eaca9cd6017508411986b5f3222f970a0d79fd66b2637794f1d4026ce2bde56f

Sharing

Copy URL Twitter E-mail

General

Target
Ultimate.Ragdoll.Game.rar
Size 661.7MB
Sample260819-e53brswgqd
SHA256 eaca9cd6017508411986b5f3222f970a0d79fd66b2637794f1d4026ce2bde56f
MD5 dbdb117c80332f0d288642e8d1798f02
SHA1 f1bf570ff588661b3321e0a37d040fa24c72d41a
SHA512 3c1fa695c69f0f507dbe471519a76894627d0451b51327b313b3c430c04c78fdd383e07699addeb5d67863cabea2c4b95e8b84a1390fa1b9bd48d86b4d46514e
SSDEEP 12582912:K1mmAbtXol679nYMf0W8dRwqNQ80wl2joZZ3qZfHgTdvoF5GzUI:K1mmqS6cW8LxejonaJHxgzP
TLSH
T1207933A48B577376C61AD735B042AEC4DCED6277FA52129B421FC689FD84B84BE1230C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Ultimate.Ragdoll.Game.rar
- Size 661.7MB
- SHA256 eaca9cd6017508411986b5f3222f970a0d79fd66b2637794f1d4026ce2bde56f
- MD5 dbdb117c80332f0d288642e8d1798f02
- SHA1 f1bf570ff588661b3321e0a37d040fa24c72d41a
- SHA512 3c1fa695c69f0f507dbe471519a76894627d0451b51327b313b3c430c04c78fdd383e07699addeb5d67863cabea2c4b95e8b84a1390fa1b9bd48d86b4d46514e
- SSDEEP 12582912:K1mmAbtXol679nYMf0W8dRwqNQ80wl2joZZ3qZfHgTdvoF5GzUI:K1mmqS6cW8LxejonaJHxgzP
- TLSH
  T1207933A48B577376C61AD735B042AEC4DCED6277FA52129B421FC689FD84B84BE1230C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Ultimate.Ragdoll.Game/Free Premium Accounts at OfficialMrB.com.txt
- Size 768B
- SHA256 633d817a05c83ccb3b32823ee8e03c9b34ecd3397c91da02b2986cff2c9d015f
- MD5 aafe826fa714780443cacfaf474ab5ec
- SHA1 fb102119b10555886d697dc689f9ded011f8856b
- SHA512 8fe049c4151e16a01bcdc8856efd24e9d5b1e08f32557dc51882e13ae9f5fb03b0228fde1f892ac370924ca46d79a50e7d48bcfb58c828eb389ef434e3b1e91c
- TLSH
  T10401F4E322058910483A76F7B807F32F57C45903E9AA40F43F9D84BFC3231CA9942982
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral3 behavioral4
- Target
  Ultimate.Ragdoll.Game/IGG-GAMES.COM.url
- Size 196B
- SHA256 6d905d76e7d807c5831231d791f2510160dd56018ae423a037e7ac88fd19412f
- MD5 882e17d630d74b64a8176e38e2fadf7f
- SHA1 d6652d568db451c03b73eede688e0124e2d54ebf
- SHA512 2baac743dabdbf133583c4d500699673e0bb2b2ade89f0a660eb17bfb440f1d74814ade3b82eb07d776f6a7c1b1975f25c6c1c500edc589897bc304a9c9fb3b0
- TLSH
  T188D022188709C2D5E683A8433270FC48994E7D1808DAC4289A48CE8B4CC46C1889CBE2
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  Ultimate.Ragdoll.Game/PCGAMESTORRENTS.COM.url
- Size 202B
- SHA256 c4d6ac03d1b51af3f4127bdd12f2317da8ebf4a7f20402f2139c61d5cf10ab23
- MD5 420715a04de8367bb8d37d57ce1d6d41
- SHA1 710369a636391e43be7149416d8e9b390863babb
- SHA512 8737cec4730f412c18e508076d9fb7af2ab10b4b1637c70c2f76c1c6ca7bca27021cbe56dc3305a4ea7704f7ac2c6e005d02c605a4e7f9b0a709bb94cfc7f457
- TLSH
