210cda16fd2e6efacb298feedb67c80f8219a3cce1b62201441919861606cc85

Sharing

Copy URL Twitter E-mail

General

Target
fnaf-online-0.9.551-alpha.zip
Size 221.5MB
Sample260727-c87pjsvtcx
SHA256 210cda16fd2e6efacb298feedb67c80f8219a3cce1b62201441919861606cc85
MD5 94ebec8b7ea77a2bcceec159e8456010
SHA1 5e947fd35dfe33b07e9662c9a9411180080d857c
SHA512 b447c92c32a76933a318c161f75dde0c295bd9f2210717d515163d496d1e73df727b70a4425cd4c80dbf1c5cd073063622615d60144ff9dec783ff418d0b1680
SSDEEP 6291456:3lzNFW5zeWSq5WOssXTGoLOxiWROkhlWcAXqyZazcriIcfZJeP+haJ:3ZUzeWSHOjXFLpWROMlNAXjZ8criIyZK
TLSH
T180B83329E46AAD87ECCF0A3E54B42E4B377B46B3DED342F4542ED86A1C2179C6174903
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  D3D12/D3D12Core.dll
- Size 5.4MB
- SHA256 8710110eccf43a32e5e1a04552cb344832922a0cd23caeecb764e18bd5cdffa8
- MD5 7fc05c9a8366d19302dfd13d09d3ebac
- SHA1 df07482f58cc84c439979548682cc44c48471a06
- SHA512 68385bde06684b0e9ea809372f151cd266cc4f9c3be14be0127a2e7468538f453c7da434ef5ddd9f751dcc054032dc6c7baa2bc5bbebd1c6ea3e5d148a931c1d
- SSDEEP 49152:DDcfp0Vm21RnkVNaAFiEVTmZA+kkIwaaKsb7Xvdq0SpZcxNom7nLMzh3:Tg21Rn7rImnbDNw
- TLSH
  T131465B47B2E95298F1B7D07CCEA34B4EF671702153605BDB12610BA96E13BE04A7B3B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  FNAF Online Multiplayer.exe
- Size 656KB
- SHA256 f477238012180dfbb96f2ad6693e3a61798878e7ae334a208b395c7e98d8d414
- MD5 f5fddf2b50380483a6efaeee48ca90b2
- SHA1 8e7df8783520d6b3f45e112769454780c709d4d2
- SHA512 d0b6590a8095e5a0fb6fa64f4250f316b690c3453ceb3c0c7bf32385093c35538aaa025895759910302a49adbf458533183c0bc6141a2c51e421deb0eae01a8d
- SSDEEP 6144:h2E4CD20ZB4Gr34QHH1M6j4La9j/NwsWoxIAUzKXi4AphN31lKyvA9OdSr:h2NCD1Jr3dnTx2RKaxPSO
- TLSH
  T12DE4D641FA228D26CA03923A84F3D73A973C6D925E53DB5B05F47D833D239461F962E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  FNAF Online Multiplayer_Data/Plugins/ARM64/VivoxNative.dll
- Size 714KB
- SHA256 b1bec9a97b8d8c869638bb49d8aebdb634c53adf89fef22de593ba9b5ae01836
- MD5 b047992ace4e1c71d799aa628261992d
- SHA1 bf84c3a5dc990e07d94a06795b3abb0f6db3f3d2
- SHA512 b0a6e78b9aa14968bc14b08528d62c02a9c5edaadd1df6c1ae01719ab0a3211c327b51140f0f1f54881a8265c8d41095814963cbbb856daaa432aa05801f6fab
- SSDEEP 6144:Rjd7guxQbKyn0PcyWLHpHBXz9MgpyzNL8ux/HylKGvGbXrg6+qsGDM6AK:R+cPcuvz04WGbXrg6+qFAK
- TLSH
  T122F4B63D5E8FD1E3CAF34A3198A7D6A16422BF28E8DD59E41660417447E0ECC9DE029F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  FNAF Online Multiplayer_Data/Plugins/ARM64/vivoxsdk.dll
- Size 11.4MB
- SHA256 1ff2ccc65dc1d13a8e580bcd4591edd6f2ac18c0263800c6cfbb59c4f4180508
