113da1a55e32ca0ecb0e2c0a785d7c4af2871254d2a1532ed115357cde84efac

Sharing

Copy URL Twitter E-mail

General

Target
EndlessFloor_v3.0.1.rar
Size 12.5MB
Sample260716-en2nxaf141
SHA256 113da1a55e32ca0ecb0e2c0a785d7c4af2871254d2a1532ed115357cde84efac
MD5 371270a2ca77fffea92a0f4be2faaa5f
SHA1 27540b522d717c3f0de02d788a8825ca462b2079
SHA512 4992f38545f8641d9333ec097383f8887752cf5488f477831e1793ad3dad34e624a745552659043abcaee0ae775e818fae476926cca852489a86731587d829af
SSDEEP 393216:TKbDaTQpc6M7HUtUalYatPqQ9aosDyg9Yo:TKyTQpcSbh3KT9L
TLSH
T10AD6332D57B4333A9CA2741E66EF4E7958D2CB218802D7D8493F3495842BDB4F25EF82
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

ransomware

Malware Config

Targets

- Target
  EndlessFloor_v3.0.1.rar
- Size 12.5MB
- SHA256 113da1a55e32ca0ecb0e2c0a785d7c4af2871254d2a1532ed115357cde84efac
- MD5 371270a2ca77fffea92a0f4be2faaa5f
- SHA1 27540b522d717c3f0de02d788a8825ca462b2079
- SHA512 4992f38545f8641d9333ec097383f8887752cf5488f477831e1793ad3dad34e624a745552659043abcaee0ae775e818fae476926cca852489a86731587d829af
- SSDEEP 393216:TKbDaTQpc6M7HUtUalYatPqQ9aosDyg9Yo:TKyTQpcSbh3KT9L
- TLSH
  T10AD6332D57B4333A9CA2741E66EF4E7958D2CB218802D7D8493F3495842BDB4F25EF82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  EndlessFloor_v3.0.1/EndlessFloor/ai.zip
- Size 224KB
- SHA256 0d5922d258c037916f00545d74091ab1fe25ee5afc5273e653b981d90ac87114
- MD5 04e3e23eade64b7bee182a1088f83076
- SHA1 e7f1d5ea607331e47c67bdc504ddd871e3d19138
- SHA512 827d7ba63489c36b17e37747c46a21ddbfa6b7e5c43f5fdad225653c81d775f504da1f7909a2120adb065b47d6757b903a4a0c8e56d7c63beb458a8efe03382e
- SSDEEP 6144:gfjjkM9Xk1JJFowwU+ifjjkM9XkjJJFowwU+C:gfjjkM9MFv5fjjkM9gFvb
- TLSH
  T13524026B880A82A9596847700F98F934F86F1710D0B76E34D75B1EF05FE7FA04B5E268
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  ai/fast_lane.ai
- Size 1.1MB
- SHA256 453b721364e559b8948933fa9ee71450c71a0b589886c07ba10958f9c3a68b69
- MD5 522d1ba75c872bb287e56590f744fe42
- SHA1 60228b22a9b4997d1f955fe6a852cf78ad49bd7b
- SHA512 4fd77ed7ef1603aa9f2fc40f4e0b67f52bbd202efdf2b9b28e79b52beabbb8d8bea9b0a0795de9ede7897f5c3fc567df7ef4c8ab187bba8a0a0d2477902d55cb
- SSDEEP 6144:FykMv4getUOJbGYBSiiiiiiiiiiCHKKKKV:Fs7jOJbDSiiiiiiiiiiCF
- TLSH
  T11E350B09FEE55F03D663823899E39A193B3EC4889726D72323C9727638D37B51DD12A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  ai/fast_lane_payloads.bin
- Size 42KB
- SHA256 91f6008ec1d5fae858a62a0cbaffe7a167c96eee2b5f40dc1adb8f62e4e7fc13
- MD5 ba1ecc329622fad0d5c3bdb6c3a30fb1
- SHA1 8ddaa309e64cd3e28bc91571f2c16dbc99f88568
- SHA512 04adacb1c4ab99eac741c70cc630c61541e6a6bd110475c7d6f7d7f514637355d88f6ff1c0ad5b47e5d9a856695986b102a7d618945e9f725f5fc9454a955a8a
- SSDEEP 768:UrQo6sph4QZopo8i+G721l6rpqQK4M4GTNNm7uuoExZ8poP5K:Mn6LQD97rj7jGxNiLoEP2AK
- TLSH
  T11813F16FC2E61EFB431C6A7CBE1CA08446CCC26275F2D6AC547846EA9E5FF8458E0650
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  ai/pit_lane.ai
- Size 1.1MB
- SHA256 453b721364e559b8948933fa9ee71450c71a0b589886c07ba10958f9c3a68b69
- MD5 522d1ba75c872bb287e56590f744fe42
