d768b3bb38e4008c545e40ab1d75e7b9c62f99cb137792581290542f45eda2d7

Sharing

Copy URL Twitter E-mail

General

Target
Sonic Mania Plus.rar
Size 203.1MB
Sample260820-zfxefaam2v
SHA256 d768b3bb38e4008c545e40ab1d75e7b9c62f99cb137792581290542f45eda2d7
MD5 cedf68ff32cb885c204b63b637551878
SHA1 288efd4b4bd390dc38ec32d693697cde9fa8c432
SHA512 d6e2a4f3b60980d1c69845728a3fb94a04838bef50cb72de22809898f1a642f4f1d1e375dcd96e0cf61d2bd16928f88c40a39c625f31816fc0937e4ff19d7ce6
SSDEEP 6291456:eID8nv57RI8+9AuR+9qoVR2ACf4OGmn836LZgTv/:enNUo9qoVC4JqZa/
TLSH
T110A833276CEEDDCC2D76FB4AD694895C1B8C0F6DA0A7C213BC53203E93189B88597572
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  Sonic Mania Plus/GameOverlayRenderer.dll
- Size 1.1MB
- SHA256 e179bc6d2396217d7eea97d01026cabd42e52251396ed6459b3f95c90d49c237
- MD5 a2f49bde28f4d6733f59fedca8b38a97
- SHA1 0af33516304ecd8ae587ae8b69dd8daaabc384d9
- SHA512 55edd95133bb5aec7acdb2c00ad687555d8018480dbaf74058e44d0feff692fa04b364d368b6bc0538fdd8505ade74cedc445ef1041c2b6cb1bc821eec747309
- SSDEEP 24576:edUyQtK0yVjKvgTLm6F6FJDumkMO6wi0vv4K:e4tK7g4m6gFJzkMO6wHv4K
- TLSH
  T1B0458C20B94182B2E6EA91F566BD2B647CBC5D62073011D7EAC03E9DD6702D33373B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1
- Target
  Sonic Mania Plus/SonicMania.cdx
- Size 3.0MB
- SHA256 69da0c7b1b9d54ace4a84b500a1610e761e55f155969442d6d036c86e9dda8a7
- MD5 6dae365c685de76a4f2380b61b87e30e
- SHA1 225ac1eec38a7304de6a1f6ad83cb2e19de8010b
- SHA512 be051259e934581eedae7f458cb17463a5431bde75f10d1d657f825bdcb66ce46ae3070a5739181789f16bd8a742ff8fbfae2b6f7fdebc97d49a8eced30e7e66
- SSDEEP 49152:qEfpsXcMS+z1pFt69FXasZ1eptKUalGJr0nmJtuWHrR8HoUyRE8niA+XNJPsb:qEfpkdS+5pFt69FX1saGumP8HoPnV+X+
- TLSH
  T183E5E0157712AEB8C2D18CBE9A5C7701FA4D99604528616EBC7833CB562F1FB687E0C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
behavioral2
- Target
  Sonic Mania Plus/SonicMania.exe
- Size 3.0MB
- SHA256 002ee8833606c8ffb8452999891de67404c4e47bff4207636326c42afa76bea1
- MD5 e9189b173fa8fff4db66a96c60cf807d
- SHA1 4e1850c94566e74d582d85dd2e906c612c6d75cd
- SHA512 4760cf385500015ccf00dee73cbff696910301523f50f894cfe7668a86ff83d2a596d241d7f4de4ab2e2b7cff8f99de16af5f97681053e05913c38a4415eb3c8
- SSDEEP 49152:iYl/cSW0aD3gI8HJwTlp68y+UhYhnY8ODBdar72e4EkHAXjL7Tur1wY44+DyRE8/:iYa3gIjbmhLyR4EkHAXjL7Tur1wA+In/
- TLSH
  T13DE52930A652A1ADD2934EB6969E5BFAED5D472C030824DFD5B077FB280C5F30A37909
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  Sonic Mania Plus/Uninstal.exe
- Size 93KB
- SHA256 1b5bdea6e57dd193cceb7339e6cd2353275264afe9ef7e044b9e6bf598d6f2f2
