0324b9b74e5a2ba2f2e473080283b4754966433064cea837dbddc55b436e1f80

Sharing

Copy URL Twitter E-mail

General

Target
BLACK SOULS.rar
Size 879.8MB
Sample260810-hdmc1sxxhs
SHA256 0324b9b74e5a2ba2f2e473080283b4754966433064cea837dbddc55b436e1f80
MD5 5e2d496ac132a8f84a610d9455d0e0c4
SHA1 db9b572ba048171b99b37394f6c99644b0aa58c0
SHA512 49f12eee999faa58a9828e982d8182731694b1c2825afe272ab52ec87e586ac3f39d243d09fc5cbbb54103e87b230d7437757e54b7bc5fbc04f7b73fef193447
SSDEEP 25165824:vb7ly470N7XpKO5oMWEfo3Y8MjStZ/nTNjiBvnZ:vnlyFv5oMWgoyjStZPTxi5Z
TLSH
T12DA93307428DCDD945C45F6EB28D62697CEBC1212E75082AD03FEEC6DB4846BE3D29C9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  BLACK SOULS.rar
- Size 879.8MB
- SHA256 0324b9b74e5a2ba2f2e473080283b4754966433064cea837dbddc55b436e1f80
- MD5 5e2d496ac132a8f84a610d9455d0e0c4
- SHA1 db9b572ba048171b99b37394f6c99644b0aa58c0
- SHA512 49f12eee999faa58a9828e982d8182731694b1c2825afe272ab52ec87e586ac3f39d243d09fc5cbbb54103e87b230d7437757e54b7bc5fbc04f7b73fef193447
- SSDEEP 25165824:vb7ly470N7XpKO5oMWEfo3Y8MjStZ/nTNjiBvnZ:vnlyFv5oMWgoyjStZPTxi5Z
- TLSH
  T12DA93307428DCDD945C45F6EB28D62697CEBC1212E75082AD03FEEC6DB4846BE3D29C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  BLACK SOULS/Audio/BGM/Aエンド.mp3
- Size 5.6MB
- SHA256 8e15804775d311ed92b754bfa4941c5293357ff2246e4c741dc440b0a64efccf
- MD5 430a9ce3195b431f848112e9fb8dedb5
- SHA1 e19f4e6c052fc91a3c2a717bc1324b4b4efff58a
- SHA512 14aceebdc1c7ffd27a3737348c1f528ec22ab83d8efad55413aad5968dd7bb4a14a56c1a6e94a9cf9347c0668217882cd2dd84148f4aa0864436c8ad6cad02ba
- SSDEEP 98304:Xi8S/RQyLvVTrWh2dMMuz0/e+MQNB6LtxBWVTg/al/HZzkkZB1mH0p/o:XiBQwVMKbW5dmg0vZzk+TmHOw
- TLSH
  T1374633E7903325C7D8F441B4480F1F34C9DF0FB17E2C955ACA19F2769233DAAAA42A56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  BLACK SOULS/Audio/BGM/Clock.ogg
- Size 4KB
- SHA256 9cd9aebfd67d61b412369aa6514b6a540d989b973058e8fd7f08a98d65d80918
- MD5 a198eb204d970c398a9db4f09d01aa6b
- SHA1 58809d03b40a89d3abe171a1a5589dd8eda81a79
- SHA512 66d9564a267b69448db5502ffcd4aa1021d4768c252cbbcc11b42fc66609c175405eacbf26d52b1bf068879c28e8f6b9ea40fd2de1db2535f6fd72f033544d1f
- SSDEEP 96:sd2SatuKmJ6gX3/3NXq8N+Vr3LP/wPJz1njHgMLhx3W0:rtoKmJTXF68I8ztnLO0
- TLSH
  T17D91D7899638C489FC172476EEF16F33A7A76BA904F89511F61D211DCCB2C237C58889
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral5 behavioral6
- Target
  BLACK SOULS/Audio/BGM/ED.mp3
- Size 3.4MB
- SHA256 7bf379f1f06400fd5c73d7101aa3ec5924f574a1e04b356e309d199bc2244ec3
- MD5 7151af2e65fb764cc5e6c665398995fd
