75af65ba2275b72dac584b28d1379d80587bbca7852d26f62ed21adee370e3b4

Sharing

Copy URL Twitter E-mail

General

Target
ConcreteAbyss.zip
Size 904.3MB
Sample260809-bae17s1xbt
SHA256 75af65ba2275b72dac584b28d1379d80587bbca7852d26f62ed21adee370e3b4
MD5 913c32d1fb97efae9f201c8d1bb8e3bf
SHA1 4abe008974eb58ff0ee1fe3667f5c1a8ae89b9db
SHA512 d96746650dce051ee23a5086a2fe63de3292bd2e90af1d722ca60a11a51ff59165652f887e94623b0dec516029abe120ae80b939ad117faae62c0aef6ab105f7
SSDEEP 25165824:dQANPz3pjj4JyzX7TIgB4BvCjjSUHTI0R/cP/qfTWyKT/90O9j9A:GANL3tYy7INBvaO8biXcKyKT/90O9j9A
TLSH
T10CA933935F1D9F25D90EE83340472F488617582D900A8DA7EB98F8B1A5752CA727FE0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  ConcreteAbyss.zip
- Size 904.3MB
- SHA256 75af65ba2275b72dac584b28d1379d80587bbca7852d26f62ed21adee370e3b4
- MD5 913c32d1fb97efae9f201c8d1bb8e3bf
- SHA1 4abe008974eb58ff0ee1fe3667f5c1a8ae89b9db
- SHA512 d96746650dce051ee23a5086a2fe63de3292bd2e90af1d722ca60a11a51ff59165652f887e94623b0dec516029abe120ae80b939ad117faae62c0aef6ab105f7
- SSDEEP 25165824:dQANPz3pjj4JyzX7TIgB4BvCjjSUHTI0R/cP/qfTWyKT/90O9j9A:GANL3tYy7INBvaO8biXcKyKT/90O9j9A
- TLSH
  T10CA933935F1D9F25D90EE83340472F488617582D900A8DA7EB98F8B1A5752CA727FE0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  ConcreteAbyss/ConcreteAbyss.exe
- Size 150KB
- SHA256 f1dfc668d7243071953d9e43ef45a4ecbd7bdb9a0f48f59c438a0621026e79f8
- MD5 1a45baaad4fb9f3fd4aa209959d90479
- SHA1 9c814482a981518f5f92b669c42748054501e29e
- SHA512 84fb6460703de7887d4fbac441869ecf5105905c31f136933bb62bd8324bf6d9bb4ca6959cce386665f032e75182f90b55a4df6015f931df0e931b65ec0043c9
- SSDEEP 3072:t85tt3PY3TrQdVHqtd/P1sZeviNL5BZPC29Ocd5GE:2lI4dVWd/PkzLL/j
- TLSH
  T17FE38E07B2A130F9E536873588A14506D7B3B8754770DB9F069442AA6F237E1CE3EFA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral3 behavioral4
- Target
  ConcreteAbyss/ConcreteAbyss/Content/Paks/ConcreteAbyss-Windows.pak
- Size 9.1MB
- SHA256 ba6f5c03594cdf3da39ce03174d8e1274d32c6bdc715011ab364457de73efb5b
- MD5 e0e7493d723e80378840a744663c4293
- SHA1 df624b7cd2548f62bb9d9eb195bdf6510186b2a4
- SHA512 4da263d512508b25f000d8a583385b45a00826487a11584e796260b6169587851d196587348dff8166e0b0176aa2fae65496a8af777cf0b6f1b7df35aa3d35f0
- SSDEEP 196608:SPTP3AGxDKvoB99UljUpyXhkP3AGxDKvo4/PfRYaJefY9:wP7xDKw7obhkP7xDKw4/nR7JeQ9
- TLSH
  T1B9A623F7A6448C6AE14E733240F81200B37756FE4383625EF988B5E8B493A693F75764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  ConcreteAbyss/ConcreteAbyss/Content/Paks/ConcreteAbyss-Windows.ucas
- Size 744.2MB
- SHA256 339fc8af6f291ea1c5db349fc12ef1d4f9f6d0b3823b2e189468d3ac39b5a0ae
- MD5 f8c6fa0cca6978b6af050a07f67fd1ed
- SHA1 5bb1157508f20abb72f8b0a2581ec24e7ee837aa
