696ad11dec0a1fb2a612ecef32119f3003fd648423ed4137c0d78c72827b8ea8

Sharing

Copy URL Twitter E-mail

General

Target
Among.Us.zip
Size 675.0MB
Sample260715-1w8cbaez2p
SHA256 696ad11dec0a1fb2a612ecef32119f3003fd648423ed4137c0d78c72827b8ea8
MD5 0ee7e3f6a1c2fb851a51b71d533aa2b0
SHA1 44a02d05a038c08f19788ead38ed3add3fad67c6
SHA512 c978f6db70868ed0e329c622e4125e248f70dcd399f1607faef074933c2f38c1af76530a6b8ffb089a04ea03570d9763fb722340ee102149db442b6405292dab
SSDEEP 12582912:1J1dofkaobfwyYVTRrpcu/xlXCkfyR4wBLqmTstkjigBbkJky5ydiI5w/0BP/YkF:ro8VwyYFlxlXZyRPsmT8WigBgdkQI5wm
TLSH
T15F79334A0ADC4D7EDD0618798871BE4A5E06107647D4897B61A9DC9CACE3FF102FEBC2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  Among.Us.zip
- Size 675.0MB
- SHA256 696ad11dec0a1fb2a612ecef32119f3003fd648423ed4137c0d78c72827b8ea8
- MD5 0ee7e3f6a1c2fb851a51b71d533aa2b0
- SHA1 44a02d05a038c08f19788ead38ed3add3fad67c6
- SHA512 c978f6db70868ed0e329c622e4125e248f70dcd399f1607faef074933c2f38c1af76530a6b8ffb089a04ea03570d9763fb722340ee102149db442b6405292dab
- SSDEEP 12582912:1J1dofkaobfwyYVTRrpcu/xlXCkfyR4wBLqmTstkjigBbkJky5ydiI5w/0BP/YkF:ro8VwyYFlxlXZyRPsmT8WigBgdkQI5wm
- TLSH
  T15F79334A0ADC4D7EDD0618798871BE4A5E06107647D4897B61A9DC9CACE3FF102FEBC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Among.Us/Among Us/Among Us_Data/Resources/unity default resources
- Size 1.5MB
- SHA256 d6c3c5465ee5f1d3479af42c0833754a6f0b6c2897bc0bf35d37d944b1ea258b
- MD5 c732d1ddf70594ef6d303c0554100d5d
- SHA1 7235baeca643b19a7076abef0ccdc0c4b3199589
- SHA512 7bd90894333ee0722f5621c29df972a740e8babbca2cda11a3d320d87327a9d440953333d3987ea1c68a05bfa0eb03596a87e3f9c7a04868b74981eb3d4e9f25
- SSDEEP 6144:HB9JxVJ0aYR1CCVX8BAiZahi3YW+/OJ9WqCmKISHCkcCzw:18TpQahXvOjdCTnw
- TLSH
  T104755315A2A1153DEC5E053987A31E61E3BDE99C1BEB8B133B1C321CBF617488A77274
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Among.Us/Among Us/Among Us_Data/Resources/unity_builtin_extra
- Size 231KB
- SHA256 db056fc9788d4f4e93d7c3bd8655cde5a4a11a7245715a06f79011a72521abe3
- MD5 17808a1d6a606dbd5135c53234e1c249
- SHA1 404b14ed08da77bd34435725df79949ac21276a4
- SHA512 7fbeb76416ca0dd1d89c8b286d8fa43d95c997882db8e8083c0a889cb6e7e69d3267cde167133db11c488ad3370841efd5e1b045d5af83775f51beaadac8e3af
- SSDEEP 1536:USmIiXEniJxigwiQ0RSaF9/nz6lGyxi8i/6lGy0UdlGQ9+za3imDi73LGVWbPBb:UBfsT06b92aFDi73Lnb
- TLSH
  T15234D779635B583FCC21153748BA0B739732A5F81BEE0F236E6C5F6C28E5288AB11754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Among.Us/Among Us/Among Us_Data/RuntimeInitializeOnLoads.json
