9189322304ff09644af43bcc99df76f7790a9532d1c9b1562c16dd38646be4dd

Sharing

Copy URL Twitter E-mail

General

Target
PartyHero.zip
Size 15.8MB
Sample260727-bh1mwateng
SHA256 9189322304ff09644af43bcc99df76f7790a9532d1c9b1562c16dd38646be4dd
MD5 83418f517775612e23fd280e6b19f819
SHA1 1b4636c0a42416c16b5145098031657c73929e10
SHA512 3dcbf950d6378e39338470711b08e5f81ea7ba8f9b5b566a4b084caf3f9fe7b784649593346747eefbe6af12977e960a16fec15a8368779d7dced40225e88080
SSDEEP 393216:eLEa2Vj0g96ZXN3WQBqvI0hinQM4Mg6OviO99+uHjbbywg+c:emD9KXNLIIkinQM4YOviCNzyn
TLSH
T19BF63342B8F5C486EC93613702B35F6F1F63617AE1908956F278EBAC8502EFC65644CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  WindowsBuild.0.33.exe
- Size 16.0MB
- SHA256 c90236cab30ef1e67d5299bff6dc9a1fe3c0f582ee5a64060331c000926e7ff7
- MD5 4759ab23f4a97a9b38b9bad1eb19dcf6
- SHA1 c5e1e3e41292093a64a491d1bf5d16d37a7fc05f
- SHA512 dfff0db71f9bc7ee7ac1406471a48e75c8196ba65bbf9965b27807639bfc108f1ea3d433d916da19c22efceeb0f17aa6e207e21c9dd99aa39d465ffe6257af69
- SSDEEP 393216:jtEzVgbbcIxazlW7lk1A0eLfMKpWMAkZBRDlxMMdy68+PdXgux+uog9oKIIbxp:uDugPuZoKI4
- TLSH
  T1A3078D636808C1B0E9B181B6977D3AAF5D384D25031845DB66D41498EE7C1E33FFB2AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  WindowsBuild.0.33_Data/Managed/Assembly-CSharp.dll
- Size 175KB
- SHA256 0b9a2dbfe0cb41744652776a2c8cf2925b5772e860612f4b4dc54e9d442cf110
- MD5 61d403cb2f125a88938ff5f136e667f5
- SHA1 1f7d4421f9af520c48d4c7d1a9fef90a96395818
- SHA512 fad929733134229645a13d17d85bd0dd1092b0c1efd85bb5003ad1bec7ab1abf5f5049ef1dabc7f97890c152eec66c3c31c0f4418f9b017a69a8c71743a715fa
- SSDEEP 3072:PZFH9x/TslU2c1kejkVD4/WRaY4qDD+4ys49VV8DgzseOII8oLZhdjp1:bzTs6jkVGuD+9s49VVMgzseDoLZhpp
- TLSH
  T1B204C664ABE89A13D6BE87FF52B61B14C3B96A57F41CE3DD0CD110F909637404A8226F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  WindowsBuild.0.33_Data/Managed/Mono.Security.dll
- Size 286KB
- SHA256 39020b5c9fcd7da3194809507fa7fe61f362377a6962831af9dbeb9037070467
- MD5 c34637079aa87febbfa55915761bff6c
- SHA1 e38c1826f74888901211f10aaf8ebc3fd3a0c97a
- SHA512 8b35a8971a4e9721fe5254aa0a1566361865493b9db1fe8cfda2d59b08b88c4ba06487d00eccf410bd28a5b326f0c502651cefb3ee3876f7afeaf71db6881441
- SSDEEP 6144:3ytgJ7Sz2eZzIaYJHJRN0woCSxtwGI2B7NZGmJ7O:FBSsaYX0wobIGnZS
- TLSH
  T16E543A086BE8DB2BF1BE63B8D0F05415CBF8A156B19FFF5E1C8610E818537519A01A6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  WindowsBuild.0.33_Data/Managed/System.Core.dll
- Size 261KB
- SHA256 f497f632ff083e0ecb598cf1603001991c25342538ad044769b1d5d2f3db89c5
