b05697cfd29c3c7e381afba51554116a33a9a533a7332158ad319bb154bc0aa2

Sharing

Copy URL Twitter E-mail

General

Target
GB27_2.zip
Size 310.2MB
Sample260827-dnnllsgb53
SHA256 b05697cfd29c3c7e381afba51554116a33a9a533a7332158ad319bb154bc0aa2
MD5 377b6338f2782df1a0423a046cf1da24
SHA1 204793823199176c9bf0f2e5fe990edb93644690
SHA512 95c6c5f6a6107d3be91c8e7e11b1a31745b01ac0f534d6811e117bb267c50c8866cddcb42a39fea00550f881b02fbca46eefc81f3798a12b204e162a26dd259f
SSDEEP 6291456:gIOrGEy0/JjZMH/QjF6yunub52n6b00Gec53RNxUynTc4SAKD3LUFj2VC16PNrDH:srGEX6/Eunub06bP2ZTBzd68YgcR
TLSH
T144F8338F4116A296F43E80778BBC260C4A5704664B79B0E70F1EF39519A7FE335B6B06
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

persistence

Malware Config

Targets

- Target
  Гб27/D3D12/D3D12Core.dll
- Size 4.5MB
- SHA256 625bd40005b1c3708695d5256ecf230d278e6b8edba5a88af70f3d91324f3052
- MD5 8bed03240b764906c937c0d6ccd560ac
- SHA1 2a38a4d7116b9d067e9d24d7da2646e2fc9f61c6
- SHA512 6fce3c735a101794634c53fd622be20e69e75c68ba216d0caa0fb48aadf97ed55ceb6ef205a4ea22f405bf5e663638add2f489df720c206739920093479863a7
- SSDEEP 49152:+h38HT1tnrx7KGN6McyBTwbreXHYTNeZQROL+qgGVO9EflU7slMWr+IGrh4TeeYo:IMBxrfwNFrfau5e/H
- TLSH
  T1B1266C07BBA840E8D4A6C079CA6B461FE7B278654370E7CB169087995F73BE1193F324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

