4a4e2795ac6c708ae751de2848642bfcc04522eecf9facf5c5a6eae38f109049

General

Target
PanmenaGame_BetaTest.exe.7z
Size 137.1MB
Sample260811-pncd5ashpg
SHA256 4a4e2795ac6c708ae751de2848642bfcc04522eecf9facf5c5a6eae38f109049
MD5 04f800a7e4f00bcd4dc2af66d8812dda
SHA1 c8d937badfc5e8ef759c15959a0d1f839096da00
SHA512 53c9de01db2b8534e9da401f4e83a82378693da3c508ee4a4a0aa5512625ca8f41835b16769e792c2e90962a4375791f9df221011e52bd24ed6fa5d601aac262
SSDEEP 3145728:btv/gtBB2p8RL2/aUOJHGaAxSHTFZ2JCsx3iW1:xvuwpDa5JHGiFZAr13
TLSH
T11B68335647EC824C6B729260977429E7B122B46F253EF5F37A5047AC23786F04FC12AB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  PanmenaGame_BetaTest.exe.exe
- Size 137.1MB
- SHA256 159ad5f433999e05d022777491007b393eeba5e64a6871f4a9850f6f71cad0f8
- MD5 130443932cc1840fc4fc28e66c712e77
- SHA1 05c9b44ba3e245dd5851325acb68b343438d093c
- SHA512 7008cf5af6eb24d555ec3791222fc437ef76a430b82ffd993d3a2416ff85ae1440dd89ca3514d894f2cc6fd521f32d33d16cd560352a5a526624e312692e5d16
- SSDEEP 3145728:dLilWG++D17TSN3yLGk6Q6+TrhROPFNpYT0c/P7:NiuU17pLb6Q6NPF/u7b
- TLSH
  T15468335647DC824CEB72967097782AD3B122B46F253EF5F37A50469C23746F04F822AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution persistence spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads ssh keys stored on the system
  Tries to access SSH used by SSH programs.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1
- Target
  PanmenaGame_BetaTest.exe
- Size 215.0MB
- SHA256 c9c535ab5ae7109d6b0b98cafbaddefa9de2b9309668a759aa889f34f8c40776
- MD5 e69ef9be58e59b43dc192d19d752316b
- SHA1 6beae4ffe5bbb0b74bf30a8fd71ef837a98b7d85
- SHA512 6170d49fb4ddf215f2456dc80465597ba406a5caa9dd549924e5f49cb341a62c1eeb5f50d8c337a95c5b695c8a46eae455122718e4990353bbec195abbd1ee5c
- SSDEEP 1572864:4Oa3GJV1iPuKYncvg3LOL9Yez2OTe1lKrnzGjxuJm0p6TQLCfTQFHk4KmntuykGe:HximKYn2KwgF8V8
- TLSH
  T18BB88C03F29641DAC05DC1B98B5A9633FE71B8454B24A3DF2B5447522F66EF82B3DB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution persistence spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads ssh keys stored on the system
  Tries to access SSH used by SSH programs.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral2