557d48d0904f1347e901cdb32ce91a24a7d24dbcb5ac6f538ac5c786b2894074

Sharing

Copy URL Twitter E-mail

General

Target
balalalala.zip
Size 69.9MB
Sample260820-2gwweabp3v
SHA256 557d48d0904f1347e901cdb32ce91a24a7d24dbcb5ac6f538ac5c786b2894074
MD5 ace8512c29512c4fa3d954b8355bd455
SHA1 e0b659b4e6dfbad76724f9370f560c91dfcd2119
SHA512 9e472196708b07072dd179d87608af5b7eb2491cbe3758f0d56ddfbf32b6eaa8d128acda2389d1e5834f2f661a2ebff5db765b84b96d86e48fc2010cc9e8ff5d
SSDEEP 1572864:pgBqTlLMVKixsONeOxLyh6julLxSooU9XVfaHwkMtp:mBqBL6KixsO8YycuqUjyHwBp
TLSH
T1BBF733289BBEC007249AF5B35D48B3646321E91F4847CD2CF79272389B2F6DB72855C6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  balalalala/Balatro.Build.17459173.Windows-CSF.rar
- Size 57.0MB
- SHA256 d7326582bbdab9eff1e55c259e7a7bb4269356f175d3b32f3ef884b1440b8dcb
- MD5 076dc9ad80112b327b359ace4c16a436
- SHA1 12bc39b26e2492e3d69f9a88453e002b2c9c1097
- SHA512 314d703e979f1dd16507a64a242ce3c4750f88ebd6929ff1f5a9ab41fdcf35eef1db868acadb8d48dcd7e6841d73adf0b6c0b1fd53e791957026531c26b73f26
- SSDEEP 1572864:GRibkhsN3moCEBVY3JupmF8J7xK8AiTbTBwf:GMbgs5moCYMu08gibuf
- TLSH
  T116D73384B74656AA63D23575DB007340E53BAC3E8CAA1155B8BBE324A1CFE4777C23C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  balalalala/emu-win-release.7z
- Size 12.9MB
- SHA256 3ba855ef962205136a54fb32519a46362e0cc5b42fc2bb3667e4d21307d972e5
- MD5 4c6e445b3901e780c3abeb5f1cc5b489
- SHA1 28bf73ee051f65b05e0a316f9aa12f32acf8c86d
- SHA512 415d7274f451aac32f5efcb25c297b4ebafde59b375bee71bf9444dfbbd9874945029c9adac21fc87e88dedbae1a5104012c3269e0ced9347ba2034d90d196fc
- SSDEEP 196608:UAFJMAbCXEdF5ZbjuZA7hO3eLcEUx9luZHFUYJo/UHbKfPB2195P8IGUnlatWhJ:vC0dFziZxuwEUx96HFzTHbKU19WolLL
- TLSH
  T19ED633760AADBDB8E51DEDB23115DA2C1120FD8D3BB4AB1500F6BDD64F639AB01AC1C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  release/experimental/x64/steam_api64.dll
- Size 21.7MB
- SHA256 efa90433e5e6d5eb4599ee199e0eb8605a7e3807f87ff865a67477c760dad555
- MD5 4579b56a95117e84bb47921e40644a24
- SHA1 7a1312e7db1a39d66284d271dd1d5bebfe9e393a
- SHA512 e48856120c3b23c04af0f4e1984b7cf38e19938fe79ae47e3016d10482ebc4df588c8e719ee56e6baf5118393f2a327cb288213264f8e3a18d7f3db11c009926
- SSDEEP 98304:/JmCpgElJawTzNLDfq9qKfnhPwo+FqBej1/wm71y+4AxYZgAE6EZDi7QZaR1vDgQ:/PvxFqoj1F7wciZgA72D8U4vXIStMU
- TLSH
  T192375B47E7BB01E4D6BAD03895B3623BFE717495833097DBA68056061F62BE0E93E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  release/experimental/x64/steamclient64.dll
- Size 108KB
