c5b63a8d51576c93c166b91e74cf3ffd9cf63df985f103fc4e283a3805f18e16

Sharing

Copy URL Twitter E-mail

General

Target
LoveLive2D-v1.1.5-net8.0-win-x64.7z
Size 16.3MB
Sample260813-fsdcjsbn7z
SHA256 c5b63a8d51576c93c166b91e74cf3ffd9cf63df985f103fc4e283a3805f18e16
MD5 0a803294cbef6e43bb4f3cc1086db221
SHA1 31d5ad0c76638fd2ef817653d25f4297d97acc87
SHA512 d7c8784c2c0aca9fb793949dab82d42dd43668d67284ee0b922aa295342c69e13b68e4f3ed9a2195e780029bbd2cfa6b061e000012e9cfcfe4d7106650f659d4
SSDEEP 393216:RHtSqUj/sIFJ3zQZz73+HYJLBJgP2nbO7d7Sec5Jfkdyyv:e/Wzr5FJeX7FBc51kBv
TLSH
T1F30733728E0590CE077E72A31AEA517078238E864FEDB9159BFDCC13657803EE6458F9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution ransomware

Malware Config

Targets

- Target
  LoveLive2D-v1.1.5-net8.0-win-x64.7z
- Size 16.3MB
- SHA256 c5b63a8d51576c93c166b91e74cf3ffd9cf63df985f103fc4e283a3805f18e16
- MD5 0a803294cbef6e43bb4f3cc1086db221
- SHA1 31d5ad0c76638fd2ef817653d25f4297d97acc87
- SHA512 d7c8784c2c0aca9fb793949dab82d42dd43668d67284ee0b922aa295342c69e13b68e4f3ed9a2195e780029bbd2cfa6b061e000012e9cfcfe4d7106650f659d4
- SSDEEP 393216:RHtSqUj/sIFJ3zQZz73+HYJLBJgP2nbO7d7Sec5Jfkdyyv:e/Wzr5FJeX7FBc51kBv
- TLSH
  T1F30733728E0590CE077E72A31AEA517078238E864FEDB9159BFDCC13657803EE6458F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  LoveLive2D.GUI.exe
- Size 53.7MB
- SHA256 6fbd3431cbfef1da00cf29399a0f21d5ccc5179f990b6f84fa0d33aae09e6cdb
- MD5 8af1825a0523702ccb1fa55664f536c3
- SHA1 e97cdbe68202457f390a5a8670384f0d6aca3c03
- SHA512 e694ad456fe094029bb9653a64906e8a8333326f4af13f47a2c4511b4df036cf3b241744961afba71992572227afa09238f5ca00b1f6e3bb9f58a91c8029bb5f
- SSDEEP 393216:zge9saBAB5YVujiqyEXmlEIaGu2z3K1SceECzVfiAANf9GIcpqBczp:ce9cBkqqlixUK1S1vzVffANeqg
- TLSH
  T116C79D12A3E50559D57ED07CC6539963D6B07C960720D6CF00A4FA9D2FEBBE02E3B262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral3 behavioral4
- Target
  LoveLive2D.GUI.pdb
- Size 17KB
- SHA256 f2ce1de85624ac5b1641c0c0ac8e8d66b59bf3fee3265cedd94f30147d3b31b7
- MD5 73599d161d804f41e741ec98ca585c80
- SHA1 98eea53b98b84a4ad52ee00ba8e1cb59b664ce00
- SHA512 b0b82cf84ca91a04d9aa099fc95556d7ace27e31789f6ebb410514e0da173c1684eda9db0070e8001a9ee9581226667bb4d402a0ae9c3fa6eac1f4a940e55f00
- SSDEEP 384:PkpnGpUjSh2YmiagaXhlqDq76dM3n30gqpC6LULmU3HlHdfIc76APejnXucXhDLm:GjbxP0sLejxq
- TLSH
  T1ED82F677A768E920D54562B6D47AC4DC377083222315EE78F1C8B994ECAFB584BF2138
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  LoveLive2D.pdb
- Size 11KB
- SHA256 17f70a1cd299b2abac4cb4f518f312a4274abfa7a0bc545ccb49f6ccf8f1edc4
