4fba435ee222a261de63f759f638e4bf9bf2471aa2cd050e1e6d808683d26f9c

Sharing

Copy URL Twitter E-mail

General

Target
betacraft-2.0.0-alpha.20230623-win64.zip
Size 16.2MB
Sample260809-ef831shj2s
SHA256 4fba435ee222a261de63f759f638e4bf9bf2471aa2cd050e1e6d808683d26f9c
MD5 749804939f73634eb9c20fbce7a20aac
SHA1 390502425cc18da2bd7b6999f477207cfdd4d420
SHA512 a040ce32779f0ed069b9ff941439d5a2cf932624c3fac62e9096c30e7068a11a1a2c498929669b1b0e4981bb34249185be530e4be1facc0df6dc2d568f9090ee
SSDEEP 393216:ZSvhFVkK/qKvKbZnn54lJiLjNCIwoRzQaAM1+DGJSozVsY+kRtywvU3c:ArV9bgLjsccs1+DGEf5Ytywcc
TLSH
T1E90733E3B833265DE333549B5EFF7C4C76210AA7ABE1BD57247B74052AC2AC5080899D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  betacraft-2.0.0-alpha.20230623-win64.zip
- Size 16.2MB
- SHA256 4fba435ee222a261de63f759f638e4bf9bf2471aa2cd050e1e6d808683d26f9c
- MD5 749804939f73634eb9c20fbce7a20aac
- SHA1 390502425cc18da2bd7b6999f477207cfdd4d420
- SHA512 a040ce32779f0ed069b9ff941439d5a2cf932624c3fac62e9096c30e7068a11a1a2c498929669b1b0e4981bb34249185be530e4be1facc0df6dc2d568f9090ee
- SSDEEP 393216:ZSvhFVkK/qKvKbZnn54lJiLjNCIwoRzQaAM1+DGJSozVsY+kRtywvU3c:ArV9bgLjsccs1+DGEf5Ytywcc
- TLSH
  T1E90733E3B833265DE333549B5EFF7C4C76210AA7ABE1BD57247B74052AC2AC5080899D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Betacraft/Betacraft.exe
- Size 10.0MB
- SHA256 71c66559e00822440a29ebe5509bceb71c005cdc482af327c461c6b18fb79b77
- MD5 37521dbf26b4ef6e592d36eedd5cc070
- SHA1 5f5410cb9940cdb6e536a7183275a403d3a7416e
- SHA512 43a3902e7a62b4d40093e7f9a7ae9b1884ee5528df4636713ed66ccd2d8e27068c47be5ed46953b8f1cfd8709f525c757179a80fd22ca18997a4e4238b8a44e7
- SSDEEP 196608:CkHWUv4Kw3IDvnSiKFuSoVVBPUeFlEav+LDUI:5WUQ4jnSiKFuBBPUmlEav+XUI
- TLSH
  T13AB67C52F19668EDCA6AC234869B63337635FC640232AF7B2654E7342D32ED03E59F14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery execution
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral2
- Target
  Betacraft/Qt6Core.dll
- Size 6.2MB
- SHA256 ad7e2aefbc09fae1fc27c02810c7bbb2bca818a2ec53d049900b95bf2ed450eb
- MD5 ea87b9f7c2d7a298e7ec3a75c365e3cd
- SHA1 e874107427b7f57c8004e15021108e4423d393bb
- SHA512 26978d90a5b5327efb37077c1c74ffe3893373526c6e067d2f47767e55fc60d1dfca72aa284aee19b8f0aad9c9acde8138e128112e42bbf1bbab9d3365978219
- SSDEEP 196608:WB09TAxlcwnh7PawMiPtzW1X1sIGwvrsbwkyLtfEtHwL2v2+f6jcQNUBFQgBikPq:WBSTAxlcwnFPawMiPtzW1OIGwvrEwkyB
- TLSH
  T1AA665C17E3B310FCC57BC130476BA672BA32BC6912346D6F1294EB752E62E60265E71C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Betacraft/Qt6Gui.dll
- Size 9.3MB
- SHA256 e110467d488601c9e8394d9fc85583426afe24bfac2e83d53ef8c29dc9078135
- MD5 873a4f02b3dfedc2bcd8e50468a183e8
- SHA1 0290df5c47f38d75f74e5d4c9431578f875b0f21
- SHA512 dd7f2b5b7727c9aac9107880ab374eef69d64e70096e333249c288f3c40aedc68bdd26f2de976b2ef8ab6455a42a3f2319c6219a6ba3ea8b9df18af8eb87b2ef
- SSDEEP 196608:FbvsFciYVawzbeZyXtXf+tTBq8kQBaM03FrOJMOtRjZe3g6sSMFb9d9Mo1aPhy1e:Fb4ciYVawzbVtXf+tTBq8kQBaM03FrO4
