b45e304bf53e0fa197ebcf909367fc77db1174de5f24d4287657bb2eef475ddb

Sharing

Copy URL Twitter E-mail

General

Target
Fridge Anime Expeditions [V0.1.08].rar
Size 30.5MB
Sample260723-agylfsszes
SHA256 b45e304bf53e0fa197ebcf909367fc77db1174de5f24d4287657bb2eef475ddb
MD5 ec466aeaccb24f2446c309b97e7a3aa2
SHA1 8e4b92229c6a2489518cd6e82068411861e02131
SHA512 6224bac06a89fc961ad9f46beba2e1ca14fee4fed7c5c4004ccc1db342b24b6aeaf407511ec0dbd0c66332fed428fbf2bc75bdc3c06c75134a0954eb6dc23f3c
SSDEEP 786432:jEe0TUk53oYcsOsn/z/f8Si+wL1IXecJwIB07gXf:Ae23asOs/zk+wRIOcJR0UXf
TLSH
T149673361974D307ECE669814E53435023831F10BE38DDBBECC5CADE83BAAD1F5651A8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  Fridge Anime Expeditions [V0.1.08].rar
- Size 30.5MB
- SHA256 b45e304bf53e0fa197ebcf909367fc77db1174de5f24d4287657bb2eef475ddb
- MD5 ec466aeaccb24f2446c309b97e7a3aa2
- SHA1 8e4b92229c6a2489518cd6e82068411861e02131
- SHA512 6224bac06a89fc961ad9f46beba2e1ca14fee4fed7c5c4004ccc1db342b24b6aeaf407511ec0dbd0c66332fed428fbf2bc75bdc3c06c75134a0954eb6dc23f3c
- SSDEEP 786432:jEe0TUk53oYcsOsn/z/f8Si+wL1IXecJwIB07gXf:Ae23asOs/zk+wRIOcJR0UXf
- TLSH
  T149673361974D307ECE669814E53435023831F10BE38DDBBECC5CADE83BAAD1F5651A8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Fridge Anime Expeditions Free.exe
- Size 634KB
- SHA256 be8ccc500d85ab4519bcd877b52e7b08a4a6729304b5e165b540d650386c5ebf
- MD5 187ce9dc61b43aeb5c99ea6770a0c62d
- SHA1 6e4ea8093fa8cc4d3870ad57880ba2ce7fce58fd
- SHA512 fb9549a864f7d4c2b5ca07a06fca51648c74026c8a72895421f4bf45000a4f4f815a627f1bc181fca6e133b24bb006a29d766d2cd14c15a23dee9db402627011
- SSDEEP 12288:LMOw9vr9G1jCNzeq0kqsKzVJIs7/JJmTXyPd5JHm7La8spgQcJEx4Bz1CwwD4:LfYyHq0JzEs7BJmTiPdP0e8spgnEYz1F
- TLSH
  T107D423D29161C717C9AA1A3E45F9BE4C6B34FE912F3046E13251E02EADE711C0AD2DB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral2
- Target
  Images/21313.png
- Size 1.1MB
- SHA256 66674d9161f05ac71c4a69b010f2d5acdf422115e466c2612dfcd0bad1c805fa
- MD5 dd539a0b3fd369a8f9b1732ea72ef8d5
- SHA1 5c72bee39b8758abb1f811704524e33147715ede
- SHA512 696873dded6adb380a84ead92b0201eb452acdc5a5bbec09c0812b403c6d5a458bb0b7f326c33ea32d2fa51221b76d9b9cf240bdb1b24f25351abb543a058868
- SSDEEP 24576:r6+DHBdILPvv5S16Td97OnHwfUdXfeONwPnt7C+Q:pY3v5uad97AQuy7TQ
- TLSH
  T1573533473403E7FE019044156B8634AABEA98D827BEA50CCC664F864FDBDB5537A70CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Images/32131.png
- Size 900KB
- SHA256 3eefa18fdfed3f944bf1c15e404897a580e923ecc32c40d88a622c3c80c6f2e4
- MD5 bad70da5fd64a7b4bba68556b5af5883