- Size 3KB
- SHA256 ae0fa193d2208582d2199eeed842535235c878fc8f91abf6aea021d44b1822e8
- MD5 4456220ce2fb326da9d495d838e499cc
- SHA1 53750598db47f8556a97e866ab531e224c31113a
- SHA512 7e5959289d7db49d8c1b2ab0bf94b6feb00bef4465642024051711ad0c421c6fb35d0be6252f7097af95880791e18aed496e155d00b1c52bed689440314bfc02
- TLSH
  T10A5105AC22C78F7F4F4BD3A7787A194D34940A0F99CA1904EDB90F3FA4B11692D8212C
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  Among.Us/Among Us/Among Us_Data/ScriptingAssemblies.json
- Size 4KB
- SHA256 709e58570f7365bcfd862d72de23d357ede1060bf6ebe4835fc56b25ead135df
- MD5 486657f1851aa584dc5ad8853aea71c8
- SHA1 0dd20f30105fa93fec5423429fd7c0eddceb5d35
- SHA512 92e1aa5dde806bd273c0e85109d899eab4faa5426c12e8349f9e00dc631d220f655ba01df27e6c10f4510ffedc661c11b62b785ca6de7b7c6d377dfc77c4dc52
- SSDEEP 48:YXNAYrKXrjFRlClouNuQGoSfTG/fjiF7Pg0bLxxP1cW4I6hHD1ze:G0jrlMouNtjia26FDFe
- TLSH
  T1BCA106B6C19B22D32ECC5FC38C758C8C39D301920A65D4145EAEA39FA979CDA3D5D5E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  Among.Us/Among Us/Among Us_Data/StreamingAssets/CustomAssetPacksData.json
- Size 137B
- SHA256 e5eda2692ae02be0f1ce3d669227489fb13ef417c13a6be8e268df7f831a2b14
- MD5 601cadf88bf97643cccde5bfb0ccda39
- SHA1 cd97f7930965c49eb10288c20593fdf40f1a0ce9
- SHA512 62f31f914038e598b73032aba22acb663a37480c3047a511a4d88ec52ebd0aa4bef4c224e90f576590baaa050093472e5d4e19981e02f9f96902d0b744b8f639
- TLSH
  T134C02B00109BBCBEB33E8F10D08DAE8B01F133004CB0C02CCC3703007601C745105435
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  Among.Us/Among Us/Among Us_Data/StreamingAssets/UnityServicesProjectConfiguration.json
- Size 1KB
- SHA256 11c0781bbeaf965be6681321c30774382a1bb78c44b94cb68568a5917bc3fceb
- MD5 c46706655f231091d8e466dd2050dad4
- SHA1 7c8d066fed294d3d22e1a4e784daf6d048e94119
- SHA512 d543f8898017336a52e50f4ab02003d4761ff73b0d6eb9f398e8d18d2ba4b8a7098b13ae241f05c13999868eb136baf9814fd087618344645ded9bf2bdf874f5
- TLSH
  T10B315A3080DBAC77A64C97C53C7615CA2BEA03466AED25056B7A5364FDB949B0F02C34
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/AddressablesLink/link.xml
- Size 28KB
- SHA256 4830b937f1d769f9b90dfd395e6d326424f3a4fb643f766b3c65c7d20ac4d1a2
- MD5 4d3c2a5292877f4934146a74a2649404
- SHA1 2d988896afe9e717e0e9ee43bc2b83874735d0f1
- SHA512 686e863067d2d77e0e17da878c662b836c0aa4272bc929d59e98d71c218fc7bac87d313e48d5a6e404f4117f285663e153a736f89aab4ad34b5009ec5ed12ac8
