6996ddcd6d2d6134e85c2372345eebd9b35461f0120a8bb1b617b1045e992eb1

Sharing

Copy URL Twitter E-mail

General

Target
setup.v2.3.11.zip
Size 248.0MB
Sample260804-yyhtbsxvbv
SHA256 6996ddcd6d2d6134e85c2372345eebd9b35461f0120a8bb1b617b1045e992eb1
MD5 8c259afc897890c82506edd9445ed5e9
SHA1 ee453d1ef7209d7ba86e2d042f1f97be7e8dded4
SHA512 f2dbca1d767fde5fad6ed6920094e5a3e36e44449516cf98fed66991f0d6b809d928b57fc0c0c7e4bca98a205983c11a65d1d48f6f057919508983b4f93d289e
SSDEEP 3145728:hIYbyP2RSAk8XTp+pBpS/XIpx/Xvp9/XaPY70lMTqMYqTIgx9peT+Sv3:hI1P2sAVZwzF70AFYUxx9pg/v3
TLSH
T1E2C833E94E791028DCD26C3D41092E89FDD48D89B221E528AA7537643A7FDF0332A77D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Malware Config

Targets

- Target
  setup.v2.3.11/assets/cache_27.dll
- Size 712KB
- SHA256 77fec31ae18632ed518fc42a69700d57ff0e39ec341dde4a2bef7d74335793be
- MD5 9a92bebbfaeca828d79a2dcd27a8ce7d
- SHA1 560e0bdf33ad9d7e1319b3509356e57bf9f0aee9
- SHA512 f9c9736f995affc324cf64898b6b0922e4170a21a9a9511b805bc3c11dd57df7947c70ce498231d035e713ea5c74ca97df79e3744d9b66144ee6ba0c73cae050
- SSDEEP 12288:PWhj29uTQvCu2MxlNk5k/zDW1wd6Ykk+NrKVpH0wGmaXkfWEPUyCgg/ITqgPNcnh:UgusvGMxlNXzDWSkDNqp9gX0WyNw/ITk
- TLSH
  T1D5F423AE0DF59A5DFD6B2621D3978AC658060E14DC651C5EEDFECC3085FBC10C543AA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  setup.v2.3.11/assets/data_17.dll
- Size 703KB
- SHA256 f214f8839285005ab0c4c204a69a08b352caedf31ed44069ca0868aeee662611
- MD5 003d223ac939cbd68bf654c08ee3c3f1
- SHA1 f6b82a666c373d217fd18e4265791e161d0b3fc3
- SHA512 b4dcb579b57f95d7bbd5dcf4a86ad6cadefad7dcab26a39ee4dd12b7705cec3db3d49e3a703ba1c2532fe9dabce30a6660f45e9c7da1b76b2ef24a9d569049c3
- SSDEEP 12288:W2dV6XqtqbC2976ESKp+cWvx6ZI3/lH48NqudrJpf5DpTk/xRT0N+rv/dAyUl5K5:W2/6KqbZl6vx8I39HNT1Rdk/PT0Uv1MW
- TLSH
  T156E433C150F90023409853E5DAEBD6ECD28637DE527A9DBB37B51F613BB1326076A8A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  setup.v2.3.11/assets/main_59.dll
- Size 630KB
- SHA256 34e85c1e02622912d816a00ba9b9026314bbe8bfbc83fa9e2acd6ce678e76b9a
- MD5 55cd28134f6661999481580c58fe4bbe
- SHA1 b1cb716a6f47f20620539fd0d5fc6829bd909f6a
- SHA512 d86baecf6d4363b12313b1562ace964a3d4ae85f8bd432e76a733e1d3f0d8593061d263b5e2bd9559a8028584f05ee59d6223a8a9336f00b7ff6394c47775d1a
- SSDEEP 12288:v0tOvZV5tTJWow07j1MI7XZlcIFH0mOuAsjVezccUYbe6Rrks9RMP:vbvZVzTJaMj1dMNvuZjUzXU76RrFRO
- TLSH
  T143D4236F6B7DBF859710B88272F13F0A440AF1484ACA062F99E3F456F4CACD11D55B89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  setup.v2.3.11/assets/module_94.dll
- Size 612KB
- SHA256 853aeeeab72699a7ef27196df33a968e6c1f5deca9ce4875ceeb88778e3e4483
- MD5 4d750ae509e9d1cc5dacaf2a374424e5
- SHA1 5ad269805037a71fe14689615e3e572bd5e5640e
