77c96bc7befcb0429eab65ac2cf919e942955a29304506d6ff5cbf3996e6ba2c

Sharing

Copy URL Twitter E-mail

General

Target
Call of Duty Modern Warfare 3_TR_Yama_v1.00.exe
Size 16.2MB
Sample260808-p1sxmsxcld
SHA256 77c96bc7befcb0429eab65ac2cf919e942955a29304506d6ff5cbf3996e6ba2c
MD5 474fb92e240db84b10a989b05bbabcc8
SHA1 4539499a26b8e800205fa70dc0318e10f0aa9d69
SHA512 9b5d2d7761e306383ab8ddecd223320373a4a70742568cbce28bb974081764708121c13022a30b07d7062b67e4e2dd03856f0ecd0316ebbc616040e23c100400
SSDEEP 393216:TFzl4lLwGRKQIJh2DK70ij37RzdMY8DMUqbbY3DVH:TFzlmHRKQshl/3tzbpTXYzVH
TLSH
T140073386BB8637FCC25E63F38205AE500A874C7DEB159D542B9830E29363FD215C9D9B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Call of Duty Modern Warfare 3_TR_Yama_v1.00.exe
- Size 16.2MB
- SHA256 77c96bc7befcb0429eab65ac2cf919e942955a29304506d6ff5cbf3996e6ba2c
- MD5 474fb92e240db84b10a989b05bbabcc8
- SHA1 4539499a26b8e800205fa70dc0318e10f0aa9d69
- SHA512 9b5d2d7761e306383ab8ddecd223320373a4a70742568cbce28bb974081764708121c13022a30b07d7062b67e4e2dd03856f0ecd0316ebbc616040e23c100400
- SSDEEP 393216:TFzl4lLwGRKQIJh2DK70ij37RzdMY8DMUqbbY3DVH:TFzlmHRKQshl/3tzbpTXYzVH
- TLSH
  T140073386BB8637FCC25E63F38205AE500A874C7DEB159D542B9830E29363FD215C9D9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery upx
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1
- Target
  $PLUGINSDIR/banner.jpg
- Size 122KB
- SHA256 3215b764ea2a01c5b6668ab685b93c90459998944422649d6109b6cd9ebd211a
- MD5 ce6ddd7b4e12d519038e6c66d643b4a5
- SHA1 8a7ec507af35638277ce6301df02e85a8d5443ca
- SHA512 52ae9bcb99a0eecd34372fcd00c0756a0e5722006309c0d672a0c2999380b9e1fe7b152ab19f6f04909f405427cd39d9f6e3d1c66396efcf4445971cc8963d2c
- SSDEEP 3072:oWU7WUcz3b7Tog4aTNI5DvP0IhTzeIiOEYxImgbi1:oWSW/7b7dj0T4iImx1
- TLSH
  T1F6C3D076D9D1EF02F6620E3D23609D62210906B61FE95444F4AFDBD237E2AA0783F587
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  $PLUGINSDIR/install.bmp
- Size 150KB
- SHA256 3f82c13ed1e5f9a0c87c02b7fa03e4cb8f50969d777937ce2cac3ab8c32824e3
- MD5 36b78374cdb07ab31664f4f899e18a02
- SHA1 71d45c0b414eab75d5d0765a9b3779706e6420ac
- SHA512 9d082e7aecd3aab383d932d47b946040daf5719b8b8fa89ce0efa76e3ba1cbe62f1093767ad148c9c8b7bc134d4381f2a62a7739a36bdc7baa3f92dbd0d4ea92
- SSDEEP 3072:+TnZQtIVp7YxaXtH3EwK5E5tiGUb/8n+F2YAh:onZQt6pKaF3qEOGUQcAh
- TLSH
  T169E31865C5C0029ABE7D3F9951B50C0DC2667E96BFB8F15FBE08BC2B53732C29429906
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  $PLUGINSDIR/modern-header.bmp
- Size 83KB
- SHA256 d63dd3762e6b9b691b8a4d620987b8263e6c0a9159e1e248d4a6867ffa216ba3
- MD5 b7673ccbc616fc99fb5bd418a438e00d
- SHA1 ad7f053735d9dfdca0c552b3dfb37c9510ab81e6
- SHA512 943fbc1158b2e95d808d05d7a90943e86a138fd79ea14285c07b918b1f9281300ecc75d689249ca4cb347c72176909c3910cdecfb4df7420d6d61b369a76ef97
- SSDEEP 1536:bTwY/RTLhEShkqTRgCmzkYQD7BsQ5/FCFL:YY/B+S2KY2lyL
- TLSH
