019c62fee5550a5177fb458f7b7b4c09731355af073ddc50b583fcd731fa56d1

General

Target
BodysmithTales_0.2.2b (1).zip
Size 16.2MB
Sample260818-sblc2sv1f1
SHA256 019c62fee5550a5177fb458f7b7b4c09731355af073ddc50b583fcd731fa56d1
MD5 331f28900ab74041b8f338c140e81a92
SHA1 b920aba6c2c5b8d9271c6b6043230f959d4353ef
SHA512 2468e44504d4b67c5a5a393925a4cea06c10d91e68a228a1f0e0a0bf55e19ca5b3d00d18a207bc210753d3a271f455b67ec1ecc1dc4582971c4799026c6b27cd
SSDEEP 393216:7B1lx35oPBUUj7n2My809S3QBNVwSm8nd5sShdTQOeJt/5NJMthWpvy9:7H35oTWMy809xBTGsLsCeJ95NJMXOY
TLSH
T1B807334020C0A743FDCB28BF3A94E1DBC0257A61D9467876C5D73DA1CABA6DE848F257
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  BodysmithTales_0.2.2b (1).zip
- Size 16.2MB
- SHA256 019c62fee5550a5177fb458f7b7b4c09731355af073ddc50b583fcd731fa56d1
- MD5 331f28900ab74041b8f338c140e81a92
- SHA1 b920aba6c2c5b8d9271c6b6043230f959d4353ef
- SHA512 2468e44504d4b67c5a5a393925a4cea06c10d91e68a228a1f0e0a0bf55e19ca5b3d00d18a207bc210753d3a271f455b67ec1ecc1dc4582971c4799026c6b27cd
- SSDEEP 393216:7B1lx35oPBUUj7n2My809S3QBNVwSm8nd5sShdTQOeJt/5NJMthWpvy9:7H35oTWMy809xBTGsLsCeJ95NJMXOY
- TLSH
  T1B807334020C0A743FDCB28BF3A94E1DBC0257A61D9467876C5D73DA1CABA6DE848F257
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

persistence
- Drops file in System32 directory
behavioral1
- Target
  BodysmithTales_0.2.2b/BodysmithTales.exe
- Size 19.5MB
- SHA256 d65a95d6e8b048eb611c05c3de9c75d0f86715e94132c6264a7d75ad99fcbb96
- MD5 79d1d0894d400b062f52d273346e8539
- SHA1 66516f61c976ae12611aa859252cc7e0ccd67e6e
- SHA512 ac6149ac6f74694077cd09356d842195c7b4dbf46b6612e5abfdfdd0d444e365933f73563af30a21eba73e430edba077c9cc6d5358dbea7c530f4c27dfd767a0
- SSDEEP 196608:TsJGOkZBHK+lbh+FgilyzVMP/Sp54z49vAR/kVGr19f:TsEOkZFK+lbh+FsQRcE
- TLSH
  T1EF274B243979C6C9C0B6E47CC566C3ABE9203D94C72887FB4570765B2FFA2E09936127
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  BodysmithTales_0.2.2b/data.win
- Size 15.0MB
- SHA256 64a55aba8dc4bb9eb7e56c92ee546f41c9e6f65a4b98024aa22cda6e48a5f3cf
- MD5 9335e3a9354ba1698c949739a4762ee2
- SHA1 f4d6c01455f8ac97eb6d4c73e6eaa832e73ebe91
- SHA512 53d6dab78e73dad1a8797d2febe25f21dba110dffe45fffed7847b75d9f660e92eebb625c1a1b225e0778ca270d7df868c9cc9880fb63acf47b5ac6deaebc3c3
- SSDEEP 393216:GedXQwYkfepf6ZSsPHgMsT4NjU7GxSDqhNP:35xfAiZnsT4NjUqSOhNP
- TLSH
  T1EBF64AD2F504E982CC555E394E67D9A847323D36FE55861332C0BB4F3AB3292EA31786
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

credential_access discovery execution stealer
- Credentials from Password Stores: Windows Credential Manager
  Suspicious access to Credentials History.
  credential_access stealer
behavioral3
- Target
  BodysmithTales_0.2.2b/execute_shell_simple_ext_x64.dll
- Size 3KB
- SHA256 8b793592b52cd7838a2c0ae1ac68acdfa6fedd131a289084f94c5241735197ab
- MD5 2f24b511a02c35b30ed9d7cb4b8a1a10
- SHA1 a485c87f10c6001c76e22d1c5ea2e16dd0084878
- SHA512 40c582dd3c92ba2cb205fed40f8191f84a59db8f3a53a793b430873d2c7995af83b6a0a9b3c377a34b254c310f38a82fddc48e33114fdaa1b06fc16e03091e18
- TLSH
  T12751E273B770ACB6E95C033D8417C8EF332EB54002175B6F569A910616E2FC9343A6D1
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral4