f8c5a836169b9feaa36cbffc25c0d0ef899ec0c41a80feee812668d349aa2381

Sharing

Copy URL Twitter E-mail

General

Target
MOTHERVILLAGECAMPINGDAY-1.0-pc.zip
Size 1004.8MB
Sample260718-kvfb5sew3p
SHA256 f8c5a836169b9feaa36cbffc25c0d0ef899ec0c41a80feee812668d349aa2381
MD5 480060682cb2e9202c9d555d74bd466e
SHA1 c1e170e3713234d3dde28e26fc8c0307f37743d3
SHA512 d4cfc01844d788e3c76a7c9cf730e982be3c0cc54d03adbe21afe671389ccc9b43b72e26c2795bb02c6586d7fd92ab7e5c5d6afea9b4f7e8a3b53a2eb9d54a04
SSDEEP 25165824:04UYAi7VetdjGpyKvzOOCqlEtrIiBY2Tbe3ad9F:04ULUVe32LOOZEtzF7j
TLSH
T10CB933E38D4D3AA6D0A6B173D542691C8FDF04067305E74E192E8B03E6D32D1B2AB767
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  MOTHERVILLAGECAMPINGDAY-1.0-pc/MOTHERVILLAGECAMPINGDAY.exe
- Size 102KB
- SHA256 19390c0eedcd974e57a13cc03f78454f6de4e2f36d85f412249d1c04841dd0ec
- MD5 9fc5c56438c659fb4563b12ae8186608
- SHA1 51c1d56b47e30c95d9151378a7bbb2b93e74708b
- SHA512 78bafaa8b57dc3c88acec0b015a291bf1857593f86b54a4514857523dfd6a95a99a97bcb0a1e9425c127f1958ac1ab5797ecb7a52a72e00ed8c649c7f3d1c475
- SSDEEP 3072:V3Yj+8JlFCumUbyJlKP8HRvkduTK5Nrh2o9Dj0fmoQ:xQ+IFCumUGekHRvEuO3go9kfnQ
- TLSH
  T1E4A3F206BB1615BEE922803EEAA70666D7B0FB6317514CC71211A2301FB7FC19E379E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1
- Target
  MOTHERVILLAGECAMPINGDAY-1.0-pc/MOTHERVILLAGECAMPINGDAY.py
- Size 7KB
- SHA256 66526e6346efed54f195ea18cd992bf22ba3ca4ee38785cbefdf709c29d3dff4
- MD5 91d522c0c3010299ca924b543c8658c1
- SHA1 1a2a5c4428da1c0b7b27171285b329af5f4e8650
- SHA512 8528ff59794ddb30cbe4bebff92fa17df5e3868902639a3fc458f85cdc4aae961f761898fffdff01265d89231314fe3067730fb52ef87e5e8f6721d0202cee9b
- SSDEEP 192:7F1dwQHjiJqdt2RqEq3yhhKBqMJx45KB/H/osX3qwkF0v8UTri:7uKiwdtzvihhVMJ2KNf9Xaq0H
- TLSH
  T13AE1B756B5D536A183036B68DD86E0842326E4E73EEF117836DC63943FA581053F36AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral2
- Target
  MOTHERVILLAGECAMPINGDAY-1.0-pc/MOTHERVILLAGECAMPINGDAY.sh
- Size 1KB
- SHA256 45728b9a6b2d4c4f6e5bd4f531632c5caaffe823140e428b022df01577bfdf02
- MD5 66dcf48d08516abd5336575f73d67f79
- SHA1 51928712d389d408863190340349507c0a044448
- SHA512 26c03f4fb55188b20ac837d5f4b5d57be944546a69948cce8137cf5595cdb36f85c88e34269f6a1c61cab1e825ff7524df02bcd4fc5bda51f9eee58213da70db
- TLSH
  T13731FF42B6708A73010B92BC27CA60D1BA0A495F4129FD6F7F5E92718F361E930F12DB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral3
- Target
  MOTHERVILLAGECAMPINGDAY-1.0-pc/lib/py3-linux-x86_64/MOTHERVILLAGECAMPINGDAY
- Size 5KB
- SHA256 d46afed2da821bda746f34871227ce730d4fa497f199ed700b87141e91aca7e0
- MD5 98e7362d89a6a8c3859842174ff554ed