  T19F8387B0ACA88C86B9B7F61430A9BD5C90A7DA91D708424D255BF6460FF37023D7CE6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  $PLUGINSDIR/modern-wizard.bmp
- Size 150KB
- SHA256 3f82c13ed1e5f9a0c87c02b7fa03e4cb8f50969d777937ce2cac3ab8c32824e3
- MD5 36b78374cdb07ab31664f4f899e18a02
- SHA1 71d45c0b414eab75d5d0765a9b3779706e6420ac
- SHA512 9d082e7aecd3aab383d932d47b946040daf5719b8b8fa89ce0efa76e3ba1cbe62f1093767ad148c9c8b7bc134d4381f2a62a7739a36bdc7baa3f92dbd0d4ea92
- SSDEEP 3072:+TnZQtIVp7YxaXtH3EwK5E5tiGUb/8n+F2YAh:onZQt6pKaF3qEOGUQcAh
- TLSH
  T169E31865C5C0029ABE7D3F9951B50C0DC2667E96BFB8F15FBE08BC2B53732C29429906
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  $PLUGINSDIR/splash.gif
- Size 52KB
- SHA256 37f82b133e6f6f6314f923359f0aea4fb3d6f6141eb845b3967735edd2985d57
- MD5 4fa1650de3ea0e532ebb31f4cc50d1d6
- SHA1 a845559c32917b9132542cede0268deced0c9887
- SHA512 d1097194549d9dd3606673b1579d74ef334981a065073a09cdb02f1ba6543e782c71005d5fc20bb02f5f90bae3c34f559d49e3c7ff7b7dfc16a20193eefc0b0c
- SSDEEP 768:pTY9ToaPf8wMgh88U6HET/wjtkOYNlzX5g2xRzUdVNAestXZmcNp0uKPxAlSnFo:ZYieakyFNZJ/xhBeqXZmcn8p5Fo
- TLSH
  T1F53301B34F3BCC82600BF48A9558F608E4B71D2C4465F24ABCA277126D47257EE7EB08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral6
- Target
  $R0
- Size 4KB
- SHA256 339213d60fb16c1ac4c1b1b1140bed2344bb7dcd672f67969b46429b7f17fd09
- MD5 079b47dc80f47f257942aed3655b8d3b
- SHA1 1e958c7184745c77d23ebbea0ac78c5804e922b2
- SHA512 728682166f9cc5b847e9b92febe6946db03873483c1fcdb3d27a5febf373a2d1a4edbccc2d50a02d3b4e24f2ea323a7ebafd2b5b58ff3054106cd58ec14487a3
- SSDEEP 96:Xb3+rWXmObWN4mU3fCAut7p6rVxDJJy9PPPzW0N:XzB2OKN4DfCAKorXVQPPPzRN
- TLSH
  T1119181CCBF66466FC4EB627585E2D37435B0CEC8BB064302A1BC56979D136A41DC62CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  main/localized_english_iw04.iwd
- Size 22B
- SHA256 8739c76e681f900923b900c9df0ef75cf421d39cabb54650c4b9ad19b6a76d85
- MD5 76cdb2bad9582d23c1f6f4d868218d6c
- SHA1 b04f3ee8f5e43fa3b162981b50bb72fe1acabb33
- SHA512 5e2f959f36b66df0580a94f384c5fc1ceeec4b2a3925f062d7b68f21758b86581ac2adcfdde73a171a28496e758ef1b23ca4951c05455cdae9357cc3b5a5825f
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral8
- Target
  main/localized_english_iw05.iwd
- Size 15.3MB
- SHA256 688c1300d6cc96bcb04f83accd19a4dde6737c1ef60403b92c445ce604b9b4ca
- MD5 f143d8ba225a15317767e60177f8e6e3
- SHA1 c592861bb2243cf65f0bd7813e8518fde4c5dfbd
- SHA512 3ea01d9174c46d081ddf48715ed9322a89d185ca37683b486e93ae3c2bba51ea14b270311ea2a96cb2447b71bbb9dce59985fd69e6d1650ee824d97855c42226
- SSDEEP 393216:1bKu03KTh91s9neffx5UxOx6yf0yaOzqgT4gqiUMgpS+lvO6PQ8HoR:1Gpc31qeXx5pfdnbT4YivOEH8
- TLSH
  T1A0F6333A6DB02D8DDC9E503A2BD317024314BAD6DD6F6CC2516107E254AAE6DCE07B8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  out.upx
- Size 37KB
- SHA256 4715fdc2b7fe434d7b875d41f1fe3c28b43371c100fbfd5db4398a255736211a
- MD5 cf40102c5f71808325404c859e513cd4
