a2ee4d10e3ea6c00e9c30746868d8b1047df6f48937ead8c1e0a48c9225d604b

Sharing

Copy URL Twitter E-mail

General

Target
dark desire train.zip
Size 988.2MB
Sample260809-3fa3zsch95
SHA256 a2ee4d10e3ea6c00e9c30746868d8b1047df6f48937ead8c1e0a48c9225d604b
MD5 0597ddf7e2e49b1570284b758d08b28a
SHA1 e841a7167a1aaccf8ccfc539585cbedb19cd6d8d
SHA512 a499aec2441844d7e2b37fd3530a50917e7c1f38eb2870572fe391ef977799e070653616f128e8ef48fc0be9be1f86d631add872c2ce4dadd8b37c1757118aa3
SSDEEP 12582912:7jPHEtWr5Oh/Oq34dZVD//wQcXQHoKba4osb8ALYxd2fsrsYGZJMIWBe9ZpYBQ1k:/vd9C14dHD/YdyH2+umtvYhXt6hCy4
TLSH
T1DBB933A8FDCDA67FE02336B032258145208A709B5B34446DD79093A9FE7FA46EF74385
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  dark desire train/[Kimochi] RJ01134914 v1.01/Game.exe
- Size 1.5MB
- SHA256 487bd28f3d0b43ed9827ba519d6d113c4f31059bd62b4492da586c7bc82a9474
- MD5 9ebc7dd20fa66f5deabfd8873a4ed8c6
- SHA1 cf1b1da0e5215738a8e972077be5804cb326b8ed
- SHA512 5d0a052edec070ee573bc43ed9eb7eb92c0460efe60a5abc31d1200e092937b91eafce5492cd945d46645f9029f0f80a37907fe6292639d37f15f58dae377271
- SSDEEP 24576:5XVhPcthsRP/d3qI4N+Nl49LPSncvK51CvO8ofTWIZAmOLB:R5RP/d6IxNIKnL5mO8ofTrZAmm
- TLSH
  T12D759D01A4629075CB522271EC2CF73D6B206E1D4BF249F7FB946DE9AFB01E0353259A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  dark desire train/[Kimochi] RJ01134914 v1.01/credits.html
- Size 1.9MB
- SHA256 569d23bb9f7f8e12c0429e4267ee39a85fea4d7c2ee41b7d405f0ae66eb069b2
- MD5 525f99aea74965d6b490817f06ce2be6
- SHA1 2f1b4686d54c0c4a3a332db7bdc1be00245bd383
- SHA512 270f182b96509228a67b1fb3f46144d1505d118a19bd8fc0613e79492b90e25bd816da8f42861a4b35017698fea9c87b3833ce15eb6f65f24cdda16691f7077a
- SSDEEP 24576:OmuB6mnLiL9IrMr2KNnc7nkUhPwQQQVuc:OD6mLAcKTW7EQp
- TLSH
  T14E95D72B7F45077306F2C2516A4AA4CAF31E903E3B571904346DE25C2B7B92983FF699
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  dark desire train/[Kimochi] RJ01134914 v1.01/d3dcompiler_47.dll
- Size 3.5MB
- SHA256 381ec497d7d40b83616b0e82e15c597d04433acc20e94ebe5611f954b2e5309b
- MD5 d808acb53436ca8bf04f88d3b40200cb
- SHA1 493344c681a2269bb8c202f020ae0583814d2816
- SHA512 86dc1ce2ae6c7a36b2f7d4a18278cec99a9a8743df657b2546ef46f0e8007c94d55354fe765a9c17a2fd5b15f21693691d177407b141be23bcde24635093efb5
- SSDEEP 49152:1VBD1/zMxpjAeHhtiv2dGDwhMeX1/iK6AoVCdUTFE:17ZMxpjAeHhtivBDwh1c51
- TLSH
  T13F069E21FB018076D8CB01B365AD7BA6A46C9731473441C3E19CAE55ED707E32B3AF6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  dark desire train/[Kimochi] RJ01134914 v1.01/ffmpeg.dll
- Size 2.0MB
- SHA256 0e09a91038273416e9c759a74d7febabcabd815aff8090bae384c2402f3cff27
- MD5 408417fa4f22b36ce8b9b22e3c8d18c4
- SHA1 2f1c6ae54c7f885fec9e063415b994c5b8c08bc0
