4ff4df7586133230d8a74e6fb0411a0236124fed072f250e9cfa8f123c999f08

General

Target
Cheats.zip
Size 108.3MB
Sample260807-cesnjayxb1
SHA256 4ff4df7586133230d8a74e6fb0411a0236124fed072f250e9cfa8f123c999f08
MD5 22991cdf6118442b049474433fe0472a
SHA1 dea704440655be30c805b2cd7538814619239662
SHA512 07e50c7568f5adcbcf60d47cd3812821b40c7afe0c4677caace63116c7624b7f921b41b6d52ead82e96fb55527f8e0372ff823617660d2077cc80f555b239227
SSDEEP 3145728:GrMiNHt7A9tcdgVQuIs/Opfq3ElrOngsgSHj+7fuIg:GrMiNN7AsgVQDpfq3sCgsRk2v
TLSH
T16748337C056190FBE74E9D72E95834C0FA6E09269FA880752E5C6F2BE7320E5AC5CC53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Cheats.zip
- Size 108.3MB
- SHA256 4ff4df7586133230d8a74e6fb0411a0236124fed072f250e9cfa8f123c999f08
- MD5 22991cdf6118442b049474433fe0472a
- SHA1 dea704440655be30c805b2cd7538814619239662
- SHA512 07e50c7568f5adcbcf60d47cd3812821b40c7afe0c4677caace63116c7624b7f921b41b6d52ead82e96fb55527f8e0372ff823617660d2077cc80f555b239227
- SSDEEP 3145728:GrMiNHt7A9tcdgVQuIs/Opfq3ElrOngsgSHj+7fuIg:GrMiNN7AsgVQDpfq3sCgsRk2v
- TLSH
  T16748337C056190FBE74E9D72E95834C0FA6E09269FA880752E5C6F2BE7320E5AC5CC53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Cheats/HGUEVBWOG2.exe
- Size 108.9MB
- SHA256 6295b2eb62d3bbdea840b5a576d89e8ca9c51f9cbae778cf8283824209380eb3
- MD5 e0faf205a21fe606e97c967aab1af6c5
- SHA1 b9cd1153b5f4f8874aab1f2f1cbc6fb4ea771966
- SHA512 6d8d8b4042c1441531e726e0275e91de5d771985c8a22a380fe0737cc00694c4979b235e3e0c396549d2864588f36d3fa1fc4fe10b9415ca9b69d0bd6e77e02a
- SSDEEP 3145728:19U5HI5BB7tE0WZGCnkgO9/mrnnTNGMFZ:19U5HsjnWEgM/mr5j
- TLSH
  T1FC483368095164EBF74A0932C4A3AD94FBB651024B63C0CF27989AA7BB371D59C7CC37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral3 behavioral4
- Target
  HGUEVBWOG2.pyc
- Size 290KB
- SHA256 78d8c63256b9fefde495a2d55e511fa2a9b7161d3de23751660e2fb4f66549b7
- MD5 e1cac0110395fe8e3ce0d7c02d4a1ef5
- SHA1 cd9df1a781d31eb3235035fbc5a933167716d3a4
- SHA512 fd25451711f041a53a339f4fc0ccb42eb9db682fe0502f20eb18927656c906a310b663eed3e069b960f15f4f5dfb2864fcb930d78338fc13153b7f39bad67745
- SSDEEP 1536:2SUFGvq/cr+83kTfpaM+c3yLFjJkakDbNz46htbop+jtrwLFIPZ0RtRGQZrRxrDL:NUFGEP0xshUUtbo+NmIyF7BAX3+9NAM
- TLSH
  T17954B447A5605523FA90F17480EA4504B37EAEC3F615C727362E02B96FDBBA4CE6270C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6