fe9fd0d49f9fdca4256ff39c105bc5d213e01b74239f715b52d663080b134519

Sharing

Copy URL Twitter E-mail

General

Target
Maze-Horror-1.0-beta.exe
Size 106.8MB
Sample260825-svrdeavbrf
SHA256 fe9fd0d49f9fdca4256ff39c105bc5d213e01b74239f715b52d663080b134519
MD5 596bd6ff0745004b0b003311d0c2261f
SHA1 5896843a49a21ff25f9de094cc50bd2b9ac16fbf
SHA512 c70cfb2a7515b96d7c0441baef7ffa56f8b2c7b4567ba45c8de301d00f2da1f457de976b79291cdde890be0e82b53f8ec04c0eab4de9f4931c7ef41cd646ff0f
SSDEEP 3145728:7SPWwrPMEw4pXl/fKJSoeyo7CRvW6jBENP47:77gUEw4bfKJSoeyo72vjBCPs
TLSH
T11E3833F01E9A0BE3D51376F607DC086B6F7B4CE4A85862A751490A20F2F5E4AEDD41F8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  Maze-Horror-1.0-beta.exe
- Size 106.8MB
- SHA256 fe9fd0d49f9fdca4256ff39c105bc5d213e01b74239f715b52d663080b134519
- MD5 596bd6ff0745004b0b003311d0c2261f
- SHA1 5896843a49a21ff25f9de094cc50bd2b9ac16fbf
- SHA512 c70cfb2a7515b96d7c0441baef7ffa56f8b2c7b4567ba45c8de301d00f2da1f457de976b79291cdde890be0e82b53f8ec04c0eab4de9f4931c7ef41cd646ff0f
- SSDEEP 3145728:7SPWwrPMEw4pXl/fKJSoeyo7CRvW6jBENP47:77gUEw4bfKJSoeyo72vjBCPs
- TLSH
  T11E3833F01E9A0BE3D51376F607DC086B6F7B4CE4A85862A751490A20F2F5E4AEDD41F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  LICENSES.chromium.html
- Size 14.6MB
- SHA256 6965e1b04dc81a012981508299e28542abff2bc7f418071c264f0b53e0c63f34
- MD5 3575333bc14b9a3c05160d72de394b00
- SHA1 159b59188618949fc7f646a381aad69753ae500e
- SHA512 d5f7bfa24bed869758e68ad62316dea7c74aad9873fc25a40f99b9216fe4d6ea6207269940f4c210ae0abc46116558ce1f95b78b1f857040db3d84d5b607fdc0
- SSDEEP 24576:f8Bd/jZ6JocjZ6X1jZ6QCjK6D0HwRiuTumfUKjr6ZjK6yjr6mjK6ajK6XjK6QjRv:f8KOe8rn8mVRx2
- TLSH
  T177F6A42F7B48037306C642A2AB8B65CBF31E903F3B561654345CD1681F6BA2583FF699
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Maze Horror.exe
- Size 195.0MB
- SHA256 682fb138b4c8c52e39cbd94779b8e982e7ee32171eae9791c3ef8aee769c2129
- MD5 35b69b8a5b6e8ef86ae3385258c4274b
- SHA1 6f4c3ce4102a903021650028710ec97d176cb9ca
- SHA512 2fa21ac3fcbcdcdc6ff6aaa0f17112c8c90f6696c91888dad34bad91361740475a87540a0da2cc32198103f449d41d8b73bb3e0571c2df6d35497bd74534d4bf
- SSDEEP 1572864:xRrxd220OMtMYV/bvBOP6NW9iH0WcEuZwDRhCjoEVU+eJzBVT7WMuP9NWrniig08:O2qTvKGg9L
- TLSH
  T100A88C13F39A50E9E01DD1B58B479633EAB1B8864324A2DF275407522F77EE86B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral10 behavioral9
- Target
  d3dcompiler_47.dll
- Size 4.7MB
- SHA256 289767b49dc8525bce262ea06fee4ef9fced2e131a55b25654ce871c1f0498b2
