484624c143f7a60cdba18c726d340211a2a13688550e2fa272c8f9c0ea234936

Sharing

Copy URL Twitter E-mail

General

Target
NPCAI-3.1-PolicingRedefined.zip
Size 1.6MB
Sample260830-19xsqstshv
SHA256 484624c143f7a60cdba18c726d340211a2a13688550e2fa272c8f9c0ea234936
MD5 dfdec7e071e86e81fec31f7da3c7f9e6
SHA1 bc0d224f520c5af754c2b1661b0805bf445df419
SHA512 68411c0c4084dcf6a3556e05ec55e81c1e181ec685feb1e26064a84e0e7d1ae66348a41cafadfa46322f8c30808934545a78e0ccf34c8fa73c24d629791fa471
SSDEEP 49152:6gMDJ2163UXAChsdjEqQ+Rsh76YaLJpHR/aICY:6BD81twCGVfQ+Rsh765Xx/aICY
TLSH
T187753368A42EF55ACC1CC93A332811157DA17F2FE896454A074DEFC83E133F91B9B54A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  NPCAI-3.1-PolicingRedefined.zip
- Size 1.6MB
- SHA256 484624c143f7a60cdba18c726d340211a2a13688550e2fa272c8f9c0ea234936
- MD5 dfdec7e071e86e81fec31f7da3c7f9e6
- SHA1 bc0d224f520c5af754c2b1661b0805bf445df419
- SHA512 68411c0c4084dcf6a3556e05ec55e81c1e181ec685feb1e26064a84e0e7d1ae66348a41cafadfa46322f8c30808934545a78e0ccf34c8fa73c24d629791fa471
- SSDEEP 49152:6gMDJ2163UXAChsdjEqQ+Rsh76YaLJpHR/aICY:6BD81twCGVfQ+Rsh765Xx/aICY
- TLSH
  T187753368A42EF55ACC1CC93A332811157DA17F2FE896454A074DEFC83E133F91B9B54A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Gemini API - CLOUD SERVICE DISCLAIMER.txt
- Size 1KB
- SHA256 774c70b46a5fd33ee401d21b4c5bdb97698f9cdddb32b9515f363cfe7a729c8b
- MD5 4fe2fe6a3e32e286bd528fabdb185c47
- SHA1 45a1792311ecdf0683e02cc9dff45ec413269304
- SHA512 f75880c594532379cf28ee957a1599df472cf3dae99305269248488824cb8858ef25b8b67b8aec6ada8986f885f5860bd40caf9b12f7912cf0c7be5065e98ff8
- TLSH
  T1FF21242BF60713B797D21028B907D054EB34077C27D861401BB862682AD3A3DA57FF96
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Grand Theft Auto V/NAudio.Core.dll
- Size 183KB
- SHA256 fcf493fc47a2f478a65303886b975fbdbf714cbb1f2d79f7fce97e4bb16b01a8
- MD5 48867f392b8e77dc06c062638c6fbd36
- SHA1 ccc0931e2cf3d6d79e24c1f28d9c96b40c131af6
- SHA512 b536e18c482dcf810ec30b9a943ec06e0ca4f6f2bd8f187b807a9a9fd90d28c4c2fb69bada4766c72e0b7942f5e7d40dd94b193ab01e68f666838698bbb473bc
- SSDEEP 3072:n5nFpdQWUY6GwfIGsnLRp2qr2eeY0nVuEtEVEOUkk6uSYsM+S76t:jpdQJY6GwfIGyRp2qI/VZtEVETtHG
- TLSH
  T1CE046D2963E84256E5AFABB1F0F208175BF1F4463037DB0E5D806AE92A07B11C562F77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Grand Theft Auto V/NAudio.Wasapi.dll
- Size 175KB
- SHA256 618ef0e49d64e7a66dfe64bbf6ae81705b9d9683d8a9f321e5c3024d666bdf82
- MD5 278ebb79da14ecf8e0559530c2fda076
- SHA1 8a45f0400f6bc46d254120345fd5e39b6c9b71a1
- SHA512 f789600a820ff4286cb323c4f9dfb6b44001be9295bb24973308363a2668761055e807c7ebcb53900293f4be71c6b5ca328075c230b1ea8270f0d76e3ec477bc
- SSDEEP 3072:ZTo4k5xAt4T6awobjXGUHVUbLuh9aaWIiEKILT9rPr/duoSabKj5BIfgmFyjaKv9:ZTxk5xc4W+VU69aaWfIFzDoI44
- TLSH
  T121046C3537E88967C1EF97B4F8F2294787B1E0463A13AF8D15C45F256D13BA24804BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Grand Theft Auto V/NAudio.WinForms.dll
- Size 40KB
- SHA256 cf92f2f143c22806b88c82f7ec1556f0d814bbd81aca998814709b0da7437f12
- MD5 be8205f435b2afbfd178960c46310c17
- SHA1 6cf807daa6ab142ead6619addf8fc11c56dd51f9
- SHA512 c0cb8ed1381c932a222814084bb50788f51d863b306ba41bfd5b548930ba6939fb0cea8a39f1f171247c461e4d67a1f0aef4207216bdcbfe770e6715d8f5e522
- SSDEEP 768:ZNMJ4j7TupqLq+VHDvtiT8dDDOCPRtbQDmZ1RST+WjQ2fPj9N2fq:fuiqP8d3OMzbQDmjM
- TLSH
  T165033B25935CC37BCA2F1A7E48651105037AEA84B441EFEA7DCC729D9D83B421720BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Grand Theft Auto V/NAudio.WinMM.dll
- Size 56KB
- SHA256 749a01ebbb5edd8b1a03c5263b04de6acadecf52e4cc84d7412bc6e93f180958
- MD5 faf1ba532964984a34d60674fbc7a5a7
- SHA1 0999178949de510a47d87de3b8a117a003c572ee
- SHA512 d23b783bfd55a09c726ba09d627dfcc6c22a6e7bed8a53dff72c349bbe6fb190afb574cc267b7bebed1540b0bf834f259b5d03b50e023881b3ec42a8b2b57f1f
- SSDEEP 768:cQFu51JOtZ+Wr3CJBTNoNfDhPrDVSvxu1tEMgGd8GbpDrXa8Rcer+7Ul:cQ8zvWr3CJZNYDhP9Svxu1tEufpDuil
- TLSH
  T12A434B013BD8427AD2FE1B3EA1F30A524731A8D6796BFB4F1598F1DA9853B8049017B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Grand Theft Auto V/NAudio.dll
- Size 7KB
- SHA256 8bf0f2e8dadf3967757191c2212c269333ccd9d7e59839eea968212c64787be9
- MD5 c583aa3819b16ae53859f728f59ea9a0
- SHA1 b699e8e2cfc52bc3cfba182fdabfc7f6ff8f82de
- SHA512 580fa002b890c6c36dd907b40a121153eb12192721e67b7209c9bffedf8e18128b75ed454d813b67c67040fe5869816ac10e624cd8dce68917a85dd5426a490b
- SSDEEP 96:GBFskeJHn4jZkcLqEm5Nj7AVUhkon1MrtrRGD5pkQa1LrjSd2V:G7kHn4kcLaj7zSon1MRlvQa1fjSm
- TLSH
  T14AF1D729A398C676CA674BF1A42703400339EB40EA57CB2D0D9CA59FFD133185AB27D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Grand Theft Auto V/NPCAI_API.dll
- Size 6KB
- SHA256 db6c5022c82bc53654538889ba0fe717562eebf29fc733082bb937a7179a61e1
- MD5 552c796e3002224a10ab477a80bcfc82
- SHA1 5f61778c5c50c1af6328b419e830f958ba025cc1
- SHA512 5f2f6138e06ec6d4196f56b0b75d19bed8b964643e17d5d23088cb07055b881001775ce447d63757241cd867b787ef526a3050aa3623324acd7620daab54c676
