875a2675f5986dc75f4866f1b1e0a3ad5f934686b028dd16c6c8cdb653b06d4c

Sharing

Copy URL Twitter E-mail

General

Target
$R64GUJO.zip
Size 72.5MB
Sample260813-16lw3azbpg
SHA256 875a2675f5986dc75f4866f1b1e0a3ad5f934686b028dd16c6c8cdb653b06d4c
MD5 373ccb346b086ccd187951c7c8cc1a43
SHA1 b74e4003e2da55b7ad30250884642caed93be7ab
SHA512 0ce13623fae9311bf3db47805535810d4f1ee85c9a61b9939c37655131e6f205f83cbd1712289ad6b3125680be7f8ab98c1ca2b7ecc81832c3aef5f2436fc6c0
SSDEEP 1572864:4o8T4vDs5D29kZ4svVZ8ydEwGF49T+yHS9XEja/jeGlzLQoQL4srnVwqNOVDX5:4o1DTSnq2ExQiyylfjeGRQ14sryqNE5
TLSH
T147F7337879C2E8799ADA47310F814127AED8B461E5BC0C738F7EC666FE089FAD1152D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  $R64GUJO.zip
- Size 72.5MB
- SHA256 875a2675f5986dc75f4866f1b1e0a3ad5f934686b028dd16c6c8cdb653b06d4c
- MD5 373ccb346b086ccd187951c7c8cc1a43
- SHA1 b74e4003e2da55b7ad30250884642caed93be7ab
- SHA512 0ce13623fae9311bf3db47805535810d4f1ee85c9a61b9939c37655131e6f205f83cbd1712289ad6b3125680be7f8ab98c1ca2b7ecc81832c3aef5f2436fc6c0
- SSDEEP 1572864:4o8T4vDs5D29kZ4svVZ8ydEwGF49T+yHS9XEja/jeGlzLQoQL4srnVwqNOVDX5:4o1DTSnq2ExQiyylfjeGRQ14sryqNE5
- TLSH
  T147F7337879C2E8799ADA47310F814127AED8B461E5BC0C738F7EC666FE089FAD1152D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  PrimeHub v2.1/PrimeHub.exe
- Size 69.5MB
- SHA256 610302db4f205027eb2ff84eed5b0652fb2e0a582f5a3daf7079ce7bdd3f809a
- MD5 6afa4952d47bb2ee1ab6b24a35bb2d4e
- SHA1 9135e308e2992ca5217bda0c46fb465d0fa40d1f
- SHA512 8e3b2e00e480b2389b0d932821d5232a6d93ad8446aff38a4b38f25eb3eb0a90e3453c4380cb42285ef50efc6337a9f88f1ba5ad2c63dcd225b55d6bf153b656
- SSDEEP 1572864:ZejOYfORHGzi7E3EWgUZoiIR3dtKuQvPHNyKfoC1CrPF7:Z4WRH1ZUTIR3dtxivN9oC1SN7
- TLSH
  T178F733E5E298DDDAD858F6BE6BC258198509D7A582C7348C08FF99E07E110BC172CE1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery execution
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
- Executes dropped EXE
- Loads dropped DLL
behavioral2
- Target
  PrimeHub v2.1/jvm.cfg
- Size 4KB
- SHA256 76c6dedcc8f51e80c08b8bead23af8168ffa0de26c57e546cefff2f4cf318bcb
- MD5 e9da54c707da4e8ab2306b9f7c5f30ae
- SHA1 f229561832df50b9b2bbea74c7234423d9e0a61f
- SHA512 d1be773d908e4eb1cdb34a3d4b9a4b2c179026711893f81cbbbeb0571388f5d44b0ade12c351e4f81439a7afd5dbfe1445d1bdd142c4c31ccf4d1ddb6ad45931
- SSDEEP 96:si28cXGJMpOMRVF4U6Awknpwuwjv3EgYWb8hsqWPMWMrEWBnKvTgWTWekqP3sA7L:pch/K
- TLSH
  T1E591E025B2501C0AAEAC12BFFC481C8133FAC0C5589F049DD41AA17E3E6DA653BDA45B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  PrimeHub v2.1/scripts/actbusy.txt
- Size 15KB
