6a63acb92f951b5c103a8981b9618ce729b35c908cfc07f06148ac9024edf1cf

Sharing

Copy URL Twitter E-mail

General

Target
CRTemulator-AE 8.2.zxp
Size 45.1MB
Sample260802-rrm15svdlc
SHA256 6a63acb92f951b5c103a8981b9618ce729b35c908cfc07f06148ac9024edf1cf
MD5 2e9d0b573a738be26febf2c93f99ce41
SHA1 7e906bf50bbf9f7b79994a2fd1680717f889d93b
SHA512 632470a3217fc4b3051f21aaab8874728aea6668fb9bd814bab6adbe493354120449b1337fd4bbc1b2f65c8b761f68c21dc0a7573df082ab55063946348c3707
SSDEEP 786432:lfkjtNsmbpAwPGG8jezcK21RG7cJ2NIG838mNhuCWJ6Al7mC32ElM/N+O0AuYQj:l8TbqwuGoTK21088IGY14Celibf/fIH
TLSH
T11AA73392D952878BFF453C2297E6690D8E12388A64D52AB2741C7186E3703F0C5F7B7A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  .vscode/launch.json
- Size 502B
- SHA256 77bdac5e990f217f170099388f4a085a0f13252dad9786b26a9f4e1e8f1b0305
- MD5 06d01835e8949506d1f65d0f9fe4f3d7
- SHA1 caddd325b7ffb57eca6cd2d3cfc29b1b8330e95c
- SHA512 7de5b446d61d7bf1e81cff7564c25683195a7f26ce776d31540becb9d4befad982e521e4b39f658bb961c73d581b2e058c4bd175ad3a7cb2e0e7223375e56173
- TLSH
  T16BF055B789045E170AB1A789CB249054FB6252CF8044880FF43FC2190F309AF2AA2389
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1
- Target
  CSXS/manifest.xml
- Size 1KB
- SHA256 1ed3cb1a34b481ee124ae458c668326d786feb77457b5ff1406721a63d562c6f
- MD5 dc1e63a6d1998d683e390bda2e9a2758
- SHA1 8eafcfec97bdefca71c372a94b154b9f0b77a0df
- SHA512 7d4eb82664f55623567944adc236fb34f03e4ab47bb2eb769367e76f69dc0371b7f1120fc24b23378245a81c9778a59a41db21270b19309708161f229cce0057
- TLSH
  T1A221E05C44EDAE34C0ACA56BC3E9600837FF9E6C50D8719CB1F7263314EA2A80310760
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral2
- Target
  META-INF/signatures.xml
- Size 11KB
- SHA256 d0e245e2c096afc5ccfc0d6fb522fb1dd4467c4e48c28acd4471792212aa0e28
- MD5 5b75416bf9bc8360d17fcc2d8478527e
- SHA1 744e98453a7a604ad760341650a36449f813a644
- SHA512 b9b305dbf36e911aae51f3ce76efd32a426997ebbc9758309cbe8226b0e28d5eaab97f683d878aa6c0978f1dfd80eb373f54f6f7184fd6395df9425e30e109a8
- SSDEEP 192:dBD+lbTtq0CMqrMFYyrU3igQzg+0j+bh9r4bKw+ZTsB4OVG+CJaIWoHCAUt2Jpg1:34Ptq0CMqYFYy43igQzgPj+bh9cbKw+y
- TLSH
  T1D432712C98DD9482B236A9692BB7C38968CAF777C4BC774A5DB0061FF440CE15076A3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  css/styles.css
- Size 16KB
- SHA256 ff8f436908e1ce70f6853755b4687b1210bc8578156ef0892c6207509d73f323
- MD5 8ecf81fd959c923e05005ff8d59d0617
- SHA1 694b4e8397e0b38ccf41129b04d46f49ad03fb96
- SHA512 3a159e0425e279d3379df653abde6e22d6867c87496c2f0dd85010d9a4f2e3b2f7ff916de33d0641677d875d88054bd887ed56dc828cad3bd3b11f30b5ae0b49
- SSDEEP 192:tExgHp7QWo21MH9vY5Wz6xArDrXZPDuxsg6k31+7DyTpVdrYLF75:tEWHp7QWlssxA/ZCxb31+7TP
- TLSH
