f3e48761979b99766d69a0a81fdb4ad30beabd22fadec3eddaa6fd10a4384580

General

Target
c4fae09c1a12c7c7313a37d00d8a76cbf030d3a44cd76a62cee9c30c79fdc023.zip
Size 17.5MB
Sample260806-de86ysxtgz
SHA256 f3e48761979b99766d69a0a81fdb4ad30beabd22fadec3eddaa6fd10a4384580
MD5 ed38ab3666022788961a72c74655fc82
SHA1 a1b389353025ddd5aa2ebcb67eac8e33d7eef514
SHA512 0a0bf9f79363cfceeac140a7d72009f5fd5725a8f1bc31340caf3910909308e8e34a4a07adb9bf45f740462fa9ffc032db858f968f051df5c1f43ba2309794b9
SSDEEP 393216:g2a5jWpgP+stP+DMU9OqIar6FVVCmHNtvjG1Q91xp:BQW2U9OqfeFVVCGNt/9R
TLSH
T175073314C4061CC6748256FAEEA8187B26C980D14DDDB2E8955170EEFAFDFE43A70C6E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion execution

Malware Config

Targets

- Target
  384134f55cfdf153230fad2129cc2a5959433c3a/client-resources-384134f55cfdf153230fad2129cc2a5959433c3a/bin/win64/xldr.dll
- Size 5.7MB
- SHA256 2b5b2f22a962e65e04b710ba401d480dac5f882234620ee1e74b620ddb5deaff
- MD5 782e90be6f69557abfb80f0061f07d16
- SHA1 2c45e6390e814417e8f0d3dc1c1a00d352ded1a3
- SHA512 1542e60fdf6b52db397efdea656ebe4d79440c5a23c85d8ffb6c80d9a496f39abc3b0e92ddcc9fa23f3fcfff1c38470d37834dfb8900816c43a04d4522743530
- SSDEEP 98304:qU8fS/FU4FFPBLcGlTwYxEuuBEzn6N0dk7orTR4fPMtWLQ5i8140ch:ppF9xcWV4Eb6N7kxWLQ5c
- TLSH
  T1B056238078D616B0C6878A33D1852EFAFC4134C17D7B9A0F5FE2295C2971D16DEA2F29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  384134f55cfdf153230fad2129cc2a5959433c3a/client-resources-384134f55cfdf153230fad2129cc2a5959433c3a/cs2/vpks/game.vpk
- Size 220KB
- SHA256 71d6e91a18a090cc3c3b9fcbfe6f92d75034dc756d54b5fc42f84406e2e537b7
- MD5 56b2cdfcea102fdbbdd405c096703759
- SHA1 64f66332cc4fc345d297f2de691b45abacf011a0
- SHA512 0c1b5cb4d992f8ace1381150d11bdf9024745b37c91b738387a57899369c26ceb318d9efc233182c7619280ab83faf8e3214550dd47099e1e4766d9a3c591914
- SSDEEP 3072:G/aV8MoWfq6bUl84LZoUyBCjpuPZ9aYBonQ2WMLieCc:KaVVov6bfUyBCjAPZjD2W8v
- TLSH
  T178240A1425AB1092F56B75BDB7CB4112772080036905EE38FD8DF629AF8A6FD13F1B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  c4fae09c1a12c7c7313a37d00d8a76cbf030d3a44cd76a62cee9c30c79fdc023.exe
- Size 12.6MB
- SHA256 c4fae09c1a12c7c7313a37d00d8a76cbf030d3a44cd76a62cee9c30c79fdc023
- MD5 77f110a9f1e432ae6a85669ee6e04224
- SHA1 398ff0fae1cc7a1b99019c675ba0f42f9d8d333a
- SHA512 2f5261cea35e092f04079b9c04811da21320658417fceb4229baafb75bc65bdedaa0701d2cff38da31a93e5d53620b2fac37077fa7b039890e4976480e84b461
- SSDEEP 196608:aZCE+RSPD4vjbbcViPLpZ0BYPCqZJZ0NVpzwkpcVSkZD0J92GjLErija9v:aZrtBVur0KP30NEeRoO2WYv
- TLSH
  T1D5D622D465D4A37DC8818238F5455AEAF0D46C9E1DF9CA1AFF96C4327B70A48C8B1A33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

defense_evasion
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

JavaScript

1

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Suspicious use of NtSetInformationThreadHideFromDebugger

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6