229cbbac4a8000069d5ea52b0a864345b2e0a624f152f7f0472b942d2f269e29

Sharing

Copy URL Twitter E-mail

General

Target
PvZ_Tools_v2.7.5 (1).zip
Size 21.4MB
Sample260824-scshrahp2s
SHA256 229cbbac4a8000069d5ea52b0a864345b2e0a624f152f7f0472b942d2f269e29
MD5 de09f36f565ae6c4924580a6d9bc8796
SHA1 bfaf9334e78221237b0f778009df5a5b35b4e352
SHA512 3c71d6a0b8db3f26d4b4b00e38c8efeb400381b95723268a6facf811ba1dd87724828d0b67b7234a3fdcdf95813e325aa25d6cefacc835156430c530dd3261dd
SSDEEP 393216:RYKp+3Jx78fmoP7hKMoooiFywXHoOSsz+y8Qo9Gi7bbnEzkRWFvKpHC1SqkJ:RYKgJx78uoTh7oogwpz+y8Qo9vvbna69
TLSH
T15F37334BB6CCC51ECF67AC7654C326C94F5D6825303946B9F1C8EA0662BB29790FDB20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Targets

- Target
  PvZ_Tools_v2.7.5/PvZ_Tools_v2.7.5.exe
- Size 875KB
- SHA256 1f7c200c77caeeb00e8552ca355b72ade1a7b9f909979df1d52e33931c957c24
- MD5 47f4ce0fcedde6c3298269d64005d14e
- SHA1 687b229afecca5c12cb5dfc72412e03a4ba78271
- SHA512 35c3b13519796d90d0dae432ea5b65c01e12e2622581b559615a925a05c63fc4336c0e44c20c581019aa22c5a1a4905234ab07a792fc8de8108a884666537cdc
- SSDEEP 24576:QHN7IY7ODPrMDW9xEA6kvF6gZyZ0+2nCtUbfq:dDTMDW9xEA/ZyZqbfq
- TLSH
  T181157D172EB4C033D47A61BBD617E7A17331ECA97A355D13B385BE3800BD281982F666
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1
- Target
  PvZ_Tools_v2.7.5/Qt5Core.dll
- Size 4.3MB
- SHA256 1e6cebc0e88690f25991554de04a75b91a0fda47a732930762c42309ca019049
- MD5 f42a2786725e8caee162b048ecd4d6c0
- SHA1 6bf6fd4aad32116a2f17499d121fbf592bacb5c8
- SHA512 358c07c4ee4a5e012f9f7d514589ea3cfdd196a0bc3304c7380e3daa340f28bacdeec871e0b6332d36bf98b397f4d8ff4a9084d43da94e72f39afd0fcc196e37
- SSDEEP 98304:dAhJjX07CI6XmIld1wRJRJsv6tWKFdu9CfvIWgw:yhJ1IBEdsJsv6tWKFdu9CfvF
- TLSH
  T13526AE5372E3827AE9A3D33189ABD34E4573EC21CD25C64BA34C73085CB2EA15D1B65B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  PvZ_Tools_v2.7.5/Qt5Gui.dll
- Size 3.2MB
- SHA256 6eb057e70d2148f37aa89976b627bca2c7c9cb32006d67f86607aa7355cf0484
- MD5 b34d41973ce7754a2d5225570f8fbb8b
- SHA1 2b23fafe1c5447d3e16156f4f9b22f50ee8c00ac
- SHA512 0bdde48c34f028d26d9bd549ab638184b151d3d5246249209dd4c372b00d0353aff2730108677da9867176d2c58668cbbb8cbf5453da1251052855219fb69263
- SSDEEP 49152:7l/v38OKdWsSqIddyuIXKA4UmBfmuxg4SE7eezSuqh086tNNK2GQ6:R/v38OKdWsSl/yuiWf564zeezSuqh/Q
- TLSH
  T189F59E93FBC740F0C983E2352C1E771BCB7AA1150469D757E39C9E42A87536229AF389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  PvZ_Tools_v2.7.5/Qt5Network.dll
- Size 897KB
- SHA256 a431a4d18fb5ce771012c537e205a94ec70b1b77d5835f3ffec88a4d4acbe4be
- MD5 59082cba8cbef5f969e94565daefb49a
- SHA1 201e575fadc91d8a9cda5e490fa4bd77a9e2e6df
- SHA512 e7e33624957515ebdba3568337df8ab85e1809a2d93e73391eb47928bf68aec2856c43a264d2e49fdd480f2ae6edb4681b8d49e4779f4175b45381a861b6aeb5
- SSDEEP 6144:Fw/OSQKNs4DXc7+1Yn5FwDLPSth7mnNbUBLWW8R6KMllJ319IK0xP4uy6b+cjszg:y/Y4DXcK4P+7StcHd2+ecWuoUkNexno