- SHA1 dfd72f47311a5b27568d0829911642ced6f6dcd6
- SHA512 d89ec465a7efd2a05c86703b494e1bd223a1e215b499cbc2c254055230568390c763b46138e97a71f6b362dcacf14eac164ee1a755fac6b99b8ca571ffc707a4
- SSDEEP 384:u0Q7VM0RTh7tTpQI2EQKbQiPLL5ldD84nScFqK5JergCKusoIjh/zGyMCoem2fY:j1cVhpQI2EQK0iPDh84nScF15GYbI9
- TLSH
  T1E0037C4676C084A7F9631B7249BB9767E3B6AF141632567F67603FBB34300C38D12A1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10
- Target
  zone/english/berlin.ff.vcdiff
- Size 1KB
- SHA256 3f3b39046e03b1fc7dfb9d2d84da776dd3806d7e9fb8c53c2513f8e68357a884
- MD5 c302571d31e5a85186dc771e974ee68d
- SHA1 bc83e7f7748d8b46e5295b11c9de51eb87736f21
- SHA512 f32f4d8919c6fa3309a07d3beb0204fa576d8ade4ea6d5d69ee9ff0f11469643a07bd1ac9f41cca5657d49236f693d7bdee08c24fd23d1b67274d446ad2000da
- TLSH
  T1DF312819A4FF10F655760912EC2B27A35CBB4E13A204DEF3DC10983A21A5B606F3443A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11
- Target
  zone/english/castle.ff.vcdiff
- Size 2KB
- SHA256 259c2cdf72ee98f313da45821835fce7fd6f5518b6326ec846d3206fedc7b8f1
- MD5 17a851530be58d66c0f938c002469f68
- SHA1 d14b613c97b410c735900ecce12423bcf39baeeb
- SHA512 739f9cbcca2b6c5eb5538435bb3d17ae0fe20de35a7f6349eebd155e43a81e27f3b458ceb7582dccc83c3418ebdf7b3cda025cde1a11edac427c2ac5dd69445e
- TLSH
  T125413C06A1BE41F0A8B72484CD1BB7172C778E174682CCF3ED25A53C70F57851B69632
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral12
- Target
  zone/english/code_post_gfx.ff.vcdiff
- Size 5KB
- SHA256 7f0baa0a5de973cf8424e10d4612b143f21bd1da58cb72501f640e91ed0fa851
- MD5 6627f7137a93b11910132c0332b38963
- SHA1 d6a463da001ebcd258b76e096107b8f41fc0dc06
- SHA512 32edaf7a74adb1c85cc24654eee820d01435a557cf84284696d4f60daec5e84a3511f15f30160bd8e37025deef51f6db6cda7c3264b8e80c9ca7e273fd547545
- SSDEEP 96:2mAHdeLiCdIszk9zJ0d0YRwNAtle4MmAQPgSWjRhwBeSd+vQp+ymtuJyvp:2N9e+DmXwNAXhASgtRCBFYQpp6
- TLSH
  T1EEC18F8D15B37D5C0B4F519CEF88EF9A209D01343819A5BBC4912B76E5E065F13F9912
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  zone/english/common.ff.vcdiff
- Size 1KB
- SHA256 22849553763d1d15104c500cca4b4d8a4cf39f7fa25a94cab9602e38a11aef7d
- MD5 910f8a07be914c589e6c680a59b7ef8d
- SHA1 ef33feedcb4d10b6b2683f4312dd3fa694a73649
- SHA512 56b210b28215d364d9f9c0794af3280a3cc5f3f422f498053320e119b1aa98b2b66c491e5854a9c7e31f1fbe2915ff7ccca7ed24fd966623081e64d0f59af7d9
- TLSH
  T160213240D9BF00F6653695A9EE1B6263AE732C1B5445CCF7DC1055BC31E03106F35938
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral14
- Target
  zone/english/dubai.ff.vcdiff
- Size 1KB
- SHA256 6d5212f2fe80c539d95e8fccc1593d111642972b693b21c086e8f5f6a20af2e6
- MD5 2ecc039213082f07d75febe56495840b
- SHA1 fe5417c5feed08cb1bce8f859504694327da5ff7
- SHA512 bfd5a2ec2d379887a25f72dcc5079ce4052ef4b0c51b746d697b086c6b72caaba2f1ccf55e085b8496e34f031bf20b52c040b818bd3e6a6ef42d436bf7df5c56
- TLSH
  T1FB21FA24A1FE45F588764014C92372431DBB9C535454DDF7ED98883CB2F17588B75A30
