038a227863412e59c1bf5fc0d26329c92cc20024f798fedb88f3d3b248ecc37c

Sharing

Copy URL Twitter E-mail

General

Target
Dead Space 1 TR YAMA.exe
Size 1.4MB
Sample260716-n5by9act6k
SHA256 038a227863412e59c1bf5fc0d26329c92cc20024f798fedb88f3d3b248ecc37c
MD5 1045ca12bfc0eaf9b438007a79818daf
SHA1 f2ead891f1fdf4ed432091ea8f3f889193bb48d6
SHA512 3a17baff08c62574d167e15ee875fdff2b97c90650c78207a960ddba503899347a117489662cf37eb10b08c780cc196c311dd91306518d1ce62c6c28260b0298
SSDEEP 24576:8Z3XaDO412NHagWQ4mIrv4XzN8fprZWyxh7utT8IhO2WuqUFy7bBn0bKSXd+9vC0:BOqH+4hAm/FxEP0tuqUFypWdXY05Vnc
TLSH
T1BD65335DB71D3506F6A2EAFC212EDF916184F65D109A5386D2787480AE7B82F37AC0C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Dead Space 1 TR YAMA.exe
- Size 1.4MB
- SHA256 038a227863412e59c1bf5fc0d26329c92cc20024f798fedb88f3d3b248ecc37c
- MD5 1045ca12bfc0eaf9b438007a79818daf
- SHA1 f2ead891f1fdf4ed432091ea8f3f889193bb48d6
- SHA512 3a17baff08c62574d167e15ee875fdff2b97c90650c78207a960ddba503899347a117489662cf37eb10b08c780cc196c311dd91306518d1ce62c6c28260b0298
- SSDEEP 24576:8Z3XaDO412NHagWQ4mIrv4XzN8fprZWyxh7utT8IhO2WuqUFy7bBn0bKSXd+9vC0:BOqH+4hAm/FxEP0tuqUFypWdXY05Vnc
- TLSH
  T1BD65335DB71D3506F6A2EAFC212EDF916184F65D109A5386D2787480AE7B82F37AC0C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery spyware upx
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1
- Target
  $PLUGINSDIR/Delay.dll
- Size 7KB
- SHA256 b6691bf37f13e37bfc07d45990092fd9398f7eff8cb1bbad05e528def0307c4a
- MD5 4602d9a9ed82d646522ead08a58536a9
- SHA1 b070bad90e13e85c97bd4e530ca7958c22e36a5a
- SHA512 5ebad4e83d411799a25b1e462ac3c7683dd0c973f131eed29131af7a240f92f55e6c60b78f96388bf7c4134941353794d79ef6c91476e8def7e5c803544afec9
- SSDEEP 96:fkcYhKlqWFeJ9DekCN3jPpP4DyGE3qLNf:cXKMJRC5BfGE3qLN
- TLSH
  T15EE1D63777C242E1E44F17B2279A23B35E347A10534485BBC6ABD8921E9322BCC76B47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- TLSH
  T1CA325C5993A0C1F3D5A0823C0D973A7B1779722016B14FA3CFA35842AE196D7AC7D227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/WebCtrl.dll
- Size 5KB
- SHA256 f7e1e03c140cc86bb7b259f1882b4b461128d70213e7f030360a9c76d6c51884
- MD5 f134448c6531c16271d776cdc930cff8
- SHA1 6fa6ae69ee46486b33b41f08719319aca5d0382f
- SHA512 c83db0d30e51d5dba4fe4abab562fde9358f9970b32aef729f326f394e744698b936b134e8718afd9a2ac970daf287278b2685b77566c50f733f58897fd0c16d
- SSDEEP 96:EPR9lrwXckwd7NLLd8e1+A39Lji7juoxiApV3ii:EPR99tZd8e133xjkuri
- TLSH
  T1FCC15273ABE189F0DA01A43E009625B7EAB5D81B47C180271E6BDD6B3D438ABF665341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/newadvsplash.dll
- Size 8KB
- SHA256 53377d0710f551182edbab4150935425948535d11b92bf08a1c2dcf989723bd7
- MD5 7ee14dff57fb6e6c644b318d16768f4c
- SHA1 9a5d5b31ab56ab01e9b0bd76c51b8b4605a8ccce
- SHA512 0565ff2bdbdf044c5f90bd45475d478b48cdbd5e19569976291b1bdd703e61355410c65f29f2c9213faf56251beb16d342c8625288dad6afc670717b9636d51f
- SSDEEP 96:qD5UDaGxZH52QhtZafDP9BTS9nPg83UniV/zRzGEl1DMl1zN6LmeYt4dO:W5UDaGxZH5T0j+9nl3BzG0IZ6LqN
- TLSH
  T1A002E839618096F3D26F15F45882AB1D4BFAE074239290324F73A1EA6DC0297FDB6347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- MD5 c10e04dd4ad4277d5adc951bb331c777
- SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
- TLSH
  T17F12F8675A4041B3E9A3223D306A3E3F8B7C9325D0927C03C677AE566AB031A7D3A354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  $PLUGINSDIR/oku/oku.html
- Size 3KB
- SHA256 003db71c2908e69f0b2781665eac34605dbba3103adf4d93c7ef0928391c7a10
- MD5 7fba0e1045cd57a60b55fdc62b5a9d6d
