ed76f841d866a82c26d0f5b59a41ea89deef85d5819f3ba9e7dcb0212c073e0d

Sharing

Copy URL Twitter E-mail

General

Target
ExLoader_Installer.zip
Size 23.7MB
Sample260731-mmzf6agg32
SHA256 ed76f841d866a82c26d0f5b59a41ea89deef85d5819f3ba9e7dcb0212c073e0d
MD5 a2a1f6f0c76f692a721292df8e6f779d
SHA1 d38d053bb541abdc1fbc5531d8c66aeb430b3d32
SHA512 748ce3e79b7c69b6d04360853739ce47823a0aab221ddff5edad50baaa12d048b3f12395d223b72ba9a95c1a9292d6a713cbff89203c862d8f2bc0ce031b0434
SSDEEP 393216:kN6+R5xTUGIk2iG0Y9mpiRwWvPUJ2bQ1GEfruhFIpmEsUX35pt8xtyPHjCQo6Cw8:kN7RFIkYmiwWvC20buTmm+Wxy+QumW5n
TLSH
T1D94733C1DB9160A7CD36A7B3857CB0B2D308229F62F35634859CC3606E4BEA8D615FD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  ExLoader_Installer.zip
- Size 23.7MB
- SHA256 ed76f841d866a82c26d0f5b59a41ea89deef85d5819f3ba9e7dcb0212c073e0d
- MD5 a2a1f6f0c76f692a721292df8e6f779d
- SHA1 d38d053bb541abdc1fbc5531d8c66aeb430b3d32
- SHA512 748ce3e79b7c69b6d04360853739ce47823a0aab221ddff5edad50baaa12d048b3f12395d223b72ba9a95c1a9292d6a713cbff89203c862d8f2bc0ce031b0434
- SSDEEP 393216:kN6+R5xTUGIk2iG0Y9mpiRwWvPUJ2bQ1GEfruhFIpmEsUX35pt8xtyPHjCQo6Cw8:kN7RFIkYmiwWvC20buTmm+Wxy+QumW5n
- TLSH
  T1D94733C1DB9160A7CD36A7B3857CB0B2D308229F62F35634859CC3606E4BEA8D615FD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  data/flutter_assets/AssetManifest.bin
- Size 9KB
- SHA256 284c6bdfba0a9dc55429768be10e4d924de30fa04a34078a49f02fbbf34d2185
- MD5 c5826add0bd49f55d19b166d2132e529
- SHA1 0f411009c12b469cc5cbd429f454794756c7f7b2
- SHA512 1d2da6d55fbe8b281890895b288dfd9beacbe9ebdee26c8a6042e45b6f66f1af4a2fac96e63cb6561b9e13f74a4fce17c5b186a1ba434a482468e2a515a36ea8
- SSDEEP 96:V5AEnXfm4BuhX1mXIz48ugzXA43lATmwG+e3:V5AEnXbsXsXIz48ugzXnee3
- TLSH
  T10D12705B83A025FFF571702568AA21645A02CE01D1B9EB9FF339941AA1F33E508FBD24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  data/flutter_assets/FontManifest.json
- Size 332B
- SHA256 9e0903a9ceb64e32f7a139a143324252aae77dc58dbefb1f211fe03aa33460db
- MD5 abfb6c8e4501348bbd701d03698e9b3e
- SHA1 242fd377e9edfb075022ceb8e4c7079fc8360c99
- SHA512 52ee71f765f130849464ca9b03bc993894400d8fc8237761f73a32205a811bc86282f0dad99e7635aa450a3a60c8f7bc66ea4ac2886a6be55ead904656a17a89
- TLSH
  T1C7E04F1395007578C778945BE52217551D587388721DC45ED31D1662E1F626430B27A7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  data/flutter_assets/NOTICES.Z
- Size 113KB
- SHA256 351b1f86747e148dae94022110344200da947349832608c9fc4b42b2f7092ccc