- TLSH
  T1A3156D23FBA740B2D98642B18D0A7F2AFBF9F1048996875FF7089B6133AC355491E1D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  PvZ_Tools_v2.7.5/Qt5Widgets.dll
- Size 3.7MB
- SHA256 56bcc5c880978e23ec191d511c988716a2ae7599b4c2ed6f0d3aebadf4d47fd0
- MD5 6de7c08000222f62d55b9203b1453daf
- SHA1 15c96433897a2db3b7cb42f46306622964304e34
- SHA512 fbcdb750317cc0a51204b8d31b5ddce01d4f148cf4365e6c5e2a8f518ad32f321613da48019fc4ee0fc17ade5cd5f0b5d78da97f675524bdfca9a10c15647a80
- SSDEEP 24576:iNoLdh9SgyVgM9C9uoZEXsoEdMAyOpN2NwC4r65pa0t9C5PAYxbPvmBNT5xvEEPN:OoL8ptOfoS7N65FDO+Blsex
- TLSH
  T1BD069D43B38640A1CA9AD2780DCD3F9EC57DF2488925936B634EDE0139642FF1D7E296
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  PvZ_Tools_v2.7.5/bearer/qgenericbearer.dll
- Size 35KB
- SHA256 57b7356986e5b82872899a33d246334331f353ef26547de33f4f151ec47cbac1
- MD5 28838971e52d14d8f510562d453d441c
- SHA1 af5a903c7110bf46aa548dbb40c8684a7518bd16
- SHA512 7592d4617ddf82ae6d3f16aa2480519d7c913db45e5ddde00970cb5a563019f4a28d0eab43cb1dc5b168bb787041f85a7196b424aabf6d62c8723d2b9aab69ff
- SSDEEP 768:q6bsk5gUJ6OEBYFsH0kGoUeN3gaAH2y8i9aoXU1DD+y4j:qlkK1D+S01Wdga69aoXSDD+L
- TLSH
  T137F23A92724641F3D56B033179665F6A45BDFA308FE2C217FF6F270E1DA12517929302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  PvZ_Tools_v2.7.5/imageformats/qgif.dll
- Size 24KB
- SHA256 e7654a0810ea25c90eb74200bd68713dc713022d52e82789fa989000aaec77a8
- MD5 cdf8fbded378deb5cbcac46c1304c803
- SHA1 af160aa7b45c62eab1f4c2e0252cbb341e6d6004
- SHA512 367a5ffa0a3cc7d0f73726750962e956087b1eb7f672db461039f1282dfc352a553526c7299d94dd8b94126a76c5f119de16f35c8ddc0e715a355c7366e917a0
- SSDEEP 384:Vfghkmf8Eami5sMY2WKbLEWEwfue8+Y9JW8//90LGg9K83Vwm5qHqs5XL+:6hyudh2XEWNuIkM8//GLGUK2hoHqsFC
- TLSH
  T128B22A92FB5B40F7D25B0174B916AE7B877CF7204CE09707EF9356290C792A2BD1062A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  PvZ_Tools_v2.7.5/imageformats/qico.dll
- Size 24KB
- SHA256 e891f11e07687c17581aed8c9b2f80401338a09d1caadcca52470f9dae275163
- MD5 6d2c004915f255b3efa6d06022e7f820
- SHA1 310d4007e6ea39c3c80dd4bb2a2d1bb56cdf4c13
- SHA512 cace51050fa5c5ea3983bcab6c6db2176ab6b15f411adc2ba63230b65625738273b740950e841af04069589d7a867d68cc806f08440e8ad6275385c5e60c3dfb
- SSDEEP 384:OLMXlIqWIpWmhPq/wX1MbNJRJR7UQdExQqg9KnPkyC7m5oPVsl5u:TXlI/IYsqAqhPJVwxrUKnsaqPVsb
- TLSH
  T132B23C16EF5984F3D77A86302D4AA666D63EB92008D19B03AFD34A1B2C27363BE10705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  PvZ_Tools_v2.7.5/imageformats/qjpeg.dll
- Size 331KB
- SHA256 147238b6b808c97fd37a797c1068d11944bcaf61a03360ff7ea908f57016fec4
- MD5 54e3d6a9dea38c71c4aede3a84197c13
- SHA1 7687bf4f83f51250eb03c00988e3fe306e96bf51
- SHA512 4fcbb47c4071838364fa9d4c59c485a591be7d0a140450f11e0c827a2a0a2da382e06d678fdfbb08e93b94227429bd3a3dc66a6422e3c343dc562926a103e6aa