- MD5 3ba0b23c6d51051c94679b007ee9749b
- SHA1 05c2766ac093a837ccf7f8d218c80abb5653aa39
- SHA512 086fe151f975867a1a704c233ab023b131adec6ee110e77eea3a1be20e3965729d051b9afb360c2d5249502c0783bbe4e98f4609fb43d253650efdb84f2b00fb
- SSDEEP 1536:szzZrrIApXR/cYR5r1ybrae3g3hOhyJ8MxlXyt48QjD:+7nUYRxIrbQQhYxlXyt4fD
- TLSH
  T1A1936B43A8928873EBB4033004A557B61AFB6E072D619B97D720FF9BBC3509B901B757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  Sonic Mania Plus/codex.dll
- Size 103KB
- SHA256 382a95940910172335a3f6356671e3cf6e514ec95b98faf5d943b23870164afc
- MD5 7b8887951d5834203f155e1f16005da5
- SHA1 e199242e51d816b1abc3e4091c429a22175b1ac6
- SHA512 bf849ce862aeba8b0782997fa5ad2adc27644c37e080bf3b52d6ebe3a33dfed48b781d6c021c20164fd1d1a058fa00b1cf5bf5745a012947739f364f9fc7539c
- SSDEEP 3072:zI3fhg4ZOSLv33g58RD7IE7ZsV0/pNDWItqcD/3lGbal:zI3ZQqv3w58ZIEyV0/baajVG8
- TLSH
  T1B8A312912BED4421FD0DA377919FF093FC7B98E92975541E5F2E290B6FE0B20990AB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  Sonic Mania Plus/opengl32.dll
- Size 18.8MB
- SHA256 20a30e910fef25e4aed946e71cdaa03bdc4f9f8f72ecc5b8ff0a6c36f770fca4
- MD5 9776302ccd3613a79d18f6f5134b42cc
- SHA1 2c2b904553862d0c977b8b76929f7d6e56a65b3f
- SHA512 d76c7a16f4fda6e40a7750ffe65cc345f8e4b3ea97bbb8ff76abe73ba4926eaf14a1ae2c1420a0dac006a12e297a62e3d586e46a503293aff44051977a4137ab
- SSDEEP 393216:RHRoV9+As5s0vAB5dSxOAm57xts5I3tmxGAhKE7lmfpMJfRxK4N5Lv/hA7hMcVf9:RHRof+As5sn5dz5jFAhKbhMJfRxKw5Lo
- TLSH
  T1CC177D0DEA0794F2D9238471528BF7BF862866358022DCEBFF995E5DB9339E21508713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  Sonic Mania Plus/steam_api.cdx
- Size 222KB
- SHA256 d99d425793f588fbc15f91c7765977cdd642b477be01dac41c0388ab6a5d492d
- MD5 67365492ec0c8076840b1764ad2eca5f
- SHA1 07407c1bc2f3114042dbcfe8183b77f73e178be7
- SHA512 76cd226c21cd726ed88b1e6a37bfad0bc1994cd2d5284e3f87a35e56e0e3b2222f9858a0f5d52e47fbb6df0b481304f202b88866ea87bc0eae91ae51ed786469
- SSDEEP 3072:UQ4xdkJw4304/G0Fp9DwvrPOOg2eWaGDt+qvSvzytNICJbxvZa690ClYK:0xdkJFB/G0FQvjzavzyoCJ1vz1OK
- TLSH
  T16224193035B051B2D9E38235D2A4DE1B2FF9756B27384CEB7688033948666C36B7719B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  Sonic Mania Plus/steam_api.dll
- Size 1.7MB
- SHA256 be6309edc49869e6378435e1defd28852f854a2d907f639c2785165e08d15778
- MD5 f0986a9c4388dd5ee3b645cd615fd4a7
- SHA1 f95c2ad2d632c560fbeda7113ae8b3f25ef4007d
- SHA512 f666ac002becf16e900002e12fde0e245db56012d33b33442c87a5b5523d3583c116386f47037b2cf7684c23ed893e90b702a3c5fed3d0573edfc059656fd823