- SHA512 ebe7dc28b3742129c6cb68a5b33f859f4330270b67ae209bace04c377183106bc340b9f4e81e591a2f12f5311a01320ae7c028b459fc127aa92ca3f1d8532804
- SSDEEP 49152:Yzm0doVVHQqVwPvPIfWj3uRUcGXoDRGiMYuCz:sm0ddqVovPJeRUcGZquCz
- TLSH
  T18195D081B6A39276D4460071122EB73F7F791A2A4611CF56CBC86D78EFF5B81024A39F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6 behavioral7
- Target
  dark desire train/[Kimochi] RJ01134914 v1.01/libEGL.dll
- Size 77KB
- SHA256 3237951e48aa59bb3ecca077f4d075cc7b414ad69e09d8e006eb36e1b38d86ab
- MD5 abe4f600b47f8ebedf4291dcb4247ca3
- SHA1 52f579d0b6a5d462855934671f819718853ac10b
- SHA512 673745a5e94790534cab2e80b6e7641c3176d944ba52f542791cf16bae842e6e515348c2c5c185ca83f8aa8fc6b0994806abaa06198314fd2131a74e30a75a5c
- SSDEEP 1536:ZxulvW1Gpq0cZ7WK+i8GpsunsW4cdWoROysCLgU:ZyqfL+kjnWorsCLh
- TLSH
  T11D737C01B5D2C871E5BF5E3409B4A6A1AB7D7C115EF1CD6B2F99022E0E701D2FA34E26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8 behavioral9
- Target
  dark desire train/[Kimochi] RJ01134914 v1.01/libGLESv2.dll
- Size 3.6MB
- SHA256 1c729f6d3a8e50960a5cf9893d60c2f5fdcb1cca76baca888e3e4b8c7a742641
- MD5 7d33a3105dcdf326e434526eb67b8bf6
- SHA1 ef2022e4be0c853947c59494fa20ebc860c77055
- SHA512 96ed8020597912c95a440acf39835e57dcd0f54f82a27d25579448c08342fedac2a8489315d77dc83de06ac2eb16eb4c52856110a9756b916a2aa487522dcbf3
- SSDEEP 98304:kfSh1IAsWfMGtUjSx5GFxcrig5+CU+SsRaAq7dgTyBZKb8rGXjZPgWAd:9hiFEMGUgmBZKbT43
- TLSH
  T1B6069E026891C076E55B52B2061CBB3EDB381B925C35CF8BD7E83DE56FB0670751A28B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral11
- Target
  dark desire train/[Kimochi] RJ01134914 v1.01/natives_blob.bin
- Size 200KB
- SHA256 47a86495fbc403ade14d7e451c33edb1baa810402d8d192446a7767bc563dd47
- MD5 51014ed501fde761ddb4b763df687c13
- SHA1 e16b402e418e948065834237defc65a788d46670
- SHA512 340119877ea1befe53410afdaf9b500a674d836564d7ed5e14ea7c08596c7cdef72fdf94dad7aa87dedc0a33ca17e468f350ac5d41be408cc85303e74282d713
- SSDEEP 3072:8USt9rxNpyXcsR/H/UxRjh7YL/ETfF/sBWypHE2Lyurluv:8USPrxNpyXcsRf/UxRjhuETfFD2Oui
- TLSH
  T1C914E967BED9AC6B42B654F8510F520EAABD8D36641894E4E08CCCD01AB710D993FF3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12 behavioral13
- Target
  dark desire train/[Kimochi] RJ01134914 v1.01/node.dll
- Size 5.5MB
- SHA256 8d31c14a59cccb093ad1264c43e4d032a9cfcefeaa0d45b6862a5776c44fff37
- MD5 a1bb20106dfd3330625c98f0acaa38fe
- SHA1 be7679e8bbebefd16c0906d15d775b81d81b73aa
- SHA512 48bbb35a4f59388dfed8edb85640f0c1dcbd9a8c49dbf16cf7f8fee3d67ffa66afda827a8703564758f86dc5ea4c0727294df5140b234187e50138ad29e4f64f
- SSDEEP 49152:9vJjhvv6FzlQKxCjGj+Vd4OscisICzSHgn/1ooOEO3/8CJtQmqFkCn3sSJ5hp6AH:95hvydfkj2m4WIu/1IvKP4m
- TLSH
  T1DA46BF06FEE30021D5D7617842BB5727163A5C072325CDE7B68C9B940FB22E096FABD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14 behavioral15
