ed220dffb1a8dac478f6f5489604c9669db35e26d09e38e147b7357f918bc1ac

Sharing

Copy URL Twitter E-mail

General

Target
Microsoft.XboxIdentityProvider_12.130.16001.0_neutral_~_8wekyb3d8bbwe.AppxBundle
Size 28.7MB
Sample260714-pkrpmsct8m
SHA256 ed220dffb1a8dac478f6f5489604c9669db35e26d09e38e147b7357f918bc1ac
MD5 d784706922d0f85daf7765c27ee630f0
SHA1 0441398f873262dc34ef9fc7136904fab5823aa9
SHA512 0559aa74cf05475c634ed98e86e6b70c0503658a4f394b1f7737c50147e2cd109003506e790f4ab073b53cc2d4c9fbd3f913419e58d5bb6e44d244cce5858006
SSDEEP 786432:MlYhCpuK9G1vzddUUFzPRTW1c1y6i0Kln2oMPK:MlKCpuK9G9ZdU0zPEwTmln2BK
TLSH
T18D6733B3C2A8E49BE82F48B355B696D8386B2C7C5196F513075EB55DC0A26190333FCE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  XboxIdp_12.130.16001.0_ARM.appx
- Size 6.9MB
- SHA256 885b4ea30adde0a60dd978d9b6ee84d3a844ce9588825a09c7f25c9aaf19cbc0
- MD5 be592457c0fb32a9dcfa5ff1ea7f5930
- SHA1 32cf3b4a14ed3b783036615301fabc8934f43cbc
- SHA512 c6ae55993396ca81784a562aaf727a8156f46ad28557107b23502ca5c58a77df0d24b3bd6b23d68e9eb7cae416496f8068b87f7407516b3106aaca7a5c7bd52a
- SSDEEP 98304:jIyX4qQ0r12B7PmYX3EeNi35qmPpvQcJM/hefLl7hdOZAS2SPCGLVbrjyOjHuikx:EyH12BrmYHXQpqGHRLl71zaVbDEHv2YX
- TLSH
  T1C0763326D2D4ED5FF60FC9F702C6D2683C5D2AA8B7C16E464252D80FC181AFA03A759D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Assets/xbox_logo.svg
- Size 856B
- SHA256 87d5f013f085dde853745e452fd077e4d683fca8255d26cd798ac6e8b11bd2c3
- MD5 437475088bea31ac7c62dcb65db70094
- SHA1 b8dc7ccc1ebd21f091627db83e55d603223b1e77
- SHA512 e7d31f630d403beaa183236335aba8701d2650fee51d37ae85f8db4d3d2ea5cdd5dd88aa1ef92eb28c29919b702a7ceaa7687c5c66ede0e1bbb1e3959ca6755e
- TLSH
  T11B11EF7512BCEA6484C1278893FDBB833ABD609EF0B246F847A901471C0CCE77920417
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  XboxIdp.Native.dll
- Size 61KB
- SHA256 a8df8a75e4d5cd3f1b7d974c3d64c2609b75fddb50484d65da0ea330868d2678
- MD5 a905a279b8e85ca73478061e0b014fa2
- SHA1 f8c35be566a991b204e0b3932ffc263cfcc7c8a2
- SHA512 00cfe1996ec3a03698f2ff99d84d416c44dc9acaa7e4379fe53b288ada7a8815ac3599ddbea9197b7a6d57446d319e4c261ffe148794f6f76e953371de69022c
- SSDEEP 1536:EgLJdGdA3RAPfu41bRKOn7/JVg7UWPS86pr6:pqe3QG41YOCUWPSDpu
- TLSH
  T1405329407784CF75E0CD04778C5AC6C84B92B9A63CE167973E49431FAE723A04EA6E67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  XboxIdp.Native.winmd
- Size 10KB
- SHA256 aa549701723c2a2f99bcfcf04d657fbc8612b77ac96f696cd1ae6ba0bf6866d9
- MD5 19b332e5e1175c2ada321be5ef40680e
- SHA1 2eef6b5a747591b3a5217c25ca83b1f2f00cee41
- SHA512 5637548364a116829d5d7952a6c4e7b25349e8fb2e84428cb62b1d5d223448b1eb3478b22e84b0035e1125d8238901a8fdb37b54a5b45e904cb35625f01076fc
- SSDEEP 192:G3NB8ooY4tTfcf0eOEUeW6z46I60brrLlpBnKPpHfTJUx0n0orwCoX/njp1XTiLw:G3NyoJQfc7OEUe5zfP0brrLlpBnKPpHd
- TLSH
  T15522F887B6E28767C9B317329CDB4F91E331A32952CB472B12E46436BCCE7D61B12494
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  XboxIdp.Tasks.winmd
- Size 5KB
- SHA256 e6a774f68b3b30a603ec1680ecfd7d9c4265afc85dcba37ff46cf8d0ee6a032f
- MD5 57815ff5273535503a1a99a3b243b40a
- SHA1 830d9ca17b9a4bc58f09543292128c3b998674d0
