568b8bd77989b94b9640000e6b6f616bf16d5a1d017cf6c08db1e69efe4e62a7

Sharing

Copy URL Twitter E-mail

General

Target
1 AFK Bloom Fishing V13-4 (AHK).rar
Size 56KB
Sample260817-3a516sbj4y
SHA256 568b8bd77989b94b9640000e6b6f616bf16d5a1d017cf6c08db1e69efe4e62a7
MD5 3eda5610a6eeb0db0a67c107eb281c2d
SHA1 b317c01de2449a808690b79b1b54e44462199b08
SHA512 372363d7f25d9469acbc1632b044da11d0953770139befadb96d01b02fde7fed5b9320f424a3fcc517ec8362740f65b45e55abb033af18a15b3064592decc8f0
SSDEEP 1536:fDeYTAkbwalgY+NsBmqW9Yc1MIRf00vGy7cy/G2s:iYTAkHgY+NSalmI3vVYy/GH
TLSH
T17843CF49AD7A35ACE5E779213103310721FB76098B41C62BA723279ADC177B3AD261B8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  1 AFK Bloom Fishing V13-4 (AHK).rar
- Size 56KB
- SHA256 568b8bd77989b94b9640000e6b6f616bf16d5a1d017cf6c08db1e69efe4e62a7
- MD5 3eda5610a6eeb0db0a67c107eb281c2d
- SHA1 b317c01de2449a808690b79b1b54e44462199b08
- SHA512 372363d7f25d9469acbc1632b044da11d0953770139befadb96d01b02fde7fed5b9320f424a3fcc517ec8362740f65b45e55abb033af18a15b3064592decc8f0
- SSDEEP 1536:fDeYTAkbwalgY+NsBmqW9Yc1MIRf00vGy7cy/G2s:iYTAkHgY+NSalmI3vVYy/GH
- TLSH
  T17843CF49AD7A35ACE5E779213103310721FB76098B41C62BA723279ADC177B3AD261B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery trojan upx
- Downloads MZ/PE file
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  AFK Bloom Fishing V13-4 (AHK)/.ini
- Size 54B
- SHA256 6aa090e71597df907a31f5276cded893f28404ec2dd48f853b7f001fa1f61b85
- MD5 45169e0cfa01c4325e4662080d882772
- SHA1 70fc6486cde62a42365783d56e6b51f95302ac94
- SHA512 6c68a4ecd7cc22d284d62a1451497c6aede6d97d919ec8875e3704249313b219aada0d7dd057fc81173dd7f3262d5ef375f4447be09606f58fa2a702629a6b23
- TLSH
  T1DA90020205E41A80D06340D0DEF144A05E12B0741008C04C6041444505D87C986111D3
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  AFK Bloom Fishing V13-4 (AHK)/Bar minigame in simple terms.txt
- Size 309B
- SHA256 db18458ed4c5469766bfdbd3075f4b1825f5a73a775717c16f036c05774a837a
- MD5 fb534a55404434749bec5b791258dc88
- SHA1 e9b0f501698b1ce0456a04e22b86c3f9a34cc16f
- SHA512 92c01c5a5c1b56c561cf958f97be697813d7c08f813848a7eb5b7c202fb13e0f52d429384b33d8ae2280d7162cbcc54b9b5e5cbc0017022584a37a2b1aa6e8ea
- TLSH
  T1E3E0E624B49875582033468A85D3F95B5EF2B1537C2D31A51923C3042C721B7C3B780E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  AFK Bloom Fishing V13-4 (AHK)/Fisch V13.4.ahk
- Size 61KB
- SHA256 c8c80b962ace4cd133549c4833a7dfa25ca66adf7259d2f6763194d9e772ca41
- MD5 82350c4d267371f07921d0fdee2b1656
- SHA1 0840121a39f454db2fdd14a0a1fc9591532342b8
- SHA512 255f766f36d5599b035a48e7892d97255d1ff80dcdc66a4443dc74e203a6a60433eaf3cda5c6b1aabf1e158d232b402ec789cf6d5390c8980f9c187eb2a7e532
- SSDEEP 384:FzYPAEHKaL6xPV30ui8G2Q8fcQnscmH/s0FP2HoHQMQFWBH5HCXcPo+xxcHOHmpZ:6Onsc+E0o9XP+oXPqnvgN
- TLSH
  T1AF5395BA17012E668B37861EF8639642D626302B444327327A8E83DC3F7E37D67D1957
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  AFK Bloom Fishing V13-4 (AHK)/abyss.ini
- Size 2KB