- MD5 26a14b4c6f65aced209418f8f32d78a6
- SHA1 0fd8129228a6986d47fd1606158fd70ba7907986
- SHA512 04b0ddc4f53d02bf82264add07c4f965bac5c95ca767e7de23289baf1be0430910f5b0ffebf3f81a82dd8cbcc9b9bdce14cc34c36009cfca52da80f478b67246
- SSDEEP 3072:HpzB+kHp35iQWX6qRR/4KxaI9gKshk4wjqMwG//ENAbGCkbwfYXM5Obt:Hp1zjS4tI9Dshk4wObgMK6M
- TLSH
  T191444C7893EDA613E3FFA771A9B0164447F0B4A270A7E30E589945F50847B40FA163BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  WindowsBuild.0.33_Data/Managed/System.dll
- Size 1.0MB
- SHA256 4c5a1e3eef677a81015209b908d36b88ceea4dcfc3eb3e71aea177568ec028d5
- MD5 d4377edc2a215deb5cd0e938c5c2ed73
- SHA1 b3d126c007ab8a11d6133129366214ef28ce5b42
- SHA512 2451e5b81ea0aebb31ce9f2014afbd34b1ffbcd5ffc41940f0b200ebd73eb615075be31494c954e93c16e9287bb4c118edb8136181250440c375ef12cfafa198
- SSDEEP 24576:qyuEtAQqRftVuwLxqx6I2J4/265WRXW+6p28fVJG8tAFPMAS/:q6+uVJG8tAFPMA
- TLSH
  T14B354A10A7E4CB2BE1AE2779B07110119BB5E045F353EBAF1598A5E82C83F505D4A3FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  WindowsBuild.0.33_Data/Managed/UnityEngine.Networking.dll
- Size 225KB
- SHA256 e01e55edf45ee3ed00ad5fc2cfb868d64617ffe73279e92ee65c066118b3132d
- MD5 c83d28aacbcdb936fb76bc6c1928781c
- SHA1 798ff27849bfeb658aebf6e8ad684b11afe83d26
- SHA512 e92fb691e3e635814c74b4cc2209b34d80e1483e93ea9fe27464588502da2faf6f84da60de5e9a0dfe1f1f670e6df1f5266b43ea7656506d117cffd96318c647
- SSDEEP 6144:qv+DOHCvjKvfm5IJj7mDebjOj8nTl4xHrL/r1gXdVv/:Y+KEK1oyDdVv
- TLSH
  T16334E71057F9D51AF6FE27B9A8F590444BB0BD03A52FE78D158124EE0D623808A663FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  WindowsBuild.0.33_Data/Managed/UnityEngine.UI.dll
- Size 213KB
- SHA256 78149bff9aee79a1951df5933a15fcbf6575a876cef542ffc62621d161ed7d58
- MD5 7e88a6a26a717d6b4a0bdf0e3efd1749
- SHA1 56da97d20b6bde45ac50b99b3c0d8742da036273
- SHA512 2c9ddc5321a9bfee58a5ff054a88e72eaad210aaef9d339c54864c8da8c6a5477f6076adcd273226610e1b0544293c8fb2dbbc794ce4f3f22c0f1b9791fd58e4
- SSDEEP 3072:Kn8bKuvGN00mrr2roVxrQOOQSYLEKQ/Mut8FpFFFFFQG+ThNHQMn5v7oi+KHNMuM:A9N0dLBEMuu6FNHQMn5v7oinNMut2D1
- TLSH
  T1FA2429202769C93BD79E1BBED0A0551587B48203F6CEFF994CC499ED2C87351A9063AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  WindowsBuild.0.33_Data/Managed/UnityEngine.dll
- Size 946KB
- SHA256 1e497d371ca85caad2c28478b7dc5a3f8d468f42a8849c1957dc5f2effd0f42e
- MD5 67b9be9353ecfe38f3dd8b666a2fee3f
- SHA1 b8b1751772a8a896b3a9497b80625fa3f0637f2f
- SHA512 7026ed69f70365c122ab2d127c0092e98917addf3cfd5b2dfbe7fc725e11f9c4912f186d0559bd0f6027c9739ab562b1a5ca6bbf27bc8c5571e678c2d917e329
