410f0b3e6ca96b5ddc3b2114b549d5f4b11837acc47b56ad23532b139fd17cb8

Sharing

Copy URL Twitter E-mail

General

Target
AlanWake2.7z
Size 90.0MB
Sample260718-3balnae16q
SHA256 410f0b3e6ca96b5ddc3b2114b549d5f4b11837acc47b56ad23532b139fd17cb8
MD5 945eb3ee444decb572043a5866167151
SHA1 c6f67fc71b022b86f8d57e779f80c605f7362db8
SHA512 fe549157807e50845bb5da5d7d4725b510b01b1f5fe16d70dce0e506bc9be3e1e5c855abf8350965f8bd3443de5f32f2360caaefc9f4d195048695421a439746
SSDEEP 1572864:P92DvqCobNH1Rr3yejO9imnI86RCnu4CAy7DCp++7xVlY8xjWmBUsZ9Dr0VDmUd6:P90S7bR1RbFO9iYIP4CPA+657Bl6DmK+
TLSH
T124283384E93BEA769A85EAD4C5C21D9544A3DF8C4BC67B184EB740FC325F4B24A0760F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  AlanWake2.exe
- Size 59.2MB
- SHA256 f3061c832dcb6f5976026433ab3ae8e960f3f3449b0c15fc43fa82e550c0ef78
- MD5 20f96f1644398fce23a1d0632d312045
- SHA1 ff1ea5529e78b774728baeb74dcb08dba4604c59
- SHA512 d7185040b62f8e8a42075070b1e8e533329337ab790d8fd602bb011a1d7c5ba65e568e126b5e2c31b5e8363b8e83b1632c5418b9b62b6771caf79390e4e0e855
- SSDEEP 393216:7CZZPGR7d1s2BWyq3FzJ4Qxo4YHC/OEFGo3a6U:zdor4QbYi/O8bL
- TLSH
  T142D79D66B27812CAE87AD23EC6ABDA13F7B038204B1147EB51B9474D5F33BE45676310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  ApexFramework_x64.dll
- Size 843KB
- SHA256 e91f303f355f24e96bdc04794d29d404d542f859c6e6c9b771eb678cda4717e5
- MD5 b9bed73d373f363a92d8032054c0daba
- SHA1 e4b53b681a1406fadbf56b80abe687b683912e9c
- SHA512 0325bdb3b3b0b15f3b365df978dc50000f1fe66ee0dbb98610c314e37bebd300bafa150d437808d2bf82debb11470451517a81fb346aa45eb4562affcbfb7bba
- SSDEEP 12288:X/AxQP8xAWzjzPv9E9tVrkQH+hCt6QNxclaXX:XoxQExAqPv9EhHH+hCt6QNhn
- TLSH
  T19205494AB27942D4D027C47E8277961BFAB23C54131156CB377182AAAF33FE09B3A715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  CChromaEditorLibrary64.dll
- Size 426KB
- SHA256 c661bd9ed3b82a3abd89bba0d8e3e143c2f629d022f71875c20bbf575d17c3ff
- MD5 003fbd81f0413fee1d8da82b195192a8
- SHA1 75d8e6ebaca6f716b2f157486e7ae26eb28c87aa
- SHA512 a044f740d5f7f462af521327c789b4993f1595215b39ae883af6738bb87593cbd888fecc16fd475e2f0858285c6c049f31fe19d105957d6479291fd54b571823
- SSDEEP 12288:XFmbqTdevVMlkomCiL4sv/h5jGB3Zl6ucJm50:XFmGTd6VIkzCiL4sR5jGB3Zl6ucJmS
- TLSH
  T1F8943B5BE25808B8C1AB917C836B9E43E775714C4750C7DF17B4826E3E27BE61A3A324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  EOSSDK-Win64-Shipping.dll
- Size 18.9MB
