d41beecc5519ffe9eddd2203effbf94d6e4c2339051b4ef5b239839c2c1973cd

Sharing

Copy URL Twitter E-mail

General

Target
Among Us Sheriff Mod v1.24 (v2021.6.30s).zip
Size 20.2MB
Sample260815-e1ckjsyfkd
SHA256 d41beecc5519ffe9eddd2203effbf94d6e4c2339051b4ef5b239839c2c1973cd
MD5 cebdcd0ec595defae658b674d3358d69
SHA1 08a7986f5d3066182eb8124e98d11bbc8aa99684
SHA512 3e6b26af7393ba2dc1929d49e2e95b853e78ea6a4c8a8edf4732df430f47babe4ae7026704e8d45a2f4ce9bde49392a5483af11155fa657f4f4a0a2447a69c1d
SSDEEP 393216:s3ZkuysGQR7HguXZTgQn6J1DCRRUGx3pFzKQy3A8LggMSW9Zacrx0ANP7y6maOwe:u2uvGUHgAZTgQn6DCRRUGr0Qp8LdcdNI
TLSH
T18827335EADB8C8C5E14F723DCF23916E26942124A5167E3E2B3847D872B0F798F31859
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  BepInEx/core/0Harmony.dll
- Size 182KB
- SHA256 7aca7127a2837bdbaf5397a085a599b70381c48780ebc3144eb99846ee8e6787
- MD5 16df7de591d788f8d61d26a6c0c094c1
- SHA1 3871100827e62a371504c31890dee231f3ef68a0
- SHA512 5dc25840225b44a83e4451659e3529f93027fe91b4b3f2d32035f54bad688cddc6fc9379784834389ac1d6543df42720585f360d0ac04346d1c5a8fc5e86fb91
- SSDEEP 3072:6mLaVjT7J95JwbARdYb6+ErJfGRJl07jihOdWJMuTXQCMuFDRN:FCT7xJwbArZ+UfGROWhJKWQQb
- TLSH
  T12C04395437FD0712D7BF6BB4E57010560272B817E87AEB8D9C80B4E91C62782EA613B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  BepInEx/core/AssemblyUnhollower.dll
- Size 124KB
- SHA256 de89f0e118865b791db842942ed431766efd7604c4b9c9ee5c4dcc4214eafacf
- MD5 5df601d00c6958d9d8f69d5ef3f05ba5
- SHA1 551b51e61014f7b1d5e64f51a290dc7f05999451
- SHA512 914cfb1cf967021d3bad608c644229f5d6396719b4b5c7b5d096f6becb9f5de7974dba24f1a843e0d7b0a6fbfb5725b20fc554ff4e06f9c9572dc8a82305e39f
- SSDEEP 3072:AfDYLKLARy+XSuclMay1RhnTdNF9JdQDm/lC0PNfl:AfkLKkA+iucmaYRh5bdQDJUN
- TLSH
  T13DC3491433E88A06D7FF0AB074B0695803F1B8879A23DB4D6DC578EB1D5A7909B11BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  BepInEx/core/BepInEx.Core.dll
- Size 98KB
- SHA256 de8e9f62cb4ae75cb781ffbb0aca1a6f4901ed6197846510a419f2ce22a15c27
- MD5 ee8a51c71fc80e8ed2b762ec10ed0a85
- SHA1 68ef602d2c29593337b0983b28c8729cac52810a
- SHA512 f22a950cc99902f34142aac43f6aaf93a54ee1092bda9d88118ca490f9278831ad63a05d0dcfb63ef5825015ed2fce971b96982f5bff0681d02babd0163b8df8
- SSDEEP 1536:AcWJ1Fa/PlZ2SBQHE+0cAnRMSYZEnqwbdV91RxPBJLal7/D8zk1aT/ixXLzILjt:AcmKYZEL5VL7BJLr+aTaxXIt
- TLSH
  T146A33B1523EC8B56D3FF2E7578B251150BB1FA4BA432FB8DCE4C74AE0922BC2451176A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  BepInEx/core/BepInEx.IL2CPP.dll
