f8a49d5a3d0ff7199efb55cac5e8f2999e835fd384367292f9204834c0bc0582

Sharing

Copy URL Twitter E-mail

General

Target
Virtual Steward MkII 0.2a.zip
Size 2.4MB
Sample260722-dldcvsxgkb
SHA256 f8a49d5a3d0ff7199efb55cac5e8f2999e835fd384367292f9204834c0bc0582
MD5 03bf72772097dd0e67a3d9ea1d5fcc10
SHA1 2e6ee7779f46eb997cdade6908010387a09a121e
SHA512 7812e40b22035a43086aecc48f9498c873aff193a742e6694cd4b4e2290d0562b6dd1526247bf4def8a55761b94c58a4b6008ba0c772b2c9087dc52f4ccd4bb8
SSDEEP 49152:3wP3USV/Hdygv1HF3v5pdoKJUvgUsPpYCbNU38Qj02/u5+Vyhl:3o3UI/dhlF3vnddUsp/L/
TLSH
T1F7C53338F2B45312E58BC23F2C6B1A1552D17C12587255C9A734C361A2AFA5FFDB8A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution ransomware

Malware Config

Targets

- Target
  Virtual Steward MkII 0.2a.zip
- Size 2.4MB
- SHA256 f8a49d5a3d0ff7199efb55cac5e8f2999e835fd384367292f9204834c0bc0582
- MD5 03bf72772097dd0e67a3d9ea1d5fcc10
- SHA1 2e6ee7779f46eb997cdade6908010387a09a121e
- SHA512 7812e40b22035a43086aecc48f9498c873aff193a742e6694cd4b4e2290d0562b6dd1526247bf4def8a55761b94c58a4b6008ba0c772b2c9087dc52f4ccd4bb8
- SSDEEP 49152:3wP3USV/Hdygv1HF3v5pdoKJUvgUsPpYCbNU38Qj02/u5+Vyhl:3o3UI/dhlF3vnddUsp/L/
- TLSH
  T1F7C53338F2B45312E58BC23F2C6B1A1552D17C12587255C9A734C361A2AFA5FFDB8A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  CSP Settings/highforce.ini
- Size 10KB
- SHA256 b689942884381018ad8e1b406263056e69c15d298c9a95a1227ad215c8a89f96
- MD5 45edfc429bf2ca36977e01aaf6bc2825
- SHA1 6151434e77f539f314befa572e275db1688ff198
- SHA512 3d25781039907dda610072c3770bd389abd9956a08d9e81266d14b0957adec856ba579a128975c6fecc8a9e428780034d9fd0e3d31435f52e221dd93ea50de99
- SSDEEP 96:GaN3s3khdzJcloZlV8GuIa0RbQzUqhD8ue5eyw35WmIWx141sncnv1s:GerzJcli8KaTvh5egy0vv141Fts
- TLSH
  T17022D7342F03C14B6DEF0D9868952C5EADDF9730E913B547B26EE691E8AD02851AEC4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  CSP Settings/la_canyons.ini
- Size 33KB
- SHA256 289b1e5195076e379a02a5eca3bf94c98999d4e25af074702dfecfe43211616c
- MD5 3823ef4264d71ef76e17640201d81011
- SHA1 07bfaf8a16a234cea1557e35af4a0f6f86997273
- SHA512 4c050439f5b76c100dfd00ae04cada424c09eb706a2236739dae1d1b9d9ed66709e378b7361c49c8769498eabb8cd5195474803a95f0e98d81f50b013c2b3575
- SSDEEP 384:GHVIbT53TNEhGaeVzbTDQkzz8on5nIHsfxOS/ivOl:8abB6hGaKz7Qkzz8on5nIHsfxPqWl
- TLSH
  T179E2B7780F17D54B6F8F0C4A68A51C8E9EEFB321E063B102F96EA4D5A44D328458FD9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  CSP Settings/shuto_revival_project_beta.ini
- Size 7KB
- SHA256 f99feedf041a877e6fa3092824122493c115ae00c9a0d9e3c20e35e4c159cfa8
- MD5 fcd61acd549c1c6648800b92d6dade67
- SHA1 d40b260952ce5fed05491ed9b25d18fa210b8f4d
- SHA512 2dec703cc5066804b573412ea5b827d531233e14c47dc02b40e726bdc6dbf5e044197ecfe6d062c51f3cdc6447fa7cf475f4bc105b885c70bfe48ecf487a9ad1
- SSDEEP 96:G2O2LTfGfgfXiUvG2IxRzxvmskoa0J5AtvOVCreCiYb6nGqgDK:G2O2LTfGfgfSGGxxtr/AtTR6nG3K
- TLSH
  T17AF129304F26F54A5C8E1E8DD4419C57AC7FB5D1A863B40AB1A68A44C86F8352B2FDCF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  CSP Settings/union_island.ini
- Size 7KB
- SHA256 78321db082244bce71d97bb71087402ff84999fb0f1eb7bb9a849b13f621fa41
- MD5 7b39bb39f5b021c24baba4013749ef53