- MD5 0cacec7b255bd24b232a88e3cb7f449c
- SHA1 a1295d2b969318b39c4e50deab56c67f76c3e5aa
- SHA512 f65a1a14bcfcd97baf91e886eb20a2fe25dff4c4904fd8b7f3245287ec18b325e30f5dd58f415c7875e0802c54458c748cafe1f3a50dd9f78751b1afef8108e7
- SSDEEP 1536:3OlJ76y8r3AwXUpv/b2ddq6Otz1qjP8DYrhWuLebNsWuf13EBA0nsASoUUhYa4ce:+DgzvXjdGtYmYBLi6f1P0XYlNwxle
- TLSH
  T135B312C58581377EAB3963CD3AE07529D70C4C4B1A5B4804D0E9DB04A0BB58BEBBE67D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  data/flutter_assets/NativeAssetsManifest.json
- Size 45B
- SHA256 9548a31e4a048135c1d94f919328bfb62ae2c7bb3cab96557c7941daa97776cb
- MD5 f3a664e105b4f792c6c7fe4e4d22c398
- SHA1 adee29ec4f2b3cb2ec37ec3368f37ff805695d36
- SHA512 b7df555970e20c6a50f650cd0df6ab782fba7004782b3f7921ccfd314db53bfb61523986628d2e05d085f4c2263dfcf54000ffdfc946b0158c5766fc6f1d0a86
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral5
- Target
  data/flutter_assets/resources/audio/AbominationPissed_DE.wav
- Size 131KB
- SHA256 c87cb5c9c64b5798769af14563e268080ed82c7c8a1958f6fa1c1b5e7f10d2e2
- MD5 b287fcc8278972ff72b8e46b481c4ab7
- SHA1 71a91ebbcfb6debe7673a0b59079c5e90cb2ede3
- SHA512 746f5d9232a06b5a415391dcc191902c7ec12465a22551342823da5880a16e9b9cb44da7052638fd0f5a2211ba8b97be6d835f5931bf34eb4fb1b96c6c529c40
- SSDEEP 3072:vqmfGrs2QiZVhikBP8KKFgkrpuWle4iscIhSj/S7U5lip9/VrhCL:8w2/fSJrkWw4ivPzSYLE/bCL
- TLSH
  T1D7D3E112EA830A44D5B30735DEC028505EDAFE4CBC69666F701BCE90B353378E9657B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral6
- Target
  data/flutter_assets/resources/audio/AbominationPissed_EN.wav
- Size 80KB
- SHA256 3939fcaa3b0efd6d601da475abea862d9f7c078643f1063df51c83609cf47a6f
- MD5 04de7b1fd5d0fce157b378ebede59df1
- SHA1 97709ff9bef57080569f04f99efec6098cba3bc1
- SHA512 31dcee1e7f1da84853bc8e41c108b1856020ea8da09bf2dd75b2902223f96540e148be9daa2e802358a5d78296ca5c90fa68c8f34f0a52b610f9bad446fff728
- SSDEEP 1536:S14LKwKeetzn+sXGAxqcMN5fU0gB35ZIlRMjzVG+G894hDL0MZxvpKi:7LK6wznrvMcMNgxoMXVG+39+PVPh
- TLSH
  T1AA83E193F451D7500833C9225D467C004F9BFE9FADA72A1BB507EE80F163351BA766A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7
- Target
  data/flutter_assets/resources/audio/AbominationPissed_RU.wav
- Size 156KB
- SHA256 d5f7ea66bb3bc77de30b0b450b37dbac1dfa2f30b8108fce9ac2752ce9ad2838
- MD5 5c4c79ff61bc28f30fc6b2a221975b98
- SHA1 82bbdd2bf6c5bb2941788c0ea594c0185c6a17b5
- SHA512 d2fe68b06c3852111cb03ac6b55cdccc6cf232aed1170eeb4709493e6b1e87a2b8b2c30223e502dacafb3a2d0b07b62a595086336cc42e63b83e8443244b5954
