6c0b961b42dea8ec08d39bf6369f6fc98a5c91856ff5a374c9261138314dbbea

Sharing

Copy URL Twitter E-mail

General

Target
植物大战僵尸生态版v0.7.1b.zip
Size 137.8MB
Sample260809-fycyzagh26
SHA256 6c0b961b42dea8ec08d39bf6369f6fc98a5c91856ff5a374c9261138314dbbea
MD5 d6a03797262e16ec55272357456a49f2
SHA1 642bf841bb930d6e46e05a584cc521c715a0b4f7
SHA512 9f522206c3f7bd9dd5dd2ce1f89ca7769e8883c929d77f563b306d3941b5933150ae610b47bf50e36cffeb2be976d30c3dd03829581fcfedb74d7caafec51f8c
SSDEEP 3145728:qCGri2Cz3Oc+UgWNx2pO3BKmaa8Cz1cX6vhd3D1WJniAQtOJLBh9j7j:qCGmH+kDz3BjV8W1c8hd3sJzQYJj9jX
TLSH
T1176833B2C2639D43FC59E07AD1126D727A11F12892E76C35834E523A6AF71C12E7AF43
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  UnityPlayer.dll
- Size 28.1MB
- SHA256 872e51f0b3723b64ac9f75797a8846ddca308b66850cecb6d9382685c8c62b59
- MD5 8f475503d3b31dfb5093039fd5483a5e
- SHA1 898723583c7af9da5fd44d410f6dfecb188ed89a
- SHA512 2880cc07a0a3bdf7deeeb72b5f2d9e78bbe14ca260af5e06cc0f7fcd6fd64e9ffc6f6f0c99e35d1d6417c55226940abf7d44aa211b16b08227ba3e64f16657fa
- SSDEEP 393216:s9ZKTeRhesfY3ffLW5SToAoxF1azIsguwow6OH3L8298ThFr4hCa0+m60H7PJr:s/AhxgIr7
- TLSH
  T1F8579E9561B800E4C47BD078DA6AA90BF771344A03718AEF13E146A96F73BF126BF750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  植物大战僵尸生态版.exe
- Size 638KB
- SHA256 43cf072a8a2fb6646fbeaaa3dae0282a009efa25fd3f25af29b8eecf3a824119
- MD5 0fe89279d5c5126c72590f74a69c6f0c
- SHA1 0c51f00acce16ab09a16d8012ccd92870a1eb7dc
- SHA512 7efe9744204dbe500fc93072851f832ee8d412b7e6b24813a7c333a6bdcecf581d3d947fbe593fe0aee76c82eef0879760c19697e1878f4d72527091c272ab70
- SSDEEP 6144:LEbaWnBUC5ANu1w4nNOPlqisiBQN+/xj/MEC+eOojxBBKwA:LoCC39OPlh3KUj/o5jH8
- TLSH
  T167D461A0550AF9D1C7984F30C2B8D2F4529A9DA0D5EDAA1335F37EDAFB314826DF0A41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  植物大战僵尸生态版_Data/Managed/Assembly-CSharp.dll
- Size 1.0MB
- SHA256 4580cdf9fafc6e9396f0eba59f8859619a52684d1b4a0892e3dfc9234fa78a25
- MD5 4fb915811b54491a4a982741be5b32b7
- SHA1 08d49176ea172b6ee32637fedc941f264b3a2a60
- SHA512 4b606cc913da7d05f3282da579cd0a91341e177e28007e91df1be6f39037bcdfd3748f994cc036dace86d1429eca475b19463a5e4f4567b8acb0d246aa4cb4e6
- SSDEEP 24576:M6QP4j5+17zsn4EymNNx1QzJzTK2CwH8AtAUnSUPtMQpQ3c2EMWr:WAj5+u4EFN3WzJzTKPpoQ3q
- TLSH
  T18D3529006B7C6E37E56E977991A9640183F0C1079382FFDC5EE3F0E595ABB905C86A0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  植物大战僵尸生态版_Data/Managed/Mono.Security.dll
- Size 235KB
- SHA256 20f6c95cc969afcf6d8276d5c2f98f5d677ff0716021ebf7e173dbb2e9f32cf0
- MD5 0b4a02631a5091526f46bd1489ec845e
- SHA1 f36bdbde7ef0829e6346608c9e28c38eafb689a2
- SHA512 ba863240bfd2648c7ef0a352825bcef736c5fd5f41cc1bb0a710269e832d1fbde8d5cc7cf9802c359cff71b084ee91270f25a7472270224fa4bda1ff8e177603
- SSDEEP 6144:kUjTQ70cnf8MoVRxS9iJdBF119RJXG2y/+Q:VEiH119RJXk3
- TLSH
