aaff704ec31f7ff6f88ccaa2966347e6f2bc4baa4c83f0055adbfa1f38e7f333

Sharing

Copy URL Twitter E-mail

General

Target
aaff704ec31f7ff6f88ccaa2966347e6f2bc4baa4c83f0055adbfa1f38e7f333
Size 1.6MB
Sample260802-yscecsfm31
SHA256 aaff704ec31f7ff6f88ccaa2966347e6f2bc4baa4c83f0055adbfa1f38e7f333
MD5 ffc3305f40edf6f11570c97a966e9e11
SHA1 0b3be31ad7d3fae062977e024e4bc7ee78413c11
SHA512 f1047e9ab516983d55d11e04119f0acbfcfde2b48b24ee889a5646ceb83ffeddaab82794dbe27fe7565f9492e79422c8a1ea7d1471c6b2b69fed28f837ef67c1
SSDEEP 24576:xIJK9CqxxkXkaiZ2g7Zkh0mKsmWoyDKkvYfNHFpU0Ff0ghrNsvh2VnuuQ6FIc9ZJ:x6CWXkrgVritAYfLpmYNyaDFIqf
TLSH
T1EA7533E3907439E9C5BE8BB1C34CBB576CA86104122FC83567A0155DD7B26C8EC6DBCA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Malware Config

Targets

- Target
  Engine/Binaries/ThirdParty/Steamworks/Steamv153/Win64/EpicFix64.dll
- Size 625KB
- SHA256 daadcd0c892dd11be41162b604730763e66658fe4c3726d7d908cfeea5cc11a9
- MD5 79b11a1ce9c00ee904950a1ac3e367b4
- SHA1 8702588b86c9fdd30db08159bce9f8f51f865239
- SHA512 d86ee5721a04469f4972b4e06136d40b560e7e8504c68e56414e2455713311ff22004f80a72928535b39e784251842082e7c691a2a9ba50631f4a16d86995947
- SSDEEP 12288:SbZPJJ+5utL89CKkRPMIVO5zw+Ax+FZYsp1Sj9wK1QZyKIg:Sl969CKUMD5ix+FZ31GF19KI
- TLSH
  T1ACD4D09B33980DB8CCA7907C8E5B9A42F3B278160751C6CF17D0563A1F677D5AE3A620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery execution
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  Engine/Binaries/ThirdParty/Steamworks/Steamv153/Win64/SteamFix64.dll
- Size 1.4MB
- SHA256 f1cccf1e67f6e442fb7612008dbdb3143c0132f6d8656a700e1bc4bcda6fda1a
- MD5 a9b5b64734caaa251ad55d9de46a958b
- SHA1 dc12973e37768ef66fcfda1c9da2a62e27eba421
- SHA512 655a6e8e7d02c89d4713110fd5faebe8b69c684df53bb11c95ca1881bdd46f8f22278c494c9f0db55aa287311aeefb8c475c07d27385591d46e80b10ea3372f7
- SSDEEP 24576:q8pvYktloXtZNdzhcq2zS35qp2g6ygjChJBskbtvOenM/FywNfHC8pdO:q8pvYcMtZThvWL6CLBsUtGen+FywNfHY
- TLSH
  T1B4658D1E75D20BF9C83AE1F8CB579542FBB47A420331AEFB064409652E76BF6963D204
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Engine/Binaries/ThirdParty/Steamworks/Steamv153/Win64/steam_api64.dll
- Size 282KB
- SHA256 cc32880737a500b77ec7a3de1d743734a3c94011ffbec06cd14b3a967409db9e
- MD5 07d2c1aa28c8f2330c50ad7da3b8de0b
- SHA1 e71d787630b4e29823fa7da868fff929b7625ccd
- SHA512 e71357e7e1acd71af480b55678addf55267bc95f2d63ede321e22ecc4e56b318a99076c8a3b69e0480b3601905fae64f71c088df4ee775672a2285467a1625b1
- SSDEEP 3072:WjTqkh2mB9mkVi635gRaeaZqk4YJDf32uB+rJFC9R+5z65lhTbCz+hnv91vFAyNN:ub9mZOB3Zx4YUuoaRRFAymC2CPz
- TLSH
  T1D654397AA2710CF4D076C13A89561E0FF670744B23629EFF2A6053369E676C21E3B791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Palworld.exe
- Size 178KB
- SHA256 6f7b1484cedea033b6f2ebc17ca86e52428121affb82cd8e93c0cd46436878c3
- MD5 9c7bb7132cc48fc31806f8f3101c576f
- SHA1 5ee2712afa8de184e888dff0e02fa447fc020cc4
- SHA512 c9ba4634acca6e24bc84b27b4eb3cbe72689bddb0c6289d5b5480424168a934c1429c04ade91808176c303466de71868425d6210a596224458c71b85ec0866ea
- SSDEEP 3072:ro6veDO++M3Qf+2vhDOSmjIZuVgNkCS5Bn0j3Ocd5vE:8Ik/+MAfNhDxmHqFS5Bn0jE
- TLSH
  T1DF048C0BB3E131F5E077D63488E1054AEBB7B87107609B5F079446AA6F232919D3EBB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  喜欢的点一下关注哦.url
- Size 91B
- SHA256 18a330119e8ff3f27774eb363b90e5e7607b01ee2aebb3d526a7455dc24709a2
- MD5 9c982ef093bd8529b424eca23f13edd8
- SHA1 c1ca8e0aecfc6cad37864e098dedeacd1a308b63
- SHA512 06aba5108cd4b7263f31bf25b80d3f7d54c9bfdaa71f51e2b6f44bf91dd0818ac6f2da74508116c1f7e774def542d483e28c8b299c5d01b2b86d6a993f8d311c
- TLSH
  T131B01243011460E9C59940885101AA884C02537890D3C581C155CE14989D07104C930D
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10