e05082223369a762f84372551de7b49c0e8a17da715d1724918ad0e29203b1d4

Sharing

Copy URL Twitter E-mail

General

Target
drive-download-20260802T020023Z-1-001.zip
Size 677.3MB
Sample260802-cnj3rasckb
SHA256 e05082223369a762f84372551de7b49c0e8a17da715d1724918ad0e29203b1d4
MD5 b56903769f1312a1200d04486c0bce06
SHA1 d7b0e25f255238b9f85bd1821a77f933a9a9e305
SHA512 64b0863dc70970bf8313de318fdc2eb4f036e641872eabd1bae352ce60f6785be42c04d4fea57b8c4ee4a78852dceee361f02b41b08b20e71082483bdf1acd95
SSDEEP 12582912:/SfrqlyKoARwdr7O7XYq4BNCtqEU2OWzm3mYdGEKN9qra69KTGLrH1aNC:OdfK54vCm2Osm2WGEwUrNGGNaI
TLSH
T157793346DE864ECEC42935B488A70F1033FE8D6D47918B839BB5323CADBB7556C1684B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  DELTARUNE.exe
- Size 6.8MB
- SHA256 b882cc1879ad8f24c63fa6e4f47a8fef9a01065ee61ad6220beed9932b04e7ed
- MD5 7bf3cccc2e54481ced3a149e1a083684
- SHA1 ddd9992ca1ae2e7eb8f63b4b20c63b430dba4026
- SHA512 9e29c01120c1f145363c1d0e2cdbd764a50dbe875191b98839ea37a7cafaed160a654d88cfbd84b73c5e3e5cc4bea863373d2a3062205f768191fe6ccec843b9
- SSDEEP 196608:nbP4YyBOMDt0q3LM76lz38SmJPcZoOxCeW00q+Ux/agp:HE8S2P5Dhgd
- TLSH
  T108766B8632A4C1DDD167803CC55696FAE2713C41CF5197CB2AA0BF6E3F37AD409BA621
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral1 behavioral2
- Target
  chapter5_windows/execute_program_pipe_x64.dll
- Size 122KB
- SHA256 a594a7205f6a4ccff42cb460dfa08bb54442cb3317c7bdc0fa0437d636359402
- MD5 50c347cf03c0885d26b9118538721218
- SHA1 9bea3f10425abc7d65a55d3edd4714eeabf07abf
- SHA512 ee1e8f7ddb0d29cfd27f882ad9cd418f048b2707f869412d43332a11db18d67cb3041fab174943a1aef14a22e3879efa1d0818f552eb8073f01883528d5b2839
- SSDEEP 3072:PCkZBW7aSOC3SFFatkeLmRn87Q8uiBf7Q1je:aaWDByFatk6IeQ8u
- TLSH
  T1AFC37C5773E000BBD4668339C8A35A06D772B8520A34DBAF43A4535A1F273E19E3EF61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  chapter5_windows/shader_replace_simple_x64.dll
- Size 150KB
- SHA256 c10210e3cd619774d63947116bd22fb3f60f2d992b21f3ffb0121393e596b124
- MD5 073bf090aedbb91c4e12fa4dcd2ad82e
- SHA1 6f55489aa34e0ec0688f53c7d849e28d368520c7
- SHA512 6b9528272bca7617948f3a578f98b272c4c876f3c0024d469b80b490e54d82d59dd16a7670bc3b5e64a0ec1fb5643fb984bdf0118532da76327682192dbb8296
- SSDEEP 3072:4Uz8MVVIwkYoAVVoAtqV+Qa2wRs3plNPWSfdx6+2U:4+pkYoqVo5na2wY
- TLSH
  T142E33A07B2A540B7D47682388953DF47B7B2F49A076097AF13648A7E9FA33D08D39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  mus/hip_shop.ogg
- Size 942KB
- SHA256 62acd3d2de7e4ad81e99a2b31e40b90b1b121d93fc0c79ec724a7f1a47892a66
- MD5 3d407240e2758034892ba7b6789e55db
- SHA1 e838b6a21e5aae83a5128dabd95cefe645f44f6a
- SHA512 a7236222b68841738580bf793db341b3f0c968ba47b4ca1043f8380036d1e24aebac9b39d77e983fce6568c3e9e44eabbbd116e62f7d7024ab0406919577fffa
- SSDEEP 24576:asuGjE7Os1s564m7ImX0Jm61SPV0yHVLw7EVzDoHC/BtR:axGjE7OsO6x7Icb6IPVTEAtDoHWzR
- TLSH
  T1242533FEABDB4718D823743DF58C2FC6746EEF1D496986D18DC87E12CA7BA051821842
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  mus/kris_piano_shop.ogg
- Size 575KB
- SHA256 289f6bbcd9da8e04f3ce8a4b11302aae96c6dbd9db10881dfc25abc13b1a69e2
- MD5 e85bb1f52b4b5b4192c11a5456d243b3
- SHA1 0d1c25d0d9ab324246df0dd8147e8e2b3f1db91b
- SHA512 a936765ddb3a2ea687323619256db50577c64a31da03c90ff8f2e3dfdabd0f82f88aefb5b96cf2d00bb923f94395c21e09203724188da2bb6ec69e9559c22bcf
- SSDEEP 12288:RBfyYUpNMqgPTCsOLu47VLfalLGvR3bBCi4i/DSZPBBkZl:2YoUOqUIGlbBCitDkBBkZl
- TLSH
  T1BFC4233B9C928D8DD69D13F2EAB72E21BB7B88580FA00346577E4478DD2775D2D18883
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

Network Service Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10