  T1C1D0221D8705C2E5EA43A5473270FC48A84F7D5819D6C4689748CE8E0CD47C0C85CBE2
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral7 behavioral8
- Target
  Ultimate.Ragdoll.Game/README.txt
- Size 338B
- SHA256 7c28c990a190a0fd7ce7b47be461e73078e5fc5a8e7efeaae9a64cc564fb6e0a
- MD5 9b5ce4aa12b4ace2514ed3d5061a73ab
- SHA1 5573211ca0c545799eb068fde7e42fc26e99fc8a
- SHA512 434bc446efe432911bbdfef8ded3f017b2b045bbb2da181a2c3fed3c416967d04044f6b387545ec09727b6f4c883df8356c3ccf5c9feee6ec0aa7793d4e9fa1d
- TLSH
  T19FE0207EA735023236F03D80F40D79A5EF9340DB27A5AC40AA181A1C5330955453BF8C
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral10 behavioral9
- Target
  Ultimate.Ragdoll.Game/_INSTALL TUTORIAL.txt
- Size 1KB
- SHA256 ac45f3d5b1e728caffdafb6faeca0f22459f6ec2ff2c7449c3fac44d25f62915
- MD5 b0e0097e436766fb8bc251832414d24d
- SHA1 8b018eb5f5d46c854f9c07784f021cf7302f2a3b
- SHA512 ab966f3cd0d348a62168c9768b2e9d39bb44690a94dc15034394c9e7c11fc540ac9aa95e26a0b1de1e82077c0aca4a941e536260bfc49e3650655259d2835299
- TLSH
  T1E831100F4B5F87B62F7103FAB20DB5AAF70590AD0227045064AE702C335AB6A42976C9
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral11 behavioral12
- Target
  Ultimate.Ragdoll.Game/game/DLC/Blood and Gore/BloodAndGore.pak
- Size 41KB
- SHA256 eb6bf21b17ef01c68268e297c280ff521c0be54cec47c4d740d6b30ba946f498
- MD5 afc6297edcdc48501f95a9758aefa3cf
- SHA1 ee3c56962ba7d6e28b4e873c418bccd28e1eb105
- SHA512 b6ab83d398904a63cc200812e7889156b1ba83c8353f74ba8dc279cb7b2b8f3591ebd4262caa98f2825ec40ed9a74e932dc1a5198475a5c0ea9c0ee41435e355
- SSDEEP 768:nXrUOp5VZPqGppNEg05whPwrCH0AXbtCEV0cL6+lZUitLbk7FmRzk9nN6Cu:nbUOt0GzdweHtXx5u+XUitLm19Ru
- TLSH
  T1CD13F185B966402FF8FB813C6E810A51D767B65B1B279E5BD8C5D3C29288132AFC6703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Ultimate.Ragdoll.Game/game/DLC/Goofy Ahh Sounds/GoofyAhhSounds.pak
- Size 5.4MB
- SHA256 27634bb86ad3798fec6cce8ceab2276c76122520e67e301fcfd71242014f6e79
- MD5 7f29fe46dbbeef8919ca255dad194e5a
- SHA1 a6fa483270d4f7d37138abcaf74a15ac6348aef8
- SHA512 3725b4a29b974675a7c48fcbff773dc50dd5eae12a29567fc5dfb443f11a03d776aafaf1163d917856dd2d0cc45209a31cfbe4cae564c4d2b57d4452759d0bb4
- SSDEEP 98304:D5n3bYhfOiu/FoyUTs1ZpI2ppbUKfmdJUlWTgQTEUGrAO99xsWuvBNshf9NzWu:DtsxEETs1vnpAKYO8PoU+9yvA
- TLSH
  T17B4633D0EDD1BC29CA6B32FE085666CC37E8F269876596036ABC93671E673400C5217B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Ultimate.Ragdoll.Game/game/Engine/Binaries/ThirdParty/DbgHelp/dbghelp.dll
- Size 1.8MB
- SHA256 9a02133854ff9f06c3b23a70f8c2a4814b2ed4eef613244b485e3737259ddf9e
- MD5 a970b7fcc13c18a1998cf65a5b8cb699
- SHA1 e4e2c71ed0caac10e4a1555b54c91d03bfda01b7
