9c9a97e049ded880c99d12b7f6d4cf3c4609849788deaa908914b167dce4bc69

General

Target
GameLauncher.rar
Size 46KB
Sample260801-2kzfpshl7w
SHA256 9c9a97e049ded880c99d12b7f6d4cf3c4609849788deaa908914b167dce4bc69
MD5 972427a691dfd324240a5ce74561c4c2
SHA1 68c7bf2513921a11be12ca358fb46e6416c58475
SHA512 acd2747d085f50c421d352a6a32552c5d4db7362ab597ced055e29320f90fc64e072e3557c4540fa4b2e99c81239c803d19a9eb3c16223da84afc251b69d7fce
SSDEEP 768:dloOq8+bH02tyP80nP6ULpWEZKcu11rqQjgWorcfb0guIhYQZ3I:g7yP80nhUVcu11eQMHrndIhy
TLSH
T1242301C87EED680C51B15206B84640C09267EC9DB6B788C8A8D1D99F3EDF07ADB14FB1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  GameLauncher.rar
- Size 46KB
- SHA256 9c9a97e049ded880c99d12b7f6d4cf3c4609849788deaa908914b167dce4bc69
- MD5 972427a691dfd324240a5ce74561c4c2
- SHA1 68c7bf2513921a11be12ca358fb46e6416c58475
- SHA512 acd2747d085f50c421d352a6a32552c5d4db7362ab597ced055e29320f90fc64e072e3557c4540fa4b2e99c81239c803d19a9eb3c16223da84afc251b69d7fce
- SSDEEP 768:dloOq8+bH02tyP80nP6ULpWEZKcu11rqQjgWorcfb0guIhYQZ3I:g7yP80nhUVcu11eQMHrndIhy
- TLSH
  T1242301C87EED680C51B15206B84640C09267EC9DB6B788C8A8D1D99F3EDF07ADB14FB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1
- Target
  Configs.txt
- Size 45B
- SHA256 dea56b6fc8112aa3c484d450a8ad45f600eeb68a9b354a64291bc1c21e4a5f03
- MD5 2e1709dbb7e4203a72167e9e57e00c58
- SHA1 4686225c4e216d5f97bbda466c2445f22a369745
- SHA512 308df428203c78336feb912a064bffc60d626be0f3998847ee7561656c524597503cc80f8841d62ab809459168834846ae2175e381b9e3487832a96842b21443
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral2
- Target
  GameLauncher.exe
- Size 142KB
- SHA256 5dea5a4ba2e4def4f102d0e08aaf966727552bf854eb784d4c57724d5a1257be
- MD5 55d515908d17b2fccd5b27191ecde196
- SHA1 f7ceec320eada24ad8f2c8b05238adcce7968ed1
- SHA512 cd37ac999f72bc6043cf047a507713cbed57d2fcb15c1ea2f460e68e36dbe9a81aa8b664455a37cc23b484f957950abf29ba742ffc607a934ca5d21a5aac930b
- SSDEEP 1536:tUCnmxPtHNq57pyQ4qcmxPtHNq57pyQ4q0:tUCnoHNq5794/oHNq5794P
- TLSH
  T1F9E3F7357A0AD947E692CE780DA1F2A842685DDE6CA9AF02BE4533CDBDB4FCC3D50501
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3
- Target
  JRPC.dll
- Size 23KB
- SHA256 4a805b65e4b3694e9439dc240183ef1108c6ce1f7bf3f054f59aa197daab9c1f
- MD5 767b303fb5ee44742ee068ff20383195
- SHA1 23a4af54ae788781f513b334297ea6f8dad8b0a6
- SHA512 c98929cb3fd7ab2eb52111cc8539d99afc16f834a6c68a8f1110923d033bf00750b13647f0dfc1f062d77e2ec216db4e3d2a6099c4e084c31a453679f370b149
- SSDEEP 384:dy2Xj3IM0gCykNtkwAVxGcPghibMdOrsGBPCngY5LteGsRkliFmikZjSoNgwkJU6:dyRQkDkwWGcPghibMdOrsGBPCngY5LtE
- TLSH
  T120B2D61EFBD64921D72E42348AE72309C17FE4365623D76B1C8C6BB0FE413A856A0ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral4
- Target
  xdevkit.dll
- Size 48KB
- SHA256 ed179133a0259fcca1b4f2387fedd31388f1911cd0bd184c10f6b174f3573257
- MD5 95e443fe23b5655f8d67f504c95e3446
- SHA1 9dfa77ada215d87386a4b8b729ebb455f81a5caa
- SHA512 f1721350e4e8ff2bd24c447de1cbf2c3ce935cd44bbc2c222933711553c39ca69a2aa0eda2146ef515f49c7ec97af7624c926e60492f4d4e1e8ff24f4054a367
- SSDEEP 768:nQG2KXjMSlsQaBrknnz3tVEoxrnnFMe9m/s3D7dOl/Z5:nQGljsQaBInz3tVEI34Ay
- TLSH
  T18423188BB35DE00EC5BFCBBD86A306661371C6912322DF2B384D539D1F9A56C0C66279
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5