5089851e58f0772485d77566bb224477721a0315d78b0e6e154de40ace550bef

Sharing

Copy URL Twitter E-mail

General

Target
Stalzone-Server-Blocker-new.zip
Size 1.4MB
Sample260820-vrrwwagj2w
SHA256 5089851e58f0772485d77566bb224477721a0315d78b0e6e154de40ace550bef
MD5 290b9c046115c800f3f4128a04945e25
SHA1 e02011600e8f8ef927598330ae98ab46849d3946
SHA512 830da81b2ebbb5bd436c355718495e66e76a913ee6159852dc6ea34ae28268e17e2f5ca1be20ae41a42b3e2f673c463679218c2e71bc80a8c45f49264101c6a5
SSDEEP 24576:hJLQbr99nVzrwLgJwdd9oRxGR6ZWEVEJ1YQnDy/oXVFlRivBgied7YxIw0oibEF:Pir99nBrEuUd9Q26Z3VE7nDywXVFri4O
TLSH
T19E6523B98835B3FAC165BB33DE1943E7D708B0A299022593154190379EBF8193F8779E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution linux

Malware Config

Targets

- Target
  Stalzone-Server-Blocker-new/WinDivert64.dll
- Size 46KB
- SHA256 c1e060ee19444a259b2162f8af0f3fe8c4428a1c6f694dce20de194ac8d7d9a2
- MD5 b2014d33ee645112d5dc16fe9d9fcbff
- SHA1 aa69498562d350f2de06954b133e59fac1e57002
- SHA512 37014a018b9cd91b2eaeeccc7c5af3838fcae4d4fe6bb50c7ae32cd5c99423965a3e3efb29499324f6885b8f0c2ee2952cb75ab73db4e8960811abcb46801f15
- SSDEEP 768:Qjf2rf/kxpxI+JEw2VWHDDjQSQX4zTtllgwBqWocwTicI:YuT/CXHDvVQatonTic
- TLSH
  T17423D803F74151B7C429C27083AED352AE22FCC56354F9EF82DEB7952D85E42DB1A606
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Stalzone-Server-Blocker-new/WinDivert64.sys
- Size 91KB
- SHA256 8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2
- MD5 89ed5be7ea83c01d0de33d3519944aa5
- SHA1 4c9b9c74529399abacc2284de1dead5f2332ee9b
- SHA512 be6530fa0e26441441028b530cd6fc4f900448916e137f92613a1f886c16399d415ddd17f7f8847258cc19c63b1510f2f3068942203c50486e48eed838f9f138
- SSDEEP 1536:AsmCCzg4Klt7jh//NiRMwoGK0tmdsAXixJz48dJ/zuXR:Atzilt/iR5ojGmdsAXoz4k/8R
- TLSH
  T12E935B46B2E240C5F9F6C97895F59253EE31FA90A721C7DF11E0981E4F21BE1AD78322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  Stalzone-Server-Blocker-new/imgui-1.92.8/backends/imgui_impl_wgpu.cpp
- Size 57KB
- SHA256 579cb2310f587bb30de54fb1818d4b65d1f4e66d13997639331fd4c21f1b84bb
- MD5 8db59e1ed6892dc000b54e95d686d2f8
- SHA1 5f40a310f88568210a449e2703a7cd406310e462
- SHA512 c78d46e5a08248e1130c45a3be56b0fa9c8c1cb01df8a80f3ff4843dacc96045b349d5cafb525f48d14de5b71233e3d23152f22ca85bc4575fa65f54a78ec96d
- SSDEEP 1536:XVjkU8XnWHM901LRP9vfD6DgDDjDeDE6T2Lw:XVjkiM901LRP9vrqYDvuzCLw
- TLSH
  T1C943F9B55D1379814D23E306BBEA5683CB25C1BB7BA8D2507B4D210D2F888A7F53C35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4 behavioral5
- Target
  Stalzone-Server-Blocker-new/imgui-1.92.8/backends/vulkan/generate_spv.sh
- Size 254B
- SHA256 c3abb9fe51a4c033003ddabfd97c79583c89675572225b2d7b615619b58ee798
- MD5 a09d099e97faf2182cf8f37380f38437
- SHA1 9df03ad0145980bb29350970440eec4fd544fdde
- SHA512 f12ece36c97f82b1d36cea0ddb29fda90a7a4976acc62a3d3e837522a468d42b5d22902142259c670530041eb860c4cca35a6fef74eed69ffe2d38ff3815f5f1
- TLSH
  T1DCD05B117086653D1D36FACA52266DC704CC967C59020594D1C8054A67F1B835581AFF
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral6 behavioral7 behavioral8 behavioral9
- Target
  Stalzone-Server-Blocker-new/sbt.cpp
- Size 36KB
- SHA256 a47de51c149e61f561dfd0af171a1472e134b23d1959e27a5137159bd76903b6
- MD5 b1963ff4ab4c4f27c84f2456bbc7dbff
- SHA1 3532d25fd281372f315dd4e57eaffe5040bac9cb
- SHA512 b9818255d48ca84a6fc645b230d2da4e5ba2264af3550afb80cb550084f935c4ceed591aa697fa7360dae276e3224ccfe1eb342d9d8a97ad5886d38bd5982cf2
- SSDEEP 384:jle6o9UqOOSiiVOO+CCahhZRIT8EcHKw/PA7o7YU69xBnxIn0vzkZeWhS7EKS7Kg:ReyaGHLKokU69ohSoKSmLD5Zgsk
- TLSH
  T13BF2924514143D1689327B3ECBC24144FE2E1DB36B954371BA8EB2696FFA4248274FBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral11

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11