- SHA1 e9b5d04101ed29b5a132a24a9231380351b5b8d1
- SHA512 fa5bd8592d8060494da670408301d46eab34d8ec5ea1ed7ca64f0af058913fe56cb91043223efb3d4d4730ac4d11567cf02512e2c93057a13010385f44a3bb49
- SSDEEP 96:2znY6aDxUW00dLfd20gC4Va+NlEuSDRc5bzd:4nY6Ex+Ad20jgMlux
- TLSH
  T1E4F1E81C0B13C10F6FAF496A9C661C1AA5CF9B74F823B65F996DE680AC6C53451FF408
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  CameraCar/CameraCar.zip
- Size 340KB
- SHA256 7d91dd81eaa85a0fd5884a16d56db043ff6bb30d1b26ff31ea0896f4a50e5484
- MD5 d8a5c654b44a72770e4d38d3d3f61503
- SHA1 21410716a776d1370432ec0efd59f0c52b077440
- SHA512 190e285b6b5bcddf3875c20131e7e91246634a8e7ed83e253c5a8db80e79e3fb69fe434ba123dec0d6b56a956ae94da334866f38cf8c329c4353a6fc77cba309
- SSDEEP 6144:jQH0B+Pe2QlvYWUD7mDkna+z2+CFbG0CT9jiEofUkdR1YSWlv6lvYc:cH0B+qlTY7mYz2+70CpjcfUuwSWlylx
- TLSH
  T1B4741217FB4E4E1BD4CFE071C4B12F8741AE8932CFE28A9364A486E8DD82FD15151B59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  content/cars/camera_car/body_shadow.png
- Size 7KB
- SHA256 6794118ace1dba1b28922bafedc9959104dcdc4a6d5da8c6434dd2e1f74080ab
- MD5 2dabf94930273f73b196923ab7871047
- SHA1 119a59f8b0cadb24ae96088fd94809f9239607ed
- SHA512 d681b41f788067e438bfb23e2405929b6083d8f645670bf32ac353aedfcfecdfadc1d0190e47caf98391d2b3fd49b034c23e6bbe5025a86a8e2a6304119496ba
- SSDEEP 96:35LS1YmLYIid4UFrn782yy57rQflsr4971Mk0Ijenat2wWNJb90saz:BEYYYIidFR78MnQ9C497+kXUJhaz
- TLSH
  T195E13B1DCA79B8C1ED4E997A29E1414A0B2A45D3CEC68C09FCCE84AA5F207B709143F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  content/cars/camera_car/camera_car.kn5
- Size 3KB
- SHA256 ab702934465de25d61dfee2bf83a82daa194ea46fffc121dc43da1148b9ebfb1
- MD5 044b09db179917478aaee5b3684cb4f7
- SHA1 ad811f316b65e7652797a174855fe2e58230d7b9
- SHA512 6e61e946c74e4111bc433d03922956c88565ea7173df39f231a2dd5f61176dd453593bef6db003b71398ac67ca4b1343037cd78918209135964277fdf53978f3
- TLSH
  T1F261E6294711D61CC03A80744B636F19C676D8E21C7059B7AF399E3C2DD2B1CBF41EA1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  content/cars/camera_car/collider.kn5
- Size 3KB
- SHA256 3f47658ddf8169a3a7952c0c3ace311cac08c438bba93c1167caa258f2df679f
- MD5 b5d9c6b9d79bafe3e096672ccd85b4e0
- SHA1 fffff91775f6fdaadd9301f0fddfbe1351027e7d
- SHA512 ed1552c21affc3dea67f8950af0cfd024e8c5f902c7059354b21709f170bac3079625d3e213d5d7220c7236bb0371e2c4081e991f51695c99175b144192bede8
- TLSH
  T1848175DD13624E19C5F02539124A4EFA5A7915B6ACE3037F11B3EACCFED565801C46F8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  content/cars/camera_car/data.acd
- Size 215KB
- SHA256 aae7f868f70c00f549ec902d8c4b2c46f182d384b8ee8d0327ff91df941dc984
- MD5 38f9a5855fe0e9b09fbc3529f0cd44c4
- SHA1 fb59319dffa796745ffab0a6ab3ebbdecdfb9467
- SHA512 55e5e880cb50f29c5d06aadbc590d6073f7eb25a887b23c6ebb309432e2c309296655d332da2b3f4cbc2a7fd36d9350c03b35adf1b156c7e42f1e9ecb4e59420
- SSDEEP 6144:aOOdi3+8wr6ySo/R/IqBhlGezYEUi0sDkHe4IwMuCLogtwpxuYqzyw6Qc9+bGNaA:sdi32OIVzYEUi20+NS5uBttb6O22GbFe
- TLSH
  T1082425B40BB7E09CFE2615F22D9B0DC498B3A990E4C6B1E7526E715B86F177729830D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  content/cars/camera_car/driver_base_pos.knh
- Size 45KB
- SHA256 a06fc2d30faf907290b5622aa0120b0de7f2f52834ca117c8460c75a1f2ddd14