- SHA1 5c8b2762188fa045538d18678fdb4ae3fb7c11d6
- SHA512 eda7136eef8c250814ce8d013236e29d984d17c977fb5d23c74e121609de625ff0f7a9cd04dc1a7070f499701dc4be33ae610ade9f5fe425d4d1768ec8c20a78
- SSDEEP 12288:yXu5WNiSzBQ3WDcL9cqTWcAH2tZJFMx/E6yKFpIYVTi2mnbQuWd7f2etCjg:h51OQr9cpiDJFMy6dVTi2m27fHj
- TLSH
  T1D01533B671E070275705A44D627389204246900D07B8D5EBBFBDA7DEB63BE2ED138C6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Images/Closebutton.png
- Size 335B
- SHA256 50750b0575f3f1aee198eefe36e87fd55f079ac08f58eed3b66fe7003b9685b0
- MD5 ec634ee3afe1dde6c30062fc2c2edf40
- SHA1 25505275700bc31be218251c16240272607acdf9
- SHA512 64de47dcced4b689d4e1177b60b8cd307c1bc0b577b9e6a8ff96440703e9fc9aba7002e9a4244773944564e2f369937346ffe279c48679008fc4cc89266fccc2
- TLSH
  T128E0786718054DEEC509553F3D0F1260D9579FD55413155D5378C5644334F4A20A45C9
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5
- Target
  Images/DiscordLogo.png
- Size 62KB
- SHA256 c0a7c732b7a6f8a9ccf4bac70c8aad6cd8e9e269533699f310ebe7039d1a9238
- MD5 89d9adba11b517b4b9403bc61d8348fb
- SHA1 90e8f2fd7a28229b7905d8c2361965bce6f84b74
- SHA512 bfd9c8c5f23791416b1fb408b5979932c0c86ec73013ec62f98d13e75b6d1961c76fc4da6302fbca776179a1cab971ca575de479301824608ca6b0123ac68253
- SSDEEP 1536:G6/uk0RXnV2pZtRgWcdNNR85XxBN3gC63OziWModl:fyXV2pZQNdNNyn3gCS6i3odl
- TLSH
  T10253F192AC3C471D480F908E7CE2A6DF96785EDB16BC25FFE4498C8C9419460ABE119B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Images/Expeditions/Expeditions.png
- Size 919KB
- SHA256 c9e31f9c8337751fb376b6e6ccf325483f0eaf5ae90a2b8b4f7855afa471d6af
- MD5 f896d337f7a59755a214a78b143111ea
- SHA1 1066140eba466fbbae6bb678111eea5f1c6525fb
- SHA512 4a81739395ba9dfddc94b527d41c018fce08dafce6299cfd112db516208c1593a47532e5f214c5720b6c53f9c4ee355bfa0ad0859f7758c9cfca191be059b1fe
- SSDEEP 24576:vZnwVbtEhPZzBXIFfcs8kk42vkIBKFapCAww9Antrqt:vZwJqhhlKcsc48keKO30kt
- TLSH
  T18A152300CB46D18E41EB6CD8D204DD736A245607E3D0F796CB2DDCB156AABE2608E9F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Images/Raid/Spirit City/act 1.png
- Size 971KB
- SHA256 867e56f4529482e44a7bfce34d605ab3986c38723c49e5ce5fe372c7f54c04d7
- MD5 ff9aeb2e6f40096aeec34ce480d20ca0
- SHA1 f40b495f53cd988b1caac428a92db3fa9da46e45
- SHA512 2e42236d08d6331ec43e28d129e00311a177a18b31db375f8ddea945a8de0d9a1807fcfa418533cdbfd903fb75c8c3f990d524ea0ea6b270fea492b33a46066a
- SSDEEP 24576:8RTFOlwxsm/Za3wTgGHZ8P9aeLFwCR9LZigJExblIHB:5wxteYg30QB7vJEHo
- TLSH
  T1282533F922168C25C936FE2C1CE52322B45A7CB397AE5939D60DD6EF6B40C1FA2044CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Images/Raid/Spirit City/act 2.png
- Size 993KB
- SHA256 c1033eabc1ed59ac9d876c31a0311fe5042b3e70d42b9527b84edbff518c124b
- MD5 ac7f057fbdfc8a0c4d2970d987cddfb7
- SHA1 bfd7f5e97467786e2e75e1b73d386dc85956e7ca
- SHA512 032f0ea1dfd73d79ff380ecb57ae9c201309ae6c4774db1d3a893096bd73ceee69f7e91d5429d1acbf1a6eb827b0d433fa02cf5acb96b3a488199d0a8c6ea783
- SSDEEP 24576:uRRaN5et5v1JRJO5Qy+DB0AgFcbo7myDRODECg+:hCfv1Jb0uM7uDK+
- TLSH
  T12A2533F22B4B6258BD10AAAFD974BB98F6B5877C48CC19953C911F223DCFA954CC1E00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Images/Raid/Spirit City/act 3.png
- Size 1000KB
- SHA256 194f0d5d2c7828541a55c78897a3c69a2d09d16e4b23b86c8e2abdc2357f4ec6
- MD5 9cad94d5c37032d3ece1b31c4b09b51b
- SHA1 e119a2fec63f0e5d97eecbe14033f0adff4ac476
- SHA512 63b20cc66639a6f8d4edda22486bed21ee487e3a47c2a90733d910af69e47be7fd81cc6b93d8ae7fc208399c58c8f7198ad2e347aa8e8ba7ed10e94d646d4107
- SSDEEP 24576:u1TRKozYhy9b39ZrBhVOeHX/mfatung1VPT5BLn:AY3hyN9ZNvOsX/iSiwfn
- TLSH
  T1D4253306CCDCF658D2CAF12670FDD987CA0C7DA6F92E8BFCCE8502D04AA90415E75695
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Images/Story/Fairy King Forest.png
- Size 864KB
- SHA256 e491927fe94bfe4da6a688817a22df70a52ae1d75d6840e11ea9684dff13c046
- MD5 10234d9b3e9f76830fd6b607ffb9b8b0
- SHA1 df9d29881d506369b6bacf21b3ca97cfda8bfb26
- SHA512 610e27a115fc31b5f5d65416e84cadd7e31d2e296c7e8b8c4561c5cd5b789c5db0dd4d3e200a354ff9e6f362211212dc0a96e7e7318cc53a9c2bae0dd3da8edb
- SSDEEP 24576:FFgtHQINSvwlub7SRlaDgQx1YKzDow7CkMWn:rgtHQINH27SRliWKow7MWn
- TLSH
  T1A2153324452CBF390F05C1D6A9D2B5C1C0BC48D9CB531C7C516FDD3A99FE9841EE8AAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Images/Story/Flower Forest.png
- Size 1.0MB
- SHA256 a944e3c354578412299825dc5a33f3e10d9c5dd385605e1d635fe2fd2d3a951a
- MD5 97755581349beacd1ed8031df4c463b4
- SHA1 946813ffa444578a07beb496292e556c159c9bc5
- SHA512 9da0de9cfb8c4cd4db4fb4454a63151d1265a3e0ed2fb2230f5c47cf1b6ff90e784f036b2ee648dd2cf72137cfb4d73e2969ad0da99a7b7b1f404f1d03ea8a0f
- SSDEEP 24576:lb6Jb8X4MioxHNr5OqsdxR10F6SVFqmDmQUv1Rgq:h6J8X4gJNr5rjzVaQU/
- TLSH
  T147352308D6961079DC39180D563D555B6C90A31B29E3DF9308582EEB233EDDEA6F3C9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Images/Story/King's Tomb.png
- Size 1.0MB
- SHA256 b93498b8a288e8d3b91d26e97597e17b0040fd1f452fb3105508dc524607dca3
- MD5 621ed3c33a22496383e0624fc43186dd
- SHA1 58b8f7a605c9514e8588da5f574dce60b53b412b
