General
- Target TRANSGENDERDIRTYDREAMS.zip
- Size 123.1MB
- Sample260712-vb1h3sfw5t
- SHA256 d2d1b848a00d1a4cdd5787d04f334b09951efd93b2cb18c1d9c1949cc024c84a
Malware Config
Targets
-
- Target TRANSGENDERDIRTYDREAMS.zip
- Size 123.1MB
- SHA256 d2d1b848a00d1a4cdd5787d04f334b09951efd93b2cb18c1d9c1949cc024c84a
Score1/10 -
- Target Transgender_s Dirty Dreams.exe
- Size 28.6MB
- SHA256 9daae193f2487c53533a28048c506ae68a69471ec4ec3546a01a0e84edb7ed78
Score1/10 -
- Target assets/fonts/pixel-latin.ttf
- Size 44KB
- SHA256 5fa4def8a692395f24f44db2e6e2456928a10a7025e0a508b33236320cdc82fa
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target assets/fonts/vcr.ttf
- Size 74KB
- SHA256 01918d86cb163a715dcb97165b997256734dfcc9f550beeb7c142fa4a064cf1c
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target assets/readme.txt
- Size 407B
- SHA256 b4517f78e53d89417813477010ea6da281c628ac96037833754dcc8cc5e16eee
Score1/10 -
- Target assets/shared/characters/babefriend.json
- Size 1KB
- SHA256 cdf2c8222d752c978fcdb797c14aaedbd2289f4e8a26693c1bcb3277dc922f53
Score3/10 -
- Target assets/shared/characters/bf-sex.json
- Size 1023B
- SHA256 652d040e878f3263e142e1e283812c32d4262f6bd1350c8703a64a25cb2023f6
Score3/10 -
- Target assets/shared/characters/dad.json
- Size 1KB
- SHA256 7da6d667bda793512a82bbb92ca2349a554bdd393d5f244733314cff5284e21a
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target assets/shared/characters/futashe.json
- Size 1KB
- SHA256 776088bb08cd917c55a95bd400dbc52169f674ccf62f0a6b1c2c96af67435ab8
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target assets/shared/characters/gf.json
- Size 2KB
- SHA256 ed323cbb8c6274bf159c040d5ac18cbb95f793766692db2363af30caec763917
Score3/10 -
- Target assets/shared/characters/mom-car.json
- Size 2KB
- SHA256 d9cd193aa19054da0aa0e5be98d30b4fd3858926e1a63eef28047f5025ec4432
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target assets/shared/data/bopeebo/bopeebo-hard.json
- Size 12KB
- SHA256 6a95d2454b8638ccbd2d841357f35ea0763fcdc0934ced448d36826a095b585c
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target assets/shared/data/bopeebo/events.json
- Size 5KB
- SHA256 86fe7381b7430e92e0f201fa30760a2e252ddbea319f7407c0a001439d1001e0
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target assets/shared/data/gallerysong/gallerysong.json
- Size 12KB
- SHA256 bc8569cab865ee8207a8bc1d3616ca14e13878bf5ffec25737a05452060e6305
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target assets/shared/data/high/high-hard.json
- Size 27KB
- SHA256 fe2680faa44191cce6d9c8c5fb4e9e8e33914b224823f1870dee8d963ba8359f
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target assets/shared/data/introText.txt
- Size 2KB
- SHA256 b9f7145a4fb68d259f9a3194423a7479541469451d911f1b76989e3605a08753
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.