2f7077fd7b0e3147d6d650b72292e6ba636d8c56cdbcf97e8ac65a28194de5ef

Sharing

Copy URL Twitter E-mail

General

Target
Ellen-Model-PleasureCraft-Mod-v0.7.0.zip
Size 6.5MB
Sample260722-mtme6stbpe
SHA256 2f7077fd7b0e3147d6d650b72292e6ba636d8c56cdbcf97e8ac65a28194de5ef
MD5 0aadbfe4088578ee7f5cf8817b56c4fa
SHA1 6a6834e274a8b3615358b400de71573d0f08c961
SHA512 6f684d82074f0c6461a261234b64132abd164fd8a45414f04a92b454145f752667da5761ab11fce7cc54bbedc430fbd9d0e00e581df1b1e231a2dabc4c6eb150
SSDEEP 196608:bk4gb8U/y+Yt7XqSeC1pLWXkGo33KCMoe5guZP6j4hOjknR9:bO/NBq1pyXkG43Ve6uF6jgO4R9
TLSH
T1AE6633AC5466CBC9D64D62F8333B48547A798A89FC51FC06BA1301C63B346E0A1B7BDD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution

Malware Config

Targets

- Target
  Ellen-Model-PleasureCraft-Mod-v0.7.0.zip
- Size 6.5MB
- SHA256 2f7077fd7b0e3147d6d650b72292e6ba636d8c56cdbcf97e8ac65a28194de5ef
- MD5 0aadbfe4088578ee7f5cf8817b56c4fa
- SHA1 6a6834e274a8b3615358b400de71573d0f08c961
- SHA512 6f684d82074f0c6461a261234b64132abd164fd8a45414f04a92b454145f752667da5761ab11fce7cc54bbedc430fbd9d0e00e581df1b1e231a2dabc4c6eb150
- SSDEEP 196608:bk4gb8U/y+Yt7XqSeC1pLWXkGo33KCMoe5guZP6j4hOjknR9:bO/NBq1pyXkG43Ve6uF6jgO4R9
- TLSH
  T1AE6633AC5466CBC9D64D62F8333B48547A798A89FC51FC06BA1301C63B346E0A1B7BDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Ellen.zip
- Size 6.6MB
- SHA256 f31519a29526266fb641df9d3c42fc8c3e8ff9ff32465c09d30447e4c8ebbcda
- MD5 82fba4d57499daf2dddf59338b7bb524
- SHA1 4b9f810ab63056a2a50cc6a29ec76610de279f7c
- SHA512 0f0bad06803b83d0975a05169eedec2610c332c5a1385dc2f8bd3b09f23c4476e6219597bc5660c1372f03ae7c51d4b29c0c45c12c5b551fbbdaf8a4e20592e4
- SSDEEP 196608:K8xVhe/ZlSJzvD7HM3AvFeJAfcchGgvZW3kJSFU39k:dhC+JrD7sQ8AUcUgRW3ySaNk
- TLSH
  T1EF6633ECD0AB979AD02A5BF5722FC985F2A4454E7620F4BA120395843C339F147B1FB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  assets/pleasurehorizons/animations/ellen.animation.json
- Size 938KB
- SHA256 6c5fd13488688dadca98e5748727c842b294ebaf16226d3654e67b0b4a65fd56
- MD5 defa1e04fc127834fd40a1191e3883b7
- SHA1 b2918c63f56423d700a0453c375c8a4a191d3c23
- SHA512 2f736747ec350dd8d5c59b8cf6c1e867f62484ac705e5d5d7cddde240ac7917b303551a4ad55e0118467df2ae943777a867aae8fe48dc52edbeb550fd499990c
- SSDEEP 1536:SAfzVv8fzVvHSFUXdtUpUeogrVW7mFh2ZCeKzsQq2qAuq0Nb11z4Q2Yt2:ySF6/UyDZC/G2Qq0X112f
- TLSH
  T1C915C6C3C78D81A74F57850E1C3CA9E9A99D40F3DAA44FFFF510A9066A4C4288B757A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  assets/pleasurehorizons/geo/dressed/ellen.geo.json
- Size 799KB
- SHA256 86db57a8cd60a916fe6288ff6a6cc388a478a17954eb4db5f513e594c14ee29d
