77d84384b5a63993f714494a6d0ed150d4d48137bee253913522f7c225d490b6

Sharing

Copy URL Twitter E-mail

General

Target
PluralEyes-4.1.10_Win.zip
Size 401.8MB
Sample260812-lcbrnstcnc
SHA256 77d84384b5a63993f714494a6d0ed150d4d48137bee253913522f7c225d490b6
MD5 496e39ecb303000cbe97e765ec1a6b63
SHA1 2df13d43162b2d42d809c6756a68bdde3fed05fc
SHA512 970e3189a2044cae148032abd7203e846de58ab30028d1c672fca68df1b6b852e0a5d7e75d01ffcb0f74f25315d63908b5a9a3ede904e073e73d55ff5e4cfad6
SSDEEP 12582912:H7sTcnF7HIs0gSWpzIs0gmBJcvbkCdhUvBIs0g8CuOjj:vhHITVEzITDMzhUvBITnHm
TLSH
T1021933CE0024ECEFF4CA5673E49C9E37E94AB4B05AD2185125396371709B7DE6A8F80D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  PluralEyes-4.1.10_Win.zip
- Size 401.8MB
- SHA256 77d84384b5a63993f714494a6d0ed150d4d48137bee253913522f7c225d490b6
- MD5 496e39ecb303000cbe97e765ec1a6b63
- SHA1 2df13d43162b2d42d809c6756a68bdde3fed05fc
- SHA512 970e3189a2044cae148032abd7203e846de58ab30028d1c672fca68df1b6b852e0a5d7e75d01ffcb0f74f25315d63908b5a9a3ede904e073e73d55ff5e4cfad6
- SSDEEP 12582912:H7sTcnF7HIs0gSWpzIs0gmBJcvbkCdhUvBIs0g8CuOjj:vhHITVEzITDMzhUvBITnHm
- TLSH
  T1021933CE0024ECEFF4CA5673E49C9E37E94AB4B05AD2185125396371709B7DE6A8F80D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Red_Giant_Software_License.rtf
- Size 82KB
- SHA256 6d5d56918b7e70eb222aa8c27bf4c3e99a706adfb1a9c8495edf8b84a59164dc
- MD5 e0ffde95b1516c52aab3189ef5a0e2e0
- SHA1 880948aa974a12e09263d5b13927caa112709845
- SHA512 625177c38111ddb24f662c065e0bc66f97abc47bc8ab969c37e7d49a7153e59cb78c8344ada0092f2724f437c43455c27585f18a5cb1378f1c3f094cbbb712ce
- SSDEEP 768:IJl727ZN3H4XvrwdEgVxB3kdRQVZhoD9l3eJrlH8BsA1+r+dFg0GR75Q+NwY/:IJE7pkrlunqsAQyXg0iBr/
- TLSH
  T1B28350BC950353D1D79693CAA262F4CDBE3BF24CA4EA54E431ABC0BE126785CC8D7452
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Scripts/bin/rgdeploy.exe
- Size 1.7MB
- SHA256 4517faa583d251531fa1ab4ce61da4e89a75b9125cf18a186ecba73d7a8070cd
- MD5 26d5f9ad206176477cc2e378011f5834
- SHA1 e3d796c286d1f6a8aff0a377640995867f78a5c3
- SHA512 bb82c59d4e6fd54bfb21bd6ce2d670b483418e4dad1c1af156e9f4fd705893032b9780f20973e23198958d17c1c2685c7d098fee1aa2a88e5d04c3099c72ba4c
- SSDEEP 24576:sl1dN6YlWI+Yx7JHrT1NUtWG3DQlUf9eDTj2CKdF8Z4oFRpxW:sl1dN6YlW+lT1ut4lUfQTj2CKdFms
- TLSH
  T1FB856B5A37A481E4C06AC278C996464BE3B270154F359FCF02B54A6F2F37AE14E3E761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Scripts/bin/rguninstaller.exe
- Size 640KB
- SHA256 cb6f061f535919a995c3b2df5ac602bcaa51cf03b1d1469e2204dc90cd07f327
- MD5 20b0654b37f1629083add54be6259160
- SHA1 b5babc427bad41163b6891afd8d9e4616d246d60
- SHA512 5d56f869f8749b6c2d514eccc27079686e5dae62bcf1f713977cb60e05f442483dcb7364fcde9ba9aeebb183278b3630ca024797e340c033e60c8d47825ea7e1
