41b34851be9496b105cb8988080c9412c5d4a9f75a8b16ba60a334885576876c

Sharing

Copy URL Twitter E-mail

General

Target
DeadByDaylight-Unlocker-3.7.5.3.zip
Size 12.1MB
Sample260815-gb2t9azdnb
SHA256 41b34851be9496b105cb8988080c9412c5d4a9f75a8b16ba60a334885576876c
MD5 3cf0930e335ab463005ecba954bc790b
SHA1 faaf3abd7dbe282e87b3ee0669c031107cf6d174
SHA512 701ee6042c08a4ade8516d9ab830c61d31d79b3aec5c14a49180d9171d66237e5696ccfa30ac746c1f5a7e230543d483824d470556c15125c96e2e270bbb8e4a
SSDEEP 196608:n1cri6UbUORp7OLKY6O/6gqIXh1/Pn8q6/l/81JJsyXzc44NjLfNIdJ3:nCrf4i6P/I//f8qs/8vJsac4YkJ3
TLSH
T169D6336ECE791A21FA76A1F286CDF931F6DD1552C41413180F8BA72F087E1876F1EA48
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution

Malware Config

Targets

- Target
  DeadByDaylight-Unlocker-3.7.5.3/Unlocker/App.xaml.cs
- Size 4KB
- SHA256 9c1535128225c5dfc79e68dc5af8c18717c7c59ea011585299f8d497c775c461
- MD5 d528b786c4c6de2a25d1cbf443bdd5d3
- SHA1 e54a34e06656936aac18793070c1d4eb55254cc4
- SHA512 afced598a22bd36ef18261fe0ceb9a913029e9d7a0850f3a66dd8299692c6164b898dac50f6b70c9d8d828184318bc1247b63d73001a941b0b3c9742e45bf252
- SSDEEP 96:EYjNPXV7WV+/zV8fsDPPJasATY0oRNPAXhEdYyVPu10QL:dc+/zV8fsDX4sATY08khEdYyVPu10QL
- TLSH
  T17D91A6185DA7955B41F32025D7E398502B777313039F4C69FACD9A80FF9841CBAB8725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1
- Target
  DeadByDaylight-Unlocker-3.7.5.3/Unlocker/Assemblies/Steamworks.NET.dll
- Size 365KB
- SHA256 a61778cbce992f1d3ab48577d8c6c1c43778727b6127cdfa8b97eccc353ce6ab
- MD5 9cad80b5a72727b344d5fb46734af788
- SHA1 e83420c8b362944f9fe861c808172ecd7057030b
- SHA512 0e34d5f47398b52005cd41dba28d58a2e8128ecf3add668757c246946cbeb5d4d8f72d67c5a36f6d13ef8b2e30248b035630a444c3a6bf040978d338d489e927
- SSDEEP 6144:38Z9REsOmCo0SIepPqX2lbRbRU/TB9nflJxSpbnk25pRk/9:38Z9q8tqzvflJir3RI
- TLSH
  T13484F82D7320793BC029433664B75E0BE6A0E4C2231B6E6F764249395DB77C49E3B2D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  DeadByDaylight-Unlocker-3.7.5.3/Unlocker/Assemblies/steam_api64.dll
- Size 288KB
- SHA256 4df999c0c8cb12589f0864d52be5d4c775577aeb27fee28b49b188f9ba083eea
- MD5 500475b20083ccdc64f12d238cab687a
- SHA1 b13f17561a9a0671befbebf0aae7b51bcc0072df
- SHA512 de926d38118c808cde4d3a8f6fde7b56b755ef7938b9adadf0efaac45c853f3d19f4cdd5906b02a7dcca7d2c38b8c01cbd401ce3a7f5e3f9221776f0ed49355b
- SSDEEP 3072:ujTqkh2mB9mkVi635gRaeaZqk4YJDf32uB+rJFC9R+5z65lhTbCz+hnv91vFAyNp:Gb9mZOB3Zx4YUuoaRRFAymC2CPzbN
- TLSH
  T13C545A7AA2710CF4D076C13A88565E0FF670744B23629EFF2A6053369E676C21E3B791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  DeadByDaylight-Unlocker-3.7.5.3/Unlocker/Classes/AutoUpdate.cs
- Size 4KB