  T10A7263505E926624B213D19C1FD88B46E72EC003EE0F0D2A7657747DC3CA2ED55BFA8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral4
- Target
  css/topcoat-desktop-dark.css
- Size 80KB
- SHA256 331518469ec4f59624dcfe27392a8ca8eaddfaba038048234e09d0df07b59f32
- MD5 b05f73087071608d9a51c491500ff0a2
- SHA1 a06699be2a414a53b047c5f15c7e67bc2bec4c23
- SHA512 700329ded0d4a9a4b53d202d690291b22c4d72af8b2c3eaca36bf152dd290391862e8cd9eedd7c57eab1cad91a1af3a37b046baf4ff578f545fe6f683a7132a9
- SSDEEP 1536:5B66LE66+fEA66G6c6a6F6z8i28QzJ626voQoR6V6b6s696/6+6Sav6l6Bu:5B66LE66+fEA66G6c6a6F6z8n8q626vI
- TLSH
  T13183C8B42D502729338086617E5BD6877326E0E0CC4FE7B479AA40F54FBAD4E01AB7B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  icons/+.svg
- Size 1KB
- SHA256 3dbee7065b6be92c7ddcb2c5c4b507596168b1ca655136e59aa3333d2da9180a
- MD5 3ea0548935e9316c0c3b563769e629f9
- SHA1 6a378923a780f6cbae904c469f54496f2980c354
- SHA512 52e2272670ef33a4cf0fc1178b9dc43fd92bf3ea6ee5a6842429162d3d042aaeba0ae2557b6d650a69fc50484b24b1d636d0f37779c08529e85fb2148d5aa595
- TLSH
  T1203112F05125F8C39907C379C72855E2B22A38F919C546C0A0947C52FEA477EAF08997
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral6
- Target
  icons/-.svg
- Size 1KB
- SHA256 24f3c9e399a3185d775caa95994b535519cb9ae83a9b9d17a6e015399604bdc0
- MD5 fd6214b28035e1705dd4dc710e465a20
- SHA1 c9382050583dc588fe4d20c2446a7fcf053f6162
- SHA512 788f91686e6476e637e12ab605d44a40c6318bc28e79e3e95ee8896a1e79290d9ab164a5f4ca524233fc37990d5ab2a2075c197846d62a4dc32f8a00176052e5
- TLSH
  T16A21CE913579E8C01947C334DA2A86E3612F386E5ADA0780D0D4AD80ACE67BB9D4C8D7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7
- Target
  icons/Black.svg
- Size 22KB
- SHA256 bca8f5de73d16472e2fa9b8a691ce88ad67fb3160fcdd877296a1fb66b495f94
- MD5 0a4e546fc0fbf4927bb913d9b8708890
- SHA1 f3c18429597539e4da2305d041e760ae7ed2f6c2
- SHA512 e3e9259b63b63299f57f70d96720d53013855f9552bd7bdb4bcca15c98d2ecb9af9aa54550ec6942905b6d4529b76b5c6cdfbf94fc4ea7254c0328e6e4d762e0
- SSDEEP 384:q8XzW3eZ569NghP0qOoRQfttgJamZHEKqF1pwYS8n0o9UqA:3550W0qbRSgJagEtPr1UqA
- TLSH
  T1D4A2E0AC692FF9D5CC1B10C33A996CA3592261BE412AF789F48C3841F061E6C4ACBE50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral8
- Target
  icons/Play.svg
- Size 634B
- SHA256 0c0600a19eb56a2ef086fe80b3587308a84586942fe56be13960bf33aacfbdde
- MD5 3cf459f24375b70f2cc1bc94b71ceae2
- SHA1 7ebac592e153db6a473427983012cb66685ce14d
- SHA512 e72e3f5a9b4c1297fd0b97af3954535f2f4696aa793eb38dc0fde18c1423da11575932357349ca088eed3e8b2ec871db1ec872c7f9e439d08d9b3096177b9c86
- TLSH
  T1EFF008E447CA9D7D18604A75D375B3C3633060C6C2454ACC4597397BE1299B60355674
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral9
- Target
  icons/Refresh.svg