- SHA256 f3f06d9c3b9a834f258fbb2e411b7c83a670a5babab2e133c4b75c25356eaa64
- MD5 33999ff888f4cea54c2f30f04d6b4da6
- SHA1 e4110f769a660d2dd50797bc52d127a0409e4999
- SHA512 ee76fcf276d1b109d168d9043493ea12bc3f022126f4356de6bd537df5d452222b8add921310eaff8cc2c0ffdf4912a6197752f9269c131500a895efe5de66bf
- SSDEEP 3072:0ubl6vIUarDdg05g2G0dgAtWq0qZ331WNGsMtpsCP:QvIx/mPp0KAEazsMtf
- TLSH
  T104B32957B6E930ABE176C6788BB37A05D776B81507609BEF0360425A1F237E0CD39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  release/experimental/x86/steam_api.dll
- Size 19.1MB
- SHA256 5e2cd22bfac090aa868d8e479913c2d8cdd5e32f9570a67b83706fd99e277909
- MD5 4440185f5dc5efbb7b238a9fa77a1cec
- SHA1 f36a89ae85f63ac65eda3a3a73631ece76faf6fb
- SHA512 94f28da6dc72f9afdb5fa6660c278a6b0ee5b00c0cb7a3f9803fcb7bcea4b222363b135c02ef62beafecc466057d61ebdfafd8ef66afd44d5c5640537c42c093
- SSDEEP 393216:DfNpvcvxYlWb2wK8mnsmOoCwcIgA72Ra6die:DLjsZwcIgA72Rhj
- TLSH
  T14D17AE12E392D135FBB701F68AFA067E5B389F602B1402DB72C465494B76AD1FE32613
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  release/experimental/x86/steamclient.dll
- Size 90KB
- SHA256 f36cd4eaa96775e32949ff91b22cce1d7221f65ae52f494193c00f6e574b2f7d
- MD5 ff4905359dbfad7ed9aa98d7c5298431
- SHA1 a9726603d83636a33079d5bb82761a3b1acaf378
- SHA512 67858bfc0599c41ae57ece257c1d1e5d791ed426efcbcba71791a05064e557ae21af3705f94844cf7a19b2b5b4682787ecaeae8d52014ba9785cfce26f337db2
- SSDEEP 1536:/l29+6H+1lv3fzMVE/3jY+WNG1egQfHb19b7y0pI85wsW+Fcdwov8FMCCmk7uZt6:929+VR3fV/3ZWCegQfH/7yAI8MwjFMC6
- TLSH
  T19793290075D0F175D8BED9354B38BA75CB3EB950DBA0DDEB275402A94E302C1EE31A6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  release/regular/x64/steam_api64.dll
- Size 10.9MB
- SHA256 8b1bd0bea955aaeccd6de92d2a8c6208757dde038fd3c074113f0c2609e04de1
- MD5 f9e425cd265142d1f1028cbdb8f3e954
- SHA1 81806f2d3c63592110a350677f14ddeb50d832db
- SHA512 968c9dcda08b405dc5c3c169f6e65f7a53da63e3bd9cc2e335953158b7e9d7b041483e3b05770c55b83ed18d451ffa7298701778d457707d998bf2066dd906d0
- SSDEEP 98304:XCL5yNEDVAOYjTv9Ft3oOdKiXa/DQGtDS+K8dQzERLMPKDh5:XDVF8/DNtD3K8dUPKDD
- TLSH
  T1B7B60817E7BA01E4E5FAC1789663623BFDB13495933097DB9A80560B1B72BE0E93D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  release/regular/x86/steam_api.dll
- Size 8.8MB
- SHA256 8e804d38cde295b1f08a6c41ecc8978fde69e53e2a6e22652017371a49cba1be
- MD5 f7e6ea890030f21ce2355257d02bf7db
- SHA1 79b9b430e5efb08b062486f1c9fcd6606ecb7b80