- SSDEEP 3072:0JvNZioDD5SvL/addGwHBdlNB4HQB+iyl3lIl7ka56mAzM/LBqH4C7iaC9e4pb0U:0JVZR5STaewHBvNBQQYJ2l7H56PzM/VF
- TLSH
  T12DF30212F4438308D53FE336ADA158E40AED749EFE91266F708ECEA67243350B927B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral8
- Target
  data/flutter_assets/resources/audio/Csgo_hover.wav
- Size 133KB
- SHA256 aaa3f0f824d04ce5e93d1da17873d3aeb3c4d3a8fee25b7006851e4089bfadfc
- MD5 8d6e22bde35607fe3801e02fdb12b022
- SHA1 9bfc38b58bca7b17e48a864ca2e0b312c86b146e
- SHA512 5623151380eb43a2191c639c940473114e47a579dd65970934ade8965ffe76e4b7018fa008e6412db91fcce6bc89aad9e3a4358e824f5caf0021ea58ab19c49b
- SSDEEP 3072:fK3m1UDeeoncYepLphHTWrUASR0Sx3X1uuTMquPYzBRKgNK5NsA:8Aeo1wrixSR0SxHQu4q8OBRqDb
- TLSH
  T1EFD3B093FAF408B0E86A65776E1204828F233597EF81614D71CDC929FFD32668AD7706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral9
- Target
  data/flutter_assets/resources/audio/Csgo_press.wav
- Size 99KB
- SHA256 880cc2be6f458bf853dba78caf06bd2b97bc4b06fea141599db74e95bbd59528
- MD5 5cf6f422f37b61b16f732e177c4a67ce
- SHA1 3e227d262159caefd259921cdb888872ffeb8989
- SHA512 b05219e87e9117195b3fb17a1075f4ef0c126de333618f1b87ef75813f3c6db40647ec53777d101bf1fafec99e275a8e9d048aeab5715b16e0ae2ec2f1293d1a
- SSDEEP 1536:03g6O6sFvcKvm59Oawo31MnTocfrH+hr31DlzqVZ3Nk82dlk:03g6OOKO59/31MTocfrGthqVZW8oe
- TLSH
  T1B0A3D2A45BBC26A2F01F23226E4538413BD1219274E7287D799F5AB83BFF3C16176907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10
- Target
  data/flutter_assets/resources/audio/Fortnite_hover.wav
- Size 137KB
- SHA256 3e3abb7e29d38fa4b0261ac78427633e8bf6ddf3708de5a45bbdddc2a9f4aa6b
- MD5 b66b7d55b6eeb2ff344a1af41e42a27f
- SHA1 fa6d73d1a35e6098748997cd8c259b4df00d1f9f
- SHA512 3bbde1d2426cc02fc2f034ff9276a23f2060a385b4fb4f6e17ff1b91b6ce904e807e9151c61b9133de3f5218a4dfdd8d0cdece9c2c165186acb92abe51f4b97d
- SSDEEP 768:z5qzevj5RnMNTYWg34Jx2jxsF3HvOOLB2UImSw/5JPYLe5UlihX6xvDxgx1fLz4m:zAz+RnEa34T2loPRdnp4lUGxI
- TLSH
  T1DED319967AF292ECEE4963B21E46E9421F217442E9C1895FB0BECD4F3F20B1551CB139
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11
- Target
  data/flutter_assets/resources/audio/Fortnite_press.wav
- Size 111KB
- SHA256 e0ecb5e92f1e13de05850d1f3894a54988e5f2c7eeded390f9040d2845aa4404
- MD5 17112a672b04374113400b1c3c6a014e
- SHA1 5214a72c0527fa73d25ce810f759cba05739b34a
- SHA512 e319aa4852835b3d039dd63db981f197bdce301710a20fe7719b7fcacad152067f5033a846f0b556385b6f84364e66af5edbd4a6f39fa2d751ed0437e314dc6b