- SHA512 6da9b433c991e6ec8102f066a60a272b008af8e71d7f8804fe40cfcc813f4e2626644a686be7cb322dbb976a95e6b8e7d782e9e763c08fcb2f4d6fd9fc359fe0
- SSDEEP 96:d4SFJbNLSJ6R9dcE+1iPavK0gKc2zRc0Os/ISHnS5Sw/Bs5hirejwV:d4AJbN+J6RncEYpK0bcGc0715crj
- TLSH
  T1D3C1AC5263F8496AF5B35B755DFB5B200A3BBC926E73C25E0684845E5C30F808E61B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  XboxIdp.dll
- Size 12.9MB
- SHA256 c477611a887742cd2a086442f1ccadf0559eaa715b022a5ded531436e3c895e3
- MD5 f51593c1a514a001d063e8b64d8ad3a7
- SHA1 4af3bcf56bfd7a198ba7d0bb9f1a2632b59232a8
- SHA512 3a5e0fc170d1747c3ee906db4eb6d5a683d0eec752ed88ec6ee22696de91416b0132af92e570a60be39d037433d06b26d59a6a979363e6c14e42f3d832366266
- SSDEEP 98304:RhWwCFBL3pitVmc0gPlVi3qK97XQl+ofkPh+DAmLu52q/K:zCFBL3TcfPu6w7XQl/fZ7u52q/
- TLSH
  T1A9D69D42A3DF5730D6D2A6FC99E2DA104A5DFC7939A0C90EA11077FF3933A258D92217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  XboxIdp.exe
- Size 19KB
- SHA256 bcbeed2619361c1f4ad42646d12e4ac32877e25729f8a320f6557fc390a67620
- MD5 8d594eefa2d137c188e9772000bfc67e
- SHA1 6163d343f0832824c36429381a4e3733b75be5a3
- SHA512 506a9094f5bd2dff7aa81e35154fb9880eb08c2db0e67da2706a0d799c14de42d578df8d4992ab0083076eb5d4fb6bbfbb570068928aeb1794318ebadde073da
- SSDEEP 384:MhS1r55esbNBax4c4HgyOnkeG6HYfIWeJoWpq:MhS1r55QDq
- TLSH
  T1C092AB6082E4D257F343C7F1C436DCEA89306AAA1C62D8653DDD1209BF5E9EC2265DB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  clrcompression.dll
- Size 57KB
- SHA256 b9cbae38477f0f8329d4b86f15def6f737e3c5de88204e5e5ed29e8cfcbc34c2
- MD5 adf293920e441f0e6a8d2549872700ad
- SHA1 512ded50443be8b6987e16f6e8fe7101dc154299
- SHA512 dad922521f00224e5c5a4fbc2715f2f95adf0e2feb5edcb510697d1ace8e57d27b87f960dcfe0ef9ac773e1cfa598aa6150475c0d0d5684d76b734df92e54114
- SSDEEP 1536:nIW7/+dRHcPnToIfvIOOVcZN/EpzS6Bh4:z7qR8fTBfhOVcZNoz14
- TLSH
  T15B43BF92CF249B13C9FA0934D9C6C95A6F36F2922BE15547200DFBC83853794AB342DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  XboxIdp_12.130.16001.0_ARM64.appx
- Size 7.2MB
- SHA256 a54d328b4fe036dc74dbb5182d19c51374f53395b4745793937e61cf17dc08fb
- MD5 97170bb159f38a782b4a6a428ec7a052
- SHA1 8648a9527584cf6dd9fb4fe02cb2aa28e0c2f31d
- SHA512 99a7dc20d4652315e02f9d0a672330842b27344a9555dfcca8967da91d0d8291e0c59ce433f5df2e7900e3fe3d58f3ff7c045b5afbab45a86b9c852ab5dfac24
- SSDEEP 196608:8yH19NeeXzD52y2lO80gvzdUHo15tjUxCdRlZwIJ:vP98yGOlgvzdQcjUUrZvJ
- TLSH
  T1E77633A75315E18BFC3F9C7315390AE9237B1627C85335AB033F925ED62752B6326A80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Assets/xbox_logo.svg
- Size 856B
- SHA256 87d5f013f085dde853745e452fd077e4d683fca8255d26cd798ac6e8b11bd2c3
- MD5 437475088bea31ac7c62dcb65db70094
- SHA1 b8dc7ccc1ebd21f091627db83e55d603223b1e77
- SHA512 e7d31f630d403beaa183236335aba8701d2650fee51d37ae85f8db4d3d2ea5cdd5dd88aa1ef92eb28c29919b702a7ceaa7687c5c66ede0e1bbb1e3959ca6755e
- TLSH
  T11B11EF7512BCEA6484C1278893FDBB833ABD609EF0B246F847A901471C0CCE77920417
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  XboxIdp.Native.dll
- Size 75KB
- SHA256 feae4e04e71d775d3cdb3905de49b8369e116a58350570fe24a4e04e7224846e
- MD5 308aa3ca3e1f3841361eb7d592dfe296
