b8e3a458fe4d7051bbeedea7eb7fefe14f7b2133c9faf227c87bd4c60060cdc7

Sharing

Copy URL Twitter E-mail

General

Target
b8e3a458fe4d7051bbeedea7eb7fefe14f7b2133c9faf227c87bd4c60060cdc7
Size 7.3MB
Sample260809-m1a1qaab45
SHA256 b8e3a458fe4d7051bbeedea7eb7fefe14f7b2133c9faf227c87bd4c60060cdc7
MD5 8b2e7a532c2bda6cdea74c073c585ee2
SHA1 3e7cd70e9da7b8e5fa959c7a767827e03d61751d
SHA512 656c71edd3bb24575ef6e93d4977c6280d0de185b1b68e20bad8f189e7f65190f200a0adb2915965011cdd6b7059b41f3c91c1085a5eb161ff8acfff9aeecfae
SSDEEP 98304:nc3aYKLC/GOAYXddE1daARSoDxYMK68l+whKuIE9wS90JwmLcAiOsW92yxq9iNFg:mQCMYCRhxYMs+wNI60JwmLh2Fyiv9
TLSH
T1A476232FB7BDA443FE318B3F5D6DA9F03714E2311DA59A1229B017D648E4E822273B45
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  黑神话悟空自定义mod/Wukong_DataEditor-310-1-3-0-1726317712/GSE.ProtobufDB.dll
- Size 3.6MB
- SHA256 715c5f141c8e9234adb0b0e536189a0ab2fb534f8c7c8f83bc6ac3034a40222e
- MD5 607f7e7264cde68225741b6bb403a642
- SHA1 e347a33d035c2894dcfb16a2014c32878fa85d08
- SHA512 30fa5d6de4665f5e38e114169f9b2a47fed6d604d60fc592388bb45de4495d942fddfa8613dcafd58cdfbca0a5f9c2a48e0a37439ae70234db6046a5b0a5eacd
- SSDEEP 24576:usTo/HB3FydqcDzyHRuyCXAVXEaITDtALSpzSgd/KsJOtVtd99vNnUbioMfPTzs6:usTo/h8EWNJAtd99veb7gTIoGGc
- TLSH
  T19C068324E91C9237D46E8239D4E4081FB7F0A58B7201FF7EDAA1B7F66C0275169811AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  黑神话悟空自定义mod/Wukong_DataEditor-310-1-3-0-1726317712/Google.Protobuf.dll
- Size 86KB
- SHA256 f492f0aebbdc4a7208b57b968ab6cf3de1fa918433e37508021f57622e4ccf42
- MD5 bbc06f4e1dc32c9e2cbb3b9c0e259019
- SHA1 7f4c48dc64f26f3338e53bcd3862b3e8a9ced678
- SHA512 9e7acb5172ebf7ca09a56ccd03c6d2e461f33cee189a6490f3f1d31e1b843c0d5373fc9ccddc00362be8f78332d490fd84b48b601e421a2cb9de9a22a94b2997
- SSDEEP 1536:nEar+p9cs8qv4lx4t48ntyL+yVDyVNF91zlD4Dcy4DcvHlPXYMoICNt5LfHho6LY:nz+pGEwJhit5rHhp4c1ZiQ4
- TLSH
  T16D833AA89BEC9F32CBFF5A35E4B0520B0332E113A173E796144C60B5A9533552D963E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  黑神话悟空自定义mod/Wukong_DataEditor-310-1-3-0-1726317712/Newtonsoft.Json.dll
- Size 695KB
- SHA256 01d36b5ce4694aee042f0980cf0fa65a0ef38cc7cc61e335f1e3626613d75a03
- MD5 54e09eea4787f9326b89f4efb5a5360a
- SHA1 e3fc75649511b648fbcebb9f563406ab180e17ce
- SHA512 582fcd2e4440e10215d2f342f23d6288469bf08c2b00b3438e9026f10313e948116f1501efaab70a43ddd40ef8806c421074b538772ae5fe1b65579cec04c419
- SSDEEP 12288:tFIM0KteTMN4Or4D3OdmZg5WHEaEDIGBBjgrIQtD+tVqDMl:fzMTMNNd+g5Wk78GBBjgrIQtDO
- TLSH
  T197E46A2123E99B2BE0AF2775B032491647FAF542F6B3D78F5604D8AA1C43F548D82363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  黑神话悟空自定义mod/Wukong_DataEditor-310-1-3-0-1726317712/Protobuf.RunTime.dll
- Size 2.9MB
- SHA256 64e8a3a323cbc3aa160dc1a64d3517598249d1c567221dd5f24917f8265ed750
- MD5 ee789bb184ea3b696858235f88a187ef
- SHA1 38e840d45ceee4d4e8553b72e08de69bd5270c40
- SHA512 0d1b7bca7c306cf73e1c908bb50f6cf2f380741e478eb2af4445368058c205b5b21ef660efa7722412b29437eea610a705b1c7582d1168d63c620b4a72bb7dd8
- SSDEEP 24576:Lcf38E0+bcog1WEg2cd/XnLv9+fid5ySha1uqWuEneQNk5PGKFPjrjNjKEVlJZy6:Ll+bPg1WX26/Xnkm5yiLOx4sAgZyoaV
- TLSH
  T11AE5B515B92DAB2AD05E013490A509262BF5A18B3215FBBFDBA0F6B36D433641D434FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  黑神话悟空自定义mod/Wukong_DataEditor-310-1-3-0-1726317712/UnrealEngine.Runtime.dll
- Size 1.5MB
- SHA256 3ff63d94ffdb6706a49da575091295768b3b7a6158a74865dda11b82757921ca
- MD5 cae4a044b6e9e5ec4fffc22ad0d04a01
- SHA1 507711d1869d702ee68a0c7a50ff0fed3ace35f6
- SHA512 0c717495a1ae1faa1bd5545ab7b98c0221ad5c10d758913b96edf42bef1d913577d98363027f7143d9147c07d41016f3f9c68d185063da81c20c54c04aaa7f84
- SSDEEP 24576:WZqhV/0/I8burd+CuN+TywSXQZ6soX3NVtS0W+mhxcrmkRf:Wkhm/I8g+KTpZ6soX
- TLSH
  T1FB652A9173C47EABC3AF4B7A5099060A73B9E40253A7F357136DE3BA1D113909E472B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  黑神话悟空自定义mod/Wukong_DataEditor-310-1-3-0-1726317712/Wukong_PBData_ReadWriter_GUI.dll
- Size 119KB
- SHA256 2bf0a87220d1a4c74e5473036ff55454da0322b70e06d0ba0af6e6c705e8bba3
- MD5 afa55537e49c9514df779afb5ec034ea
- SHA1 096c18b3ac6cd0a4b3dc2b9003857928c7673a01
- SHA512 6ee572814053744afe2947816e551220c05ca58255075498760725f97281c725203477421db2a7435bd78c6762e548a8a2735d96cf61647cde455c52fe3d8120
- SSDEEP 3072:G/Vuz8HSU8ktwm9aZy4mLMmzVIrzw7xMwACqkob3t2n:G/MzkB8EVV6gP23
- TLSH
  T17FC3E0083358CF63C4BF037EA9E521800BB14E2E5A61EF452CC515FE983AB435B167A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  黑神话悟空自定义mod/Wukong_DataEditor-310-1-3-0-1726317712/Wukong_PBData_ReadWriter_GUI.exe
- Size 136KB
- SHA256 568a64616b4f0d35d84e07fe7feed3ebf3710fb2c2ea9072d0995cba2eedfc8d
- MD5 766110449b5c79af3eb52b7993aaa200
- SHA1 397b27323c018d11549f2d0ad85bfe723ddf1fae
- SHA512 2ebc96966b54038594ef8160ee4ffd82e5f674fab3ebc8bb58c26e7af6597e2406f19bf2188cc1f7306ed4d3f750b60315cdfb95a5ca62b04a92de8db6171525
- SSDEEP 3072:HjK4UGDHXrQ8hy7qgpHulWD9ZvZ5Pf3Ca10xuZ04ntfOohBup:HjK4TDUqgpqWDLZ5H+xuZ04vhA
- TLSH
  T1D7D32903B2AC10FDE1BBA37C99A21A05F3767819477297CF0390856A1F67BD09E7A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  黑神话悟空自定义mod/Wukong_DataEditor-310-1-3-0-1726317712/ref/make_pak_compressed.bat
- Size 924B
- SHA256 3a41a44614fd85906ec011ff37dc31b6cb9cf32aa972f9c75a678c3e5b02a5ac
- MD5 0fc0a87f5d276524d0902d9434ed9233
- SHA1 65683986bb50ad8cb1f556486e50ec62be53f3f9
- SHA512 f5428a99fe8a77f3de4a41e5f5efbb9418077d4cb2a42f39d9e68312745e04da707ad67cfa83fde4074cca47a7fe50d3362e4d86a1d9b518597a6e62a5d5776a
- TLSH
  T14811C0970086D43642F5DA726F18018BE3AAA1D73331AA78336DD4243F3026685D67CC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  黑神话悟空自定义mod/Wukong_DataEditor-310-1-3-0-1726317712/ref/make_pak_uncompressed.bat
- Size 635B
- SHA256 d1f37f4d0d06e7e6ff524aad78a927984f284f7ef4545dcb8f0fccd24d747288
- MD5 b347a6a2a30cbc2588eb592a47210abf
- SHA1 ab01682abd54e43dbbd217a3045137c76a7933f6
- SHA512 d0eb591ee2492d0656420bfa5a1296b71baed5a6bca6a693949c01d90b96b5182d5c1f87c4e13dd0eb8797194326ec1973157460cc29d526c7a03ac4b9f550e0
- TLSH
  T15EF0A2CB014B843603B58AA29A070582F7ABD1D31371D77C3705E9293F7406951D69EC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  黑神话悟空自定义mod/Wukong_DataEditor-310-1-3-0-1726317712/ref/repak.exe
- Size 3.8MB
- SHA256 498c443e2d65ded9d65cfbf0c67566d99b1409ae7894dee04705ff91b76032d6
- MD5 37c58f5b6cace2b3fb6ea92fd903c871
- SHA1 c8c4ea38a951529805bbf2161f60388cf6c61004
- SHA512 3c7b300ab45a621ef39c9e708d5c1b2c0fd87191e92471a0a4256556281f07789f06c6214be65ac8157177de9b06b6dccb7261bf55354535362109c92a3b789f
- SSDEEP 49152:TBB2c0hUa+/IrWWraE1nFOu9uN52BBdRB8VR7fWCmtLslIiRIU6i8Vcp:TBcdray9uN5kdkfWCmt4Fm+8Vy
- TLSH
  T1FB064A12BA8A98ADC05AC47483474A336A7174CB1B35BAFF41D092753F6AAF41F3C758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20