a9fd3b6eea94b23ae08ec13bfd0eec63996f5e498ecd947d4e9a8f1b8edd0844

Sharing

Copy URL Twitter E-mail

General

Target
Red Dead Redemption 2.zip
Size 80.9MB
Sample260816-ncxp9awfna
SHA256 a9fd3b6eea94b23ae08ec13bfd0eec63996f5e498ecd947d4e9a8f1b8edd0844
MD5 5cd9ab85bece244512b452f9806962a4
SHA1 4fd77d8aa2f0d3767aa7d602b446ed0d9a274383
SHA512 4973cea9d34d27e1805249f468f3e6d7ff6908d5ebe5c3e72e1dc49fd42eec82eb3c8cf171ba9ee0d8c6a564a4f3067f257d57dd0f2a1ff93646fe52a719af9a
SSDEEP 1572864:rtHtRWxouOnTNReuKxH9aTo3e15Yw4piFA13RrP4kLoSmnre23Zp939JVxb3uZ2N:rtN5nTIxH9a8u15Yw45ZP4kMbnreM7JZ
TLSH
T109083320AAD0AF92F341F35B01AF8759626430EE8784EEE2375257D9D17B0D37A8F065
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution pyinstaller

Malware Config

Targets

- Target
  Red Dead Redemption 2.zip
- Size 80.9MB
- SHA256 a9fd3b6eea94b23ae08ec13bfd0eec63996f5e498ecd947d4e9a8f1b8edd0844
- MD5 5cd9ab85bece244512b452f9806962a4
- SHA1 4fd77d8aa2f0d3767aa7d602b446ed0d9a274383
- SHA512 4973cea9d34d27e1805249f468f3e6d7ff6908d5ebe5c3e72e1dc49fd42eec82eb3c8cf171ba9ee0d8c6a564a4f3067f257d57dd0f2a1ff93646fe52a719af9a
- SSDEEP 1572864:rtHtRWxouOnTNReuKxH9aTo3e15Yw4piFA13RrP4kLoSmnre23Zp939JVxb3uZ2N:rtN5nTIxH9a8u15Yw45ZP4kMbnreM7JZ
- TLSH
  T109083320AAD0AF92F341F35B01AF8759626430EE8784EEE2375257D9D17B0D37A8F065
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  1911.dll
- Size 2.4MB
- SHA256 8377cec57369df051cd4de71b7acc0c55148c261d9575fa3ec97461c2773d85d
- MD5 c310ed09a0538b45e36c4dbbef18fa40
- SHA1 ad3064d692f006e73d3bd018b4772e282f6ffd78
- SHA512 2d300a3b5aed01d7ad4d2e5e3159d42155591614cbfc36258885b2e36a79407d98ab69de7a6a74504bbfcfe5d7d275a4d904990f3b3e0212e24b4b45fb802ddf
- SSDEEP 24576:NbI/8Mzr2LUiMSZ6qmqz6baCZ8v2i3RXH/XMRyZnq4h:mEiWkI6Dqz6WC6v2ilHUuq
- TLSH
  T101C5E072A856D45ADA1AC0F4C62A81FEF5F03CA1CB6046E761137D35BE737931A2E309
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Launcher.exe
- Size 579KB
- SHA256 6f20187d703dd1221400857a115989ece8208dd1037f34d3540f82eca04f985e
- MD5 a9b4842b0938ae27f498e5254fe566dd
- SHA1 b5c04264c50b46664698770a29645f8a1d5a88ba
- SHA512 0c781d6c936e9ba02e2d923b3c26ac09e853f259259d77fff4a6e922a23b6077ee8c68a1a50d5b14c64da71e91eb984ed1e109c9db9195f26158972ece7962d7
- SSDEEP 12288:kRutBknTweFnel0GjkNJaDUUKI5l2fMHj:Mzwe40GfKIOSj
- TLSH
  T1A1C43C457BD92400E0367A32DFDE161BA267618067C1C34AFA6DCD624BD63FEDE0A18D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  RDR2.exe
- Size 85.4MB
- SHA256 9b8b8454616a6ef91c8d5655b231e5cd21aa2236ab8cb04c34fce09248a55fdc
- MD5 eff7c1a603b5327a0f1b8d823f86eb2e
- SHA1 45d5f0633f22a04216fff9847c6688f0e4db2293
- SHA512 d366a4886b0744fc1ae3d3a120f931eff42540754deaae987617f600eed6c154b07358a0d3e5f41ea61046dfda361edf5aefd85169af384fd330b8a21926e94d
- SSDEEP 1572864:RANz/hwUG/nCzg2Mv/7BX02XID/fni3E6bl5LAKwVguyRJF7fBO3lZU:yY/e8v/7BksID/fYzLXwVtyRJFDBOU
- TLSH
  T1B9180145A2518BC3F991F736D02AE69C46613F386115C7CB7DA33B1E9F3B2948FA0924
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  RDR2Launcher.exe
- Size 5.2MB
- SHA256 539e9978502075d9a6927dc9ed82efccc9d1aadf19bd75b1e7a680b7300db0d0
- MD5 575f03bf8910a59c64ada326f006810c
- SHA1 b39194296d6eb381642a795a4de59d8697c77236
- SHA512 e0aab71957be936f53b0a97920ef6b141a286ad214ccd6fed0006e1eddbca5b87158f08fbc27fd016c4c553ae804de0729b07cbf4eb76f29cdcbe53944b6ccf1
- SSDEEP 98304:DiIs3elszb71QGQCPDbZfHayCb7BJ5mjwNwwMeZYobSr+PAY+eam:WIs5dQmRfaycBIGpEoDD+2
- TLSH
  T13D4633A867E80CF5F9FBD13D4D638059D6B2B8164365E28703A587C71EAB2F02DB6710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral10 behavioral9
- Target
  RDR2Launcher.pyc
- Size 331B
- SHA256 46c53b099b587f943d6bfd3a4e8978b77f7933c877e605a23223aa8ad577cabd
- MD5 b983fb160d21adc03ee2f9ae24154c0c
- SHA1 a3b01fd86003704be030a0f06f9d93f43bf29e5f
- SHA512 c169e14ae48d159c04e66a9e4c9601472ebff5235148040d32295564935866db139ab466402e3a31b84c1429ad9b79db7428bf4fd366f046ccf5d713be8585f7
- TLSH
  T19AE0CD8275AB5592D85C8334F76D413125D71DD79B8F20270F1CF386AE0C264D855843
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  bink2w64.dll
- Size 386KB
- SHA256 f6f8e7fe35251fbaa921d07ace3f06d53d27a270377578961226858ae23865dc
- MD5 01017d458d3c36f04f29d9e0fd3cb33d
- SHA1 3e3beb1c3e36b050b2e5550727b6014cf283d99d
- SHA512 f7c630fc1c923c50e57d2816b29b4596492071a8c07b0d1a7de56ee634c811fa4ee606fa1e54d15a11684d0cae15d82b9ecf466795ae0771dda3b92fa920e5ea
- SSDEEP 6144:ohB2mTqq47b5Ny3ZgEq2MbM56GXa7N70Jy91hDCQxl8tQTGeHwb15VY1XH+Rt:ohBoyuEq7oJO1hDXhTV0VY5H+Rt
- TLSH
  T15184AF0AB5B684F4E06390348D6AA25FE67D7C0D0BA452EB12C197646F33BC1563EF92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14