- SSDEEP 6144:YbXQZu2GU552ixfMw2nyIY0BRcbeN70uYJJlXj:YbXAB52u0BW/
- TLSH
  T17574D643F2968E97CBC61632CC46D2B6A7353E2EABF38133B5103BDD79706527855288
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  PvZ_Tools_v2.7.5/libcrypto-1_1.dll
- Size 1.8MB
- SHA256 cf7522a319dd109b490797af15313aed0a9baebe29b3f41573a09a4a1323eae7
- MD5 f43f0bd3581d2b2abacfa1f2634b9ca3
- SHA1 34601212d88d88e3e424fdb6d3faaec3c6921cd8
- SHA512 1aa96332411cf6889eec99712b203c3c39cd8f897bcc6e8272994c491510913dafbd25d8fa868a669f348e0d1ae9465a73f6093dd1d6396a1c533c3f3c749025
- SSDEEP 49152:Yk4MPbDN3W3lJN7delrtvyX8EsKW1CPwDv3uFfJ:D4MTDN34kIX8YW1CPwDv3uFfJ
- TLSH
  T1F1959F82F7835592EACF823D62F65B2B4F36AF14931CDAC38E5139C588325D5663B390
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10
- Target
  PvZ_Tools_v2.7.5/libssl-1_1.dll
- Size 440KB
- SHA256 8ed8163bd4b9e4f30674fda324bf3659f202b2688eab423cd00b56e69ef311a0
- MD5 7d8d465883aaa20d562979a98585a1e9
- SHA1 35d9ce09380d42ab165f625e5613b456174edbbc
- SHA512 f86ad8e69fd60ec2e6a74114712fa1f34ea1ca87430ca263eeb29fb085ee1814d732fb0460174d0dafcf7be7eb0ff9ab385ae062d1e6ceb12b9b5204a2cda610
- SSDEEP 6144:UF24KygTVM+BzuCVeBnBx6ZWyTLRHU2lvzrH:UtKTTlShUWyZHU2lvzL
- TLSH
  T1F9A47ED3F68258B2ED8590766ABF57571EBEEB14231CC8C38F450885E9761C2E63D388
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  PvZ_Tools_v2.7.5/platforms/qwindows.dll
- Size 1.0MB
- SHA256 4869b70f4748eac4307d1961301f9e77e9fafdc4799489f407e3e5779507c71d
- MD5 bddbe2bc0fb6157ce8691834ae9036c9
- SHA1 0e2c328d7b119bb5b6f02cce9a0996e5cb6072b4
- SHA512 a90b8c13ef09c643a9be13fa0ccb06047cf8ea3412077f49c189aa5e6c48b97cb6d9eb6e3ccf67fa6af96de5aad0ca4d8a6949b6ed7d89f40564f1df277839d7
- SSDEEP 24576:6o/ysipCnqvuxT9L4iQyIeQBChVfaVk0Or0Cmk0tbZ:zysjnqvuxT9Lgzqb0FCw
- TLSH
  T1D325AFA3B6A204F1D54E2174112A7B1FCB7AB6150028C613E7B8FD86F971153A96F3CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  PvZ_Tools_v2.7.5/styles/qwindowsvistastyle.dll
- Size 118KB
- SHA256 80129d495f4524b567394eeca996db11f75432cc14b33e500643d6602673ee72
- MD5 cd2061eab8e7d945e8f6adcf4ffbdf6e
- SHA1 5d15b38b927011813c67b33d7347bfa6b831082a
- SHA512 9963408ce62104c4d662ca8114d5009d33c8d0fbb54b171d5944e15a4d4c9a2f7fa428ea23b66554f111be6591106860c4776a4d670eaf1717931a187f27114c
- SSDEEP 3072:/7QF/NCjnIuJjEbtePlxLUe45wH51sfG583YXj2nS+Rz5:hebylWj6H51sfG583YXj2nf5
- TLSH
  T1AAC36D92F6C741F1D2C666BE250F1B6BC73BB434462CA227E7AD8F51A5763111E3B202
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  PvZ_Tools_v2.7.5/vc_redist.x86.exe
- Size 14.0MB
- SHA256 54ad46ae80984aa48cae6361213692c96b3639e322730d28c7fb93b183c761da
- MD5 310f8aadd8055f8b8eba1a6528be7d10
- SHA1 3ee9622151e4b50837fcdfac1b085430f0181f4e
- SHA512 2872a30939f7ee20b494806574cf5b8b5a0976f8fe69bdbd77dde2483ce2a9e5458ff3636147e49a449e941a44ca2d79239e3da62fddb69fc5bced8ee1004ee5
