Overview

overview

7

Static

static

3

fjmllc.rar

windows10-2004-x64

1

fjmllc.rar

windows11-ltsc_2024-x64

1

Puh Extern...ball.h

windows10-2004-x64

3

Puh Extern...ball.h

windows11-ltsc_2024-x64

3

Puh Extern...ll.obj

windows10-2004-x64

7

Puh Extern...ll.obj

windows11-ltsc_2024-x64

3

Puh Extern...ts.obj

windows10-2004-x64

7

Puh Extern...ts.obj

windows11-ltsc_2024-x64

3

Puh Extern...op.obj

windows10-2004-x64

3

Puh Extern...op.obj

windows11-ltsc_2024-x64

3

Puh Extern...he.obj

windows10-2004-x64

7

Puh Extern...he.obj

windows11-ltsc_2024-x64

3

Puh Extern...ne.obj

windows10-2004-x64

3

Puh Extern...ne.obj

windows11-ltsc_2024-x64

3

Puh Extern...et.obj

windows10-2004-x64

7

Puh Extern...et.obj

windows11-ltsc_2024-x64

3

Puh Extern...ip.obj

windows10-2004-x64

3

Puh Extern...ip.obj

windows11-ltsc_2024-x64

3

Puh Extern...me.obj

windows10-2004-x64

7

Puh Extern...me.obj

windows11-ltsc_2024-x64

3

Puh Extern...ig.obj

windows10-2004-x64

7

Puh Extern...ig.obj

windows11-ltsc_2024-x64

3

Puh Extern...le.obj

windows10-2004-x64

7

Puh Extern...le.obj

windows11-ltsc_2024-x64

3

Puh Extern...es.obj

windows10-2004-x64

7

Puh Extern...es.obj

windows11-ltsc_2024-x64

3

Puh Extern...er.obj

windows10-2004-x64

3

Puh Extern...er.obj

windows11-ltsc_2024-x64

3

Puh Extern...nc.obj

windows10-2004-x64

7

Puh Extern...nc.obj

windows11-ltsc_2024-x64

3

Puh Extern...es.obj

windows10-2004-x64

7

Puh Extern...es.obj

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    fjmllc.rar
  • Size 87.8MB
  • Sample260808-sf1njaea94
  • SHA256 9ce7a81f3868c7c1f20636da579efcedb9fd0babecb9b34e08288afad1843a7a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryexecution

Malware Config

Targets

    • Target
      fjmllc.rar
    • Size 87.8MB
    • SHA256 9ce7a81f3868c7c1f20636da579efcedb9fd0babecb9b34e08288afad1843a7a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      Puh External V1/PuhExternalV1/src/gamesupport/BladeBall/bladeball.h
    • Size 124B
    • SHA256 68cf9bcfee37292edf0b7994c28692dc432657ab331cca0c80bafca019f172cf
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      Puh External V1/build/anti/bladeball.obj
    • Size 3.0MB
    • SHA256 0945c4acf90360aa80ae93aaf250006b5ed8c98718c44c7e2105a00e37d69172
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral5behavioral6
    • Target
      Puh External V1/build/anti/bodyparts.obj
    • Size 1.3MB
    • SHA256 4704088a849bb6a622a468f1756499a7bb5f97d6b3349f2ee2b83b3cd7e69033
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral7behavioral8
    • Target
      Puh External V1/build/anti/bunnyhop.obj
    • Size 2.8MB
    • SHA256 6bf6b3e5bba76aaf1f39dd6023989d557dad8296eb95138aaa14e4c80e64d1da
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral10behavioral9
    • Target
      Puh External V1/build/anti/cache.obj
    • Size 1.7MB
    • SHA256 c58cdfcd2a85ea9f0c742bb3b1afb6581254db373bc3f0580153e826442bf0e3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral11behavioral12
    • Target
      Puh External V1/build/anti/clipper.engine.obj
    • Size 3.4MB
    • SHA256 79b2ab69ab17c254b56841f37258743fbd39b0be8b84c93ab46d5d1a6e8add3f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral13behavioral14
    • Target
      Puh External V1/build/anti/clipper.offset.obj
    • Size 2.9MB
    • SHA256 0c596c93c11618a91946188fb4a36936cb3ff415a1cc5701650066a69a1a4a16
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral15behavioral16
    • Target
      Puh External V1/build/anti/clipper.rectclip.obj
    • Size 2.8MB
    • SHA256 5a2f0118f5d45083e1aa0c6932c417c52db89f82cc4bced32287dbc15a83f6d0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral17behavioral18
    • Target
      Puh External V1/build/anti/clocktime.obj
    • Size 2.9MB
    • SHA256 5d98d7364b4507e628857c47ce0304936737f07443ab06d548434b9cdfb5400b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral19behavioral20
    • Target
      Puh External V1/build/anti/config.obj
    • Size 6.0MB
    • SHA256 b7082ca2c18808a83d8389814cdc3f67d6a97b4ac36c338f5d49148bd89102ef
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryexecution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral21behavioral22
    • Target
      Puh External V1/build/anti/console.obj
    • Size 2.8MB
    • SHA256 a59d0577d491e21979b110d3f8c88218f62b69299feede18da16a449b9eb8dce
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral23behavioral24
    • Target
      Puh External V1/build/anti/custom_entities.obj
    • Size 1.9MB
    • SHA256 51c548206ea83d28e99757b0440a63eb5b6e4da89b60fb894b7939afdaa5e191
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral25behavioral26
    • Target
      Puh External V1/build/anti/decompiler.obj
    • Size 1.7MB
    • SHA256 137e9cefb259bb0d4f4967dbb7a4a191a73af2f7dd1bc9e6ff3b2740da68fdc1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral27behavioral28
    • Target
      Puh External V1/build/anti/desync.obj
    • Size 3.2MB
    • SHA256 2f1de8c94f4cec4fe55de104ba8535023918e1e656c561dacdbbbcef8386d71d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryexecution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral29behavioral30
    • Target
      Puh External V1/build/anti/dicons_explorer_textures.obj
    • Size 3.5MB
    • SHA256 68c8efc4eacd82c4dd6d2be12643b88084edc0f7f465bd158a4a86e1fd1fb4f0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
7/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
7/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
7/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
7/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
7/10

behavioral20

execution
Score
3/10

behavioral21

discoveryexecution
Score
7/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
7/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
7/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

discoveryexecution
Score
7/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
7/10

behavioral32

execution
Score
3/10