- SHA256 0802d1881cfb843cbdcb467c32de58379801509933d04dc3fc04db57361316a1
- MD5 44f3f6c50dff66cd960288fa8e26a56f
- SHA1 684ee0c04e20c4823912657f10d5d911c4bd6e83
- SHA512 9fb2c1e2bd64a7c4dfd2dabacbf09f91fc90ba7d7290cebbd7930b8afaf4d94e945e7b317f82f12711f2a63399daa4100e22ba4f750b8cfca5e672cec1b7c23e
- SSDEEP 96:JjN8V7VvhxNRYBbIUvghM7wN9NQA7dEhNikSqnCtVId+b:Ah4IW7wNoWELikSqnCtVXb
- TLSH
  T1C191104E05A3C1BCA62B113E179F60A12733D227226F9C247EDC8140FF4952A29BDA9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  DeadByDaylight-Unlocker-3.7.5.3/Unlocker/Classes/IniFile.cs
- Size 1KB
- SHA256 3e828e7bb6df996656a6798925a7a7366cf9dad48ba3493114d6cdd0c9aae94b
- MD5 5e598d6dcfd09037cedc906a30e62f97
- SHA1 189658e0580e6b37767a9a096059c01586efabf2
- SHA512 5e2d67842c1cad7c491b7f13d62bb09456b2ad46c671923c3fb60a983ce0ef8a76f8d3d2fd3917405b988360cc28cca6e76af89912402e75ba152c892c50793e
- TLSH
  T110319D1676A2EB240E13211599C74482B233A21B93782CF4FAEF69007F071AC99B5B5E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5
- Target
  DeadByDaylight-Unlocker-3.7.5.3/Unlocker/Classes/Settings.cs
- Size 14KB
- SHA256 a3ac8299964365de11152d081d903099fa38effb37bc9c044236375a2bc0fc76
- MD5 99d8de7570aa596e80513cfb7242704f
- SHA1 b4efaec09928d3c4f24cae7c242000cc1b74ad97
- SHA512 c5fec3a6cbd402a0061691ede75762cbe2e360d3582e44a355b50a6bbf78957d468e027dd2a64381bef33d9717031cfdae8246053aad8916d25bc9745ef191e6
- SSDEEP 192:G2XHnU1JeiS94U9PdyxYtFQCdvx7Cc/946FBC8I8PCIxwWRbCfDb4h1yb:G2XH7mUuxav3F46FDIwCWRUDbp
- TLSH
  T1DE62000620F7A65E0EBB207CDEDB825072208D6B53B6E4733A8DC54C5F5909C6BB476E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  DeadByDaylight-Unlocker-3.7.5.3/Unlocker/Classes/Utils.cs
- Size 18KB
- SHA256 241761e9e0043e00a7596d1c10465fab2ad317444b44eefc93d3f679a1b20191
- MD5 b867ebeff52a4f083982869debd47cad
- SHA1 b7483955b65e6c230768a8c189e355bc6662c59c
- SHA512 9736237f7ec278895968d54aefe409baccca4d629fc29e002fdf43fc2707a70645bb63cfb9352419c5451ca7b835c61b77a820145d157bcb326f14efcc0ce487
- SSDEEP 192:YakBRX//m2VN3l3peiZ0sSK0nCZC39bApUqMyp7Y17A2i5mJS6LX/0X/p2UtBiJt:YlBt2kFNBSxGFpk25AAvp4D
- TLSH
  T14F82CD0AE8B29E9105AB31399FCE9510763445AF5EBEBC61BF8C404C5F5E01E0EB4B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  DeadByDaylight-Unlocker-3.7.5.3/Unlocker/MainWindow.xaml.cs
- Size 10KB
- SHA256 758dbac8c0537409b939aa8e0ac7929f23a16c50c7862d01727c5aeedd9e5d82
- MD5 0be1243eba5c272e0f90ea754d96f6e2
- SHA1 0b9ded424a58c64f2e354cc3d255bacba31a3953
- SHA512 f5cddf7c73d23294b802af8f2e16c1933d8513a28f8e14b5ba41920793bfbf199ada018eed858d57d97b5d9fea31cba1f675799dafe47efebe3d5a7820a31dbd
- SSDEEP 96:JoVgyzp6RQR7Wv6/fvo6xEZGAvhzottWPKQBejrlzkRjH86edAF4l9ti27rGd6xM:2Z6iYIrE87AurGd6xNuB7
