f6ba28ce50a67203d6b9dfc89c711526177b709c5234eb2d004fe719111546f6

Sharing

Copy URL Twitter E-mail

General

Target
PvZ CONSTELLATION 1.4.zip
Size 265.9MB
Sample260801-tas7yazdph
SHA256 f6ba28ce50a67203d6b9dfc89c711526177b709c5234eb2d004fe719111546f6
MD5 ac26114eb2d1b82f8f65c768c8303b36
SHA1 90a325d3e0d64afe54b47f438bce56d952c0bf6c
SHA512 d2214b011c3bbb61107895a8e36252d9d0100fc9b0cffb55ce04501a06d87fdd69b9ec813dda05511de0be95fddf8fa84a056fd213100cf2bd75d6edb696affd
SSDEEP 6291456:DX7nMHLGF3JPY90wZ4ts7445Fhimj+WDVLdEcrsb1xdctWEzVAUR:3nMaF3sgto44OqLq8sBxdctlzjR
TLSH
T17AD833C5C07ACB05ED86FA3F6C228A911F5DDC63B8958C745422B1859EDE9409B3CB8F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  BuildTest/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  BuildTest/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  BuildTest/PlantsVsZombiesStarSign.exe
- Size 651KB
- SHA256 0672cf65f0ce687708aa79e56d16c8047b1a8cc3078c5db4ce2f78a6e09fe3bb
- MD5 67ff4a20179c4e6140356b90c81770f8
- SHA1 402216bb299e614ec05ca49fea3132cade69c986
- SHA512 6b8f3e4c146bd7e2e0400b1b157865f23e532ec62e9c153cc41ce7fe310ef1eaba1c47b20207d0bfd2bc21ba1e51da44f7b22a47d5a9e71e2f448c0983a6e1a0
- SSDEEP 6144:PP7FG9mpcJ/OD8o4i+ve5ezF3PtPNTgXweHVid:PP744aOD8a+veaN1PGVid
- TLSH
  T1BAE41843840EF38CF1B75CF9D105A0F696682E07DF696823E908FC653DB72928BA1761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  BuildTest/PlantsVsZombiesStarSign_Data/Managed/Assembly-CSharp-firstpass.dll
- Size 44KB
- SHA256 62228fccc686bd3018439ff4927bfce95b935cd1724136d3d541f12fa46ad078
- MD5 f11bf4156d43cefbf46d0fd11f3d89a1
- SHA1 028334fb26f1efdc3a98c7c6e3552b17f182c7da
- SHA512 f7bdccec1467ae39152a60a5019ba44ec778cadb0075e9bb5250e323946dc443878d795f83184d0eac6b59917a7b4d5546f90fd0e5138b1dae2246d2bdcf5d2b
- SSDEEP 768:pLuP08ecBk/hKufKY6PtC6an4p84+Vv0yNId6u+PXLpmxa:pKPVJBk/h1Spdanr4+F5bPj
- TLSH
  T14C230AEA8B781337C69F0A3964149901C770D32A9A16F766BE4BF1F4805BF9369403E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  BuildTest/PlantsVsZombiesStarSign_Data/Managed/Assembly-CSharp.dll
- Size 676KB
- SHA256 2303956e7f15e6f3a55de9e409f72d4cd9577210552b917a0f1f39f26b79593b
- MD5 e1e7475bac07cd1b45fb6b1b841cf1b0
- SHA1 adee5f2d5bc13c8e3cced052fe7f0727a1369b17
- SHA512 6cf5f3593e532061c161c9657223974691a514a69e9e891117ad7772bf00392355fc4ea28edd6dd2f51ee95fdb528918ffe9576742af4540e654e8a137a820e1
- SSDEEP 12288:YkCPm2w1X/f8HSmJmwOY5eSj1Ua4eOikT0tiIVjobScFnW:ttmJmE52nIVjUnF
- TLSH
  T12AE408D176A9FA27D2BF4FBA80510A5597F58642A246E74F8FC0E9FA2CC37901D03193
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  BuildTest/PlantsVsZombiesStarSign_Data/Managed/DOTween.dll
- Size 171KB
- SHA256 8e90fc43ab564a5a51424af56531ab074a5a2e9cab271b2d653d287954237b83
- MD5 c278d7f5c05b8470da58390f1a1efaa9
- SHA1 5785a56e7938608debdb1c67960d1cd5bdeb337c
- SHA512 ca749b0bcf368e5a9d273025b7c945cb0ba9b3886d42f1b483cdfc56009c9f2c1ea76a1717a065f60861a41a115603a3840c7996d3799fe3835e44fe2c0cd6e7
- SSDEEP 3072:6+OseYXEszneCqlL5lVu3GiO8J6Ye0JeUjnC+ee+e+4LWGOCdXaYr8yzi+:RO4zneCqlL5lA3DD6YeWJLWGOz88ye