- SSDEEP 12288:ijk80hS4jaqWUNtircioRitXtiNHQTnTwQ0tPYYatSc1/CF3pRI:iQhhPwF/CvRI
- TLSH
  T1C7D46C1972A481F4D177C27889924267E7B2B4564B34DBCB13A0866F6F33AE15F3E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Scripts/install.bat
- Size 234B
- SHA256 706b2ab0d12d78592b0f3bd6763f80b9ab31a553bcc26ee2cca54d5ba108819f
- MD5 17c1b044dc24be6156bc9e4309eaec92
- SHA1 40f0d20d97e1e6e963633e0628a31ec555bcd94c
- SHA512 dba4948c47313ac64ba9e821b6b293f8796455196946e52f3bd2bacc5c94a86568d455662f72d478c4ad8db612e393f6487cd74e60d778b87a5f9c6a380a998a
- TLSH
  T1D6D05E72E90BEB909914CF85F46F820D72DCF1966A20E05A3B092325E546D4B044AB9D
- MD5 SHA1 SHA512 TLSH
Score

9^/10

defense_evasion discovery execution persistence privilege_escalation ransomware
- Renames multiple (53) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Modifies Windows Firewall
  defense_evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Creates new service(s)
  persistence execution
- Executes dropped EXE
- Loads dropped DLL
- Modifies file permissions
  discovery
- Stops running service(s)
  defense_evasion execution
behavioral5
- Target
  Shooter Suite 13.1.12 Installer.exe
- Size 2.7MB
- SHA256 cc5bb621688e6455907529f09f2694f535a1ede939ff91a7844cdbb540322264
- MD5 0a53ccee36acd4730e1060819039b205
- SHA1 7db75f177335251a9156b68f9eb12dc9f8c42d88
- SHA512 a31d8b73087937a79c2a9f4e3af9d4fa0b3b4b8158672b9e21773befd67a95ffa62072e6bb9432e6e10e3dbe5efc1e89ca6f65bdf6e270418aa267e957940bb0
- SSDEEP 49152:tgg4MpBK5g2RR64/cr4kkTxkoLfMetfrjYxIOPX7RjX:7uTVdksfMWal
- TLSH
  T123D58C4B26687C91D06AC274C5B1724AE332BC140F359BCB2A62B66E5F337E17E39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  packages/com.redgiant.app.zip
- Size 5.3MB
- SHA256 9b7dc6c2fa3bbbdbd598310ae749620cdbff971e44aa994876e021b7ca13e40e
- MD5 c7774b61198a9ed11995b0ab05ed10a7
- SHA1 15b984d6d4dce1c0c2557e3576482a98f4285962
- SHA512 e54d4eec98a81b9509fee47491e84556c7c950d01bcbf458756839f7ab19257e9f4a0346922aaad991bab31b38abb2d0317f0091f0f1f927faef8bc4ef6444f3
- SSDEEP 98304:UtusxUPd61DyJ5OOiSGV3VCy4vkIu+F7HRdeoyj5aHoyvTcsAxrFoj:UtuvI1Dy3OfCyHIuG7xMoyj5aHxt7
- TLSH
  T11B463386000C6EB2E445FA7B9408796D3014ECCC1976BF6C296B31FB93457D9EA3B1AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  packages/com.redgiant.neutrino.zip
- Size 61.3MB
- SHA256 b5e5f85ec34dc852a29e09d503800fdfed08efb9ffafc27b24881a457d3db07f
- MD5 6a7a355e7847fb6e717aaa10ab0c13a2
- SHA1 914c1a99a7289d14f3da43e82fb060ec28a5ab3b
- SHA512 cad1ae6ea0d1dda97f9aef53806c11b72b0490e44b10758080fe3e21bfd6dcb72c35de191e3ae732442210c4a3405a713f83d19985377e7ed782f0da9b019392
- SSDEEP 1572864:Omfio2/MelED3PTQhzqj8/fUoIboQxW1Mu+vb6Rw/:tfioGMelEDv4/fL/QxW2uLw
- TLSH