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15
- Target
  zone/english/hamburg.ff.vcdiff
- Size 1KB
- SHA256 4a8759380b231ae6cfc04648e1e6e40a3223d9f9b29dce697946be94aa8b68ba
- MD5 2274c31fc6c46af16cccb4f43adc72ce
- SHA1 35676f22991254a5aa154ddafda31f973947ecec
- SHA512 9bc40784fba6d568acfbb74f384d68caf0958e0279439ad9c92021ec4303f09e9e6d22a8a52efa0541e5981ad7e9ae38b8aa73b6cb30ae65234e6b2733f1ca14
- TLSH
  T15D21080990BF10F186720049DE5727A76DAB9D1B4048EDF38C60503C35B2B498F36976
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16
- Target
  zone/english/hijack.ff.vcdiff
- Size 2KB
- SHA256 075769d4091b9a1cc38992167da12403f6109cf47c6d9db3782fe92b5b850f24
- MD5 a5369048efb24ca6d9ecd4fbc16db0c9
- SHA1 92839917fe6611be0b9c151fb831eb0292637500
- SHA512 a49df08cca6dd15bdf1965b8345a5fe4aa7bd38c68f8d41f63dc6f17debd96a91c15ccac4ef1cc1195281da864259d20ab71bd83d83e82721de914467d308cc2
- TLSH
  T11B415E46C5FF52F246B3A8AACD57AA139DBA0E670191EDF3DC65093C30E27405B72631
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17
- Target
  zone/english/innocent.ff.vcdiff
- Size 1KB
- SHA256 86bdd6956432d56ba4fba16dd30ac011301a47da10620b5bf7ed13ff07cac3b6
- MD5 3e825679503bbb3cb895e2f3da0d45aa
- SHA1 6b9fec7af274dc86ade61ed357d58a3516cff589
- SHA512 6a1011edb6a91f6b75cc136a49f42b96bcfa7bc4425d7b7a96458f45b886a9d19b99b30bffcc149fd37aab2159ecd054544d7cf053c30f2a9995213c67c4ba46
- TLSH
  T11521B608D8FF66F412739689EE5722979CBB4D1B4280CDF78D92603971BA7102B3A634
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18
- Target
  zone/english/intro.ff.vcdiff
- Size 1KB
- SHA256 ed42e4590718fcc6f962f9a0b32ae360d4b7ca91bf22f84b134220c27825b34a
- MD5 6f4839631522c2ca5f32cc7a35cf015c
- SHA1 93dcb6127864172a8cd696858de4efbd5c5c57df
- SHA512 50777dbdfd67a5b419af9a3fa22bcccbbe45db846997548d2f8414f879c7896bc77ce6ef01b35b4c8f49369f443ad2a3cca3e1f4c3ac0be4df9b22ef17f091b9
- TLSH
  T11231181680FF04F149224188D90B26475D7B5D0B2150DEF7DE68883E31E23859B78838
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19
- Target
  zone/english/london.ff.vcdiff
- Size 1KB
- SHA256 eea3d2a3557f3d12762289ef3f79a30138a47a719918bd2391eb7ed4e970938c
- MD5 96ee584734a32e4665f691e366403671
- SHA1 195d5506cf0f37df0ea761cc988d1ca06b29a180
- SHA512 a5b0d4d05e2612748508f7a686cfce9d5eca6ca243a49382a72a999e702290730872798bf504548a7c8529f761dc35f91c842c4b289352cbafb18e5e5c270e00
- TLSH
  T1C931D44894FE04F106325268EC53B3AAAEA7895314019EF3DD824A3E30B5B505F34279
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20
- Target
  zone/english/ny_harbor.ff.vcdiff
- Size 1KB
- SHA256 47f6072d2196dbb30abbafe741af8da9eea9a0a02eb36aa0a4eee910bb9b4b7c
- MD5 c899dd015686160de10bf2b701713543
- SHA1 d0eec71a16d9afa7c0f53deebe9de4c2bb10cc35
- SHA512 76bff16a96e9a2a9564dc24db707cbcff4f833d0b2f458ddd28af269e79653fb042dfbf7f8e0b06c80049b3d005422c0ed0a227a118af6611da69dd657c70ae2
- TLSH
