e7114c700c390ee919265c9b022f5c002f27b7da2b1f161804cfaca51474f6c9

Sharing

Copy URL Twitter E-mail

General

Target
vware.zip
Size 30.7MB
Sample260825-cdwc2aff75
SHA256 e7114c700c390ee919265c9b022f5c002f27b7da2b1f161804cfaca51474f6c9
MD5 369cea2e2774f7a7231a25b490f8009e
SHA1 b675ca2090868f522ddbfb0399c49c5f205e0cc4
SHA512 3bd66e8be4712239d5c576673c78036393148a4579430fd9f888466dd9d7272aa079f69667f9f40bc1efb7c273d9d13544b64ed3db45d8a99c458c9d5710a39b
SSDEEP 786432:LU2pFRDHdsgn/WWy2zDDh2/t4pi9iQrAxboL8OFLK:7p7DHqyWW/zD0yQieAu/LK
TLSH
T11E6733E4F7628140CA1C94F5FE347D92F42C50A6EA76C441A9C7E789408B7BE1B1B1AF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  V-ware-Fortnite-external-main/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x64/D3DCompiler_43.dll
- Size 2.4MB
- SHA256 ffedb064adc25328b24dcf145b04045a867a5574c931516d7845babf2a08937f
- MD5 d010ab113ed06bf6b42c7746ef395e21
- SHA1 5d6b1763f38ffe6d70146e74e9abeae15e3fc35b
- SHA512 0ca4656d0ea2af368b0f667dcfbbc819f8f1209cebba3e5a2bceb9b235e5443eb0452f0f0c3970b419fe6199d4d7cb7390a1f9cd46b689954f8e58ba9d0c2b9e
- SSDEEP 49152:wf59zPxKcvHzDB6t3+C0/aJfyLg7Ie4Xy+5j4m2CTv:92642o7lftT
- TLSH
  T13EC56C46B6A080F9C6AB81748A975703FBB0781403245BDB5160E6652FB7FF26E3F724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  V-ware-Fortnite-external-main/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x64/D3DX10d_43.dll
- Size 558KB
- SHA256 d3671c4ea33f3a5eb214239b96e7e13d850ff17c7b88e9ce42ca98dd2cc81342
- MD5 a8724246a6a8ce5b06919b0d245886c1
- SHA1 f1a55d45e3693d8c40b5a7bd59671cc9b2edfbf8
- SHA512 f1211554b344d991ca8aa641f1ed11e00baba9775b21e93515f6471f7f2ad4fffcec1f9ab920b348cb543a285d184f17d1796ea77c9d012bbf9ca3cb3df53c48
- SSDEEP 6144:zrONe6geY8qq+ne6S6tsZsuvGnBfSmSQB6GtNWuzxDyKKqWru48ZEz2GPicFY:zUeU+ne6S6tsZNenBLSQB6SNWvqWb2GC
- TLSH
  T17DC46B1172B8E7E6E139513DB09AB64BF97130180B2082C766F44868DFB6BD45EFE721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  V-ware-Fortnite-external-main/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x64/D3DX11d_43.dll
- Size 303KB
- SHA256 8b3bd19047ae6fd66cbb57933e622a3541545ad99fa609ea648d630816132f01
- MD5 c2e140161a8bd80effa4289d4b56d4a5
- SHA1 142e9e05130299428a2b7a34b6d4939ee43ab03a
- SHA512 103161958a070b643d781c7720f09f93d4d25366ec3b50d8a768c7e5c3b67ec5ef1808724b7620519f411f13f482287e8a8db5eeae1bd2bce764595b2f45dc9b
- SSDEEP 6144:p5H9B3WaqxYp9ZxQJ5H2FxPDiXHUu7Hzg5:pZqyLxQCcBHz8
- TLSH
  T135647B113798E8E7D0795039A1ABF213F67279442B6892C77BD00E8D5F76BD01B3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  V-ware-Fortnite-external-main/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x64/D3DX9d_43.dll
- Size 2.6MB
- SHA256 beb6cc5b8995713dc9de7442569d0f00b30462d6c4c2a05af591550c624b5caf