- Size 60KB
- SHA256 1ab2307881ae1dcb7cbc185749ee36f24f8acdbfacaa4d7b35c8d595c5470f49
- MD5 348f12bcd809626217c1d82667ec3f91
- SHA1 b0587c9f82a5c4a103b9dc58c7895def9ca82e32
- SHA512 aff7dc7ff958c0f32f74afc2d8c59f4c5964ee122bb6ab6330e2e0ab359332ce9509deb426444617033e19d590885058504056faee1fbe9b6b6ef572fa96043c
- SSDEEP 768:EOXUDJ6NadURTCKKOSIralqMyPgaAO88PH/iwOHO0fClQg6rM9CT9Gysn7P74uxS:B0JgsUJgaGkHB0AtgM9Z7pxS
- TLSH
  T119532A0097D89229DAED397D7CB215000BBABA532413FF5B64484EEDCA96B804F537E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  BepInEx/core/BepInEx.Preloader.Core.dll
- Size 24KB
- SHA256 93f2af0e71dbf8c2984193507a096cc787efb95c0401f64e0f0d696e6c53d856
- MD5 a1854493c8b31baf11a7b144dc398710
- SHA1 95faf0fddd235e42e94623494244d69bed5113d0
- SHA512 6581851ef03ee06b7ede5bcf33f56a4d8f57f1dac6c34259b3f08527e8c4256377ac8d0430fe8ce016d81a3bd4fc48172f7fac67ef05ea86bc11b37de09bc569
- SSDEEP 384:H5D0rBenON6XnOEMlyIoUrr7h1nf735nrIc6cPdPN0RuuC:H54tnCnbJcr7xrIc6ch
- TLSH
  T1E1B21A4223ECC768E6FE4F34BC7122A50AF6BA03BA36D75D1E89A19F0D267504520777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  BepInEx/core/Iced.dll
- Size 1.6MB
- SHA256 347877f8987f03dbff0faf069c19834b41be5f52246caf5ff488ac4ca110c4aa
- MD5 211d3bb12e513a0ad87ddcf4029681d3
- SHA1 c08a8a0ece7d243750f3ba8bbb59110669cacc29
- SHA512 360246b2ed8a49e191236da137550e4416ae7b5ca38fb886922fc6c890e4e72ab540c88098ce4e3f6b156f670c90bd03266e0e8131c494197a4c1d8ab4b52f79
- SSDEEP 12288:ckR3aijFyf6l+aD4boFPqMS6KhIXQ3v+s0cHztiNWjf7dPoRZw9k1Hul0bqN:uboQ6KhT0NgTdARZw9k1u0bqN
- TLSH
  T1548564942AEECB77EB8F2330C4529125F370E2E87707DB5E198561395889BA197031FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  BepInEx/core/Il2Cpp.TlsAdapter.dll
- Size 118KB
- SHA256 a8f9bb6a973aa1563f55a52253377d8de8e8191a26c09601711f379292485b52
- MD5 b87b74e05e8b4546425715f5d7b22601
- SHA1 27564f4f7598c8946a256d56cc4dfdd712616a84
- SHA512 4fb2823c855ce94544d2bf77173e124c9ec66add74fcbc5d34b8594710700aa0f17ce5fd35213152dbe9314513ef8a17e3c6fbba4812b02748b97fdba959559c
- SSDEEP 1536:FkIcUO0zeoigupeZK/USqoCQeEoonRLmiVrkIlJ/6RTXvbLHNxPDtt1jr5NJLLxw:FVcZoqGEZ1lxXYXDszERJLY
- TLSH
  T15DC35A2813F80B6BE2DE9A7DF031919087F5BA05B663DB0F9E4064F96563BC0D921763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  BepInEx/core/Il2CppDumper.dll
- Size 147KB
- SHA256 f6f402485e83949161d003df44f51b6773996ae5b8328dcbb5d18ba23f389f9c
- MD5 a391e37e08888df412eaac572580832a
- SHA1 d533d6183eae201738ec7b80cd727b2dfbc83d7e