- SHA256 89d9927067f5e8519f6a5fd7feabeaa4dbe950c2f6da9e8f4671ee34c256b429
- MD5 8754f82e0d4797494365483957aec06e
- SHA1 b4f88b8c39dc1b0f09b41c6fee76302335bcf8f7
- SHA512 d371a8bc508224b781789e7d79b8b662d6cc09ae2ac0cf136ab6c1180c729cf02a0345d344541dffda214c69cce90b2ab511ee9d979266f70594343a8e1b162e
- TLSH
  T17D51AF831BF92518F0F39B94FFF410B66B32BE29691CC52D91D1424F81F594264637AB
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  AFK Bloom Fishing V13-4 (AHK)/abyssal.ini
- Size 2KB
- SHA256 0ba77da3783e4286de8cc574fb8aacccad293987c4a991afecffd465ca41ff02
- MD5 caadc9396cde2f586e322789bf57849c
- SHA1 b383ea42bfac9d23084e9411222758e5bb0db427
- SHA512 61def365a4f96d5cfa98a56f7c51db3a832101667a61ddc7a6eb9131036f1d3f7ebffac79bed7c8302b5c664a8e58dc9721cc7ce8802471f7b9a6e36f542e309
- TLSH
  T10151AE831BF96619F0F39B94FFF020B66B32BE29691CC52C91D1424F81F594264637AB
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  AFK Bloom Fishing V13-4 (AHK)/alienblade.ini
- Size 1KB
- SHA256 40938208e00e3abce412cf99f5c9361bf9e1bc03e9558198edc600989f0d472a
- MD5 36259769a72101ada6c7a3236084f92a
- SHA1 32f1022f3c6a543692c22c4a79cb4d7c8cf9b107
- SHA512 7723f6d75951efd3cc010852713b82a3c380e25f55242f46f26926f6ee20a6eb557b34096a785567acd1c1136576cd07868f6f9e013a86132933ac25dc6484df
- TLSH
  T1E12111AFD7461929837F81CC4072005500E77BA1E063672D6AA6854D7F51B7C3BFA823
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  AFK Bloom Fishing V13-4 (AHK)/arc.ini
- Size 2KB
- SHA256 31a5743899cec9c50177bfc3fc57c70451569a9dcc741314f221a3fc0cdacbdf
- MD5 3eab485fc7987a289181121a9e7d431f
- SHA1 628beead3195b93e4871d3f7cd684ce409df67a3
- SHA512 9282671c0133c1ebd15dead2c59489737ea28faf66559f309a3c3022fbc426892e9370cdf1479a68172be1a2d05133e547f07a0b2527f347f6e037cb66783df5
- TLSH
  T1A851C2831BF92519F0F39B94FFF010B66B32BE29691CC52C91C1424F81F598264637A7
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  AFK Bloom Fishing V13-4 (AHK)/astralhook.ini
- Size 2KB
- SHA256 b32af7be80ded517631fd1f8965b572a5f0305154d27682694c7ead3fe14ab87
- MD5 8106a856d029502f88d0461c9ece150b
- SHA1 65478adb3cdb680ec91e815dc6daedef60b11a34
- SHA512 6348d6b0da358c71d9348c73322d9c81a4142a1d1cb327dc618202e1415b80f6399f6b96c26df37a6ea87bf5ee93304161934651f890beb808444a2bc548948e
- TLSH
  T10B51BB931BF92609F1F35B98FFF420B76B36BA256918C11C91C0434F81F1942A5A33AB
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  AFK Bloom Fishing V13-4 (AHK)/avalanche.ini
- Size 2KB
- SHA256 fd47a72d5ee05f2870d6395c876c597cc846ae953a94b9def5e7f6b10cdf32b0
- MD5 e180d5ade4d8f9937c18d43e04a70e95
- SHA1 6d31f27fa522e49a1f4b0c47991c10c3a3281182
- SHA512 c6404568742e31d6e6a7e1f7dcea96fdc5a602b970c533afb4274ac3ca641de915c28f0a103a5ae9de8364c052780ad0b2c2b7f9ee88f1e648df1b2ce9966b45
- TLSH
  T11051AD831BF96619F0F39A98FFF010B69B32BA25691CC21C91D1434F81F194264637AB
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  AFK Bloom Fishing V13-4 (AHK)/boomball.ini
- Size 2KB
- SHA256 e37d36bd4ef43d12eaa19cd2905d1d4d155ef703ff45030a96cb340b2afb62b7