- Target
  dark desire train/[Kimochi] RJ01134914 v1.01/nw.dll
- Size 80.5MB
- SHA256 4a3f39e9476288d109dbfe0b0c245f032ebf920c5142af36a2a15b31f9ff2139
- MD5 28aaf0b29a1d00568c4a42d0c7ce1ef8
- SHA1 7365ee081c8054cde6f4efda75488258646c2618
- SHA512 1d8f72dbe0f015bc078b4f718ea5d91b7d3ad6b0fd848783eada735f4617baad2dccca75d0362fd9d32195183d173ffaa7cd18d5c1c3248d9887ac064b9a7f5e
- SSDEEP 1572864:jvEfH6aannL/Ms/P97+INsrn26sLBqaxsoJtW5hcpD3jgxL3g:rEgnVj1DDkzg
- TLSH
  T16D08BE02A021913EE18761B2692DF73DEE3007475A398FC3DB9D6CA56FF91A0365E247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16 behavioral17
- Target
  dark desire train/[Kimochi] RJ01134914 v1.01/nw_elf.dll
- Size 439KB
- SHA256 0d60a21d5919878456d3ae7efc9369d4d31bf35ea44607d8ece7610a3a0d47cf
- MD5 a1b38e5a48db4569b56a3cc4871904b3
- SHA1 624640a4b7cf0750e44b54435c0c018d321553d3
- SHA512 814a0150a658e732c84377b1c2e8daf5810bdbdaf3349eb49b2dc136cc1eff7a7935cfbbc084732b3910e3525718d3b5be178e04f349507e278c59620899677f
- SSDEEP 12288:KGYC0qzbqqymnjkeg8FO0APbUV5exWLrHIu:KGYC0qzH5g8FO0APO
- TLSH
  T1E0A49D00B191C076E5331470286CFB396F786A210F158FEBD7C89D7A5FB46D06936EAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18 behavioral19
- Target
  dark desire train/[Kimochi] RJ01134914 v1.01/swiftshader/libEGL.dll
- Size 99KB
- SHA256 2e0f536a85e3986b3ce5251fb9901f7e09f7d133318c43bccc24a11a9eeb2c49
- MD5 adc1b8ed43379d0174c143bfcc0333dc
- SHA1 2131bd3a50b34f0e9857048582262eabd4f8f21f
- SHA512 742a696d0038d7fcd0fc0c7f107088e00be16e4816090e1643698eec320ed9b2a5167526eec70d9418004b3fc953269e1c75639621a8c5f5dfdbee876a35fda0
- SSDEEP 1536:1KJYBYySjEdmDgUFpO+KxyWBeowPsuTsWjvVcdQ/rkZlBj6BY:1KmayS+UlFRKnuj2Q4ZlBj6B
- TLSH
  T119A36C0175D0C031E4BF193C1878A3658B7E3920EEB19E6BAF5406BD1F742D0AE35E6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20 behavioral21
- Target
  dark desire train/[Kimochi] RJ01134914 v1.01/swiftshader/libGLESv2.dll
- Size 2.1MB
- SHA256 5c4230c1b00415f6e707af374107a8a27f3b08e6a87cb63c8313433fe1f3903b
- MD5 11d36159ab5798b5b9d49a1bf958261e
- SHA1 1b4d25b298105b0f18994112910fac7b393c605a
- SHA512 541f183b2fc00e749b4999a3c739bd9e8806db2293534428fddf8ba6cf730f61cd1e3d902da238ef109671501a70c274db7925aa871021e77f2ec1c89c268840
- SSDEEP 49152:Ilq8keUisW17Cz3kXdr3G6lA45nUFlyZji44pazwLqZNy5M4BlY4IbMsbUd35cCL:+q8keUeOLaztCWfRzyavr4MiO
- TLSH
  T128A5AE43A5A6D136F4070270382C7739AD789631686FDB4BDB955968FFF80A0362372B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral22 behavioral23
- Target
  dark desire train/[Kimochi] RJ01134914 v1.01/www/audio/bgm/m-art_SkyInPuddle.rpgmvo
- Size 2.0MB
- SHA256 2f301e28943b7a603a6ac7543a8f919a0ddc7077895f864af654e39cd104b7f4
- MD5 6052007c5ad6a20b1219f65263391ec3