- MD5 58b7fc5771c2778bd2887955a44b6461
- SHA1 1942fa96de105cc57188d45bb7fa1f67fa5a1bb1
- SHA512 3e26634a6da5e758aacc83649e46c821cd5a88d4581457ebe5a0ae1de8414f49d48fd41771f5adaca13b542f33dbb04110142bd5cb4a22a0935d0f51ba3f119e
- SSDEEP 192:fKxWvVXV8QrX0MPE+w/39LT3HstTUK/Z6/ZNbdn3YXOZGoDg7ahikbbk3epdEMUf:FpekWk1j4fKMx6LWof
- TLSH
  T19923B357C83BC61DC8B0267D51ABAF07EA5CC2CAC8750A7323F8947E4EC4B1E5AC1256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  content/cars/camera_car/logo.png
- Size 5KB
- SHA256 b6458da8bc354c41ee244cff8cf92037078aacc69d4600b00b99e8fe8173e2a4
- MD5 7b89cc5e8e7876b7820b8acf9daf624c
- SHA1 07b1827577e61962b3c4cb27e411238a5998be8e
- SHA512 fc5dabd1a63f4b2de915cbf851ada5b7f217a0613f6db49b46af6a648d9eb1ad70ae9ea191f2fc7c8e809514110a6905d05516516107913c36c920356572279e
- SSDEEP 96:83BzSBBheQV51W+SwfGoxu4JzyucvvYYiL94JCq2mt8M2m6wDZ0qoeFHxM:GSBBlVW0+iJncvQLBD1O8I6wDxF+
- TLSH
  T1AFB1A0EEFA506363D09AC0EE4641BA9258BDF21BCF914140F1B78990D79B101531F360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  content/cars/camera_car/sfx/GUIDs.txt
- Size 1KB
- SHA256 fc00849b04422eb8f5ea05aee75070dbd3da5f106f7a8223e332a40c5a34b524
- MD5 5b047a520b889fea5a0115e044055d3f
- SHA1 9c900386c1397e8b64d5f1180ff2b314ec2a5bd9
- SHA512 3fdd458b2342ba9ac04c8df69a503aac56cbd75e614afcf0917c36bb26df4da88cbff389153a3afa391ee7326f7b296c8cb6794d8c1d0d2362f93fdd854699a0
- TLSH
  T10B31745317A5B9F25898019339078FC4D14E870784E8F4817E5AFA73F51052DF68EC5C
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral25 behavioral26
- Target
  content/cars/camera_car/skins/black/ext_config.ini
- Size 53B
- SHA256 84f8977287d1ed5cfba22657c7002198eddd93a65a235684099eb99dedbc3322
- MD5 935ad97e1527f46a824a490185fb5034
- SHA1 26e5ac75959f52706ffe564738a0d4fea5a4c635
- SHA512 043a171362914940a305245f5e35b057c3569dabd47fd59ab81fb694076bb118bddccf3b11b2dc00e6deab511d59d10d344636c2f9c46b7c706b840dbf039522
- TLSH
  T1EB9002B958550D485665C757110D1A086A4CD16294B908B14505C110D99056AC004651
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral27 behavioral28
- Target
  content/cars/camera_car/skins/black/livery.png
- Size 2KB
- SHA256 099b86fc78b28263162272acc99f96eeb9a4ced576032cdce3339a7dc89652ad
- MD5 71afccdd5342b350a2bfa132a77af034
- SHA1 71a42cb2bf7c98920f158d4fb8e8b5da2385998f
- SHA512 a3f9b6bff9fcb43fa19082e26235abf5f74488942663a2ddc7c7b997bd98490e05138532a586e5b691d96aed52899e91c7a9bac6f3eaceea855f24420a92f043
- TLSH
  T1E651086BE8F06A4E6ADB7403098D0303972DBA6C855632289AB37DDF0CDDD065B150EC
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  content/cars/camera_car/skins/black/nodamage_lod0.dds
- Size 5.3MB
- SHA256 3699dbb0c7f9ae82fea18fe71f097db18e80ad1bb81232aaf6f1f5ddbea26f35
- MD5 32777058e09e8a3db45933e0ed2c9c41
- SHA1 d2b8f6c4f1f97de4fbbd0760ce70ffa2e6417371
- SHA512 b687994ad73c01167c4aa4ac8d2f6051856b72006b30d5e567a30fe8b12cd3fa1532e9d7c7458452fb22abd84a6d8932bc3f4f164c3e9abc36871a2f1f55a3a5
- SSDEEP 3072:pq33gBf/8c9LzYiyWbxO1Ns1Gbbi2HSqddKQmV2glI9VQ:k33gBfUcFYi3Vwbi2zNmV2glIvQ
- TLSH
  T18646E51137A1D629C04A4E724E36D7A897F6FEC4896C57CB33C07B4FCD3A85A1E06A94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32