dd62eec2e304b8770212048dd53504c62f12f154a8334e3a17d5cd6f5b739aa1

Sharing

Copy URL Twitter E-mail

General

Target
VS48R1 PCFULL.zip
Size 363.7MB
Sample260730-sqd8aa1apf
SHA256 dd62eec2e304b8770212048dd53504c62f12f154a8334e3a17d5cd6f5b739aa1
MD5 15404824af3e6a28b7d33bbda8e1733f
SHA1 61d1dac6846c7592ba4c2ba8f3c367507ba6d9b6
SHA512 78bfa999bdd120d38725fb7d273233d1dea2804e8592fa823669c7d045b420ae14438a868f5566addba57d0ae50161e4ee2b6c4ac3b31a611a55f3a11aba9dc0
SSDEEP 6291456:2j0hidVuOPELTl8Ie9Yhifiy6sFz8BwphwyPF0YfZNHzbb2NF37icIsDvlQNzLTJ:2j0uVvELTSIY8yiYFz8+phwyPF00DT3b
TLSH
T1CC09330A9156DD08E48FA07252213B872716DCBE7BD5CDF7610AF6A1907BBD06932F0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  VS48R1 PCFULL/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  VS48R1 PCFULL/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  VS48R1 PCFULL/UnityCrashHandler64.exe
- Size 1.1MB
- SHA256 4c608355f4af465994d4d99effdd68afda364932a82e729fecadac3c5160517b
- MD5 45c92d11de1b9528b1c78fb458304b00
- SHA1 40c312afd6c41772e9a504b5fd4ba37753086895
- SHA512 49b7466f67d6a8676d27704afcb02a5c11e056e7e879c4c86982928331721b58bc4efd8fba6b2aa71e4f2d259cf59f9ae2db89e93a4d1569f9a0ee8b48a20f30
- SSDEEP 12288:PLrzkew1ztlMKXkXepgKHBkd0eqZA6E2xg3neo/YofFQn06VJQfz2fzAz:PLvkx1BlXhhkd0W6ryekFL6V+z+zAz
- TLSH
  T1E4357B5AA6A800ECD5AB8039C956451FF3B27C1607608BDF1390B76B2F3B6D51E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  VS48R1 PCFULL/UnityPlayer.dll
- Size 29.3MB
- SHA256 8bb2801f0ec12eeffc26a897b84514d91e656ecee87921fbc9d885ee3af9956c
- MD5 916d1b1134289870ffbb30242bfd5c6d
- SHA1 a8307ceef685cb41951ea0dbd3377d9fdeb50a24
- SHA512 4245cb76c499307321b4ce373b42920977b76e9e3dacefeba2b85f1096005a31a31c7d679ab750ef21a35ae7e135f08eaf47cf06da82201057b87a08bdbee214
- SSDEEP 393216:k1yVl9nwf0VC4K/OJoKE2IeMgMsK3g91hcqUI7YE9m:kY4x22ZI8J
- TLSH
  T177679DA672F800D4D47BD074D65AB90BFBB2348A033086EB52E149956F73BF01ABB751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  VS48R1 PCFULL/Virtual Succubus.exe
- Size 651KB
- SHA256 8e950bfddfb3226052efdd542a8598c044b1e9df33b696ce3c6bd24c34c04f80
- MD5 102deb94a39d7621f09a32ca20564b1d
- SHA1 5f655d7e883eb69318a1561465a8a27d76405868
- SHA512 58ffcd8bc0e227bfdc7f81137fffa3201791509d7f863be5613ae22e38f43483a9ea94367f3b63750123b54e0c20cb78a173f748a6806aec1d33aab63ec7db20
- SSDEEP 3072:qQJ/VdFgIW9mYucJ/OD8JlsI9iTIU9ct4bx3DKDr19g:D/7FG9mpcJ/OD8DWtug
- TLSH
  T156E4F3185BA41880D02C95BDCDE7BAEC0A3F0B62D267CF57F91600D7FAD1C586A8366D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  VS48R1 PCFULL/Virtual Succubus_Data/Managed/AllIn1SpriteShaderAssembly.dll
- Size 28KB
- SHA256 257e68d4ba4ce947896ecdc60593b3c36fd331452cf6d4df138a945bbdc48fcd
- MD5 20a1519aa18130425136e457ba907a82
- SHA1 cf2ca80f4f8ef2aa7517d8f82666b206f4223a3e
- SHA512 9376b69a57bc7793700cb0ca5ad22881cd306bfa1d9fd18df1dc101f11b0f19d4aa4f69a06e53aab7dddb6f912e24f4a9efa958e32eadf13fa80066512d5cebe
- SSDEEP 768:g4aeFjjS43+EfE7l/97doFHari1tFQIL9wshaP/hY0ATh+u:0eFjjd3dfE7lzQ6MtKIL9wsO/hb2hT
- TLSH