persistence
behavioral1
- Target
  Гб27/GB27.exe
- Size 651KB
- SHA256 794ac9f1df1e9abc5d1e5a11e36fcc549e0525d1438fbe0fd0e843cbf2e0f45a
- MD5 606f213b2473c79e220a7f8546f98acc
- SHA1 2bbc273b57f6c32171f65129740d31bf15b4148c
- SHA512 4e0472a50624f03717bcfa6be8c155cd82a15c0600023c2ede5971171f0740662d64ba190727c67c2aa18708e172eb4249f2c4512cea3073319766dbd995fee3
- SSDEEP 12288:HtVwZpYha2CaO7w1BCy72/KqBIxocsl2BeS4:H/+eO7w7Cy72yeio/lEeS4
- TLSH
  T1B0E4A44A0359828FC1157B35C9D3FFB842EA4DF22C09C65299E83ED3BE61F895D469B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Гб27/GB27_Data/Plugins/ARM64/VivoxNative.dll
- Size 718KB
- SHA256 dd1b16cc1fa40074f7dc951a62ccd6a0e83054a40f16acde52007ae8e051a6dc
- MD5 4411028519b02c7bed55d604b3e231ea
- SHA1 a6038eef69fe422b62b0d2f9403ceb6884a4c34c
- SHA512 5648f48d4cd0e005e3f6028a4ef8f4e73eb23de8046905ff390e5f3dc035ea0eedcf43679d69060b9eb772a28d7d64722c15d03fe5f2cea1716b6bb6626afb1c
- SSDEEP 6144:ehQ0xirb5fn7pJu08V9SHsnyan42iRDRxuMmOoCKSpuZh9avVx0/nz7gCjtHvbsB:4apJb4D/bXrT6+qp
- TLSH
  T1ABF4B72D5E8FD1E3CAF34A319CABC6516422BF29E8DD59F416A0417447E0ECC9DA029F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Гб27/GB27_Data/Plugins/ARM64/vivoxsdk.dll
- Size 11.7MB
- SHA256 5df99d090e90f001c01c3ee668f9f8a1bee2782a9183cc16f4439c19292b2d27
- MD5 9a42aaca3d8fc82b9fd2ba893d0d63aa
- SHA1 101ff30475a22f71479178d596e4456cf7979f8b
- SHA512 354d7000529261a2311e4d4d23db02af0cd9e4031bb16898b07d3e6607ee6f85b32709f6ccce7f200aff78fc28c7464e55d4ca14dfbdf8603986012357a7ad1f
- SSDEEP 196608:OYkjE34FCEbnyZnn5QiIfAnXYmgLyGR6FuvFaEWmys2LRVfrgt/bKoI4T8wuplJ:Ot24wEbnyZTeAnIlLyZGP2TTgluoI0rK
- TLSH
  T158C6AF2A7589E947C885DA799D7BCAC83127FE548824C34F39A6B70EADF23C159F7040
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Гб27/GB27_Data/Plugins/x86_64/AVProMovieCapture.dll
- Size 712KB
- SHA256 f81f8fb3121403a8f45a0f0b6e41a42b3c608ee39529a2bbb3780dfbb098bad7
- MD5 a57edc751333bdd2d40281d6ec5a42ba
- SHA1 068eb92f20e80348dc34c73be0eb6c3ad0962840
- SHA512 cda37624e1c22783711a86a2ca43173e0dcaec4e175851e02de9b11695c75e958a53fb0e6043f804f39ff39bc2ed932d68d5fc2c586485393f7e4e2dea2213d2
- SSDEEP 6144:2v1KDzXJAZE+lf0dxp/xMCCzqYiFy4OYra21sO9wTTAJyoohwkKC44rcdv4oDaJb:HXJi6CRiGYvbfghjrqADJMQB0R+
- TLSH
  T161F42A4AFAB241E5D4BAD0398153662BFB7238594734A7CB4385871E5F37BE0A93E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Гб27/GB27_Data/Plugins/x86_64/AudioPluginAVProMovieCapture.dll
- Size 126KB
- SHA256 e8609c7f15e5eca45310b4e24a5d6e86422339710b1e2cc2969d6e239251ea3a
- MD5 d8c9131a0ec730cfa0752933665a2bb7
- SHA1 cc0e5119590b8e128f4bdd48fd4fb1981bddce3d
- SHA512 3b2db49665f974774ddd68d48357ecdca05396f1763547a2c75a2c1948c80f4a646a24f28b7149e2aef1cc5989c61a87e4000d8d801618e9de9155326ab893b2
- SSDEEP 1536:EsRMcD74NRbEmPNoq9iSwQE2osSIVAZnAA2uZvasWMRd7S9dl7WfM2L5RP/+M:hR9/A0+nwYos1KZnAFi7LG5WkIrHN
- TLSH
  T100C37C5773B405BFD4368139C8636A1AE372781506619BAF03A4426A1F373E19E3FFA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Гб27/GB27_Data/Plugins/x86_64/VivoxNative.dll
- Size 721KB
- SHA256 5c9e1a8d5edfdf399173212665fe4cfc9805cd1ae4e5fa008b5e9d37d6e12c51
- MD5 27d4ad171e1cd152e19a149084679fb3
- SHA1 ddb2230cac67bd9540c10904fee1d8bd86d3f41d
- SHA512 d3bc3cff837597a1afcea24aa22837980a967d477632befae6f6aee3696b104491e0154372fd249647b710a14868d2adeb05412fb7bc9f25bb3e071f74b0759e
- SSDEEP 6144:WdbDlx3b2yeAmat6UaORFK10eG5C5gkyraW8uCl+kQK/bXrT6+qrlK4Ln:Wp91meJaF2q88F0kn/bXrT6+qE4L
- TLSH
  T17BF4752D1E5FC1E3DAF7093288A7D252A561BB19DBDD6AE606A0427407D0ECC9CB035F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Гб27/GB27_Data/Plugins/x86_64/lib_burst_generated.dll
- Size 1.0MB
- SHA256 405b14993327fb2fc7c978f516d9f0536b07cf635100950729911cf67c9c4623
- MD5 69326b301a83a371c46703b4c569df7f
- SHA1 a2720b29b07b218ac6e2d87bec6a12076802333e
- SHA512 1f72f54a93b6a94b7e21f23fe5a2fc04c05e309d8702c2ce2e62836aec8784297656e985e0f3053a3e41eefa3808f659521cb5ac32f3df4f0715f3d13f7b171c
- SSDEEP 12288:jZRQx53ygyPgmIuZXd7jVP4Qy0MdEugI6Hc92hF:jzQj3LyNd7pTMEuRR92
- TLSH
  T1D2357E2922A3B9BEC02EC470430F5B63A7223C4917116EF394E549B32FE69D51F7A719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Гб27/GB27_Data/Plugins/x86_64/vivoxsdk.dll
- Size 12.1MB
- SHA256 33a7f704eda23dda9ccbd9eba1fda2f0589211e9c61ec9d1f9c797acc624ea44
- MD5 b0a47d50e376a80e7878999eaa9e0f28
- SHA1 836acd2622815541ae09c4f04006ff90814a1fb1
- SHA512 4f6426e5085e85b2274a04922c2e6b7e89d52ed35988c794d800d75991b4ca5b0e70cacd887fb79ec4f98900cbbc14c5dfe08866a3ea35f180ab697ec1a7e6bd
- SSDEEP 393216:EgcS7wjbnyZTeAnIlLyZGP2TTgPboIobQ:EDbuT6Ly7T4kIo8
- TLSH
  T18FD68C1FB182C185C4169574896BD6C9A672BD415F348ADF3AE5BB0F2FB33C129BB600
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Гб27/GameAssembly.dll
- Size 48.1MB
- SHA256 75e929b2dce1e43db7946a3df4194a79d3514ac066d27e17dd0fb75b6489d017
- MD5 f59de17f3b05a46929a5546bf9011279
- SHA1 49792c33d4da2e216b96b00a48abb6df54d2b600
- SHA512 cb81ebdd05cb1c2b686bb2a8c72a5ca7bf2e648264c258409a6337f7da5968ed709c885a5f12ffc462eebae6db1566740a05543e3178ee085ead8ff7998aebd3
- SSDEEP 393216:8yYnVSX2HF+NuGuIfj+IlTONooU2goNd8jCTC7ShjxKOCbkepN28nHO:ETlI2IvIFu2e7/SGu
- TLSH
  T114B7292DE1F99458C0AFD2B7C513D20FEAF134A45F6087CB15846E996FB3BE4603A960
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Гб27/UnityPlayer.dll
- Size 34.8MB
- SHA256 9856e06a3a972a7c905347c209c9502939a2e9b2c7d900ff550801799e8849a5
- MD5 cf72bcb94cf517ef73c2acbb20840fb9
- SHA1 0ecc4b9402162e1bc17d19b71c4f1b5feb530a77
- SHA512 b5e322cfef99f09b29729fba3a7fcf72fbf9d8ff65aad6032462adaec164ab02124b1ad540b79ee131a88f132506361a244ffcab9ab28c76808d6b539ec71ce7
- SSDEEP 393216:4Dz9p+33gtGzb/r2P0ZyouCd4ng4x/M2X8gFFsRi41Va8U0q+/:4eLZ+nb8gSi41o0q+/
- TLSH
  T13987AE56B2B841D8D47BC078965BA91BFBB1344907309AEB52E049A46F33FF06A7F350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Гб27/Virus.dll
- Size 19B
- SHA256 e6cad939e3db0c84ad0da7e1185ac40547a7a79ae3ed7b17efdc8a8bea91f6f8
- MD5 cf4c925aaa9e90b68b0491133041da3b
- SHA1 07d601b32e423ffa49a216608b0fd7b0b233ff6b
- SHA512 e5ba24057d60a1c970641c8ebc6904c9f3b6499720bb5a6d4581f40f49f4579168bffc3505ad37bc560967aa90d1667d2b19b99c9b9bdefe57a53be72c3a1326
- MD5 SHA1 SHA512
Score