- SHA512 06e5e861eeb1005a0187b481f7d08aa2d972e8c54b68e87f443a5a30e8ab6d456904a1f5a8ab0729bfd088fe67fc52b82550a750d2cdc447e5352355592b5f1f
- SSDEEP 12288:sTd3T/KDihI5MHi0k/oge7yuiIM63xBwt+VfJp7PWt:Kj/N+/U7sIM63xBnfbOt
- TLSH
  T193D42365ED7CED6938085897AF78DABA35189DB9377AF71021C0F2BEA7001287717C48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  setup.v2.3.11/assets/proj_129.dll
- Size 633KB
- SHA256 14b1b3e564f42fbd6116affe20d7f154e5ab1c8080c079eea5ae8c79e51df476
- MD5 5ebaf7803617a157f115dd7fb9060f2e
- SHA1 1ec8c730de1b8ae7226a72e0cc39564bd0fc3e2f
- SHA512 38b228af4edfb3899cb7df1e0b82d8cd01660c1c4a6309f8dadcb4121f9b5a91c937d73e838d2e8bd6e597155578f86794cb2638b9bd9430c3d6b9c147bdaec6
- SSDEEP 12288:r0kou2m6QfjxalJ9Nc7mLd8Njf2gJ8pLIT4pFVy2iPECWazkTXMCiM7N:gkouH6Qfu/CodijegJ8pLIT4D48JHX15
- TLSH
  T1D3D423C09A1F762F7C425A4F6B376C3F353A902C6465168C2BF03466D9C2CB59BB1715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  setup.v2.3.11/assets/record_47.dll
- Size 704KB
- SHA256 215ef122680311d37a2ee99667be27a75f2a4747253a74bcefc023641a8b0d78
- MD5 2339bfd996ec665c4fb8900d256d71d9
- SHA1 36e10648be665b15e1dfc9b264aa6a9f3e1cc4bb
- SHA512 1b670cd2c704943bbc3117b2bae27fd2e70e437b82c53def06980c2590de460a57e9c1bd4cf60efe2c4497bafa6ea344232daa898094d9a8f139454188d15710
- SSDEEP 12288:56ZXDZ1Ape26NkAaeFyG62QRj8muqk+j4aeau2JtIJVnc8q4oheuW3IOg:a8+kTekG1Qd85qky/eYnIkheRIB
- TLSH
  T18CE4331F5E46E76F691CF6E68F3618452A5F402A2EC60FB372B8014F9E4F41E830AD56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  setup.v2.3.11/assets/settings_60.dll
- Size 555KB
- SHA256 1e365bf878f257520257b4a8f09b09d48b8be2899a8dbcbae82f8b4ca549dd57
- MD5 da78e0720c70acd15a797e2b7511c39f
- SHA1 b2bf68a38efa036d0178224282ba1239183dc3ba
- SHA512 46c538d4de47b6b4b9b26d605e878566aed6bbce5eb8f67dd15512b9df5c42876ed5760af2f85675f0ef35397c84acafac3da3d9be1728a89a686c77f6d78fca
- SSDEEP 12288:51OThAFrN1Bhjrbr41NT+eKKwatFYOkUDW+NdDPNWzSrg4OK/NE7/36GrybkJ:POThAlNbhjrfANTFQaPJkUDDNr3Xt6qs
- TLSH
  T1A3C42347A6A3957405F92259C1CA0FB82824C74895B18AFD2376107F96353F378FE8EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  setup.v2.3.11/assets/settings_62.dll
- Size 633KB
- SHA256 c968cb3166b5daa710f5c2cd59262c076599e63cac1467c5f56baf71626c8cfc
- MD5 821334e818ea43219631b2d37b3717e9
- SHA1 dc941fe30981fbcbdc8a0bbd034037d1ff275b50
- SHA512 d432fee1f2bfa4ed9ad84c7e15cb459b2efa4a7dba24680ef0de77019fb3259936e046238277c2096561571c751ba932c55a03af9f1b47c009c9f4ded2708636
- SSDEEP 12288:v4wAT0WDhR7n+0v0DJafGLXj/Om6gI4gDi+W4aE1MVaeal1Y5Zv2oUbp:v43bhdn+0v2aGt1VKyE6bZv2t
- TLSH
  T12DD4238F6851796A0F7AF3481C6ECF5D42BFB02AC5A95A53C34355CF6DB006CB217285
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  setup.v2.3.11/data/assets/cache_27.dll
- Size 712KB