  T168E733ED403279E989AA7768EC8868F7F56AF0E079971C6269389070F31F0D8754B713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  cef/locales/et.pak.info
- Size 380KB
- SHA256 a3deef016158da0acb5d9f834baaaa91ac1bed289d9005ae11ceee46bfe75d11
- MD5 c828ca8fdbf8e9c3e26bf84b06be7894
- SHA1 47026d61569d2dd238b37108f53e41992f6b55bd
- SHA512 39c9b995bff32aa050986103773c317535bc42352553734ff67d12e3d55bcca28ada0af0af4b9901d52a28de10e51e177ad011178c3d65dee1486b74c1aae826
- SSDEEP 6144:CJ7pdr77GjDVCE+y0h9NUsuLohEb1o6+j/9sU:CctCLy0h9NUsuLohj91
- TLSH
  T195847DBC693D226BEC280C8DC069AD139AD20D02F57B6DEEF0DD6371DBF1592016C996
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  cef/locales/fa.pak
- Size 282KB
- SHA256 879bb0494eff39eb2a6c0512a596a52ba6946263e4867b30b4a06825b74220da
- MD5 b898c6f51529ce28609e8737393b2ad8
- SHA1 adad87081bd3208868b98b5bee32cb097ebcebfb
- SHA512 fb0e0fe0a810aa6bb9b97cafdc82fb3abe974b260f67fc80505233749ad49fa917180be6e3f18b57f1bc54cfa53c4f36102e0e4a68a43bccd8dcee69c7d4a1f9
- SSDEEP 6144:+/CF69WZRAvyO6QW8H7jXkWP803gvA0N2DsiWA39J+FsUnnoaLe6GnbVWcan1Vay:S2pAvyO6QW8H7jXkWP803gvA0N2DsiW3
- TLSH
  T19554C1856AAC5AB25756C50341E37838C773EF02E349FE40FCB1077609A5A179B4EA3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  cef/locales/fa.pak.info
- Size 380KB
- SHA256 a3deef016158da0acb5d9f834baaaa91ac1bed289d9005ae11ceee46bfe75d11
- MD5 c828ca8fdbf8e9c3e26bf84b06be7894
- SHA1 47026d61569d2dd238b37108f53e41992f6b55bd
- SHA512 39c9b995bff32aa050986103773c317535bc42352553734ff67d12e3d55bcca28ada0af0af4b9901d52a28de10e51e177ad011178c3d65dee1486b74c1aae826
- SSDEEP 6144:CJ7pdr77GjDVCE+y0h9NUsuLohEb1o6+j/9sU:CctCLy0h9NUsuLohj91
- TLSH
  T195847DBC693D226BEC280C8DC069AD139AD20D02F57B6DEEF0DD6371DBF1592016C996
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  cef/locales/fi.pak
- Size 185KB
- SHA256 305ffe4976587d6d94c8bf78dfdcbab1c34c77d5a3f2b799f9324fd80622a2d3
- MD5 90296203e8bf38f8a8a0df704224807a
- SHA1 ac64415b900edc0f1fece2638e19e1b1e104f5cb
- SHA512 96e0cbc9616991e9cc6cd5f76f6a1e8ed06c3a99202529bce3926f6ed1e2177ca3bf2c26c382287a4ec69c56e6b73454ada1254fc0989c5ef7b7d4ad575000b6
- SSDEEP 3072:4gOQ1rogvzEej68Sx/OYQG0m0qUViQcn2anY1HUkkFlDyQIGtATD03x6feiX28wt:DAyMQVlkjXnA5pciWEHdX1hwpz
- TLSH
  T17F046BA15216C32237C8D24D79E0A03EF6E5939CC9288D89F543D7E506DA8C87DB367E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  cef/locales/fi.pak.info
- Size 380KB
- SHA256 a3deef016158da0acb5d9f834baaaa91ac1bed289d9005ae11ceee46bfe75d11
- MD5 c828ca8fdbf8e9c3e26bf84b06be7894
- SHA1 47026d61569d2dd238b37108f53e41992f6b55bd
- SHA512 39c9b995bff32aa050986103773c317535bc42352553734ff67d12e3d55bcca28ada0af0af4b9901d52a28de10e51e177ad011178c3d65dee1486b74c1aae826
- SSDEEP 6144:CJ7pdr77GjDVCE+y0h9NUsuLohEb1o6+j/9sU:CctCLy0h9NUsuLohj91