- SHA512 a480c2b4ab6fb0c56b3a204b077a20a2c113f74918be6e378489996646d5867493acb468ed82fcdfbb814966e7a7cf5d7fe72a47c937aaa4e43bd850307bf5a5
- SSDEEP 3072:lEDV9K2mAcPFtz3D85SSlqoRdKk3sPO3eobI2m5u4Ufhfs:lRHn8kSlqoOk8PO3Jt
- TLSH
  T16CE3E71572D90529F9FB5BB8696316224B77B492583DE34D0ECC20ED0EF3F8098517AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  BepInEx/core/Mono.Cecil.Mdb.dll
- Size 38KB
- SHA256 5dd65700e11d8a9e3461044b0e6f82abbedddd6fc90afb53c2b53744b9281233
- MD5 54016afec9a4541de4ea7fdc4536bee6
- SHA1 06016e9cc71c257e9e0dc7a6a53844233b977dac
- SHA512 a276fbb162233936b20b4dad82b19f1ad90fe3af298c4e8fd8fdf9328758db378d69f2f4d1080444e7a65cf366a0a0da834a162a7dd6ddff9dbdd1a9a1873b64
- SSDEEP 768:nrF3HuZyOt78PeWSTlNeyJOgfGNOV/DVxPZxaCCrHpTFu6L4oWk:nrFecOt78PeWCLOgfGkVzKpTJL4oWk
- TLSH
  T1E30307086FAD962BC2AE55FEE4A126191BF1D53C6603FBAB4DC4B0F3BC437444512267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  BepInEx/core/Mono.Cecil.Pdb.dll
- Size 87KB
- SHA256 f5234d2a93e1e25a5ca703cadab9cd9f0218975f1a78ee6355c0a9d3978c5de0
- MD5 f100e5cf51ef9837af10b793f3ed8703
- SHA1 713edb8aca42579319ec77eb392f5714c0731b32
- SHA512 a9e5d15d854ba5f874e3160bed489cbf340f9bc847e52d1c03c82c3689c317c940ee3f92317513278a6f7ab5bbc9b2e5bd6259ab4e1e9dad4d74e7fdf08ea42e
- SSDEEP 1536:3U2qJ+tTKzlXr+wHRsh3Sv8q+KdbEAoYKHNvzpS6u6faHC9e:E2y5+weh2+KSAiFzpO6CHC9e
- TLSH
  T169936D31A7ACA96AD8DC617724B70A0A07F2D2A7D153972A59C87FF41D2F7700932393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  BepInEx/core/Mono.Cecil.Rocks.dll
- Size 24KB
- SHA256 b8106c90112b3d474ed3a7da8683c010f4cb9be724c0eaf459143464e611f8a8
- MD5 519aff3818e8871e428f403b9f1bf63d
- SHA1 e1d1fc47db18e2474aa348e1d39f2c0f930f4410
- SHA512 6e6efc407fb382cf0bbee191e620de0b494d207357789793548eb2f5b7bc0ee9e1c55110fd084d0da0d1f4904cc8b965c8244b55b4a856e8c3941bccc64d57d2
- SSDEEP 384:EWLOZBsQXmnFlPQnqc9H559krjuhXcVXD9PmROMLUBLMWG1UX8JvbrjEV1O/pl/E:raQHP+qcbkrPuROoUBBLXM/d
- TLSH
  T1E1B239103B99CF3BC2FF867958D2532802F1C96A9603EB064DCC90E99A5BF945341BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  BepInEx/core/Mono.Cecil.dll
- Size 347KB
- SHA256 a4ac5e4d0d66dffdae43498e95ad502d042b0fc5c9d70264b9d4c88c3cc94955
- MD5 c4b802b9b66dc5b2b3f251c8822da712
- SHA1 141e52ac972b6a9001601140442709e2d554996f
- SHA512 dda56a6a1dd4aacd46072bedde582170ab67a95c16ca4847b9a39ad20ca74f1f37df2d6a64c5dff022380fee1e084f548015ae74bef395e74cf0273de331b09a
- SSDEEP 6144:N6fRR1AtYWP4aW2psE5MLv+pVRomxaSt1Q:C6tYWr/oGpVRQSt