- SSDEEP 3072:ofD2+DE780NFf3KTuRHMlgPspFerJpchpgat:Z+I82Ff6TOkXu0Z
- TLSH
  T103B37DA77AF196EDE80962721E46D9815F263502FDC0898BB0FDCD4F7F30AA905CB125
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral12
- Target
  data/flutter_assets/resources/audio/Standard_hover.wav
- Size 36KB
- SHA256 46d6ccfff99264aac49bf4545b0ceb9cca2a9ee5a60d13b7017161e481440189
- MD5 be6cc8afdd2ca2870982a0933cd9c8b6
- SHA1 e3d9f678ecec58223e2d60636cbdcaf1b5d6d01c
- SHA512 b58b789db7e6d65be7e5963387f7a8e095a2fd73d43400a6ed3c186babb880e541effa1f6265d4f89b8ebb7ebcff080dca656862cb19a5cdb67a5197c9fe6888
- SSDEEP 768:yOaGEXZJgoB21WI0hVI1DfKy48/Z2ybz+9:yOVEbgByhVINU
- TLSH
  T19DF21CA2F4D09912DC4CB9365C77EA614B323953EFA11A0470CCFE156FD32968B87A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13
- Target
  data/flutter_assets/resources/audio/Standard_press.wav
- Size 64KB
- SHA256 fe7e148d5b80eaf49eb7564233b87679e53fa4e68371aa347f18c1886a99bff9
- MD5 f9a86f1da07c3dea7445f34ae4f793f3
- SHA1 17e4f9d7d5ce2b209b513a3b1a6745adcd898d98
- SHA512 2052873fba1482616e7be708f6328d708bc095b327416bae6c83679ef4e5f829e8d4667292868fb7ad8fbea52a54d069ef6a52f8ae603d9fabffab4c51336c84
- SSDEEP 768:KKeoQaXRJsFTfQOhgiIzqkUS/K5u6sov/GEs1YyKNXf763lQniApC2ySz+9:Ao5sxukhvDs1vKVj63Ae
- TLSH
  T12953AE92E9F352A8E41462722D96BC441E123ACFDDC10A67305DDD17BFF15920ECB2D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral14
- Target
  data/flutter_assets/resources/audio/Steam_hover.wav
- Size 55KB
- SHA256 5f53f2d8499d27dd906587a6d0aad05d5c387ca2fc1c12f26c76aaefa690c7d6
- MD5 2d9be331ac50c9a82af0ffc0678bd575
- SHA1 c455196af8db5823ce8f6735ea4a4f70a595a2ca
- SHA512 645210077b7110661982a76484915f6f6e63267de472db86a89e5ac8d65a790a01df8bfe807e8d309c3609ab009c1fb1e221799223c648465d22763e7ba00bbf
- SSDEEP 768:TBlMhyvnjSIr/fqtrcdDcPY4gspSp4xsbJg4y87H4PNBRpFwLJJX2K3DfLRN4MHP:ohyPjTfwCDcPYIptxsG/f3Fqv2O/
- TLSH
  T1CB438C57BAF5262DE48473762A862A014D23118395E22D88B0FFCE5EBF745238DC752F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15
- Target
  data/flutter_assets/resources/audio/Steam_press.wav
- Size 170KB
- SHA256 e7c36644507ee52d11ad20e17a165bcb4bb7efb14c573cd29921088c03777241
- MD5 f8eab8f1b49b806f490f8716a8208190
- SHA1 d5e7401f403733c071347616a2c0a069f74be52e
- SHA512 71a75f1e5fe3204caa70adc9d8c8a96155dfbe0b131afcc4bcd55908048ae314b81a84b54be21a1f99321e89cc4c77042bd0d0ad4033988af8d0042060631d31