- SHA256 79ef3ccc0a05d066d707c6f73a2b6a266a8862e9142d3ea8dd9b298c494674bc
- MD5 f8a0af04bf465657917b0753cbf11783
- SHA1 5e89a8dc57effdd429c426a91f872c3583c97936
- SHA512 1e09fc10a04602677d951fe5c7435b82bb4518f8095aa25b5c7e8843f12ce5eb2c94c6217f581b9f8af8c8442c2f30bc03f5e62ff523dce8f6f1472816311fc7
- SSDEEP 96:sHk6/2MMr2xb+LN1yxaekI2ySutP3dvZ26UCN/OCOgM40kAvpOi3HUbAU/2CxGE/:6V02b+LWxjtP3dvDN/Z5jxGEqxKroe
- TLSH
  T15D620B5F38655D2386F08D2B58BE9DDA5FA0606160FF1CEAAC50F36C848CD24496BF72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  PrimeHub v2.1/scripts/actremap.txt
- Size 4KB
- SHA256 c2b67cfac752e75a79cfcfc72443bf7056f7e769489f638963788dd2215c549c
- MD5 f83aee55b22442f691bc778dc8098f63
- SHA1 bd6ddb194c4f8085c1cf7a1319bf9d11c041e7da
- SHA512 dad3a988fe85414888061c16c78dcbce275161d8898c13e12a10db907037b9ee67e0f17c3e994b201e7b5cea88f474e418332630a8c521b54c79fb72189178c3
- SSDEEP 96:0Ha6jb1v46FeqqJbKPJuZLJBKLJYq9JfJNOAOpqZJLJ1OkOw:b6X1VWJbKPJSJBKLJVJfJNOAOkJLJ1O8
- TLSH
  T1A4A14E4B33CC66A892B32253D17A4CC5052FF415497F64F8EE56C4E8E6283A1723F95D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  PrimeHub v2.1/scripts/audio_options.txt
- Size 4KB
- SHA256 f379f2f36476831900d165eba21514d0c3fdba1a15c7306bade0c7d4ff44bcd2
- MD5 d9f440fb788a0c9d29f4e4d1e7a0313a
- SHA1 0f4c2b123b62727c2acf64a3bdd18581d078e000
- SHA512 5d86a9743d1a630f84b4c932e62e13665a20d43d16709d00e64f4e6f5d35f273436165d0bf239986e27dafcd32eb926e7b3ddde269df3f929ecd6b8117f88dee
- SSDEEP 96:GQ+lBQ+0y+Gqy+Oyy+9y+iy+Ry+Py+2h6y+ky+U:s9yhe
- TLSH
  T1DEA1AA933A0771B75A8B281BA275DDC69FCE104340DF0DF8ADC809ADD149C5583BA7CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  PrimeHub v2.1/scripts/bonus_maps_manifest.txt
- Size 43B
- SHA256 7ceabfaf88ce7a25fb60adff6eef71cd9ab66cb5984c0d2d510318d493b8e61c
- MD5 202c4a9d2d9aca6da3676c9e54b5e2b7
- SHA1 81a2af1ced9353891d9df68b79650c62ce0f03b4
- SHA512 8a71d84c64ed0e17ea2b1f99dc7d338ca24db5429594bc128b0c46543b2aa7246ddbdc53f61fd6af6020c801b754f51cf96054f7e8f6cc6a1d6970f247e41c87
- MD5 SHA1 SHA512
Score

1^/10
behavioral7
- Target
  PrimeHub v2.1/scripts/bugreporter_defaults.txt
- Size 19B
- SHA256 2cb6de377ded7f799694df38f83c446d1fd41e61d6eb6f16008072ebd4933448
- MD5 ccb652b81adfaba6974e3887b3df800e
- SHA1 c25c4857ff14fb3b73462a3e04b3daa6286c3564
- SHA512 0939cf2a1d749bf34ea34a1ea23da0c05e6724b40d00cf7451fbfbf101a69f1a9dc39652a85cd6c3b3dfdbcc580cda83896c16ba50e6fdd8156e8f0ba88af27a
- MD5 SHA1 SHA512
Score

1^/10
behavioral8
- Target
  PrimeHub v2.1/scripts/chapterbackgrounds.txt
- Size 37B
- SHA256 9bbedd3e085bfe5c469a54f732589813ed6af1d05b64f1bf08fcb0fb90c52dc4
- MD5 1e81f5e15466f87fcf870f75080612ee
- SHA1 71b506dcd9c01947203cef8ccb7095b97f35dce8
- SHA512 c850f84f453c0fa748c929873a1d23f74856b52bcae15cca82577a42f42bb437cd9a59c48a51c0e24544fb29e2968d1f02e534cca76cb3d2a0151fc70ac1b22b
- MD5 SHA1 SHA512
Score

1^/10
behavioral9
- Target
  PrimeHub v2.1/scripts/clientmenu.txt
- Size 6KB
- SHA256 dd775b8bf839a2be6e8c62be9effde60b6788b980001bf20a5655acfb53e6ac4
- MD5 d80932b6bb50903f23b5a4efdcbf41f3
- SHA1 5a4691830d5eade69feb0c94f0d3adbbd56873c5
- SHA512 4b3dbc0ce19d943ca82dccb06f865caddc81edd223becf13aca503a14e3a7df7982ed2e819414bbf2ae4e60acf599fe9f6c827161bd9773a9da29364131efa55
- SSDEEP 96:h9x0KtKLJoAyxcJx3z0Mb6vlAlilylrcEQw3RQdQCQz3N/3f:LK9oAyxcJx3R6qcE/3Rc3U3Nff
- TLSH
  T148D1261B7F9D74DBD3D1F94B02BC78C4D82ECA89126D05DBED526C28C4E4A24413E6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  PrimeHub v2.1/scripts/controller_options.txt
- Size 6KB
- SHA256 828a5fb1b7677e40f6bfbf613e5b6e90cf6a3baf051caa7ffceb64f61ff7754b
- MD5 a300f751268f4b5245852bbffef58ee3
- SHA1 fa4e46b1bb102f1829718a117178fb276af711c5
- SHA512 68ff02e38a447010b1458dd6fd996090fd2e2b68c2406b1da8c99114c5251803c5cc31e6e0d3f93a3e4f20c73acda0ab7e9d14ade066acb6264b5ecc06017c9a
- SSDEEP 48:bngsJsVvsHa0ysjThsjJy5tM3FDsL5+CFDsL45Qs2L3YsuYMUe/lIPIR1ldt1XFB:8IaXy43FDQJFDL0LIDisxNq2cDtHt3q
- TLSH
  T1E5E11667396B23A613C7248F5772DCC15E5A928340DF0EF67CD9AE6C8054E041A6B3CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  PrimeHub v2.1/scripts/credits.txt
- Size 8KB
- SHA256 08bdd94e0f463e377994c055add681dd674cfb3782c4f28f5b02810c44ede773
- MD5 0f1af7ca62f8bbaaa45bf3f58d1544c0
- SHA1 a89417aa0a1d6300514afff7a11ad5bf7eb0e51b
- SHA512 6db47af33de1d8e8ce4d997036dd6314a18208b7a61e4aa72a052455f46f68eead6bc5ea26c4f3bc9d9c820ed106df7626e716ec1ac54950db56320ba7b326d7
- SSDEEP 96:LbTt8psGFw8NUnBNKYznX7yXYWwarC9jjz9U5QcangO83JQqwSpOhlGLOoZ9Zq26:TtR/Znry7CXHcagHkOt5V4TFWmZ
- TLSH
  T14A026F9353E4326FCBE98C91C635CFD0E7640652930E0501B86EBCAAD5AA7F40B4BF52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  PrimeHub v2.1/scripts/damagecutout.txt
- Size 22KB
- SHA256 fd31b2f7d9d0fcacf36a14ab0791f3db99d4c6d3474f03301acbefc4543d379c
- MD5 e64857cf92b6565dab38838a2e92ea67
- SHA1 c74ea6e46de465f5f4dc62af831fe83d8d49c6c8
- SHA512 bd2cc635efa539f6307d83cb6e5960ba214f328e3530ca9e24d63fd9b666f38577d7c2a8eb32668099e9859010ffcf1391a04ee541be66c8be134d9678c9dc9b
- SSDEEP 192:Yg5r9O4uGiNKptEDATB0zdEiA4ZVSLBTolbobpn:Yg6G+ATB0z5AgGBThbpn
- TLSH