- SHA1 60228b22a9b4997d1f955fe6a852cf78ad49bd7b
- SHA512 4fd77ed7ef1603aa9f2fc40f4e0b67f52bbd202efdf2b9b28e79b52beabbb8d8bea9b0a0795de9ede7897f5c3fc567df7ef4c8ab187bba8a0a0d2477902d55cb
- SSDEEP 6144:FykMv4getUOJbGYBSiiiiiiiiiiCHKKKKV:Fs7jOJbDSiiiiiiiiiiCF
- TLSH
  T11E350B09FEE55F03D663823899E39A193B3EC4889726D72323C9727638D37B51DD12A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  ai/pit_lane_payloads.bin
- Size 42KB
- SHA256 91f6008ec1d5fae858a62a0cbaffe7a167c96eee2b5f40dc1adb8f62e4e7fc13
- MD5 ba1ecc329622fad0d5c3bdb6c3a30fb1
- SHA1 8ddaa309e64cd3e28bc91571f2c16dbc99f88568
- SHA512 04adacb1c4ab99eac741c70cc630c61541e6a6bd110475c7d6f7d7f514637355d88f6ff1c0ad5b47e5d9a856695986b102a7d618945e9f725f5fc9454a955a8a
- SSDEEP 768:UrQo6sph4QZopo8i+G721l6rpqQK4M4GTNNm7uuoExZ8poP5K:Mn6LQD97rj7jGxNiLoEP2AK
- TLSH
  T11813F16FC2E61EFB431C6A7CBE1CA08446CCC26275F2D6AC547846EA9E5FF8458E0650
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  EndlessFloor_v3.0.1/EndlessFloor/data/cameras.ini
- Size 508B
- SHA256 fb8b229e8063a2d6f6c4949bb4a23d22d3c97d33bf86533b0013fd5e50b1e8c1
- MD5 d7ebd19589ea505ee97e03f3e4f53ea9
- SHA1 56d2a326b6a1e94d42f974458b3a987fb45db1ed
- SHA512 d659c64a454e7498d8bceb36bc2832c7bbff436b8e30d98cf3954cabcb98e0aa72106f14be1f4164738e1ddcb30ecb53778539925787579649cd8062e4b69151
- TLSH
  T147F0053F550C969EC566F135653B72B724C5309183CCF971C3716A020DC08DC1258737
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral13 behavioral14
- Target
  EndlessFloor_v3.0.1/EndlessFloor/data/crew.ini
- Size 43B
- SHA256 4a60d4f3a0c6a2115b6bcfbe80ffab40cc78df3f2fc4f7e74cd37a0492c484f2
- MD5 6b8b1845441e2d39f5cc45b79c58e888
- SHA1 c7a1c6a314036247dba9f9942f77fba8afed1c6f
- SHA512 e8caf2dd909b709bb51fee0a46bd9835ff06315df5229ea5411b90ed566233dbd7b7f5471cbddd73411625b58be56f7c0830b820f61e304d3004f0920dbbc1b6
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral15 behavioral16
- Target
  EndlessFloor_v3.0.1/EndlessFloor/data/groove.ini
- Size 26B
- SHA256 79d9351bf8e016351dd9bb291ae51c00eeda94167f45ac0e6baf0f7065505aa1
- MD5 8e03692005c296aac99c994072fbe9df
- SHA1 cbcee4e69a740d6a92674c478ddeeaee7f0d011e
- SHA512 f2575ab39eee51e9396e8dfe36fbd1d4e5efb54d746c9b9a9ff3c1c01a78abdeedf9a94a15cfd04bf5e20a91280b828620204a2bfd2c5af0d49365c3e6a59050
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral17 behavioral18
- Target
  EndlessFloor_v3.0.1/EndlessFloor/data/map.ini
- Size 156B
- SHA256 d162885a1baa29124d8cc924998713e3bd9fb118efb434548f07cc3288c570d4
- MD5 9f0ccfc88952bf6573dd89f9a53a198d
- SHA1 c5a5b1b3b1241894838856b903341efbce9b7f69
- SHA512 dd5fcdfefd973f6a57bcfe250fa2ba566b5a2d29e4459b6aa7879768a191dba25fcaef15e7f6e53c7421c82e2cd55b2e7398fcf365eb6a7439b7e4955f6e3dfb
- TLSH
  T10BC08CECE0984198F56078229829330535EC714BE0CCC930A9F05A820C9280480A1462
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral19 behavioral20
- Target
  EndlessFloor_v3.0.1/EndlessFloor/data/overlays.ini
- Size 230B
- SHA256 0065ae0f28d6dc1b37b4a01acfe19da469e08e5048180c7d428be23d2e0bb9be
- MD5 9109270eda6d544b2d91676d5b45539e
