c5704df120144f46989d47b4ae187d296e071a023c02b91d0b8fe3d94a8b44ae

Sharing

Copy URL Twitter E-mail

General

Target
RoyalRenderings_S650_Mustang_v2.2.zip
Size 729.7MB
Sample260802-vy695sdk9s
SHA256 c5704df120144f46989d47b4ae187d296e071a023c02b91d0b8fe3d94a8b44ae
MD5 8075ead560278346372d31ada6da7b7a
SHA1 d9f529cb641c392cd794ac0c5809a49c358c74ab
SHA512 993418f66ffda31aa6c192d9e2f8e89727b4420a6e1e39f56656a38ed6c8bc31c30df08529b201367ccef081f68f6c410e684d9838e987c1d763eb9d45d1f296
SSDEEP 12582912:nnckMqKgfkgTf652H5SAt+zAC/FglGx9N7n9sd+opoNremmAkxgkYElhbKEA8x7R:nckXKgfdT6isAt+glGxyICEGhbKz8x7R
TLSH
T15A89334AD0999D19E5B7953988B47E4443F0CA36B342CDE7316CF5B09BF26D02A3938B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  RoyalRenderings_S650_Mustang_v2.2.zip
- Size 729.7MB
- SHA256 c5704df120144f46989d47b4ae187d296e071a023c02b91d0b8fe3d94a8b44ae
- MD5 8075ead560278346372d31ada6da7b7a
- SHA1 d9f529cb641c392cd794ac0c5809a49c358c74ab
- SHA512 993418f66ffda31aa6c192d9e2f8e89727b4420a6e1e39f56656a38ed6c8bc31c30df08529b201367ccef081f68f6c410e684d9838e987c1d763eb9d45d1f296
- SSDEEP 12582912:nnckMqKgfkgTf652H5SAt+zAC/FglGx9N7n9sd+opoNremmAkxgkYElhbKEA8x7R:nckXKgfdT6isAt+glGxyICEGhbKz8x7R
- TLSH
  T15A89334AD0999D19E5B7953988B47E4443F0CA36B342CDE7316CF5B09BF26D02A3938B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  art/sound/airbagDeploy.mp3
- Size 122KB
- SHA256 b667b6de6ae6e298a7f79e0bf51ef5d5139c1d0dcdf47fdcdc6795b817fee143
- MD5 d552ea601e9c0a5f1de05676be89e473
- SHA1 684835e1e9976aa605487e87c4ae89a7132ba25b
- SHA512 f3db41800fcd2b40ffd771470fc7f10b723c6dddc1575f316517641eb2982251ffe8a8311e4e592d11b73094ce1efe20a4e75bebf0afc1edde513288280c9b91
- SSDEEP 3072:igmew8FGhp/wCwlmM1oCmTuizvUt10BpNqc:igmew84p/wAMaCma4v8SBGc
- TLSH
  T13CC3F173ABF47547D48CDF3AA269A351AD376E6B3D2D1086B400B651DE31392DB0E224
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  art/sound/blends/Redknee_Mustang_AftermarketEXH.sfxBlend2D.json
- Size 3KB
- SHA256 1a40a1cb063f2bfede19022b0ed6534ea908b86d8f7f69513b3512ef5577a226
- MD5 d163f5ad71edc432ca67181664d25cbb
- SHA1 366264ddafe71233a5c0b155f41f18c78ac1009a
- SHA512 797014589f5426f4a332608d02a6687182aa39a861ffef8b85f02649258cc0d6d8b3c1ef0d3ed74bbbb9fc4fe8deb48f4eda76b2e1bb94dbf87142c68636f742
- TLSH
  T120614B97B1A588D42386133C906B2F4A5408131BBDEA9D5B67BCBCC2473ED4A9730FD6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  art/sound/blends/V8 5.0L Ford Mustang GT 2019 engine.sfxBlend2D.json
- Size 4KB
- SHA256 1afff2202d8d5f831ef900af306aafec96ab5135936555b06d1f632b333f6388
- MD5 c3d1c46dab59ee5c1e92e50df3d95350
- SHA1 1d7316adc36d536efc1f9741c273cb4b0891784c
- SHA512 c977a6cb582d44419d11c169cdfec1bfe7573cf6f7d066e42a0f63e9f859cd1062be2d8652ad523cf311211941462d214e04b6dd33f1072dacd980723ec5d8c0
- SSDEEP 48:FRRTd/1dTIhcJSxMS4BQPTh+pqSLSY3b1dSApTd/4AA55qTTdre4kCzFk+WEcXdb:FJtRKhjSg7fBj02
- TLSH
  T19D913462D284CE78257C67FBF5A91BC9872C48311F0B8287A1BD885917089CF7F26A42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  art/sound/blends/V8 5.0L Ford Mustang GT 2019 exhaust.sfxBlend2D.json
- Size 4KB
- SHA256 2de7f8a12eb933fe4d6c70889791b5b948b4f877678ecf58c2c05f634b857720
- MD5 a5053f663afe66be0dca3faa1d51e420
- SHA1 a81ee20ce280b12882d019fac3bd1d9617275b62
- SHA512 ba8b58d963881b24284905eacdd8314f6723e83679fcef509157ce0eda3aca400738612371d1d6bcefbc1551f163150e122cffc2420a40ec2fcb03660fd8cf75
- SSDEEP 48:FRegTy/fTvLS5/0sLWVVWh4Shhz3OSC3mTy/vLJ6+/M6k435HX3C0SZoJu9/aqjF:FwpyTho1+xjF
- TLSH
  T1B7A12466D385CAB8163CA7FFB1B51BC9832889311F0A4187F1ED48595708ACF7F25A41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  art/sound/blends/V8 5.4L Shelby GT500 2007 engine.sfxBlend2D.json
- Size 3KB
- SHA256 56c21186bb0a39413dd7bcd1829e851d02a106d7c5993dee7e85086c37e30b61
- MD5 a8e220dad4cdf71f27761feccbfaa14f
- SHA1 a80fdc650262acdf37a1cec78899172cb0e89300
- SHA512 1a592d6cd50a6663c1816bcd0727ae107f1289d4c317ef41581e95905831af10217e4d81a9002d03a81955b004f73e5c0c4b647b51c9660053280f75c594e36d
- TLSH
  T10C817790D0CCC24878EC77F3F690766E994C59132A0ADE44C974D972EA5D0BA9CA4F78
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  art/sound/blends/V8 5.4L Shelby GT500 2007 exhaust.sfxBlend2D.json
- Size 3KB
- SHA256 5d023e67893aaf296055d22dece17703b75013528166d4642fb2fcc6f157e128
- MD5 21bfb36a9a9f98d62c7c44c879014927
- SHA1 35fdee0a33065c17fc5d0922a2652cced8e56f5d
- SHA512 58325da0135c11f03f4384c598357e4c4583ecc8951a9d20c3af026b931e1b66a6e8c85cb19b2da5c0d17b7a9ac367d6b2bbe124f024d9170d287bec5d231963
- TLSH
  T11C71B994D2CCC30878AC77F3F1A0656E9A4899130A09DF48D9A4C871E79D079ADF8F78
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  art/sound/engine/Redknee_Mustang_AftermarketEXH/Mustang_AftermarketEXH_Accel_2136.wav
- Size 220KB
- SHA256 66549ad84157ec670693194fda9a8f89c01d93f97bba77f772b24b7e54f11935
- MD5 846cc3ec73c067889a4bfce368a882b2
- SHA1 284d88ba6b0f98b88f97907727cea564b88cc792
- SHA512 01c5fc416c2f58a8beeb2d6fdf0ea370deb0f24e48747b21bd9412715341d3529432bd0930c0d864d2ad7f03ad5d44bcd7808e9329d259a87315bdba2bbcabb4
- SSDEEP 6144:Mzh99iDDA8Ja/SULUDEyP1rs5pzHJfNJG9imY7sonUrtFT:Mzh99uA8w/Lz4sPzHl6MpiFT
