019bf143212d9b9647e40ae92cfeabd3df4b2f1549575ed9cbbf8c5ddefe2ac0

Sharing

Copy URL Twitter E-mail

General

Target
Udonge.in.Interspecies.Cave.R18.zip
Size 124.9MB
Sample260714-s3pvjsfx9p
SHA256 019bf143212d9b9647e40ae92cfeabd3df4b2f1549575ed9cbbf8c5ddefe2ac0
MD5 0fd9563cf12326f7f7e51c19f84b84ac
SHA1 2c210f136562de9a06328bf1ca17ffdc78f938bb
SHA512 729c1a435a82bd6108ef68740bac402c22701f16f067bdcd3d20a98ce47cd76466a0167ac8f32910a974034c2f1088b8a360489d1c118cc3230b440ab04abeba
SSDEEP 3145728:H+R2uCXFcE9shPzsVuw0j1l+tT2ejYb9Qv/Ykp+ZeXCi3JAuyF:H+Ru+GK+u5hktT2ecJQv/YkUZeXCi5Ax
TLSH
T1B5583342925ECF4AE987303191BAFA0B1E11C23773C1DDEBB225D1AE6E9B6D00574B47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Malware Config

Targets

- Target
  Udonge.in.Interspecies.Cave.R18/STEAMUNLOCKED » Free Steam Games Pre-installed for PC.url
- Size 52B
- SHA256 677d2e85447eea64fa541b8e8a9e92b41e20456360bef8642f898e7eb1b2f0db
- MD5 92672216743fd0ad8799d25ec99e5096
- SHA1 68103be0fa83db8a4a2efac6bb6169ce959a0290
- SHA512 1ca286141902e64c4cac05fabc1ce0ef4d910582e720c8b38f3cf2799cadaab7cbc9d8fc925eff17e0d3280d5d074ebd856dc75d6cadbd95872cae14eddb7719
- TLSH
  T1299002574119C05D9316084C8411955689426199456AC4A4D241DF0D5D8B1589AE4708
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Udonge.in.Interspecies.Cave.R18/Udonge.in.Interspecies.Cave.R18/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll
- Size 596KB
- SHA256 377e6bccb3eb616aaad27784765313f940fa2da90b2345fb72de40725c6a403b
- MD5 4119e78eecf96029969fa4b1d955375c
- SHA1 cfbb7c77d14a65debbed271a29fce55e64e55d49
- SHA512 c96d8850cf2ea70e45d86243573d80692fd84a702dd7dd2762890c272357efd4a16a83e72a71e588f9bd79e6e6c66ac11d9b353a34e6a7b270deeb28d0a00188
- SSDEEP 12288:8OmYAmdeVH9Mwe9Ek/7jY4hOTBPyp9Gaap:8+AmdcMj9Ek/7jYSOT8zY
- TLSH
  T1E2D47C56B7A402B9E577D138C6834B5AEAB27811572093CF03A897AB1F137E11B7F360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Udonge.in.Interspecies.Cave.R18/Udonge.in.Interspecies.Cave.R18/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll
- Size 7.5MB
- SHA256 b2b8a806d91a52293d1604db342947a18e01a3ba247bccc43cc09ca5845ac4d7
- MD5 21589bd77ee4ae4cf11b0bdd899bf8d2
- SHA1 df5ad05527f18cf2ee509d04a0dbd39872f60ba0
- SHA512 ced5bb80d5355d54ba0dbfb2ea637d72bfc17eadd756a924d0912313efa778ae4faf5c1c3325a5615bf8365d69181ca85b26be7790ebbf39d4cc4d17a8c39185
- SSDEEP 98304:lFctgSW3JAKKNPEWX+A41rPKtAaoOGIlkZt4pr:lcnW3JWNcjLJPkAxOGIlkH4pr
- TLSH
  T18F867D5A92760068C8ABC23DCB676B33D775700443306EEB46905F6A6F23AE1537E7C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Udonge.in.Interspecies.Cave.R18/Udonge.in.Interspecies.Cave.R18/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Udonge.in.Interspecies.Cave.R18/Udonge.in.Interspecies.Cave.R18/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Udonge.in.Interspecies.Cave.R18/Udonge.in.Interspecies.Cave.R18/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Udonge.in.Interspecies.Cave.R18/Udonge.in.Interspecies.Cave.R18/UdonGame.exe
- Size 638KB
- SHA256 494c5ca81c054c4d054b84cd0342fc54be9f7efa88e4b0aad034f85be4f1c982
- MD5 60fb586710660f442fc3c21a03c06f26