- SHA512 d219b7ef30e7bf288c1fbd65faa84e2104f514127a6d5a2b1afa5462a2236ad626bb08386649beb2ac21643354fea1ea413bc90df5e9644fbb8245b47d40bfa8
- SSDEEP 12582912:RWuKUGkYNvJ5waaQq6sC7+b3FIHqHg/hnEbUgsgkgyln9MeMXmXuVacSDxz+N8B:cuKUGkmXTaMs1FIHl/dpgRk54eMXmXCq
- TLSH
  T12E893383B905CB05D01A163744ABABE22635FC568F9386B3FB91BA1FF9731981D1178C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  ConcreteAbyss/ConcreteAbyss/Content/Paks/ConcreteAbyss-Windows.utoc
- Size 1.5MB
- SHA256 292be1afa2b3c2d871f3be20fbb47b5cf2504a44bda1ec8e51c60fd299db9131
- MD5 4797cff416aa39bac92f240988fd0bcf
- SHA1 50d2dd929e75b9c1aea9380acab5bc8643bc390a
- SHA512 3380aa19c59303998c0b8de1d476fcfff7a78c86258ad90aec377db7326ecf3296933541412804e45b1a5a69fa30a09547669d61e0f23e076e882610642f6aa8
- SSDEEP 24576:WPx2gRFstbtB+3NW/1e/Rn9hV0hWe1UZEFNJS:WPx2g05B+3U/1wvhreA
- TLSH
  T18675298F5F54A753C0BA4E7A556A83856070E7BC4F169D073BF131A43A87AD28C8273E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  ConcreteAbyss/ConcreteAbyss/Content/Paks/global.ucas
- Size 1.9MB
- SHA256 2225b60cc585bbc21e4a6b6cc79ef8553a4a1eb78e3fbaaea3eff072dd7b4a43
- MD5 2fb7ec848307351f69b4d05afcf29218
- SHA1 24664bd12626273f2d8966a9181927a436ed6ec0
- SHA512 df706ec33989eaf8355dcd6a40e6c066dc40ebf8764016ca1c49b0270e0563362c54111dfa2c5dbde73f71d312b134b0c09206a7d2b78514749c03c570726416
- SSDEEP 49152:9FbrddiS8Rg9npkF8Ys2cBPcEwx7cMZweyi:LOSM11yi
- TLSH
  T1EF956CB6B916C765C5CA813296DB0890CC750C8BE476E0D89509BF0E5EBB7883B6731F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  ConcreteAbyss/ConcreteAbyss/Content/Paks/global.utoc
- Size 575B
- SHA256 b33501a7dd192ea597b5d4a96a75212ea9e0acf9629a73db35b281ceab4df99d
- MD5 aae6d7ed33214dd5f04499f40076aa97
- SHA1 d8950e3c87e75c9aa3445cf3ac2e9fb52dab481e
- SHA512 eee80d788da0f40febcc4f3ffd2da74efdbbc7ca1f9c635e8204e168ed1e9ff63b71117b6c96b5272236c2e5c454c2f2127b65353fd544fed4b81bd576d99565
- TLSH
  T1EBF0C946BB10D121C0591135AD7A87591398FD848D55070B7189F32E7CF73691D95A94
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  ConcreteAbyss/Engine/Binaries/ThirdParty/DbgHelp/dbghelp.dll
- Size 2.1MB
- SHA256 cd925637c43f442d984a4f995b6c7f75c4c60327300a35105e860d072188eea7
- MD5 61f56a83fe19db5c4f56a271ea2426d2
- SHA1 e90901e8b213f00797ee459345726e46568b2f9d
- SHA512 cd4a541081e68c1f911aeead61c40daa1b2e1a074158ef7b3091dbcafc94ae9a0f661973637f5eb6e561cb29ce5c01d42f2e78025730813d5612674ace2b08f4
- SSDEEP 49152:AwocwVH+umtSiRFXIrZ4mTQHuEnmDdE51pa:AhcAH0r+OFrmD01pa
- TLSH
  T102A58C4792EC40A8D57EE13CD657821BD7B234450330A7DF52A887AE6F23BE51ABE341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  ConcreteAbyss/Engine/Binaries/ThirdParty/MsQuic/v220/win64/msquic.dll