- SSDEEP 24576:6ylUNgNntD7DGtGlVaYtwF9G3WOKMC8cyCCWI:6mtDWOwfG368gCWI
- TLSH
  T188852AC96AB18B13C45E5378194FBF38B12485824975CDE78F9AB8F474107A3AA9F334
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  Sonic Mania Plus/steam_api.org
- Size 222KB
- SHA256 d99d425793f588fbc15f91c7765977cdd642b477be01dac41c0388ab6a5d492d
- MD5 67365492ec0c8076840b1764ad2eca5f
- SHA1 07407c1bc2f3114042dbcfe8183b77f73e178be7
- SHA512 76cd226c21cd726ed88b1e6a37bfad0bc1994cd2d5284e3f87a35e56e0e3b2222f9858a0f5d52e47fbb6df0b481304f202b88866ea87bc0eae91ae51ed786469
- SSDEEP 3072:UQ4xdkJw4304/G0Fp9DwvrPOOg2eWaGDt+qvSvzytNICJbxvZa690ClYK:0xdkJFB/G0FQvjzavzyoCJ1vz1OK
- TLSH
  T16224193035B051B2D9E38235D2A4DE1B2FF9756B27384CEB7688033948666C36B7719B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  Sonic Mania Plus/steamclient.dll
- Size 253KB
- SHA256 89ec842cd6d57d0d9df242f059449114e60e5450bbea51ce48fc4fd00e67fa39
- MD5 0887a301cab6f5051fc8f7807b2dcff2
- SHA1 44393b79b1139d026569958bb9a660c1e9fcf030
- SHA512 a21797ea4a9d0d3445215a81d242b0ed59b3687c6395763dc02b37695af02a29a2015e299bdb08b005624dca2ed9bb2a377af49e5afcc14e1469d58191ff2dc0
- SSDEEP 6144:hrUT3XxsccKFlYCQT/6oZvaP8W5+oJY1VnIa7AjBN+j:N+3XxsclYCu4Pwoq1CzjL+
- TLSH
  T15444225A1DB090ABE27747B20C5E1B4A30A4B8EF5D3FAFCD5F7040C75439A1A185A3AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10
- Target
  Sonic Mania Plus/unins000.exe
- Size 1.4MB
- SHA256 3380b9d63b20af99308695b55b91660d0af49901b3f5a58e0a20b21c6fd40019
- MD5 b3a0f0e56fb7d2c4fbc9c0833f361ff0
- SHA1 7b262b2b67bc06b70fdfcba323c403e658396fbf
- SHA512 4a4e753d8d6fdf53e71be68ed9d8f6497360a7c3dcbe0d9f026b5c4c69600a1e4ae7c13f9ae53ac038847404a0efe3cbfd9384cd214e86058613afe4510bda24
- SSDEEP 24576:mtdAm9DUi/CR3wCkCiRgoG7hBaHkbEXXeG/jFt5c8ny7HkTx9WP:GqTytRFk6ek1c8nime
- TLSH
  T1A8654B11B3924936D2B35E758D2E8144AC2D7D101A68A44E7EBC7F4F0F3EA9768393D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
behavioral11
- Target
  Sonic Mania Plus/xinput9_1_0.dll
- Size 104KB
- SHA256 756cad002e1553cfa1a91ebe8c1b9380ffabe0b4b1916c4a4db802396ddfbef8
- MD5 bfb3091b167550ec6e6454813d3db244
- SHA1 87e86a7c783f607697a4880e7e063ab87bf63034
- SHA512 ce2ead2480a3942081af4df4baee32de18862b5f0288169b9e8135cc710eb128f9a2b8a36bda87212c53fd4317359349c94d38b5da082638230dcb5669efede9
- SSDEEP 1536:S1ea+pg4i1fprOwSGiExJ70MBzLrPbYMGsJ0OXrLSkfmrxy/Fae:S1nz1UrGiEPg0LH7GNO7LSkfaxy/E
- TLSH
  T15DA3299AF25991F9D47BC07886D3BB26F6B2B450073487CB2764466A0F13BD89E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12