838eca237da59c6cce06a761f5d3d59ca5a43f685afd5b5028e5baa0e0f4bfd4

Sharing

Copy URL Twitter E-mail

General

Target
Aurora ONE F_V2.0_Music.xzp(unpacked).rar
Size 11.3MB
Sample260714-bjszesd14v
SHA256 838eca237da59c6cce06a761f5d3d59ca5a43f685afd5b5028e5baa0e0f4bfd4
MD5 be09b16958a011d44a0e611a629b6d20
SHA1 693f2532d59fdc58f415a7fdbf0a1e02199e42cc
SHA512 55a24d8ed952ddfb7eaf8cbe6b77db02d388c4bbb936ac1be42fb7f38cbea18055a26b845108ab178ef4e00f0ec64f4daacf7ff47d26496977e3322819d381f5
SSDEEP 196608:BJe7Odo0RfSAb95z1HLf1QlDq5NlAC5BoeuERezoJFmsxFe5sGv6A:BJ6OdlqAZFpfhgCmJU0huA
TLSH
T184C633D91438F00ABDE9757218FE4946D32722599C42362E50F6B0DEC2E2DD3AB3392D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  Aurora ONE F_V2.0_Music.xzp(unpacked).rar
- Size 11.3MB
- SHA256 838eca237da59c6cce06a761f5d3d59ca5a43f685afd5b5028e5baa0e0f4bfd4
- MD5 be09b16958a011d44a0e611a629b6d20
- SHA1 693f2532d59fdc58f415a7fdbf0a1e02199e42cc
- SHA512 55a24d8ed952ddfb7eaf8cbe6b77db02d388c4bbb936ac1be42fb7f38cbea18055a26b845108ab178ef4e00f0ec64f4daacf7ff47d26496977e3322819d381f5
- SSDEEP 196608:BJe7Odo0RfSAb95z1HLf1QlDq5NlAC5BoeuERezoJFmsxFe5sGv6A:BJ6OdlqAZFpfhgCmJU0huA
- TLSH
  T184C633D91438F00ABDE9757218FE4946D32722599C42362E50F6B0DEC2E2DD3AB3392D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Aurora ONE F_V2.0_Music.xzp(unpacked)/Audio/AudioLogo.wav
- Size 652KB
- SHA256 cb1c3a50efcda00a91c585555090b7dc0272d5c3842dd2b4b0ff7f95103a87a8
- MD5 b441b7a8ecb11963d30e9c85e200db39
- SHA1 997b77440ed54ccbbfc6ccee4801becc683148cc
- SHA512 122ed9c84bcf95880f238f64c5122877cd72079f0060b22fde1a7e998731a0611b9f6cbadf5f85c892392bc0c9d04529e8013389c5ee353676c6a17aabe79427
- SSDEEP 6144:CuqGtMPK1ONif6fCO44OhzVAwAePwLSMziX5pEXv373d6h4VxKIbmLe:CuqG4KsNHfzOhzVEePTx5pYvrAIJbT
- TLSH
  T177E4C481B241D941C8556E3A8A66DFE81333BE56EF0BA7133090BF6F3DB31C25D65286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  Aurora ONE F_V2.0_Music.xzp(unpacked)/Audio/AudioLogo.xma
- Size 34KB
- SHA256 35dd22b314b3ff5f374bcd59f821af9b49652dc9483be242b2ac9f2ab793a7ba
- MD5 27a97e4b4a42393002259aa61f892fe4
- SHA1 a5d9b08f74b48567124487dc281f456e2a20b674
- SHA512 14fd4c1c7df2b28810e5830139c5d002f965ea8330e3951dbff66ebdba7422e507d11d5c51d9855264e556dbc85ccd6d15453ba54dff0c1a56d12374dbbd4492
- SSDEEP 768:LA/nRb3jkCXxctaKNGJ+osjQ06g7vU0FZAHpkoaIP:E/nFjkCBsty+tEe7vU0T2P
- TLSH
  T17EF2D14F2115FA479CF6143DA0721EB7750EDD6301A0D0AEF045384ADEF9DE16B064A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  Aurora ONE F_V2.0_Music.xzp(unpacked)/Audio/Dash_Open.xma