- Size 2.4MB
- SHA256 dbd289714164554ca5c0cb84ca3a8864b70f4edfe66afe4b7f1b0a6c91bda448
- MD5 df2da478484837e41994e218fec73028
- SHA1 faa8f1b280ccc7c8c4f4de2bf84a9c50cfd2e3a0
- SHA512 2ea67e42c2e79081a3f406a46dc78d9486dbe9aa1eed6550c0184a90413561f95f9b951b02affde2be661ae89a6d7da61778b0fd1e71db2c05e60846b17cda7f
- SSDEEP 49152:/VwASO0Gtlq1IU6idfp1s7NJt0fegH1yZWxWT4ttWDGyPj8VVT:T+FC0144b+83
- TLSH
  T162C59E17A7A811E8D877C238C9678137E7B1B81513B0ABDF06A4C6B90F67BD1673A740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  ConcreteAbyss/Engine/Binaries/ThirdParty/NVIDIA/NVaftermath/Win64/GFSDK_Aftermath_Lib.x64.dll
- Size 1.8MB
- SHA256 490e158814e620b29d46dc5a44117a940e55cd233017a5346e48de988bb560ce
- MD5 a86f83b49884fb50a3d7e0fae69203ff
- SHA1 832d9bddf9038a804d9f2933b52bdde2c1683b51
- SHA512 176fe070e00f0b5b39fb8aa685d4a0328515e9f976a24839d929e98060c8ef124e8184e3d095e7a529e06bfbbdcbce7ec41bd07cfd6998260eb68b140023bc84
- SSDEEP 24576:ldVzJv5XXORlp5P6Rk0PZWw+d7di1zNiDVaSBZN25iAKu2f5Kq6I6397Szdxfawq:JE90BGKNsfAmKqB6397Szdv0fGTm
- TLSH
  T135954916735940E9C16AE278D6435E4BE372FC02D7206BEF03D1A6A91E223ED5E7B710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  ConcreteAbyss/Engine/Binaries/ThirdParty/Ogg/Win64/VS2015/libogg_64.dll
- Size 63KB
- SHA256 79e018496871af6f3cc26124541c3615b020ad2313262cb8d91a10b83b5b47cc
- MD5 328c3d9d86ade8667b58467813010230
- SHA1 58eb04200a390bbf71d9e5c057ba741c68fcc511
- SHA512 1b065f95d8ec5a6ac45f5e0a2216a7e121fc9b9c96a64fa64ee97521c43b34ff7e5c830cfb67b3ca2cea41d5e7a19cf40c3b35524951f3bde678d10c05ad9d2d
- SSDEEP 768:JkSQyQUuFq19HAhjXu4DGtLAMxkELDG93hQNu:TXHAhjXuZrxq3hQQ
- TLSH
  T19C537C574714786BEC6B883E70E8D32BD971BA41A36047EB435CC3450F53BCA3979269
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  ConcreteAbyss/Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbis_64.dll
- Size 1.7MB
- SHA256 72605b9dc51e6de7b7ed01e22133ed2d683db1b024eaeef12e72f71ff99d4f9c
- MD5 18f354c2fab2afdab301741ffb49ddb8
- SHA1 22174c130d91edf1024d41e5969f80788644f12e
- SHA512 aeb29ded2bdd93afb7a4d5119236f8cdddfcb3a5dd181dca25b1b264bb845bd0cc7062983b7fe9721d7d8fc5cda87e04e0229b1d192529ca5c2d7e4f989f10eb
- SSDEEP 6144:CbbUbUwlPxtVNA0ueMSMMYGUXoz0A1VoqxRCvNg:culPcDe2XNS2a
- TLSH
  T144851F0759928B34C1BC50B588DB557853322C4DAE800F9E7BDCE67434D3678BEA2BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  ConcreteAbyss/Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbisfile_64.dll
- Size 52KB
- SHA256 340af1505897396c9b7d9982d7a232ee2628c7566c57b6b315f2dc75cbd34868
- MD5 9afeb925ebe954d09b8c86bc956615c9
- SHA1 e527e4769c43646792f5eb29d57fa388f8d5595d