- SSDEEP 192:/FJs071m9Hvz67+aFpRt347YeqZ31auPtQN5rTfTITrTLdRRUP:NJsPu7fFpRt347eNQiH4
- TLSH
  T1AAD221B1429D3DEF8772AF155A1B44D6783D84FB036821AA3AF1393B6FE6A410523317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/0e13d00f4e855a64ab6bfe6989b0ff98_unitybuiltinshaders.bundle
- Size 53KB
- SHA256 70949541b46e9223ae7dca57133a8db221bc87575ffdac0ef8f73d87c0747e1d
- MD5 d8f6984ab741c5eb9ddf3d9184931329
- SHA1 da9b9177473576a6c71620e05ea993f5d3518037
- SHA512 77ff6315ad58d2f74359e84d0d7cdc3d2da984bac8ebba4542a14569fc0f794ee896a169f2ccedcfec5d6ca0a0b20c6bf38c6dfdcb56dc686f8b37930d0941c2
- SSDEEP 1536:B7cw1tcWm2TTumjB+ftfO7hHwmk9g9+apiozORcufWV:B7n1XumjAZ+hHwDO+jcuM
- TLSH
  T152339EB7822386E482162E94999CDB29430DEE1D750DF6F842BF50372C5F32A765C87E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/2024_birthday_beans_assets_all.bundle
- Size 234KB
- SHA256 791417ca66b3fae7e225d81ce1464cf1fcbd6682122045f784bd610e95cd1dd3
- MD5 a416affe1e7d92437e7f6c82fcb4c9dd
- SHA1 e20d13cb6d341e52fbadcbaa3ff53764b70f000e
- SHA512 a1f9d77dbb07944dc81f9ca5c645b275518630c949648a1aa82c597a8c7868b6ee1eb44ade3891fe0465ad5f6e32320a65a7ea68514008149f0ade2d520d2a78
- SSDEEP 3072:HTr69GB7P3fKDhhcWL+tFBrep9XZoxT5dd/wvEYjDQldiFTXrxtdB69:zr6KjwhSWLfyPdd4vEYjDQ6BxtdQ9
- TLSH
  T1723412A39104CE16D8E222F680AD4A23FE7F9A80B211700D26E57C7F7C57F551A6B3B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/2024beanbundle1_assets_all.bundle
- Size 2.1MB
- SHA256 145b23e74125b2c8abb70d4abf217c889e396dd98443a925b3020480728a650d
- MD5 694ea9891cf7db00e1a2888af2af1d15
- SHA1 098f982daa7a70daeeb3d499034faea5a258833e
- SHA512 70b7305036a0ce84da30dd80415089a05b0bd7d27426dc2b0c46f60cdb5266d401f5179da3c90da1f2fc91e2b1aecbbbaea041db0df463076573c86196bdcb9e
- SSDEEP 49152:mVzcdNkFb29A8fjvJDdfvBbh5N0x3/JSkrCgvcvocUL8w2G:mVzcdkWAiZfvBnNm/8krCgvcvd59G
- TLSH
  T1D5A512FBB34C9F75C2F4A23B92997DA394FBC5881472844DCF269ACB0D9B9541933620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/2025beanbuffer2_assets_all.bundle
- Size 5.0MB
- SHA256 60487e6d8da7a2cfa285f7aeee9160ecb365ffcb07355ebdf2e9306c6579288a
- MD5 6d4377e08895d98cecb3a7b24973c4c1
- SHA1 819b27b54c77fa52191ed338f50e55ef7f952e40
- SHA512 5a785f432b2a4a59fa40b64fe40827f04a8b594e8aa57f79957975d5c7e7e79ff92b2c55f2e207d69fbe20b61de3b58f8446bf04f6002bc8bb772bed364ce4c0
- SSDEEP 98304:sea6FyA4yRWOqfDzzbmVy43IM6r7uRHCN5PTU9Zj97JnCy:sea6gAdR/qfLicEIMyu8RI9hD3
- TLSH