- TLSH
  T195847DBC693D226BEC280C8DC069AD139AD20D02F57B6DEEF0DD6371DBF1592016C996
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  cef/locales/fil.pak
- Size 203KB
- SHA256 0487f258a164a0987e4a6568c04b11a5cfd44c8456ae439ac011e29d0ffc89d6
- MD5 ebad34b74bd3ac2ab67aefcd795162d4
- SHA1 d619f2f3ed06dca54ac02bc6410a291b78a3cd42
- SHA512 fe6d444ab56bf55d058d8a07e06375f3aae7b3fd4a1cee1802f63125f3c48f5e13fd7c83053572a7c058d2db4fa58043a22aa29cb9071fec6ead217db39fb2ea
- SSDEEP 6144:NZJ+8yaN3IBQbXD+abaSRUAlZ3kCA557f9V:NZJ+8t3AQECA557D
- TLSH
  T16A14C602B3402709EBC251E55264692F77E530B93F826C6E8FBF62973BA7CD9D270095
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  cef/locales/fil.pak.info
- Size 380KB
- SHA256 a3deef016158da0acb5d9f834baaaa91ac1bed289d9005ae11ceee46bfe75d11
- MD5 c828ca8fdbf8e9c3e26bf84b06be7894
- SHA1 47026d61569d2dd238b37108f53e41992f6b55bd
- SHA512 39c9b995bff32aa050986103773c317535bc42352553734ff67d12e3d55bcca28ada0af0af4b9901d52a28de10e51e177ad011178c3d65dee1486b74c1aae826
- SSDEEP 6144:CJ7pdr77GjDVCE+y0h9NUsuLohEb1o6+j/9sU:CctCLy0h9NUsuLohj91
- TLSH
  T195847DBC693D226BEC280C8DC069AD139AD20D02F57B6DEEF0DD6371DBF1592016C996
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  cef/locales/fr.pak
- Size 214KB
- SHA256 308b056493d779fa83e1b8a584cf27a9f2485f9bf8837466661d3c9877b09140
- MD5 cada00fd560194260b4a6180db865764
- SHA1 b44bdc854769eff7755055470d4b743968281f04
- SHA512 998b09afc0aff7a8be0b9060ee246db573aeaee3adb692f88a114cf4c760b3a48477897196e4b97295619579c300de1407e94c8b8f0981eb55d92c1e9ed3498f
- SSDEEP 6144:D3FnuxgAwB6/qt6uwPVcVEKvICLZW4aa7XGxwG6vvMui+P4A5oV1XOhtKMrw92o0:5uuAwB6/W6uwPVc1WpFxmvM2gA5oWa2/
- TLSH
  T1CA24C84FAAC432C719C61273FB02D6A7DA348648F215D340D8DF4296139ADECD39E6E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  cef/locales/fr.pak.info
- Size 380KB
- SHA256 a3deef016158da0acb5d9f834baaaa91ac1bed289d9005ae11ceee46bfe75d11
- MD5 c828ca8fdbf8e9c3e26bf84b06be7894
- SHA1 47026d61569d2dd238b37108f53e41992f6b55bd
- SHA512 39c9b995bff32aa050986103773c317535bc42352553734ff67d12e3d55bcca28ada0af0af4b9901d52a28de10e51e177ad011178c3d65dee1486b74c1aae826
- SSDEEP 6144:CJ7pdr77GjDVCE+y0h9NUsuLohEb1o6+j/9sU:CctCLy0h9NUsuLohj91
- TLSH
  T195847DBC693D226BEC280C8DC069AD139AD20D02F57B6DEEF0DD6371DBF1592016C996
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  cef/locales/gu.pak
- Size 398KB
- SHA256 a37805cbe93317ae55560a8f454071e4b31fa99fcb2fdbe5cba74058a545ff48
- MD5 701cdcf3342c8d4d7b65d96f4f0e3ef0
- SHA1 22d4631ff1d32f332f1133e809e774e1a8d29eb3
- SHA512 a09adcaa55b679bab99dd139cca4fcbc7f5341fba22e9a41fdaf506b7d3ec9fbce78cd331cd0a6dd7b85c0fc5740996b60d75d2d2d272bc00e28a484b7c351ab
