be20753b5e4423a714a5ec5ae25e87c1d7b4132101f735f8925ffed0c0be5ed5

Sharing

Copy URL Twitter E-mail

General

Target
Minion Rush.zip
Size 25.7MB
Sample260825-bvvmdsdq4w
SHA256 be20753b5e4423a714a5ec5ae25e87c1d7b4132101f735f8925ffed0c0be5ed5
MD5 da6f710e433ece908ae1667e3ac432df
SHA1 0193bd57720e51635a2db9445a16c787e1d73f04
SHA512 789c5c55e8e484b6e995b20689c5026f98d895f4de4e5a2d83520651feceeba0f9ca7e332e698c952870e24578743c716e8332142874a5eb40dca3580ada5547
SSDEEP 393216:oIwVRS5ruUnYbOCHO6PuxuuQFmAMpYk4gJAB3Tw4q0cjGpz/Q/wQyWEd4dzTC+Bp:oIwCYtuxu+ANk4M400//Q/yszTuO
TLSH
T1804733A205AC7FE2EDAD7774D26D9F1D6A061AAF605FCEB8E32187141353893D089703
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  Minion Rush.zip
- Size 25.7MB
- SHA256 be20753b5e4423a714a5ec5ae25e87c1d7b4132101f735f8925ffed0c0be5ed5
- MD5 da6f710e433ece908ae1667e3ac432df
- SHA1 0193bd57720e51635a2db9445a16c787e1d73f04
- SHA512 789c5c55e8e484b6e995b20689c5026f98d895f4de4e5a2d83520651feceeba0f9ca7e332e698c952870e24578743c716e8332142874a5eb40dca3580ada5547
- SSDEEP 393216:oIwVRS5ruUnYbOCHO6PuxuuQFmAMpYk4gJAB3Tw4q0cjGpz/Q/wQyWEd4dzTC+Bp:oIwCYtuxu+ANk4M400//Q/yszTuO
- TLSH
  T1804733A205AC7FE2EDAD7774D26D9F1D6A061AAF605FCEB8E32187141353893D089703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Minion Rush - PC/Minion Rush PC.exe
- Size 8.4MB
- SHA256 f1960935f9540a03763bd38828b4df837efad2dc04531ad3ce8200502cc68ce0
- MD5 d9f70a9ebfd71e3d407a6c9cfc56e040
- SHA1 bbda7e81fa609d47c7654342bd14eaa3eabe1673
- SHA512 1224ff432f28722181fd091c9323bd63b130eccff28b782052d97b7f8808ac5a9876f92c84657a1c3b3770c5e9752b3301d321a0d43fd7d29342b6c0578c417f
- SSDEEP 12288:wK7alU+ZA3a9N7w4X86JgUaXJICK5wpYyOUnZttO6ikVQmdpDFk1aK7alU:T7iU+4G7wu8iwp2UnXtO6WYAH7iU
- TLSH
  T1B49612A1FE96DED2C8B01EB41AA3D87153207D246E0595A335BE3B1F273E213C59364B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral2
- Target
  Minion Rush - PC/README.txt
- Size 308B
- SHA256 98d6a29fb9aa966effe1a6fad8359858451de74c553e75e8db3be6557922681e
- MD5 141bb179dbec21e1c4adc8abb6ec5400
- SHA1 498b2cda12c47fa912bf10532fa78cd063365dec
- SHA512 0afb8ba2c58f23e628af2b1f9764da35c0093b267d23f0ecad97b413b2c082ffd96858f669cf12ec91074d21659d9d36a73d25307c8f9c93e86600a21c740fd1
- TLSH
  T1C9E07DA702C752B3143543C86F88B6A5A758F01C73FC04A4771C0C0C2106C6966E8BAD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3
- Target
  Minion Rush - PC/_CommonRedist/readme.txt
- Size 62B
- SHA256 b6b45625ef58fdd5da887cbd919e072d04c74c5737a29fd63ae129af5bd4cca0
- MD5 b3bdd104df4a7ef8f60c971be235c9d1
- SHA1 4f2f3c9f090046934bbde6d3e8745e8c3df53144
- SHA512 105c66e774e4cd0eb74b51fcc3b248ae025bf34ccde424e338c879bec31425d2510d9d8ce7513fb8ae9f8db22bec6520e99d392937065297256dee10a927fdf7
- TLSH
  T1E7A0021F864A855629311357E813FA209F410024A54C086D159E184653E741624DBA1B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral4
- Target
  Minion Rush - PC/gameloft_api.dll
- Size 289KB