- Size 1KB
- SHA256 0c9373fac54942cf157195bedc2a1dba2d6a35690b57b0db0e4faeb89df559e3
- MD5 14e79b57552a06f724b7c7ce19a19fb0
- SHA1 bd1e1b05b4b098e8e18967db9e43815686db3792
- SHA512 d36e6a501857740453c079146d91851f796e2da7dbf2bfa88e2eef59f76a58f1ff7ffc72ecdaea8bf1ba9a0c20f6e92632fa46fb3ef1a589ed7ade798141b178
- TLSH
  T1BA31B95F635C8A1C784A0284957632D323E5E9C78286C28CF3FBBC52E4551B70668FEC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10
- Target
  icons/Transparent.svg
- Size 21KB
- SHA256 5a12802ebe65cc445b21e7dd0a5a757507b30c01e2e4a6e964487f423c85cb8c
- MD5 a0ff76ccdf7d79b24186932b5ffdbff4
- SHA1 d4ab85d94e29a0e8c263607558962b3b8e5af441
- SHA512 4104dcafb6da077af738d6d4e08b75609874015af3cccc4326c5561265fb08b34452ee5e7e5a1136602c88609ba4829001e47833f9c06cb974d804d114057fcc
- SSDEEP 384:q8MzW3eZ569NghP0qOoRQfttgJamZHEKqF1pwYS8n0o9UqA:C550W0qbRSgJagEtPr1UqA
- TLSH
  T1EEA2D0AC793FF9D5CC2B10D33A956C935A2261BE416BF789F48C3841F061E6D4ACAE50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral11
- Target
  icons/check.svg
- Size 484B
- SHA256 84bc91ce63d07a2296b63a35122ffde90483b6adc60418f611ff51bf75070b37
- MD5 010c980010ca9085f5f89eac23ddf9dd
- SHA1 cb600f3ef5690ce9438ccca32d515279a07e7a8b
- SHA512 288be268e1ccfb2bb845d92e6e064120534dbfbd51084448ebc02ca26c78e3bedfd1f4c31979e60a453b65feeb238a0b7fcca54b8f5bec70ed1cf4569808dbaf
- TLSH
  T1BBF09E6613548E90DB458330EA3D54D7701B74B57887D014C6C16A6DEC28197CD4C63A
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral12
- Target
  index.html
- Size 4KB
- SHA256 8186af986090eb9777269a7cfc8a0f4d660d629ca646522b98a844a54aa41535
- MD5 db18ff1ff9167c9da80420b1ed932d00
- SHA1 2005242afc6619dd78e06060c988b4f39e945958
- SHA512 b27cafd58ae51259d802bbcc23e907c203724cde7f7031fc838426c15875739dc4cf64f685f7d86f747af6cffee980865158f6ee7e37be1b45504bb1e7f8df97
- SSDEEP 96:uuohShegMF8j6u+j+j0v+Jb2IP+V9+pHp/v/2O:uuoM4g687Lv/B
- TLSH
  T1E691A944428D4C3B612301DD26BB9B4AB9EF5E34E72688D3B1FF0E7612EFC44A906565
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  js/libs/CSInterface.js
- Size 25KB
- SHA256 fa51e15f84567e88324d7c129dbe9c6ceb296a745657c442d629ce09a066e8c5
- MD5 6d433bb2a76870a004e7f7e4f729d364
- SHA1 d58e859fd1c55e6c8cb547ddb858b22ab8e9b621
- SHA512 fadb769e4081f75ef329386c06b7b18e2f95c4d87e726afeb1c7edf2d58e76566a4891db0e7657cfed1a1faa5ac9c27fb3231ac8af352bb874c6046dad9ae639
- SSDEEP 384:SmaiyLhCc5sEVPx8UMUyWjKdsEmuQt60VLhy68MjRG5piKI9/8i7k3:paiyLc+KsPLj8MjR/KY/8X
- TLSH
  T1FAC2B74A698A4632812761A99BCF45D46335612F3133B45C34DEF8A05F8C9FA43BEFD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  js/main.js
- Size 4KB
- SHA256 d5b824700bcec54e942061b6c3a68249efa7a19566f049dbcbf777957537bde4