  T161344A1863F9531AF6EE8779D4B15019C3F4F50BB9AAEB4E5C8282AD1C027918C41BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  植物大战僵尸生态版_Data/Managed/System.ComponentModel.Composition.dll
- Size 251KB
- SHA256 ff0f3af4b18dc2eb845b37af88e11034a0aaa092e029611d2e34e0e978ff002a
- MD5 4a1956d560ea40716a3121f3850556c4
- SHA1 d2146c5a6f8cea2fdaf2126423dbe45e0b7e4202
- SHA512 f2ca5d29b48d367c96be0bdae741258e4f2c561794e772457c5d9586514193bbf1a3e24ea3ae2d82124b520370fa450410686e04e1d134b8797c982926e34ea0
- SSDEEP 6144:VkwkYfxuS0ZNORl1X1XYZGFU+22kUgUlAwU5e81hXJXee4jsURlXXMAX8O33iEP3:VkwkYfx8ZNCxL
- TLSH
  T17F44281533FD0366EAEF0F78B5B480148BBAFA06B95AE71C2C8951FE091379499117B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  植物大战僵尸生态版_Data/Managed/System.Configuration.dll
- Size 122KB
- SHA256 e3a40f2d65f437ebac691c9bf264f2377e187ea3f3bea9d5bdbbbc4d21686ab4
- MD5 d294bec60d88d22acc26e05c65481693
- SHA1 8c07de5ea421fcbe24a0a752ab65c1f47217077a
- SHA512 ca4de460e0c3a4c8ae5b756e9d9a78ccd8110387df971d6833f9b5a2174681eea49f857544b31191ec8510dd9653d6ae45298fc7c95f9bbac58ebcc2477ef714
- SSDEEP 3072:tGHTFkizuGCOE/htnREcacWown5WJGL0MIengNe:tGHT5+H/33vJH
- TLSH
  T1FAC3F92563EC872BE2EE177EF8B515110FF1FA0AA436D74C5D89B0ED1827B804662367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  植物大战僵尸生态版_Data/Managed/System.Core.dll
- Size 1.1MB
- SHA256 e04ffa9708c3c0a719a753f82322e5caded7265c7a7ed1285fa0953abe3e623c
- MD5 b9383ab13f15e12ad2912e32ca2c6aa1
- SHA1 625dc1d981292cdbf1d57c0f692347ad7394edbf
- SHA512 880e58a3d6abb1eeda3fdc2dd25ef98ca73891bfe5b5e8f720a01811d843e5ae2a5b54818c6ac5563db8b6c02ada649cf877dc8b598cdb5e8b2abef109f4e23a
- SSDEEP 12288:vWK8Xi19FV57751umv0RX15PgLdfJ18VXjvM44uvetIX6e+sxHzR:9l/umv0Z15PyCpvMNM1+sF
- TLSH
  T1FC354C01B3EC9B27D5FF7776A4B442A007B6FC46AB3BD78F104891A95D56B008D887A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  植物大战僵尸生态版_Data/Managed/System.Data.DataSetExtensions.dll
- Size 29KB
- SHA256 f0561cb9a501ad1a0f12e06d5406588882edeaef4db82227b92be51b9f0512c4
- MD5 18792dcf819985be1bdce417110b9b69
- SHA1 4196428a87e9bdb0d8c6e8367fedf4ae4b32ef80
- SHA512 b7c6efcd4a147dbd6736266dc53894c7e499819e543f1075f7d0363d5bd0a16c6018333377b909e607036b6378b87458920193d3c937606aae5f7c96374bf8d8
- SSDEEP 384:tEAjm7aELetOdc8l4LodMqokNv2Y2rsFKOlIcMYOx/snRbli3ESmMadMkrVr5UhH:tcZC8Ll4LiMXkv2Y2McdNsj5Q
- TLSH
  T175D2C915D3EC4311E3B727B5BCF9518A8AB2B913AD35D79D288E23CE18127804D62B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  植物大战僵尸生态版_Data/Managed/System.Data.dll
- Size 2.0MB
- SHA256 f11a576b807492f928043f81b00c15373d6b58ee7a78042cc6c285d29dcf770e
- MD5 5c3be2c4445f5cad19129399263a7974
- SHA1 691ff984def8db51c25b8ebfffcdf0a336bdd3d9
- SHA512 435e404441368334466e5b34dfdf6533a38bcdba3369aa3ab99a5143953dd22e990fe91c5ee149490d27c3e5a1170cc8fad6490433628ea276a3f01b321db2ba
- SSDEEP 49152:NsWVZLbth7+KwFOlXJJWO/wjDqhxoZCkUBojAJ:NsWPLbth7+KwFOlXJJWO/wj2hx
- TLSH