- SHA1 782ba28708be98eb3b51c288d0f46df8bdd72f02
- SHA512 e482f29ff25c763155cfde5a98e69b7b3d31e62b00e9eb5b8447c4279b92010055b21b8f6d288968753d773826745575d7eb9c69fbdb9c7d985e926cd579c031
- SSDEEP 6144:gEbaWnBUCGRsFEVsUFVmU6JM3dVfOwfWv0y/6znaUEXHqHuT1G1:goCCYsPSBzyKQ1I
- TLSH
  T179D40A1A137EC8BDD63F3DB4C001E7B61B524DA224A5B436BD6231D589B778F1A2093E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- Drops file in System32 directory
behavioral13 behavioral14
- Target
  Udonge.in.Interspecies.Cave.R18/Udonge.in.Interspecies.Cave.R18/UdonGame_Data/Managed/AllIn1SpriteShaderAssembly.dll
- Size 28KB
- SHA256 79deb86836a44097a181033bf4a10fd5e436319b3021c27b5ed4f426a81b967e
- MD5 431d6d12d447c22cfdc5c08d835e6bb6
- SHA1 8fcbd24d7c63e23845227ab33b8443420f7cf220
- SHA512 57523c98b1667b990a735e64f4f59d138e05b00b3deb2026829eeb14b7afaf1b2c56218b7d6c719d9823d46d5e3cfcf2c1b4240002a4d6c526f1eebdf8936529
- SSDEEP 768:ZBBWVuz/qFRjflkVxEyba+cMBQLW9+B3vP/hYrcXEg:DjQRjfEbaFLW9+ZX/h3XP
- TLSH
  T198D2C8D175DC462BF66F2BFEA87005424375A5B76913DACD8C80B0DB2CB37914A10A7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Udonge.in.Interspecies.Cave.R18/Udonge.in.Interspecies.Cave.R18/UdonGame_Data/Managed/Assembly-CSharp-firstpass.dll
- Size 55KB
- SHA256 d9981b5c184821b8755e5d853e79b084a9fe5c1413e3fa5137aa472d9d770fb1
- MD5 ca40c63da4b743e1ddc0e36c732486f3
- SHA1 08d06d70479aa177678ed8728ce967c203b6f279
- SHA512 8b93984c293fb9846a2013135eabcf8a2e898dd9de5ee1eec1b9fbb14f76dedd732ac8a1c0c48cbf957e329673367520a5e148c9d215c74c4c1a3c9c74b4d2c2
- SSDEEP 768:ZXyKQk96s9Y3+UMFRT4yCqzDZ7FWd92N05LI6cDa/wRQVOVFiT4jvRA2:ZXyKQW6s9Y3ly8KOLI5+eBI4
- TLSH
  T188432AB897E81923C7EF2EFE5068051257B0D7269932E387A945F1F8258B7C25C523CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Udonge.in.Interspecies.Cave.R18/Udonge.in.Interspecies.Cave.R18/UdonGame_Data/Managed/Assembly-CSharp.dll
- Size 783KB
- SHA256 dc9971091254bb549ba3f5b55f1704d71a238ee25be76021ade8bff3d8c3d793
- MD5 4a3cd74c6dc9482a5d422563db2dd50b
- SHA1 1bbe69b20013b45b5dbb17be9bbadaeb29871ca6
- SHA512 bcc43bf43e2f24067b8cc3580ecb41301944d61c6b4b318d0a7c5a609770c19dac4e4ce9d04fcb5aad1ecb3c8b59a882d93b11be81d23176d90eb96aa315b618
- SSDEEP 12288:gRdrncC116reBZSXoxI/fAFzdhRPx8cZpa07bfNZcVkafWdMgUe3:K2EjyfWagUy
- TLSH
  T17D05394A62B88936E6BF477AA07249551373E406527EFB4F688CF8AD0FC77505E013A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Udonge.in.Interspecies.Cave.R18/Udonge.in.Interspecies.Cave.R18/UdonGame_Data/Managed/DOTween.dll
- Size 170KB
- SHA256 193a33388d97c32e5bfa456d78367d5f0877274a5b2c1b87979e1d743cb037e2
- MD5 f25d564a2814476f6765fb3edbd0595e
- SHA1 496d553027c56bdea34e004e4f321c2560387d88
- SHA512 3bb0ec36cb0975c9695057a423e203b2fb83dce59a2be1678086fef7f5eafd595e476f905d46f74dc956d839cbe657b55cc4be56b9cbf4754070bf0d198a73ed
- SSDEEP 3072:oOv8bczoe9qHpU+pENzhzn9SBXyz+L95xl3dDXBYrY2zis:vvhzoe9qHpbpIz6FI+L1l3D8Y2e
- TLSH
  T14E044A185BE96637CBFF077FA0B80D0D8338E95594BBDB6A1956B0F92803362D801397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Udonge.in.Interspecies.Cave.R18/Udonge.in.Interspecies.Cave.R18/UdonGame_Data/Managed/DOTweenPro.dll
- Size 15KB
- SHA256 be2f5973fbbe4cc3be15dc408a74b573fde77b4f4d37ea4156922a71f41182b6
- MD5 dbc30c9deee370be3af660534091585d
- SHA1 3109dae126ec96e75ce76c7c7205474112cfa1f4
- SHA512 f3fdcff4fcd21a7c2872604c9a7f8b321f22989a544e8cf88ef89568c78dfa335950188d7153aac7e64d73a6a85781b2aa8849c28ace6f7670357604c13efc92
- SSDEEP 192:YC/uIVVq8wdIVWfPvK+QVYMCrzBGcs8KbRIfnEs7lNBQZXB7oek8mVPW:CoE8II8vZwOAbRIL7lbyNoek8mVP
- TLSH
  T10C620B62A3D88233CDAE0FBF3D322F4403B4FA565952DB992898ADC919073C18591B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Udonge.in.Interspecies.Cave.R18/Udonge.in.Interspecies.Cave.R18/UdonGame_Data/Managed/DamageNumbersPro.dll
- Size 62KB
- SHA256 d88416b497008a46c2165ffabdcefcf93635590b5fa7855beb09250385211706
- MD5 ae62405f85b8db746076bfa909d6e4ca
- SHA1 547d34a1544136e4d9d0061f3b229034dd0da79d
- SHA512 0fc0004010d0aace735dc6b7577696d434c69da08a9ca65cfe3c24908958b0fbf787258cb7d56addae2c57f758aa5efd288a41bcf535cdba6a6bceb09acec1dc
- SSDEEP 1536:QAYiPRRepCEWNL6jseS8oHSW9+sVEd1JTDpZtKQZS:QAYQKpCL8i81+D0To/
- TLSH
  T1DF534A2073AC0B7BC5BF43FE50681842A3B545B6A127F7E99CC8B5ED1583BD41A4239B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Udonge.in.Interspecies.Cave.R18/Udonge.in.Interspecies.Cave.R18/UdonGame_Data/Managed/DemiLib.dll
- Size 14KB
- SHA256 fd092e3260ac45bc04a1bcf4cc3f6e42df1d1b17f918a7f321c9004ed96b56b9
- MD5 f624414946dfdfffd24d3b819f4459d8
- SHA1 f907ad7459015c560ff0c160630e3e19b7c3ed59
- SHA512 4f9305c151f0527703a7cce07ac709e5d0fe9980afe140b1efbcd2c704da3730fbd3b89cad103ac46f104504f9b10291e3bcad31c6854534de7b193273365ede
- SSDEEP 192:vxmce+fI7xxndxNSMowoDFUHT7zR74GMwgmxJ0DSmeNJQK4fREckMLlwrvrQZ:vxgxxgq/zv5x1NCT/LlwbMZ
- TLSH
  T150521B74D39C1B2BCFBF5BBC65E56E01723182468913FFDF11D4A22A124BB89054239B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Udonge.in.Interspecies.Cave.R18/Udonge.in.Interspecies.Cave.R18/UdonGame_Data/Managed/Mono.Security.dll
- Size 235KB
- SHA256 67998e69cf81b575c2432765b8d4584d5ff41137a22a1fcd4575665e8296699d
- MD5 da05cb8f0eccb67f40ddc752b68d5263
- SHA1 194b8f93fff5e963ffc455a68e4d82c960617e23
- SHA512 a51d1d6de4d6dcab19a4e95c46034594343be90761f75d0984905960d300b63dca00d8b961a32b54c8540eb1bf007fb8d1b38b0fa2208f80321b3fd5089910e9
- SSDEEP 6144:fUjTQ70cnf8MoVRxS9iJdBF119RJXG2yu+Q:eEiH119RJXh3
- TLSH
  T12E344A1863F9531AF6EE8779D4B15019C3F4F50BB9AAEB4E5C8282AD1C027918C41BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Udonge.in.Interspecies.Cave.R18/Udonge.in.Interspecies.Cave.R18/UdonGame_Data/Managed/Newtonsoft.Json.dll
- Size 675KB
- SHA256 a56146202232958f46bd6a28b5a7da166aea123ee0d646735a46e5c341dfbf1f
- MD5 d751086b7423fd5580b5e909b06217b9
- SHA1 c1707b17df636cd6d4a804361fc6ead4ef9db5cf
- SHA512 86655b59ad62664a35a30807cce7dc2c2be8f1ece235f35dc9031873d255dc6f13a22b55d0386becbe927f007a14a6d936ba3861d1103af8f2fe16aa0afebe11
- SSDEEP 12288:aBNYm5IWx4AhnIqjCfP4bYaRLL0eglBmjV+0kRqQCB0jEIF:aBum5I24A5LYa5g1ByNyq5B0jzF
- TLSH
  T119E4282063A89B26D1BF6735B4304D1547FAF807F2B5EB8FA604D5E92C977A08D107A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32