- MD5 2e01c157bbdf05e1157f9337cf7d416f
- SHA1 3248192675d10b96786599ba9359365132014827
- SHA512 05dcfef16da78aaebe0fbdb37ef5e805607e45b74ed8f64be0d74df664420608bd1f6aa7907bb1246b82a646343b4fe0452200d74a406a998af3fad9383c4b4b
- SSDEEP 96:ii4dzNzuz5uyCK+E2gnUvDsVninxQVb/mZKmi2o9jaUsdjEEzhvnx:MVu1URbgnLnin24Qb9a
- TLSH
  T1CDA194AAF31C2539A0A73166827F66CC347E003A58049C977C28D4F85874DDE51BBED9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  js/second.js
- Size 10KB
- SHA256 6d95c6d29044db5416ebe9a296bbd3aa5e8dbc8645bec787b020ae0e279fa3f9
- MD5 23622b5510d458c6fb4ebc5f05ea5fbb
- SHA1 1ddf83cd60af8f57be0b62bf9d9db6ab52f6980c
- SHA512 9f168b93da53879345abe7c44ebab5f0d9c4db0ba0d86f59d1d6d634fd4a642f8ed6e87f48105234f222315fbdeb66582cbff360e884f64c4c6c73f6d915636b
- SSDEEP 192:lkdiHC1KsmiUriP1I4VxMMiUJq52ii2nGlqI/aacF1HV6bz6GZ2bjGOkgytQRtm:ii+K8xtXVIU6kqI/dcF1HV6bz6GZ2bi3
- TLSH
  T1AF226317FF196C3550F7F436222AAD48F2B800059D066CC2F8CD4C79D669D8A55AFBCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  jsx/crtEmulator.jsx
- Size 115KB
- SHA256 58710c9c90b8270e71586abdc7dc2332ead991eca145dc15e142a1f00e8b68ae
- MD5 d291626547e52f59695a27ab9f27d1d3
- SHA1 3e2cad81851f8df8f5e12d6e8808b2634da601f7
- SHA512 243de467ffe5cc2e058c0a9545bb9027e1044d66f6bed6f9c17f3194f72660bdf3b3057d69ab88c0dade6c72386bac7b7cb1effbe89ca7e530ae1068a2c2f1c8
- SSDEEP 768:/NM2Fl9QQZchnyFx6CUT7jzVQh8ynpym9jAM28V5v6YAHA8:/BI8dC3Zin+0cg8
- TLSH
  T16CC3CE24EE6C5C9C24F0D2181B382550FAE8855B4438EB40771EE758BF7982CDDED6AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  jsx/json2.js
- Size 18KB
- SHA256 29a96887f79c83feb8a451bb6e218aa14c161fd2c1e75e314883aafaa35d9472
- MD5 c88c72230de1fa3c701187b8afba5e52
- SHA1 b7b3d69d9f8987c2b1f5e9d84a8b2c334292c969
- SHA512 2d369a6d90aff5c725ab720eb16f97b2f86d721868cf1e59ed2fdba90c387667731abc7f29f4ac35dae2b15ff278696f8189fb3e6fd78d85d6e07c0381512a5c
- SSDEEP 192:TawLXs/Beme9TTAKDP4FILZkBoYbsHAR+wOdcBiSfEBiS2QmrXas1cx0mgsyiSlG:TFmIh5ZPGBohABOey8rK+Nigfq
- TLSH
  T11B82810BBED60623051B75649D6E9057AB29C17B93ACF9D4B8CD81E41F01C38127ABEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18
- Target
  settings.html
- Size 6KB
- SHA256 83e5cd88f66576ea522175f5eac4084044178348a9c3c6b1d2ef57862f1706a4
- MD5 39766292d37bfbcc6f06a1f2c0906ec3
- SHA1 19dc70f35660f2fb882657411a4db8cecfcd8158
- SHA512 71d985f9ee9869e6019bc76dc92df2a36d4b58cd4d0d214e68e82a4c2783128921ffd5d4701d35b6e25b037d3d1ac8a608536a5b242944fe49210a3920e38782
- SSDEEP 96:t7+/h+hefdO91FzIaNOmr0yV+2G9HAdxczVQQgUZG9JH9egYR9rjquRPpBPcY:t7+/A4fd81JlgWI7XRBUY
- TLSH
  T16CE1532004F96533615280DA29F18E0BFED9D617CB4B9940B7FC0AD29FDBEA1DD17288
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19