- MD5 1702e8f24bf6287b9b5a1d39ceb877ba
- SHA1 77ebada3f43aac78337af9c8e29aee316d60980a
- SHA512 629a67f3699433fe04abd9fb2df783f5cc9b5844301a7871badc474b038649e8cda7a7703ec044c5f4e6ea72989a4eb825da10c351fea703cb9a917d298062aa
- SSDEEP 196608:Gp7BFCFbnyZnn5QiIfAnXYmgLyGR6FuvFaEWmys2LRVfrgt3zKoI4y8wuplW:ewFbnyZTeAnIlLyZGP2TTgVWoIprl
- TLSH
  T146C6AF2AB549E846C8859A789D7BCBC83167BE544C24C74F3DA6B70EAEF23C155F7080
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  FNAF Online Multiplayer_Data/Plugins/x86_64/VivoxNative.dll
- Size 716KB
- SHA256 1edf464d0184b7b13bb626e3222902f87ba1c74b026fe5600f04347acd9a5498
- MD5 6b65f6b5fb91de87b5721565d86f3294
- SHA1 f7dc873d53d598121f20b68525e7cbb42c315898
- SHA512 f1f7ed47531e1f63f78fa3a03248641d7b4b97834038fab2d27b183c5226d26c526a16e8098aff48f5dd1ff2c7c12bae283dedea047ddf6bce4ce913eaca2b79
- SSDEEP 6144:CaEakSRxnD6onuSjVYcR6bPkdozLcGxpfd1zWMBiE5cFVDjGbXrg6+qMd5T8:FxuUic0BjLkGbXrg6+qM8
- TLSH
  T136F4752D5E4F81E3DAF7093298A7D252A561BB19EBDD6AE607A0417007D0ECC9CB035F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  FNAF Online Multiplayer_Data/Plugins/x86_64/discord_game_sdk.dll
- Size 3.7MB
- SHA256 e95e8d46087b846396c340b299fc20295a9aa79e328d2265e45d05ddc8782a0e
- MD5 a70393adb60ba6f2e55aef6e6fdd18da
- SHA1 5bd9ad15ecf6a60f0a2ebccad8a890e792f0e021
- SHA512 f0d66508699106008ae3296cf5b795ee83e99152267863bd4062321f2646ddfe99c9bd52922ab410aeba45b0a7c24c4f525bed6938dcf1a702c6d6edea74d13d
- SSDEEP 49152:Er3bGelmX4fb86zSY14Bwc9yQkqdvca0psNH0MUpDWxjupPfHS2XSgRenP8H9cso:/t2Wano+vp
- TLSH
  T1560628217A56697CC1ABC07483874A325E3234CB1B36B9FF45C156783F69AF46B3D228
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  FNAF Online Multiplayer_Data/Plugins/x86_64/lib_burst_generated.dll
- Size 1.1MB
- SHA256 3cafd273a8fcddf80a57838af249cf7c71669612289e8fa0bdd79ca8034d926a
- MD5 c8c6eec6d82aa2c9c08d598b91f8e5e4
- SHA1 4d23a22e90c6ac7643412bb69e3d38db8885af0c
- SHA512 6a4206bda450c8aecc0a91a9952d69c2c27224b763f8bc1f4f6739e35073d7a8863ebe8630ac16068caacaf279c0a9dedb139d3ecce7f552df8e056bcad211bf
- SSDEEP 12288:gHaKOSF/eHiUHhWTcuI9r4LtYDXIJrnx4iE5H3so2LFYRRs98PpgXPIiKno3kWWQ:gHOSF/VUHAAJ4YIRx+0hYRm9t2Ml
- TLSH
  T1CC35393D2A66D2AEC03A80B44E1B1767A7733C4517E58FB784F088772FB59950EAD309
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  FNAF Online Multiplayer_Data/Plugins/x86_64/vivoxsdk.dll
- Size 11.8MB
- SHA256 57b3fff4b8705168d55f5508842cb6519418db3f538ea7a04f63f990f2476d50
- MD5 896d81032f82c20871b4cbee3f138825
- SHA1 34c8d179baa5ffe7911d4e5ad7e720db397935a3