1^/10
behavioral12
- Target
  Гб27/baselib.dll
- Size 233KB
- SHA256 86553e954a72ad527bf2ea19539ede407a738dc55d1335510617ac86306dc279
- MD5 4265131a25e3e6d9e09f69384abe332d
- SHA1 91f119f895b1c1227abc3bf150821e205b1c8c54
- SHA512 8faa93aaa320d109cfe6cf0a403a4c0a9ba48cdd6408e7d88b87813ecd0e9190158bdfc74ea10c1892827ae172b883709f53ae71de4c43ec5e513052b6fdca26
- SSDEEP 3072:wA6C9vPJ6yHlMPuplt90vtE5NajsutMKlDNM6aFsxndwlskOYdNzSn:wA6O3lMPi0vtQmxrkLBU
- TLSH
  T1C2347D4572A41DA6FDB741B4CC531A1AE67238034780CACF53A443A5EF6BBD06A3F762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Гб27/version.dll
- Size 20KB
- SHA256 87191a22782e4ef4c2c28b659257f2c0e02cfbebb040b498149a2e03f72b719e
- MD5 13d6c40086ed7c0133349da04fbd7cc2
- SHA1 ec923e627fb60f09c2643c7dd6fab4bcab377fe2
- SHA512 0c378fc09564f517269dbfe4e658b88a59ff7cf5076c0d17d56702575eb1f2efe93933bb6a1987810d3d4ccb4a231baaae0f42a46ad582a74cf3ad6ac85d4019
- SSDEEP 384:Dz9O6M+8m27yr1eluPGc0qtrTEdixOU4locH3Iq6MxmacykPV9PrxGI8iBTImgx+:DdMvmYldaFQdi8U4lw4xmacykPV9Prxx
- TLSH
  T118923A4EE16640FEE175627CC4224856E3B1B50817A0C3FF33815869AEA3BCE6D3CAD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14