- SHA256 77fec31ae18632ed518fc42a69700d57ff0e39ec341dde4a2bef7d74335793be
- MD5 9a92bebbfaeca828d79a2dcd27a8ce7d
- SHA1 560e0bdf33ad9d7e1319b3509356e57bf9f0aee9
- SHA512 f9c9736f995affc324cf64898b6b0922e4170a21a9a9511b805bc3c11dd57df7947c70ce498231d035e713ea5c74ca97df79e3744d9b66144ee6ba0c73cae050
- SSDEEP 12288:PWhj29uTQvCu2MxlNk5k/zDW1wd6Ykk+NrKVpH0wGmaXkfWEPUyCgg/ITqgPNcnh:UgusvGMxlNXzDWSkDNqp9gX0WyNw/ITk
- TLSH
  T1D5F423AE0DF59A5DFD6B2621D3978AC658060E14DC651C5EEDFECC3085FBC10C543AA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  setup.v2.3.11/data/assets/data_17.dll
- Size 703KB
- SHA256 f214f8839285005ab0c4c204a69a08b352caedf31ed44069ca0868aeee662611
- MD5 003d223ac939cbd68bf654c08ee3c3f1
- SHA1 f6b82a666c373d217fd18e4265791e161d0b3fc3
- SHA512 b4dcb579b57f95d7bbd5dcf4a86ad6cadefad7dcab26a39ee4dd12b7705cec3db3d49e3a703ba1c2532fe9dabce30a6660f45e9c7da1b76b2ef24a9d569049c3
- SSDEEP 12288:W2dV6XqtqbC2976ESKp+cWvx6ZI3/lH48NqudrJpf5DpTk/xRT0N+rv/dAyUl5K5:W2/6KqbZl6vx8I39HNT1Rdk/PT0Uv1MW
- TLSH
  T156E433C150F90023409853E5DAEBD6ECD28637DE527A9DBB37B51F613BB1326076A8A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  setup.v2.3.11/data/assets/file/External/GLEW/lib/mac/libGLEW.2.1.0.dylib
- Size 439KB
- SHA256 d6d3246bd543ab92eeea43533f295530163ecdfd8c9125069a9016b2b1053f0e
- MD5 e1eee14400a123f28dd930fa11ac4319
- SHA1 1368c18f820017da7ac45fd16183e52255b029aa
- SHA512 c1c91da06732017e417e546758c3c4701e433c6788b6909405b2027da2057198d27bd7708fc21ce495778d64e9d1d3666ddf032378ea8535580a8a8242f8219d
- SSDEEP 12288:+Nj4EhrLJolojcFEjcOw+/ucFGAz7hyCLrMy:+zhrtl+qcOwqbHtJLrX
- TLSH
  T1EFA4A452A7205CB5EC7A9835C5A44ACAF3389E94E05ED3833ED0E07A03C3B6775647E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  setup.v2.3.11/data/assets/file/External/GLEW/lib/win/x86/glew32.dll
- Size 380KB
- SHA256 8c7805a05a321fab37a31822ea2d2a6997ddfd130cf0a09a54a428d6e6995700
- MD5 0c32aa13b369bdc2bf801748d9a2f8d6
- SHA1 509c4b90f0aab7a8a29eea44617c2ebe5ed5efb4
- SHA512 42f4f656b003fc2ed5afeeccbfeb318c902916a8bc25c562d898f0ad40c793c5d14f9af00b0e1b3ba6f1765bb2902229aea8b4d9291ccec10a79fa071ed22827
- SSDEEP 6144:fva9ipeGilAy+ATZDkE7GAoypE2jkbTtVJvJG4Aq016Y1GeE3BhQoIaOnnYEd+RW:uipeGilfEucJLEd+pmoe
- TLSH
  T1C6845169F41C9462FA13201A95545FABC22DD943F25E97CBB847A14B83CCBC2776C32E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL.h
- Size 5KB
- SHA256 7d472b0b062f4a57a901016dd0f62116221d6ad4eaaf8fabf34d86c238ed3f3d
- MD5 85d6c37c483d369252894d5e761b66c4
- SHA1 5754166834a5d27026d2f118b63f57037b2f82b9
- SHA512 26bb1425e3bc3460d152f180a09a899df4e893c61bb219ee80d00a896d94e796e3d2f214d094b5c1adc74394a121ea02f4285a95e48e63bc41dc2e69d4313d6b
- SSDEEP 96:/VbIK3ruhCSOzAm7lOnvZSzCg68bj9tfIzFMC:db2+zAoaZhg68bj3oFZ
