ec0d00544f35dc0ab1e51057bcab146f8d1ed33adc5549f67fcf0a342cfaca34

Sharing

Copy URL Twitter E-mail

General

Target
cr-setup-0.0.9.7919f.exe
Size 58.9MB
Sample260802-mxn36s1dpg
SHA256 ec0d00544f35dc0ab1e51057bcab146f8d1ed33adc5549f67fcf0a342cfaca34
MD5 9e00a2b43b7140aaac57c828bd6566ce
SHA1 a732131183239e986dc0afdec00cae2e859549a2
SHA512 d1485090b0e3273c288b2a3fa753ce0a1dc6e9fd67cc2afe85be27022ffb08af5ec7ee7d31613b4bde0642a2c5915b0cfef03de81405239101e57133aaf59649
SSDEEP 1572864:zGtlNxck//BMoBr/ZhdlEU/DSozGL7hqJGuiCi4YJbfy6S:0v/lzlj/m+LD5ixbA
TLSH
T185D733980F3E0B57F1C1027DC53BA7294EE4BA634175D3604D9A9C267E24794A8F12BF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Targets

- Target
  cr-setup-0.0.9.7919f.exe
- Size 58.9MB
- SHA256 ec0d00544f35dc0ab1e51057bcab146f8d1ed33adc5549f67fcf0a342cfaca34
- MD5 9e00a2b43b7140aaac57c828bd6566ce
- SHA1 a732131183239e986dc0afdec00cae2e859549a2
- SHA512 d1485090b0e3273c288b2a3fa753ce0a1dc6e9fd67cc2afe85be27022ffb08af5ec7ee7d31613b4bde0642a2c5915b0cfef03de81405239101e57133aaf59649
- SSDEEP 1572864:zGtlNxck//BMoBr/ZhdlEU/DSozGL7hqJGuiCi4YJbfy6S:0v/lzlj/m+LD5ixbA
- TLSH
  T185D733980F3E0B57F1C1027DC53BA7294EE4BA634175D3604D9A9C267E24794A8F12BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  Crisis Response_Data/Managed/UnityEngine.CoreModule.dll
- Size 668KB
- SHA256 64094b50fcd0d8f41b69ea6441f81fdb8b030ca1b18cbb787fac331937345de8
- MD5 afcc17c83eba3e1bbb4b40aa0329fe82
- SHA1 e67187c59225c97f7e378afe1fed5a66a9f44912
- SHA512 5ace8a294a1d19bccb25b6c6ddc7750285f831b7501914603fb253ce1f01e2f804f6e8264bf652990957d77c59b1db42ec813f4e38d7c0545ccb3c3c3145c279
- SSDEEP 12288:HFimNUO3Dn5bhYoMvbQARCFtrCOyRy5t:HFiuLltYoMvb9RCFtrCO+ot
- TLSH
  T123E4394877F9A8DBCF7D2339E0A144101B34E1052313EB8B15B561BC2D9735A4E6BAFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Crisis Response_Data/Managed/UnityEngine.CrashReportingModule.dll
- Size 6KB
- SHA256 903a0042ea8b438a84224ff7b0045649604d67122b427ad5c860759a287653c0
- MD5 5b88697639a2b65939325e4b8be5f1fa
- SHA1 c3d85db158670486c01fb87b1b545abaca15f606
- SHA512 a87cb4ba5f556725641c7dc745e3c3eebdcf95da9187e4ca7b59c89745ff671af883db47613f696160a82615e21a578c90a4ee041c139f734f0a00accdb7444a
- SSDEEP 48:6w99zji7dFCYiL6/FScTbRfnnLxjxtjTByEVu1C/TI4frAYx6bVID7n1HOO48nqi:D9PiCyFTZnnLV7QbM91Hlrz005I/
- TLSH
  T1F0D178F4BAD411ABEC55DF739479838139E0D423CF32C529079E21B5F4390DEAE21AA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Crisis Response_Data/Managed/UnityEngine.DirectorModule.dll
- Size 8KB