- SHA512 de531d9dd0e3cf30f763adfe3beac86167a92d41a65b77c70772426ae168068ac0090277d8a21924a770ab53433a848a8228b06f8c12aeac943c9f803c05f0fe
- SSDEEP 24576:mo9IDOVBh2NE0LGItqJQatvkmMwB2k8WbjMeDGnMByY4/caGO4+:m3gBcqItqJQmkmMwUvyMeDGn2E4+
- TLSH
  T1273533838B2C54C70C1B7F66C389A412E17E6907CAC4FAB5CA31FD50C69632B52DD96E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Images/Story/Rose Kingdom.png
- Size 998KB
- SHA256 0def18e99344c7eba51bf0d6aa5497f3abe5eb67ef3d226a0c0a8ad60e832710
- MD5 f18dd4d4e69a9ff09ce3021edecfe2d1
- SHA1 bd0246939837ee5daacc4536e4a910a04ee3717d
- SHA512 99880e5ae39f647aff352d9598ae5ec6e6b1ed8c80bdcb0ce47dd808dd659a2ca7b7ce21c63549d1275919ea201bd697c8bf354f2b49523416a06fe3378e5d3e
- SSDEEP 24576:sPwgNGsBBuiNRIA92AU4vtx/qX3GLzHFQndAs7NlC:ADBRU4H/KG/HFDt
- TLSH
  T1442533EC48115FE0B407AB5E06858306BD95668609E049F5DEFADE8EC1BFCCA12E4C7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Images/Story/School Grounds.png
- Size 1.0MB
- SHA256 0601219fc2155a6c89175984bd44b090fb5c2c15bd57c4cd0927a7a43428827f
- MD5 e5d8cfb70fa2950b7007fce2f95145be
- SHA1 cfb266a81f20ca5bb73def2529efa11c8d02a696
- SHA512 70e76d47cf95e283c153a723338d7c3a838fd1d3370be8bd39c19966946f7eb832015de3cb6e79fd2ca1f28d7e3951b50065f1c5f711452a7308562f42ec971a
- SSDEEP 24576:SKUnCScdtXOpOfzsNrecOP1GPnM4dUjg1E3RNv8jICS9wvthCEJs8:CCnrXOYgtWIRtE3RNviICS9w77H
- TLSH
  T1D035332D58C91485CAA7A650CDD0BA1D1C778219DE3F86728E450DDCFEDB7024A88AFF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Images/minimizeButton.png
- Size 182B
- SHA256 14fc257de01dfdf71cca1c4ec6a019c8eaa684c3f7f44cf1aff2d9d8dd45cb84
- MD5 1e70cf9fe1738e5fd4889b8855a9471f
- SHA1 476e1c2b3850879ee5df9ce78edf4ad5929d4a94
- SHA512 b03bd9e2ff9aaafdcf43e3f1bad1a884e96afafcffc9c03eb70687ee8a03a8522a982e0a2f67eba33e3be8393eb8baf4d00437ec1d291e4df23617d194ac1adf
- TLSH
  T1BFC0C0FB32024CECCA0D72321207020091B7BDCA08203C380136C4332764B0660CC1C2
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral16
- Target
  Logs/error.log
- Size 5KB
- SHA256 146737069b74d30733ad6ac2967a799e7d7622af4cc174caac33d23bab670bba
- MD5 d39673d93813d56f31741c2aea30c49b
- SHA1 54d586cc6ec03e8e694488b3d141bc6e41e78508
- SHA512 86fdfff0782ea2bd86821dc317cd26b5e893898c7cb36dcc192fac3de361c1455e5a8c4346f0c63823318d82ae236c9771d6b566e4155d59e0d4111f5ac314dd
- SSDEEP 96:KB6gtoCoqozIV2GT252PobJmSjWhMN8lzCXTMvCzZwLWbzZwLWDP80XTMvGJKWKM:ioCoqoEVTT252PoFnjWhMNUzCXTMvUZ9
- TLSH
  T11BC1E59B3944810B475778E3FA84A28581FDD88FFD1C727C4A9B5CECA281AB519C3673
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  Logs/status.log