- TLSH
  T1C9B18519D79F0633A06700B4364AD4970A1B7867239D24CE389E539CAB161E82777FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral13
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_assert.h
- Size 10KB
- SHA256 4af5f46ebe34753ae9ffb0b932a1397ac0ec37cedc3845a03fa3a154dae52737
- MD5 a83d98567f639ca37d978d205e8c911c
- SHA1 03e8a3d2bb717467e4ee073c47ab38f64fc9499e
- SHA512 67e1cb91a570f84c358c6c7f5935f506d4e9ec9b0ba055472fbce6635cccb0b3f65bb030473497cf4bbcf26179d8cdea82080f790cdadcf76b43f161ff8df1b6
- SSDEEP 192:dbYGk8Unel8n5gvK+8uTfD4u709mS2R95JYjWxxVx:dbk8Unel8n5gvK+9F0I5IWj
- TLSH
  T1542285363B9B0A6241277174548CC541DA62BFAB331A88D83CAF576C2F0105127BFFB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral14
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_atomic.h
- Size 8KB
- SHA256 34b842c343abadb1e91da02a7fd30ef1da577c90bb370c54c385f4e44413804d
- MD5 cd6611f46ecf4b5578e633e9b217dc9a
- SHA1 665c26a133d16e3c84cc9ab3e999c8f0ee7cd1b3
- SHA512 9ecf5f867f96eedc9d724ca36a67ae8b8684fd960517c3aee61a835aa0a08428cb7e433ed2a2752ce18a5eaaa07432175f6985249f98ee6833b7e9da461fa606
- SSDEEP 192:dbkAjKzaGGQk/8/X/GeF/8nbz8BfkzGMfHFbC3rM24:doAWOtQY8/Xn8nbz8BfkzGMfHFbC3rMh
- TLSH
  T13D1295557BBB2343426B01F0AD5CC1E29E55E86A332826ED3C4B84F82E154AD1375EEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral15
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_audio.h
- Size 19KB
- SHA256 e3eb3603cda57deebb57947b5cabf91c7e06d0bc051b0628d76c34521d971382
- MD5 275b3b39bb825b07f7f04f02a7d18357
- SHA1 15cf7236f4646a4ca9813e0e6484de428d2c0714
- SHA512 9cd41a49982c84f333a19502124dcfa215a1f8c7d75f648ba6e3fdb02b669f85c8fc3f08e844ed7922915e98c04e8f89876cf8255435ba2b8fde6dcb8f1a956c
- SSDEEP 384:dzFu0nMzCXHoGnnJxJzc+WrkroSl8Lmp8jZbr:tFueMAHoGnnrFBWgroZjF
- TLSH
  T13192A64A3A461353803350F17A5DE2DF4F11D26B21A5408D3C4FA1B95F6B8F993B5F8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral16
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_bits.h
- Size 2KB
- SHA256 fe36055e391e68e80922ae40209cb86e8db57f01fac896933e791dae53436912
- MD5 1678ae5aa1c7ac4dc58aa7d86bf55178
- SHA1 5213ea9c48e2942ac5f2cd073863fbc3934b9d29
- SHA512 8534fec6089e4225f7bb53cd305abaec0dbc994319b40011c6159a5809cf0cc9d90ec2ccbb7124997774fbbd5e75d6878b8eb133ea46716896d259a0559ac2ba
- TLSH
  T1C251A70D77EE4332109700B9368F89C4B219C81BA399D1C8B45DC1D4BF46B7E6279B99
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral17
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_blendmode.h
- Size 2KB
- SHA256 3eb806b1eb223d0fea8bd757501c2ee9217a6835fb1b911e78e307ac5e98dbe0
- MD5 1de129753fa364aacd55630c3f01661c
- SHA1 b29881cf66c25c81d025c2f7343b3af2401b740e