- SHA1 b2001c306f9f3e1ea7368d4ffec2250e1fa1590e
- SHA512 5135001146642f2c9dee54dc9ea4c5c0dd46a3057b526cc0218bf335339dabf423c7f55de0a882ce71388219d68d8a4a25663ffb684457aee2ea2568b496f076
- TLSH
  T15D7186EA51064D2D933A0FF9C0D493CAE410A28AD7407BA8686DFC7B740C63BF5279D4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7
- Target
  $PLUGINSDIR/oku/oku/oku.html
- Size 3KB
- SHA256 003db71c2908e69f0b2781665eac34605dbba3103adf4d93c7ef0928391c7a10
- MD5 7fba0e1045cd57a60b55fdc62b5a9d6d
- SHA1 b2001c306f9f3e1ea7368d4ffec2250e1fa1590e
- SHA512 5135001146642f2c9dee54dc9ea4c5c0dd46a3057b526cc0218bf335339dabf423c7f55de0a882ce71388219d68d8a4a25663ffb684457aee2ea2568b496f076
- TLSH
  T15D7186EA51064D2D933A0FF9C0D493CAE410A28AD7407BA8686DFC7B740C63BF5279D4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral8
- Target
  $PLUGINSDIR/oku/scroll.html
- Size 970B
- SHA256 4e34f8c3fae3b93d221f1c137c5969ba051f58f0c0d1609b330e22620599c7e9
- MD5 31ac5fb0fe5fc063c557aee34e4063b2
- SHA1 b08a1a77b06f673893c9e510538d6ea2a0495ece
- SHA512 8a61d7b353c352f5a2de7419c20b2f58c88c202b6206c643ff8bf0982f169a29f2d6f14f8c58e09c82624305385a9f35cf5fa170f5f32f635517a75dd0a9ece3
- TLSH
  T10211C0BA3D4B4D18E335437491FFE1D891975402E797895084D1382B155D74DCCA3BEE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral9
- Target
  $PLUGINSDIR/scroll.html
- Size 970B
- SHA256 4e34f8c3fae3b93d221f1c137c5969ba051f58f0c0d1609b330e22620599c7e9
- MD5 31ac5fb0fe5fc063c557aee34e4063b2
- SHA1 b08a1a77b06f673893c9e510538d6ea2a0495ece
- SHA512 8a61d7b353c352f5a2de7419c20b2f58c88c202b6206c643ff8bf0982f169a29f2d6f14f8c58e09c82624305385a9f35cf5fa170f5f32f635517a75dd0a9ece3
- TLSH
  T10211C0BA3D4B4D18E335437491FFE1D891975402E797895084D1382B155D74DCCA3BEE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10
- Target
  oku.exe
- Size 41KB
- SHA256 6fb68e8621b7c8fd66b55b40a76c7f863cc879a7d4458e26b39348b611d9a9b0
- MD5 33cc4f9401d85cbed380ba7ca77811fd
- SHA1 f0b3431a9945597102300e8f3639a38821d307e9
- SHA512 8a3fd6384d6535304e0895def8e481967b5c81595e2f439e2650912f6baf7e7a04dffc760d13a815624c076a28bffec3c42d04876a0eb87e3400e5d76f1bb7e7
- SSDEEP 768:D1cVhpQI2EQK0iPDh84nScF15GYbWjXO3XJeBk6cnPWnLnIoH:BQpQ5EP0ijnRTXJ/PWn88
- TLSH
  T1E7139D1A36C5C8B7E5A30B311AB7D77BD7B6FF011621120B2B603FAE2E351839915293
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral11
- Target
  $PLUGINSDIR/nsWeb.dll
- Size 8KB
- SHA256 7d4da7469d00e98f863b78caece3f2b753e26d7ce0ca9916c0802c35d7d22bcf
- MD5 84bcf3c71e70d5a6e9dc07d70466bdc3
- SHA1 31603a1afc2d767a3392d363ff61533beaa25359
- SHA512 61aefa3c22d2f66053f568a4cc3a5fc1cf9deb514213b550e5182edcecd88fadf0cb78e7a593e6d4b7261ed1238e7693f1d38170c84a68baf4943c3b9584d48e
- SSDEEP 96:9E1ZgHfHizBkiz1zCuNrwXTP8Jx/N6SCMeNV37bnwXwPML/bUdut5tCsPb2N6nOc:9E1ZkGdbiSCMeNN7LwAY/gd+Oc
- TLSH
  T13E02A233B7C348F1D50E253529AB3A3BB73AE85B17C055121F77C98A5EE2426F824352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  $PLUGINSDIR/oku.html
- Size 3KB
- SHA256 003db71c2908e69f0b2781665eac34605dbba3103adf4d93c7ef0928391c7a10
- MD5 7fba0e1045cd57a60b55fdc62b5a9d6d
- SHA1 b2001c306f9f3e1ea7368d4ffec2250e1fa1590e
- SHA512 5135001146642f2c9dee54dc9ea4c5c0dd46a3057b526cc0218bf335339dabf423c7f55de0a882ce71388219d68d8a4a25663ffb684457aee2ea2568b496f076
- TLSH
  T15D7186EA51064D2D933A0FF9C0D493CAE410A28AD7407BA8686DFC7B740C63BF5279D4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral13

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

UPX packed file

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13