remus_stealer | d3c2d1823349c2fe248b113f8f1c1b3844d62d6e5000c17f04dc4d95473d1583

Resubmissions

27/07/2026, 00:06

260727-adp5xaeq6110

26/07/2026, 23:54

260726-3xtxesszev10

Sharing

Copy URL Twitter E-mail

General

Target
Leaf.it.Alone.v1.0.16.zip
Size 781.0MB
Sample260727-adp5xaeq61
SHA256 d3c2d1823349c2fe248b113f8f1c1b3844d62d6e5000c17f04dc4d95473d1583
MD5 54d89c6addb035d9b6403bd366cb3c22
SHA1 45eaa1ede78fca0ef814906a84d2e8c873c09b54
SHA512 844d1a26948ab5913042fc4d5b9c8166c25b7cdb078e198032d0e407fe897cf4dc800a9f51d513dffdbb968a2b1be2a5e899dddcbe94c9b6782745ee2e168a99
SSDEEP 25165824:XLsW8GX9BImG51Z/nK2/Wp0VlnWqIeYsX8:7T8GX9li1Z/nF/DlnWqIeYss
TLSH
T1A9893386C71CD54E2C3D64B3A0E0BCC8F06C841666FA53B1B766A51C3ADB79401FD7AA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  Leaf.it.Alone.v1.0.16.zip
- Size 781.0MB
- SHA256 d3c2d1823349c2fe248b113f8f1c1b3844d62d6e5000c17f04dc4d95473d1583
- MD5 54d89c6addb035d9b6403bd366cb3c22
- SHA1 45eaa1ede78fca0ef814906a84d2e8c873c09b54
- SHA512 844d1a26948ab5913042fc4d5b9c8166c25b7cdb078e198032d0e407fe897cf4dc800a9f51d513dffdbb968a2b1be2a5e899dddcbe94c9b6782745ee2e168a99
- SSDEEP 25165824:XLsW8GX9BImG51Z/nK2/Wp0VlnWqIeYsX8:7T8GX9li1Z/nF/DlnWqIeYss
- TLSH
  T1A9893386C71CD54E2C3D64B3A0E0BCC8F06C841666FA53B1B766A51C3ADB79401FD7AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/Plugins/Steamworks.NET.txt
- Size 243B
- SHA256 9f2a117bb088dd7a01e8d6e1935426fed16d96f769d7e71a9791c65110f8a949
- MD5 3f73dcc6d4881ed8743ad13ea7dd3165
- SHA1 52212322fae0050af81a2e0f639bc9d0af03cfb4
- SHA512 0fa383d8b2d6f28e75560ca34033918f82f911e9c700e92c91902728a25179859dc13c0651a79ebfe87eba4fde8eabd73dfa1b7c63622d1a9bbcade6df35b259
- TLSH
  T160D05E0DC86614712876FD921AA4270BE2E76706206A1E35226FCB6D47E17232A8022B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral2
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/Plugins/x86_64/steam_settings/achievements.ini
- Size 466B
- SHA256 2086dfa0911beb21cf1d600cf7a6108ee5c08f113d551019e36adb9b3dd1ec34
- MD5 ff602f792a46ec87a00f7eed1a517225
- SHA1 fd3306962d58bbcf6576c67227e46a4d928277c6
- SHA512 abedc8754e95814e2af4f7e05bed97695197e74ffb14b94fb88397c542f273b13105cd6c79ba64fae49d217fc36137184fde311b95a9ca3f77dc0360427c95b5
- TLSH
  T138F0E2CFBFA35B095D3F5FC15131303A2540DB78CB2234B6491060FEB82241D034A0A6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/Plugins/x86_64/steam_settings/steam_appid.txt
- Size 7B
- SHA256 edccfc38d874c8e4b968aa1ba35e495065f984e047c5a81f24abb6517484c6ec
- MD5 e9dfb00dcc66ba36b08d02ee351de4fe
- SHA1 ed2ac6737896fc953232c3d3a1c0c0893d8f8d5d
- SHA512 2518e801f87e35c68c0a8bfe4a81311d6a6b1ff9770e9985bc0d6ccd61291ecb34e1931caff6f8df4d4578034505602a815eed95b27602c78d5bc65370d506a5