- SHA1 c74da6f96f58cced419fe9bc305ae3ae9d9527b9
- SHA512 6351177b60392a39a04915a451b939a87f4242fb26f6cd8234808388c00cffcbfdef325df4b32bf18788da0ef2d1341039257f9d02a9d594f35fe3bbd3aded8f
- SSDEEP 96:Ru2THnMBWBPUcpMR9mA0V1S0STh4EkfclcKEY5A:RBo8pUcpG0VLS94e
- TLSH
  T12AB1CC1AF3A0CE7FC8AC82749057073933B2A85453510BA3530562B53D633DC1F2AADA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral4
- Target
  MOTHERVILLAGECAMPINGDAY-1.0-pc/lib/py3-linux-x86_64/librenpython.so
- Size 26.8MB
- SHA256 5b2c3d79fea4c1472c2028115d7de8db8331640c7377066d142ba854e1d9f5e5
- MD5 fd8e50aec59ceae3158c226569244317
- SHA1 86ea237675d39298a11f12ff0e5fda7c47b43715
- SHA512 eae1d7e6936858428ad1fc8f50d3fbd0bf89438872a3e1cb723aec6951aefb8e219153ae43f7d8b57e0a473eec3ceccc5b790c3d78f4edade4fffaad562b6598
- SSDEEP 393216:Sv3uFJ5XCPwZSHDCtYM1EigjRz7ZNXmSZcg+49F8QIqAfmsMX:UM1Ei0Z3Zcg+49F8QIqAfmsMX
- TLSH
  T1F6578F07B46214ADCAB5C830CE6EA532F778BC4D41726BAB3194B7603F75A50AF59BC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral5
- Target
  MOTHERVILLAGECAMPINGDAY-1.0-pc/lib/py3-linux-x86_64/python
- Size 5KB
- SHA256 12e8e803b4a9143db9fb8ce7856778c282b6c1b2a7dc724f1afd50916a9be13d
- MD5 31d7df3b09ab6e156f944533dcdf5beb
- SHA1 b7f49076b1ad5a935bd3901d09e18b47f91894e4
- SHA512 7031e6ba7309305b6f9377aabbb85473d443b409d2b07fcd2c6eb308c62089c20dec1ca80590e3e28a07d73d07aa26bf5629f7400507e2bb03816a9f59477ddc
- SSDEEP 96:Ru2TcnMBWBPzUpMR9mA0V1SoTh4E5fclcKEY5A:RBl8pzUpG0Vl94J
- TLSH
  T153B1DF1AE3A0CA7FC8AC82749057073933B2A85453614BA3530172B53D533DC1F2AADA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral6
- Target
  MOTHERVILLAGECAMPINGDAY-1.0-pc/lib/py3-linux-x86_64/pythonw
- Size 5KB
- SHA256 12e8e803b4a9143db9fb8ce7856778c282b6c1b2a7dc724f1afd50916a9be13d
- MD5 31d7df3b09ab6e156f944533dcdf5beb
- SHA1 b7f49076b1ad5a935bd3901d09e18b47f91894e4
- SHA512 7031e6ba7309305b6f9377aabbb85473d443b409d2b07fcd2c6eb308c62089c20dec1ca80590e3e28a07d73d07aa26bf5629f7400507e2bb03816a9f59477ddc
- SSDEEP 96:Ru2TcnMBWBPzUpMR9mA0V1SoTh4E5fclcKEY5A:RBl8pzUpG0Vl94J
- TLSH
  T153B1DF1AE3A0CA7FC8AC82749057073933B2A85453614BA3530172B53D533DC1F2AADA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral7
- Target
  MOTHERVILLAGECAMPINGDAY-1.0-pc/lib/py3-linux-x86_64/zsync
- Size 102KB
- SHA256 6f5f16bab2d71e0a839035e84736077904d9ddda234667543a458c1fe093bbf3
- MD5 dd65efd1fedddfcd6f77009d8b9d3335
- SHA1 5f40fdc0b4d33aa4864f2f2d262aac2fcf9bc23e
- SHA512 4841be318acb10466e222629557a15046246780c1c43c136fb4fc1e2bf9ae56ea42caabddab4ad411ec81fa9d1cb61ae04384105c7e602b9a380bc735dac7420