- SSDEEP 3072:MMbqqHdE7++/ieS7egbwyo5RCRYQkMpHfBEp3ZDJgy7iFM/DhHK02vN:MMbfHdEK+/E7pg3xMpHfiHJfmFMtvk
- TLSH
  T13204AE02B2A95329E1CC1E321C4589C11FB5B54EEE81997AB1BDC643FBA14235ECFE1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral16
- Target
  data/flutter_assets/resources/audio/Windows_notification.wav
- Size 568KB
- SHA256 90707fa427cc0dccb0a6a6cee40ee27cf516164342f6ca19adf496f068d03c07
- MD5 bfad965214e05d9e1f6422b203ddc31e
- SHA1 23b439523914e55321a115cc1debf6d12fd545a7
- SHA512 7c8cc4d06214053bfce98d4a5e860c966ac645952163e0f36636de3f97fee10cede49c7a174498548dec8de1ef0b3a0b4c3ab48e872505b8edfdfb7f57d849bb
- SSDEEP 6144:08IXyFTO11dT364hJzhfu5HczqxEud1fYqMGpXHA0GtizL05823s8bJNjNGSZi4:0VXyF8DT36CzlIH8epAOXgvB3sWNJZ1
- TLSH
  T1E4C4D086E0668B81C4DD55369013DAB607166FCBDE034AB0307CFB52B4F24576EC5AEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral17
- Target
  data/flutter_assets/resources/backgrounds/Anime.jpg
- Size 1.7MB
- SHA256 c0fcbc80d8ad740e85622f3c57633f1dbe252364e05d01ccda9f6f8f3b438d8a
- MD5 2af278f51914df603510abc1936fefa9
- SHA1 bafb96511673f63d970685039b866b3537e6f00e
- SHA512 61cc7fbd21241c8e63c73cdc3b50ffa38db7a760053cec967a8a0f5e4c25e16d130531140bb064af6741d119946f2a22c8550803d06243981125771188d2a2c7
- SSDEEP 49152:mfgJYzq1fIUgfBcQBgOtxcPL8UHWH/aWsDu1agmne3yR:mJ+yPcQyTj8YI4wTbI
- TLSH
  T17F8533980E82F263DEF87BA8610BD0C0791855F321D87DF591F281A5EC56B34F536AAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral18
- Target
  data/flutter_assets/resources/backgrounds/CatsDay.jpg
- Size 103KB
- SHA256 b8332b40114e2084721257c97d874e81505568d7a24cc0fd0fa3e5a4f5fa243e
- MD5 a1f96b617652f4403c58dde351de9ab9
- SHA1 87b868edcbd6930506fefdf8fd86c6b19941516e
- SHA512 9959767827239753d7cbc87d027d560f636ed5a24e2539fd46fcc6f3376496fa3519274246b93ac6a8265c670d1c013e30739505cc86975ead6100865cde9160
- SSDEEP 1536:Z8P1qhZ3y680yWiu6U7JclEe/j5dPtYub5lStQz4HyXq+QlOJN96HiSo/QOrGjN:Z88iOVsEerLnbjSayqqpknkzOr8
- TLSH
  T1AEA3E1338308D2A7D5680F71D59B6F103FEA95A1E2208D87D714327E98B532ABDDE2C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  data/flutter_assets/resources/backgrounds/Cyberpunk.jpg
- Size 74KB
- SHA256 4e963580446656de3ede924b1c729eb3e0f92eeb342458d8083995c4ccfa6df1
- MD5 43979b091ce838cc5e4ae14d9ce4f884
- SHA1 c297977637a3745e16a0b099297d455028744593
- SHA512 3331548d88a6e8bf3763604700ccd6c4507806270f9a6d4197263ad98b6380cd8292e94094cd773116606a356e3366171f2b0fa4ab69a9fd2ad8fd0d60ffb52c