- MD5 6f1514f04c158022055e691c9b8181cf
- SHA1 3e9d1718446558a8d786a857e214ba5973951b60
- SHA512 20e8d04bddb5f56d7772061d7d83abc7b10b1944ded29465b67bb95f52ab1584f9f50d3173a86ff2d0682a42896d6e012fcb182fc997787da65174c5e0b732f7
- SSDEEP 49152:FL5W79bCsT6TA69r9R6OGykEzWCFC6mkAWb2zCeeYBKyCvUM7u:lSCONiS
- TLSH
  T139C56A2272F4D1E4D7268039B59BB307FAB4305913188BC353E04E9A5FE6BD429FA365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  V-ware-Fortnite-external-main/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x86/D3DCompiler_43.dll
- Size 2.0MB
- SHA256 aaca0bac2e1e94966f4546b6234333f9cdc1a4599024e30cd20aef4c1fd1b4f1
- MD5 0b3dd892007fb366d1f52f2247c046f5
- SHA1 9c09abcf5034d839ceb881437a5bbc7fee30ed96
- SHA512 284c3cfe4973d9ec5919e1bee1a739f3dad2b367d761aeef574b7d8e47f5bc775d5d6255ae087b4311a84a6e0fc80b57e5f308af5c635080b31f295fc0679dad
- SSDEEP 49152:zpX9JVeE9HP6Zpy9KyhMI50Du8LljslNsHSHFUq9OiapbbO5Akl:33P9HP6Zpy9KyhMI50Du8LljslNsyHiQ
- TLSH
  T192A59E11E705D0B2CCCB00B16A5DB7A6647C9F30432096C7B2947EA95D72AF35F3AB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  V-ware-Fortnite-external-main/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x86/D3DX10d_43.dll
- Size 505KB
- SHA256 05175aae7173650e04ec7ebb9fab69d3eea6da5c793c84c874b4795ef75e04fa
- MD5 527903b9eb6ed4d58bc70537e73575f4
- SHA1 f963038815644f3112976a4c2388f3ffc51136a0
- SHA512 217550fa33cbb7a5141da4331e9bbd906842037c81299923243e1f69bfaadd8d56b98b8a6ead9a43384b44abcdd40b4b05e9501e9166c2d6bcb234a077c343ae
- SSDEEP 12288:+TuX2VvQcKfKGass0wIvZ8vr7vZv9X4RSdmdZfM5Gb:LX2VKfEss0wIvZ8vr7vZv2w4E5K
- TLSH
  T18EB49C91D5405132CCEBE274610E71A236AE8F329360B6C71F5C5AEAAE787C417B87C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  V-ware-Fortnite-external-main/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x86/D3DX11d_43.dll
- Size 264KB
- SHA256 852117eee0e31842d16c0444de323c9e5d36634bd8f5b6f62f6dff3dc1ef9fc0
- MD5 19f6f2e9904b5521b7eca2d8fbc6ecdb
- SHA1 5a2567b84d0910fc070adb1c92ee8ef45332a379
- SHA512 2d299eab7b86b9e6ff6db454a3c13e7f2e561ae33d03a15ef1b6347d2e7dee4b4d93a94ed976f7d32e0cc62550e0606c4e8bc0aeb731635e7f6891705c35e1a0
- SSDEEP 6144:iR1Vjp1Q4nnY7Qm/PV/9j/6l/OQ4yIEGn/TsowXMwj+f5MPiMt:iRjrQ4nnY7Qm/PV/9j/6l/tFVGnBwXMW
- TLSH
  T1F0446CA5AA801035ECF6D2B4254F633152EEDF3007B1E3C71748AADAADF56C15A34B87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  V-ware-Fortnite-external-main/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x86/D3dx9d_43.dll
- Size 2.2MB
- SHA256 fe24577450c883e1d51db8d92ad4eaca289008301113d89effeff4e34342b142
- MD5 9acdcceb89939295ac2cba6bcdc5e3b0
- SHA1 1830e3f4d55f2e3381f5aa066ea5f7ed56e302e2
- SHA512 3c443de09664e6f83047507a21cc388e53f9990d2e822193818dc27fb3b84268121ccc74e01f2abda4936e4b6b75768efe160884f0687a839c2134f8503173b6