- SHA512 5166fc77ba9bc691ea2b4e94b7c33756201454e107255979ed3e58b9e717e969641cfe717dee453d2a1431ab38c5ed7f157c9a210f5e3a0b915bbb535ca31576
- SSDEEP 196608:6ETugtfbCCk3FCJbnyZnn5QiIfAnXYmgLyGR6FuvFaEWmys2LRVfrgtauplfKoIx:6ET5tswJbnyZTeAnIlLyZGP2TTgoboIx
- TLSH
  T176C69E0FB641D188C8169574896BD7C9A272BD465F748ADF3AA5BB0F2FB33C11DBA100
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  GameAssembly.dll
- Size 58.8MB
- SHA256 74559cb2f43b2c844f1b2f40c1b6f73b8a48f8b26080b5d894048c56a60fa639
- MD5 cec5ef2d83046201ae8833d9361b701b
- SHA1 b32baf1662967ef277e805b1653e96f1df9f2f9f
- SHA512 3bfc996546e6760201814a2a251653797cce819f5ac0f3577b5aaf726b27ee627fd6c748366c7d37b83e1421e5ccd60a6bd5529f646ca97f27a6431140f78605
- SSDEEP 393216:z/1r9Nk2nfQy3fTEieOwzWZWfspAoWS6jR0IkM5PAUDv7CwZXikeTLJnMZ3cTERq:pKS6jR0IkM5P7C7aRmeO0Eaal
- TLSH
  T1A2D7294ABB718448C06EE1789A13649FDBB13C445F606BCB24904B9D1F73BD8A87BB71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  UnityCrashHandler64.exe
- Size 1.5MB
- SHA256 5db93bacea88fab5d80565c6f06a6c7cc3edc5ceb22accf37c8a10fa9c88c3c9
- MD5 c7a2bd1ec01bc504ac2911ab7aa4f7ca
- SHA1 23aad1be734137a36661f44e78fd7457cb31f29d
- SHA512 a1fcae3fd898f7aea8b8cbd657b36834039220b124e04447bc1b805928ebb00dbb313709fa832d31bff18e30e2b71784f1a017efef9fefccb743a80c7e9e81a7
- SSDEEP 12288:EKJ+JS8hpUQaNwz6cmmRBc9+6rUveBFTK7nLcutt+wYotqxz/yasN9tC/XEKpv:Rrq6cmmRByK7gwToxz/y/N9w/X/pv
- TLSH
  T1FF6528292D541DCCD422843DCB838A9FD2B2BD5A2FB14B9717A17BA76E320D01E7B351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  UnityPlayer.dll
- Size 31.8MB
- SHA256 40e6f3bf23ba46e8db03b75a307f87f2008601719d4e12bbabd4453f0243812e
- MD5 1f5a9d149007aba6fda60185847a06d1
- SHA1 5810513326d5f8eec4b57e1ead7af7e02cca6e84
- SHA512 ededcfa5a8d74531e89af7fb0a83bca0cec31ce2b3bcf486725000afb6275d9692d32f35632f2f906c9cf5fa9b0511a3ee48d4d1fccd6270144021a8252e3700
- SSDEEP 393216:JxKv2FIDuwkgN58/266HeWucCwnXpRntBY5VMBeNekNo:JG2EnPYLMqZo
- TLSH
  T12D779D56A2B940D8D47BD038C75BA91BEBB1344907304AEB52E04AA56F33FF16A7F710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  baselib.dll
- Size 221KB
- SHA256 0c6769758bd26d32d9a5bd5696d911d0cc605e252deb62da07c389be4b9f7665
- MD5 b800bb93133d1ef939d400f81011e395
- SHA1 0e4539e11eeb6cf728bf04767b1297b2987d0cb0
- SHA512 74a190988ac43b5e8f752b95cbf202d1e216b6ad4ec242a886c95763881d2654391d47772237eeb4104b7bce8d75474f9fe5e81b4493ff7235b520c7328c4343
- SSDEEP 3072:SAmWtNWxw0Yd/sgyNaytun4ePFoA+Azg+fTUfbBZbl3P5oPcH:SAmUUGtyNaytuZPFolW7UjhP6cH
- TLSH
  T1EE248C45B3A409B6FE7781B48D435A56E67238020344DADF43A483B99F2B7D0663F7B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24