- MD5 8e764bbf98e36c837a4ec65af86f59dd
- SHA1 5f84e13331ebca88a3068dd3b95b82cdb4029d99
- SHA512 9bf2477b63b738ac292586e27132150adf159c214e711f5b45b51fbb60ae609033482bcabcb2b9025c76f4ae87dd81eca6d296821803a74b565c5256278dbc63
- SSDEEP 24576:2+U+Ta+L+c+u+uG17RaWfpkaPX93boMDV98YnruJW0fXWxmdmk90dhyoQqmPGcPD:B
- TLSH
  T1A205239B4B8E82B76660DF49087F1DD346AC41F659C903E6F26D1E09E394E6C10BBB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  assets/pleasurehorizons/geo/nude/ellen.geo.json
- Size 803KB
- SHA256 1e122f88d42357602d2f72fc1583ebbab5d5af14e590f5393dc728c32741eb69
- MD5 cf78adb337fd895af001e3f996e5b0c6
- SHA1 363710ca18ade3974f1a9515b54551aed345f055
- SHA512 2fcf973def147eb7a23eca8df288654c04f6407d7680136a0cac42dd967c466009176e376f346ec4bdde01bc927e7d69898ffc74941d3a854adb8c98ec3eed1f
- SSDEEP 24576:AcCZvdkPYgQURG4+AAb+WN2rbO2dQVLK/dweVBlAPGcPF5e7+:S
- TLSH
  T16905319B4B8E82766660DF4A087F1DC346AC40F655D953E6F6AD0E06E384F6C10BBB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  assets/pleasurehorizons/keyframe_events/ellen.json
- Size 5KB
- SHA256 bc52c249c36cd9090c266b8d006864f1883dbd5eaa0a66afc7ea34f788a8e978
- MD5 e238d6200ac5a00454a05edafbae5e81
- SHA1 092062465e37b350557bfdc99ddb98ddf8264012
- SHA512 2a4ff2a34b8bfc09e917afd9a2ac5aba82dba1bd41bff9d48a671098dfe798b99ecf107d4bece6fd695ead76a32206248b3aeaaa0caec9f748a841f237483c3d
- SSDEEP 96:WYoWmDLGQKsc0vsc0U/R9LB0BOD73ZOsNZdCvaIz4QlPPJaasuwQPwscA:o1Ao/5Q0bu3B7
- TLSH
  T1BCC17BDCE0FC4EBB60CD2135572E8886932050CF8D853EA9361D864C2F6855F6EB9D9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  assets/pleasurehorizons/sounds.json
- Size 27KB
- SHA256 176372837acfc5bae78373da525cc8f2bf5b5191fbc7826c6775016a21cb02aa
- MD5 b2e199e6d74453d97af018ee93dbc884
- SHA1 8631ef3d450439a2e0ed54acbfb2b05600b2502a
- SHA512 8fc6cadc62d5e5e8b4cf59e7e07c65a7c21cef97800328efbc0a35dd0592c1e53a3bec5c3a8366e1d8a4638b3d2b70f3f328d1e289a985729ffe2612b10c26b5
- SSDEEP 384:bXYJqDUFmP/WxAY9I5rvRIurvuIHrvTIErvPt/Zenk1ZenkV6TgRVkTr9CZ5+HEX:o8
- TLSH
  T14ED291EDD4FE4D771489117E021E4782B161958B8C9A3C78364DCACD3FA864A2A70EFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  assets/pleasurehorizons/sounds/girls/ellen/aaa/aaa0.ogg
- Size 28KB
- SHA256 0d8dd5d45f07086b386de0b6dae534ee669c41f4e5a7d8e9447b96fc85554045
- MD5 50f4a97cc8d938e3fe1e8552e0e9e3ab
- SHA1 f7a3d8d1469d7daa28a5b25ee8f03fba11d991b4
- SHA512 398344eba6b257e68d10fc457cb989e4ec2f069324a7006e3f010e8d060d544683dbdcfdd74c63644c1d35f58876f17a12718dd6fa7f6c49b0ccc112adba43be
- SSDEEP 768:mVsFan3Vaava++Q/FB/7/DA1h/yn0awdFWATSKq/1:4LvLlXzrA1QnIdRTSl1