- SSDEEP 49152:Fizfxd26tPQ2xgc/lkWz20OLe9o1xCRAHjQ:kO6tPQQgcNkWzJOLe9o1xCWHjQ
- TLSH
  T1F4A5AE62C5091078EDF79070220C32B222BD57316361A3CF62991ED9EBF5BD5AE38797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  V-ware-Fortnite-external-main/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/release/bin/x64/D3DCompiler_43.dll
- Size 2.4MB
- SHA256 ffedb064adc25328b24dcf145b04045a867a5574c931516d7845babf2a08937f
- MD5 d010ab113ed06bf6b42c7746ef395e21
- SHA1 5d6b1763f38ffe6d70146e74e9abeae15e3fc35b
- SHA512 0ca4656d0ea2af368b0f667dcfbbc819f8f1209cebba3e5a2bceb9b235e5443eb0452f0f0c3970b419fe6199d4d7cb7390a1f9cd46b689954f8e58ba9d0c2b9e
- SSDEEP 49152:wf59zPxKcvHzDB6t3+C0/aJfyLg7Ie4Xy+5j4m2CTv:92642o7lftT
- TLSH
  T13EC56C46B6A080F9C6AB81748A975703FBB0781403245BDB5160E6652FB7FF26E3F724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  V-ware-Fortnite-external-main/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/release/bin/x64/D3DX9_43.dll
- Size 2.3MB
- SHA256 36b84dfa0ef9d3ff3549a7ad54d2a8032bd22c879219ee1a959137c4ef8786c4
- MD5 460d2b03615d8c0697721ce26aee1e60
- SHA1 e2dbd56d24cd783fb3c4bc2b527665623fb6435c
- SHA512 7d2a6c0593269aa74af6e53ffaede1e805c795410f97c5eeef6f4963e3e5785d02db81630758747dfa6bad60082ec1e118869b27f3f6995e11d9f592956d5b2f
- SSDEEP 49152:2bCJsk4VlPXA+15Om5wxw9Qsi55K+31BhZ64nI:1IIBnI
- TLSH
  T101B5486172F4C1E4E3269039B597B20BFAB1304907188BC793E04D9A5FE6BD86CFA355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  V-ware-Fortnite-external-main/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/release/bin/x64/d3dx10_43.dll
- Size 502KB
- SHA256 b5f2e4d842c758fae91323888ace39328c47d9546231757f73831e2369ae58ed
- MD5 190649d410964753a54a306caeb33cb8
- SHA1 b45752e0558a9b0b70a9b490e8a7148b807a4f42
- SHA512 8321a42608947bdca156b48c019b999d01aaea6a558026493b42ca54c18b1f3eb7d0d343c998af16fd27dea63fff662c2f645962e261aec0fa04d8fcb72b92fe
- SSDEEP 6144:dIHyAfFvQet8lzb3f3+UHWIVPfkKS7GXzeARN85BwC5uhFcuiZyoO2uwpapnlJRX:aNFoet8lzbv17VPfkKS78zBN8LgIappX
- TLSH
  T1A0B4484132B8D6E6F13D653CB0AAF60BFA3135180B2046CB56B49069EF66BC44EFE715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  V-ware-Fortnite-external-main/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/release/bin/x64/d3dx11_43.dll
- Size 273KB
- SHA256 25814402ce1d74f198958aa38661242189b4e5d640177087d0ba0ecf65d19a44
- MD5 015743813e8d70a91cce6319fd2ec94a
- SHA1 14c224c566a28168be62de535445d527a1156f01
- SHA512 163971668c8d34baccd6cd526b589b91792a2a6437ceebfb9080e2c98d0e33a59c9f084f98ccc2f117b872836407595b6166b09f3830b4875036db95ec2aef5f
- SSDEEP 3072:FCWVWFOaVgP7BzvjYlTc91N6Vkg4eK6DvDBcMqpcJbMYBu1+Iz54+vJds:/Ww4gPdz7YlTc91i1DLopYMvIIhs
- TLSH