- TLSH
  T1A624ACA2D4830B5552A352256ED01E500DDEF88CFDBA683FA90ECD65B307721B661BFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15 behavioral16
- Target
  art/sound/engine/Redknee_Mustang_AftermarketEXH/Mustang_AftermarketEXH_Accel_2199.wav
- Size 221KB
- SHA256 7682cb90717fadf7232eb466edcfa07281020ff1b04016cdd8b45e775ae8a77a
- MD5 a7433cafb1611bd3c154024f1efba752
- SHA1 63af6a30a71254018e94646714589315b3020b9b
- SHA512 8afb91791a7cbd349f19ea12a999e763d1aa4e8c9cd92865f9c8d9beb63cef31ed179be13245ad803c868b84669f611640f492cdf1f5abc41031a27d1d4b0c01
- SSDEEP 6144:nNMcB4dudLJgK3DhCh6xHfbIYL2rbeQIvI0k+tI:nOcB4dCLJ3C6xzIydQIQ0Hq
- TLSH
  T1AD24AEA1E4930B5122B342395AC02D541CDEF849F8A6397FA94BCE50B353720FA75BBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral17 behavioral18
- Target
  art/sound/engine/Redknee_Mustang_AftermarketEXH/Mustang_AftermarketEXH_Accel_2608.wav
- Size 221KB
- SHA256 35eb7b093a19d945c4f22ce004e52f526a1def2016b3f90b7871a21e95fbeb9d
- MD5 cd4796f724ba217ea80709a134fa9aba
- SHA1 b140f7e8022d7557050473e2e1d45bc9b5d4c5a3
- SHA512 36519d68666ddc285cad75b24c42916288fbbd0243a1c7f464fdf3e6a4b8cc8964e195eb44020fba4bebe29ea736efc5a27eec2f5c2e24d9f4264f72452c53d3
- SSDEEP 6144:IwHQ/u4oMyZ/HoRIhQHlU0d1kIq6rl91/xNJ8tW71mB:bHQ29pFoRIhQHlXOF6rlXxN64IB
- TLSH
  T18C24E162F5C30785247302399D8019610DDFFD0CB8A66AAEE95BCDD4B243720BA757BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19 behavioral20
- Target
  art/sound/engine/Redknee_Mustang_AftermarketEXH/Mustang_AftermarketEXH_Accel_3003.wav
- Size 221KB
- SHA256 31cf8144b26ef5d497a13b6cb12099992c8d04ec5b37446858fc03a16938a581
- MD5 7b249ecc27bafde31b40f8db6a98cbde
- SHA1 037675a2879656739e36764524f7ec30cc565f7f
- SHA512 889fd34d526e48f80695c662280b07cd7bad620b92cf8de9b4b265b1b20b5b18354b8d38bc96923dc1531d555f39d2f9d05a5d9fa5330a7d3a1992d94ebcae80
- SSDEEP 3072:TOYEdx5Wddj/aT97kXTEkFk557P9xeF8YQ2iLd2OxLsx9xWyzn0mzcCxse+LHnM4:TBEv5WDuT97kDhkH22BLm/st9
- TLSH
  T1D924F232B4D20E0916F28325D55029A01D9FFAD97878599EBD43CEE4B343360ADBE79C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral21 behavioral22
- Target
  art/sound/engine/Redknee_Mustang_AftermarketEXH/Mustang_AftermarketEXH_Accel_3420.wav
- Size 221KB
- SHA256 bd72b184ec5b9302bd48f0cb921f2d00bc1706d2e3c84a952d0757406f4714c5
- MD5 d76d9fdcd0dedebeda1950f503ffee45
- SHA1 8a406b9b12d9dc2867ec30f39c3290ffdd8b8cbb
- SHA512 452bc189bf8f752db6bf021db11e0369e2b75b2b26196f3403f94d09466784e27a6a9acc03460acf7ecbc085fe2e5ab585f7e677582b02e5f087c85f56dfec84
- SSDEEP 6144:UaVWwVzFTPy7j38BFfNxt+kbgCr/xGPWUPay2E/FAg:XpzFTUABFjgQxGPxiy2EP