- SSDEEP 3072:yM3NiNbO98WMJKfDuThX1AUlAbe15akdFX6kRv8blqS4M04rDWHFEA4ZunuUGISP:yM9a28W8vbzA5Bz/R
- TLSH
  T1599417D1D7B8F07119CAAB7E815E512085695343D67E230051CEEF898801DEE3EFEA9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18
- Target
  cef/locales/gu.pak.info
- Size 380KB
- SHA256 a3deef016158da0acb5d9f834baaaa91ac1bed289d9005ae11ceee46bfe75d11
- MD5 c828ca8fdbf8e9c3e26bf84b06be7894
- SHA1 47026d61569d2dd238b37108f53e41992f6b55bd
- SHA512 39c9b995bff32aa050986103773c317535bc42352553734ff67d12e3d55bcca28ada0af0af4b9901d52a28de10e51e177ad011178c3d65dee1486b74c1aae826
- SSDEEP 6144:CJ7pdr77GjDVCE+y0h9NUsuLohEb1o6+j/9sU:CctCLy0h9NUsuLohj91
- TLSH
  T195847DBC693D226BEC280C8DC069AD139AD20D02F57B6DEEF0DD6371DBF1592016C996
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  cef/locales/he.pak
- Size 236KB
- SHA256 100904fd2771c79b5aeac339191164f41828855c98d1e3e70cdf415465c98125
- MD5 7278da424c5690b0b3b4a5c4fcb8c6cb
- SHA1 581690ebcaf2137839212411fba5b44207153bd2
- SHA512 b35840e5cc93631957cfda647f412457bf88eb49636ca006a7d058b75a833d41222c9b5686070acd60b1db950aca1f615172d30cb19e26661c51395b505a0e0b
- SSDEEP 6144:jpNmH6pM2Kf5rR83EjnBUbyJ6VuK/WlUa61wbeM9DmA5nizkh75sMXTNDBcI/2uk:2H6m5rJ6VuK/KcMgA5nc875sMDNDBcIq
- TLSH
  T1C534CAC4A2D852295235AAC39FA5FA296FF3CBB13CA23512CB14525CAC774F4BD134B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  cef/locales/he.pak.info
- Size 380KB
- SHA256 a3deef016158da0acb5d9f834baaaa91ac1bed289d9005ae11ceee46bfe75d11
- MD5 c828ca8fdbf8e9c3e26bf84b06be7894
- SHA1 47026d61569d2dd238b37108f53e41992f6b55bd
- SHA512 39c9b995bff32aa050986103773c317535bc42352553734ff67d12e3d55bcca28ada0af0af4b9901d52a28de10e51e177ad011178c3d65dee1486b74c1aae826
- SSDEEP 6144:CJ7pdr77GjDVCE+y0h9NUsuLohEb1o6+j/9sU:CctCLy0h9NUsuLohj91
- TLSH
  T195847DBC693D226BEC280C8DC069AD139AD20D02F57B6DEEF0DD6371DBF1592016C996
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  cef/locales/hi.pak
- Size 405KB
- SHA256 aa88d3c287e63f73d5b468bb12ce7e9bdf12b4625f360eda208517e952e6c409
- MD5 445f94b82634ac670a8d90fb2fe055eb
- SHA1 bd9998ec61bd9f9fd48e890dcf323d9409772ac5
- SHA512 bc6dbd3d6dbd9a6e6d7a0fedbb5198cf7018599bed7bac3999824b4c83c2080563ad419ce5e80704b8790fddb6a80f51f73ac66cf51e6485a554286a6d294bf1
- SSDEEP 3072:2OHcZYBnwpMvu3DhxNZOrlY35QIf4Yknf5M10I01UVWUp8Gzqd0aXBsnEnGjlefe:2ecZYBwJcCA59Q55
- TLSH
  T19C94094CEBBDF3B55DEC3C8A36490D3BC59D3670A3E9426348D5B3DB8854CB4146A2A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  cef/locales/hi.pak.info
- Size 380KB
- SHA256 a3deef016158da0acb5d9f834baaaa91ac1bed289d9005ae11ceee46bfe75d11
- MD5 c828ca8fdbf8e9c3e26bf84b06be7894
- SHA1 47026d61569d2dd238b37108f53e41992f6b55bd