- SHA1 bc00e2ffd3126249842a539e9729636a693ea093
- SHA512 9a631d1ae8c5a4addaf59fd53ce99f50272a2e55eafc5003f32121022e0581a1b41586c9367ac3272663ff3985d41a24dd293b7a17c89b7ad34ab0992f71d453
- SSDEEP 98304:HTEObmzXgDqxs048zaHl13/bIUugtFUwSnja0:oOqFsf84AU2G0
- TLSH
  T1F5F523E86B35701BD0B3A27993A2811CD60B0CCF3B86181A949B7B65247D3D6E3DFC56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  BLACK SOULS/Audio/BGM/ED2.mp3
- Size 2.0MB
- SHA256 f1038d0eca9f306c5af97b36cf3f12d9bfdadd13f510b0cffca5ea428855a566
- MD5 a66480da9cb31200194da99a4e2a49cb
- SHA1 cf6e5b29d3e81967ce3512b2600505a82b4b358f
- SHA512 db4b2b50aa9572c8867cb4b9a79a36664caeb6ecf59be2c76859adfb2c73f489f07d13958a7dc835485435f7781cc953ba0eac3eb5c82602cd9073cecf7dcc6a
- SSDEEP 24576:ZHcYmMvIuZzbN6s96/6Q7/bhgWHBnsnYdh0SpLHGVE4tfUCfGX5lxa:1cYmUIuVL0/R/biuYNSByEAsCfGX5i
- TLSH
  T1ECA523E369725887C3F5EB7849ACAEF5DE034DA6E948D810FE817EA57273C04E4E9104
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  BLACK SOULS/Audio/BGM/ED3.mp3
- Size 2.5MB
- SHA256 a0aa231b41337783817a3e62de38148456fb36a454ec49ace152bedbdfc01281
- MD5 614092cb0dd5bf6d30e921033f2977a9
- SHA1 dc88181efd2b4f42eafa5f9a198ba2571029ffc5
- SHA512 a708ba945235b0b5e06686cde0d2421ebefc4cb186937ff4094fc772b21f389bf6ed9f00e2b30b9350eabd5a7f1c89355557508cc4f8a5d721567ad387e0ee83
- SSDEEP 49152:vfue6dpjITlDL3ETMn1CdUNxMmImO7jjPUP6REi352cN2sYKb7A:vW7Y3gM1CdUNCIOvj8P2s1W7
- TLSH
  T12DC53382F40117C766B64FA6E69C695094C35EFFFE306EC2418BF46AA53E95D3236B00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  BLACK SOULS/Audio/BGM/Hシーン.mp3
- Size 2.8MB
- SHA256 82bda43669c951a96ac86312bf292d3882cf2c047c753b31308f1ab5ba27be59
- MD5 367cf61933d26eecc1f3d0857cf6e1f8
- SHA1 00eae9b8cd4ff8f4133d23a60ed118455329801b
- SHA512 c23f2dbb9bbbc55bce34197031958abb896714f4556f0b9a1245254dd66ad8dfd2233819fcec7c0d062bf0510d44ffd6fa9c2f80546c1c408b4dd02040f81d89
- SSDEEP 49152:HZ8HmEFq0bhxsAzySMYC4D4WAtnVFYF2SjcCTJ7Cywi57P7DrRL:cmeZnM/u4BtV6Bd7u2TD5
- TLSH
  T19FD5334293039C8FF45662220E694E9DDA66EF40F9063432BCBDFF91B1F71231B2955A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  BLACK SOULS/Audio/BGM/Hシーン2.mp3
- Size 1.2MB
- SHA256 e1fe111731965b03f2a537400d29f84e9edff16c7e6f04b13f53ee6edb190b35
- MD5 a40e1a8e578e686291ba6d9b4f164b74
- SHA1 f02257c6735a78175f95a51ae50d502f3d4ccf10
- SHA512 a67151fdf7b3b8d69651e51d321171154e1419de13a6cb92776bd81ec65881603d50e56f359aa38891e344b611829a5e487636ef12cb2947902c3198e99bb942
- SSDEEP 24576:b2CU13CkG5cdLhfCTOCLjiiZa68r67XlrOa8ITSlacbg+aF:Y9Ck7dLhoOWjiiZhr7XlODITSRbgT
- TLSH