- MD5 1a7544f942a9a9de9354e7a0f9060e3a
- SHA1 fe86bc104eaaa01357d98db905711e9c73d437ce
- SHA512 c8edf94f58d8007472737351d697682cb74153455d3dbd5a529efc7eab3d862581d1a1eb22b4e5df5176d9952b6b056a720cc77225b5c5a83f2299d90453cbb0
- SSDEEP 49152:1CZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRNd:UG2QCwmHjnog/pzHAo/AyU
- TLSH
  T13A367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  dxcompiler.dll
- Size 24.7MB
- SHA256 6bf9d1e2befc53a95b7b7c374def814af0e1a21ddeb617779397e3e6ccd3b497
- MD5 26f722f1a39868aa64c84cb8c95de32e
- SHA1 6a2338a2fb69f68f24d0cf0b0d059d4c4a1831ca
- SHA512 538a189d7ca798f593c98cc97f5ba6ea70affb6d97ef63280b74835e34f1366027175cbc655f389a878735b1e36ea353eb8252a032414988d8b5f6c49adc14a7
- SSDEEP 196608:9VdpoNiKCpTtYPnCgrQTsB7iihDEsE/oVJ8P9WrNuU:9Vfo5CRtunpM6hD+/mu8AU
- TLSH
  T1394719122646D49DF059C878C3678626CA6C34E73FA778EBC0B461252B7BEBC1B39135
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  dxil.dll
- Size 1.4MB
- SHA256 473f5e853120a5b6ca583ac51f453664abae15c0db1d307f29c8bf7a7b89f96c
- MD5 360c2ec3a4114840498e4b0f45820395
- SHA1 d5d4a71933fa25ec338cdf18d7a03281fe814d7b
- SHA512 257d1443341792587b0259d658a706dd8797a83644e451f2bd6d5b292d8259ea11c5d1b176541747a5470a2562615edd44b147e6ad752b4714458db28b07f9c3
- SSDEEP 24576:4Y+wATtbKYxy0y3ny6eBjNSGlVZyi27+V0IJNSD11J7R+j+v1acLUkJvS5Kab:FiTMYxy0Sy66Zh7Sh/cyvS5Z
- TLSH
  T185657E1B229801B6D4BBD17CDA47CE0BE6B2B41503B09BCF12B406692F5BBF55A3E351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  ffmpeg.dll
- Size 2.9MB
- SHA256 67f37568031d61040ae13022a8ec933f7d4ca7faecbb71a701f0b36489c5a330
- MD5 0fb676579041ccb4f41d16bae48d2a14
- SHA1 16b6108686d2d5bc594c4cb133b448cbc3422169
- SHA512 8070e4966efcbf63eeef7ed7ac793a3efa0b8528ebdbbd6a3ad7ead2a5a8d188de44f72d9ff159230eef69f2b9b9926ff19ec214e4ba19d918e346ca7634064c
- SSDEEP 49152:YgV9bgOhaK1hjRfxschoa12wLqS51Blxo7l+ynjVmn7n8IK+ZJgQdhwlnwZGM6US:YkZsWjRffhyko7l+ynjVmn7n8IK+ZJgB
- TLSH
  T1B3E5AD07F6D6109DD029C070979F9213F671344A8B205AEF26D04A243FABFD86E7E769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  libEGL.dll
- Size 493KB
- SHA256 4e33a8b0632cdab12c0fab456a7d76c3c608fc9940746acd158effc493ba49c6
- MD5 bcc6a16c2b838e7ca9a2106cdec7ce9e
- SHA1 a8de5d7bc68b830c1d3c9b98a600e2b32c2438b6
- SHA512 0675e1c467651211e548a0fc35e093f6b8c89d695f06139ae84cfa2474bef07a87577b12659db53dbbaa753e0248b18ccc42664c8f3b9e9606d8f29b112c76ff