- SSDEEP 12288:aKh4Ivo8rmMkxDEyoaRy+/BVaKolp85lzj175RrrCy6O:14IvsMtWRyEBV3olp8r57/rrCy6O
- TLSH
  T13A25290037B0C82FC59F6F76E05641255B33F5041B47FB8B69A5D6682C8AB290CB7BE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  WindowsBuild.0.33_Data/Managed/mscorlib.dll
- Size 2.4MB
- SHA256 c6a4fb455edcdfc79650914ac0a3c702b839a21d77b5e480191ba491e248f56e
- MD5 361219cecd48f1aa33de3834e6c598f9
- SHA1 3dfb7e96d55978c26fa0a52914dc382c02180b6e
- SHA512 1155eacb7d65d98707993e19e5f4572629d18ff9989d2f529f5f47537cb5e92ee4e346d0c9196a7ea7f06c4aea8875e6d17605dd73cdbfe36e390ded09a52f30
- SSDEEP 24576:tCYK23JT+aC2sX8iX7bghl6BLMBm3hmPt0Lu3XpURpZM/EaJjzBY:tNC2A8iLbgkFoXpURpZMsaJv
- TLSH
  T183C55A506BF5CA2BE67AA775E8B601141BF0F842F3A3E34F361912B80C937445C56B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  WindowsBuild.0.33_Data/Mono/etc/mono/1.0/DefaultWsdlHelpGenerator.aspx
- Size 56KB
- SHA256 d87d5196b2ae2abf4e673315e1fd22c3a44df80192f23e89b78108579c287524
- MD5 66fed2411c14a0fc8ce4c593ef601bfb
- SHA1 4680a34aae1193f1e4a6aac1a5dd3c307de257fb
- SHA512 331874a9956c87db0646e4d21937a88009804a59fdf5f5882ea5b1dfb7dd7ef17724e09877d98f52e7327bbf38a46dde0c54d5c85f1e860b88322bdfad64679d
- SSDEEP 768:M28utHkOFpMgMwP9h5Ij7khsp/6JtEZwMxVtkUI353cXyEyk3VbNb1gNuoT1y:ZDF6CdsCOZwMx3k5JYyklhxgRw
- TLSH
  T17743C4A0EF5C8D36499A52D9F88140CCB9BDC43291199CF3FCCDA12AF09CD6DA274766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  WindowsBuild.0.33_Data/Mono/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 ae044cd9cc2c7c42f8864195125ab440472d657e5f0d55e131f7890bd45c518a
- MD5 3b3452c399f27a24ea5a589c7bfe750b
- SHA1 b06cb1d09ad3bbdf1d8214c910e3da2a228d113c
- SHA512 41c099350159e942be8bc04c8f59c7fb0fd4bd99db46f1c0158f0fa053c08ae0c73e9d169f6816b77376283cce5beafdcfe5d3d5e3b98e8b358d67c34b954a04
- SSDEEP 768:6CEPutHjWpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/q6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T19F43D4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  WindowsBuild.0.33_Data/Mono/mono.dll
- Size 2.0MB
- SHA256 a7949be6c83b0b9914659d3add7ecbd24200c4ea8808522df3e4a28db218ad8c
- MD5 c71ee9389a1c17e8f8e3a615d4c765d8
- SHA1 120ed6981a0ff24a9bf1643daa57b54d002a3690
- SHA512 07e4e15a727b86b80910d8c1c0546f1a4b11c9b396cebdc66be68c76e47af8296014dae49c57bb2abd1fb030dfb2d57c6a68726835a1588086dea782b3bc54cc
- SSDEEP 49152:fUb2SOHMlNjpkUbbUUusSMKTZTfCxzdI3N4a/G0T6BWVrez3auR/I2:6zv6ObUU6MW7YPBXz3R/I2
- TLSH
  T177A56B51A542D332C08200BD4025572A1A7BBC62FF3699D7669CB48FE5B42F0A79B37F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24