- TLSH
  T171223F6A2606872389B3E22DDF171524DFA22A2752E617243FDE86496F7000593BCF3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  DeadByDaylight-Unlocker-3.7.5.3/Unlocker/Properties/Resources.Designer.cs
- Size 9KB
- SHA256 da3c8898040b584a19b12f3e9d0ccf56643ce010da958ca8941844696ca770ff
- MD5 4b02da5c687f0d29e2a340c41310dda3
- SHA1 8792a37839399b6baf2ee6aac3590df5c0e8255d
- SHA512 5cd18ef37fe28559783ae18da84bbfb2b6cd93876457ce6127ba409bb69fe8a89cdaada90fc728e0059eeccabd924d3e112e571b75b9cc389ccdd940b0bcc294
- SSDEEP 192:agWtsxZ1UPy5U1dotyP/ayIUaylayFayVayfayLhayFayCW6zaytay9aytayBay/:agWs1Y1l7KW6Y6IW
- TLSH
  T10F2278BBAFA6C63248A2E1EB5705A091E3308553C23ECC08F8BF4B74DF562455B9C756
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral9
- Target
  DeadByDaylight-Unlocker-3.7.5.3/Unlocker/Properties/Resources.resx
- Size 10KB
- SHA256 bbbb2af8e592dcdca2702c777ff26fb33eca09093f41dfcb4066a1432a30b85e
- MD5 b1723f1be5537f1097b31c85b7362896
- SHA1 54c694b437b6cc7ccfd7cde8c0b11081ad6d89d7
- SHA512 98ff352c3ea9f68f156044016cc65ab73340b8e12878d0988dbbdd114fa25ba017c4963b9a243eaaa7cce6486e9efeeb00b8acfadd8841c28ca1be7d7f71633f
- SSDEEP 192:Zf+tLPfYnLvFVOiFQaUD7UgMVxhxVQhteYokw9SVZhoVxhWV/hlVIhHVvhRVvh0S:Zf+tLPQnLvDOiFQXD7Ugcxh/QhAYokwH
- TLSH
  T156322335B1ADC87409924C69891579C037A9D23B5234AC8478ED362DEF23B4377E3BD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral10
- Target
  DeadByDaylight-Unlocker-3.7.5.3/Unlocker/Resources/BurgerWorker.exe
- Size 2.1MB
- SHA256 b5edd3a53f8cb50d1ab5ddd6979f633b1a6ca2ac53992d6642907e6a7b6c8d44
- MD5 2cf687bac91aea27154769ae642f2e39
- SHA1 d65c1f3cbd581f091cf36c46b1c89ef32d1ff19b
- SHA512 0f4302e023cc36c4d457aea4fd3de32827645f201d430dbf4ac89847eeb9539cbec1e50fd566abf5409c6ea117324d04cb31225c4440496043c7f4bc0095cda7
- SSDEEP 24576:6nTS92u+mtKB99C8jMjYpHiFSsqeyQucw/PuFBG4ZjPSduVNTpm7PppZCadycB79:6mUu+mtc99CjFSss6xAAcB7jAtBrG
- TLSH
  T190A58D06A3D8C711E9AF967D98324406C7F1F55B2361D6CF2404E9842F67BC3AB363A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral11
- Target
  DeadByDaylight-Unlocker-3.7.5.3/Worker/Worker.cs
- Size 4KB
- SHA256 f8643e331bced81bfbc8b8b7b7347542bd0a5608d92c09312c72940890146eeb
- MD5 90fd321183c1ae57d65a1922d3763210
- SHA1 ec15cef41d7732b1ceec6cfd56aeeb54ba81ee15
- SHA512 66fc22d207dc75aac2f79012cf643bd9257d9756a591556379ef5b5b0c9ee225de12f1048f7a9add369c534b07c0efab90ca9fa495fd6d7671cd577a983d59fa
- SSDEEP 96:JjVvgmz0IDgSU6eDtBTbYCAauiSquDw8ue9QgD1xXUq19KHlLNSCpFyb:HI0gSU6eDLTMCAauiSquDwa0A2SCpFyb
- TLSH
  T144A1220914E365A199BB32398FCA80927774892B0AAE8C31BD5C8284EF4D1554FFCF5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12