5f15a6b48a11da09f8842aafddec47a419a9697ebcb037d9b0255085645de0b6

Sharing

Copy URL Twitter E-mail

General

Target
Split Fiction Fixes (LAN or Online).7z
Size 17.9MB
Sample260724-s5cm1assay
SHA256 5f15a6b48a11da09f8842aafddec47a419a9697ebcb037d9b0255085645de0b6
MD5 a9d806b70017a82fde7bec0d04ffd85b
SHA1 5a7d3df96cc096c524b97cdf24473c72ae185b43
SHA512 1ddb98761572aea254949f27694f6a22a99aadb160aeeb9c945b0778e113e4cebe6e908a3889d1bcc86edf4dd1886c82b6a03ac2a41ff4b274bbb8066503fc3a
SSDEEP 393216:tcGjchQvvl+WxBiOSr7H/pZMGLOie9YTrwmF8uf1CGapm:tcGQhAJG7xZcY/wmF1CGapm
TLSH
T1A217331347CC19A2E75EE43CDB2BCED9405E176B38D2382292D0A73A631E2D5ADDD1B4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  Split/Binaries/Win64/GameOverlayRenderer64.dll
- Size 108KB
- SHA256 5f32fb9f472a8be07fe552c6e0f20acd0694b70891da0668a456f4dabb516b92
- MD5 164e7125308a07200e21fdbf1a9be94d
- SHA1 2a58626f37c2176812f52daca49adfd2e691a68c
- SHA512 4bf269e2230f5b2e1a313512b755c543e21bd99d54c69665fb7054938e33367fdaf7d52bfecb931cb0701228c443365992f2719334d672e8ac960759f218f665
- SSDEEP 3072:3fdMI7f7soXfZGY2oQcEVWdtV03APhrNAbct345l4:Ftf7TBH2o5EVe3AIt3g4
- TLSH
  T1DFB3295776E530ABE1A6C6348B733E06D7B6F81507619BAF03A0425A1F273E0CD39B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Split/Binaries/Win64/Launcher.exe
- Size 322KB
- SHA256 e05b2f947ed4ab039599fa17b991755955be5ed0a0b7e086c54404d75cd27fdf
- MD5 db7b4874096b8e045b1a886a0446390b
- SHA1 bf1228ca9ac24d8c0366925596815f805634f702
- SHA512 3fd1fef2b3dd9f73db5a85350edd5efe39dd175e5ce038aa903ded5f4a0af4751697096ff73556b212aa1f66c34ecb4cdf79f2f39752a5d09b0cedaf4e838ed7
- SSDEEP 6144:/EfHxR5zYlG2PWdnOY4v6KA3DiqKbEvaKKl4dEkS:q50ltAn9VKkiwiv
- TLSH
  T1AF646B1AB3A814F8E9B7927CCD464906E6B7BC150721D6DF13A046AB3F236D09D3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Split/Binaries/Win64/steam_api64.dll
- Size 294KB
- SHA256 dcfaa13aa419a0641917205957dbe15aa472e7cf09a28cf8d3cf429598e67799
- MD5 543515a345cc88cb93413953f06f34a4
- SHA1 0c67ff54afa0e53f82659abeeea0d8ab1dcad1ed
- SHA512 7010ab1549480ff00a66fd90a7edb7e6028de234dbc6fc7fc12bfb528174f84850b6713a3de0797fc8bcdfab5b2a52846e97b370bfa24185ead1f64b7a0132ba
- SSDEEP 6144:LV5AmlcQZIcT8e4RO882MnuyqO2CHKOcJra:h5AmllZAQuyH2CqFda
- TLSH
  T10554497AA2750CF4D076C13989565E0FF6B1745B23219EFF226053368E53AC21E3BBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Split/Binaries/Win64/steamclient.dll
- Size 14.4MB
- SHA256 78faffb00d11d8da0a1fed737299a9e9eb61217392bbdf0b63b268c41bb45f8b
- MD5 4612c3aaa11e0faed5a6a951ea2f044c
- SHA1 7311b5e7aa57993cffc916fa3334e15d712dde7e
- SHA512 c9f90639bc7afa10b69be6120c14a7500396f78ecb0c186c9931b81d7385fe635cfbfc70852659ade21ab704a9a67e7b8b17379aa6f0dc16c62f283e3da6a119
- SSDEEP 196608:XgmotwDGpy3MZw6OJGQnh/7H5NyeP7wciZgA72D8UhsQ:wmotwDAOJd/rvHwcIgA72tsQ
- TLSH
  T1A6E6BF02E751D125FBBB01F68AF9167A5B3C9FA02B1102D772C47A598A36AC1FE31713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Split/Binaries/Win64/steamclient64.dll
- Size 16.0MB
- SHA256 be2eb42d2e182aab3c3517afb110ebf18615465a69ce0706de74ca7c69001f86
- MD5 e9169c0d1f3b0244dabad2263b321caf
- SHA1 4460324a00a3b7133e94c947aa3b82b859e14cc1
- SHA512 1dd2c1e46a741904bebedb4f2be766dde6f4c429b75bf878129558fb7e8a49f656df5be3d1e992d574d4f715d505b1d904b3d684bb041439b2d84c70071bc897
- SSDEEP 98304:NKUzN/RBQOkT5+UnFYC6Fc1Bb71y+4AxYZgAE6EZDi7QZaySJWPch2HwaaM8Cakt:Ndw+U+kbb7wciZgA72D8Ul5or8
- TLSH
  T1F3F66A47E7BB11E5D6B6C03896F36227FA7174A9833097D7A6C0560A4F62BE0E93D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Split/Binaries/Win64/steam_api64.dll
- Size 715KB
- SHA256 d00a9b72e696cf5c88a5b4bbc4d7d308f9bac51a8c4712d6b26cfd863938a25f
- MD5 87ea1775f0cee3649dbb31043eb51fc0
- SHA1 28a1552db71394dea425f63fb51a7f170f5e276e
- SHA512 f3cd5e765d795d0f84ffafd3fa3677ed3e5d063e7200fd7670d49c8fe1482561b54d4e520f93dafa1b6a4e5a86708bf4bdb8b4c325a5d07e2d3bec35ca14820a
- SSDEEP 12288:EYmse0yxIDH/U39JHH371wdShahp0JDKt9q0Tyy9fCfU:EDse09D6X7aCahpaDKt9qTy9fCfU
- TLSH
  T15AF4073B510810B4C5B6C1358A4B091BF660381B77B66DFF16D4012A8E83BE7AF7F696
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Split/Binaries/Win64/steam_api64_o.dll
- Size 294KB
- SHA256 dcfaa13aa419a0641917205957dbe15aa472e7cf09a28cf8d3cf429598e67799
- MD5 543515a345cc88cb93413953f06f34a4
- SHA1 0c67ff54afa0e53f82659abeeea0d8ab1dcad1ed
- SHA512 7010ab1549480ff00a66fd90a7edb7e6028de234dbc6fc7fc12bfb528174f84850b6713a3de0797fc8bcdfab5b2a52846e97b370bfa24185ead1f64b7a0132ba
- SSDEEP 6144:LV5AmlcQZIcT8e4RO882MnuyqO2CHKOcJra:h5AmllZAQuyH2CqFda
- TLSH
  T10554497AA2750CF4D076C13989565E0FF6B1745B23219EFF226053368E53AC21E3BBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Split/Binaries/Win64/OnlineFix.url
- Size 46B
- SHA256 3cb526cccccc54af4c006fff00d1f48f830d08cdd4a2f21213856065666ef38e
- MD5 59bf167dc52a52f6e45f418f8c73ffa1
- SHA1 fa006950a6a971e89d4a1c23070d458a30463999
- SHA512 00005820f0418d4a3b802de4a7055475c88d79c2ee3ebfa580b7ae66a12c6966e5b092a02dc0f40db0fd3b821ea28d4aec14d7d404ead4ea88dc54a1815ffe26
- MD5 SHA1 SHA512
Score