- Size 582KB
- SHA256 243bd8068355b85d3580716c2c9f2dc48132d7a0223f0e0550c2dccaf9ceb2c6
- MD5 a27df1b7b395c2ebc540e1be59ce73d8
- SHA1 a8b9393f6ac7afba68d50a51cd0d20c4c476d032
- SHA512 0a59ed9a326d3761628d443de512c9b0f37e30d42f086a8bd93166fa690a98a82ae63c4e0cb6ccad314ab1a2b6f9dbf2d18b0e978682f82a0a7e8eaa38a17f51
- SSDEEP 3072:K1QtBQtu/8TEYuM4ujOoiD8FZUtQbVDb/N2X1v6ls0kCpJjcypQpJ4wCn50gUNIM:J
- TLSH
  T178C4174B4570443919CA26A3C16D1B0AFAF9B2DBF22E229E3377156423D384B6F6D5F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18
- Target
  Scripts/Fredoka-VariableFont_wdth,wght.ttf
- Size 154KB
- SHA256 638482f81fcecafbbcffe5f06531cbb25586e7bcf31f78b3edd0980d84c0d3de
- MD5 8518c55ab778335b9cf5e40bf8896265
- SHA1 a7e9cc9c1cd4e2b8339b389300ea65dc0fba59a9
- SHA512 08ccb0179baa8036ff79152234f3985bab53358a60d5d7a9adef0fd5b53f2e29bcb051bac71cabbc88f385a5537df20b84d4f2932b39d8a3d03ae81bbdb2ae91
- SSDEEP 3072:J6VWYl2KdxrQhAy52Bic0yiu83q77lc1ZPf/4Zxj9OrTDi4YQ8UjXf:MVn2KngAy52BP0yiu8a778ZPn4OTOZQT
- TLSH
  T114F39D13F699C982E11E277886B353480A647619BF63034B578EFA3BDDDA3C07C1A746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  Scripts/RapidOcr/32bit/RapidOcrOnnx.dll
- Size 12.9MB
- SHA256 a7a8fc43e68e9d7e99b1c9af66c590e52ce508792269ed0eea2557f2c8e1485a
- MD5 a3b426436aa2fce366d57f17ac88948a
- SHA1 bb10c20319b6b798ce73233e63dfeb9ad6d2d7f0
- SHA512 5f6637bf6be7dd50f6512676d480d9b25b7b985939ec1b04daa0d5462ce65ac4f31a77c4e7c83296562e1aabdf82faebf72b4e2d4992a657533e51796d486a72
- SSDEEP 393216:GFHHHHSvxLtzYC6se+DI4LtTFyveFBt19IMyeaqqD6hZ:knHHSvxLtzYC6WU4TFyveFBt19IMyeac
- TLSH
  T10AD67C21B659C071E49D01F1AA7DABAB825C693807F408D3B2885EE97A355D33B33F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20
- Target
  Scripts/RapidOcr/64bit/RapidOcrOnnx.dll
- Size 15.3MB
- SHA256 211693007280c42d4055db8fc54e1dc3809fa21e35e86949bdb733d028df6bf6
- MD5 c6f5e8160b23e15d668abad5c9dc1b80
- SHA1 ff3de07b78c0589e8faf383202cb187baeca7754
- SHA512 b0325e5efff2cca49fc25d0c78b24ac5162a206c783d36a59693c2813cb4a82ff0c90699d1358ecdd3ac2104710f9758873df40e329c833ed9f72be272580b89
- SSDEEP 98304:Y0CQZLmZZjaOQdYhNDLblkrI3HQWMPPa44B4UgKcxT/bidtRAklU165O:Y0MZjaOQdYh1ZkruXB4UgKgTeH5O
- TLSH
  T17CF67D57B2E811D8D1BBD1788A6B9A03E7B1340903B05AF7129545E92F17BE0BE7FB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  Scripts/RapidOcr/models/ch_PP-OCRv3_det_infer.onnx
- Size 2.3MB
- SHA256 3439588c030faea393a54515f51e983d8e155b19a2e8aba7891934c1cf0de526
- MD5 f3b6ff552124995842242f6dac1afde3
- SHA1 61be59ddd4f6d02193e00e0cf8726effa2a6947a