- TLSH
  T142044B48A7E95632CBEF537FA0382D58A335D55DCEABF7DA2950A8F41C03706A801397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  BuildTest/PlantsVsZombiesStarSign_Data/Managed/Mono.Security.dll
- Size 235KB
- SHA256 5e094d0c9839f1790513837e50df5d74ed8e02ef199a5f2e2f75f8c494d1e86d
- MD5 83d01e1a139c7c2939876b8d5e76ffd2
- SHA1 e081e28c91c0901efefb1af1c01b0f349b322323
- SHA512 fa57f98bbb90ee507b9cc594ef7583ac801a152b8d530babbea9ac6a63697c048eb0d166c9f50d73a5bbc3c9a32debf7cb6f6c59e6a874d32a9167380723326f
- SSDEEP 6144:2UjTQ70cnf8MoVRxS9iJdBF119RJXG2yG+Q:3EiH119RJX53
- TLSH
  T136344A1863F9531AF6EE8779D4B15019C3F4F50BB9AAEB4E5C8282AD1C027918C41BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  BuildTest/PlantsVsZombiesStarSign_Data/Managed/System.ComponentModel.Composition.dll
- Size 251KB
- SHA256 94591e0b44d11861723e95dbce2d94810d4caa5f1c23da204084d2d58cd96b6e
- MD5 c99114b20053a8dbd4641abb0f3b7fc6
- SHA1 4a181d46783f59bd1587274205ed2f99d556be87
- SHA512 55275b6c469551b9b43e2a797c3317e6fa1bdd7f4ba0f13e84bbc7938fdbaf03e389162bd143e3c4d3524eafeada851519e872e3ebde59daf7791ab653ea4bf8
- SSDEEP 6144:bkwkYfxuS0ZNORl1X1XYZGFU+22kUgUlAwU5e81hXJXee4jsURlXXMAX8O33iEP3:bkwkYfx8ZNCxL
- TLSH
  T1CE44281533FD0366EAEF0F78B5B480148BBAFA06B95AE71C2C8951FE091379499117B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  BuildTest/PlantsVsZombiesStarSign_Data/Managed/System.Configuration.dll
- Size 122KB
- SHA256 5f14ed0ea4f0a47a4ed689b2c6b57edc915ff94b7f102308c89ce19fa7b50334
- MD5 b242e8ddb9dc419588ee3ec34f2f489b
- SHA1 3e3b9c89f7fcfa6e99967025721a394718dd005a
- SHA512 66e3f87bae5d62b2d4513a5806a0bb9c854c92e43914b6efe31c838b8ba0557474b12039c0b6e43cef886dbf9491cc8af46b8aa37a4b3013c2e531af737fce52
- SSDEEP 3072:uGHTFkizuGCOE/htnREcacWown5WJGL0MIeogNe:uGHT5+H/33vJK
- TLSH
  T19CC3F92563EC872BE2EE177EF8B515110FF1FA0AA436D74C5D89B0ED1827B804662367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  BuildTest/PlantsVsZombiesStarSign_Data/Managed/System.Core.dll
- Size 1.1MB
- SHA256 f976f1a032bd762fa209b14956a7bec692872a859e0470943dffa7206f7924b4
- MD5 9ff2d15b5e90d6787f18245e345f21df
- SHA1 50dbea755a84234a93a82513fd2c162cce88c9d7
- SHA512 04203181d93d853c2ce2fe713058ec5ec0be7ec151daba3995164ef6fe1039830a17fb8d1c7a0cf180f487536e74b3ecb53ac0e8696d9bf52ea678beff047acf
- SSDEEP 12288:AWK8Xi19FV57751umv0RX15PgLdfJ18VjjvM44hvetIX6e+8xHzR:Cl/umv0Z15PyC9vMNV1+8F
- TLSH
  T1FF354C01B3EC9B27D5FF7776A4B442A007B6FC46AB3BD78F104891A95D56B008D887A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  BuildTest/PlantsVsZombiesStarSign_Data/Managed/System.Data.DataSetExtensions.dll
- Size 29KB
- SHA256 1dffeda31899041df303dbca228d8220ccd05d3911911d84c0d40dc3a9334b6e
- MD5 4d60f0957e2d20ced036f53509aed24a
- SHA1 4e35dd8d564dd935149750672cf74f38fc814b1d
- SHA512 8de63ba64b3a337a502d2a2ccac59cff8cb7e2062f1393e87e67dc800334053d0ea706601f8e67790d09bdcf08b16a43cafed4506badb9c406bc9711339b0191
- SSDEEP 384:bEAjm7aELetOdc8l4LodMqokNv2Y2rsFKOlIcMYOxksnRbli3ESmMadMkrVr5UhH:bcZC8Ll4LiMXkv2Y2McdOsj5Q
- TLSH