- SHA1 c2b05a07e351e4fff33faf47a0eb346f799c9c51
- SHA512 7987513525e8bf81ad90a409e8d8f12db12736f6ed5df655e4ba54d5860bee506a5c2c786d24b5120b5b2898dfd0f6c36ee9f8389e57bb9453e8f30d7baf4a11
- TLSH
  T1E3D09E92920566A2DCD8E563501C1D4294CB073281C976773D7C4E1D8EE4DD4202893D
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral21 behavioral22
- Target
  EndlessFloor_v3.0.1/EndlessFloor/data/surfaces.ini
- Size 219B
- SHA256 ed2a2b986bf86f702cf0a60b5493bc1833359db80971f65093bca49511d14ed9
- MD5 3822b818ee7ad1fc9e01366a416aeacd
- SHA1 d8fecbf8a35947c0d306e6e8c75df35f9b9eede4
- SHA512 f20273cda6b07ba862512f8d2cffa559bf6d7ff8f41ecb2b3e0844482ebc858a72f6f66a15f47a0f2cb38bd87c1c1190ea6efbef80a5c670bb5a8c9bac4a1e14
- TLSH
  T1ECD0A74A527113E95849C12A11B6A6B971C8501020A9E7314A66C3C01F5240A1109429
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral23 behavioral24
- Target
  EndlessFloor_v3.0.1/EndlessFloor/endlessfloor.kn5
- Size 24.7MB
- SHA256 b04eabb8838685be1dc3b61a0e8f6e75687b20e3512ebc9860ae5afb74085b2d
- MD5 01c221607ed5d568abd2662b8a85c0db
- SHA1 c290ef6b65b7f3db963ed376f19c57bb748b846d
- SHA512 eef68408b92af980499aa7aa0f7736b8db155039a61c1c8b4a3df253f21d16361d85c51e70df06796f4e0b1663501117a14279cf6d05aac58a13029b23e66805
- SSDEEP 393216:ZdNnWsq+8fq4CMHdh/lmMYP4enhLqphyaMO7vDqTPva7X0L5CM:Z7WVNfPEHlpqphyaMOXqd
- TLSH
  T1A3478C7850138A9EF7B594B8497B2FD6C879C1FC66A6A07743B5A40C3CFAB5850808FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  EndlessFloor_v3.0.1/EndlessFloor/map.png
- Size 2KB
- SHA256 38ec661e960b1a53bcb75bcc13558b160476149c7c0f41e5f5a97af5476c03c2
- MD5 71f3edc2cd4e4677ba2dbc52cd665fc5
- SHA1 71dc909ebdf1c74df6844b7806b85ba64c249a90
- SHA512 c14087d45fa0fe0a83cf3f8f3937332a09d3fd6bafafa5c1d4f45ae1a241eac6efd5a8b1a6b33cc0b4f01cc332eab1dba9e4be0539c2616b046b1c805b4ec3d9
- TLSH
  T103517C2DCA6DC926DE460DBD180388855B3E4DE2DA57142CC88CD1BE502CF6722A03BA
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  EndlessFloor_v3.0.1/EndlessFloor/settings.json
- Size 2KB
- SHA256 4d2bdbc073fdbee999ee1a09ed7973cd15cb6b5bc4bf9267d75772d2694c114e
- MD5 76921e07d79194bd03f1bbafd01c7421
- SHA1 4dae0a3cf4cfaccc64f4a56644288e860acdc6ad
- SHA512 0e1d3f6265311830770b2f6eed288642b717d24e54846ee87290a7b076336a739fe1c2455ed9c05c77bcb15ebaf1a8dd6ae52ce514b30f0670bc1a2a6199aa0e
- TLSH
  T15551B19CE1640DAF0577A37425690343F49B5F2F48C00D877CBC268D1F7A8A25556F98
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  EndlessFloor_v3.0.1/EndlessFloor/ui/outline.png
- Size 5KB
- SHA256 9af94dab7ae27c195b3653a437f9b60124aa43e82bc4fd524d44af59c080e882
- MD5 250d7dda47248b4f48065dcecc3d7ff5
- SHA1 8b60d1ae63a12305bd460041f2907550e8ccf9dc
- SHA512 3fe1a6d52f893654ac63aaf875129809a1eb56cc1fb9d4571e493be12eb3221c9af322f845c58d03a227e82634e295b7f5bf7729e28ca709828d36ec23cf8321
- SSDEEP 96:vt5LS1YmLYIid4UFrn782yy57rQflsr49719SLbEfHHeeRxlQ7pvCKmNvjgg:vPEYYYIidFR78MnQ9C497vSUHHt7ImNF
- TLSH
  T1F5B17D7A069BE71ACF8F09B14933B0E1E20F49E4A15F1418D09AE6DD615DE9200F53FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32