- SHA512 5446cfcfe7434be7f72be53a027e7fdfdb897f2060fdc5f9f24ee2ae58f891cd4fb9e1cba7ef612efeb79f37327e618f268b947522e85c8c8a2d8954d6ae9664
- TLSH
  T137418A513BDE539394D300F6368AB4C47727B56263C9028E385E91C4770E3741334B6D
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral18
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_clipboard.h
- Size 1KB
- SHA256 24d5841490e8de30dd132572ec4862bb8a459396ee3e0a70a17f02469808b073
- MD5 910cce0dd5c5c2f12cecdbbaeaeffe34
- SHA1 373141ce5215743c1ee8147a02a5c3891d584f3e
- SHA512 88edabf2e1b350484ec9f18516044c214987c8a59b88c74e3bd5fbe132a47d04da2dc281a72409c2480ba0f75ec5d246fd6fc2383f3e76e8b80274e72a13bd78
- TLSH
  T10B41330672DF4363F0D740B9244BC4C3660DA652770D96CC6C8FE4D82B9A259133EE96
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral19
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_cpuinfo.h
- Size 3KB
- SHA256 ca825459e9b362b3718f81e8a43f911b9c7595f4a5032c9e90fdc75569fcfc0d
- MD5 062d161d5282cdb0d83a42094d8e8a1b
- SHA1 8f7f75645f0b71a31fcb3175517ae5760f1aee1a
- SHA512 e5d47f94707adbd6eb691946215285277b6803209983df687a75156b42051938d3c2ba28010cc705d0647a6824918cbf9c547c060b5f44e923bd3a762f2d15d1
- TLSH
  T19981751DB8FBE361407701B7421FC5A6AD84FD8262615059BCD7E0C81B9B598133EE9E
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral20
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_endian.h
- Size 5KB
- SHA256 a40ba1b6184619f1e7671c42fe47a3db125cbdf0959dfd2aa3a6eb138eef5c27
- MD5 43f9f8035c572157df47c5f5f758fb22
- SHA1 a7df632270e451d4706ea79ce7d78ea7f190e2b5
- SHA512 c9d913bf2e80974805b70f7fc8f417b3b5943f608d38bc72a7c07bafc1d588a5a3b6c86b3d1c5f27f3b8268109ff84839b669ac4b155898bb50a848f90161aec
- SSDEEP 96:/VbIK3LEFo3Q6qk7Xau8BQw+p8BBwep8nbQRq8naGxgLN+W8BJW4p8BAVp8nbLzo:dbrQo3Q6qk7Xau8BQvp8BBPp8nbQRq83
- TLSH
  T18EC12FE12EF36601503F1074424ED11A7A09ECFF92CD2AD4385FAD592F8A92E11F459F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral21
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_error.h
- Size 2KB
- SHA256 453a03f7d08632f599dd8e5615db895633e527c762db75a29580143b955d7ed6
- MD5 60eb1ec34f2e3bb08c0844f39f5727d2
- SHA1 6a0e9ffc79bed7742b47da74edc8eee576cabd21
- SHA512 b133322ba9dbefc992b3108f6e7909773896246af343aecd248e9aa9eae6848251d2e0aa0fda510151f934db6dafdbde16481dbe1ffe6e85d33cf0d99b7eef56
- TLSH
  T1A441636B33EF532300E701B53406C846AA5AF4627319548C3C8B65D92F5B59E5E34BBB
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral22
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_events.h
- Size 25KB
- SHA256 115a6bdc78e80326d37e3a9809ab5b11dcaee19fbcd3e069a4695398addaf441
- MD5 71daf38e1634496b7afd616de8e91de3
- SHA1 d24efd5db0c6097ef2c4a8bf9adcbef3af466c87
- SHA512 791e574c15f6b266d954ac7ffaf801b01b476c53263fa1359c2e1df65c7b31c47f3d8acedf1a965f17518367023b1cb7d6bd0dd0bf41851d7aec146a38494bac