  T1D6A527007BF86A1AE6FF7772A47424140BF5FC56A7B2D38E6904A17E0C63B508D617A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  植物大战僵尸生态版_Data/Managed/System.Drawing.dll
- Size 478KB
- SHA256 164ebe5e0f1e846e29c04f1baba521b9f2c4ef033b024c1cb13632a351ca7a8d
- MD5 5b416f9b58f2e4fa382f88e76b972236
- SHA1 0048946e8828cf9c167f8512544c21c71c84d5af
- SHA512 c6871080d3a2a18dc7f79251a0d8f1b9ae815d32d57a704a78f80ac7c72388b9bdd428a053a161376d86f8c03c5fa9ad235bfd8695e1566d39373eea855ad6f3
- SSDEEP 6144:WHutOmSUsXjt/z5B4CqvhOgEGKPx+Jg/NY7c/nENZ4k7cheeEF:WOtOmVsXjt/PicgEN/MGq4k
- TLSH
  T10AA44A1077B4592BD5EF2B38E0B24968A631FC076B26E75F4681B62D1CF2B809D417E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  植物大战僵尸生态版_Data/Managed/System.EnterpriseServices.dll
- Size 43KB
- SHA256 e5c9d80c2d5d79550f54548f0f27ad54fa47387ed99288594f99921ddaf75a8d
- MD5 6b6f7f6c6e63eddc86e8c44c85f2c300
- SHA1 3ac5b934bf2003d783dd3ec77a8b16fe2442354c
- SHA512 22ab110f99fea00c8e2c813a0e200057af8c2831267e068b49e749f6e0614974af0150bf73eeda80a4ff59826367b3f2e637e1ab7da4419fa2b29aff5c2810fd
- SSDEEP 768:FT7LlB8tFJutlA/kUTr8yI32JVmugdQWwGHZgm5S:57BBk8tlA/kVy7JVmuguWwGHZgm5S
- TLSH
  T14913D51043D4877ACAFB4BBAFCB342264676BB026F37D3EF2605D2995E4374C4412666
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  植物大战僵尸生态版_Data/Managed/System.IO.Compression.FileSystem.dll
- Size 18KB
- SHA256 016cd67a982757ab5534ee35f59f6280f52ca85d0ae03f44a1aad2a5e89c176b
- MD5 643f921c246b770ff92baf341ec6a49a
- SHA1 4f0836be4f05596de308078682229b6e591d74c5
- SHA512 ee94d14ebf8f0807577a20975d7fa2eb5863b11a5587e091971f6b5e531ccceaad18c44edf24a23acbac6bf8f5172aa7fc66c29f3adfbf9dd1d8c2aecad40787
- SSDEEP 384:wPQA4DgKGRwrtLsWcRbli3ESmMadM1vz2a:woA4D/JHq
- TLSH
  T1D982602493E44315F6FB4BB4ACF7428686727D13AE36C79D298A135E0C327884D63B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  植物大战僵尸生态版_Data/Managed/System.IO.Compression.dll
- Size 112KB
- SHA256 ec18dab5049b193d8954b748d5b82e32a45e7911c9c844394a88527da8203cb9
- MD5 e4f8e598e392eb5c93cd6bf3cc9d13a5
- SHA1 d8f1bdcdbd04d4337237fb9997a27aed3105c88e
- SHA512 524484227e135075953ca78d25907e4727f23ca3b78fde2753652dd359cab0612f305ca9bdfba3ffdcf5067ef0a4a12566ff7639774b47baba0c4f0ba2a22cad
- SSDEEP 3072:UaN5/sy/nNo7hPjma0m9Y4gbcRiuT/WHuVra:UmsyPOL1R
- TLSH
  T11AB3291463F80757F2FB6BB8A87509550772BD83A93EE78D390864EE1C62B808C61377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  植物大战僵尸生态版_Data/Managed/System.Net.Http.dll
- Size 118KB
- SHA256 585a1b543e5fbf1a89166949575c28b34933302df694cde5c70578c2f8f92732
- MD5 c0b20eeb7b5c5aa6fcdf703146c37805
- SHA1 f8e890ec6c887b7b560a35ccca94a87830e63a88
- SHA512 fcb56b5f2af8f2475b1a7561c4808c407932924dbe197fd418ad5c2aa8f0127aca2dee222a200ac13af70c1063894d9d44a888e120af654e57e864b9a08f159c
- SSDEEP 3072:gimm1Zlr7tCfMm87PY1cADkzZf/ro4xtNsK:3t5CfMm8h5r
- TLSH
  T100C34B5867ACCF6ED79F6A79F07051958BB2DB063122EB8D6808B8FD2543340E9017B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32