- Size 6KB
- SHA256 823faa1397d0b8ce755578b7f665f207054a4497e6345e9195581957454a1f1e
- MD5 fb3e87e139833dc54d605dc810af9561
- SHA1 fd8bcb60196fb3edf80d34939602bd1f4c86cc60
- SHA512 d13a389fa1608e907edb1398d28d8e04ceeb62bcadd09d00167a22c37357784c9df652c99b50ed11375c5ee1f19c76a22cc8c4b2a711d042167d15457f5f5a60
- SSDEEP 96:+8cdYOdrKfnAGOkDaVD/HFyeDj2aZaDbnYO1hCTUk:cofAGOkyVba3nYE4TX
- TLSH
  T1EAD18D1832A34B889A8EC1777C3791182BBD8CFAC2C350EF1015304129BE54B9B2D6E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  Aurora ONE F_V2.0_Music.xzp(unpacked)/Audio/Dash_Tabs.xma
- Size 4KB
- SHA256 008580d203719e2c0e7b71177b30fb3392b55e2c85948eb8e01fda725e5cb6a5
- MD5 16561521e07d2cde3c545ac7d4367ff4
- SHA1 b0740dc3852fcb526007b5f0a6d6c58d5eaa1e87
- SHA512 959f8e727cb79fdb57b7cbb8c8d48598a2e4f485bae2d295d07def985b10dbfa9c1888ff85e7c26bcb963a52c10b651de7c040f7aec77ee606260f0a8518bdb4
- SSDEEP 48:l3Rz2JbKYfb+k9XV3klq56tcSd1G7yarY55555556uCT:l3Rz2pD59XVU1DMWaU5555555s
- TLSH
  T10F81015F3CC14520E98FC97069F5D0760E87DF321645E40A361A7249ECFA5898A7F1F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  Aurora ONE F_V2.0_Music.xzp(unpacked)/Audio/Esport.wav
- Size 490KB
- SHA256 413209183d1bac4ea6a0c218ad867643d5cc418724b3ef65e6664e23ab2715be
- MD5 18f05e37f5274b06809d2936e4699b44
- SHA1 9bb363d7021b2882a076a0c3c94eb9df95c61a33
- SHA512 283fd9fa295d07efc29436562344ebaf2438b65a413bfdbef17fd1242243efd1852e4c494e0a5a109e7215b8b87166cb10f1be2cf3737326579f6b1369bd390d
- SSDEEP 6144:5y44FVvd9Paodxkmtv9fsTw2umQlpHgcREYc67Q8nT2:I40vratCsThDQPAcREL6k+
- TLSH
  T10CB4E780F141DA90C4965E795527EAF903371E96EF4B97213060FF2B38E35C36EA92C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  Aurora ONE F_V2.0_Music.xzp(unpacked)/Audio/MainMusic.xma
- Size 5.6MB
- SHA256 7f743ef5ce09bf0b487607651e4e191a08c5b3c50cdfa035cc928cf2c24eda49
- MD5 8f2445622c57f2436d7c2a9b4de6692d
- SHA1 52a1922aa8acfefafbd3a8306cb2c3eb211261de
- SHA512 76db523df0f37e98763dc04d0931025bf632594e39b3e390d934955c42da07042ea4ff53dfe1654020423cf8de67bd792b5b877aeb470269ec18fbba7422aa14
- SSDEEP 49152:qobsJzz+YmUcEE2/JkaugH75NPt0OawwdpoXkaqHou27ct5N+dz3gegpokOzg+V7:IQUcyTDH75UKQCZtpJV8Vi2c8jJY
- TLSH
  T13C56F04BC574A97DCCD8E7F6617095321247C08ACBB8ED1BD4E0A52A126BFFC69118EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  Aurora ONE F_V2.0_Music.xzp(unpacked)/Audio/Succes.wav
- Size 202KB
- SHA256 3487d74b59f5b551bdacd43cc28f921f04f259365892dc9f8543cdadc95fa81f
- MD5 d1c47835350675f34deef1c5000d6ea8
- SHA1 0566ddf14bdf72963e147d52342747f5308f6f3b