- SHA1 b1ebf869c90f4e80225a9622c0adb998199c8014
- SHA512 e661550db12d828401fbbed07ef9a677dbf72772e67c041120e02646564dc40b1e1f5bd59eb25af95ccaa43fc14578b31408cb5971aed5acde98d298696d8034
- SSDEEP 768:uV43SIA1dxyBrzMdDl4ZEutXICO/XKlAL/NyohJsmFiRfH9DMiEXas3/u:uV4ipDuZEYDzo/LiRfHR9Casv
- TLSH
  T15773E5916B8D69A2E2C6D13C4E678F68325BF9249BB0470B3525470EEFFA3C0DCA4553
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  XboxIdp.Native.winmd
- Size 10KB
- SHA256 6a86243529cd113129ed336d9817f71000b7240d1c814f9851e7e5012b863e25
- MD5 f3e498ea33f66fa4e730e39c06683734
- SHA1 7e69ff325db71fa10d00312fae6ee2bdeb8fd49e
- SHA512 7af4856ceef43c603ce0512825a6b31e4040ddf8a569981318729f454229866f33800eceb49ffdf8a7fe24d64b6cef7fced19bb907cc12fd3a98b21b77586b5e
- SSDEEP 192:q3NB8ooY4tTfcf0eOEUeW6z46I60brrLlpBnKPpHfTJUx0n0orwCoX/njp1XTiLG:q3NyoJQfc7OEUe5zfP0brrLlpBnKPpHj
- TLSH
  T1D122F887B6E28767C9B317329CDB4F91E331A32952CB472B12E46436BCCE7D61B12494
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  XboxIdp.dll
- Size 17.1MB
- SHA256 52d5ffb1ed64da3de17d7df1c4404d21263650226bc01a445270df93bbd919e7
- MD5 da8802916310c8d633bf7a62b4c70cd0
- SHA1 dec1ca4ec19909c53caf6a558765b088a516b61a
- SHA512 165a8b8f609c56c6056c0b7a6ad55b770bde57e1d7739019ae3371442c0979c1337ee355d39b87bfac371ee696611d07d6f6ef2de577bb4349bfeb24a132a60c
- SSDEEP 196608:iHt1IzKqxjUr7Is8+sb3jTo/46lrKW+cE9g2ZZ6u/8ax:Q1IzVs/sbz0Bp+cwg2ZZd/7x
- TLSH
  T17C073A81768C2913D5E5E27CAF278B40A7B7BE644135C2CC7062210EDEE7FC586B72A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  XboxIdp.exe
- Size 2KB
- SHA256 f47a4f17a18972db85c1c48e3cbedf4218c0ec837173a81a80997ab054b87cf7
- MD5 99427d898ebdf37c2fb33ec7ab2cd223
- SHA1 a01e384c2e734dc35ad8d4bbda27605dbb0bd29d
- SHA512 d24041654e270b1b7d720476aad35aaf4777c33e1a9354108a36bb173248f83a2499030e04939795cfa10cca8a0b0303fdc8b34a442ec29385ede4044f21a421
- TLSH
  T17E518B86B3A265F7F139837E0043D284A1AC372443D79B1C3A04102958C299B3A77FA3
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  clrcompression.dll
- Size 64KB
- SHA256 4f68d6fbf1aca16d5b7200f8b92aaf747b07b0b8fed35f2505551457e9ead1df
- MD5 ba09912a4f72aeb93228655476e7483b
- SHA1 cee0f5e676cbfcd77ecf569f1593b17b8fa99831
- SHA512 32907f69d5d46940699995f680a68eacbf8240bc3d8cf0669ee7012e10c1bd6abeacf197a2091b99832ba1412c81f2c86a0bd3711988585f262ff46e4a5d6827
- SSDEEP 1536:dx+9RWPvdFFah3+5tDjG/KHlw4lknToIfkIOO+ZyJ+oYBco:dxBvdF0I5tnG/KHlwrTBfKO+ZyU+o
- TLSH
  T17D53BF818FECCB43E6F25434D9D6CD25763DF2A08698A51B610EE3A82483FD5A7143DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  XboxIdp_12.130.16001.0_language-af.appx
- Size 13KB
- SHA256 99d55b89f327ed05030319acb93d339875015cf263cc3a05f543ae0a682fe2ff
- MD5 0cbb0acb8f34f49193c83be3e7412dfd
- SHA1 40b0fd8887f4fa5bc5ffedb0090037767ef9d706
- SHA512 fc7b3379b9342e73504c6731a5b08142b5baac1085488a8f1547f04fa60831f6d9c2abefbd2aeb07cc8c4845d586dad9e4366c5840d45ef240afda94f3e482a9
- SSDEEP 192:cIz3uHtnyP9ve3W2/SCw8+hbCcWd80DjzSS6CAz4x1akcTfzF1P6VC8KArRPC:xyC5hLk1Djvr2a0ffP6WAr4
- TLSH
  T11152BF73BADE7866DD2744F3988645CE71A0CE9810368FE13708352AC4CA4DB968CE27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32