- SHA512 39c9b995bff32aa050986103773c317535bc42352553734ff67d12e3d55bcca28ada0af0af4b9901d52a28de10e51e177ad011178c3d65dee1486b74c1aae826
- SSDEEP 6144:CJ7pdr77GjDVCE+y0h9NUsuLohEb1o6+j/9sU:CctCLy0h9NUsuLohj91
- TLSH
  T195847DBC693D226BEC280C8DC069AD139AD20D02F57B6DEEF0DD6371DBF1592016C996
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  packages/com.redgiant.rgbranding.zip
- Size 1.7MB
- SHA256 cd1c2e69c95e2dd7839414743596825387a622aa88defd08e68fe9bcfb207202
- MD5 4bec7d47ca095e5c2cfe57f56f7e3bc8
- SHA1 7dabf6a606e51c3371fb93ddbbeea0024fb9fdcb
- SHA512 ff284176d590bb3e2f11f07f41ced6eb2815c2563a5e6c3bb0a6c2015e62efd5bae4f4d3a86be8d1895a13fd11230d5e9b65f7be663ab82c89d234c5f1cf0b26
- SSDEEP 49152:bi4noei3dJVDQLorB4UWTRpDrvzt0A3KLPZkS0:bi7RtJVDfWrdpjiA38H0
- TLSH
  T18085336B8CBE0F7EAB0020F3B741D23FD6AFF5B62144916187674C6AAA5530EDED4190
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  packages/com.redgiant.rguninstaller.zip
- Size 265KB
- SHA256 6dffe3f80abea9482fdea61f186630fa2ecad3fc7f602ed8d03056aeb320bb6c
- MD5 37ded989c3edd41e31dc8728f8ffda18
- SHA1 b3092c5973940daee14a7b3ee5ccd27a9c0d0299
- SHA512 8eb13d9daa3f48f6077b79130937c8a3b5c166f79262e9a041e6760e846a3142e8ee46a363badbda0b8fe5e78e7cbbeeb545f223e001c0400b1a2f7086b5ec9d
- SSDEEP 6144:w4IfmLmnd+3RLijH93qwR9+EKhgLN2eyDj67G93mv:ofSmn4cRVopuilmv
- TLSH
  T190442342F69A28C7DB21ED992A3A793D57A99FD01F7E72516CEF14BC00D007C916D0D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  packages/com.redgiant.service.zip
- Size 65.7MB
- SHA256 b76d1d3b23f6ad66a27d09a7570c23b769545a178b8c89ab9053df14419fd637
- MD5 5030b0c2277867fdaa6056e32a41281c
- SHA1 1398f0caafff14d9fa78ab436721b64475e700bd
- SHA512 0d7ddb587c9913f7aab2a20efe0293fa6b47384d1c7c414e1beebed1e9286dbb86eca317e5752878e9cec727fa3077cd2a723905bdab484bd297c450466945e4
- SSDEEP 1572864:HLrQWMXQeazw271vEDKlEZAmP0xasoTwC4H+aX/kBIpz:vQWxeqlTPxasoTwHHdXMWpz
- TLSH
  T1BBE733C50528CC9BB0A54D73E43D8F39EC4AB87056F5068500FA236A34EABDF96CB95D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  packages/com.redgiant.shooter.frames.zip
- Size 1.8MB
- SHA256 6e17357c058cd29a1ec0221812b1bcf3f0ba72dcc34f84da7e71999adf7b179b
- MD5 96e2bb413cebd40ade7351c61c6387b3
- SHA1 2d497e5b5385d8c26c037d8c37827fd0bd454807
- SHA512 abf4b8b97a7cd48d0d8939c5b75a54e338b21c317f9334b81c76b0e6b01cbf734a460704bc00809d2b342726f080a2d3c40baa5611bc3eab2fa2e081ec808ed7
- SSDEEP 49152:mua2WAZ+zMyObnZCOvQ6Pq9+DbpZ7az0iCXM+:YLPzmbnZCOnvmoZ
- TLSH
  T1CC85339FF6B45306DADA78FEC522B3E437B8105F5128BA5EC49478D04A104FAA9E314F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  packages/com.redgiant.shooter.instant4k.zip
- Size 1.2MB
- SHA256 b175b0a54d35fb5fc0ca836a18518268294bfcbaba928337f710d5a51d750c5c
- MD5 14b78308ae1fc36c21e7f1783aee5d79