  T12F4533827BDF308ED5F2A7376A0D61768A5B5EFA2804CC9050EDF52373F889766B5801
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15 behavioral16
- Target
  BLACK SOULS/Audio/BGM/River.ogg
- Size 124KB
- SHA256 6600308c894a944a63817ff88417f10bd832393a617614d6b6ac1775d3e58c4d
- MD5 72772abe4a169a860ef008c4f74a3fde
- SHA1 2b04d02e956c82af3160a8efeac7453b81f2d2f0
- SHA512 1b67584b7a61071fdfb99f09f2af15dcf249468da59764776dfb5f3584696bd0f626b7ead5816f5cd766c6f3e3e68f732d6298895013fd02f3c7d5b586c5869d
- SSDEEP 3072:g5jczrR15Cc7ir4PjUPUmQA87b/pP/vNJy3l7z:mcPZCcWrkjtfr4l
- TLSH
  T11FC312C0DB1D25EAFAC324F590D64094E52F3D7DCE2629EACDCDA09BBAA4F057907801
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral17 behavioral18
- Target
  BLACK SOULS/Audio/BGM/boss.mp3
- Size 1.9MB
- SHA256 1a26c25fd683ccd80fc478d924ee9c1ba614e8878d0cdd2ec8fa1997733ba2c7
- MD5 26ed286a2c03f3ec5bc9be317ded501f
- SHA1 92ed16368e52e7e82895cf39fccdc88e27aeb1f7
- SHA512 7140b1eedd04b97da5489c0f6323fbb5533035023dfab8a71a376ff98ff4b94d4d7bd6f6008d171ad38d0726e0ecf0edf2e8eb03068661e4debd1cea68324fd9
- SSDEEP 49152:SM3x0HUxrwQhFVSlwPhoWldgyflf7FBwBfN2:SA0HUPDgq9ldgyflf7g
- TLSH
  T16D9523E8B145B984E8B6DFB9BE4E0ADD24861DD6E8213C95158BFD94E43B438F130CD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19 behavioral20
- Target
  BLACK SOULS/Audio/BGM/creek1.wav
- Size 10.9MB
- SHA256 376dba901c740f27c32a5bea132e8e762656cd93695d924e15aabc5a1599ee97
- MD5 362d31bf69cba676465802c31755d4ad
- SHA1 96c5404887a4f184d84c594b155a97b46009fa8c
- SHA512 a43496a87476f3d26139913c6b5b299807b7172abb4fff5cdf2bf2605f72454caa60bf7ecba163c94ce722396bea1e47e585a963875cfa45be2b16a72352b0e3
- SSDEEP 196608:xWr4VMMre81PrH51X44tGfhPDlhquOuHzpXMAGH/JJbUcZbeoary+9iwa6LB/sGX:JVMMrf1P0zflmnkpc3ffbwoTei8FEGkc
- TLSH
  T11DB6125BF562A34C7838476645C15C081BC8FE5D28118E2FF72ACBD1F223219BD99B6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral21 behavioral22
- Target
  BLACK SOULS/Audio/BGM/kan_ge_kasai01.mp3
- Size 90KB
- SHA256 3c06f434702824dbf872c80e7bf85ad38d04b5276b78559c0c331a29449b326e
- MD5 e0281e277502f192f22fa2477d6bc138
- SHA1 be0754229b122e9f5d336d80c7f61f0df653da81
- SHA512 981d395c45e25a5092a707dbd10d19f69020880cb6f13c5d5421c80730d688accc0be3d7364dce2bd09bf1deb286c395543915b3059d23cf8f8923e3a0ad1cd8
- SSDEEP 1536:XfEoZ24v6+8c58OUR2ZU5XXTvivFzutPONEYnOOYQmjvSc4Yu97c91qZxp:Z2sDD61v29utcOpzi5n
- TLSH
  T16E93E0BAE08D8249E3642397F4D66BC99E31DF070C08B81E4698BC21F77E5D7A104E76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24
- Target
  BLACK SOULS/Audio/BGM/エリザベート.mp3
- Size 3.7MB