- MD5 3f2575da7ae8c39183aa58e2e9bea20c
- SHA1 f005660784ede43d05a6a53cf27e5470af848a76
- SHA512 16bc7e23a2db5fa8b646ae2b7983d42504df687db0a486fb55673bc59d0cea392844cf816c112ed04153393e088786455578a889eda01c684e93e65e788e7979
- TLSH
  T16F518B831BF92609F1F39A98FFF010B79B32BA256918C21D91C1434F81F598264637BB
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  AFK Bloom Fishing V13-4 (AHK)/bric.ini
- Size 2KB
- SHA256 3afd96a9e70e73f9d7c61940141dd26fcb08a7d42d60004240073db9440c2af2
- MD5 c20e4195e109b84ff456495e08fb5d2d
- SHA1 cc8055b3cd8697710645a4be4fec91db00281a47
- SHA512 ef9c645be2baea11b6d949fef0eca90da1e7937b164befa6cbca26a8a124a94ae995b631dba63458d239d01ef8e4089a1f53aa6a2b0a66ec4fda4d101aac9795
- TLSH
  T11C41A0831BF96518F1F35B94FFF410B65B32BE29691CC12D91D1424F81F198264633AB
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  AFK Bloom Fishing V13-4 (AHK)/carbon.ini
- Size 1KB
- SHA256 3d7cca6cc3fb9ac3d852baa29f277c01095d65c3bd78bad3bf3d50942e42a135
- MD5 c62a8b75c9e6575c6267b2d20dadd021
- SHA1 d943cbc3d776e9beb8387ac2c092873d1d8b9094
- SHA512 8e927ba454fdef07401024e669c65c4d601c0d53a9a3a92a8d6f3b4a47d82f725902834eea301a70e632260e3928377ecd25444647262ce7b06abf41d469927e
- TLSH
  T13D2112AFE6001A3982BF5A8C50F3546100E63A5090D3632936B68055BE45A7C7EFE913
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  AFK Bloom Fishing V13-4 (AHK)/challengers.ini
- Size 1KB
- SHA256 78847319944223947cb8ca1a3521a15aacc560b9d78d34a7ff439dbb32b18629
- MD5 f24e9fefec5728e0572d3e123ebffd1b
- SHA1 62ea0961d428ef7c6357ed2ab43a347b80486ee4
- SHA512 10d5e279feafdc79f976959876328267cf631dc3c0fe88f3396b2d50376417224de658d94d41592881533804f1ce498bb918c095c8cbb260f77bfaa7100bc761
- TLSH
  T14021DDAFF605192982BF46CC91B6106100A73A61A0D7732926AB9055BE469AC7EFF413
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  AFK Bloom Fishing V13-4 (AHK)/champions.ini
- Size 1KB
- SHA256 288d02738e32b504a4e47877e8d1c91aef9dbe63559cfba9c6e75b2d63fb9d4e
- MD5 53e4c4f9f3b77a29839ba2aae6a37a4b
- SHA1 2f2c730f51497c51d1d3281ad0af121ce37031ec
- SHA512 37fbf34cb76e6e9aaf1e0d83d0dd6f83e2895d0f0936bfc5a436e52c912668bf13a6b6183872167db362a155a8121dafebe3495e1bfeb44d4a9960c9d20c12c2
- TLSH
  T1F621E4AFA744152982BF46CC91B7405500D73A91E097633D36A68055BE45A7C7EFB813
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  AFK Bloom Fishing V13-4 (AHK)/chrysalis.ini
- Size 1KB
- SHA256 cd8693057518bc7c0543ad4627ddb24c446faa10a217b5a0e0306dd6c36bcb01
- MD5 25c51e3989369ddf59ec90d5352e8463
- SHA1 d4a96f3dd8aa95ceb87a8371f2cd92aa21e44068
- SHA512 b46244f4874633089f9c0530f7cc573f7c9143d7dcaa8002a696013e8eb63c213f6b83cd7c2abc671a266054d2388f99f801a01085f81fbaf2bbe90a4032248e
- TLSH
  T1182132BFF6401829C2BF4ACC50F7206000D73A9190D7732D35A780546E52AAC3FFA413
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Executes dropped EXE

Checks installed software on the system

Checks whether UAC is enabled

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32