a972e7e43c845fb1edee6a7418d51e49a6ecd9d6b26202f24af2d4da648ec4c9

Sharing

Copy URL Twitter E-mail

General

Target
pvz2pak-master.zip
Size 75.4MB
Sample260801-2e37pshl4v
SHA256 a972e7e43c845fb1edee6a7418d51e49a6ecd9d6b26202f24af2d4da648ec4c9
MD5 faeda6f7d6fd2f923e4ca78a246532d6
SHA1 11ab061d43112dabccd11c6c56c2784cad7ad8d1
SHA512 94814a1c24b7bd5c68365b914bfb1ca518fbbbef0a6f346747dd4e8be9749858bc0e35db8513bb1b835b50b1b56702330644de1678bea55e46f5338381675d9b
SSDEEP 1572864:sPfS9nB6G6GNGdLZh0OIzmdp1ohHYtQ1/cmKna:sPq9ntNGTDIzmz1EY2Ya
TLSH
T1A10833DCD4440D7ACA4F5BBE196F99018A37928446E93F08CDED934DAA82E433D3563B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  PVZ2PAK-master/PlantsVsZombies.exe
- Size 2.9MB
- SHA256 47a28c1f032162c6ada061e1b08b60b4eac3e8f99f38ba0ae86e4b75e59f2899
- MD5 08e67c1b90548c458b8b8b45773dce78
- SHA1 511a96c6d1a12273ddfabfadd445622f7daad155
- SHA512 f887233a4811e2b5aa5978ea75388a569bfcac68681fb26a4228ec2eb51510b55578ad1837cebd9058d8fe19ea10ca705c59e8e5dbb74ef1d2dd7ff8fa4bfc87
- SSDEEP 49152:eHdbeeOsx3R+ijGgz4M/5ZxvyUmaeeDRgh2xOfpDyYJNo/nRAMOghx96S7ksCW:Upf6ijFUsPeeD2hnYGMOgZ
- TLSH
  T181D59D61F7DB90E2E81B1A7541B5A73B84325F501334A6E7EBD43F2B98343D2E83A119
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral1 behavioral2
- Target
  PVZ2PAK-master/SpareStarter.exe
- Size 309KB
- SHA256 dabb5d4ca60ac941b448492ff3b05dc8c6a2162676dccb1f967a2f3b103d5365
- MD5 257aee689aa6a05c6ac13340c32d83a1
- SHA1 b62da565dacdcce1d407c037371be325388325c2
- SHA512 c2f4288627ce92665950014dade9d013779073b4127ed21b93991fae89ced92b3a53c52c90cf267012462cc6cdf9b5419af06e8403d0a68875a7bb6e6f2f7122
- SSDEEP 6144:51sbw5+7gQwQNxpBtt59B7iGm+Wiuuy6jzD7nvTjfbMYEYeOt4hzSws3AgAOjlWX:51sbw5KgQwQNxpBtt59B7iGm+Wiuuy6E
- TLSH
  T106649C1076C2C4B2D572093149F4D6B91A7DBC220F748AFB67E43B2E4E742D19632E7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral3 behavioral4
- Target
  PVZ2PAK-master/bass.dll
- Size 90KB
- SHA256 3627adef7e04dd7aa9b8e116d0afc11dcee40d0e09d573210a4f86bdc81a80b6
- MD5 6731f160e001bb85ba930574b8d42776
- SHA1 aa2b48c55d9350be1ccf1dce921c33100e627378
- SHA512 07ae0cb85464b015b35e6157228775a6ac66e5e62a1b47f9395307b61176b6df835e00a1518846507718acffc271263008cc8a9b2c1e8a0192c5438774e12437
- SSDEEP 1536:lyKkZPP882+8hMJ8Y8bRVYvVqGWWkaloy4bFcx/Rus5Ay6X0T3VzkxH9J:NmNN8bRVYNqGzCy8RQwXQ3pKdJ
- TLSH
  T1EF930199F5D17627C41A713D6BF203F3D0DDEA88C42B9F8D4E055B8028E79D96988F28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  PVZ2PAK-master/reanim/AC_RunActiveContent.js
- Size 7KB
- SHA256 489440123686b5856d4f3fcc76b1b8c5f56c7183190ce243158855cecac04558
- MD5 3e038cea960c1b650442b85cea237053
- SHA1 dc05dad434c6e80b1ac3b0c4f5759917aa078dc8
- SHA512 65924a711055a2a8c08bec8719bd4496389147c2403be3ac496a9c23f2d311381715eb89a35622f589243a199688b7401b6bb26e677525f0cf8319a724d4d29d
- SSDEEP 96:E7Q69oEjyul/eWJy7L7eL6L3AJVMgJgx5HCxB2yL6Tg280epn0pCDyCyTwc:Q9o4l/eV7L7eL6L3JUKFTg280epn0XvD
- TLSH
  T1EFF14F18F4A9E83B95025324482BD5D53BBCA883A4599DEF38EDD5841F4212E033FEB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

Network Service Discovery

Drops desktop.ini file(s)

Network Service Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8