Overview

overview

7

Static

static

3

s.p.l.i.t.rar

windows10-ltsc_2021-x64

7

s.p.l.i.t/...OM.url

windows10-ltsc_2021-x64

4

s.p.l.i.t/...Us.txt

windows10-ltsc_2021-x64

1

s.p.l.i.t/...OM.url

windows10-ltsc_2021-x64

7

s.p.l.i.t/README.txt

windows10-ltsc_2021-x64

1

s.p.l.i.t/...AL.txt

windows10-ltsc_2021-x64

1

s.p.l.i.t/...it.exe

windows10-ltsc_2021-x64

1

s.p.l.i.t/...64.dll

windows10-ltsc_2021-x64

1

s.p.l.i.t/...e2.jpg

windows10-ltsc_2021-x64

1

s.p.l.i.t/...f7.jpg

windows10-ltsc_2021-x64

1

s.p.l.i.t/...s.json

windows10-ltsc_2021-x64

3

s.p.l.i.t/...s.json

windows10-ltsc_2021-x64

3

s.p.l.i.t/...in.ini

windows10-ltsc_2021-x64

1

s.p.l.i.t/...ay.ini

windows10-ltsc_2021-x64

1

s.p.l.i.t/...er.ini

windows10-ltsc_2021-x64

1

s.p.l.i.t/...ts.txt

windows10-ltsc_2021-x64

1

s.p.l.i.t/...id.txt

windows10-ltsc_2021-x64

1

s.p.l.i.t/...es.txt

windows10-ltsc_2021-x64

1

s.p.l.i.t/...es.txt

windows10-ltsc_2021-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    s.p.l.i.t.rar
  • Size 202.1MB
  • Sample260722-xwpy7afp4s
  • SHA256 eadb900ce309c2a9e17b909d97f7552ef448a07d528eb7c49db1ea35a4e9536a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryexecutionransomware

Malware Config

Targets

    • Target
      s.p.l.i.t.rar
    • Size 202.1MB
    • SHA256 eadb900ce309c2a9e17b909d97f7552ef448a07d528eb7c49db1ea35a4e9536a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1
    • Target
      s.p.l.i.t/IGG-GAMES.COM.url
    • Size 196B
    • SHA256 6d905d76e7d807c5831231d791f2510160dd56018ae423a037e7ac88fd19412f
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    discovery
    behavioral2
    • Target
      s.p.l.i.t/OneHack.Us.txt
    • Size 133B
    • SHA256 f9a28da1e9182f11161b322cc975483dc66d4500d6ed41f01f1bed1d897c6dbc
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    ransomware
    behavioral3
    • Target
      s.p.l.i.t/PCGAMESTORRENTS.COM.url
    • Size 202B
    • SHA256 c4d6ac03d1b51af3f4127bdd12f2317da8ebf4a7f20402f2139c61d5cf10ab23
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral4
    • Target
      s.p.l.i.t/README.txt
    • Size 338B
    • SHA256 7c28c990a190a0fd7ce7b47be461e73078e5fc5a8e7efeaae9a64cc564fb6e0a
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    ransomware
    behavioral5
    • Target
      s.p.l.i.t/_INSTALL TUTORIAL.txt
    • Size 1KB
    • SHA256 ac45f3d5b1e728caffdafb6faeca0f22459f6ec2ff2c7449c3fac44d25f62915
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    ransomware
    behavioral6
    • Target
      s.p.l.i.t/game/split.exe
    • Size 388.3MB
    • SHA256 8a4a02b4051a3859efc870a6694a31c903ba8caf337b11fdc9e7d5c7da79b154
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7
    • Target
      s.p.l.i.t/game/steam_api64.dll
    • Size 5.9MB
    • SHA256 552fde36df2681d3dc5b6a7ce34add83968db8f7dbc591592755e02284a3dd9f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral8
    • Target
      s.p.l.i.t/game/steam_settings/achievement_images/edd037c132e3fd5fe22693f979af4595d7fceee2.jpg
    • Size 16KB
    • SHA256 de59456e2ade3675780264b486adb52b6582ded318d95ec003ec1b90915ce29b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral9
    • Target
      s.p.l.i.t/game/steam_settings/achievement_images/fff108082e4f800f951040523d71fe13b05904f7.jpg
    • Size 7KB
    • SHA256 97b8177f8a56e69a63d6d5572d4f669c1a9b21fbd9623e506070fe9fb0cfe024
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10
    • Target
      s.p.l.i.t/game/steam_settings/achievements.json
    • Size 537B
    • SHA256 6195ea49e3fb47625f13aed9ebbb096d575e1b5a829f59c6e600a884b459474b
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral11
    • Target
      s.p.l.i.t/game/steam_settings/branches.json
    • Size 145B
    • SHA256 98e7563f3c76e76b73779eb2d479f4dfa3238ac127361fb33ea6339d0f38f868
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral12
    • Target
      s.p.l.i.t/game/steam_settings/configs.main.ini
    • Size 681B
    • SHA256 a78aa33ac06b354e520885a7214517db3a8e1a5a4c59f4d5d6a535ad4830bda4
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    ransomware
    behavioral13
    • Target
      s.p.l.i.t/game/steam_settings/configs.overlay.ini
    • Size 120B
    • SHA256 05965a56b54d8b78f3d2d9fbfd4f08f2e85ec9001bd122eecc12109a4f28a346
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    ransomware
    behavioral14
    • Target
      s.p.l.i.t/game/steam_settings/configs.user.ini
    • Size 603B
    • SHA256 31293a3ae7c66def8d2434bb207505b6dde780d582a1a261a653f833feec4fb5
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    ransomware
    behavioral15
    • Target
      s.p.l.i.t/game/steam_settings/depots.txt
    • Size 16B
    • SHA256 2cfc71d64cf807bf3344a06a6a1f83a230401547313eb37ec24a887af41d0173
    • MD5 SHA1 SHA512
    Score
    1/10
    ransomware
    behavioral16
    • Target
      s.p.l.i.t/game/steam_settings/steam_appid.txt
    • Size 7B
    • SHA256 1ce5729ac1661742f74c1184e04c3ab887c9275d7aa7dbbbded4316d34480074
    • MD5 SHA1 SHA512
    Score
    1/10
    ransomware
    behavioral17
    • Target
      s.p.l.i.t/game/steam_settings/steam_interfaces.txt
    • Size 594B
    • SHA256 5b1e7560d1ced7857c3429062ed2330f07367385acf7ae8d28a17e5ca291c1e0
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    ransomware
    behavioral18
    • Target
      s.p.l.i.t/game/steam_settings/supported_languages.txt
    • Size 7B
    • SHA256 b6234d2ea0d6022be63db80d7b80e221097fe4a469dc44febcd2a9241effdeba
    • MD5 SHA1 SHA512
    Score
    1/10
    ransomware
    behavioral19

MITRE ATT&CK Enterprise v16

Tasks