- SHA512 e29645d08df85164dfa500ea2da48c1cd12c6f36174194f010492968c3a527333c8a7df16e86526ecede067ead7e172636ca7b0d8c48e57d999dae7b39f21b8d
- SSDEEP 196608:3iR0y4FKV7lFJYHwbniKCsQLBm7UzjqtcL:3CFJYHwbniKCsdtcL
- TLSH
  T105968D22E2518039FAFB01F9C7FE4ABE5A7C5F612B1414DB53C4A48D0A369D1BE32653
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  release/steam_old_lib/Steam.dll
- Size 160KB
- SHA256 c8d600c9df0d4211964a64a7b5515b122e1f078092f74b11c67662ada4e42d47
- MD5 cbdc2832ab65c4838c2d466c65f09779
- SHA1 0652637e72bc338c79e86cede02c42a77476ea48
- SHA512 1e96b8fb3b1e2fa91506ae36788de57e330d1a699c7bf200c461e42379ed1f6df0cbafb0e2d246733278b19e2e4f20e27ff0839dd2abbef03910c29ffb059f4c
- SSDEEP 3072:L40a8/nVS5gZC37/VXFJeljtxthnkCSJ/XexbzzmaSXpsyTqrpPrzx6A8Dz:L40a8/nVogZY1IbJkxJ/czzeZ7qrzx6X
- TLSH
  T18FF33A15AC4188B1DF6F087548386E16DF29AE65C7F2BAE37B500EE548346CD8F34B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  release/steamclient_experimental/GameOverlayRenderer.dll
- Size 1.8MB
- SHA256 211fbc97d0be26bbc9104f94cf3db8d2d7e4f804fddfc73adc46470fba5e65eb
- MD5 f8d22683d03e8bf3a6b7a8aa26f37c66
- SHA1 5ee136d52be654c3c519407970acd6a733dcc56c
- SHA512 1354f8de780f003ece5e054a277b627b90ed2dd9a60940072ce09d0db38323581835d0e77ee6e384d1d673205647400f88e5288da98032757a550a1946b42ccd
- SSDEEP 1536:4ROAdC7+LRb8NM5L7/j87NQAgQnTbuJHA0bIsWF5cdwsYzDP15dKDVx:cOA1R8M7/CngQnTgACKowsYDP15dKDVx
- TLSH
  T1B195490036D1B136E9BED5340B74BA65EE3EBD400BA0DDEB3355D66E0E302C1E635A66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  release/steamclient_experimental/GameOverlayRenderer64.dll
- Size 1.9MB
- SHA256 264df433e827fa9b133f1d7e189d0852748faa76f02a6e8d5ef0cd1a3bf83cf4
- MD5 112b915e943fe11e869d6286dc2f6b19
- SHA1 cbd33667918f5f43f8daee0fde7746b2c7a0a094
- SHA512 ba22bd19ca1ad3505313a7bc2e533ae13b0f9c308fcef2c91df701fdd3c33b474aa385d384a09f792c3437745ee5b7f05247eccee10c3878f51092e535260b73
- SSDEEP 3072:bwK32ly3bxD9t0lU260Iew0dWzzqLvjW5/:b931DjHd0PZL0
- TLSH
  T18695295477E930B5E566C3788BB33A07DA7678150711AAEF0360025A2EE3FE2C179F61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  release/steamclient_experimental/extra_dlls/steamclient_extra_x64.dll
- Size 301KB
- SHA256 85ec1af20c0862acb98eaa3cfe3b589f3c7c6bf323f3aa1427c3510aa2ab1c42
- MD5 003cf064298e0375ffad21b1d6cbff02
- SHA1 31bb1a486e76d14389c65bfd4f5004dcc77b4a96
- SHA512 900f9a31eb99752714bdee0f254a8c871bafb87b5fc1d592725e2b87d87a8ba7b1a6def321c9800d06415714031ceebefe9e1e1a657d40ce3fa4331257879944
- SSDEEP 6144:y5WZ8pw7uX5tQCxF4yynnws4U0Kimwp49WrWQF:dZTuXPsXnwxU06rQF