  T130A2E03BB389087F1E8A06D7427268E1ED4C4B66409F3FD1FC5D551CE0E5670BE2AA4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  PrimeHub v2.1/scripts/damagecutout_ceda.txt
- Size 12KB
- SHA256 92a628450dc3328ee33e8c7437112587840cf860c526216930df35f0329729a9
- MD5 f06651f3af4548e13ca1c6c469cb5ebc
- SHA1 cfeec9e81fa2a404f3ec48b36c62d864ae3245ab
- SHA512 5875a20ea0cf9e050fd3db5d209558397310db6c7adfe8457dfd09da9c506c2abbefb7ed902e5d1b347fb37add9e34f770b3416c9f6f12379436662502b722e8
- SSDEEP 96:hQxuG58PpXRXGKJGOpXQ+X5oJ1EpXPyX5oulopXe/O2oespXVSI+V44pX8xx424q:C/5peniDATB6dlEkA4ZLQSBdzrpY
- TLSH
  T1FE42CF3FF34509771A961AA7C47154D4E84C0666014FAEC2FF9ED63C93FD6B0A6AA203
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  PrimeHub v2.1/scripts/damagecutout_female.txt
- Size 22KB
- SHA256 3db9c42023c211d8d6609256fd618b725d03b01570f61a8e4d295345d2677db8
- MD5 7624c8d64a6a5ae9d8bad827a70c637a
- SHA1 0b2418bc25521bc56675a056185c14919de780e4
- SHA512 27ab317f449a40308de3b0e2a55425052d98942e97e3ea1e94ab8ca91eaee41dfa226f02e4166d64a7a67047490ad2a59a8a2da9d64cf0b28a77bef1b99c478e
- SSDEEP 192:fN15CX/5snzvfATBxzuE44Z7KrBTF7BHMX:fNvJTATBxz2g0BT3HM
- TLSH
  T174A2DE3BB389087F0E9606D7427368E2F94C4B26409F3FD2FC4D551DD0E56B0AD2AA4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  PrimeHub v2.1/scripts/damagecutout_laughriot.txt
- Size 650B
- SHA256 1822c83bda2d41e446afecb3bbae8d7459729289202999a07d061e747ac0a3c5
- MD5 b00c3f42b5a7cffadf464645ab72604b
- SHA1 cc5242ef25b0cca76c23ed2779bca6ce65b0eff7
- SHA512 46c445d4544e94d2f082dd30e19fff1eecb9ab60592594b1de3da8cd207012184e91dfed2777ef9a675ab9512f12a01d51646a12242f1888b6bf9931ad2456d4
- TLSH
  T1FEF07D3BF3091C785FC65557047258D4BC5C4669425F5ED2FC4D452CE0E9470B96A382
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral16
- Target
  PrimeHub v2.1/scripts/debugoptions.txt
- Size 3KB
- SHA256 11e3db2e9a003b481afa33a52061f312f5f7020eb73bc75fbc93130c11eadd4d
- MD5 b9c5d7ab4b5dc6c7bfabfb4294171d00
- SHA1 a5be350dc18b5414b66aa8f936cd95ce2d121c5a
- SHA512 76a39fd7bbfd12f53a55f8ee76bcbab1b435dc1b709786e9fe3c57678fbff81dc067fdb469df6a92e85b840026acd377dcdba04959dcde1d07fb04dda1f89bf8
- TLSH
  T1DF718E173BBD244E6BF83057447874C41E9FCEE6411D06EEF926A53CE025A20196EBF9
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17
- Target
  PrimeHub v2.1/scripts/game_options.consoles.txt
- Size 2KB
- SHA256 de7b58472497a377e40fe71a835108e7af0ac69754582907ef1b624da82a46bb
- MD5 2d1a8273d27d4f581e6ecbea728f8ddb
- SHA1 4d90c143d5a57d195d738739093f917ab59ff4a0
- SHA512 bef55778dfd6b5e141a28692f0899fe9efeac4e4e15248a426bd3536875e3378ae7603d2fc0ce9069c50f35100e1b81473922b468c6fa7d261c11668a665379d