- SHA512 4dfefd27487f706a5f59181735cdf2f8e80a6b354d756bf198bdc0d0ffb1060d4576ba8bfbcc8f7f5973f106d60e07d31bfb94b3034138bded9f1cbb8c224a46
- SSDEEP 24576:92I0ZwKNsVquEs4na7aDb4FzoRlUFs/9w7l38jxb9X7IqLC4X3:92Itw/s4na75c6Fa9IlE5EqF
- TLSH
  T10C856B5A52EC01BCEDBEE13C8656821BD7F27825172197CF16A0876E6F27EE2163D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Ultimate.Ragdoll.Game/game/Engine/Binaries/ThirdParty/NVIDIA/GeForceNOW/Win64/GfnRuntimeSdk.dll
- Size 3.1MB
- SHA256 e741479b13faab35b34a60bd9e8b09791ea57d260a9336b44916e73ba2246d30
- MD5 c5be9b2846ad20b7abf3b1e3afe3f3ff
- SHA1 8f513f30ece2b7ce69021f5f0b6f3c7387544f02
- SHA512 5cf5ae65177e30361eb07840400c74c4b3a02a19670a9bc086c828bc4c51cc3a77385a8ee2027374cce3793573dbc14f655e3471da26f23575bbf9109f063d93
- SSDEEP 49152:smV2iSnjfr7LqZfJqsQFJ1xFilsPi8SL64d:LV87+KRBpS
- TLSH
  T1AFE59D1677988195D177E13CD99F8B5BC6B1B0089B2297CB209487AE2F23FE54C3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  Ultimate.Ragdoll.Game/game/Engine/Binaries/ThirdParty/NVIDIA/NVaftermath/Win64/GFSDK_Aftermath_Lib.x64.dll
- Size 1.4MB
- SHA256 516e14af41a91fe960363728965f354aecc06bcdfaef6bcb45dd3537ede09195
- MD5 75a2969970775c2999e5c0e9bd11dacf
- SHA1 e8848291684ce2b65f48d4d04a67e93e23ef5164
- SHA512 06a90b6aaaeee5664d3a171521c5e4bcca89e51f0fb5e69f7655f0fee2f1ae674d7c75fed174ce4e32a2e2b3ae44dc816276b5740ec6257db61bea94c3e21962
- SSDEEP 24576:i/KlxXRBfAGKt1tEoG8wkxdShweSbSr2I6dM:GK/RB4Gg1tEoG8wkxdShw5S6In
- TLSH
  T193655C157705C2E9C02BE078CA934E8BD3B1BC919B2067DF72D15A281E73BE55E7B290
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  Ultimate.Ragdoll.Game/game/Engine/Binaries/ThirdParty/Oculus/OVRPlugin/OVRPlugin/Win64/OVRPlugin.dll
- Size 3.9MB
- SHA256 d42d9a1b40ae9e4a86a1dc00536cc7139daea5addbddd32ca386c5b24b000cb6
- MD5 345bb5009e199bbbbcb3774ac9b92971
- SHA1 6b5fee4522ab7fc459e49b5d6f7fbd7d6df9cf80
- SHA512 6f77ee39118894d61373fa8ce3af9236ed4fe9e347e909adee42fd7ee559677aab29ed26fc8abcd78b01699349f2dba3f9b841f6dd135f462c26f9ee9898f6c3
- SSDEEP 49152:d+6HOA2JQ4at/5gY5AS5maSzZpVijLL/hWHz261RbC7tcT653zcbD1dHrYrmdm:Mgxm5ZdT2frmdm
- TLSH
  T1DF165A57A7B444A4D9B68079CCB79B02E3B238081BF186E7235105EDBE1B7D03A7BB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  Ultimate.Ragdoll.Game/game/Engine/Binaries/ThirdParty/Ogg/Win64/VS2015/libogg_64.dll
- Size 48KB
- SHA256 284a6e70a6dce01f8a02d93e1bb78baf0efb6140459c587d8986d59fb6bd675b
- MD5 cd1f16736ccc5dd8c8ce8525957f4cfb
- SHA1 654144e0ddedc26b0b3be8e6562784abad1b471f
- SHA512 357df96397e21662194a30ce7f5d53cc202fcc464e1c06312eb12031c5683305638b7e674e5b4b758e142facb00963a53c419c430ea2b419b62f97c14b4812af
- SSDEEP 384:GRKN7KRked7VWjLmPnUunFqphqaNQL2PnQftfKNRvrzAcojOYPu:dkSQyQUuFq19HAhjXu
- TLSH