- SSDEEP 1536:MvrZhsGuOluip1e6DWNILnUGhPsn/W16gwari+1Ep8gYKcWpqGUxYQSD:MvthGOUiptHC/AftunqwD
- TLSH
  T1C273022DF553B211C82F8EF9DA46356863CF9EC8EA06225E5C54927F2AEB344D010F8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  data/flutter_assets/resources/backgrounds/Easter.jpg
- Size 80KB
- SHA256 c8bcc97b62941f532a211a53e85e0f6d928d9e40f0c0327b2d9560af7abd6167
- MD5 0d369ae944642bb9181c4592ee7b9b1e
- SHA1 0b2a5b437f7e524d55e80c6ca8d0b75728f14687
- SHA512 5829ea0b79315ac34b542992e9808d6fbdc98227abd29bc5068bf896fddfddc4d0ec104f68355736337adaeea503fc5ed8674936c07281c231aca810b2754be3
- SSDEEP 1536:0JbWlxLfQ7XQGJz/A9VGjRVnElf7JRlBnxzA+YMrx:0ksXQGWGjRVElfVXB5AfMN
- TLSH
  T1C18302629EBDBE2DF2735D793112EB13226281B2150219CA27DDED42DF55A470A330EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  data/flutter_assets/resources/backgrounds/Fallguys_v1.jpg
- Size 63KB
- SHA256 22d5601fe337ccf6311f18caeae8c8824b5a889b854b037eb7cd4a8335f34d0c
- MD5 9f9f08e3873d306bbce569c7a6597c80
- SHA1 408cc8c551b9f7b4e38252f316d8d10690ca8dc4
- SHA512 4f184987a34699827ca422b2ee495ce0035e118e2fd7716a0a3e7c7642a6612b1811399804e21bb91466d95cd105e6cd97a43fb0c071176ed8f63a2bf24b3c31
- SSDEEP 1536:nPteMPY0ViAxdIor7gyQgTWlXOfuHHMWOeK8onAjsRh:nPXPQlMgHflXa4c8onAoRh
- TLSH
  T17953F293F3420D9BE6DC0A31ECCB4BFDA950FC9095E4A26507AB39838679DB43D76110
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  data/flutter_assets/resources/backgrounds/Fallguys_v2.jpg
- Size 79KB
- SHA256 a61f74055bf69f214309ec81255dd0c49f1f8ff3092d35bd6d2530e7109af665
- MD5 085ef851d7782bb627fa3a96f65fd2f0
- SHA1 5dd95690049d4ccf81189475ba02a04fb5638523
- SHA512 286bc7b200acd7f9721b70c9e868c88294d13510f19d3bc7988713c5a8538d1906b37789937f9d635ee3779ff5ca99681201e36cdf31bf0ccb59ba1ef9505871
- SSDEEP 1536:tkDbrAso11T0wrHzE1GGK1UU1QSdnqs+dqr6PQM9foocqN+8XFW+RXaZ/7:u8711TbzE11aUU1QSMp26Ph9ftcqoQXQ
- TLSH
  T13683025B76BADE5380A483A0E663EF5E4FEF550811A80BF2B0D435E137B39DA46548D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  data/flutter_assets/resources/backgrounds/FishingDay.jpg
- Size 48KB
- SHA256 ea45f13f6cac2ac930168ecd3e2f1409b304f8ccd1875b45e997b01743392288
- MD5 fa0290a7b30ea4c41bc8bb2bbcdc22cb
- SHA1 bacb4d6e6090249a43a7add53a4608afcc9f02de
- SHA512 eca8b744d4c8f757d80b6cb045ff68f1d4700573ceda13ad9246803ab272dee5ac6429001ea7b39a75241caef1df0c4d0e74d6983a023b64c78dfbf13ada388e
- SSDEEP 768:ooSX9cG1C1ujP232ZVG/zal2VbdWERm8lXYnkIH94sDqtWzlsx1f9:ooQUcjP2YRaQERm8Id7q0zc
- TLSH