- SSDEEP 192:dbbGgUZe4MM0tHsNfTMkIrkMxRUk6ENuMRI3MkSQMkx9o9w1iB8rmPocSPMkx4MG:ds25JNTYVPyHY/uvqU43g
- TLSH
  T11CC243853B971793123E01BAB74DF0AA1B26D6FB6785A4827C7D0DF81F600A90271F97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral23
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_filesystem.h
- Size 5KB
- SHA256 cd623e145ef93e26aa53592e78f25ceb144c583ab332ee4a623670415ce93f91
- MD5 a3f80e4bf6064c5904c396f3e4059c8e
- SHA1 df04f89496952a96ec35688ce3855b3f3f161ede
- SHA512 d81849c5fa902e37b631c7a3067519288bbf930bd1d9b5413e60dbef0ee7d0ecbe7fe6773f0a1cf9de42b730911b757216c264b6f26ef2b02532155c3c573b86
- SSDEEP 96:/VbIK3UmZiXUdJZXXKSTXsKzgv1UdwFm1Gg:db0m8XUJlXsKz4UOG
- TLSH
  T119B1851A77CA532241C303B5238FD5C1571AA5AB327A1958389E80947F26BFE0337FA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral24
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_gamecontroller.h
- Size 10KB
- SHA256 17547ddd82539d05dd45700bc210482b149fb767a881431f04f7f4287497ea97
- MD5 b6bf217ccd64bcabe1b994fa8d2625bd
- SHA1 17efdcb5fb3a4591af2c7990212f6c9a67345e29
- SHA512 eacdebb4ed8cbb892448fc6ec260a870a8154f7982d302d1900cf0f0c6f5262cd9dbae646e5038d7772a8a6df4c0d024e4c7af595d65ca5bc54ba93dc0986563
- SSDEEP 192:dbECrVKNnzWT9mm9gbWe1BNKJn9VKNPzZTOKNKvM1:d3kp6T9mZbo9Q7TJmI
- TLSH
  T18422EC89A23713B203A500FCF20BDA7C4D95B1F2B12564473E4E2DD61BDA1ED41BBA93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral25
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_gesture.h
- Size 2KB
- SHA256 b49861ea93c5e9c482fff9b9463885513712ed00fc7dfaeeae924d7aac4add41
- MD5 7fa7a584e370d75f2db4edc88e87d37a
- SHA1 f30893a9d2b7e6c694a84ae33af9578af4e25d59
- SHA512 1492b4873979b6799d8efaa2bec89e21ee192b4cc049afd3c717d5942258ea55def65a7903ff2d3e6ab8b7ac226a1a2dfd81a0ab83de12f8e605747d50629c5b
- TLSH
  T1F3416759B5AF83E225F700FD740AC952D10FA996F30950CC748F41E83BA62E81639F62
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral26
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_haptic.h
- Size 37KB
- SHA256 1152810cfa04fb80c2b02b241c204ff1af0f6aea78ad1344c99aabc65fc1b06d
- MD5 569a1e6966074e354b985c1bc560512b
- SHA1 a1aebc15684d96213b176b73dcde61250cd4c595
- SHA512 8f4e1d7836efa9ce48d36c5fd750cabf21ba3c5c73f1b24ac977f912b67cd01a94ed7a774ec50410771fe4e66392c6a27f5a064e1490fc96568400b8c447cea4
- SSDEEP 768:IRjmlqYy8vg73FI1LFnsbOXm/ONYmmr/MSLOuqbXsUp23UtnmFJMgcFRcBFO2:opYRg73FI1psCXo/MSLOueXsU03Utnmh
- TLSH
  T10C03205765A70333007700B62D5EA987BB34D0AB226290563CDF42BA6FDE4D0DA76EC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral27
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_hints.h
- Size 19KB
- SHA256 fd36b30e7929c8fe9a6b1031aa8f84873371d740a9fc70a317134534d1b0fea2
