Overview

overview

5

Static

static

3

AMS Config.exe

windows10-2004-x64

3

AMS Config.exe

windows11-ltsc_2024-x64

3

AMS Dedicated.exe

windows10-2004-x64

3

AMS Dedicated.exe

windows11-ltsc_2024-x64

3

AMS.exe

windows10-2004-x64

5

AMS.exe

windows11-ltsc_2024-x64

5

Automobili...er.exe

windows10-2004-x64

1

Automobili...er.exe

windows11-ltsc_2024-x64

1

RegisterAm...er.exe

windows10-2004-x64

1

RegisterAm...er.exe

windows11-ltsc_2024-x64

1

binkw32.dll

windows10-2004-x64

3

binkw32.dll

windows11-ltsc_2024-x64

3

d3d9.dll

windows10-2004-x64

3

d3d9.dll

windows11-ltsc_2024-x64

3

d3d9_2.dll

windows10-2004-x64

3

d3d9_2.dll

windows11-ltsc_2024-x64

3

dsetup.dll

windows10-2004-x64

4

dsetup.dll

windows11-ltsc_2024-x64

4

libmysql.dll

windows10-2004-x64

3

libmysql.dll

windows11-ltsc_2024-x64

3

mss32.dll

windows10-2004-x64

3

mss32.dll

windows11-ltsc_2024-x64

3

steam_api.dll

windows10-2004-x64

3

steam_api.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Automobilista.rar
  • Size 15.6MB
  • Sample260819-j39ehszfmg
  • SHA256 01ebfae016236b74319b24bb8515d24c49e85b8714abae6e183f584771c08bbc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
discovery

Malware Config

Targets

    • Target
      AMS Config.exe
    • Size 1.7MB
    • SHA256 6823307d2f3cf25edbc3180981e1e8481356a0e2541eb1468d3da61edbc13718
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral1behavioral2
    • Target
      AMS Dedicated.exe
    • Size 7.8MB
    • SHA256 b313be3f3431f1c36d97892a8d7dbae01fcf588ecbdd617a8db6fb5dad673b18
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      AMS.exe
    • Size 8.5MB
    • SHA256 dc4e62f04a804857ac3a44c0898f0537a399f2aaf834936226c4df8903c033e0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral5behavioral6
    • Target
      AutomobilistaWebLauncher.exe
    • Size 7KB
    • SHA256 4fe9938d101906b9544e9a94ef91bdc2a542ce202819047cd23ed22a44e30b5e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      RegisterAmsUrlHandler.exe
    • Size 5KB
    • SHA256 bf72d8edfbb3026d2ae72717dffc9b90e46d2d45c01dcd0625b2768062b18318
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      binkw32.dll
    • Size 188KB
    • SHA256 1081a63d08c085f0aa027e0d2d3fa9eca3b33fa3403a2a6d333f277dbea91907
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral11behavioral12
    • Target
      d3d9.out
    • Size 4.2MB
    • SHA256 da430e0a9c6eecefa0d1b27d05e16c426fb5d04e808b194d914eaac4b31bc0f8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral13behavioral14
    • Target
      d3d9_2.out
    • Size 75KB
    • SHA256 331c26a23c73d396302099e83c329451614ecff0c897cef94911910c4c0c5542
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral15behavioral16
    • Target
      dsetup.dll
    • Size 72KB
    • SHA256 22d45921e8c238219fdda28b4fc836dc1a026fc160f45d0c452b414483fe421c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    discovery
    behavioral17behavioral18
    • Target
      libmysql.dll
    • Size 1.1MB
    • SHA256 1562d61c4dc04525db4202c7770a72c246c6fb7ee7d140da4f29558e12195dca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral19behavioral20
    • Target
      mss32.dll
    • Size 379KB
    • SHA256 1df244d8edf0a0d85492c9fffcc879ee34796cf27eb494247d9e021cc21abc7d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral21behavioral22
    • Target
      steam_api.dll
    • Size 182KB
    • SHA256 0bdba265a140a963464b4fad889d7a8dede05aba8c914ab2e83026255b6a2f41
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral23behavioral24

MITRE ATT&CK Enterprise v16

Tasks