- MD5 SHA1 SHA512
Score

3^/10

execution ransomware
behavioral4
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/Plugins/x86_64/steam_settings/steam_interfaces.txt
- Size 843B
- SHA256 4b7322b4b71b71525c872c31bd20ace5fc016005ba399d5c3753bfac3c32902c
- MD5 5f51dc2374775567a463da874a39172b
- SHA1 d5bab0b36c96e0eba3dcfaf3849cf7472005049d
- SHA512 6edc60b62070b7230a94db5759b448d33bfd9bc396b948d125d461990bc3b949f34865b413676fd6f2df20c71ed6703d8ab161ce06ade11a702402ff63ebf1dd
- TLSH
  T1BB01801B65213D394F29B4E500E1B963E15832279680D8FEDED7B3C10354A1413AEA14
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral5
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/Resources/unity default resources
- Size 5.6MB
- SHA256 620c67ea0b2e25575e4dccfc1542819283f9698718b075f430e6c04eb1b04325
- MD5 3410dbec74bf84d6d9f6bd02d0177dfb
- SHA1 f5963a62bf6968b229283832ed793f83dcd8bea5
- SHA512 14e30c6905d7a7a63c794eb7705a388b88c7bdd1c898178ed097aed91091a76909022c0022502d6c780d45cba59ed8913e7f007be0d873f7ef9ab9e4739c9022
- SSDEEP 12288:ZZ6QAM4hlnWPO9SUqxSkJnxYKh5fOjdew3k:ZIcOUvS2/fA4w
- TLSH
  T1F5465255A6A1A93DEC6E203D87630DA1E3D8A55D0BDF8B43391C311CFF65A09CA372B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/Resources/unity_builtin_extra
- Size 384KB
- SHA256 7c92e7fa4ef1efd4dd4a9394647f0211931bac0c2359abee175ba33dab8e47b8
- MD5 0d391c5978bd19a8f37aeee90825d542
- SHA1 c77b80923db9d7f742f69af434b248170b70dede
- SHA512 fab5e1f02ca2833aff312e6c26927986bb40dec67de30aff248b8884b3f113a7cda1d9bb6ae82f3a9ef87d2e9e12ecad22be4c97f78e923ddcee376fc3881736
- SSDEEP 3072:ftDA8BRxxN9ZvJGV/zfd2E46LflU6e8Pli7rL2C9pRZD:ftDA2RxxdOzfjLbjPs7mC/RR
- TLSH
  T129841A79635B583FCC21153748BA0B739331A5F81BEE0F236E2C6F6C28E5298AB11754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/RuntimeInitializeOnLoads.json
- Size 7KB
- SHA256 c87d2ebb17e9be77d7254933e1d7ef6a8e7cbe0cd73fa14f6a0feae40566dfce
- MD5 42173cbbe19397af4b17291c46121d34
- SHA1 8554dc08c1964807e3c589db554061c3665af349
- SHA512 1fecca47dd44666eb88f9dcfd6ead220bc3bf6f765ce74811ae67b3a35719d06f7a2b970343701012a84a2d22789d8531bb6020e4cdc22889721ce055aaba615
- SSDEEP 192:PcSwBuBdVONSKdgxE/CpiCTiGidiHiniXiripihibifz1KqSrAOvaTAU4a81sF0d:E8UC
- TLSH
  T109E12EAE23878F7F0F4B839679BE195D34840A0F9AC75940D9BC5F3F9972219284622D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/ScriptingAssemblies.json
- Size 5KB
- SHA256 bd50e53c39cb7004a9af4d60913fdb021dfbb77b8beda823a420e77804b868b5
- MD5 8ef9c0a7d25902f62461161b2b6c5402
- SHA1 c6f5c66ebf8d12a60b205f6d2736b4615f414ad4