- SHA512 aaf0667c3938ed757a5fdcdcf384c767169f310166cf61d4b12308fa91b0d2a01d036cdae9e0a4082359d4be0cc6d92d7e7a3d74050739e22c601cc366bd3c38
- SSDEEP 49152:gFwcErJYCYftylKMUvxGI3axIdh10cIFIxLLcjNkB/nMIGiPbf6XGqCs9PkiTtxq:gF5ErJYCYftaKTUI3K4hycjxLLUKBE1S
- TLSH
  T1DBB52353A5325E450D3F8193B50E38090F6DF37A2B31598C898E9B743F6A971E98C7CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  Scripts/RapidOcr/models/ppocr_keys_v1.txt
- Size 25KB
- SHA256 28b2362ad4ab2dc38769aa72feb535e3a9ddb3fd2a7585a05920e6393b1dc7f7
- MD5 0eecb02b7413c25597dfc06c56b7242a
- SHA1 6040885f917ac9a6537cfc55d9ab72c708c3a234
- SHA512 85473930e51551790d98973488cb8a4833fa9521ac83d0b6da339907d09d15d57fcb98ae3328f712958d142fa57bf5f6f21c219d90fda810aca397979fa9ccd4
- SSDEEP 768:Zs8ubA1OF4tPnvDU0QsHe8siCKvFBiw8eR44M9Ssf:ZwqvDWsXsiC47iw8w29V
- TLSH
  T144C2F66E5BE9E94F6C74E8F07B6384B0BCD36CD2715FC220CD49D10385E647AA64E0A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral23
- Target
  Settings/Delays.txt
- Size 35B
- SHA256 e91220904548466b5993d13f85cdce998da0b2c9f13ef4f753e41106649151f9
- MD5 148fd98f71181260f2b09436d1c83dfe
- SHA1 fedc9900aac2be74dc7533c144f98f19d3a72ef0
- SHA512 c27ca9a8f3e314fd8958c73b31056da4c5023a161ba849fea57fd1ea79f427d2ce8b094dd57746d80dede97814e254918dfaac4f6f8080fc1479df2042e62d00
- MD5 SHA1 SHA512
Score

3^/10

execution ransomware
behavioral24
- Target
  Settings/Expeditions/Rose Kingdom.txt
- Size 217B
- SHA256 82fff1b9f8e1b132d0afe6eae344a14f34f7f7418e3f92688d4a9a1136a283e6
- MD5 4ea22dc5bb51f853f9957d8fbec20e16
- SHA1 73d15461feb6f3f7b3ea06756567a401740b96c3
- SHA512 66d4e3f5ea3192ea19769364937f852fe048906668c16f8f98e8448223affd738ed7ccb59672eae5707051e3912dc794f47b6338a44381261806bdc82926d900
- TLSH
  T151D0A7A4FB1029E746098502D9E820912B3EC0FC980814E540E82A404065521226DE3D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25
- Target
  Settings/GameSettings.txt
- Size 111B
- SHA256 304f1b3e94ad39ce3b1250d79f4d9480090ae652c71d74dda3f8cbe1c86ed1f0
- MD5 2918a9f9bc77a7dd1e296d2dcaff7f34
- SHA1 892fda626d4f2806fbbc8279153b565b51dbae48
- SHA512 a4100d4680d8f8e0ed9a2f1ad9a3f7d70533b1f69001793a999cc1c00529e387cd910ea3cc00660f5751312fb454cfa03bf4ea2f3b8c3678122d024f442a6b63
- TLSH
  T1B2B09285B2637A2AD45E470890344869208753D200485513E90B730372A126A7028390
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral26
- Target
  Settings/PathingOptions.txt
- Size 39B
- SHA256 504fb301f2d1dc8af54e5578b5aefbafd711350fbe366f4c162d9af85778caf1
- MD5 60b7e987187d684e89c356d0618cdf52
