96fa3645e7e68f61ffb9ed75af353722283b3b7817f826833a78beda12ee8bf2

General

Target
McLovinGame.zip
Size 1.0MB
Sample260808-nbehaadb82
SHA256 96fa3645e7e68f61ffb9ed75af353722283b3b7817f826833a78beda12ee8bf2
MD5 c7c1688346033e92e3b89267f683e5b0
SHA1 c1d9121a2776bdc4cc17fb2b34fc584cc36b7586
SHA512 c9b14dfccd2ecf6898db02c08bcf501f4882cced3e9c24b02fd7dbd7ac05c162f0d7076759617af4015585bc5f1debb5e51664c7fd351912b3f0f3f26adcf566
SSDEEP 24576:Rr58xAUe+hJs69nBohss84f22YO/iiVCk6cRbcGmQ1H4Oh:n8aUeGCN1fP/iiOwbdmQ1j
TLSH
T1813533EBC09864C5C85958607E684DB4E40DD7FBD7D7E2085EE701329C2D18ACAA1FBB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  McLovinGame/McLovin.png
- Size 282KB
- SHA256 0d438b820eaf888dfa2db50a0b002cdd728f0ef6871b47f56e25c39ff7aadd94
- MD5 96a56a2f8aef6309beed0e9b50c251af
- SHA1 3948aa15e8c83bf92b1b85905ed87535280c31b6
- SHA512 5d4099f57ba6d0ea52ef288edfc664362b73430ce6f929d201001e8045d612a104d56f569f9da4ec0db3f968fd29fb86f2bc26fceb9a604bce49e2860390cfc8
- SSDEEP 6144:/ZCK37QH+WEDUMNBuFWHC9R62dMuk9pZDKSaVl:xCK3s9EB0a6dMXcl
- TLSH
  T10F541298F6829DE16F172EA0B82C7E5633B41EF3AEDA16531326683524C9674C70F347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  McLovinGame/game.html
- Size 11KB
- SHA256 f061da57a8303318d52d85429ba02a13b6470ddb0706fca9cfb6d3a159c6e9ba
- MD5 d1d01fb274eaf2f966722398f0701987
- SHA1 239b316e0f64051ccf9b3f015ace648715195c29
- SHA512 eda196908c38785cefb005e0493dbe162f215edf2517aa9606b67810387e2699354ba211b40b08dd55038b6af1ff0ba2ae4f896c846b3984d2d07cc3100ce8d3
- SSDEEP 192:2X9HhLremO8IysQSNyGuZd770rp6lUMNBYD5qVbjZ8oLfMNcuSrLtutdV:c6QSNyGuZB70rp6lUMHbtpgRSrLtutdV
- TLSH
  T10A325F9D64921720997BE3B8AFD3450DE77221279941A60D3ECD93562FB2910C3B2FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  McLovinGame/loader.exe
- Size 1.5MB
- SHA256 ef1990355254c36fcb47c6f5957f90100389066a54b4c0b78560f2cfe303a0b7
- MD5 d6b0f6406291a7aadeee359fad184b71
- SHA1 397b07c416734ee7e9d6175bd0bb9ef8d2ae056b
- SHA512 2b0dc476900609d50b0796ee1d596f888d00fe0945b39417b2cfa07b278aa1e17636f43370e8cf474d2655257e7b932cfcfa8ec87a6d2da6537a1cb5d150004b
- SSDEEP 24576:42ctIvKqwpMKvT7QvYMy91tA2DP2crkmQNHElqKlRRaBIqHxXyM4M:NToMKvPQvOi8AmQNsrlLaxxXyA
- TLSH
  T146659D4B77B2C1F4CB66C1BAC9E11233DE3674641B3897C72160CA1E9FA3AD54A35722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence privilege_escalation
- Creates a file in the Startup directory
  A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral5 behavioral6