  T116D2FA0576C8862BFA9F1BFDA5F0494003B594A66923D7CD9CC1F4DB28B27D04E1276B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  VS48R1 PCFULL/Virtual Succubus_Data/Managed/Assembly-CSharp-firstpass.dll
- Size 872KB
- SHA256 df0874f79ae78698c19482df4fd46d5595ebae87595c6033adfc59242318417f
- MD5 001dc29736ce81931a6b760bd6b4144b
- SHA1 cf7cfdbdf0bae6998b7d774f0b55139f5efe52b5
- SHA512 07fb39e6437bacfa5df8f91e2770b37205adbd891bfd06d1620f0e3c5aef7a3341905fe41cba4cb4e5dbe80f05bc7b2691a552bf949a3f579ba565f56061e048
- SSDEEP 12288:trsQMwDzdGVt7N12aq/tY+kzjvCE7I61qXZe:1vMwdGVj+/tsHCE7I61qXZ
- TLSH
  T1D6154B2273F49A27E1EF1B3470BA8A4493B5F2862AEAE35E5F50D0EC0D167904D13767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  VS48R1 PCFULL/Virtual Succubus_Data/Managed/Assembly-CSharp.dll
- Size 2.9MB
- SHA256 9759f946c0e8cf66e5fbaab2c1f005f881b84299c210f73a77541f835f6ad2dd
- MD5 f5f0cab4e4ecc79a24d5faec4a8943cf
- SHA1 ad3ad2a777af9f4eca359c2428614f69f0cfb8dc
- SHA512 0f602e08d592cd43800cff79b67fda712a8b9fc1a540ec1c1764947317aebc8ae371ede439e98346731b498e53b23295db3b5a179bee61759c855680ce847f0f
- SSDEEP 49152:weiHCYvJjovnod8WN9DA/kVCvTtl4590jyRlAotTKhmLiFs:weiHC81Ynod8WN9DA/kVCvTtlc90jy
- TLSH
  T119E54B2133A4AF32C59F437FA0A917AAD3B0C6CD93A2EB895A40F4FD1C473951D1A197
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  VS48R1 PCFULL/Virtual Succubus_Data/Managed/CodeStage.AFPSCounter.Examples.dll
- Size 19KB
- SHA256 8048632c8b129bf631877d75d5fb97914176b7850f37899acc448bbde59fcf5b
- MD5 fece5bcc4360d5e54dead37af7d9bf62
- SHA1 51c4c20e468bfdd32999cbe5abf1706f342adb07
- SHA512 c4c3c9631bcf5cf50830f2d3dc20f7ed6f682fefd14328e8e2991ba9ad2b5615366b527c7102cc1aa61b45e731a96fe179ac4d4c85c655f1ee37528ba058b4f1
- SSDEEP 384:mfl5CvN7Hjgd+voWmeQ0vR1tnRFRPtNOknxzLxv17GvkG7gPWcTBPx4ytB:Y8vN7Dgd+voWmeRrtRFRFksoGj4ytB
- TLSH
  T152925355779CDC28EEFE6B372EB1216804F07403E927EA4C0DD727FE6A16A405A507E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  VS48R1 PCFULL/Virtual Succubus_Data/Managed/CodeStage.AFPSCounter.Runtime.dll
- Size 72KB
- SHA256 a0b0915c9987305e77f15929f01f2c8126436e76e1604dcb35726c3a62d0ecbf
- MD5 32e343d449905b7710c7af09d1f915c1
- SHA1 ed4fd49ea08f74a48fa289e06b908e57907c8833
- SHA512 71748cfd79191e12c34b9e5141d9f1faa16c29014c9c34c17e65e0fe1d9da172a82c38ff8325d3c8b7f2a66b5d6d7442c8912ed54afc20ff66c0349e1ddcc6be
- SSDEEP 1536:bnqyTLv4u0GZg6aUeHpLwKYydt6LEyRR5aem7acQC/fuu0bzp:DqyvArHpVYydt6LEyj5a0
- TLSH
  T1FD73191D115DC93BEBAFB2F9F11643315772A2973201EAD6889150E6D8833E09CD92BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  VS48R1 PCFULL/Virtual Succubus_Data/Managed/ConditionalExpression.dll
- Size 26KB
- SHA256 db3da3c94476289c6935d06d3fc59c73482663945b7fe55e1435b7bb60b605ec
- MD5 a5d102704512c14d36b9cae85a154a4f
- SHA1 729e2c1819298e2353cc5281f1a0fe6f20c21b7d
- SHA512 fce9c57f0a2faa61eb7a4686c1f050a33aac3df515d9c38c573c4d732644e6b7f7907e7d41b618c379ffa51def9ee87a93b14191beb971f932da540bed73976b
- SSDEEP 768:ArH/7//VCUtTKAKFwUWInHNX7HpPHrEnF5MNHXx:Y/z/VCUtTKAKFwUWInHNX7V82
- TLSH