- SHA1 9aa17d6d9969696c94e9f8ddb62df1126abb4ab5
- SHA512 8475b06e0534265e1e0cc4208dd3c05df1aca1426395a9b8bd850d0277565596ed3f81bfb4817c7430f92c9c342c8157f0db050b7a6d6caefd547c9019c774fc
- SSDEEP 49152:/ckuHYW1/gBg3bRIhUkbxJW0pTW6On2ahQAC:UkuHYW1/gBAIhUkb3W6O2yC
- TLSH
  T144A533D0A9E62D8CD093B174098A2C7D5B4DE75C0B9268083DA73595E6EF6F43843E8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24 behavioral25
- Target
  dark desire train/[Kimochi] RJ01134914 v1.01/www/audio/bgs/7-ハードピストン（中速）.rpgmvo
- Size 433KB
- SHA256 836764cae9f28b15d0af66fc72d7ce8fde6dfd8f431db56314e7a8623436306e
- MD5 beaf930e0268aee47f11bb7c58f8ee9f
- SHA1 037398a5391edf5fb81b457e760b7f1a8425ce41
- SHA512 a83b490bf00b3fb2d9d7c6f4783d5d1498dee4711777429b4f5554c0876c003a748bcb165b544de74be75fdc9a42aede716f65dd7aa7fffd9a884a8e20ec1acc
- SSDEEP 12288:ZK0eeD+65pjP8kQabCKuL02RdFJGpTJh8YA:A0BDf5pjPQaOxR9GjmYA
- TLSH
  T1E494239CD484E0B7D7AEFAB62ACE333C88E10C66630E37D10C51D67F2D879953608A95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26 behavioral27
- Target
  dark desire train/[Kimochi] RJ01134914 v1.01/www/icon/icon.png
- Size 8KB
- SHA256 8f61f039167edb25cb91b386ad3fbffe3a773544d1e745a8cbcc245c9dfc97ff
- MD5 86fd0609d3074c17dcffbef0f7fd3465
- SHA1 24cfb4ff9284fd79b290e373e28389e877920c47
- SHA512 26c0cb3a2347e9f355b671b03eef4ecf7d9bddb76087623160c62bba7c2a75250df667b0d1f980c5c76c85f361ce6529754ff639f886c47c7584e1251ea0fa06
- SSDEEP 192:PK8jo/rav4Ec8sVwwNcQ2pEmiRDmmHB26JsUDDZOq6vQCIUhT:uuAEGVwwNZ2im6DjBtsIy9
- TLSH
  T14902AE02EC5CB9CC9F9081466EC1D421FA850D68E55E378CE744EA46308F6EDE54E2FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  dark desire train/[Kimochi] RJ01134914 v1.01/www/img/system/Loading.png
- Size 2KB
- SHA256 9baddf397d0751794e6024ce0b4c38e82820846efaf7022aff511ae99e731801
- MD5 7723c8410e9555b59c7ae22fd8a64446
- SHA1 dd82caac34b6171b9d0b190b6a92f1aeaa77aa72
- SHA512 1cb05b144735185c98472bfad5bc747612de8a74448c8ea7141b4e65912201b18e2fbeb58ed32e207a080be3868545994430ba091ad688551cf26eb5eb5b302c
- TLSH
  T1D741DAF01427908BD55FF5BF749064A0406127E5A6164B1B607E88EDAD77C31F3124E6
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  dark desire train/[Kimochi] RJ01134914 v1.01/www/img/system/Window.png
- Size 5KB
- SHA256 2dd7c093bf5899d57763478da1787629c2093f77fbefc6be332acdf81546b476
- MD5 50f527192fdf1f23c6ab7c84f08bcd5f
- SHA1 5143631b84b4b2f909ed22bd29092d6b7be706fd
- SHA512 0525962169dbcc824c3b1ce1a1fa04efaae6dd26bdf336cca73f2a6c4873d6408d89580363092b9836379a4d3ab8de9fb9c8663bb3bcdece7e5c70acf9377708
- SSDEEP 96:11nwfv6xXFXPVbwwjbMvgqXQYaLXc6uFgGeZDTqvkUHlHEr:1HPPVb5bMvgqgNccbD706r
- TLSH
  T1F1B18EC6E7EB8AB9EF4373F2CD1519D0AE2A6934C5B0EA53654071D83D6CB6C8058C0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32