- SHA512 61dbe3358eed91ec11b13d7c9e332f2736c26472a0ece5bd8226df998bfb3cdffe4c93ce79cc1f54a43c6983331489cba23924fb59bd78a03c08718bcacb6b22
- SSDEEP 48:YgNAYrKMb0YJVHdCCouNu+GoSfTG/f+DJcywdgePOJO6GqZqd:bxXJV9FouNZ0cJ6HAd
- TLSH
  T126B15DB6C58F26E32ECC5EC38C748CCC39C350A20A6494145EAEA79FA978CD63D1C6D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/AddressablesLink/link.xml
- Size 57KB
- SHA256 21b60c327f1280d72bbe21752b2f43d85f64141a9f98945b25881510151cfc05
- MD5 438a0e9dbbc3fbad51b62ff3a0eb11bd
- SHA1 8b248ee9cf395698d8a27845f217f3c440b6593b
- SHA512 51d0d0fd0c85fe8b3213376c57e5a937f86ad4e2f5d6838970dafc5e01f0a79375616ea8e899350103b139db83e607ed13072b05294d26da4c954b109bf7db5d
- SSDEEP 384:RXdjS6JFI+gy3WBlIYThihk3fTIgFPf2bec9dIHUAdEcKKkO:RXdjS6JFI+g5LIgqAiFKkO
- TLSH
  T1CB4307A5038F3DB75776EA12AA2A40D9A83940FB061431B63EF635376FF75490A23707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/577d8306f3afed83dd0e7008a99bb867_monoscripts_f389a01a857cf530b1bdf4b4030b21de.bundle
- Size 14KB
- SHA256 c719a838800ed39a1ec7ffdc186f65df5d830c3a83377f610db7b8cf266ac9d6
- MD5 27a0e8d332bdacde9479ca56d8d30e97
- SHA1 4a68c2d97172c612842045a319250649bd9689d1
- SHA512 4fa0fcde5c6c9b4b22c19dfca647caa7bab84d45d855d6b4d3a2295ee3fbf8c47b83d587f488c36e8d8172b87c74cd7ffbec5cc3211dfee7be8c730a4c66671f
- SSDEEP 384:FA31B8+tQfridkXnjnkSeu8BVeysCUqJT6dBF1PX4f:FqXoESeumsylJ87p4
- TLSH
  T16462AE9452488E11E750017BE1A6BF502C76A66BB9AD73DBB8FBBD3F19038DC1885342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/577d8306f3afed83dd0e7008a99bb867_unitybuiltinassets_6106ee12d0690a8ade65dc30ab29d212.bundle
- Size 177KB
- SHA256 fadc9b1f2057ce5148a4ad12c6df0acdbd690d15c7d9ca7f6125324c41d54d47
- MD5 05ae02a1b51d222f25a48ab4c26dbda1
- SHA1 d00cbc45634995117535eb0b01586412e06c6f5c
- SHA512 62f78a0990fd25a9ab09708704e95e23179efff2a36e3e1a025e244f05b1049f54cd7e600bb8f69f672899a5338f3172ed879f74a22839c25b20d2d61d8df5ea
- SSDEEP 3072:6w+Nu/GHFzm1b/QPeeqqD50kga8ouYjrKiW1STBuYRUYp1vSPtHpdKB1:d+I/GHFzcNZ1TSBuYRUUBSP1nI1
- TLSH
  T1D204E061D0D3B071C36A3D2175ADDB25830DC92E3B4DB9E6507F20770E8AE6925CA0BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets__f88972a88301a830225cef5b3945f57b.bundle
- Size 12KB
- SHA256 69f7e72b3dd23abf891d8c3e9e0af40a43c93429d9b60939ba8dcae75518c386
- MD5 9e34b9369298df78f43194336508b76c
- SHA1 9b3400d546f5c6b3d68441ba6ebc3065976079b8
- SHA512 1826815168cd4ea676b82bff755e56248722f8780a15c33c0a175f3c5e76deca70d53737a956f3aaf039e02f9989b4dbbc0ea9726a1ad367a486e8f447991efd
- SSDEEP 192:cYAHM5kuxqDAJzzwVOVNHvNuTW/PbOnWN1hwz/JVqbQkzbQSehRWHLr3F:vkmvw4lbTN1KkzMPG3F
- TLSH
  T10E42AE40AB02F99CF726143198057A6E8436C70F8E97B1EC293DB8B55D3BA1DD6F4222