- SSDEEP 96:J0Qxa34ULuXt3RaNyQz4RgadV9fThx4Fq3mYdLPo:5ULuXt3ROyQz4Rgar9fTnKqWYZ
- TLSH
  T13ED19604F7E84E36ECBA077A98A353451778F210DE43CB5F1FC5A21A6E7221546227F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Grand Theft Auto V/Newtonsoft.Json.dll
- Size 704KB
- SHA256 f0c07af0e84d4dd4da4bd7823ba4535bc0481b3bf623ed40b659b68147a6bb75
- MD5 24704261e701b49b51e40c1292ed149e
- SHA1 db8ce5e0b7d8c14920bc9c4eebe51bdf706e3fc6
- SHA512 8ef6a6196044862a9d8d53c6a88e68d9591edf244385bc4888cb9c16c942eeb4a1689c49245d6cf80d619e95f0745898513ed2b67a6fc4c65fbc06b872f72184
- SSDEEP 12288:65RsO50fsVuW3icGomHAQ/DUHIdGFRrDTOAPKfhUUNSUmTIcvABXyoJl8fCfB5qm:om2VuaOKdKSUNz0IpBXyov8fC3
- TLSH
  T178E45B2177FC8E16D9EF2375B430D9181BF1F956A2BAE78FA504D9A51C837918C203A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Grand Theft Auto V/RAGENativeUI.dll
- Size 284KB
- SHA256 d2607481b206e7907c9c1f2cabf15797654aacaaf1746ea202740dcdd5eb8bbb
- MD5 6d3dcf81370dd5ebb3df42ab43a91009
- SHA1 3f932b0586ca05da61bdfbedbbcaaab2481ffbca
- SHA512 8f1f12212e3ea44b2ed7dca8070e392734d63d84d7536e605d4d9da768effe15bafb797aa8fb79376ab4c5384b4725a9c523744d6ae4033dc2e67a34d434243a
- SSDEEP 6144:4XCI2k3BOvzqlh88alxoYA1ngX+IStZApAZwPn4WYkmbCE:4XC03BO70h6kYAhNxerKx
- TLSH
  T1E9545C14EF6CDA33E2AF7776D19B07408778D1C7B18BE78F088864A92E427457E112E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Grand Theft Auto V/plugins/LSPDFR/NPCI.dll
- Size 1.0MB
- SHA256 d589bb245becc48c5834b10abcf7a76525b8b1e8204f883e4fed5ac557ef0c65
- MD5 2d011416814bd2fe31cbdc5e0a48d8e1
- SHA1 7f3ac5c51c3030962b6a3e215344d42ab399fdf0
- SHA512 2a22f83b631d92d77268e628c66af0a93547041aa55446a1a245fa37a4e7d4c88ad202d04db30c55f0bedc787c38779f7c9f0bdf886486ecdc2f9c677b8ce226
- SSDEEP 12288:Y9CPNALXUxqOnhDfMLc13arbmDSbUzSVn6safj4:YsIUxqOnhDtVDSvVnM
- TLSH
  T15B35935F963DA630C0BF3F7F25A86059C375A16B7194428EB8D8E9947F024C99F08DCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Grand Theft Auto V/plugins/LSPDFR/NPCI.ini
- Size 5KB
- SHA256 81873c509ce0eb64c4e69f23eb6f07d6de24c9b4b93b82649257bef19f575c61
- MD5 0edd37dc667399658707216fe06ce3df
- SHA1 9bc8ce2e95d1cccc2d4b6f3bef46a266f7b5a76e
- SHA512 9210f9e500bfb0d26dc1eee060f7257bc118eb2ff5a4ecb429c7a59298f8bcf14a8e57b2b880c477c98e1e5bfbe84866ac6c760b1d16d82d7b91b21282dc7e3e
- SSDEEP 96:pcRCEWOJetqwnmDbAEX3CJf1IgwC9RFN7Wog8O7+T5Q/SJQg09/:FtBmDzwyg19Rf7RG+NQ/Smh
- TLSH
  T132B1A7AF62770F62837306A632066778A731F06C8F225767780DFF68128775443AA87C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Grand Theft Auto V/plugins/LSPDFR/NPCI/Audio/cuff.wav