- SHA512 98e64293d922c4be234cbd02715a7d0bdcc25ceaebbf62d9c01fea4ec78aa1eaf87529257c5290f88512f0061ceee3401d837b39840b4a285b0e35f4d5aac451
- SSDEEP 1536:+SXh1T0HaNbl4Ut7Xosl/foXTGHCgkXeLcNKOfHDBaShic6QHqbH15XTBWy/TXNH:Nf0HaPtc0/foXTrSLcl76CaFWyrNH
- TLSH
  T1D714DAF5E006085ADD4F6FBF4A83B407A5B5712BBFB3E015368CE83625977215238B92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15 behavioral16
- Target
  Aurora ONE F_V2.0_Music.xzp(unpacked)/Aurora_FileManager.xur
- Size 7KB
- SHA256 55e83219db5da919566b353cb1e08aed83c772bef25be876b8b584b7448ae538
- MD5 5638993b5f8f43ef43d653513d836f0e
- SHA1 1e0320941b0da6c9fd8cdd18f92bab3c6dc72eda
- SHA512 e1ca4cd51d67901530addd16bbdd1ee0e53f3fab05c5e320d751d0d85b82d3c4e75c171d699713dfa425eb22f7ff6f5ff6bb6831f7f45c70f54f504c44c0b93a
- SSDEEP 96:vFOliiZkMlnBWYsN//cv8AV6AVosUmIhTTlAfUCA/azIsd4tX4tC4tz4tI4t34tM:Alnm/0bu26J5pxcqP
- TLSH
  T1B4F1215422E90B1BF6F36F746AF752111A73FE52FB12C32E8180125D64A2B90AC51B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  Aurora ONE F_V2.0_Music.xzp(unpacked)/Aurora_Loading.xur
- Size 2KB
- SHA256 0742e3065d9e38598a5bd66de2b64b33658863c1f3ba2abbdbd2cfcedc99cef1
- MD5 06541cc02adde2c0ad0cfbc660c9ea98
- SHA1 5d9a9613db3d326c64d957d985fb970e9ff288f7
- SHA512 391acd29ecf42adb2be0396d162fad26c34f529a6b19054258df278fdd40610a98d686331afecfe55d7409133ac89a48de846aca40adfba3259d6602ade70782
- TLSH
  T1C941232C6AF8121EF3739F39447B12021F26FCA2E526962FD1D4712949E2794BD80373
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  Aurora ONE F_V2.0_Music.xzp(unpacked)/Aurora_Main.xur
- Size 19KB
- SHA256 4b8f41709e3714373a4f099076d6ded0e486d9b9bdac58b35eedf1dac22b1e63
- MD5 6d71fdbeb8602d78e6c597310dd043d8
- SHA1 d45afc86223a9526de7980af04b4bd074c40d447
- SHA512 8bbdb72c8fc94500dc5d0cfd2647cc0bc1bf561fb85bc17b8a22916b341f23469267e84a969e7c1a9bc3d15ce69007dccfd8f8607ec1bd4db573ed4c4b2c9cc5
- SSDEEP 192:Pd3sQAIUfKn6SBUh5RMxN796ZyEmCTVdYm/f1e+aqfdjwyxyWyA23ivd+SRbO7VC:Pd3sIUfKn6Q796ZBU5+a4wrEvnby5s
- TLSH
  T10F92331C97EA0759F6F28F7056BB17160E26FD52FA21833BC2C420698DF5B44BC64A72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  Aurora ONE F_V2.0_Music.xzp(unpacked)/Aurora_QuickView.xur
- Size 14KB
- SHA256 f9da2c21677baedb7a0c857dbd6b651bc0f150fec96f11860ca98a2af3ca994f
- MD5 e77120dc42055efb538a7c3f549e271b
- SHA1 9cab992ade6dbd25f45df8d8972b63244f880f34
- SHA512 5212afc68f949e5fc4c0929ab72079f59b35088ec0bb93d303179bafec571b8c598f7e0643561fb51963439e4e32959b90e1147bf4a73db6e04e8a493293a35b
- SSDEEP 192:frJZLi9H2pgf+vvoH9/fexGeP2ZVAkVc1o0QrDxga2aq5/:jJVWH2pgf+vwGZr/