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_achievement_8dd8c1f19ff5641f426183b6202e155d.bundle
- Size 3.5MB
- SHA256 4f2eee4e207a03f256135e255bfaa49ead9a798bf58d59933939f3864d4736dc
- MD5 4128adb3496d45dffa2f9007eba808f2
- SHA1 0ac76f1c50566c340a4ae20c072ac8a55ebca90a
- SHA512 12bf14aeef6b4be7959ab3bf2a000313fde56991f79bf767b5439f09d048475312982b0bba51d0e1c4262b3adaf3d7aba0d33f57e927bd38fad01416edf3003b
- SSDEEP 49152:JLFBaMBQWP/nxLq1lD14qNc6DA20UDGZjxXtr:ZhBQ2/xLiUOdV6FxXV
- TLSH
  T18FF523B774DC4A11807E6E6262BC4FE91BDEC847275A45208B226338D8EB18DDF17CE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_actor_47f4362f4b620c4554940e9ea851fc6e.bundle
- Size 11KB
- SHA256 8d70c347d6aa68a0b8d9f13c9d3c305c9c327b3d3da42ab9a4d6c6df5f7bb66f
- MD5 101f5c435d571350ca314163820e1ee1
- SHA1 95d203bf71255d0a4de33af7fb577239296883fe
- SHA512 147ee99f2b742fc6b8bf0d8cf3e675e09124b19081d1102e83210d9046f46e2a75698c5060d43537d76880f0a7f4e0b1fd9f3ea52c6caeed016764dd4979f623
- SSDEEP 192:Av9UmQBlm4n8jzxkfBfqMCGfYubDf2OV/qrli1XRS5J/rRmJvmZkI9EeBQ1s+ceg:m9ctqzx0fYlOBqrM1BS5JTRemZx9EiQa
- TLSH
  T1FF42AF25210B4A4FD512A252C47B23308E22F1469C57FFED3477C5798C539B93AF071A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_anticheat_c5b120e475b61112f21ed75a2fcf3b79.bundle
- Size 1KB
- SHA256 8ec1436501943e00b3b760c4e1f6ccb49424b2db06f3dab8e32dac5ca04b8b86
- MD5 df60eaa8fb212c86a211c97f5dc4be53
- SHA1 edb132b9accef58747fbb35a6300fc8f02f08517
- SHA512 78bda421e60983532a94f7081bf1e8ce07ccf409c920cc05f26af5e734ee2e4c3b688f6c852c59ac8114a32d97abbb2798a992863bbbb1398b426989905447d9
- TLSH
  T187415D0067878902D99801BEDAB20712CF5DD7991015B2CA2873E20DCE3EDBDED553B7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_audio_7550a6809900d876ff6ede2bfcea2831.bundle
- Size 11.5MB
- SHA256 79585c49b913598126b018c2ff40da701baf27798b8e135b0745adb06c3251de
- MD5 a4512c3731ba21c1b44ff09857ae8388
- SHA1 28a989b73ea8377fca6444ed09d1427c2ff97129
- SHA512 53ced8897ce1f96d7f3e2034bcad65a22dc190e635c5cb9d8655f6925395eda12d62c7f8049323b1d9e8324a15affd574d027b2ffb604f676aace1764d4dd52b
- SSDEEP 196608:azPNK3O6xq16cOzlDej5N9a/lKeWH54X8kvrY0feb04OekFSE43NqeqT:a5KeaKODeDBz+Xd7f/4OeAWKT
- TLSH
  T115C6338FC7487FB5D1447C72C7B654635326B9FA9E62202E242D7E2A743BD244F82B24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_collectable_6a890c70ff201a8a7875ab3e3f3e3a25.bundle
- Size 2KB
- SHA256 9eb4cf3ea298d3ad7242c0fbc69ad5915aad4f471552cbe6a781de898da19a4e
- MD5 95ca37780c1f511fd86b7b526677c658
- SHA1 232b0d8e6e1d473b369daac08325bbc576240dab
- SHA512 73cbcec4ef1a85b83c701fa1c931df3740b8500939444aaa316bdbf74cb5c2c52e3fb9699467b9cafb1c61b37c3bc280234d619f35488fc6a473f2cdb5260207
- TLSH