- MD5 487852a4109bb8c57b3249910a01b1bd
- SHA1 dee0e997087d6a7ddb9f4a3d5db1ed41b487dade
- SHA512 d2ad1bdcf293ba1d0b4552e6ac6c98b9ba223b19d9be3cfaae2a67b1c89d4c7a34080fdf65c7a6ec2921b95a7247550bab684b37dc98738ab8f68b3cec0a43b6
- SSDEEP 192:y86MKLxcXqb26miagaXhC6qDq7wvdM3H0SRAA0gqps/Np0lPDU56MqkdmOtD3Hlq:R6fvbdmiagaXhlqDq76dM3n30gqpAGLH
- TLSH
  T1EB42C43797A8DA61C0816A7B6935C4DC333183202714ED76F2C8A958DDAFB9D07F22B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  patches/Renderer.aex
- Size 2.8MB
- SHA256 ea748af7cb35d443c6411a10ebd61b04c56f283f295839196709a4766ba2b28f
- MD5 02bc08dfd6ba398e706020155d1d8f2e
- SHA1 c41ad93fc1dcbe61bd3615f6642690b02eb46de8
- SHA512 992c699acd477fc17cbd9b427faff7aa8b2639696c111dec52dffc52fc3f0017202c8ed3b740c7828de6322504f9c30b074cae4cc1b47945ed3ba60de8511188
- SSDEEP 49152:w8ZkJQURAqs/u7aXHxbGB8ZJ80HxmY5bJTSNHUSO+I:+Pw8SN59A
- TLSH
  T1C3D58E27A6AA00F8D07BD0788A576A07E77674060331A7DF17A18A561FB77E17E3E340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  patches/rlm1501.jar
- Size 33KB
- SHA256 b1cc500c9e3bcedf1c316d37f56aecdf0da6e81d0ee6bfaaaf2417f652770bb4
- MD5 7f038fc1471e1627efcdca1a958dc3cb
- SHA1 4271c6e4e895234949330a99b4d39131f7c1f84b
- SHA512 31d09a5b1f6eb0a3bca0e352c9f3141f383f8ca3c94e723df052e2aa4f298888a43126dd77ae8352a790a5bd67d3a3603b4ed5bdcd6cc916fe7e56978646828f
- SSDEEP 768:JofWmfYoeqGg0YPXZtxGnJ06kyWeqKco7e/OO/6DeeI:JFpoeq1Pa06NWEV4OO/deI
- TLSH
  T19AE2D14AB948D158CC5764B01E12F293F32219EA9588DDC2FA6087D81C16F468B3FFF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  patches/rlm1603.jar
- Size 33KB
- SHA256 a13e71299dbe9aaeb0111420cdc50add7971839d33b9bd80bae77489d4b58daa
- MD5 e8229573bbe78f4e85aa6f1523393398
- SHA1 d06c33cf6c194b3714aac2f9c2d77c5278561682
- SHA512 f0f2484c38ab109c0b9c4d4af4238d9dc9dd8649cda7964fa75545818a162dd8c74a9f36f1f4308e2c95da296c9b2043d504521d7c10cfec2b1b4fd1a286c246
- SSDEEP 384:DL0DUMTTGfS1oekoU7gYBKm42n6neuvwtyV2GeYoeLbrZGAuS/c4NjMPx5HB+ZgK:DofTafYoe1Gg0BnYoJOUYUy/Ov9Cr
- TLSH
  T1B5E2E1153A949A68CC5BC6319557F1179AB988BC21CE8DC3B29482A40C0DF8D962FFFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  version.txt
- Size 6B
- SHA256 1c60df040a80b6d2e3f56442b17d127d8620cd773873e6e1353362f989b1deca
- MD5 fb45ffd85a968480c5e42650ff6b52cc
- SHA1 e97f36d88bcb237f34c87e76d0b9adb8817bb1a5
- SHA512 ffa34354eabaa984df069302a7f76b5f01ce82c1823a179469acc170f29a342ffae61530ac1596949eb84afd65c7ca3f141c8484f2d51771dc54dfe006598532
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16