  T1D4C2F82926E89267E7AE8336FCE1162103F482823FA6D759CD45D4FA1A933C00D45FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  VS48R1 PCFULL/Virtual Succubus_Data/Managed/IngameDebugConsole.Runtime.dll
- Size 69KB
- SHA256 afd7c8d93a34a8001838c1df6ed3af8bde1d0529040bf09503db7137d9ba05be
- MD5 a0d82437a0cbe305c55c09deedf725ce
- SHA1 3383f50cc1cb27e956446a87b97a1dc3f4e5508e
- SHA512 578c37eda750fec0566808e7224746461a0a446b02eaa774aa1b45b819e65b3ade50c8bc8a64dbbe2907066d3faa3f8c8fa1c1f7fc1d03c59d3f4d18c93cb085
- SSDEEP 1536:KudG4Bv3IhtzZW/22pvOFqPtxiFcC4LUdlU5NynyFm2CctGqFnFgMIPHZ:hpmzZWN454Yq5NjFlCc8qFnFqHZ
- TLSH
  T13A63491033FC8637D7AE037EA8A052415771E216B653FF872DC8B4ED18567921A227EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  VS48R1 PCFULL/Virtual Succubus_Data/Managed/Mono.Security.dll
- Size 235KB
- SHA256 63c5cbfb9fe569509cbbeeed0580f2b500d2f3526005bb1bd500aa491662d853
- MD5 d114c8765b16192d299c689d79571108
- SHA1 bceca3c7a2d001b64980db17be312ef04d23daf9
- SHA512 3631b632359a90177e001e3ec9b3bb2704730484059e630fb13d5dbb9b28dba8826a009863e650be5ad32d7a38bfbf5141c9ea83001530014585abffde035d45
- SSDEEP 6144:cUjTQ70cnf8MoVRxS9iJdBF119RJXG2yN+Q:dEiH119RJXm3
- TLSH
  T116344A1863F9531AF6EE8779D4B15019C3F4F50BB9AAEB4E5C8282AD1C027918C41BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  VS48R1 PCFULL/Virtual Succubus_Data/Managed/PlayMaker.dll
- Size 225KB
- SHA256 4c2cce43df45c4bd99e7fbe66555a8ac9b32a9e7c11c255cc1f84cf72f3e41cd
- MD5 60e659440f9d92388ab69e497e57af1e
- SHA1 7299bf781f7799ab95d1d69e5127c0607365d795
- SHA512 c240397e226fd8b49871afcaf620ecd48f655570feda905a95bdb744acf4b348fc21cda0b43833215d74ec0bf10d2e81603726f6634e77b9794d049bf9475075
- SSDEEP 3072:M1SJiaKS8BoQqLoxB6SiE73uQQAAOY02zxWzqk9GpmdyHEcTS4vPxmNEtyLDt7j:KSMS8Ce6SiEhQr8MExdyM4vrty
- TLSH
  T127344C1113688279DAAF937CE06F0526C3F9A247715EEB9EA9D0A8FE1E4335094417F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  VS48R1 PCFULL/Virtual Succubus_Data/Managed/Sentry.Microsoft.Bcl.AsyncInterfaces.dll
- Size 11KB
- SHA256 4b0ee75bc146158dfad26be1ed20c5e29a3982146401476364d18e3f9e9f5936
- MD5 a5b8233720fd57857a58789523e16f15
- SHA1 f5ea2159afa0395233ea56568f484daa16ba762f
- SHA512 cca6dfa2a4fc3b64c87e3f855c58a0de7503ecf82d2843933e3fa32fddff9f72842176c0a0b521ea018043d13cb9d64447a29f428ae0672b64b878df287d9a22
- SSDEEP 192:Lc/sDvTnTpxpZtitsbsHHLpjEtuuVPstkce0KsJSjJVe04rdBsiePxg7WfWqrMbN:Lc/0LnTZVbsHljEIGWW0VM204rdaiePs
- TLSH
  T1FD32E931E3D84337EFAB1B7BE8B201405BB4E7414812EB2D745D936AAC9770D8A72671
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  VS48R1 PCFULL/Virtual Succubus_Data/Managed/Sentry.System.Buffers.dll
- Size 11KB
- SHA256 5a15ad17bb3b2c80440861bbf320913ac4f8fc78a327b1fd59e469ae75918ca0
- MD5 adedf983b93e27f1d1d46ddb4d7cc766
- SHA1 a9082b95b2b64bee4286a7e2c6ef36bf8de0a723
- SHA512 4a1bf3513ba8817116980f4a0b04b6e9d7ec0a297cba58ddcdb7917467a7c68fe5c319f14e3ea8f45bc732989b98b9cc0ef305c0a28107d5b6d4590fd9c6e2bb
- SSDEEP 192:auHEiHEuQIhfpsMTkd66NxUoMRyX2TasnD38z3GNT6WvYWJea2:35KmhsqXLnyX2TTgTGNT6WvYW8a
- TLSH
  T14C323C1DE7EC8337DF3E0B3758768E84067293816612EE7D5888060A6D5355D8B7373A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32