- SHA1 1dbef48579b21b5c5a8b0ee82bc0990c8ee19e36
- SHA512 0d157f188d8000a9073c0a3ece5ee381687c307b9b8a5a0589fae78f148c81b0f5c0d629d7d5393edf102a625109f27553f09b511b085d8945f1d07b2c171cb4
- MD5 SHA1 SHA512
Score

3^/10

execution ransomware
behavioral27
- Target
  Settings/Raid/Spirit City.txt
- Size 216B
- SHA256 8fc45478730b3ac6bef779df9d5fc5e67a634ff910bf202b4fa7a44e987c6835
- MD5 b466540779132ec8205317c502aeba19
- SHA1 e287a78f2dc1cc5551207c8e682bb341c569e727
- SHA512 a489305578a33c7d516c4b5f892e241750361df181daf44c15a70034401496cbadb3419792706594ad0f31f104ae3c8fa1d4861a2d5877d703bc43ebcabc8046
- TLSH
  T1B3D023A4FB103DF7510DC503DEE820612B3ED0FC980814D500DC374000656311159F3F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral28
- Target
  Settings/Story/Flower Forest.txt
- Size 218B
- SHA256 f373ba04b99d08f5e27225b91a4d3956710df0220d7e46ca79a2ea8c881587bc
- MD5 417b0ca94f49d344962460101e318f87
- SHA1 dc3cbc619049a6b014b945024449113392282cb4
- SHA512 d3715ce9f4fb3892a8e0581add0c341d4d8611079bc5a55dcd832c78c342c2a2b6197eb79b57d674c4a09bda09f5a873e7d401d4ce0b2263ba161a36ca596a41
- TLSH
  T13BD023A4FB1439E7814DC503DDE820612B3EC0FC9D0814E540DC77400075571115AF3D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29
- Target
  Settings/Story/Rose Kingdom.txt
- Size 217B
- SHA256 82fff1b9f8e1b132d0afe6eae344a14f34f7f7418e3f92688d4a9a1136a283e6
- MD5 4ea22dc5bb51f853f9957d8fbec20e16
- SHA1 73d15461feb6f3f7b3ea06756567a401740b96c3
- SHA512 66d4e3f5ea3192ea19769364937f852fe048906668c16f8f98e8448223affd738ed7ccb59672eae5707051e3912dc794f47b6338a44381261806bdc82926d900
- TLSH
  T151D0A7A4FB1029E746098502D9E820912B3EC0FC980814E540E82A404065521226DE3D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral30
- Target
  Settings/UpdateLogPref.txt
- Size 1B
- SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- MD5 c4ca4238a0b923820dcc509a6f75849b
- SHA1 356a192b7913b04c54574d18c28d46e6395428ab
- SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
- MD5 SHA1 SHA512
Score

3^/10

execution ransomware
behavioral31
- Target
  Settings/Webhook.txt
- Size 55B
- SHA256 27ea7aa0e0ea5a39d37a0ec00555cfebe78f01b7ad66184ea31c33c131941dee
- MD5 7ae1d51e24094cef89ea6f6d860029d6
- SHA1 9cbdc973ef8e433c712300eec2fb35d5c4c6159a
- SHA512 baf4fb2cf2328bccb1681c5f5f2b12b25015208a5efa45ff32d374a671af1277bf7ee17d7effed0763e8039458b0a9cb650a8b1bbc18ff0a9ef2623535b391e2
- TLSH
  T1429002419316945305D4C55C211863CE35795C0900191D5141458BBD5CD26042059F46
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32