  T13121C30AC8FF60F189334115DA9777934C3B9C4B0064CDF39D09402C78A2B089B35972
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21
- Target
  zone/english/ny_manhattan.ff.vcdiff
- Size 1KB
- SHA256 1f4b76265dede5777922bdf15ce2b584a25bec1f00d1598a15315e51a2c57bcb
- MD5 7fb1e58be2d3929c19c31aa389b56ed1
- SHA1 006bca1858305ea23197f195c7d0241342d821f8
- SHA512 69cb0d164e4b4367d8c99fb2357669760d513bd6c91c7fa47c0adf5b1abff02e0f5125f752d15b33f5c1c827ca0e66933a7163a0032ee92b894808ba6d573a06
- TLSH
  T14731C585DABE15FA05B2A154EE03B667ACA31C232245DCF3DD20483DB8B17049FB8936
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22
- Target
  zone/english/offzip.exe
- Size 81KB
- SHA256 07d1c78585869408e5daaabb6d3d1dbea5fcd4bf1a40173ea51e062b9b4bd208
- MD5 53ef49c3b5910c51a69b3c90e0d0a522
- SHA1 964bc0664cb357c62a3a61eb7d1bc0c00d5e8511
- SHA512 e8ea73090995a39147043673cd56b22902cc48e7f6778ad1764d8334b1eee71cd87da6c15114818900855694139783bbeffedb84418083a308143e5530fedeef
- SSDEEP 1536:XuM2Fpv5ADv9g6dvzuLDqPeV8WYtSIOCnToIfgdbC:t2FnAr9g6dvzXPeWWYtwOTBfgs
- TLSH
  T137833949FBC754B2D53B4A7385DBD73EC760B1094916ECD6FB4C2B1A24337222A18AD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23
- Target
  zone/english/packzip.exe
- Size 186KB
- SHA256 4cb001fad47108fa614230114993f8dd0409c1c923599d80cb329ac18f2a69dc
- MD5 cea744787b07739cd8ea49376c32760a
- SHA1 58192ed6bf91db2848d76d849c344444f63f50c1
- SHA512 fd5c384f8fc3390f36bf4898b0599ee783df75f5e98759b6fa969a96b7ac9f6a94fa9579dc63fe7eadc345a4307bad7284869f7d49ad109a53c9645d0cb5e6f2
- SSDEEP 3072:E514bF6uHX4HEOsxi2j5ldA8IO6htK3MluObJkA0fA0Tl130WoS8lEIA:oOcuHXUEOL2j5ldAcMuObJkA0A0Tl137
- TLSH
  T1BF14099EFB4308B1EE2311B090DEFE3F02697A448866FEDBFA855D175DB36396618104
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24
- Target
  zone/english/paris_a.ff.vcdiff
- Size 1KB
- SHA256 3478bc2bb36cde3fc88ea01449d5e5ed20d8ff7120098b33f2a4f46eb4bf264d
- MD5 67d5a73e402277c21901ea3a67b67fa1
- SHA1 87b7af97f1f1f8e8827e10e1790733544d7483e0
- SHA512 651437f278aa372da32fddee2afd9d199f71e3324d2df214ab9ea3549c93e4530640908ebb978fb330001fa4d529102ac75f44000091df312c91eed8d3c3aca1
- TLSH
  T103317DA482BF22F14837A520CE037297ACBB8E231880DEF3CC22843CB0E17554B72635
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25
- Target
  zone/english/paris_ac130.ff.vcdiff
- Size 1KB
- SHA256 603bad8ef03bf35592c23018a3ee9c519e5bb862dbf15126fd0ab14c154f2d69
- MD5 a46b185d0700bdf8c4d813ba8a0f8bbb
- SHA1 056cc95cc70b465136a9977212604953906e2eef
- SHA512 88c73b0236e9a8d5c03b7855566eff5d0fdab29fe5f6740bc6a1051308761016391eebc6edd4d02c125286a09395448798e711c23ac48710f346fb672bfc6377
- TLSH
  T1BA41C21AE0BB40F41936A061DCA372836DB78E570204DEF3EC25807EB0E4B658BB2970
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral26
- Target
  zone/english/paris_b.ff.vcdiff
- Size 1KB
- SHA256 1893e5b8a2130944d8762e3ccfb765779f6daa6303923c2dcd211da3293c9b59