- SHA256 98845728382f6f0a71083aa0448580e41e058988f51e6b92b5238a2af0781792
- MD5 16cf1a79522cc376a7ef30bc58ec5616
- SHA1 7b92a9a8a60bd5ca58ab4191fbcaef33fcf0cc98
- SHA512 525225475fdaa2b08ae82b1c2a281504b32aaad10a95c5367d194ad3ac46dd6fbfbe9df60152106ae30b003b6eda84ea8a8eb3702d9758e683fc97908fb410bc
- SSDEEP 6144:LoXKXoRWOLuVx6VKQJ8vag9yUvWgMVYqBKItAm8RdHJbgm6PGMV6ApFW:LoXKXoRB6VYVKQJ8i/UvWVVbxoRdHJ5b
- TLSH
  T12954BF413282C1B1D06F55384DB6DB5FB73868649FF88EC7AF980A766DA16D03E38346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  Minion Rush - PC/gameloft_api.ini
- Size 1KB
- SHA256 fc9a376598fc378a86f7c66539c5da618d1da8700a575b50ca40f451e0a21752
- MD5 8d660c8727cedb01a6e58c091e65058a
- SHA1 3dc599c2b947733d45b0e443685ec8b955c303a6
- SHA512 984fed2a549812d8fcce6e9ea305263ecc3e49ffd067b1e3bf664e90d5b996e2ef4188ef7f2dbdb2d78d03a09895d6167d78b86a8b712beec9650b6967964e29
- TLSH
  T10441003003AA2E44F70731F86006389463A5B15D3EE3ED6966DF8AC2B5C3A52D2EC508
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral6
- Target
  Minion Rush - PC/minion_rush_Data/data.pack
- Size 26.9MB
- SHA256 e842dd69dbf18c85450c35e5ef1b965af7aaef6977b239078b11bd47f8d27550
- MD5 61c26223b6bd2ad5b967b6912b1ce53a
- SHA1 e2723740ae470aa1bf3aff4f46a0cdc09fba6209
- SHA512 08c1dacba374cb3c0a74b3930a2b8013fdc9bb0672e9c2f7f008dba828a0adfd3d63068d0d44f3b6be87734af5fa27b70c341b99ed64bb068c47074d269378bc
- SSDEEP 393216:1brSdLTAHvrfm9Corz/gXogHs2zpgt9jKFRsPRCnghMdFdfBJ0pBlmDXqRfmIT:143APyprzAI2zSt9iGPAaMvd5J0XYXYT
- TLSH
  T13F5723A7B7846469E0336033E7069613B53A0DB86716D327745C7A2A3AF3ED0871DBD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  Minion Rush - PC/minion_rush_Data/local_en.pack
- Size 3.0MB
- SHA256 bbd05cf6097ac9b1f89ea29d2542c1b7b67ee46848393895f5a9e43fa1f621e5
- MD5 d1dd210d6b1312cb342b56d02bd5e651
- SHA1 1e5f8def40bb0cb0f7156b9c2bab9efb49cfb699
- SHA512 37a33d86aa47380aa21b17b41dfc8d04f464de7e71820900397436d0916e91b353f184cefe0ad16ae7902f0128aae786d78f14b58beee0c46d583cf1bfd557b8
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral8
- Target
  Minion Rush - PC/minion_rush_Data/minions.pack
- Size 11.0MB
- SHA256 d4d2639ad94b0211839461226eb57a5e185829e5c4a9783c2da9f0a3da032bf5
- MD5 041e2458cccc0bff6e10520d9e282eb1
- SHA1 187a0f76e02aac9c24f71c820be1f34ef1c76e76
- SHA512 40184e199b530ccc3ccb107ecad725a744a3be3743bc548b4c62d7126bc281f6dbcad345d4b8f7dcbb885439d5526c38a2a7c5a7a73460f62c0428d96212af8d
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral9
- Target
  Minion Rush - PC/minion_rush_Data/stages.pack
- Size 2.5MB
- SHA256 6de7493c5c90f643357c268fbaaf461c1567e0334e4948023ce17268403aa37a
- MD5 8354dcaa18a1ecb52d0895bf00888c44
- SHA1 d7a8c430c0b1359dfe8b8bbb28eba5cba2d9eb33
- SHA512 690ad39c69035cb0a5b98e4240d83df5e329d5c7522c305d3f93126e2355de51dedcc5a40d9d10fc2ddcdde3bdc51e8571e487283ef05fcac13810042769cdb5
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral10

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10