- SHA1 a382d020eff234d1fd227a55158cfe7cd31a8a48
- SHA512 4efe26b542ef8ecfdc09ce28dc89d532562e658115ac6c25d9b8bf6d53dbe98420de33dcd0123639b3bd94c29a55903b7cdc6e9cd44773acc27aeba4e5f41fd4
- SSDEEP 24576:mKyzPBSHZKnHFB7oWr6isyBQ8Vq2h5lLsd9WiBA5aq+FYui2ZNiyABHT79u89Ct:CTBDHPonEBQgj5sd9NXY7KNiymHTpnwt
- TLSH
  T1E25533DEF312AE6EF4820AD084C342EBD0D01E0664EF9F947F6732247E6DF64959581A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  packages/com.redgiant.shooter.json
- Size 232B
- SHA256 bab27927fa002ea4115e57be71e513970ffac68f87199a878466088e36f4dec2
- MD5 5d183707a4bb580a9d07d150c6c6cf8d
- SHA1 dec3518215773b55aa9690a33fd78c29e94a20b3
- SHA512 46e93ffdbf8d819f5ea26fcc6faaea6ae2701252f1090b6528e01cbdae982280e64f502d585580813eb838dd543438c1add6d4f687b9787a8d7f3de48dfdc261
- TLSH
  T1A7D0A7AAE4F4D001018483B41070A7F0FD838E2D8AD201D4F2953E57975DE13030ED19
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29
- Target
  packages/com.redgiant.shooter.offload.zip
- Size 68.3MB
- SHA256 56d04958195cc1435d3c347468edea2ce4b28d2d2b2c72668a811b704cd20ae2
- MD5 6bb2923b6af13984232783c7e07c32da
- SHA1 d877b85903719b81982a7e6218705dfbd0833a57
- SHA512 f0ab2022ff458d45babb32212f81b30beeeab915b1c8c9fad03cbe2b7297209ce4222d82445d9d866610a81e4b6dec848f6fb775b6c29c7920c1f5631cffa6e6
- SSDEEP 1572864:Ma4OXVaYRHjCazw271vEDKlEZAmP0xasoTwC4H+aX/kSWztY:MNOXVaKjCqlTPxasoTwHHdXMBztY
- TLSH
  T1CCF7338A045CCDDBA0E549B3D0EDCF2ADC5BE87083E806D210FA635654E6BDB96C794C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  packages/com.redgiant.shooter.pluraleyes.zip
- Size 187.1MB
- SHA256 3dffad67f24f98f570037a5eb0cfe7c608b81d1d6cd30b32902ba1f6b4d33498
- MD5 8257dc8eae5cd4a5969e00eccd89501c
- SHA1 a801505470262b67eea715835348f95805261cdc
- SHA512 15bb7aa345c616778c44a69e9a77d9443e148a86446e11172edc61de010727207b58b4340ba145f2469ccbc31272ccbc47eb4cdffd89c5f7aa8834a074a66d4e
- SSDEEP 3145728:TMYSecLkZhX6aunL0SubwgMexERFzay+/79pIqlZmbb/GTrTx6cqlTPxasoTwHH6:TNH7ZhqaK0rbwgMCMzS/5FlQXOTYjtJS
- TLSH
  T1BB9833CB8354E8AFF8CA5537D1DC6A67DB4608B06E8620102A3593777863B9B1F9DC4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  packages/com.redgiant.vcredist-x64-2012-conditional.zip
- Size 6.7MB
- SHA256 6872a9bf479348f0bc6cf71178ead86b4e47168896647722fa8249f4fe258a68
- MD5 99e84fd3559704727402d65d44eb973e
- SHA1 34f9932e6fde170952a2e6ce1d76c6734ed8c298
- SHA512 43881d421637c6e39809c5414170c398d6ca692e3fc062f171e7d98122567052d6fa2c1a0f2a978a562e72a3c967f49ea27b41000ed3484a508429fe4af582fb
- SSDEEP 98304:Q/dzJl68woKYEHg1cvIgOtNIYQv6xL7Zsrod3JocuP2+h43pxeLU1lqCUtIVpCgq:Q1zn68lt1/gQtJso3JQU5xNlsI/SGgH
- TLSH
  T157663358CA6D6C8FB127F073E305EA8766E471BC47406E4EF1289290B751BD9FC4A287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32