- SHA256 46c595c45868cbbc60cee8c191269fdfb4aad0f3c8dbb95bd53f9f4fd12a087b
- MD5 327b0523cc63dcc3cd401fc835f12e13
- SHA1 2f945ec5b27a62995bf8f25d96ca1ae000d69832
- SHA512 29f0f0e1dbe1a29497b7bc362961513c4775601b93574ea1a935b4571e81c06345a2326de93608f3e8595d81b235631ab5b1aa5664aebc48444bff93cb899dc1
- SSDEEP 49152:MF4M/cJ9zmuIGt+zeOnNsrbLuYW5ARHL/IJTTK197BYuxKGfoawUA2VXlyWwlPqH:MYg4nyoLuQ/IJq1YCKZawXkbwlP3vw
- TLSH
  T121063353F9B7994BEDAAE0F0496E12F8AEEB0EC662497112DCD074848137C50F257DB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral25 behavioral26
- Target
  BLACK SOULS/Audio/BGM/エリザベート２.mp3
- Size 2.7MB
- SHA256 42e8dec695ed97eb30582e576845b25b4a23772b199344ae8a40f75c2a221a94
- MD5 ea138d732c67aeeb26bfa4bf1e615d27
- SHA1 b40a19971321af74240d0415f4b039d722945c0b
- SHA512 9594ec7714aca313f452d0d4053fcce787ed11f94604df3454b45c161f20a55ff46f0e8a59537f51abc0511d69a89ebaa863afeab451e0f1bafc6b460f6ec981
- SSDEEP 49152:Z3ZJqSrQyaAx4PjKVUs6AC+W9pcchFw6J3wGZIumm9CDT5i:Z3ZIkQyahGeb+opTFn3wahC0
- TLSH
  T116D533A17881E38F74F34734AA8E53208EFA1FF67905DDC112647D69B1F9119907E28E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27 behavioral28
- Target
  BLACK SOULS/Audio/BGM/エリザベート３.mp3
- Size 4.5MB
- SHA256 28658691937a4b52dbb71e9a6b5afc88fe5cab1e3a5c40a4221c404c057e6414
- MD5 d0cb01e66c82a661d40ab97f1e23296e
- SHA1 da41a915cd9de4a25c4848bc7ed8ef9c238a0806
- SHA512 090c781f991b8e4103665c6a2a91a08133e0fefa1a500f52b27c6757b164098982ca34c302476cd088c53e69c332a4dc88c79011cb09aaa316e4333928e42929
- SSDEEP 98304:TOOYEIK7GDslMz7KjdhtR2lfc2AV/HDhBvIMn18keKv8QKlDkCiZYkHc5:TOaI4/2ihhvsrs/jgi1PEQKloCiZYk85
- TLSH
  T1D32633CBFC516C62E756D670D883CDDB6F1B5EA7A866C2806DC2FF01423A450F71A292
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral29 behavioral30
- Target
  BLACK SOULS/Audio/BGM/カエルのワルツ.mp3
- Size 1.6MB
- SHA256 c3f05f1fb974c76ecd97d99ad71ca5981ef3ee982e3e668aa31c02f22af9b48f
- MD5 68bd82dabccb5a3419a813856eacc340
- SHA1 5785d9b89571156f032f3abd8dc1fa09794ac308
- SHA512 c916acf5dbfbaa546dea10b4d833a316434a1851c5ae45f9b3067b777d58405ef3b515dac91ffe279671ad765b9ae4e03e8b4c998251de143e17628b95703703
- SSDEEP 24576:L6trEMg0PI7c9ArsronbeXZ1HXp8k0EjVoaqsDCakTsIaSgDFR12C:L6trEMROrFwZ8paoeCakYmgBR1L
- TLSH
  T1DD75232372892111D49EA9B221BE1667A8278EF6B409D4E17914FF2CD2BF44FF6CD701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

Enumerates connected drives

Checks computer location settings

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Checks computer location settings

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32