- MD5 c8e10fffc13bf0f761b314fa7b124fd5
- SHA1 baaeba59f0080baddce187598f8ef2d25fa0c602
- SHA512 a060759a9c9cc4af989cf7c4b83137bd3af2923150f626f7c4317d3155c85ef7d62f126525a10161d088cfc48bd6180a1b4a910487e16340ac7e03913d8ceb0b
- SSDEEP 384:dmhRnr2WrKn8NSvpuu2QubhBedpm5oN5LgujHPBCDM:TNvpgOXNtT
- TLSH
  T1A5927656A5875B23149241F4269EC2CE8A2A943F3233B19E38DF406C2F064E142BFDF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral28
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_joystick.h
- Size 7KB
- SHA256 bd749035091f2372f1437ed1051c67ab9e944f8f3aec83a48e0c09568d74482d
- MD5 556ec2250cc62d65576ad6d8cc5c6b10
- SHA1 daf10deeabd406eaaf73fd1f8419c6ba912e63f2
- SHA512 92f416fb887cd5f46f074d5b6a0446b1b005764bc286b7dc5f249c19199ffcfd302152ca0aa06fd07dcc309c395ea5a3c239f4767686816dfc02839a9d0b3c9a
- SSDEEP 192:dbSEWrZDr+bYawvJDlTeJ+sz52yTQMWDsLWCEDizB/:dSwGeBVs+p
- TLSH
  T1E6F1320AF36753720273013C394CE5956BFF915B60662C9F3CAE4FAA274618942F5E93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral29
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_keyboard.h
- Size 6KB
- SHA256 ab2dac4b76d399c39c7086027041cadc7e12df2eac650d15e5a482388bf788af
- MD5 16ba4803e6d1b5cf1076a7fbc5da8e49
- SHA1 5ef177648c8e0f9e02a1e9aeb04734c20f2c2c84
- SHA512 a1635ca0d6519a764b31dd931122f8503b0c3a73cbcc3283d645a52216feef3e851fa85986bc654a298438f64cd10edfb99dbe4b4434fb7866d1a7b275f9b82d
- SSDEEP 96:/VbIK3Tw+vtnLnTH47u5t1azMh57USxQr2zB2Yph:dbzwStLTH47+tVQrDYj
- TLSH
  T147D1748A706F83128C9A04B7515ED3EB6D0E62F33319508C7C4F46E82F9A4D5573AE86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral30
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_keycode.h
- Size 14KB
- SHA256 f3376d14a9eb3714374a401bb9559dfc68befc88555fd6a08cbc3171e48569c3
- MD5 9df53d881d3a1715e465bf665cc1a131
- SHA1 ab1b6f64b67e04e01693d5ef041f32c112eb6c92
- SHA512 9e5d8f278432566b7696dae53d6324290bc52c7edfe9251cbfb36396e5fb765749884f559de13bb16a6256666f657b752f3f322c3ee9ecbbda643aeb6c100e45
- SSDEEP 192:dbZT6ssUPb19PNSEZxG1plAXSAuQRVBgIVD51Ww:doUPx9PNJxG1p2iIVz9
- TLSH
  T1416205D0B4AF111221CF7795A326F0569983BCBE5D8C7972FD0414AA1FEB16883396CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral31
- Target
  setup.v2.3.11/data/assets/file/External/SDL/include/SDL/SDL_loadso.h
- Size 2KB
- SHA256 ad6f92cefc8a2713a335c68dc63fc005305a23071b8fe26520029305cce60390
- MD5 665f90e14dccd6081d7f1dd4d3b1c224
- SHA1 b73901a1ad5c704504b3a110a2a143fb2e7d1bdb
- SHA512 3fab91984544293dce57847b9dc62224ea9f3f5fd3a8cb1c0105e96c845861719ebd186454b04bca29adf814c097dd6a3634af3388a1a90c1da21bf9434d87ca
- TLSH
  T11C51861D374ED37290F301B0654F4982E3169557311A644C34CED4C8AF775A972BAFAA
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32