Overview

overview

7

Static

static

7

�...WX.exe

windows10-2004-x64

5

�...WX.exe

windows11-ltsc_2024-x64

5

�...e).gba

windows10-2004-x64

3

�...e).gba

windows11-ltsc_2024-x64

3

�...n).gba

windows10-2004-x64

3

�...n).gba

windows11-ltsc_2024-x64

3

�...WX.exe

windows10-2004-x64

5

�...WX.exe

windows11-ltsc_2024-x64

6

�...1).gba

windows10-2004-x64

3

�...1).gba

windows11-ltsc_2024-x64

3

�...WX.exe

windows10-2004-x64

5

�...WX.exe

windows11-ltsc_2024-x64

6

�...n).gba

windows10-2004-x64

3

�...n).gba

windows11-ltsc_2024-x64

3

�...xa.dll

windows10-2004-x64

3

�...xa.dll

windows11-ltsc_2024-x64

3

�...nt.dll

windows10-2004-x64

5

�...nt.dll

windows11-ltsc_2024-x64

5

�...se.dll

windows10-2004-x64

1

�...se.dll

windows11-ltsc_2024-x64

1

�...ia.exe

windows10-2004-x64

6

�...ia.exe

windows11-ltsc_2024-x64

6

�...ar.dll

windows10-2004-x64

3

�...ar.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    0d4efae9627f2c1a92b75e1ca2aa8ecb19663e5ea391d0dc7d3b1f9cc239568d
  • Size 15.5MB
  • Sample260802-m4z41sysaw
  • SHA256 0d4efae9627f2c1a92b75e1ca2aa8ecb19663e5ea391d0dc7d3b1f9cc239568d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryexecutionupx

Malware Config

Targets

    • Target
      2 GBA/VisualBoyAdvance-M-WX.exe
    • Size 2.1MB
    • SHA256 1be4fe42ae7d4038e8c698bd29eb9debddb31fa3583a5dbdf5dd110653a6bdfe
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2
    • Target
      2 GBA/roms/Super Mario Advance (USA, Europe).gba
    • Size 4.0MB
    • SHA256 d29dec02caacbf449e2a93c6042258b0669542e102eb0e6fd0eb92a5411e0244
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      2 GBA/roms/Super Mario Advance - Super Mario USA + Mario Brothers (Japan).gba
    • Size 4.0MB
    • SHA256 623e456a9a6406c64bdb3d56504d882815368ec842c4cdfa3004627c2bbfb4b0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
       GBA/VisualBoyAdvance-M-WX.exe
    • Size 2.1MB
    • SHA256 1be4fe42ae7d4038e8c698bd29eb9debddb31fa3583a5dbdf5dd110653a6bdfe
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discoveryupxdefense_evasion

    • Drops desktop.ini file(s)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral7behavioral8
    • Target
       GBA/roms/Famicom Mini 01 - Super Mario Bros. (Japan) (En) (Rev 1).gba
    • Size 4.0MB
    • SHA256 5873d52f760825015e54e7a0f496efae39e1fed6848375904e8d77bb6c652096
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral10behavioral9
    • Target
      2հ GBA/VisualBoyAdvance-M-WX.exe
    • Size 2.1MB
    • SHA256 1be4fe42ae7d4038e8c698bd29eb9debddb31fa3583a5dbdf5dd110653a6bdfe
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discoveryupxdefense_evasion

    • Drops desktop.ini file(s)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral11behavioral12
    • Target
      2հ GBA/roms/Famicom Mini 21 - Super Mario Bros. 2 (Japan).gba
    • Size 4.0MB
    • SHA256 18e46c415016134bb14428aa877f410ad446ae9fd6606744bb5c114c7d82fed5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral13behavioral14
    • Target
      1+2հ/7zxa.dll
    • Size 166KB
    • SHA256 6c73b4bf32fed9f7f4f90f89cdf23c17a85ba94b9d5c065d473b70de01b94cac
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral15behavioral16
    • Target
      1+2հ/kailleraclient.dll
    • Size 31KB
    • SHA256 35a8f5f6b858e6af5dc34eec2bbe397ea230c09eaffbb976c42f4b096cfc2551
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral17behavioral18
    • Target
      1+2հ/language/Chinese.nlg
    • Size 45KB
    • SHA256 3e6e4bf48091171a6e84c399dedd0533c7508c7dda6049e4e2228564121fd3e3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral19behavioral20
    • Target
      1+2հ/nestopia.exe
    • Size 2.0MB
    • SHA256 7699722451022d473ef4f0ff84f80165c2da15918b20056a023d87e3a6240f61
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discoveryupx

    • Drops desktop.ini file(s)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral21behavioral22
    • Target
      1+2հ/unrar.dll
    • Size 158KB
    • SHA256 db4c1d956c6350ba8f7899ba046f71d135b6f7b73ed0b5ec237eea2060a3277e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral23behavioral24

MITRE ATT&CK Enterprise v16

Tasks

static1

upx
Score
7/10

behavioral1

discoveryupx
Score
5/10

behavioral2

discoveryupx
Score
5/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

discoveryupx
Score
5/10

behavioral8

defense_evasiondiscoveryupx
Score
6/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

discoveryupx
Score
5/10

behavioral12

defense_evasiondiscoveryupx
Score
6/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discoveryupx
Score
5/10

behavioral18

discoveryupx
Score
5/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

discoveryupx
Score
6/10

behavioral22

discoveryupx
Score
6/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10