- SHA256 086f79f085a07c4c78d794c0d72af43be4d6480bea5c3c479173ba147eeef162
- MD5 1ce3233fd225293815750243fadb4005
- SHA1 080744d20e63fbf2a3c48296d790b3ac3b5a6185
- SHA512 b95f294615ac07cafd862701715dccbcd656b95b067234ea54d4d38b9329b473402b8141859ceea4dfb329fc3273695b2a051d8064a21b86458bd390bc78a3f8
- SSDEEP 96:5qCEqrMZHtDf3gTi/k/GE0M1AiAtgCZj7QbM91/2VF0fl:5qO2tci830M1AiALZnqM91tl
- TLSH
  T11302FDB176C5909BED950F33903983813AB0D923DE36C329079F12A5B9781DDAE31AA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Crisis Response_Data/Managed/UnityEngine.GameCenterModule.dll
- Size 24KB
- SHA256 a76759450a801f93e25b5046c3493371d32eaa1bc02747569a90262c089418c3
- MD5 2023a4006833d70e24e71037af6aa052
- SHA1 4145a7e00a176ca409eb04044250723c47345de9
- SHA512 0547dcfddb3caad67e132874ffa2e888a4f151661050e57c3bbd3e00e1057e2294dfce1a6a6088a92b313f1d7e372d3bb610b8e4bc52f9fccf33c2101541c192
- SSDEEP 384:8sAka4vhvQpES/EbEdGlpJ8ywTf42LyL6E/HfDcajdD+9n9/mqK1w:ukDvQpld0mywTg2LyL6qHfQcch9+71w
- TLSH
  T108B2F915EBE95417EE9C0B3B90F243402BB4F2525A63F70F0FAC20B55D7B788AC52629
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Crisis Response_Data/Managed/UnityEngine.GridModule.dll
- Size 9KB
- SHA256 130ecae439e35ce9c43a3c9113af1f3a4b986bb490f5761f0b0e5eddf2f754a2
- MD5 07c4c645f0d97e51c99420c35cdffaf6
- SHA1 3038777bbcdbb44fa07d98619167d85c403d305d
- SHA512 8e4f0bf5467aa2bb71812531a2086c822e1d42243b40275605a682693ff74b52cc12604480090772edcf81709ecd3e0fc987e0ad979234e18cfb9343ac427a93
- SSDEEP 96:a1F/4M+2MrWc1z6GkkCGPV3NuSywKJRBmUoev+MAG2fS7QbM91bAR0Lt:a1F/MrWuz6jGP7aJdoYBAuqM91Vt
- TLSH
  T13A1211B4B6D1019BED191F32D0B5538139B4D122CF32C32D169E61A5F87A1DEBE726E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Crisis Response_Data/Managed/UnityEngine.IMGUIModule.dll
- Size 137KB
- SHA256 409d5483308d84becfe136376e737ba3e1bdec757b6dbb7e7810d6fc1dac4a51
- MD5 9bb237997d5871eff755cb20540cafc4
- SHA1 4ede724b056d2fa247bc93df7389e3f6ce2162a9
- SHA512 b5819ff5bf4ae7d357d9ebf0b73594ea6c767c57e127e539e016f598f37d315d84c90a1530a38a3d943546fd45f587ccd54dfbdf40f16cea3e4aefc75ff09333
- SSDEEP 3072:ZKaI0Z0ehZbEgjurgfcdNlPoSWfr30QcpixK:Z3I0Z0ej72gfcdNlPoGix
- TLSH
  T169D3396903F9842BCFAD23BDD8D11104F3B1D1066217EB4A596850FC399B3A6E9227DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Crisis Response_Data/Managed/UnityEngine.ImageConversionModule.dll
- Size 7KB
- SHA256 1e3b6f2a891051ada4ad0394e04e590c19633628ef00aa89ea9f5df46746b1ff
- MD5 d2669987b8e664295378f4fc4d282d5d
- SHA1 672b1038486cc680404c8123c6ce7302cf51d02c