  T14F23F2083D0DB07EE9B644577184DB05B4DAAC16FAD3D26331D49A41EA4B04ACF92EEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  data/flutter_assets/resources/backgrounds/Genshin.jpg
- Size 44KB
- SHA256 f9d64e43ed49ab485ea77b842025f3a2fade14e277a8991fd32900218ec1d055
- MD5 812f5fd3b0ce0d6d26e793acc5b2eed1
- SHA1 f9fa1be5237cbaa858a9858d7976653e5716fc44
- SHA512 d6a34c3a07ed3eff9740b4df3ce690de5e6a71fdfdb4d640f957ca33d1de1f9e7e069a93c3465eeeec4dbd5a2b9cf4bf2fe419894578001110e000140fa52c68
- SSDEEP 768:L0+lBDce6xcriOzRauhIP9KODXJcsMj7t2SLnkcB6nlZCbdlNItOhfw:weVeOz7I9rO7t2OB6lZCbvRhI
- TLSH
  T1D023F124DF63E413D093DEF0FE9D0F958195E59C2C891B7714A0E47C942AB091A4A9EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  data/flutter_assets/resources/backgrounds/God%20of%20War.jpg
- Size 85KB
- SHA256 bd9b8ebbd5e12f111b386111fbcae08f5545e6c8bacba466a33748ebbe7caf58
- MD5 d40d3b1641dda951397f85d91cc7da84
- SHA1 605fe73ea3d21abd3de674152cacc77cabcf57bf
- SHA512 18fa5dcb676a43e1ea2d7384f7fe34db2da738fa3b96f374b673fa935303c1226c72b2eeec65f2c96081e4da1a8ef742c60cef82a003510defc48e8bc91d3fef
- SSDEEP 1536:KVbo5/ZD2KHfgrFRZL4+SQ5sYobwGLSSNk6n9IsTET0YC9UrYXyS46APK1ZZ:KVbo5/cKHIrFRZ8+SQ5sYobwGLSSND7R
- TLSH
  T121830281EBC19676CA6C06305AD317262A316DB38FF2F503055BB4F9B9BE6432DB16D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  data/flutter_assets/resources/backgrounds/Halloween.jpg
- Size 85KB
- SHA256 2aa6380396ea4a1352e62e10472751e2e9da013361786868a8357bdb94b40345
- MD5 b1667406a07854d612d31a5bc3a903f7
- SHA1 4a41499f9810a3269ed6739be8d6de87f873647d
- SHA512 94915c09d8aa046e63c3dc660b3713c5a4274a4c5dbca3b32ebdc02fa0221495bd7cfcbd1408c01308f4c61151d4ca18ee6fc0c37bb7418e96a6ed9fdf532ccc
- SSDEEP 1536:bsuJIHp6cE3kAvnGV0FiGFjgCyIF2T9CAYY4ShNsXvBjL6aHQPBZpQmjUpi+P1/O:bsu3/RGMgPMpAYYjhNg2awXpQmjGtNJK
- TLSH
  T1F3831398226A673D5A6DECF6D826436F823FC1B54F47774ED2C11760CF88A86C4AC6C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  data/flutter_assets/resources/backgrounds/Halo.jpg
- Size 68KB
- SHA256 d20d07fa5ef0796ccbaa0a63e60a6b1005123c8e26a90b18296c5e3b95bf4ee1
- MD5 3e6dfc7fefd784766fb0b18e33468c79
- SHA1 412c5a7cafadb65531790e392ad2a8bb897ec859
- SHA512 d3d3a655f2d82e5df43a118b45d8cbe9617ec1b12640bdf7c3eff01cedf1af90c794c8ecdee6d7c9dcd7f5417c6751bb70fe8ace33da01568eaafe70e543e773
- SSDEEP 1536:gOtIGhTagKdHcV7HhlIjr2vJBeaRnogsQh1rz3Dzl9aPb:ZSGhegKd8NHrIjU4aFogLh1rzTzXaPb
- TLSH