- TLSH
  T10CD2E1E8CC6C8190FD03DCF680B9FBF05C64BEB4AA95E1F73F5164A08661E21951B106
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral15 behavioral16
- Target
  assets/pleasurehorizons/sounds/girls/ellen/aaa/aaa1.ogg
- Size 17KB
- SHA256 9ffa52c3e2da1436f65f37d9b19f224dc4d68f229e9eb19de1a163f1f85aa298
- MD5 66aa8a628de54bffda435ecc831da5b7
- SHA1 7967998175380d63d804f72fbc7295e818a05987
- SHA512 2508c259319cab997d005081e7753a8d9c58a7dedb7ec1a77c37adac4177d6ffa84eddcb24d2d5057217c357f20628f6bdf4937e65b935a601ba14d68722ed11
- SSDEEP 384:XtDwaHsNaeaQQ7Ju3vipHJk3kvs8Vrj5tz06mAW48ySfds/jOH:XVsFaVLp6kvtz06mA5SFs7OH
- TLSH
  T1E682C0E4DC3818F4FD8360769DA1F7E70E88ADB645D491E77B1029738AA7B18FC11069
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral17 behavioral18
- Target
  assets/pleasurehorizons/sounds/girls/ellen/ahh/ahh0.ogg
- Size 12KB
- SHA256 5ebf4991af0f92c6eca5dd7738ff783627aff5112912f909a28b4a81fecfb9a5
- MD5 45e4f20fb020df04ab4ec7f8b12098d7
- SHA1 4109d7fe34121cc0812a72a85c0d12da303d60e7
- SHA512 9a2665ccb03a515808560bb558f577f6b9cbe05ec337092af53ebe537a529d218a0a9dba4d0b6ec3f6626f576ef1211f4d8dd06e707cb3076c30291268349b18
- SSDEEP 384:wiJKXg1/E6cFlUSGhb+q4lBVdjfyb1AHggLzRvwSGQ4:L/E61FXsBVNyb2ggxISGV
- TLSH
  T10B42BFE4E5B4E48BC01CB079E5890FEEBFE4E8182825D291EB54003CC5A599ADCAD57E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral19 behavioral20
- Target
  assets/pleasurehorizons/sounds/girls/ellen/ahh/ahh1.ogg
- Size 11KB
- SHA256 a289936da0161f221ecf4458daa0603f3373d47cad76b293dfcb65c6f9c61677
- MD5 9a1078551ac8fe3ed5fa5c3058b596ea
- SHA1 293dc3084bc34cedc566d15ca64c287cacb01f73
- SHA512 5c0981f2d90f8addfe0c53a2a956d37fc9d929f3d9d16513f210d992ef019213decde78e423b20d11c6539c04eb89ab03e9abf5b085a0beec6b6f363a1b72091
- SSDEEP 192:waDJopTxIXg1fnEObzcswVAxqnOtE6NOM73l1lb/UCrq/TkFndciGIDeYyc0axKg:jiJKXg1/E6c/aoujNT1x/9J3tfD8c0E
- TLSH
  T1AD42C0F9ED7DE3A6C01F393547045BD3FBA69626001E6BD5E6499CAE049AD0393101F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral21 behavioral22
- Target
  assets/pleasurehorizons/sounds/girls/ellen/ahh/ahh10.ogg
- Size 12KB
- SHA256 12dee2e7ce5e25a211552f52c24f1312a00d69e5a28dc1c37e3fcd546767be3d
- MD5 535a81a25a4b35fb5dace9d543f282f0
- SHA1 190b107620f205dc7e06b7bc01b2668c01b1ac98
- SHA512 90ba6961b02065e82379c9b853c17a472b8c1a165eebc051c7d8d66deb9c12dcc4745f7cca9be2b273f297f4ebe7a85c7175455ef6144d05078d297fa527cf72
- SSDEEP 384:QtD7dm9TT6qgI4bJCyUB28XraAhH4JprFOhVVN5KlGW/:QaTWqgIWJCbB2IBHkXWVN6
- TLSH