- TLSH
  T10C24F13175D24E4A16AA837BE2A039500D5DF9C894BA355B68D3CFD4F321740E87DBAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24
- Target
  art/sound/engine/Redknee_Mustang_AftermarketEXH/Mustang_AftermarketEXH_Accel_3804.wav
- Size 221KB
- SHA256 2646236101170a1f1d0b9399cf74e6f34811e7893440a303e8a3e5363ce75e17
- MD5 417c024c29f77b21cc960eaa9ddfe218
- SHA1 e8f35811761256ae3b29a1734930a332483decf2
- SHA512 3a1d05facc53661e3b1cb3ebd737128f4424c7e7549444b330e2c015fe54abbac3cf89c1368bd01f87d4aacb688737af3fb9c83e8ab1cec330db89177cf4efdb
- SSDEEP 6144:D1g7DAW6V84WnrnkJIA2jl/NqRyv0y5qpNF6Mla6P/9:D1g7DAW6VUnuV2RlqW0y5KOiJP/9
- TLSH
  T1BB24F13171D009062BDAD3B6F6902ED4597AB6C1E8FD724DA9C7CFD4B222B00D86DA1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral25 behavioral26
- Target
  art/sound/engine/Redknee_Mustang_AftermarketEXH/Mustang_AftermarketEXH_Accel_4207.wav
- Size 220KB
- SHA256 ac9e54a10668926e7d44febccd76c38714df6d8ffda34fdc6bd95947e7b10df9
- MD5 9df62b2e8213778c9a4d2a1ddcd41e14
- SHA1 7e01cc5a83539b29731e2358b3a6a12049264fd3
- SHA512 4ffcc2477c910874449fa94f6af0f3a30be4bc725acd82227761a11b7054353faa37529eeb38deae9922c7e0acd75a7679c4def9ce6dd36dd9cbde6e51e169ad
- SSDEEP 3072:ErCZHAfiMlUTrD1LvX54LJOnAqbNB3o3vywwY6BvXDOQ+9o/an4SPlaeSjhsfkzf:F7MGbt3HnZmACQ+G/a4SPQegAY
- TLSH
  T19D24022179D2894935B3C332D49129441C5FB1CD7898665EBAE6CED4F053A20CDEEBEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27 behavioral28
- Target
  vehicles/sdd_s650/RadarScreen/Radar.svg
- Size 3KB
- SHA256 7f8200314831c1f999c1098452a957ef9048572f524f178a5627c170c56c0569
- MD5 9754d5750264c63c7c5a3e0622755a69
- SHA1 bb52e83bddf76a2a9399d32af776851d47e188a2
- SHA512 c0834f566a94fec187de2e50d445bc3232e7e6a7887b7793ba03b880d7673b8c2f27b59771a1acac053a98c9fe4068e6ef6c11b35a10e6438ae57b8c0b61bf90
- TLSH
  T13971007B23BC693BA0035799D3C0D7D772A9B4A6E31B5AA873E031255C12CA71C3561A
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  vehicles/sdd_s650/RadarScreen/radar.html
- Size 13KB
- SHA256 a2cbc52ead9a914a463924cfadbd07d1e2df5b8de0b2a281910b6032196563f0
- MD5 d1ce740c7674508a6023eb71710f6296
- SHA1 4667df8932e62008d9552d618641817836439c89
- SHA512 ff6bc125801108d3f2c58bb4fbf97967acabfbf87f53e97b2d2081dccb4df42e2313330c4f8e910629a171e3802cece83efc295dca2dc0dca63ab6129749329d
- SSDEEP 192:/h2hzxj9OJCMkxkudNrLsi4iFW2iQi1xWk7vgGeq2g2IirLiPSHglv:/ATVkQsi4i3iQiCkivi6U
- TLSH
  T1AD52952E33C8111685367376D7A3A286EF35608BA3034150F90D930B2F7299A557BFDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32