- SHA256 c3329002ae9fb633da8490bf6678d7c32644f7bc5281e13b115703786110e0c1
- MD5 83f1aaa98548bb516ebc2ea978215725
- SHA1 28c06226c511f66b61725ef6301ef44b0363fff0
- SHA512 fafe26fa84215063a900126d74731e86c909381ee04c938cd0d72d0459c7058c8397332ddc5ecd7deb07ff2176c6e9196aa2f74c586a62a58f52662f9a0cfd03
- SSDEEP 393216:XVn3ST/YWlPB56m5x6RbqNfimFBLlyitNIqXjvWwd8AKVo:XV3UWeIo
- TLSH
  T16A175B9672B401A4D4BAC1BD8E3BD902DBB1358A0B30D6CF05A495AA5F77FF158BE310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  MediaDecoders.WindowsDesktop.dll
- Size 965KB
- SHA256 cd5395abaf3357be797bcb0f7e636aacdccbcd0840297a99cb89627be511fe1e
- MD5 f230e94a54591100154cc1cce04df490
- SHA1 4fd8c030a31c88204d2a04ee749d55441219112f
- SHA512 3a3ba2cd1d53b2145571439fd69b2304e0224fa98712bed958b46827dd1c0b5fbcb936d02968a151c70f9af79b3d625a260fa624a89f1fbc9ba4312ba86b0668
- SSDEEP 12288:6iok57REh21fq5VZCh8hXO5og5WB8fEyUisChNIKyTl0lBMUnFe:6iok5WBZp/g5WB8fExeQKypeB7nFe
- TLSH
  T195257C4EF2A340DCC6AB8874853EB647E628386D43509EDB17D156E86B53FC09B36F42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  NRD.dll
- Size 13.8MB
- SHA256 9f387f0389cfa26ecdff216b6341d67a05f29a9cc2ed3a7c4177f91c30b0034a
- MD5 0f1e44557ce542638a34fae54a93422b
- SHA1 533996dc75aa388cebd99d8c64c9bdb35b539e28
- SHA512 57f45eae4cd6bc421946cc5170c8fc3e0319d1ca7d9de58b2b8459ed22ff004d4155b9a067adf57fea11b4ef696fe08b98072b5a586fd7b6a87592e7f029f78d
- SSDEEP 98304:JTK94pkDtpR3y5TpVzHhtba/dngtNqFL6:JT+ReVzHhxa/dgtNqFL6
- TLSH
  T1FCE64F0BE7809B37C9AE933B84F75B20B339D0285FD74793469C602479923696E731B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  NRI.dll
- Size 582KB
- SHA256 ef52a8bf47a85df29850bb91ebbb22ddf06fa0d03ff579a1f7f98b9d07e80d60
- MD5 f9d33b95f472b3e061a23e07072e66bc
- SHA1 a1669eb6f9cb36da28e7667d6ce2dd608693d0fb
- SHA512 65f8e64924de926a4b77dfa57095b6dfe67ace14a4403761bab86e2196a065ca821ecbd50d0517fe72cace6d1ebabd2ff0b99d92ba1b7744ccc2cddc6e1250aa
- SSDEEP 6144:XB8EjWhFf/17s5yNbCqKGoEslJ4zJNwqgpB3XDcdpk8brYteWn615ECN48igxh3B:XvahFf/K5iC3xzKTwN3T6++e
- TLSH
  T15CC45C16B7B810A8D1BBC179CA979A1AE7F2B445035097CF02E093976F13BE45B3E364
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  NvCloth_x64.dll
- Size 634KB
- SHA256 682c4e7f0c8e042a43bc0c54e61d0a8f5c777d691310dab58257862ed4b949a6
- MD5 e6ccd9637061c1853cbd9e38039c34f0
- SHA1 8599c730e6a4774198983f7b9e860b57c953f59a
