66df78a7f636b680377119dc07af720a938d8c51b19ecc99f4fe8d6af7fbfbe8

Sharing

Copy URL Twitter E-mail

General

Target
Cataclyzm_v0.37-win.rar
Size 462.1MB
Sample260817-2qdfeseb47
SHA256 66df78a7f636b680377119dc07af720a938d8c51b19ecc99f4fe8d6af7fbfbe8
MD5 d831c75ae30474d7cd5fad7b93d16c39
SHA1 455d589ff8e8370472cc4e528815549ccea599a7
SHA512 7b9b8ff39033554e6d4dec92a164bec2931df86d1b20920e1ebeb9ad73fc4a4e55b54eae4e78ec53418892f61fe919a73396a358121777dc075576487a6be284
SSDEEP 12582912:MHPDn9zwdy6IkcOEatNx2HcGPyMwKzvJ1z/Vka:WnFwN73EI2HgM5V
TLSH
T16F3933CDA39E958351F8F73AEC0E58B3E9931325A4E8B039044C7DE191A9D15EF24EE4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  Cataclyzm PC V0.37/swiftshader/libEGL.dll
- Size 99KB
- SHA256 2e0f536a85e3986b3ce5251fb9901f7e09f7d133318c43bccc24a11a9eeb2c49
- MD5 adc1b8ed43379d0174c143bfcc0333dc
- SHA1 2131bd3a50b34f0e9857048582262eabd4f8f21f
- SHA512 742a696d0038d7fcd0fc0c7f107088e00be16e4816090e1643698eec320ed9b2a5167526eec70d9418004b3fc953269e1c75639621a8c5f5dfdbee876a35fda0
- SSDEEP 1536:1KJYBYySjEdmDgUFpO+KxyWBeowPsuTsWjvVcdQ/rkZlBj6BY:1KmayS+UlFRKnuj2Q4ZlBj6B
- TLSH
  T119A36C0175D0C031E4BF193C1878A3658B7E3920EEB19E6BAF5406BD1F742D0AE35E6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  Cataclyzm PC V0.37/swiftshader/libGLESv2.dll
- Size 2.1MB
- SHA256 5c4230c1b00415f6e707af374107a8a27f3b08e6a87cb63c8313433fe1f3903b
- MD5 11d36159ab5798b5b9d49a1bf958261e
- SHA1 1b4d25b298105b0f18994112910fac7b393c605a
- SHA512 541f183b2fc00e749b4999a3c739bd9e8806db2293534428fddf8ba6cf730f61cd1e3d902da238ef109671501a70c274db7925aa871021e77f2ec1c89c268840
- SSDEEP 49152:Ilq8keUisW17Cz3kXdr3G6lA45nUFlyZji44pazwLqZNy5M4BlY4IbMsbUd35cCL:+q8keUeOLaztCWfRzyavr4MiO
- TLSH
  T128A5AE43A5A6D136F4070270382C7739AD789631686FDB4BDB955968FFF80A0362372B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Cataclyzm PC V0.37/www/img/pictures/Gerardine Sleep 0 Blanket.png
- Size 57KB
- SHA256 0e48cc24ab247bb3a6aebf682ce32cc0ff1225255084a1482438faccffbab518
- MD5 5a0b08362a08e9e359ff625d4439da86
- SHA1 ab4961c056cb2108cf600f60e33273f24ac347d5
- SHA512 70e61fedba805576c0c26252a9cca26cdb53aa3c36019eaf5b49e1fd31be5f19bbba29fe75e3a31ce1469290f438d979e06f4b04278c2c48fd2ffc44bf492f8a
- SSDEEP 1536:EriUBfpPNjIZD9Pmd3lUvzSPAjSxW7A1TgM:EZpljuDQd3GvWPK7TM
- TLSH
  T19C43F1D981D5E90CD00E80B20DE18D63CBCA155364718DF9A5F7EE953CA63D9E42A1BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Cataclyzm PC V0.37/www/img/pictures/Ms Eve-Bar Clothed.png
- Size 77KB
- SHA256 692559451a46b4ac9f9bd9f57bee687638e0088b4f76e8b05f7dd6e234000397
- MD5 b8f5192d3a54958e7419d6efb746bba3
- SHA1 af18e20b9398d0f570fcb2f2b6bec308d4d6597d
- SHA512 bc0a51420e07149752db1eed9924796ae3d312532cfff5588a928ec415ef229f3563cff352091675b3f3d0f809d5386b65c936f2d068da9fea6d6c6cd50668da
- SSDEEP 1536:L1kse4O3rLDsg0Ay5AmfYJMD45L/Ks1VlDdXrO1kMjrSV:LG74OY/5ZYBByszlDdXrYSV
- TLSH
  T1117302C1D7BA52DBE65D357E388E26DDC8354C47C8ABA1A71993B40C36F1B206500DAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Cataclyzm PC V0.37/www/index.html
- Size 1KB
- SHA256 839b48a8935047a90d4f10491303019b701a53cc7201926827a1c8a1c7d0bf5e