- TLSH
  T181747C3433EC573BE69F637BD469042A42F5D816738BEF9D48C4A9F64C47B928A01263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  BepInEx/core/MonoMod.RuntimeDetour.dll
- Size 104KB
- SHA256 17f7ebb7858ee58024ff0d527a3f31a3018b2e0d6cef5deda389992f0f43833a
- MD5 f7fb274654100928daa719a7e4d2993b
- SHA1 af2e2a67e92ca74ceab1e02c761e85867bd4f87e
- SHA512 0886ba6ec6a7ea6da6b6e48c56b58de3cd68a0bfa7561594c4f406f72481b9531781224eaab09e828b90f4887758c27fe8d0a6126e443e62b0911cfd9ba2e0df
- SSDEEP 3072:H7iPQUIPJsq+0MH1fw3O5KOG8A8ud8zAv0oAUZmK:HigJsq+0MHG3ldd8zAv
- TLSH
  T10AA35B2A53DC4F5AC69E1B7AB479014103B0F4028653F7DE0D9D69F92EA73824E413BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  BepInEx/core/MonoMod.Utils.dll
- Size 181KB
- SHA256 da8a57b55ad25eec221315cf09b7faae7b0440593ee099b16d1480415f25b7fc
- MD5 f3896bd53f95470dfa986e926b35e02a
- SHA1 48ca7aa460a89b0b89e6a126f78daa8d6106e22c
- SHA512 3755d9cb47d210fe4aef14e942b9c0d3ec99893654eddf9f099674e36af75d222fc971b9674b3e0fe5583a68f5816304dd0d20c3d3ea69981de70f18caa5b570
- SSDEEP 3072:KZ/sb4x2g47cYBiO04A6FE92Hgbkdgb4pBuZzRXM4a8qB9/H8gpy5Vmemlvci+d4:Cf/4TBiT6Fgbkdgb4pBuZzRXM4a8qB93
- TLSH
  T122044AAD43A88F1FC76FAA77A0A1116C0232C517E557E70F75A8B0F6594B38886073F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  BepInEx/core/SemVer.dll
- Size 31KB
- SHA256 9451166596b0bf5725580b85b91fadb23fb2b1971ca8031edbcd7cde5634f367
- MD5 8c20b0febcd4cd8f1cbb61a5ae59b232
- SHA1 722195b5efc618f61c9f79312dab721a7696fdab
- SHA512 73d2e00ad5201a7a6f122bd6dcb3f855e41d2a8fb74025cf0e023ff811df7bd3dde19ee42b046f6704d9e23c99fecfceea9a3472c1ef0f22840fc03b8baf3ede
- SSDEEP 384:yNYNuHLetdUulWYkKVawpti7Rd3IWwOZUaHye5es4lPM07QuKJT0rTU/jEcfoGQU:wretdxZkKVawpU7v4p9e5ev540AXsf
- TLSH
  T1A3E2E5006BDE9372D6EE4B7DD4A2406402F3AAB5B931FF1F088C11865F277908916B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  BepInEx/core/UnhollowerBaseLib.dll
- Size 88KB
- SHA256 3df9a1c372474fa4f5bf64f91ee6277768d9a3830ab21e51d3153159cd1d5558
- MD5 6dd76e58797420eafc3f2500255659a9
- SHA1 87d3c3edaa8a79e44589c9f1da264dbd1b877ccd
- SHA512 cb18e3d3f5650856f8aefdf0d5eab70bd5f64135824208b0f59c7dd30d5c67637316eed04f62f3ee5fdbd6542a97bf3d416abfbd5406946f0f122b35ff500b1d
- SSDEEP 1536:6v9GU8TfhhgqUwpz0G7G1P58gkogds4LamQGGWlp/ImNGdE1JNuq3wPm:6vsToqUkzmPCgkXXQGGWeIuqgPm
- TLSH
  T12793290137D88A35DAFE5B3490F62A0C87B0F547A532DB4F8ED985FA18637411A61BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32