- TLSH
  T14BA66C5AF26320ECC56BC174076BA633F931B85812347D7F5290CB392F62F90666EB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Betacraft/Qt6Widgets.dll
- Size 6.3MB
- SHA256 4a2353808555a1b4cfefeb1c2cd81dd9e1cb0a44931e386a2049abf8081581ad
- MD5 6e31c9c15abb8ee9a267494c85ae4260
- SHA1 04445c6a459537dfb0defd0f37bda9b4f95d3182
- SHA512 4e4fb327c6a1ed8baa9e43cf7ccac4fcaea59a5f98995d4a14479f2027ab6a92ec38b383502df1bc3bef45ab177db15559c70bd54637d86d1329f6cca340935e
- SSDEEP 196608:+s+sBwC5E0rX+6PYY3cELgdu2ZF3BGrAQij3+cKwwUscQGdcVI0FwXHxE/8nBciO:+s+sBwSRrX+6PYY3cELgdu2ZF3BGrAQV
- TLSH
  T16B664A56F3E364ECC46BC534479BA233BA31B89902346E2F1654CF393E55FA0266DB18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Betacraft/discord_game_sdk.dll
- Size 3.3MB
- SHA256 a6b6d7df00a58dc50248d91048578d0fe52182286b487ef89a961fd10467dbd1
- MD5 4402cd4891c256ee40046c6092afdcbf
- SHA1 914e01743c7591beb79a61417b262caeb23e2c20
- SHA512 78da4181132a02d7d17ba4b2839018dc43d7d691c8bb01d34e5f7439df9c92951ce687e9487df158c44e764275b45d6800f6629ec2a175cc4ecdf868292291e5
- SSDEEP 24576:Q/NGmO/w02OFM7zWIyjQYS2tBMPfL+8T14rbXojA4F8eEcu2sqhA+cGRlZVIH06R:3oOiaQAtBMPfCn/WDcGRxIU6iIdAk
- TLSH
  T1E8F539217A5A646CC0AAC474838B4A722A3138CB1F35BDFF04D595793F69AF46F3D218
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Betacraft/imageformats/qgif.dll
- Size 47KB
- SHA256 f909dd35b2a0ab905501e79658e492bb888b71ab99599eacaec0851e98b853a9
- MD5 e334303ce65aa711ad8816e7e93497c4
- SHA1 894b8a6c21894eaff771a172a9cc2da9ef8e7cd4
- SHA512 07b467eee52e5e34d25f2ba2c0da29f24315c101bacfd198fb201457838e22dbf7cfbc5d61dd49c20cef7def25814da7d69d61868e45d4e40a0ec187723c5c9b
- SSDEEP 768:2o3j9W6L8FZYDFwAAqnSUvsz+68uf0gKxnVbGYJlgN0EH9v/:Vj2WDFwAAen63f0gKxngehEH9n
- TLSH
  T108234B1EB7A161ACC5CFC23861DA8333FA70F86072168F6F5544D7376D51B602A35B29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Betacraft/imageformats/qico.dll
- Size 47KB
- SHA256 15549719d617179b57d9408288bfb5fd42679471a3cd0ee1c783ce5ef695cf8c
- MD5 685d2195c27877f9a4404b98cd1fc0e7
- SHA1 ccfb5b1137eff3f288c9770301ee17593b4287a5
- SHA512 9a22974b8bccb56b4d34db3d9fd564befbb13852a090b7e21224ccfbfba9bc3dbc6d6a4c89ee8b70f76cc25db62c37630613e3faa235a71677c24abc6b11ffd8
- SSDEEP 768:oVt5yH7Lettw6V6MM9+7M6LUsgKxnVbGYJllTVdN0EHL:GqCttw6V6MMJ6LzgKxngeRVAEHL
- TLSH
  T135236C1FB36A259DC49EC53955CA8333FC71B8B57623AE6F0A09CB715E11BA06B2C704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Betacraft/imageformats/qjpeg.dll
- Size 463KB
- SHA256 40e99d0fac21dda2c5196d7db56ce8a0fc578e66a6b27f98a4185fc143b815d0
- MD5 a2598dc0afecc9179d4aa176ea306c0f
- SHA1 8a9d382f884aa356c68c546ecc34096990017bac
- SHA512 08d2806fc4800d557e48e1841b410f12240bcba29583f781533a656980b2ddf48aa4a094280360656a16da5ae2467b2c289efcbffc180bf7f06d3d2f620f3ef1
- SSDEEP 6144:6h5OZF9FNmDV02eb6jFLXHVcs7MoRIrVSlZtlBxT1BweNxQBQSOTa6ExAE2i:YYcO6RLX1lIve1rTTpwmaxAE3
- TLSH