- MD5 d7be270d4770cb7f83cc11943a6a373e
- SHA1 d34debc0146fb250774b3ad31a768eec5f1736da
- SHA512 f3dadc6cd314028785201a86b6b41aab6cbd6d0330a299ae9b2e271c9b0476edf860be28aa4a725c9f011704985625e0a3920df5033219bda1024f9af9c7d43b
- TLSH
  T1E231730E6C86CC54A0304AD6C8B1F859DC48A3269750CCD972EC54BB6FB4BEC0C279E8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Cataclyzm PC V0.37/www/js/libs/fpsmeter.js
- Size 7KB
- SHA256 fec43a13a522dafe9c28c3d30635a275af350edf3423de0349fb6fb9c01e9450
- MD5 dbc74c0c151150763617ef4f13be90fe
- SHA1 cb47a241412f6e7cd0d16abf997e2775eabea90a
- SHA512 eb4b0e16ea251ca8ca5a6e08725b45ae722fab6b2529d3e3cf58bd5b364cccb0da61252ec21bf18382aefde06715e8d8241b8771ef614af72780148af69115d6
- SSDEEP 192:YBCYwhCev5Ynta17+4G4QyDk0rIPdCMO+OPjr9h:Wpw3vqta17+4GLyD3rMG
- TLSH
  T1EAF1E87DAF617455E713063FA02B0904A73D992ABC832DD8F0B8D4507DA1D9DC7ABE28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Cataclyzm PC V0.37/www/js/libs/iphone-inline-video.browser.js
- Size 3KB
- SHA256 68d7edfc56c4fc6a21de7d55107fd6a334e1a3ff72eb21c14a2553ab9c92eeba
- MD5 c299ee4e6832d74841cdd6c0f209372f
- SHA1 f99e50a6f24647fb85b123e8c6d247a75ab690de
- SHA512 3028282a03d88102b6d28017a82c0e2aed2e8ab97aa41892c80688d4ceb00b6a433469be610e33acc81303b18ebae6d7e371c576d6cf453142b795d3871e4ff7
- TLSH
  T1EB7166997285FC70D2A6597643DF600A33365FD35CEF96000476E3529D24C2C4699DB9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Cataclyzm PC V0.37/www/js/libs/lz-string.js
- Size 6KB
- SHA256 7acc5ae524455fb67dee09375b4246386241f7dc4708dcdf8af0e78ca8267de7
- MD5 27514c43b1d1828580914df56b3367b3
- SHA1 8c35c2808fdf322bdf055d83b0e65f11ef5d2e28
- SHA512 b11ab95ca5a2b5ded2b00bc18af698166a6c3a18c764b44ed35d6d5437fb5b2bb04c77c5e15665ffeb06e3e4871fac0e65e8d4c64659b2896cbbcd4b3e7a7ebb
- SSDEEP 96:cxaMblF2dwMAc4gmwUH47pfmbMGhAJ3BxyW7shChKN5hChKN4/8ybiJ:c/lF2dJ94RwnOQG6pnynHghbiJ
- TLSH
  T16BD15550A2DA1207C6FAFBE1344B61938EB4AA215E0C4FA7E681D214C75DAC3845FFE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Cataclyzm PC V0.37/www/js/libs/pixi-picture.js
- Size 22KB
- SHA256 93fd8355e6847e791f363718c400aa7087c153123cea4b3186f325e2b1976075
- MD5 8e332cc3ca42a4e04b539efc010878e1
- SHA1 43c69e3971bc6e338b716f5a16c27c9995499e53
- SHA512 d479e222fac09991502ba66765c94e09e764dac576625d64c29ab0dcf699dcf6f9a9e8e588053b78f62cb3a3cbba80633f597878c86478ddae361dbe3dbd9e95
- SSDEEP 384:Dqby0RdEiP/Pyp37058mqfJUE5zq3sss9RY0I550hKVLM7Sny:DigrIR5M7Sny
- TLSH
  T133A2974ED952A168AC33A32AC79A0901F5B69513C946C10ABF0CE0E91FF546DDB6CFE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Cataclyzm PC V0.37/www/js/libs/pixi-tilemap.js
- Size 42KB
- SHA256 18e1f1d138643392733998fb428d1134eb35a645db57d336baa7fe5e5b996405
- MD5 297a120061d6fb1f65e3ed20b570f043
- SHA1 611fd130142b71087b1df6c694f9c171a0c53d19
- SHA512 58b9090bff925a070290c74a6434494197358e1e65ec0dae1ead8a83e2c1650374a6711ad0b2604020d7ff5e88b0ffbf7b13d1c9e265e46c23c811d427f5e1f2
- SSDEEP 768:p1RK4wmc+SGnnWX7G7PSAa66FEZuvwoSyjNl5/HAi1SO:3dwmdn+QDyEZcwoSyjNl5/Hh
- TLSH
  T12E131E4E9DA86428FD377379DBA94909E56B441F9046C1447E8CB0AA0FF942887ECFF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Cataclyzm PC V0.37/www/js/libs/pixi.js