- SHA512 f391e78b49d458921bb6c75d9698ac1b1d512323cf650244a637ba13ac56a916588f4c9c3a7d1a853bcce06eef9aa0d37f6e98188be6df8c43bc3a380c59ac81
- SSDEEP 768:LDnv89iBswdSAQS7kWW/BeADGAAMxkEucDGf3hgKe:H8ks7SDWoqx23hgKe
- TLSH
  T1B2337CD697B138DADCA7CD3AA1DA5A2FFE717242532055DF43A8C0614F52BC2333A225
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  ConcreteAbyss/Engine/Binaries/ThirdParty/Windows/XAudio2_9/x64/xaudio2_9redist.dll
- Size 843KB
- SHA256 dc580c75fe3e4cafdc2c2d534748bc07f8c378e9b6a28c4612ed00893c262635
- MD5 83e7432aeb6379b383307c3c38bfc62f
- SHA1 3962320f3e9069d67706a43e08b3cfa799af1fdb
- SHA512 65af1db2789ab7029670c9c8d36db96b2ed413f1acaa8be95ed828f6c8488578e3563a387c9c09f81686e7951f964e9b2ba283ec5a0106c1ddc4e424aaa8f53d
- SSDEEP 24576:g+6PHmQBNmTqtEcl+4n0wcktNvSRbESez5:ghBI9InQMNvMo
- TLSH
  T1C3058C53F6E549F5D16B51359167BB1BF672B40027254EFB02A086283FF3BC01ABA3A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  ConcreteAbyss/Engine/Binaries/Win64/D3D12/D3D12Core.dll
- Size 5.4MB
- SHA256 0298e235a61a1c617fe2aab872dae4cae5494139bb3d05d27cf7b4d3f1eed24e
- MD5 f3b38736041a642af50bcb5d478fd79e
- SHA1 719ba2e84b5ec1318e335d3f822a2690743958b3
- SHA512 f5fe3d3e4903489267ccc2b28e78c016864bb3dc2ea5de499dc4dc79c07beb0d8840918551e07fc9dacbedc24bcf9132e6a21b47bda504887f01b014be354eb8
- SSDEEP 49152:Z9bKt2co4I4EKNOzVw3AF6jYEB1NPmQDgWJMF5Yq0SpC/F2ip4GlLPnns+R:bH4E+1J3SzpgLU
- TLSH
  T116465C47B2E91198F1B7D0BCCFA78B4AF6B1702053605BDB12510BA96E137E14A7B3B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  ConcreteAbyss/Engine/Binaries/Win64/OpenImageDenoise.dll
- Size 47.5MB
- SHA256 63e363942775262ead3719ece1d47a55d8b9c1df918ebca2d07431a51bff9575
- MD5 a8b35bd48776b927a0a466d9d2fc8310
- SHA1 a0d78abab90d81aeb6a7e447148ee0e433c880e0
- SHA512 2a0f6bbed6460388f24e5a1ea1adf7a8206991c08b563c514e587120f652179f089a788decb18574872cac763fb9ee1a283c72e0a85141d69d97259cdc34954a
- SSDEEP 786432:gZtAKo2dZOplxaeiF9Oz6CJk9w5ksfQYOSCIAnrxeMMNKo6LnZyj4fm2YkLuyppD:QW3pqPFUzJgw5hfXOXHnrbMZOnC4fmtc
- TLSH
  T190B72363B1B6D4D5C17AC07E820F9363AB7278E9023766B7A2D1E6753CB1E502938770
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  ConcreteAbyss/Engine/Binaries/Win64/UnrealGame-Win64-Shipping.exe
- Size 109.9MB
- SHA256 0fcc5bbd786f9c6ad6ad5adc16f6e9edca8682902e495d873b166f31f1cabf53
- MD5 159c4e559c62fe8fa222e215d765e20c
- SHA1 1332824e83c06556018f0924cd4bb526de4d609d
- SHA512 74bd5a27bace8eebdb197c90502529b899bcb813fc2db802dcab222c2c57d1cb964aafbf372ffcb0a6154c55ab845293ce38a7ba9f9f80ccc367d3f94d930086
- SSDEEP 786432:G5Q7qjKUxLl5lxLVYhReS6P7qBAL32n3vv/UWOJXq:/qZ7JVYhReSxBAL38vvMWv
- TLSH
  T172487C4663F504D4D1BAC174DA3AA90AEBB138551B34CBDF16F1469A1F33AE09C7EB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32