0500f25b3b96ec8ca1e816ee194480825d84d1a91a2cc165d8b62829847fb731

General

Target
af_Star_The_Wars_Old_Republicff_2.5.zip
Size 528KB
Sample260713-cm98jsa18r
SHA256 0500f25b3b96ec8ca1e816ee194480825d84d1a91a2cc165d8b62829847fb731
MD5 1c480d2e78f2db1139cdbb547045187c
SHA1 4d05da643c91d98d6ae3def3a420379c40fe3de6
SHA512 e3e30d2dab77f7e365585fe43790e6db53acda0e148ae247b8499951dee36a993ed5abfeeccc9211c73c3c84889e621383d6d9a03ffac6af4a3b12e18f80a4ff
SSDEEP 12288:V4lhhLoVDI2FLmMJKMeqO3g/ALyYG0ZaDajTCXMO8xzDOeDBQ:CxopIAmMJ8A/f0Za6TCXKBxFQ
TLSH
T197B4237B0A7FB0D00C6A43BA8B464611A43D9D611628AFBD47DCE6CC8D0E51EBF14E5D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution

Malware Config

Targets

- Target
  App.bat
- Size 29B
- SHA256 a96ffc9f649333f9e84b7a7e1101cf85f7a5f143253db1d7853e6e48d46b3c72
- MD5 6763da0e8a0778b62bd2bc404bfa1e1b
- SHA1 0a9e04d5e85702f53301d0e424305a4e20e1ebd2
- SHA512 36bd96a17730f29e2e7cdfdc1a515e85dce94ccb10d4d7fe0d9502b1794da0c274aaee5bef185933ce1de57f9bcd5ef6c76af578fadd905b32df695cea8afe80
- MD5 SHA1 SHA512
Score

6^/10
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  icon16.txt
- Size 289KB
- SHA256 33250ded61c43128b6c29b01de7b1cc962b241b236933f54bc42b648afae2398
- MD5 8d818e3923c032d9bc233ef67be430fe
- SHA1 66b64a0313384c8c5d39f764183e60c0cc74ff49
- SHA512 794f252ac654c3dc181c603e2489d982847c48084e14fe09c0bf80f67b485901ca7674136db95eaebbd3c5992282b458b189333b2f7305870c5d135b6597bd70
- SSDEEP 6144:9zMxJhKjorjuFGnEPMTgy77tEcpvACCI6mgT4f2D:BehKjorjuFGEPMTL77trpAyZgU8
- TLSH
  T1E554D6F014480CDEFAAB96C1DC738EA61573E8F98A4B264B0F7CF4A13654591C6EEC16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  resolver.exe
- Size 753KB
- SHA256 3200b7d6a42fc8d2bf213cd17b1bd6f0fc76c4f626330ec6fb0a3f9a0ef9e00e
- MD5 a643386d4af0ce1d488dbcaaa393a2d4
- SHA1 6173c53637ae562e6a7ac0c449210767615512b4
- SHA512 53a7a1157bb1ae1864743b4c3e66fbf4786ee805ff111261b7cba7e042954797574df06f128340fcc6a57761f5bec08da5d3692d2edaeabc00c4460423d90f83
- SSDEEP 12288:zIxb6mgscIPv+xPBPx3ph7WfsnE6VTdUZ9nUt2ZvIX/19X7BroWkLwqG:olRcIOXrh7dEiTWZC8gXTFW
- TLSH
  T1C6F49F19FBB101FAD5B78135CD16A90BEBB2BC050624566F43E06AAB6F377210E1F325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

JavaScript

1

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6