- Size 1.3MB
- SHA256 e8c3aba19cbdb6bfdfe7e9e06753329171731d1a05d5c49b750cc6656a31444a
- MD5 78b95aa2bd1dd0fb9795c36e18cf9cdf
- SHA1 79f5cd1999a08399b6b56d14949120fb2d5bb73f
- SHA512 28da7608c90b30150497f3499a8025d966c7f4e0f65d9d1a2f44ee1d82468e645a52ed78cf5c5dda7e17c05009f7ac1077c8d4d237d8c5722d88ab7438c4ead9
- SSDEEP 24576:4/LgmQD9W+WHejWvTkMYhsjc1ceu7G98awBbFgFU0MEpEbagwLWV20M2FF2aW/Dr:4/Ldu9TWHejWvT7Yh91kEpEbagwLWV2j
- TLSH
  T1FF55E88A6ADB71668D333330CF5A5509E736852F8206E1887C9C95B42FF566042BDFEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Cataclyzm PC V0.37/www/js/main.js
- Size 270B
- SHA256 dcab1427f95c4bcedf1ed595b828d0c423d4c8d1767452c9a4e651a9c07a3ab9
- MD5 5c31090a313157499d5a0aa767f364bd
- SHA1 faa53850bdfeb93dbf1fc4c13e20407b11a89d2f
- SHA512 555898d4d32284847af756e248929dd80e2cf5caf4f91cec6b4ee1e00e2fd55d7c163102db3b6538708c74ad25055bc0fd60f3c7d5b72067c509228d88e4336b
- TLSH
  T1BFD09B095EFD3412403D3457BD1B55D5159C411790C189D4401BC12A7E5771BCB4359A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Cataclyzm PC V0.37/www/js/plugins.js
- Size 214KB
- SHA256 43052d21dfe3c40dfd8f30c7b49d2ba8a0f9668708bfcfcc196e21aa1789a405
- MD5 2af463d76b92307ef2f2f0b631209752
- SHA1 6da2f74d7bbe6151105ff09b155b6d76fc47e63a
- SHA512 5b14235c9ae4e5a6e36982deab15f3f9bbbd95a6c799b0c0f4b77b7375f165502e02579a8e50b23a41fbc266a34d92c7a64d2b0ff49d0bfa6aa4a8b460f88291
- SSDEEP 1536:Wz62wFS6SjR93K8WUYTe0xrBZQ5Wx9f/KDPsxduMLbYHrIlDhpXsd7ehXuYq306+:UbIlDPXsdl1Pegy3w8KNib
- TLSH
  T16C2453CB2580D9D6C4826D9630EF5E3794A742D844C8713EF9ADDF88489B47C89BDB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  Cataclyzm PC V0.37/www/js/plugins/--------------------.js
- Size 278B
- SHA256 62d8301da8411bc4e7775def3296ca771a57d37bb2a7dadbd2492b0465950882
- MD5 bc95d929edd2b0bd6465e74aa5776617
- SHA1 284bbd355e79d5f7c9f72e9ba16807fefc3d59e0
- SHA512 a277b847a31dca0b26c757c7884513240ec90d64d4fbb765bb9b640052ddeeb6e74e368e9fb76713654c4c3835132fced7073a81bd98fa35e72b27e315d5ebda
- TLSH
  T14DD012120C9C1401D078C21C28A34C46E14A431D0E4180E0005821402C043A0151CD10
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Cataclyzm PC V0.37/www/js/plugins/ARP_TitleCommandExit.js
- Size 1KB
- SHA256 abc4bb9ee1fa9e006a26c385ae9e17db0bd735bbea43cac0e50ae54218c0b968
- MD5 8f1b23e5440296c43dc8be121fa5549f
- SHA1 531b523583e0bc12be4b4bccb704ed7288ab3d44
- SHA512 dba659c6e5c95692f9661e162e96e9b594ddfbddead715e89fc77769022143c4200985668754598cb2fb6afbccb31c26659b0dd236fa879efea1d476ee37c1a9
- TLSH
  T1B1316919FAFE1A62407112712E1E0B56E3D8437B5405D14339BCBE836F72785C920EDC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  Cataclyzm PC V0.37/www/js/plugins/AltMenuScreen.js
- Size 3KB
- SHA256 6e103b929c3df10350166db451d650c75f314620b384a0f7564c044cc9540027
- MD5 1975ee0198bb7e87f51651bc4d649b86
- SHA1 568a7f83b06add1b829ed64fb599d9b747908cd8
- SHA512 7636d386d92dc66984e11d0c522fc409c78623d9d2a3b342f9cd4274b9a40f6177bb340da77be9bfa8d5f2813ae265ded850592e1724ffb54ab75909a9dc13d4
- TLSH
  T13E51A988AF79A011D830B1260F2F870CE2F6097F9447918A796C91D89FF178166C8FE8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32