- SHA512 c8abd46442ab1f93f88276e6424cdf4bb11a4fc870b623f1e59433d4c98f59075de2e84fb7ba0509db046fd102e82dfb1c5946adbc80aef56bc6087f57d22bfb
- SSDEEP 48:6xPeu1Ww+q3ADlP9zyuJjNMFGwQmzjRIxjTByEVu1C/TI4frAYx6bVID7n1HOO40:oT1W3q3AD2u1u3Q5x7QbM913bP0go
- TLSH
  T1A5E1AFB57AC411A7EC165FF3943983803EA0E423CF32C229479E61B5F57A0DE7E216A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Crisis Response_Data/Managed/UnityEngine.InputModule.dll
- Size 12KB
- SHA256 b81aefb8beb60e5963e17cabaca6aa1b36da1a037e73cf3be8a2c52cd5b93d54
- MD5 a9cb1f91f8d416811fa20846dfe5afcd
- SHA1 162cee3b79b0ce925900bc2b9a829b673014c109
- SHA512 5c4fcf35e131989eff9ed5bcbee7f68b8be10d1e654d4a6357f0a51a5fd9ab71e595088cbe2f6f52ee1687bc05b9a7fdb0c382214c94298f08c51b9f30574285
- SSDEEP 192:WlAP7+bCZsSzK6pqvQqNOMPhGOQpvBybhl0TfmFQ5r9qM91uT:WQ+bSTYYqNP5GbEhl0TwQ5RqK1u
- TLSH
  T1EB42A4F5EBC814A3ED562F3A54F583407BB0D006CEB2C72E138E1974B97A19D2E127A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Crisis Response_Data/Managed/UnityEngine.JSONSerializeModule.dll
- Size 6KB
- SHA256 429d65f91d3190b1305fd090dfa94cfaa46dc982689accd3d60b79544b51789e
- MD5 60acb1845b649348d5047afb675a6093
- SHA1 29b24b9acd5f0ece547d2860d17d708102eadcd8
- SHA512 3e912c26849463cc665c5de67c95790f4ef97439a99d70ede5d2bc30fb0fad38313df294fec86399598fb87c7908187162ea5bc7be9e8695143d53ed9bb04ad4
- SSDEEP 48:6XJMiADMtbfzaiGavxpUNEc34ack9Alqfi+YH/Eo0jUujTByEVu1C/TI4frAYx6y:o7YM9X55ItrE/EoS7QbM91fDQ20S7
- TLSH
  T1E2D178F0BAC411D7EC565F73947983813AA0D423CF72C229079E62B5F9790DDBE21AA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Crisis Response_Data/Managed/UnityEngine.Networking.dll
- Size 248KB
- SHA256 d5763de57bccd319b6e5a3027d6fcf5bb79ba93c0de1b51085f791a0b0e1d1d2
- MD5 b34317a5cac3e44803397c0aa06130c3
- SHA1 7f5f541dbe39461cf4dc43c5177480e756c3735e
- SHA512 3f2bab8115add92c4ebd9251c3dd946f66196af380fa36b1298152d1a824b8a66c15dd66d965e60a731d431058854649685ac6283e8a828ff4f4e5973ff9378c
- SSDEEP 6144:+FfhJ9ymZobK+e4C8BHrLBaTur+4NgTdVj9:63gmZxHBdVj
- TLSH
  T1B944F81067F99516F6FE2BB9E8F450004B74BC42A42AEB8D16D020FE1D637948D963BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Crisis Response_Data/Managed/UnityEngine.ParticleSystemModule.dll
- Size 107KB
- SHA256 c563b99ad1cd68f5f9577f77bcfc04114faa6fc9b6afd718f6a88fc2425ef667
- MD5 0c81c496c8b7d07802c907eafecc5ffa
- SHA1 1b4ee5559a30501ce359341409c9b8ded4fd21a0
- SHA512 4ed52c0a1a6febeefe34e3b5229b00278b047a472fe5bbda7f21f7e2863e8ce5c0f8cf4c034748bde908e62c5fe2deef02d41a30188af443436a677899006149
- SSDEEP 1536:uqSJ6dVH+waqSoTaztgX9vjN4AKWaxHk7E71w:3vJyXi7Exw
