74a3c2301c196eb68d4f9fd3dd35419f6819d35a0c5aeb8c11039b608472c4d9

General

Target
Polygon External2_[unknowncheats.me]_.zip
Size 569KB
Sample260808-shxdwsygrc
SHA256 74a3c2301c196eb68d4f9fd3dd35419f6819d35a0c5aeb8c11039b608472c4d9
MD5 5335532ccb883494c8b4ee9fcc89396b
SHA1 67489860b862b2c7f64554661c86e9ef479a8ee4
SHA512 5d300bf8d8ae3febb967ca3306fca1a442d1e9bbe2e75f0c8539769dd609a888c87890f4eb8d0acdc794623017c12ce18edb519c46562a0b670c69f0a0ac1b51
SSDEEP 12288:6QCYwxTvSdQOfvaLC1XkippiBaNJGR0lm8pPiGWzQdqCr5:uYdhnaWN0BaKmmGY8r5
TLSH
T15FC43346387DC2EBB01CA339A5616BF50A26C563CE45F1BCFBC45456067BFC6A4E1123
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution persistence

Malware Config

Targets

- Target
  Polygon External/PolygonExternal.exe
- Size 563KB
- SHA256 be0a97d2a251986b569ad4578d917177c09a049769ee159219f5c41e2e7a7e01
- MD5 2e8beba61f7c652297e607cacf4005bf
- SHA1 f8012f5f413c8107135b6cdc10216c15c8a7a5c6
- SHA512 e9ee878b936be73f35910b8caee7957edf98608ad8c4d5495dace3744306bdd121215bf3ff635c165e661038e128b2cc4a9440ff1f4cdf5667da4938faa5174a
- SSDEEP 12288:850yBYXFX4JTX/AbogirD8gdZFrrYi5nsCJaZOa:6nWB4JTvA8ndvIi5nsC/
- TLSH
  T112C49E42F1E451E8E03BE134969AB21FFA3B3408172019DB63E445983FE77E567B6623
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Polygon External/loader.exe
- Size 486KB
- SHA256 6c49cc355ef7f7e38ccf483ef428b867a34597bf902d24972f00b4b0d70f0488
- MD5 a4ab8dd678a6418f13c647e9bbaa238d
- SHA1 0361773d4b9d7c234e9fa21f2fe78326a6bf4ffe
- SHA512 b47825fa5d6de5afdce4cd359db1286e92da18b1fc44dba4875a8baecf8148fd8cb3461cdb51e7dab26e4f591c8b99b4cace7ff2d7c2c8ded13b6f5478eefbb4
- SSDEEP 6144:DKOUGGDrrKsroObQ6X9AIou4sRp6VkWdSTSu+UeTTZq5l6C:DcGgrK9ObFtAIz4+RWdreSqK
- TLSH
  T1B6B47D95B3A403F5E0B7D139CA558E46FAB2B8150720A7C703E496B12F236E15E7F326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

persistence
- Sets service image path in registry
  This determines the executable launched when a service starts. It can be used to establish persistence.
  persistence
behavioral3 behavioral4
- Target
  Polygon External/mapper/SebwettKM.sys
- Size 23KB
- SHA256 f818629a55da6bc033287f5e1e3eecc544ab53e58c775dfcb2355b726527dc6b
- MD5 e0ca6b01a45b95f12d95aa28400b59d5
- SHA1 f973275a812f3b7b79cbfe0087f6b6f286f06e76
- SHA512 127164b6b5f28c859428e3e288cd0ed033e87d2b163a8136f1e3c03629e5ced2e2b951ddd66846c3b1c58d798208c3f471dfb1241a76505a4ff53e56871bbd27
- SSDEEP 384:kYJ62ELyF0xNhbwCBIXA8IfZ9zb5f25Iqj3q8H:TJrEGGrNdHqj3q8
- TLSH
  T1CCB22B54B19624F9F695C47D8AB55612E2F2F41633216ADF0290C42DAFF3FD0B23DA81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  Polygon External/mapper/kdmapper_Release.exe
- Size 150KB
- SHA256 7076ba0e7f57ebbc33c8382091dcad4fb4128bdd2b45d90942176f1fb16c9241
- MD5 55194a83ea532f86fd68d47807446970
- SHA1 cf6f8ac7f6ab205f5a63d88a19ea0e129f493a1e
- SHA512 a3fcdc469b144c60d055c6e9d45eb8f6fb6d081cb7403c441cd1d55845691872ae9630626349468b7701b28434f8765cbb6fb20b2d16abf95632879c41236e4e
- SSDEEP 3072:cQeuLZ8OB7/Uk7sMDcFS0Dzj+kwBmJTQSaMm5/6Y+Dir:cgNpBDUk7ncFSQPfJWljc0
- TLSH
  T11AE32A5787A9106DE1B7D6B9CAB24A11EB727C550B74D2CF135048BA0F327D0BA3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7