- TLSH
  T1E36406057AE5A875EA36C63C8A639D09F7B2F8950792E7CB07A109DE0E137D8CD39701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  release/steamclient_experimental/extra_dlls/steamclient_extra_x86.dll
- Size 251KB
- SHA256 9d2e2e04b3d9093c0eef3e2576513e10a263bf1b3eff3204b4a4ebae8d9e63ca
- MD5 cae22ec7e2c6814922862bdb42af4046
- SHA1 d8d4843628169266dc4d911af8c5bc9dc79f6850
- SHA512 98011a3f599de68d1f420eab49c164339d32e166b074d9619bb34482c1b591ecfa8ccc26d2f72343fc8d9ac77e110663ecffbb17721faf8420e439c1be7f7598
- SSDEEP 6144:uyQhRrQrzrk/Lbrqh0xwAHTOdd8J/JJdQ:uyqhaELSQHrJ/JJdQ
- TLSH
  T1CC442941B8C1E475DEAD88304A3DBA65C939A8604BF1E5CBBB404DF94A3B1C8DF35B46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  release/steamclient_experimental/steamclient.dll
- Size 18.9MB
- SHA256 e56c196a92ef365a8fdd5374ffda663320db6bbd9c23113322d46404a669e2ac
- MD5 2f10dc6d9f1c3b3575d7fcc08ea7dc07
- SHA1 bf0d99aba7bb85b24631b943ece317f096a723a4
- SHA512 9c6c366aad67b9f05cd07daaa850863077c4c17d806e7debe9b431f370c9ffa69137749e15d561beb6360758032802e73961b18bdafb6805ac2009932e64277c
- SSDEEP 393216:WBDY6TYNObEtKvKdEpcJjrkwcIgA72NE3f:W0mpxwcIgA72y
- TLSH
  T17617BE11E391C035FBB701F68BFE066E5B38AFA02B1556DB72C464494A76AD1FE32213
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  release/steamclient_experimental/steamclient64.dll
- Size 21.6MB
- SHA256 4b7ee7e2013210379f6bb6db90dd3642e636c1ea7a0d17c8fe7566ce46a86b95
- MD5 9f510e3abcd720a718fb784904780a7c
- SHA1 59dca0d0233c1d9eb0768f3879b2268585af3f5b
- SHA512 8f2a9cfe2ef027b97bfa0d9a956c4ba9bc9a87efc69104973b82a11b122fd195a4fc84e12c2b6ee2b05068b524e1dadacbc8c4478a63ede3a5e6f48bc9a18035
- SSDEEP 98304:b1eGMJZfXNKmvRTFrICpQcb3qs3Q5xV32l98J0k0271y+4AxYZgAE6EZDi7QZagj:b1UVPKe982k027wciZgA72D8UQQ6BU
- TLSH
  T19D375B47E7BB01E5D6B6D03895B3623BFE717495833097DBA680560A1F62BE0E93E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  release/steamclient_experimental/steamclient_loader_x64.exe
- Size 349KB
- SHA256 7005e74d4a4c7970509887b0a3c3c9d3c0737688ba981771067e0d2ee30cd314
- MD5 6f3824a59b8beff68c4a71a11bdf2dee
- SHA1 c6cc40394207e865ff39fbb285334d18af3823c2
- SHA512 0e2a298ea25b4d57736da2f70b2e16be668d80878254f5933de60244bd50da926df7363fd4f2be59db44cf201926f8670262ec4e317ef776df74b79ba63f70be
- SSDEEP 6144:p1j0X/jzEfCjtQqeKkSDFNvLsdcQtO13tO3Azczpnz1UzAIwIuKEbq:fzgtQTZSZNzkcaMdO3YVqq
- TLSH
  T14C747D26EBA410F9E277C17CCD524905EB72BC494771AACF23A04A972F276D48E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32