745a5d09a9bf4512b9cb86a02710c020d404a8dbe29f922faffe016d9c76d2d4

Sharing

Copy URL Twitter E-mail

General

Target
Palworld.zip
Size 18.7MB
Sample260720-a83dqads4t
SHA256 745a5d09a9bf4512b9cb86a02710c020d404a8dbe29f922faffe016d9c76d2d4
MD5 ae1c54e64ab4da1a6f2f1aafde0427ea
SHA1 8f96882cfa1156478137f9fa7b73b98642ff6563
SHA512 a2ed70b2f607410bd8393ba27b4db2eefbf5bfd9972609d991193fa6cab65729702e4ff88ff9f3c7966ae9729da3b550ccf1a9b5e96e965729faa951b53ad97b
SSDEEP 393216:KXLlTKLCEnPBiI3YkfrXbgMqIXmDmSOwq5MGXLNfbLlae:M6iI3hf7bg7IXlSDq53fbT
TLSH
T17E1733E0AAA640D27C0E477813347FCD6850CFA57EA5F5B41F329AB7D9D149488B8AC3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery ransomware

Malware Config

Targets

- Target
  Engine/Binaries/ThirdParty/Steamworks/Steamv153/Win64/steam_api64.dll
- Size 288KB
- SHA256 4df999c0c8cb12589f0864d52be5d4c775577aeb27fee28b49b188f9ba083eea
- MD5 500475b20083ccdc64f12d238cab687a
- SHA1 b13f17561a9a0671befbebf0aae7b51bcc0072df
- SHA512 de926d38118c808cde4d3a8f6fde7b56b755ef7938b9adadf0efaac45c853f3d19f4cdd5906b02a7dcca7d2c38b8c01cbd401ce3a7f5e3f9221776f0ed49355b
- SSDEEP 3072:ujTqkh2mB9mkVi635gRaeaZqk4YJDf32uB+rJFC9R+5z65lhTbCz+hnv91vFAyNp:Gb9mZOB3Zx4YUuoaRRFAymC2CPzbN
- TLSH
  T13C545A7AA2710CF4D076C13A88565E0FF670744B23629EFF2A6053369E676C21E3B791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Engine/Binaries/Win64/EOSSDK-Win64-Shipping.dll
- Size 19.0MB
- SHA256 ebc80f006df46be27eafce4445480c3fc5e41d7e9a818b97ee74e724c83f782f
- MD5 8dda2335f6e79dded5d7f5df9839d396
- SHA1 c452026d3daaf014873d74ae985961814201fde7
- SHA512 1395d2a21ac09b580d67494f3309c0e650e4debcca937f53e7570efd2c11877810ebeba0397b96fb6754b7d759ae1b7a57dac22df056f222198e0af65645567e
- SSDEEP 393216:m6J/riYa0IBG0F+Pxhtjrq4gVht9cXZJi7JZbWQeUV224f:m65P
- TLSH
  T193175B9672B401A4D4BAC1BD8E3BD902DB71358A1B30D7CB05A095AA5F73FF199BE310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Pal/Binaries/Win64/OnlineFix.ini
- Size 439B
- SHA256 6f3160fbd8a2db8183689c7332513d3093a5dc2cd035f617602ea53f81a21afe
- MD5 15ff6c73cd629e1a40b3a89851749656
- SHA1 5dde257eccadef805a740e8e3c871bfcad2fda7c
- SHA512 18760d6b8fd55ecac3bf89813baad6aaa09ea72aaaa5a8ef70971fa6bb37337815c2958eef9aa33b24fa6c05858c47b7c689597410862b5efba09d81e02439d1
- TLSH
  T10FF0FACD3DED76FD9C31567C3CD35D9374DE154A3107190074011D8A3503D11135510D
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral5 behavioral6
- Target
  Pal/Binaries/Win64/OnlineFix64.dll
- Size 11.3MB
- SHA256 b7f29bdf00d0f6461e65a97de02c8b498dcd704f96acb6daa3bbb6850b4dc8fe
- MD5 8eb2dc2ea50d8b9b654810f11d3e6d93
- SHA1 0a58aa1b13b6233f11dd8b0971485c6692b9bcf7
- SHA512 889396c7c839bde4e9df1cbde8054059c65d6f6aa5872fed05e62821b518fe9084d2aedb1b8af96bf75bb22db30c23f963e954abbc082554165934f93815e5e2
- SSDEEP 196608:r/bOx5E14CDNPY3NGiWWimT/2u8Z0rnwMcVzBpo+l+Np5XzUJGqwT:325cPKAOKZOarkzUpa
- TLSH
  T1CCC622F865E122B0D4E24500B147439A71C0661D45FC4C293EE77D422FEADAF6A4EEBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Pal/Binaries/Win64/dlllist.txt
- Size 15B
- SHA256 fc0befb4aae4b7f0eeb1c398fccea03cc795590e09db6628974520091fcfc516
- MD5 d7fd711e5e5f73da110115ce98beca0b
- SHA1 a04719d38bec9a97b8f098cf29bc863006c43a33
- SHA512 e96b14c280a83d4a0d5eca3ce6af8ea5ef679feaa6b70c2775ace90c4ab54682c74d620a681ae3bc09baa534ae643dc7551b8b650f7d84658f38a8934448af87
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral10 behavioral9
- Target
  Pal/Binaries/Win64/winmm.dll
- Size 512KB
- SHA256 ba37009eef6c041bc6d0a271c13679fb9e14a005bd7e038cee596cd4064cf8b3
- MD5 e59aac558d9f9c5d1312ac24d09c51d5
- SHA1 2f11c4b00f5f92d4466348f9501aa657c9bf6fa7
- SHA512 1c3b357074d62d5ca11c92d71ffdacb4a7e3d6fb17cbd4b489e5bea0032cea43650a6809388e98e4b98256b477c6b5dbd8fd2c7f4e3e08af00ef68e0ed4406d0
- SSDEEP 12288:XQxOD9ZC0WKOy8zMtJKpBmpMgBNwQuQmMzWq0hNwnoAZwl:XQxOD9ZFKpB+N7JmMzWq0hNwnBZ
- TLSH
  T1DBB47C19A2A843B8E577E178C897460AE7B17486233196DF43F046AE1F277F11A3F361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Palworld.exe
- Size 403KB
- SHA256 1335762393dffafd58bb531300cb9cf7add8218f5ae5f2ae0573a58127713d87
- MD5 882036b4b585705d03b155f607bf2062
- SHA1 c963164073eef335e637f88d28b40a485b7472cd
- SHA512 3fa196944934f52bda09278c24d87aaa90b8a55a00c366176e1612ff401c0ccb678d24904fcbd110697784a223b722c265fd7b12627e3f22becf2c8c2caefc02
- SSDEEP 12288:gp/+f1Zxmlqo5ijEtTXjmL45SOEPR7w2Ebsa4Ey:U/+dZ4owtTFe1Ra4Ey
- TLSH
  T11594E107B3F171E5E076863884A01607E772BC798624EB5F4B9487662F73390DE3AB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14