6^/10

discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral15 behavioral16
- Target
  Split/Binaries/Win64/OnlineFix64.dll
- Size 11.3MB
- SHA256 316eba6541ee72195e949c04597a37309869f683b96561f558c231d796974b10
- MD5 1dc3a9fd539541dfd04ba19b0e65a1bb
- SHA1 2a0ab8d86a16546ee040d866dc8e7acc9888a12c
- SHA512 0110d961a7d4ac14f075fdabb1c5366c73c76397b3b3f34df72991dd2cf14ced18a0293d49f48b2bb1eaac5206945aa4e7acac48fcd0c7380cc13a14558cfe50
- SSDEEP 196608:V8PPzFUF/qRFyL7ekwe/G8hNJRWH035NoWVxqr1Pow3PISBQxJcX6Qz:WPPRgqRF+wLQjJHoWm1PowImQxGqQ
- TLSH
  T1B7C622E995D563F0C4D30540768B439A71C1664D82FD1C193EC63D022FAADBF268EABB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Split/Binaries/Win64/steam_api64.dll
- Size 294KB
- SHA256 c228939c13ba2939d592c6f26eaf17c2e528a5c291ba9a96740c0d8d62ede83d
- MD5 d51f4262f4c0c1bb0ac01fc76ace6c5d
- SHA1 7afc26d27875396834833470f90f8d638b4f46e3
- SHA512 4b2d94f7bf7e4cf93f8e8f9379b5c2bd97bea34a3be19065da8ea6c07d64075a0f665abc2d1746501d228ec711f8e28fb827744a995618c81ca20051439e6763
- SSDEEP 6144:LV5AmlcQZIcT8e4RO882MnuyqO2CHVOcJra:h5AmllZAQuyH2C1Fda
- TLSH
  T10C54497AA2750CF4D076C13989565E0FF6B1745B23219EFF226053368E53AC21E3BBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Split/Binaries/Win64/steam_api64.of
- Size 294KB
- SHA256 dcfaa13aa419a0641917205957dbe15aa472e7cf09a28cf8d3cf429598e67799
- MD5 543515a345cc88cb93413953f06f34a4
- SHA1 0c67ff54afa0e53f82659abeeea0d8ab1dcad1ed
- SHA512 7010ab1549480ff00a66fd90a7edb7e6028de234dbc6fc7fc12bfb528174f84850b6713a3de0797fc8bcdfab5b2a52846e97b370bfa24185ead1f64b7a0132ba
- SSDEEP 6144:LV5AmlcQZIcT8e4RO882MnuyqO2CHKOcJra:h5AmllZAQuyH2CqFda
- TLSH
  T10554497AA2750CF4D076C13989565E0FF6B1745B23219EFF226053368E53AC21E3BBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22