- TLSH
  T1C0B3D8F957AAD62CCA8E3379F0E5122072B8C549B013E748177851BC0B1778BA57BA4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Crisis Response_Data/Managed/UnityEngine.ParticlesLegacyModule.dll
- Size 15KB
- SHA256 3edf7eb061c45c196274bc32d1bacd9f797017298ecb361cb82c0520027b80db
- MD5 c784f75cf89bd30f53f5dbdf6ef2f9fa
- SHA1 f73cbc86d94917ffa2c821a7b9bcea4f772627d3
- SHA512 c5f3dc630389f007acad701af7c8fb2eae792e478a2e68320abad85ae5252b97fe42608aff21c760f054c939e4b6227d33aa76b3c249266009a0c5bc255516da
- SSDEEP 384:hrnM38l7KZq1rXT8A0YrDdSTXcH2qK1E:i38pK8C71E
- TLSH
  T1FC62A4F867D4C16BEC4D1F32F8FC435027B0C1519F32C76E16AE107CA8BD689A921AA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Crisis Response_Data/Managed/UnityEngine.PerformanceReportingModule.dll
- Size 6KB
- SHA256 dc76d8ba39c29d0f33b70281761b18fa355222a0a678995b712371cf8e1bd8a2
- MD5 2819045802cb0a8653cc17b7debb564a
- SHA1 4bfd7fadf257ab95dbf8ed57cae7fa513cf2ac6c
- SHA512 4aa9d8c9d09e9e636ed16b54ecb4c1dd70cfb64702525038b48d74e652bde68148f9bddd9883f64dec99ffeabca1918d153455c924966df1d719f0acb3e67c28
- SSDEEP 48:6hq9I1+TtCYiL6/FScTs6ubRjTijTByEVu1C/TI4frAYx6bVID7n1HOO48nqnztE:UsIZyFTsu7QbM91HZH07r
- TLSH
  T11AD177F4BAD511ABEC59DF739479838139E0D423CF36C529079E21B5F4390DEAE21AA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Crisis Response_Data/Managed/UnityEngine.Physics2DModule.dll
- Size 75KB
- SHA256 2586a0e1c7711168fb648d656613389e2dd377764f04e3e0f3dfada23560e4d6
- MD5 775352c2b92436fe13e101fdc502d330
- SHA1 49cfe0ffed8588962de9277e6d3c1a4ae249c9a0
- SHA512 8212412b6ed8acd4ce1024c296be5e26f232682722c3ccda057f24359d98838773f2a22e904c709124be8bd0bade38052a13b73979a6c56d6029e81fc59553ff
- SSDEEP 768:wEP95Vxo3lMaO8SL5VLEbMJaSY3+9vbz7vbz7NGTolEEEElcU+RP28RLpiu3WolV:wEPDro1M8OvEbMJaSYLF2fQEDcm871h
- TLSH
  T17173B86ED7A2946DCB3B0338E8F10631B674C1542683D7CA7375A07CB99B3B856227C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Crisis Response_Data/Managed/UnityEngine.PhysicsModule.dll
- Size 67KB
- SHA256 7d1d1bfda7c591978a417cd78d6d569be2cfb81184185b15ce9346d54a6e2c92
- MD5 7f15cb8bc19b3073ed9abdd27de6bfb6
- SHA1 63fa820eabff22435726cc26510d4729c0b56523
- SHA512 9481e245db8b1ab32ddde67efdc264da444360a6ef2104edae472f994d1efcc2d349c9de5c7900bb3c6a80e6470012e8feccdbb76ffb01350ee432ab8afbdcc4
- SSDEEP 1536:BoYriDf81a/8f/sPcsbD77VKHG55/1L9dYH2NL/f6VuU0ZUwxv3UG71W:B5riEa/qErBjL/3Uwx8GxW
- TLSH
  T15D63B4CCEBA2E41FDE5A1631E8B206A05134D1147393DB87A9B860BD74FB3D853A25CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32