  T19063F2524FADEDA3C49F253502DB278BFD167F29000147655BA9F20ABE367B83D59E00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  data/flutter_assets/resources/backgrounds/IceCreamDay.jpg
- Size 42KB
- SHA256 87c21a0571bc8be8cb9dd18e14218ef7584c1d4b7ddb71c53f9273b34dafe450
- MD5 a2920f9b0f77ce3f1a7f6b81ff32ef2b
- SHA1 67f279ff65376502e2aab9f8b8d4235d04f19dfd
- SHA512 f5b5353aef05bb55f2be8c8c9f3cff0bcfcdd15cb2a78ad278b7ace492cb9b943e01cb1e9b422c5997eae833287912ffed6f48fbe4597d03baaa05a48fe77afd
- SSDEEP 768:NGtOWQCiq2qNlmTkvBiGMDdGWQXJ3R40qCuE433SOSf0JtuDUjXdqFkeVnL:NK/iq2qKTkpWuUE4n/SfOtGYXdgpN
- TLSH
  T139130257277013EEEE7CBEB124EF0E45AB99390080F5E9477E924231C650D029FEDA12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  data/flutter_assets/resources/backgrounds/JokeDay.jpg
- Size 48KB
- SHA256 8d35958eb67721973e9995e850d9b676b3b13e32160339d4683b34ff28656143
- MD5 10afd0c069c62d3dd89f470218529c9c
- SHA1 f1780a4dfad2af62b1c6ff21be1147cff88258c0
- SHA512 1a318d2341ab751d1ae4e5fd2370f40a9b54124a11bba49f00004ebb9ab9c6bd5ef9edb9e3a6d9694e0a150fd339cfa3b31f38f45fb52b9ffb285c8295595ed6
- SSDEEP 768:0NfR9jNTwSTVmaBu7/Tq+dt/ZS/5NdDKBBNUU5tamW4PWzrOSsG82O8ugKQ5MPdL:0tR9+EV0T3dN0NdCX5tamdOHO6OPgMdL
- TLSH
  T12423F204ED02D101703897B3955F6F61C747F990DFAB405B26266EE886E0ED3528FEA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  data/flutter_assets/resources/backgrounds/LoveDay.jpg
- Size 79KB
- SHA256 c7b7eebad2b2a0ddf6eedc8534864c3e92b54246ef6599a85d504b82c989a4c9
- MD5 a4924bda63e4734ce6feeb6376555c0a
- SHA1 1241bdb1bc081f4f932554c028fadd7a2045de9d
- SHA512 603cb167c2d87961bcf8a3eb461994cad5cef5d1da08945fb584f6647b25b317987732e732f0e60b5f92f4ba7b6b3fcad4157ac922bc3887dcac438a78fa5ea5
- SSDEEP 1536:VHJ2v8aYFgI6VdOAC/aLsKvFkWV65Gy/gwdpzKn+SY:FJS8DVp/ivFkWE4yYoZJSY
- TLSH
  T1048302D3CB012004D438AFF0CD1B37D4AB2AEF9977251DB6AA8DD27616332141954F97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  flutter_windows.dll
- Size 20.3MB
- SHA256 011e87e890b7bfbac89f63c763341ffb8393d2b4a617dd836c471a0cdaa1346f
- MD5 ae8508a20a3c598ae3668aeb39633755
- SHA1 1052c38074e8836da5becf616cbd147775e9400f
- SHA512 61781fad83efc462ae5dbb616e1b0a2a30e6f35fdb63926913c1c0172f8302f9c39f4e8c2bf1a9a18c0cdab1199eae03c5a4a683248a3e180cce07245643453c
- SSDEEP 98304:FE7hoeyV+kw1ULtPbwDggwZr3hH5epehPTuwTlckSTKZSx8tkvMzVdD+cWUN25el:F3IgBfefQzH7wpuIFybvI9YA4V
- TLSH
  T132276C03E29640EDC059E179971BAA27F670B8490B20BADF3B5C47253F66BE01B3E754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32