  T1DD235A0B6724A5AFE43A507E89EAC356D07A7810D3212BDF0358974E0F23DCD6D3A769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  Ultimate.Ragdoll.Game/game/Engine/Binaries/ThirdParty/OpenXR/win64/openxr_loader.dll
- Size 608KB
- SHA256 2ae94572256dfd6d7e992a4474797d8cfe14cf3c030b2040a5b91a7d7bdfd8d8
- MD5 b2fa012e16597663c03ea02134d42a32
- SHA1 4ef77f73dce0cf262bf4ea8a1fa88022252ee66e
- SHA512 4e996ce78316fd71299ebe22dfc655c45e1c95672a1598a00f3433285f257f97d62a418bb0ca06716efcc2467b63b760a1ce64cb73b2e845146df5c7c4c6528f
- SSDEEP 12288:jM5/UqTILE+xs1iom7uey6rbJI7wIoa5TqrodDU:jM5/UqTIY+xXJuey6rFI7wIv5TqrO
- TLSH
  T1DCD45B16A2AD01BCE0ABD03C8A575E12F776780603B15AEF03E046676F1B7E45F3A761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  Ultimate.Ragdoll.Game/game/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/APEX_Clothing_x64.dll
- Size 1.2MB
- SHA256 12e2803bca4a46990b6a00d2cb0869931181d82942e3a7853afb4ff795def072
- MD5 0b61bd104d431055b1ea5d5a7b608ab9
- SHA1 4c5f8cea43222cee0ed49d26b7b213dba4fe52d8
- SHA512 b395c8801bcb13962290364cb78c9e68509f71012775bc7f26fcb9e7204fe40daa93f664f188ad423be592337e8fedf4be19e4a2575c2e09fe9454b0923f8e8f
- SSDEEP 12288:YafheRojeXDHoZuwkGdcnKxXgWb18j1g+h8RjjQzH9FP/SwcIr7WxAvqj:YaJ8ojuIZuwkGGvuFRA79FP/UIr7wAv
- TLSH
  T18E457C4A727A41E5D56BD0BCC26BF11BF6323005030446DB53E286A9AFB3FD44B7AB16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  Ultimate.Ragdoll.Game/game/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/APEX_Legacy_x64.dll
- Size 3.2MB
- SHA256 58ac9873ad9f1a4b6c7e607a86980fe00d992ec08138c16a5021b4890ef25b1c
- MD5 f958454319b2757aba7adc295fea89cd
- SHA1 9a0561d5c208847441b0e6e4199977fb70ac5f90
- SHA512 ee86a9b65b911f3a4aa3b4b25b932ccac8f82474b2220217b0c5fb2a313dc7772e24d87f9abad94cb4ef65c972c6de69c28bec05686fdc7abadc3409c6ea1c93
- SSDEEP 24576:JqL1PPXyEo4xuhI/Nlubl6NASrXjaG0t1lgEZooyS9g0Rm:JqL1Pvi4s4Nop6NtrXjanlxZLy0g
- TLSH
  T167F5E6DD7A6D4500C856D3FCC643A66BE9B2B2442F9567CF192082B99F23FE0A634F44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  Ultimate.Ragdoll.Game/game/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/ApexFramework_x64.dll
- Size 1019KB
- SHA256 cce437454486fd7fdeb7b24ae2afc3e3b5123a1b739c7de0061b313bfff88e3b
- MD5 ef0ba4ab9321242dc5713a264a8da0c4
- SHA1 6579caefec3c565f9003961d18db9a712910b329
- SHA512 15a04f24bb34526e989215a5ac32a379f1fb358e0523d0459057daf8d325a9fa70e4ae1718485b9e403910a80a0023601062397d756b22dc32eb57692afc11b5
- SSDEEP 12288:lW9Of4W/7YTDOKQc+EHCr4ZpodxMeObK0E/sNl4TKNiZ:Y9X2JcrHCr4ZadlOO0WTKN
- TLSH
  T1A1255A4A723901E5E527C0BC856BA60BE6BA3482071047CF13F15ABB9F63BD46B7B315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32