  T1BD41FA00BF484D03D12F167585F6389B9E9EC6577189A391693A154E8D343356CAC23B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_collisionmaterial_8ab8c5924daee6e6e42e6c898201fc6e.bundle
- Size 1KB
- SHA256 cd61b1f78334b38d83d2f7804ef9fa64874aea324c3221aec0a380e2c765c3c3
- MD5 5e14ca00fe5fa45f4872dfbf7e3433d1
- SHA1 4bafe4b2e79c8340a1b51be9b86b7a970dae1781
- SHA512 1ae1e391848434291c71a36e1227aaeb473652bc927299a968fb00f51ca766c27d9589ce0e86fb0629086c1ae85c82eb0c87fd076e0eeb0e8ad897aaf52c37a9
- TLSH
  T1DD410A4052444421D43A01BB02A7089A89D8D8ABFA4BE5DF1A35608EDC3D3FECEF0237
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_context_74f5f6ab56d61090f4d9a4c0c7caeaec.bundle
- Size 3KB
- SHA256 465144cbfe92f435ad3d17c8f4196b70f53ef7b821f4731df9c2c57c5c37ddfd
- MD5 c658316fb80c0746c2b3f4b073674d05
- SHA1 c169531efcd69e5f0de4852b79882cbde3d1d4bd
- SHA512 427150652707b19b39ea350f6c422bf985bdb0af86e16257b2f9c86263404b629cf101106eed21dd285ee82c7b0d45b2a0188c1e8a29058fa0dc68be857b5218
- TLSH
  T1D6611A106AC7CB56E490463EC0BF0D1EE9B3C3960887E2435E76764B483ABAD2E74131
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_cursor_a5abae98e733f1a9d0cbe34b981c49b9.bundle
- Size 47KB
- SHA256 6139964cccb6ebb8840054416c6a1a56a2beb80af631e509cd60e2fe6ffe5248
- MD5 581298d5a7bbeb9ce28dee04e327b8af
- SHA1 c4fd1fc4e7d38b5d713dae933a2c71351348d86b
- SHA512 39dd093b5809545d3062b45c8e8faa8c04270bd167d177c9087ed990d799a301589148d4528fd8905b88c6d5d8f8a3810498395f42981db51d6428db373768e9
- SSDEEP 768:DadlWfghWyCqHi4Bb3pZfVOVKICtErnyB4okUEry2X/j4z92PfVKKhnLYoy+tsih:alL4P4Rp5VsK3Ozyrr2vj449dLly+tfh
- TLSH
  T1D823E193D9C01E6BD0F924380497271997FADF2E9C52E148056AB72D9D722D8C9B23B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_gamefeature_21ba2ce2641125f9ff9a4f5e494a1d93.bundle
- Size 3KB
- SHA256 2d97006b4f2e0354a87ee86528f998fde4089494ecc8618755d08938d7bb74ee
- MD5 f384ce6585b96cf8c0afc7a32da2dde4
- SHA1 a8f9942dc747a989b25a3f48773d8bfd3c5a5686
- SHA512 0d1b0c8f3f5d290b3227514788141905eda0a621ee0f8a1c1218b1e9fb792ceaca0631c14d0ba40a3178d48cb9359b741acfffcf916ee41cd281609b27a32a00
- TLSH
  T193613C0C5B824806C57E077C01E6196B9998F1C60C5568CF24BEB65F4C7727D5B3937B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_leaderboard_222892f54f01973cacc77273574d6a37.bundle
- Size 402KB
- SHA256 5e5abf91e3ce9bc6937d129a84df89e5d5a5e76b0355247e85819db1045de130
- MD5 dc74c8a0a5879b431ffc6b496eaff196
- SHA1 8925aa93ee4b634d612217f40791aa8d40a9131b
- SHA512 d303c45f0b4cac4e0ba4a8ce9a2590f756f66adf6cc1d0acfab3872a530549b4fec74e30120161bb082d134f2e01ecb7473f91d1996372a708158ab5f8f85f13
- SSDEEP 12288:bQvzCOlv/LqDpmAMOKgAobwwp7z16J90Q:MzCmv/L8pCtnoTeJn
- TLSH
  T17E9402ABA700DF629BCC047A15C83A6B40EE5C292DC3D24F5FA4B95F99B850C5873735
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_localization_3ae1494eb7ffb5a4e105f60b0713b58a.bundle
- Size 87KB
- SHA256 9953d305d282d51b5e5c49b29ce6271feed089b5bf025f039d34a5b321f7ccbc
- MD5 0d01721f663701df58e89708f337bb9e
- SHA1 33355dbdedd1ef737e3566d254187894f4aa450a
- SHA512 2b937250bf8d1cddf58bfb2c2af61c8bb9637bf51bf446b96b7315a9af014cda2397ce1b566db4f7d260c2ac9e0b4c12091691543c38cddee89e37ea53aaec5b
- SSDEEP 1536:r0iTDuTjLwpQVfjFD3o2vb9+MmhrY4P6JG1+vpeeHaBTGPvJBVHDJ:rDiTjLiQV5jbvb9+/hReG1ipjHqGPvJ1
- TLSH
  T17693D053620E8CB1C358847B7C9A9112A4FF9C00ADF3C13E9B15B7AF947754A1A36B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_modifier_3471001aa01815192d8513175fb0e6ff.bundle
- Size 8KB
- SHA256 73ba9cc2bab413dbb53c4ca15ef79fa2b8fcf63000faa14da1371fb1f91a4991
- MD5 4e86f88f8b375fb47ea96183725da2dd
- SHA1 9cbb0eb485c22b72a7a51d8c3770be506e4e8536
- SHA512 b54ef45c9c70b5b442d93fe3d447efc4f537008e1854e377d26ec20bee492a1ece65216f1d55944816a58106fda59909bb62d1dd63b132474808f3aa495c6bed
- SSDEEP 192:KIqAOzpY6ns4pAYGxmSoF6SMRhab0VTgr9Rm1dYCYe43tJveenc7VF:zq3Xs8AhUSozsab0VMhRmkre43txebVF
- TLSH
  T13D029E00D43F813EDC1462E8D0B14F294DACEA8F56D9249D6633C87AC86D76A573A136
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_objective_1d5fc9b68ab8a6d1056fb4a64beda547.bundle
- Size 6KB
- SHA256 08eabbc7f9dcb5e1dffa78e9e16c6146ef871e6a11b5602ea1521355043c76c2
- MD5 e7d9b26137939a3ff205927fcd3c6a15
- SHA1 f2454e64b86015d97c3b7e9a791671be4e75ebb9
- SHA512 1e6e8af9e5de9bc768fd6ed46893f9875d787338c1c66df033a3f1576a80bb1909f87fc123062ba8a357ce0f13a36049fa73f8b3f21f929cf2d8848742486034
- SSDEEP 192:Lp8bN7+hZKANB2Dhdh1TrrCVPZ2Mopn1OYHeA6:l8TqoDhL1/GClFcYA
- TLSH
  T1C2D17D6809C0C809F6220B75837A0B968075EAC5D669B6C34CA3897BC835795AD39076
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_reward_05cdd6b10863e73a8d4858ddb736f13f.bundle
- Size 4KB
- SHA256 b8efb0baddeeaaff1da9772911e46f83a8aac6452fb8005206c9e3cbab93f139
- MD5 1228f7a92397252673538f54e91176af
- SHA1 e8371fea9adf8d6afbffe67b2889f059065dbc9f
- SHA512 00cceaed397ea18376e0d56e0168e7d03037e35af6423e4cfb47af876ce38df3e5e78613e09731a400246fc0f864e1ae8be4b854254d69f02355e54581bea09d
- SSDEEP 96:AGckoIfYZRx05koEh7zpIJcyAgzd0S6s7+cF/5l+vU/+4Wct9go:skoICHppIJRAgxD6spoc/mct9go
- TLSH
  T150916ED8054A5949D6352439D2C24F65CC66C79BA94730582E738B9D8C3173B6EB8135
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_state_d900431d28aefa31d0f2addf125efc62.bundle
- Size 3KB
- SHA256 afb86a66d4502a4bbe2fe373d6e07e14645f366c77e6c35ba0c62275b1a6db4a
- MD5 07de7918e97d7318fb4e870b6ac0f1ac