- TLSH
  T19D62F21C65A02EE3D9A5DBF3449BE7C14826D71187A0EBFBD2C6268CE4B73B43C05925
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  Aurora ONE F_V2.0_Music.xzp(unpacked)/Aurora_Settings.xur
- Size 22KB
- SHA256 d9a1c173710abb626c1e4a187790edfd2c44eb94a80dcf43b28157ad732b33f3
- MD5 f0034c0222352ede3975086392e3c869
- SHA1 335c67fda601f846f1a04819f1035af901c8ea1e
- SHA512 ac35707f8f292cca7705288d3ad089cc5fe3ecee7557e600477aa867cbf5ebe126659554c6cd69c6b0d9ba9de8826e38cda1cdbc9efcacc511df0711ae36cbd5
- SSDEEP 384:s/hppxbO0w1xyCuAEfjpr0424slgC9PGnC3uCQ0cAq/Bz1cImDz5lIk+TU8ZEG1R:szO0w1PuAELpr0424+hPGbCQ0cAq/Bwm
- TLSH
  T158A26811E6E00617F2FF9BB59EFA11516EB2FA517723C33E8084622E6871740ADA5373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  Aurora ONE F_V2.0_Music.xzp(unpacked)/Aurora_Settings_PathConfig.xur
- Size 2KB
- SHA256 1d86746a8dc83801bdfda8f752082c26447a21fb6d135c4dfddc8aa60d36c96e
- MD5 c78b5f6a378d4cc45238675368789af2
- SHA1 6a254ffac32fb4a0dd032d9af8deb16a9238f57b
- SHA512 0ab7fcea32edaa9cc7060fac3e8ba41494eeb9463604e992c1341c29a4a56bb4f927e2b0b03cb8d7e1b1f622f807cf600c827e007244ae69ab1d504c200bbd15
- TLSH
  T12C511322A3F4161AF7FB97B56AFB64716A7BFA930716C23E0094905D2A7174058C033B
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral27 behavioral28
- Target
  Aurora ONE F_V2.0_Music.xzp(unpacked)/Aurora_Skin.xur
- Size 132KB
- SHA256 c5838e89e3d6f5936a0d53d67044acfbc91a73192f503a121faa863f007b919f
- MD5 f2d17e8abc89d13dfc474eedbd83cb6a
- SHA1 a462d54b74a273a21600c910e9748905c33493b8
- SHA512 a23e5ef559868576ead1849d530bac9b0aa55f33a3a59723dfee154b72130c8e62fbb79a59e8a9fbbffbb583ae991ea43ca8c8a20c10775170826efa6dd7e076
- SSDEEP 3072:Qn5FCDg0bfMyY+hSxHlH5HkHHVRHicSHi0eHij0Hi596k1BBLoQZ6NJ1lTUpladH:Qn5FO7QB4UBVy
- TLSH
  T100D3262CA7E40B52E6B68F7059FB1B152F32F951FE11873FE2C421596CB1380BCA1666
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  Aurora ONE F_V2.0_Music.xzp(unpacked)/Aurora_View.xur
- Size 12KB
- SHA256 1c5156f04926e18db1a4ae35c2cd46b973706fdd9354901dfd36b4b06f63f8fb
- MD5 ec64f331fa9bbc5a21d8917597ec1de3
- SHA1 4a2af91139b0156b8b4ce3616e6c1f9f370f6646
- SHA512 daa43f70a3f58b8441d499705b1dd21cfe7b60c8e54d7ec14181ed6bcea2afb43483779bf1142f62e10abb926cc1c128f9702df6e699a9a338e6944b1befa824
- SSDEEP 192:Rhtr/+lyJ+sItjis+fAU0yIvQxYhGN+/RLFC++++++o++++++++++o+++++++++g:RLr/+lamMIyIvQxr+5LFez8igR+
- TLSH
  T1E8525A11C6E84607F7FF17F29AFA2140AAB2FB913B27C37E5084725E1430391A9D4A76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32