- SHA512 35e86e176d909c9b46953afd0eb4f0066063c1294649afa642e8cc49afcc48345d34f1c0174ac92cb4d84088cf5140696022825274417ee631e2fa147b41ec97
- SSDEEP 6144:BMt9D+QS0guUObr9Oqbqj85Ii2lXsKjTSygDO+z4F7a9KK/hD7RLzs28jJx:BeU/qA85Ii2lXscScF4KKpD1zsRx
- TLSH
  T19FD49D46736916E9E477C13EC25B9A2BE67274040760A2CF03E802ADAF1B7E15B7B711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  PhysX3Common_x64.dll
- Size 1.5MB
- SHA256 480f7635254752c43f2b9150a75ca9b77b24eb56145aaaa01da0620851d76e23
- MD5 0b0da7df79a1f902f2664799644793c2
- SHA1 c7e8b2657373659126b454b7082729954d4da069
- SHA512 2ef3845a675d4592dbe901ea82d7256839eb2012579818445ab16c5511026fdf1b2fb5a03c668cdef661ef1c0aab0e89dc4ffa750016293edbc855f708d01b69
- SSDEEP 24576:BJ5HqornUqT9U3NElTKOxuYZ4WraZU7pwLkGvtGUytMd9:BfHBrnP9Ua5xuYZ4WrajbG
- TLSH
  T11E75F71034EDD6E6E42AA828B19EF51FF52174080B2449D763F20589EFB57E24FF3A16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  PhysX3Cooking_x64.dll
- Size 242KB
- SHA256 3d04cb48f88562a4d6d3b9d21e24aaaaead34006893d928cf4394cb8bcd9c5bf
- MD5 d6e13bdc09b21a63b867a54fa5175575
- SHA1 aec7b0753fac0acfba5eb72b64cc65fec7161811
- SHA512 fab015fbb26710823f04f114bc188ba5699c48472b3a0c45e838c34db3b9a0ccdcc34e693c4311b0700e8088afb5d5dc95398b4e1fa85dff2d44ccdb7a13ef4b
- SSDEEP 3072:k3dYYovjFyMyyxbhM6hRhOrZV7wSplwrb3tMfgSgvshJsyt5UKu+Psqc:mS7ZRyyx5UDpUrbGgSwsheMUKu+Psq
- TLSH
  T122348D44B3B84CDAE137503DE26AF60BF66138450314CAEB43A5818A5F67EE45BF7B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  PhysX3_x64.dll
- Size 2.0MB
- SHA256 49c2c9af6c57049edf9caf9eef585f143b2c5fc9f1ad7b5410ff452a0052cc84
- MD5 8bb36a6cab500927a52312afee09ccb0
- SHA1 ac93ac9fb7928bfa4c45a8c68860c9af9cec16a9
- SHA512 4799355559d786f8f1f24c256cb6a9171435bc2fff1aca143932e36eaeef3f228e8b5222e1daa1e26c9097dbebcb8028154b02601ae5a9d5508a260bb23a5d06
- SSDEEP 24576:3fdf1yRwMCHvBHOwnJBF80qAMZvKr3jzKfEKuhWZfa5Cd76Iwf03IufcHOyDL3g3:v91yDCHZTR+KrqEXoaApwf03IUcRDL2
- TLSH
  T11BA58E45727C80D2D57B907DE25BB60BF5313449032456EB02EA429D5FA3FE40BBBB2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  PxFoundation_x64.dll
- Size 57KB
- SHA256 82d979c0644e5bb564fb47b6996df7f0ad81f467ec986089d951e4f8285307a6
- MD5 18e571b550b5c8e3c9ffaca331af5901
- SHA1 f9057882255f74b87c425b10b5e5c503bf1e1c03
- SHA512 19fbaf0772ff68461abb66de987e4be0ae62053a43754a4e6305a35bb1a4fadf34c59194abaa65dcc6cf3b9e83a03bf4a7c877b80b8fe469e52ebb948ce3dee0
- SSDEEP 768:g9LjAv8aJ3whMsieXt6cxYhSwf4GKRHcaVz2A5:QLbOwgFc8SU8RdVzB