  T149D2C815D3EC4311E3B727B5BCF9518A8AB2B913AD35D79D288E23CE18127804D62B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  BuildTest/PlantsVsZombiesStarSign_Data/Managed/System.Data.dll
- Size 2.0MB
- SHA256 f16760785e8177b512ab5fda56042577edba3b45035de0f879607bbee60236f0
- MD5 982380b768758f3d7fe8dadc02b36334
- SHA1 caeee2d0b0ae1504a24b4a34a7bbeb8ee5e7cb1f
- SHA512 8498c16ff7cd865f3c4df7cddeed63f2db93af0395847da5b141628f48b050a893253dc9e77c6dba60359e7e626a3af3d2cca9b4db10f623d634f5db7d028b9e
- SSDEEP 49152:CsWVZLbth7+KwFOlXJJWO/wjDqhxoZCkUBojPJ:CsWPLbth7+KwFOlXJJWO/wj2hx
- TLSH
  T1DEA527007BF86A1AE6FF7772A47424140BF5FC56A7B2D38E6904A17E0C63B508D617A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  BuildTest/PlantsVsZombiesStarSign_Data/Managed/System.Drawing.dll
- Size 478KB
- SHA256 0ccd2367e0548c26b46dfd083beec9da0e483bf38821e0b23efe312205ebea53
- MD5 d8b190da0be516bf2839cae2ce97ba75
- SHA1 861dc2529e21caf8fe5b6071d376d5ace636b187
- SHA512 f2091b424aaa4f5033fbc0c1a49be655527f0e2e3b02f3c20a55b463a4f135faf964143550ebbb513c3d9ea383bf4ab2d2658d1e12f1c6e41af9495ca969bf38
- SSDEEP 6144:JHutOmSUsXjt/z5B4CqvhOgEGKPx+Jg/NY7c/nENZ4k7cheeEA:JOtOmVsXjt/PicgEN/MGq4k
- TLSH
  T189A44A1077B4592BD5EF2B38E0B24968A631FC076B26E75F4681B62D1CF2B809D417E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  BuildTest/PlantsVsZombiesStarSign_Data/Managed/System.EnterpriseServices.dll
- Size 43KB
- SHA256 b1a36aa3ca78c6d3aa83e38c1c5075a11ae3f4535dd57db96fec8ac71183781b
- MD5 aaf6261901a8789eeb93f290a9d087ff
- SHA1 32cbc1d7b08b1954dbaaededa29c72b73c57001c
- SHA512 c646a4136bd90f1514c6dd89c8a9577381a221635e776057f4f7ebee0edc9df15fa90a9257e88a0521768a91ee3a66fc679587d56fd07d3c417eb21d6fca72ba
- SSDEEP 768:UT7LlB8tFJutlA/kUTr8yI32JVmugdQVwGHZgm5S:W7BBk8tlA/kVy7JVmuguVwGHZgm5S
- TLSH
  T1E813D51043D4877ACAFB4BBAFCB342264676BB026F37D3EF2605D2995E4374C4412666
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  BuildTest/PlantsVsZombiesStarSign_Data/Managed/System.IO.Compression.FileSystem.dll
- Size 18KB
- SHA256 72a8be9c0d4c725f95f8e8706f2c164bf3360abf43777a532d10bc4f6930f472
- MD5 9ef025bf7853171492db19f63c2e79b0
- SHA1 26e944e8bc1c8c88bc61debf5163f19757bd04c1
- SHA512 3a9c1c12655adad1501c62d24e83b4fa5468e297e14031938a8f53062f05b01cfbbd9d9ab675625ecd48d998fba8487fedb2edfd4f98072ae6dc2853ff7554a2
- SSDEEP 384:hPQA4DgKGRwrtLsWcRbli3ESmMadM1vz2a:hoA4D/JHq
- TLSH
  T1A082702493E44315F6FB4BB4ACF7428686727D13AE36C79D298A135E0C327884D63B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  BuildTest/PlantsVsZombiesStarSign_Data/Managed/System.IO.Compression.dll
- Size 112KB
- SHA256 2be294e8023fd90cd701060485bebef347d9efd4a3483704a67ea28ba6020124
- MD5 3748e749fffa9014f53281dd4accce3e
- SHA1 f2c4574a62f5e433c9c16dd137b32e5168126dfa
- SHA512 213ab731a569b174a87496edb729b79ff962f472284ffc6d1850cfd213458c44b787d208590bf46db7d921ad0c67421094502dc1254731911ac1abb5c81273da
- SSDEEP 3072:paN5/sy/nNo7hPjma0m9Y4gbcRiuT/EHuVra:pmsyPOL1n
- TLSH
  T18BB3291463F80757F2FB6BB8A87509550772BD83A93EE78D390864EE1C62B808C61777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32