- Size 515KB
- SHA256 f8eca3775c9a94375634361ae008fe56d94ff37db4be17603b8c75e9020f9ecc
- MD5 310d4f72b60fa957b0dcc64c2b813849
- SHA1 411b811148755b3ef0589e2ca9b8f0343af2780c
- SHA512 64676ed1aac93e30ceb8d054ee97f458af4385d4dac28d0ee17e1ef572cdcd2e62c0caa94b9958499067fd99bf1b09a0bbd27f9054806442ebf7aff136b03f82
- SSDEEP 12288:Bbdxa6aKlVkem5LrgLkHa+QZGbVfjtpNLSYVPAReL2m8aUgDoy2Vqny:hPLXUPWLGfS/Kq
- TLSH
  T1CCB454D1BF436921C875FDF9EEB9402E6763B0A6DF8A722930940C7361E728087527D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral25 behavioral26
- Target
  Grand Theft Auto V/plugins/LSPDFR/NPCI/Audio/groundcuff.wav
- Size 174KB
- SHA256 052932876bda4403c97ffbc8c35aab49542aa24f3c80e112c3f189072a8c5758
- MD5 ca328790d1e95ed40068d77b57bf2597
- SHA1 c9b0ee9820f96e89376923308aeb2cdff0fc4b5c
- SHA512 391fe8cbc11ba9a94662482abc351a23803ab1953c668cc3b465121f50589c6c2d06ea3d2a3177137734936dd8a0ab05b4e0caa4bce1ed942cbaebf4dd646c70
- SSDEEP 3072:CH+IeYNX/95ibMTa/2n53Xz+MB6oNunvnq3QgK0i9ZK+av0Km6z6EvnxD9w:9NYQMWG3XmoNunvqlRiLlJiz6gD
- TLSH
  T1EA045092F601C910C8155E7A5E26EEE55332BD96FF0BA3173080BB1F6DF71C29E25682
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27 behavioral28
- Target
  Grand Theft Auto V/plugins/LSPDFR/NPCI/Audio/taser_charge.wav
- Size 87KB
- SHA256 56fcf65b711d72e63014d47e8d80fc325f1e5afb929acf5a394869165b572f33
- MD5 70cd48b4802b08e1c50c2b9245d884ee
- SHA1 cfef5926f8db3e6e8372af94fe2f260512c36a95
- SHA512 91cb4debb5d4a72640cf25937ceba2112795778c78fba0f26ed4fc65cac0b1e100db67163dc3fcc8c5236397fdc507b32b0ad1191369d0f52d56d82ecea0a15e
- SSDEEP 1536:KxSbtcq/MLpamhf25PWGeKcipn04yogxCYO7JlHCIvmr5nzppa:KxSbnU0eS4H/O79Ofpa
- TLSH
  T17093B442F141BD40C4614DBE5D6EE9E443737AD5DF0EA73A3140B62B38E25A2CB78AD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral29 behavioral30
- Target
  Grand Theft Auto V/plugins/LSPDFR/NPCI/Audio/uncuff - Copy.wav
- Size 261KB
- SHA256 6ff75097573adaacaa29b49d3f48a663e46c952e95a2ab33f993dc80e07fbfe9
- MD5 d480836e8614fdd34d05e47ea051fa15
- SHA1 28f78d6fc9ec5cdbb231bfe92787ecf18de5d0a2
- SHA512 fe29f9282771fe7f80556189b551fe7a89b3c4a8d6b1cb46e76901c489b5ae591cc542be662fc9853cd0576d5416172ec4d13b748d36fb7774bdf0d7d70ee8ad
- SSDEEP 3072:Xv84N074Dcpu+ZXvRmRNh3rwma9oFWwrIShCI:Xv84NAVZmR7rRa9o8wXCI
- TLSH
  T1EB44C891E246FAC1940559FA6F09F6DD522337C9EF8E73723000EB7B64E59428AAC7C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32