- MD5 b48a51951c36bffc0b4e7b9129c24091
- SHA1 6f1f74babc242710d964c3b60617eac720c2df95
- SHA512 5859701e394e470b95658fb6f44689deca7037c9683ec96fcb562ae35bde3088659962461f689afdc93366009f9423156cc07557f0e35a1cf83e881fc706752a
- TLSH
  T1CB316014A0BF1AF4096A8582CE2373275CBB9D572591EDF7CD18092C72E03568F36975
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27
- Target
  zone/english/patch_sp_intro.ff.vcdiff
- Size 566B
- SHA256 1281972871859eba278377238b28d35f58d00135bc37f85c49b073b213981abf
- MD5 81546a40d4ac0489015ce8a55a50868e
- SHA1 311315addb47dcccbc5d0e68c35bf563e7ebb001
- SHA512 6045701b0bdfa11cf48a7ebbeda9fa1b85c1d871acb8d61e27523bd6ef794aa357ffb5320618e6ca3e06631c8e352110db75280411fb3a91e8cb4b1c190a0173
- TLSH
  T124F0E1C9A7209B61CD0906557168328E21D2D604AD1707CFAF21FDAA4A34D4526FBB56
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral28
- Target
  zone/english/patch_sp_ny_harbor.ff.vcdiff
- Size 436B
- SHA256 c51e05a9498aae70f82a3c12c1052a359be53f459b1019c0b72c06e4ef9db182
- MD5 fe68366a680e49ec0906aaa7ab659298
- SHA1 cf91da3bac080832484b38d25cf429a37bf998ba
- SHA512 81d62d79a8897148e493fae0fcdbbfaee8795cb398f68090d2f9dfebbff958509b93dd759b4e7ddfbca10e721b7453200fb0b279d8d577c961e6fbe01317d7c9
- TLSH
  T131E02B06FA344168CE02095E3A4651EA05082229A7A70BBB85111832C2A4A0767FBB34
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29
- Target
  zone/english/payback.ff.vcdiff
- Size 1KB
- SHA256 bd52a244780acde4340805e642700116d6ebe44417b03974a5b717f1654146b6
- MD5 4303cd069ae41576fcaa24611ccf2b46
- SHA1 8ac7d0968e360694c291d02d3a629e859e855ea1
- SHA512 3146afd2f5a8c3b9c52263cccb490773670803965ea691b4e5f4cbd7b5bd91cc5ed402ea069a2909304c8276edcda8e20407622bd111fbb32e3d9b2729df33c2
- TLSH
  T146213D0891FE80F589738109ED1B32932DB39D071191CDF38D65903CB1E0B561F3A63A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral30
- Target
  zone/english/prague.ff.vcdiff
- Size 1KB
- SHA256 5eb49766d124aea3bb29cdab6304f3025ffb2471a3fed8b0f004026139f426b3
- MD5 65478fdf8d20643ded306142c7922ece
- SHA1 5fa2d31825a406677eff08218e23e91a7e165d35
- SHA512 1193b7c6f062b4f121bc01d5548e78f6cec680ac9ced3f30c9ae0c682cfcab323de4615c9f89eb15d2f24805b41b143fc419a2d21338df38bc10729886909f21
- TLSH
  T14021E446D2FFA9F000330069ED1366236EA7888B11A0CDF78CA4403CB8F67048F3AA31
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31
- Target
  zone/english/xd.exe
- Size 190KB
- SHA256 c00e38acb82264d29949553a169d5205166633fdd51a2989001289ad4fc8d384
- MD5 a7c47552e5df4122e4c30337e55b7807
- SHA1 69caddb58261973bc78c9720acf4291c32cd348e
- SHA512 55b1e677b05a70c69b2d8894e73d1db44c7602e0d1a392fafb6afd73d06082f2f1fa98bc18c597de49d4f9747a58a187e17b35e085374d88934ddde791ddb227
- SSDEEP 3072:1YlpsiuDZcICYYaOstinN72XpmZbpDABjsLGN5Gf:1Y7sBlcICYYaOstiNSXsbpDABjb
- TLSH
  T1C1148D31B180D072D8E31131A6F997B6493D5622133644E7BBB42AB86F706F1B23D75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32