- SHA1 ce86e85ae6405c4bb0e4b5072f20346f9efd1b56
- SHA512 327163ac6bd7b56d9d93d59502ea349da65eda00bc131f1f9a00e14f99ed71eb6a50ed6e1aa5ec095f25964569a56249ed2d1643c9884a4adb605a6c2d3ed153
- TLSH
  T1AE814C156B81C910F6751BB681E61E22CCB8E5558892614F4C73919BCC3ABF97F71301
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral28
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_typewriter_e2508f01f8e7ccf62bc79c36022f962a.bundle
- Size 1KB
- SHA256 c724efba23da66364db9af7cef9163afe9b53fdcacac8f3d97217c604fadaed1
- MD5 6195677da19909332ec08aa6a0485a33
- SHA1 f62a91d5c186385840b5f6aafc9668aabbb1b17b
- SHA512 890311559a97b0b9cf1fbf24730aa66542a4db17c52e1bd75eeb6bb5e05990a647e1b1c1406996ce3ed8a3ee2223998d5c8004ae8c9b746f3c6c84015d378ab6
- TLSH
  T1F831C600264A4C21D62D933EC1E1240B8AAAE6875A47B3C95D3786CF0C38BBE5E99275
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_upgrade_6fba93ee1c658273e5146fef3b4d9815.bundle
- Size 5KB
- SHA256 d9978e1bfac2418b778c9de475ee62994cc4f3ed107fabb823a48247c88c26dc
- MD5 8dd2620de81439ba4f532c2de861d960
- SHA1 a0355735b80435e5fc0e6e23b43e184d4ce11c52
- SHA512 e0cfa98b7ccb589680da9d7be624a16308b00063e8ce697a95327417e99ec5cc82796634b36a9b6d39c4c8289e210f0ce8ba0b247d23f9c88dbad8a720a94004
- SSDEEP 96:DIoIf9aAuRnchgEQyDwDo+8XdLWlxY9qfue6Gu+ffgZtjHaAQviaqcdTJi5rnj6n:UoIVaTh7yDMctcxYIJ6GrfM6AgTJiC
- TLSH
  T1C9C18F04818CBA29D520853DEA7B0E574AD695CF5E033DCD3DB3528ACC31ABF8AB4122
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral30
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_upgradetype_164a69862b32f54963bd56719183dfd1.bundle
- Size 3KB
- SHA256 26144f80c0db325bdf64c55a137c5709dcbac16d49ba183a95b44b4aabe44ea7
- MD5 a9230ba85fd0f1d3cb721607b2a46b67
- SHA1 2f900df5b806352a23a56058a0aecc02d89070fa
- SHA512 f2c4a6f38fc03a40a6f6c85fa61110c75a355990234ac58e2fe07fe78614783e688487d5370c67433041120ed9a59dbe031bbebf05f195169cbfe2d157b12289
- TLSH
  T179615C498A868408CE26513ED0BE82138BEC5BCADA4BD18F1937916F1C39BEF5D50261
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31
- Target
  Leaf.it.Alone.v1.0.16/Leaf.it.Alone.v1.0.16/Leaf it Alone_Data/StreamingAssets/aa/StandaloneWindows64/coreassets_assets_userstat_ec8e7c92530ab119cf98fc17974c84a6.bundle
- Size 2KB
- SHA256 b5f94a094f3b08e56fe9e0c6de824b25bad9bf74b6c7a7b9bfb419907a202ceb
- MD5 766076f2f2f1a5f1980de4a54d02fdf2
- SHA1 1d7093e33f6caf52ce040d36bb2e43d09a3631e8
- SHA512 1ea2d51efbab60e489f0cb1e93869276bd799d16ea7cc0b253978d8e5f0880df573761e813d4e37313e2a3e60876ee3532f1cb9101918ef93ed688ac7d6bf55b
- TLSH
  T12B513D145A09F002FA3119BD46553B16DB74D65B2416F0CA0C36E6DFCD397BBA23413E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32