  T168A45B27E3615DAFC7D68171CE99D231A7A0B42D83F369BA3A40CEF13E21E507969710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Betacraft/imageformats/qsvg.dll
- Size 39KB
- SHA256 fcd81ee65b2c912e0b8695c3b9409263715085838878b3ecdafdc78f81b5c07d
- MD5 72dca45741f78a3ce0bb65138793f3a7
- SHA1 108928beec264c80a9d1cf6bd7aa5d432bb85680
- SHA512 330977bf3ccf0db392d0100830eff623817bc936386b3dc6d2d75041293cb6ca78b1238b8c5ff50035d32fd7caa0484ef7ae90db951bbcf1c8c82dc997fb8eb9
- SSDEEP 768:hGK1VSbAFaGx6tuwnvgKxnVbGYJlO9N0EHy:mAx6tZnvgKxngeOgEHy
- TLSH
  T1D603394EB36591EAD58EC578A1DE4333E830BEA17617972F4118CB3B9C61B607B28709
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Betacraft/libgcc_s_seh-1.dll
- Size 73KB
- SHA256 8660371ef7b69772138ef71f9077ae5c742b4a9b768ccca59263d20e8dec1815
- MD5 a839c13c8fcd337a056d62a005a6aee7
- SHA1 c9f8f6ca8becd7fad39017fd45c0b7835bedf173
- SHA512 90751af770300c136245d0d5113a305876ab00ceb8968b14693082239ccacb091991e6b5d07599d9e3d9044a9ebfb92c3adfbf23f8754cc3024fde7cf17d81a1
- SSDEEP 1536:7/p/osyPFN2WX2d0lH6MhDAgtB24GIOS2AiBx:b7yPfVHhTtxOS2R/
- TLSH
  T1B5733B96F693607CD052C0748A978271A533FCB842305B7727D5F7391EB2BA02E1AB97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Betacraft/libstdc++-6.dll
- Size 1.9MB
- SHA256 715612765ea5b513c497958111e2fb4101a69198568b1226e7a4b5f9c6b3df35
- MD5 44f0f8c88e813509aa1eecd3acdbe261
- SHA1 508fde8f55ef54e2a728c562f4e662a0e8b4cb92
- SHA512 a9a15079207364118e37f591c82f3408eb738e2dc7faaa552531655dac2f07798e3fdf8b7311c2c0297aec8e7cd6e8e73db21dce00a06bb6aa32d1f05a381cf2
- SSDEEP 24576:0EpPUQtPF51u3E8DrEYEtPVCkWRBB+6wYzQixX3E+oYnhSMXlrB1EW25v0x4:1pPUQ1F51sE8DrEYEdVCk8wYxxETYs
- TLSH
  T1A7953B13EA934DB8CDE7EBB0565F5236A620FC644D382D7E6E54CB342B52E60512EF20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Betacraft/libwinpthread-1.dll
- Size 52KB
- SHA256 48a1d7fb4f81671babb514a801946f49b7c4efc54aafe7caa81f9a582ac30690
- MD5 11e800f423c7fcc83afcf43ba30b3784
- SHA1 1b0c43e49f0e8a0adcf47ebafab0161c2a05c1ee
- SHA512 f71bb3c83a91fb9afba8eea186c74f9838ec157c6ceeb29c5892f3ae15adf29a03177775bf0b3aef75b2b30686ef79459b00902ff544c622d2fa44709ced7ff9
- SSDEEP 768:4a9Vt/2t6or8cZFt13NOJAVTfPpij0At/cZRr0sgiPm3Yt:4a9VcAcZZ3gUbAyeiPm3Yt
- TLSH
  T1E4330B1A73B614FDC657C23489FA5332A933F42021756F1EAB24D6312E78C249E7E998
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Betacraft/platforms/qwindows.dll
- Size 1009KB
- SHA256 dd4530c1bed736e4e71e2d12133f27a413df29d7c26d4e0047f10d221b552bd2
- MD5 569c5edfc1d2a8607edc5ebc67625b0d
- SHA1 3853fb6624b2e41d91fece9e84c9ab8aff60e3eb
- SHA512 f8d012ce7e3127bb64916e084f5c200e32d1cb2a10d086c41970adb8cb71dbd37ceb16d824f448eb549d16bd348dc03f9f1b5f40ccabddb153a4950bdbaccc28
- SSDEEP 24576:ZaFF6qqDXlPBcoRtUmyA0rLW0Znqz5Uc0miEyTKG/zlvP/QmxNUTSU3sWM:MF6qqJPSoRtUmy3rLWynqz5UrmtqKuzH
- TLSH
  T11B25173BE62360EDC06AC2744A9B62B37932B89912356D2F9154CF757F50F60623EB1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14