General
- Target Deus Ex Game of the Year Edition [Gnarly Repacks].7z
- Size 332.0MB
- Sample260728-aclfbsdh64
- SHA256 e98bf4d14776ebd56097c7c7d65b7115e4f3703f6659b36b1670350117698c6b
Score
8/10
Malware Config
Targets
-
- Target Deus Ex Game of the Year Edition [Gnarly Repacks]/Data.bin
- Size 326.0MB
- SHA256 7c2e29a32cf747bebbb6cf8feb39be9536022ee3f279a4492964d6d99d7b0984
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Deus Ex Game of the Year Edition [Gnarly Repacks]/Setup.exe
- Size 6.0MB
- SHA256 e08441bdfc1d9f61df07df58a811f00e64b6182b29aea0d9583e22c55c275b42
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
Network Service Discovery
Attempt to gather information on host's network.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.