab0409c9f01ac2516cc08f4abef05ac2e359650
- MD5 ccc8f04353021d901633e335aea2fe1d
- SHA1 e1c81a2b2d9b5290e50dc2be094d11a392b7321c
- SHA512 c9652087d374404680537c64896a0d95f06ee0ff636ed813ebf4a76837899b297852d5c9ea3119f8b227ffac1532ffbd15ec1b03977a9039a949b0f402ef3bba
- SSDEEP 25165824:8TJ6uNzKX2gNSq+ad/w9vT/iy8P9wOP23zcJhnW3x:ErINVN/+vz38VwOP23zcJhnWh
- TLSH
  T1F899337FC5546E278B0EB731517D3A5897F4BA9FA8CA38603183F41DA468614C83E2ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Sl12m3R4n1ch3r-1.4.3.zonaleros/Slime Rancher.iso
- Size 803.3MB
- SHA256 38f81f46cb51ca67562edfd2973d51fe7d5ac2a6c4b2afb3e3c736426896007c
- MD5 10bc94bb47d7bdc73d46fe54af83c754
- SHA1 81d4afb786e48eda5e8a6bcacf9ca294952942e4
- SHA512 de9ad53054ead9d51c61be5897a93699c8931f13fc05b775900c30ab7b92301991a6301f2fbe468bdb55c4fc1907fa946bcdb3be5a25fc185933113cabaef934
- SSDEEP 25165824:LIev5bP6P57QmKP8pY1I9y8ggIsUtUlaInBxKC:LIe16PJ9/u1H/g+tUla
- TLSH
  T1CC9933FBD960010DDE9F573088165E1887AC6FD27ABE9E193830BD0C467663A1DB24E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  SlimeRancher_0.ico
- Size 549KB
- SHA256 187b96eb2b5ba8ed86ac444828907b03afd545bcf0771978d8a3c480733f7876
- MD5 7f1861f2c88039d4fa5b6ea3eaba74e2
- SHA1 bfacb4c01354db213be3d811e6b1b5f810bcd49c
- SHA512 b77f1d044769bab1ea7c3ab55e64c7530c91698f84af3e6bda60ff9ea59ae6a3ab4cf87149d115d6d727b3deb55257f1211017dd8e21eeb49a1e76c9633bdb64
- SSDEEP 3072:aJmYyQHYP+xzyvx8hciSpp0nU/hpiXJKd15oM:tJQHY2N68hcBpqnehpiXJKd15oM
- TLSH
  T120C4D3FFD9610109DEDE937089021B12879D5FD239AE9E563470BF09867BA3A0E419F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  autorun.inf
- Size 71B
- SHA256 e1cdd2af0ce3ea253ac3fbef270681b067550e7390ed27999e3fe1f7bd74f6da
- MD5 1e9dca94746843f6d2ed4bc17ca4a490
- SHA1 a7611a0bb2a6d6ef8972fe0724358665b8d00048
- SHA512 fff278672c153088b31023aa92eb0efd225e84cea8e3c847095e4d5aa74eb599f76b5c0a9f298da52f562a57562c5d495f0dadd9c847c4e0992d0e0352d756a9
- TLSH
  T170A02200C80F022CA32B23C2220F0830CCCE80B208EC02308283E080A02820A0FA3880
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral7 behavioral8
- Target
  elamigos-1.bin
- Size 800.2MB
- SHA256 a9f556e5001b36cd4a4b02403396bf74bc443f8b78936bf9ca65a1f86ab604d8
- MD5 99d255496f154366d697cbefb3a2ac9c
- SHA1 0e3450e8e16dd07ece9412fb5c78e67593811922
- SHA512 6561747dea0bb23a8d9bf7e5991d151095cde93527d43ef9247fbaea4bd9e86f74d15802ba7db3a691817ca8dc6d3ad25e7adfa72ed6cf139ea841847600b8b7
- SSDEEP 25165824:YIev5bP6P57QmKP8pY1I9y8ggIsUtUlaInBxKCa:YIe16PJ9/u1H/g+tUlal
- TLSH
  T144993391F4AC918D360E6A248479EC1C97B56B90BFBEEF1CAD319C4D1A90121F9F309D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  setup.exe
- Size 2.5MB
- SHA256 9546c7ff8de7ba1433fcbb4275fdd2e67a5d19fb51bdd411f15eeedb0e41094b
- MD5 806835a3ac6d8fc7cd54730c76b8bd87
- SHA1 f17a461dbe2cd346390ec46d628e0799a4a53b47
- SHA512 25ccc80bd0b1b1664710df2bf7b51254451263045140744344e8a17ebd465b46bc4a9932ce373e31b75480d7f29d57067ee7448c7cc6271c6e7da8c4c742ca7e
- SSDEEP 49152:HEoKxeBZHq9M5FJnNBZzUt6GEX4NYGygoxYXzhHFPsaXjV:klcq2JnpzUVDvYYXZjh
- TLSH
  T19CC59DFFD9610029CEDE937089121A118B9D6FD239EE4D563C70FE0D467AA6A0D219F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12