- TLSH
  T1DC519B9377456CBA16C7241B9234ECD1AF59B212509F0EE8ED86B93EC46CD01962A3CE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral18
- Target
  PrimeHub v2.1/scripts/game_options.txt
- Size 15KB
- SHA256 9b42e854cf0b560e54e01d3e3d80fef742bfb356771d6b13cb27596eaf2aa3e5
- MD5 d43dca476fa1fe879914ce2a55fc22c6
- SHA1 925e7562432499fee500707a4f59a8db69111c6a
- SHA512 30dbe97b5a967906b212b0358ca27d5b31294ee8e17254f1dd0209f99728ec6149667b5a9710056146c7ef594f692b594881988d2675752cc5e0aa6608b715ca
- SSDEEP 192:wcdaGTdSsb6voWAyAUuYi49KrJXNwEebIh7fcZz85SMRaNtxqMOdOsOA76AC7Gd6:wMaIQVmh1gNOdOsOA76ACCdUH
- TLSH
  T10C722253BB09A56E918F205BC631ECD55E1EA04200DF4EF8FC84453DE268A519ABE3CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  PrimeHub v2.1/scripts/gameinfo.txt
- Size 192B
- SHA256 095e213be631a498ea4423f9e9d22ff18b3e59175883e075a1275da2a0f5b7f3
- MD5 9bdcb8e557e3b582593ccb2c37744512
- SHA1 5b75559477719736d251930c22b5cd4e5de457dc
- SHA512 ef38a967b8c11c5c3cd1602a4324625fbd4118682bd421c36d4b2ee0b30e95251795b8caf08d4f7227768badf1d4005e458d54337bebad72fdb1a287d2c3a058
- TLSH
  T197C0226F2B0A8A3707E980740B227180FCB13346000B560BB0E014A1B05958B60680A2
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral20
- Target
  PrimeHub v2.1/scripts/gameserverconfig.vdf
- Size 1KB
- SHA256 2987882301cbdba587bba54be6b7dc8edbcd865ed5df87c599478ef34c1295f0
- MD5 d884c4921502f2d1f4564d2d48af52f0
- SHA1 9aa0b4c38093ffe4e92c1bb2478805c424e29c35
- SHA512 43986d86633f403d672d3eb618a449b2b2a73877e2dcecaec0216f5a566d64e5c0cb2951c6be9210016ec676a6edff50cf22e54d8508cda7c92225f23a2bf88d
- TLSH
  T197413BAB36821D8ABBD35417D1345CC8AFADC5B680EE8EF5DCC96435C02C220641D7FA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21
- Target
  PrimeHub v2.1/scripts/gameuianimations.txt
- Size 8KB
- SHA256 02c44cdd01232badfd1e37ed44aa3fb343c330abb4c1a6128d2c8e85d0c02a5a
- MD5 4316699e066ce9b6022186d89f61fbfd
- SHA1 4919e3db70048948251675788406e0dd7c184a33
- SHA512 110a8ff761818d9458ba66d67dc540d35224bbeb44e127d8056023ba19cda3a10d2ea3fdd84b8db1ea3fe3a8c3974bf99599f32595ee9d8b09b30c8a65b00f31
- SSDEEP 96:4fDt9oAo1y0d0TG8twCGr2BTtyiZI+MFzMp4nsqzAlncB0aoH1Y9H4ib6SYvP:sDt9NoeSq
- TLSH
  T131029C5B0C4285F4079EEA3D43BF1600EE6624E72A1B3D9939E60F8E7C49484D1BE76D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  PrimeHub v2.1/scripts/global_actors.txt
- Size 592B
- SHA256 3d90c47f23b561e206a5d0b8db39186e9586abec2f96103793bc7a0b32d78dff
- MD5 3351fb3b794cc1e7251ef96519580d5f
- SHA1 b0288f611aa2e07fa2379637dcbcdd443600dc71