  T1C0546B5237899CDBE4B9A83CD0EBA203E3F1F5950B60D6CB0260455DAE7B7D09E7A311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  V-ware-Fortnite-external-main/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/release/bin/x86/D3DCompiler_43.dll
- Size 2.0MB
- SHA256 aaca0bac2e1e94966f4546b6234333f9cdc1a4599024e30cd20aef4c1fd1b4f1
- MD5 0b3dd892007fb366d1f52f2247c046f5
- SHA1 9c09abcf5034d839ceb881437a5bbc7fee30ed96
- SHA512 284c3cfe4973d9ec5919e1bee1a739f3dad2b367d761aeef574b7d8e47f5bc775d5d6255ae087b4311a84a6e0fc80b57e5f308af5c635080b31f295fc0679dad
- SSDEEP 49152:zpX9JVeE9HP6Zpy9KyhMI50Du8LljslNsHSHFUq9OiapbbO5Akl:33P9HP6Zpy9KyhMI50Du8LljslNsyHiQ
- TLSH
  T192A59E11E705D0B2CCCB00B16A5DB7A6647C9F30432096C7B2947EA95D72AF35F3AB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  V-ware-Fortnite-external-main/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/release/bin/x86/D3DX9_43.dll
- Size 1.9MB
- SHA256 2fea401698db2764ec5943de6634bf0eb5dbe191a963b1ef3620a027730b83e9
- MD5 b0a81e088cdbe81b18199f44f363f77b
- SHA1 89b204afbb9a26704689445e4149d0006b280b8f
- SHA512 ccea4aec802f3aaa684ad9a54e89965ff2ac8e316403e448808218d8ba59a3012e06084381cf8df6180f256f2674d95c0fc4ce6f0d15441ecb8e884bd4a9883c
- SSDEEP 24576:AUtU6OIyl2Wy9M3bJ45fPS0zFZghQ6aOiFaKOE31GrvFXl74YZ29X1MDd6olmrBW:A566l2u45BiNYFrz31Cv3D29kd6kWU
- TLSH
  T10E95AF51C5191075FDE69030110D32B2219C9B316391ABCF665E2ED9FFB8BE1EAB8387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  V-ware-Fortnite-external-main/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/release/bin/x86/d3dx10_43.dll
- Size 462KB
- SHA256 62071db800b625d1591bed35880ef3aaecab39136f2320b272541001aa99bf4d
- MD5 663f958f3b2bc4fa054cd2ebd6ffb812
- SHA1 866a405116d43a6a9445a632312923a470f7f581
- SHA512 0bf2a6171dd6d125c4215b1836ea71b59f9826b348eb08b82d6d812b3d920fe4f628768412dad29f8f14bdc1c43e7d9ce5ebc53b28fa6638c49dacd01e26d32d
- SSDEEP 12288:0FUDOgwNvArf8r3bK9s3kW3CG3vQ3sad/QNbubxc:BDOgw6fYbK9s3kW3CG3vQ3snputc
- TLSH
  T145A46A91D5505035ECDBD2B4500D31B626AEDA7353A1B2C72F5C6AEABE78BC01A343CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  V-ware-Fortnite-external-main/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/release/bin/x86/d3dx11_43.dll
- Size 245KB
- SHA256 0496c07e3f8f061ea3416ef6284fad2427308e53cb377c1ef7a3bc0519bccaa3
- MD5 c181017ca7f6dcaa47e3530ac7f0d11b
- SHA1 532ef1d7f2e3eb63f9f114e93045a6544151e466
- SHA512 5de436c86909eb49849edef1acc966ddb2d67da10b995270478b457d5a40cc75dcdb039bba4bd664640ca958b523912ef72bd00dabffae8b16d21966c1e06ca1
- SSDEEP 6144:WK0GaAtQlDJCSB4MvfIeDRI9Z7IJItblSwJ7FnH4fa1wlMjbg:QGjQlDkSB4MvfIeDRI9Z7IJIRlfJ7N4Z
- TLSH
  T18B345BA1E900553AE8F6D2B0211D732151F99E3007F2E3CB1A5CAADABDB56C18B347D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32