  T10C3612E7B38CAFB9C4F47232825A5D67E5FBC8842072D94CCE154B8F197BA845623721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/anniversaryslothmask_assets_all.bundle
- Size 29KB
- SHA256 30364f520b5ec407faab27295eb7fadf6312da95a63d801a716198f778eb84d8
- MD5 1103ffe4274f0909d6860251b1b07fae
- SHA1 b5c61ab5c9c5281ee784c38e6cf2ea26caf90058
- SHA512 6783fe31b57adedcda9f51655b83836d0f1a201c0994214670cd4a3a46523fb77ecf45fb8b223390a60ea63fab876bc3f63de48864636c3a1f282c4d3414711e
- SSDEEP 768:ILP5n0BJ0/JyXiDKPinceLblJeBpcYFkyKdKD0:IFn0YIi26nRblQcqRD0
- TLSH
  T12DD2E18635CE9D70C4843EBD93DD532D58BFB24EF813E4A62926F7215EBF70A1818112
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/cosmicubelny24_assets_all.bundle
- Size 19.6MB
- SHA256 a1cd56a3a939421c55f92eab499e46b6f88f669142487c2cae1016646f6dcf4b
- MD5 650f998a54be4f8b82770e1d0e5b85e2
- SHA1 f51e2123f9fb69eb056dd2ba0e8dfaf5dce1d1d5
- SHA512 46ced2b97fddd3085ec3489f32e8a88d1b84551930dc585e61f38f9c77336d2b1c167f8d8e223890ebd20da78375bdf724c38c03cb31388a9ad7f07edbbb212d
- SSDEEP 393216:W7c5EKsUv94D+NvNLdFJCfWLmaceRKF2NARBzh7U06TKmf6nnOseEGg0JKAcG:YcJsUv94CRNLvJaWL8eRKF2uRBzh7U0S
- TLSH
  T19A27237B717DAA3849E6A232759B065E37FA45DC988FF148E024DD36BDF53100B1E282
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral27 behavioral28
- Target
  Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/critrolecubea_assets_all.bundle
- Size 14.1MB
- SHA256 6a36659803d2a74efa2bde4c6f648838c5d9df797e9a1e181efbd1d3c298f197
- MD5 45e436f5bacb50b6d1d0daa0fc5cc076
- SHA1 fec899a09d009a95eab72b3447c1619f36448acb
- SHA512 36c199e96edf3d0b7bf055aa21d436ff41aad45aac65f6bd88f4c643aa86db1ef1f48b581ff37279fb9d78fee2b2c01692c1501e335593f6811697fdd82db9a5
- SSDEEP 196608:w3KaGYilukT/svn4aNtGvWBocAebMBSbHkosdGFKCr+5hd:w6N8kTCn46BEcqGFkd
- TLSH
  T183E602E7B28CAFB5C5F47233C25A6E2790FB8C942573890CCE267A8F157B6805623751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/critrolecubeb_assets_all.bundle
- Size 18.3MB
- SHA256 2cec47938c849494a62df2bd383289d551e1b5995aa3721b485cb004fa9e2d62
- MD5 7b6435c74cc7f5325529dfe07e60a5f9
- SHA1 16efe899d35d0f21e87a1af0367236a41db4ca03
- SHA512 6fce742e380f0705351be1c9cdf4e7d83d34cbcf55492591fc5816bef041ef714ad4daa9703ed0546ed745071f569364405d4ca59c3e4bf41689ad0961d24058
- SSDEEP 393216:zucbZKXzVbmDoiBpxdQGJtbXLLNoqmsgV8n2/RnSiTjeeDdePmIxsr7VCfd4D9C:Sc4XzVbm8epxiGJBXLOqmsgV+2/RnSic
- TLSH
  T10617233F71BEA93848E6E122759B065E37BA15DCA88FF248E024DD36BDF43141B1D285
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32