  T11642CFB551157D47E46322B044B268220AC426300AD1C7CFEF3712EE8A6F7C27EAC56A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral23 behavioral24
- Target
  assets/pleasurehorizons/sounds/girls/ellen/ahh/ahh11.ogg
- Size 10KB
- SHA256 523f0c0ff2781948c217cae78e65a2a5026551c6d423c102cdc4e3dcba5cea6a
- MD5 f6a5e3be8b7f0ecbfb8fb2905e3a8d6f
- SHA1 d0975c5ae747ef3dd0d6ffcdf3ccb0d650c947c3
- SHA512 e0707350bc62b8b885005472a9daa1b0ae019e05d588dca55954a5b7150aa477615010a202cd37cee44262d3094f1390f994d81052264bce7d116e7ec324134f
- SSDEEP 192:epNttxOqdm9TTYlqgSeXH/byFxDq4wQQY45/dMSaK8WpHlxo:wtD7dm9TT6qgNH/byu0G0Sx8iHM
- TLSH
  T1B322AF6F9825DA81C8EA9639212422611FC4F834378271CBFF31169B4ABF73135910DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral25 behavioral26
- Target
  assets/pleasurehorizons/sounds/girls/ellen/ahh/ahh12.ogg
- Size 13KB
- SHA256 a14ea752b8528427c9f95709072f95980d56885623d9640a756514504c157617
- MD5 db859c226b081e3f3fdfec8046d4306c
- SHA1 dd4dc183563f11fb8b084d85e308c4d8d694c11b
- SHA512 c0ebe8c121db6707d4082487bb000317492952c1bacb5654bc8a144015f0585b498e1ebefaa0a27c5b7343d88a031f45829abd44ba2fd42ccdc570bacdb0f615
- SSDEEP 192:KpNttxOqdm9TTYlqg87Zd/8CqW5yqJLs3WVRkIU1BEfG/h11MePccthKW+AsQi:ktD7dm9TT6qgI//8OeGVyZ/hLrt4api
- TLSH
  T1B852BF26E424B81EF9326272313910A11EFDF834E7D460CFC73496FE8AE6A1568D91CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral27 behavioral28
- Target
  assets/pleasurehorizons/sounds/girls/ellen/ahh/ahh13.ogg
- Size 8KB
- SHA256 cec19109268a8afedddf46bee2c58f773f50259e9964200839043c1b0508bf14
- MD5 f7499fa33b0bfa6ef5dc9ffb12d5f67a
- SHA1 647e311bfb32df731e07abf5ea52890a15258a27
- SHA512 c99435552656faeb22ec4cce44221a4a5aa2b914127a71398b7996e950b02422f48c5ed6c0263e4ad0c28b6a464e46bbb472d9c90792b2ae7a56c42c4fad5f05
- SSDEEP 192:mpNttxOqdm9TTYlqgN4gdMA0XmCfs+jBqEWahDFpD+2dO4:otD7dm9TT6qgn102Ck0BDvq2dO4
- TLSH
  T128128FDA9810D613F8962832E42567FE0EC1B8715BD0A9CE9F2204E3CFF33967956549
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral29 behavioral30
- Target
  assets/pleasurehorizons/sounds/girls/ellen/ahh/ahh14.ogg
- Size 16KB
- SHA256 6f2aa763880089b1b88e38406c708ccd526da3c323cd4514a59d7128434e0283
- MD5 50fe0f19dfa7726a70246515a25a1097
- SHA1 289a24611803e7ef973c76c7da4c3e3ba9342c25
- SHA512 bb476618f8cdcb41ed320f0243cc9f5123edf04ad717d7f4f19eb881f3179c290e6b3f5962b884daa1ee2a7c1def8b15ab0b12c1f2b993afeb7e19515cb3b889
- SSDEEP 384:dtD7dm9TT6qg0P/8Klnjt8qbZhrBKMA43dg7gtE+UqAT4:daTWqg0sUnj2qZTC7geDqV
- TLSH
  T15F72BFB94918FA80E061A9F96665201A1EF86C3C22D0E8CF4F767475ADF7320F9924C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32