- SSDEEP 6144:PRrffvhM0pquMRXqJln2dYtfg4/9L6cOMCdlZ8zVAVf1q:PR7BMequ8q6dr4/9L6cOMCGpA
- TLSH
  T16FB48D15B3D845A9E06AC1388A534642DB76B8460B65FADF03E093792F3BFE45B3E314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  libGLESv2.dll
- Size 7.7MB
- SHA256 1a606ebb09bc8bcb64edefffe3fccecf720b557b9f23ba2aa4331b58106d9991
- MD5 93d57cd8a4458157c971d2c5083ce9f3
- SHA1 06205ad0ee2c4287160d2194b1059348c8b61e17
- SHA512 fec6c62e743efbe01b80776b1c328d4bb017bf4aa780eab5fb34005cab4d6cd818b2a61e4674aa9f734d3e818850292d3b17cc258712c95e6847c5d17e81ed6c
- SSDEEP 98304:nH+XoqwfpEvsQFzykXZYrOlyLX7SC4Ic417:neY7aPqOiD4Ij
- TLSH
  T196867C03F29A80D9D04DE274875B9227FA34B8850734B6CF279457252F67BE0AB7EB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  resources/app.asar
- Size 269KB
- SHA256 458357e20c53c966773bf7ee1e2ec0f420b4c5b567d32c987d8ba1e80abbcc8b
- MD5 6a89675d4e348b2ff1a6abdbd3512fe7
- SHA1 eb5cc298748ca57526f8fe7ef9b98832d39d1f91
- SHA512 9eff5d9b83b770596b793eb405f588c4df1fa796af0eb8faf0a02addf7e0edc89d903ad176a91546dfaf9ec0c685e0f834829a14a97c32b89c776a754f4138f4
- SSDEEP 6144:cpQMhSpz39HzdlRVDk5TUFugbSG5c36x8G82eAImPMsrv/:OZSpzNTdfVDk54Fmm8CpPM6v/
- TLSH
  T15344E0521370052871A35F3D30AFE7B4D6041C0A5D4AEDD8B2AEB3594BBF9AA77F6180
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH
  T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  vk_swiftshader.dll
- Size 5.3MB
- SHA256 176adce81d9f0f1aac302806be3dbb67abda46e13355bb85c4868057c6e3a223
- MD5 6dcbe2dbfb4518198fb8e7fdf3ebd702
- SHA1 c21756460ce7d92b199a262b0e83c1ed1031ae0a
- SHA512 7bb98a743a151411ed851c957cd9e33099437a3c125db5cd6b746c6801b531087349e7f0df8e138055e48e221464a86e4a0af7726b52d8bf3eda0fcce7a9bb98
- SSDEEP 49152:9iV10YJkK1M64Qt+qD9gGh1eAXYEe/ePgnW5EZ+rd6m7U0o+VBvBL3PJPFF1TDDI:wV10Yj/FoGVJbbS4
- TLSH
  T13A463803F28580E9F05DD579875B9632F272B8814B2276DF52A01F192E7BFE0AB39705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  vulkan-1.dll
- Size 900KB
- SHA256 d5acc73241b46dcfd7ea5f970eab9fdc2ac5a3dc737e23d5947980972ed0a2b4
- MD5 5baa82bfee3975f11c8fac875bfc8bf0
- SHA1 1142ea58e43a70c4f79e8c6aab87c4b122b9cdf7
- SHA512 761e187d21dad4aa87b746a1e63143a397b49c20860478c68f94cce5fd5319758440a8ddd3923165a6f9c9512c8161bcdf346279e5200a2fe7484d1ffcaf7f90
- SSDEEP 24576:PsRkqGlxBNI4OBs8lG0mt16Z5WRDYsHm6g3P0zAk7NX:TxlxBNIasG0mX6Z5WRDYsHm6g3P0zAkZ
- TLSH
  T10C154B13A69485A9D57AD034C9D28603C9B174822326B9CF02AC57087F6FFF47B7DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32