- SHA512 658026524007b23d03a7a53d33b4cafd447dcd903d001832f5e8b3c18fddbaa7d2e84d6f115e68f571c5e3d0651bfec06098d5013723d31f49976ef58a493710
- TLSH
  T17CF0C82BCDC6A5214E7A9F8C82F4CCF4881706006D5F84B32819DC7CE606BA0B0CEE0B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23
- Target
  PrimeHub v2.1/scripts/hud_textures.txt
- Size 1KB
- SHA256 c61a9babfe891fac7315ebf6c34ad33e25eeb1b0c7c314b8dc2fa6ce80dccd9a
- MD5 a4284732c877cca69858183c19bde4d8
- SHA1 43ba0aead29c39c1d910f1d0eeeed44d0ebeda4b
- SHA512 62c0b1036bb85e5c34f4c4b4f4bafbf1f972cafecc9170dbdec28270a09d268997500d370acb5b21bddf09b828994c2ff2edb8c2e570e61dda3522162c48d296
- TLSH
  T15E41A527338EE0ED82EE665B453958D0EE1CC75A624F0BCAE41A880EC47588167BD7E0
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral24
- Target
  PrimeHub v2.1/scripts/instructor_lessons.txt
- Size 4KB
- SHA256 f42a3297ebf5230eb4fe9a45b9982c7736d4b5d737874bea8bce7feb7f599ef2
- MD5 c0e5ebf624378601a3872fa5156bd389
- SHA1 2bb682004e4237dea6adbf60b3a39a1cc3429a18
- SHA512 813a125d8d8faa9b695c0e965c51f2bc8387445c217825b2fa96483152a3bb38cf6ae91a11a65754cce5262122a26707bffcab28b3bd8c4b2b1bbaf80ba15c4c
- SSDEEP 96:zYOTvd+oG8BPzV/tidHEsonj6nvHEsonj6nf:zqSJ/tidHEso2nvHEso2nf
- TLSH
  T19B819A1FBE4E60EB45F9C56B157CF2C0E128E2B112DF59E1B8DD806C962C21542BD3C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  PrimeHub v2.1/scripts/instructor_textures.txt
- Size 4KB
- SHA256 4a7f2dbcd17080ba0fb820e957078ec18d3303f38322287a1839745045bf54c4
- MD5 dae1deca62a3efddf77042cab4471c41
- SHA1 8fa3a26738d65a1e899af55a7fc648cb4fa04d75
- SHA512 3120b09ceb097ac563757304684c99e8615ffbaf39c2db9997916bf91ca6d98f2d7d082a0ef63a2c4df250b5d5f1b896e84c552a60ab5ec95765e6a2dc4355da
- SSDEEP 96:VEiOyhrhbFQD28Y8KAMfVYRYsYcLlY4Y5EpAY3WM4IMZ77MnM0MvAaMp1l:yYtpE9bpkaansODOpAY3W0+H0DEALp1l
- TLSH
  T151A17323331EF0DA4BF9954B843828F6DE0CDA5C451F59D7B599632DC4B8C4A2AB8BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  PrimeHub v2.1/scripts/mapautocompile.txt
- Size 2KB
- SHA256 b968d9e415ddcb4301629fe51316dca067824004b6773b362a1098b56d71e63e
- MD5 c582a0be516db4a9016c20b72591142e
- SHA1 d7ac4fbc6b36823b06380d91da4d95f5ec7fd830
- SHA512 f5824efe8c404391b79805339b73a08b929d061602817ae6476052eef92076679a83324dc448006358d34253aec415aefb27a830069fed23da1eabff345cd6c6
- TLSH
  T1DF41279C60E0F409DDABC6BA80B84767DD7154DE73769D25E90BD91125F0340236FB6C
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27
- Target
  PrimeHub v2.1/scripts/mod_textures.txt
- Size 6KB
- SHA256 9e23ae29717a0ae0f0ab98065118efb56d3bf23d358b35dc9665c20cd0d0c566