- SSDEEP 393216:FVZS0lptVYmfr7yBG/4QtfslUzmdc9Fqu7yRyWgI:FjpttD7yBG/thslqMc9FjHWgI
- TLSH
  T1ADE63333A558402AD7F204B3A999F9206F7DE518332449EAE2CCED5E2B7509323FB715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral14
- Target
  PvZ_Tools_v2.7.5/zlib1.dll
- Size 67KB
- SHA256 2b4db736a4c0b355abc28240b20aef389acf4e2144621066bdafefa7a700c2d2
- MD5 65d37819b4b0063f5599d71ec1b86897
- SHA1 92b2212a7eb3d73d75181ecf503dc84f60fd9c1d
- SHA512 a04280c936b3357040fcd3ec27e25910ad270b434318745158081340f07b3eb5edc4c1f23c1c8409826e092176f4c534c8b69e4a8050408d9ff43940023423cb
- SSDEEP 1536:yjIlNhsyNVkLpqnhGMKF0IE3EYUreBP0xxMyIOQIO12p/Ez:mIlXsxqnhBKF0DyreB8xxMQG12p/E
- TLSH
  T12B639E9268624BE2C5B84270C5F2DF6D8B2EB5220D527AEB13DDB7850E55300EB563CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15
- Target
  PvZ_Tools_v2.7.5/植僵工具箱网站/HTTPS 根证书/Chain of Trust - Let's Encrypt.url
- Size 63B
- SHA256 9858a99f9319652054ee767f10ba12cbe23c2ff7d63b38c42073ca798fe857af
- MD5 602123159a5849aafc26d0a7486a7ef5
- SHA1 d671e272287d01e50d6e06bdf21fbbb08e9cedab
- SHA512 ddd1b60d032d35cca5a9e049a35cb1d2ad1c6b9669982896ec2b4d66df8aa5e46d0326606c837a48fc044d3d81a33ead4b83691a491476f17e96011e805b2f35
- TLSH
  T1C3A0228383C8BA328303300C0022C008CA0220BCC083CA28A0808B002E82220C0B8208
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral16
- Target
  PvZ_Tools_v2.7.5/植僵工具箱网站/下载游戏 Plants vs. Zombies.url
- Size 60B
- SHA256 a6a053d268f5d6a6d036587273aa443def001aabaafdf8ea4b052d128d455f52
- MD5 fba69962bb49199d677de9fcc0eefd76
- SHA1 2087c762794faa9b5c82fb7efbde8246c2d4c991
- SHA512 07899afa6c9dc0e66ead6fca119b673dc279687b186a61e91cfbb049c8947313f89e153da2ff9c89aa4b93d5412be9cf30f7e52e828c9b6dbb6b48d03290234b
- TLSH
  T127A002A78309C1A68902459DC05CD964DD0721B59593CDD4D1608F297C9A4D24B88206
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17
- Target
  PvZ_Tools_v2.7.5/植僵工具箱网站/下载辅助 PvZ Toolkit.url
- Size 59B
- SHA256 2989bc86b0f92f1b68e3a53d48ff5333204a0c0126f1bfd3ce637fd9411ca375
- MD5 b79925f1d57ff610029295cebac34ad4
- SHA1 b78e861fc3cd3ed5bd02249e18d0aa84c596efa8
- SHA512 070b2c566844ce4e56ad652f72fb922242eaf98a1e6b5f22eb08585dd0307eed2806fab1ed603fbeca9bdc134ac572cc6f139f06810dece7050ad8455cabda39
- TLSH
  T15CA00292831D819F8502459DC079D974FD0720BC9992C994D1908B655C8E8E64F88204
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral18
- Target
  PvZ_Tools_v2.7.5/植僵工具箱网站/阵型列表 Endless Builds.url
- Size 58B
- SHA256 8f4fc0f1b6ab7012205da1e7e7250465291093d76fcd5fa4ac0c0b232592c0f7
- MD5 31f81f5b8e7b6b129ccb1011410c8337
- SHA1 d4b919d21372a82d9ff5fffaabf494c7d7f25486
- SHA512 30d3470f1e69578a92c58f9d45fd69089801d0c2369d86fab5069ac2aace0360e01a9eebaec7d3e7ca78f25c7b22d9e13d05af8fbeaaef5d698cc9a165623aea
- TLSH
  T194A002928309D1968506449EC098E968DD0720B59996C998D250DB255C9A4D3568C214
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19