- TLSH
  T16143E88533A54095F63F817EC993AE2EB063760153D256CF0A65838D2F223CD66FB25D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  RenoirCore.WindowsDesktop.dll
- Size 2.0MB
- SHA256 5ab3ba56f1f2a92ff28afa72e83221d799521db18e6e4871944392b1a89406f0
- MD5 4d4dada7e0dd338f60e05441b350b89b
- SHA1 02a3109f49f655f51d1d8732ebf82fc0f41e3ad2
- SHA512 acc5482610d5c06f45a711c660c61ff1d2487fcb6b7eb02157723c84421ea4e737d331584ec8e58d4220a3e384d75a147b8f87bdceb91bd6d3e98e4a0ab19620
- SSDEEP 49152:HPVaiwCZp2KHKYuh77QudnMsA8pz93U5kljRwiYThM6V5gUI:WnQfs+s
- TLSH
  T1BBA59D4671B651E8D57BC17CC652EA4FE7713048072056EB13F04AAAAF63EE12BBE314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  bink2w64.dll
- Size 410KB
- SHA256 59db3ee4dc7ff3a4cb74bbf4261baf24b40c4109f23883e81061164ed904a04a
- MD5 31d1d74866061bf66baad1cc4db3c19e
- SHA1 7897a0c8f38cc3694e5f7e4234c88451cf2ad2d5
- SHA512 26922de59bb32d8943152ca4dc5b310b06428252ccd5bc54f5a7679bdf1a5792b7479aedd427f6854ab9b4ac9af08e535366dcbdb9590439886056221781f8ad
- SSDEEP 6144:FIF47b5z5c5RD8oq58i6X98X0aAXBrdrK3E++QzJkIJFeQHwdYUvBTK5V8uVy6oJ:6Zfqt6XC5A4E++Qz2ukBiVv86o++RE0
- TLSH
  T1E194BF0AF5B540F4E467903489AAA24BF6393C0D07A493EB56D197253F33FD0663EB92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  cohtml.WindowsDesktop.dll
- Size 6.9MB
- SHA256 59bd47da8804cf66f63bf96d791bce0d7abd4e15f7b0c8d1525c871576b10986
- MD5 0d838e1147c92447eb98023c9a3338e0
- SHA1 dfa81b487a6030fb36e74038fdaded50861d5589
- SHA512 d2e3b16645849b29416e4a443d0db532725f405a61dd57c21413f1c1b3090d1fa3e45190eaf043c03c6b062338d199473fe9eb821fd68b48ebcb7fe9a5f79910
- SSDEEP 49152:w+eBvrXRQKjEX2Tj6/E7Je5r+IZMyxxoMQA11SRZYLUlaSpksz7dgPWqVOwN5r5N:eNfSMWUvr1Beuk8/Ddi
- TLSH
  T1CA765B5BB27402D9C43BC1B88B17A727DF7235C4473896DB06B046A55F23AF12ABB391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  cohtml_icuuc.dll
- Size 1.6MB
- SHA256 c7c55defcbfa3dd643f87612c24defb5cf0b2a08b201f2732e6e9e879ef4f2f2
- MD5 1755169a55ad1e7cc0afa6dc57505559
- SHA1 61d97ad720eb658e25d178655a7279c4522bdc65
- SHA512 369f959b2ca3ba5eee71cded752c993927f106dd4df656e017e6fc5d1d400bec35633925ac673993188654083e24d8ea436761830df6e3d9879adf0283e02b60
- SSDEEP 24576:q88E2UGRDhn1y1MXLrgIkkxi665UfZ2SFw:q88E/IDhn81kA
- TLSH
  T1E2754A13FA5B9016D5BEC23CD6B70F19E6B1EC028F228AD3558517892E837E0897D3E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32