- MD5 6bb18a4a445d115893090195a090708c
- SHA1 3079b332bb45ab5d2ce84ac1ada888e0776ec1eb
- SHA512 925f8e61908fe8976659b2b4bc109808596ce3a98ab2cb524772cd41c71c9c0ce8f03ec0d06cb005a061c4c6649e718373c74713b1bfa1a646f4dcea16dc4d00
- SSDEEP 96:VEczuM1QJZUCiZaLCgNT5lT5AT5oP8NbknAN3FVEPCW5t:rzu9KCiZaLC8fyKP8Nbkna3F6PxP
- TLSH
  T167E14C2B378FA2CC42EEA34B5939D4E0ED4CC889120F0FDAA989421DE4B5D54277DBD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  PrimeHub v2.1/scripts/motion_controller_options.txt
- Size 3KB
- SHA256 4d330220552d4f36c364304c0848d19129dc72ea4212de65e7a69d3837f9c2c1
- MD5 d49ab9fce85500054833fd30f5cba43a
- SHA1 72aac5f8b0061d7c98687834e9752947f9ecfbc7
- SHA512 2777455032531da71593fcd30deee05c885e3ea2bd5b1bfae4dd2d14879e64b4c7fb853b35fe419eb57373e2431dc8adfe5ba6d52edfa98e9fd8a48094495d4f
- TLSH
  T1E781C36739AB625617C6248F5372ECD06D5A528740DF0FE37CA9BE6C8050A081A7B7CE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29
- Target
  PrimeHub v2.1/scripts/plugin_animations.txt
- Size 1KB
- SHA256 9186c7ebc7307df131907a63cde2000f97837d796d95b7623e904ed8e3e90d8b
- MD5 620da2ac16f8032fb99b161fa4ae02c9
- SHA1 52f83f5e6337974264fcb52904670deb60c32c19
- SHA512 1fc9a7242af7686f6ca0d824b5e64d976a4d0ed4e25db113de710661a6777356b4850093d4f334d43826a15b0d2e07c94c1f82f47d04bd856e150c53e152e97d
- TLSH
  T11421BB8114C0C4FB17674A2A697D7B846B3200D78A06B920F5DE1F8D9A09136137EBB9
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral30
- Target
  PrimeHub v2.1/scripts/radialmenu.txt
- Size 2KB
- SHA256 319932516c94c4c098a785fd4661c974fd49cef7199c0d10e69fbf17cc328e9e
- MD5 484a3432ab7c3d7ca35d7727d235cec7
- SHA1 ce3d01e534e059a46379cec96f4fb4d5fe0cb6d8
- SHA512 be31cdf1e7e5dc3a952dd0fcad8cda49540096fae333f09d5d7733be49258cdde54fa3020053cff67947831174b122942ad40281a3b1a121761597bbc44f2ddd
- TLSH
  T12A51C5633F7EA88986D5E173123478D1D4DEC3C3051CA5F5BC26762DD4A1AB8086FB82
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31
- Target
  PrimeHub v2.1/scripts/serverbrowsergametypes.txt
- Size 2KB
- SHA256 bad511d788d41bef2f5f6e741f13caf64077cd765e4037fe5c97c5327897a4f9
- MD5 7b7ab958918e92f926809f6bfdd5be1a
- SHA1 fe997a8e73f57972e86e52f045d4f951e89b5102
- SHA512 7b2e649cda0115d3a506e1c2d732d857e7dbcc253a59cc2d0a6bb9e8f08725be4b17d9d375ecdf74bee86b94d1ce911b4f22b36ee2622f5d08a4b7bea800db38
- TLSH
  T14041E85F39B7319A13950A7EC17A1CD81E3B400A1EBD6DDCAE8A142B81F5A1D2C4DFC9
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Command and Scripting Interpreter: PowerShell

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32