- SSDEEP 1536:mIJcIOiL/a36A0ItFH++bMpRoFn2S/xhoy+jrK0wAIPLoP/VEkwrI:jJSimqEtbwpRodj/xh3L0PP/VES
- TLSH
  T14FA38D477AA215BDCEF5CA3546DF016AF7B0B441A30257670788E6303F52B289F1EB98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral8
- Target
  MOTHERVILLAGECAMPINGDAY-1.0-pc/lib/py3-linux-x86_64/zsyncmake
- Size 102KB
- SHA256 bd835615874b8a48cbea4cd3d7f702e6815caf3a51aca3da96f4f4873002a759
- MD5 91ac765c61c24b8bd89ace83771f5261
- SHA1 390b3ac559a3782d0b75c7cc411f243c59b7c9ae
- SHA512 bd8bbd85ee99ccf08419e9321bd62ace3b05f3811ce7f310279d599b0daf002fd7e67479f2e31b111d02419cee258de16699fed96ed7f57a5ebbfab661426c1f
- SSDEEP 1536:m3IOiL/a36A0ItFH+YxJSAphY+qwRVPboP/BEGuI7heaNCW1lAz7E:8imqEtZxJlhY+qhP/BEO7he1
- TLSH
  T118A37E46B5A2216DCDF5C9358EDF4226E779B04096060B6BA788E7303F01B285F4DFE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral9
- Target
  MOTHERVILLAGECAMPINGDAY-1.0-pc/lib/py3-windows-x86_64/d3dcompiler_47.dll
- Size 4.3MB
- SHA256 44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
- MD5 7641e39b7da4077084d2afe7c31032e0
- SHA1 2256644f69435ff2fee76deb04d918083960d1eb
- SHA512 8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5
- SSDEEP 49152:aYlc/220PPiMLKam+VMrLi21f4i3jn5ZO3XUDmOZQwVd2uQpN3WsGVUWd55i/jrs:a6KD2Mrdaix4NQnLt
- TLSH
  T16F267D5677A840A9C27BC178CA574313EBB1781403349BEF55A0C665EF33BD26E3A728
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10
- Target
  MOTHERVILLAGECAMPINGDAY-1.0-pc/lib/py3-windows-x86_64/libEGL.dll
- Size 436KB
- SHA256 b20c1e14e42da55c13dad3c23a5060ca086eaf5b18b12ef5c60cd7e80276a9f2
- MD5 1090bf4c5495697a1416cd77481cf7d0
- SHA1 94452eed4fa88dcb0a5b3c503a12f3a3b5f23ee8
- SHA512 d205dd98260d033300afe3f2a1c0c06f3bfbf158067fc3290e10ddf6f51eb80b57af56fb0e75a56b82dc3ec49190c5d2c296aa548b64e39b4b004f60a7da89a6
- SSDEEP 6144:CrHQz/GL44uCWgSqTpyGRxyB5EdpmMB6cm+p4HRw0FlA1Qu4P:uudhGDyB5Xa4HRw0FlCQ
- TLSH
  T182947C29B2A448A9D036C038CA174A72DB31B89A0F75F7DF12E5D2692F773D45B39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  MOTHERVILLAGECAMPINGDAY-1.0-pc/lib/py3-windows-x86_64/libGLESv2.dll
- Size 5.1MB
- SHA256 3f6ac8de5f762222e06d91c325a8fa85dd9c22dea3abea0e1f32757b8f28bfb7
- MD5 d5ec899dd2796fa4ca97f8c0b06b7dd8
- SHA1 e1e8ee50bf4a38978b14ef37aca2a3d0b0bb81f4
- SHA512 a3ef3559d76ce6f44ce0283f6d2cf410fbe268c0b1bb6e6b65eacdded9626fcb9cbfd9e778a26f60b88b29f728cb1625d86c50977b9b25e108a5e2d0ddf57b3a
- SSDEEP 49152:1DACCG8Tv8sHXPetIG6zI7pjClKmPXYRpFYEv9Wh17S43WVnNSeNsCL0gWOPVo6Y:1DACC5v8sHfvlfkvghk3xlkihzsfFUQv
- TLSH
  T1E6464A07E1E241ECC049D139578A9533EA31BC8917347ADF1690FA612FB6BE06B3E716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12