3c1e3252d77cb2f731d92423ccb1db95b54ff2b31b7ecdff9c05434f2c497488

General

Target
sims-4-updater-v2.6.6.zip
Size 24.9MB
Sample260831-axe42seb56
SHA256 3c1e3252d77cb2f731d92423ccb1db95b54ff2b31b7ecdff9c05434f2c497488
MD5 65b0d25da86dad781468b93c5a0f6333
SHA1 f8b828429bc071d236f5fe4a90e06afc6d3d7725
SHA512 0966807c5e0415daf14456dc8d1b5670458f24396ed803ed0e89a693b2d7a5e862b5331fbd315515d9083b57aa818f0fab6435306b68e5936c9da3835ac94c9f
SSDEEP 786432:YwNn7G4KlSFTYMW5ldPs/HH4nolsb4kchJP/gNdBuxqXP:YwpG4KlKjWHdU/7lsbeJP/gNduqXP
TLSH
T15B4733BEC29465B01999A53D1723C90C4462AEB3AEF10297FC77FA7B00533EF94DA548
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  sims-4-updater-v2.6.6.zip
- Size 24.9MB
- SHA256 3c1e3252d77cb2f731d92423ccb1db95b54ff2b31b7ecdff9c05434f2c497488
- MD5 65b0d25da86dad781468b93c5a0f6333
- SHA1 f8b828429bc071d236f5fe4a90e06afc6d3d7725
- SHA512 0966807c5e0415daf14456dc8d1b5670458f24396ed803ed0e89a693b2d7a5e862b5331fbd315515d9083b57aa818f0fab6435306b68e5936c9da3835ac94c9f
- SSDEEP 786432:YwNn7G4KlSFTYMW5ldPs/HH4nolsb4kchJP/gNdBuxqXP:YwpG4KlKjWHdU/7lsbeJP/gNduqXP
- TLSH
  T15B4733BEC29465B01999A53D1723C90C4462AEB3AEF10297FC77FA7B00533EF94DA548
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  sims-4-updater-v2.6.6.exe
- Size 25.2MB
- SHA256 59a6741c57b772f49721af8eb99a60aee6a9c5c79ede8f831f08711926b79c61
- MD5 43a952032ce11e598636d930e8fe9dbc
- SHA1 69f89effa114aa11b2e3b2a4e1cd274744c63d2b
- SHA512 bdd253a8f8d24a86025418afe2c5912847e9b6e38c20370ed000530863dc22d1dc2dd84b0bb8e1dac5b3c6ddf92a68de8614a01dc9fba14ff1e2225afc5c9168
- SSDEEP 786432:HW8Fdfa7KZCaolCMw1LgtAiGVn7gzZhVQb9cVPpje+BPBs5:HWoBa7KZQlhw1Utl27gzJ+9cVPpje+Hy
- TLSH
  T182473349B3C404F1F6DEA23D4592E44AA5B1757357F0028FAFB9987109A32E8DE7EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery persistence privilege_escalation spyware
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
behavioral2
- Target
  updater_gui.pyc
- Size 53KB
- SHA256 fd9aac295cea73f0beb280491915997e2cbeda143ef254f009f80ca6f2d374e8
- MD5 9ddc0b55afd56ba3f28d1c0fa395400c
- SHA1 9366d4dc58107784093d8bcbc81248b10bb22469
- SHA512 9b22dc03c4da48e3c3d1057f41c998fb9ec488892887843223adb30aa57ff92f070d813243f3684487ff297f245850d7140863b13e30fadd1bbe696078b44765
- SSDEEP 768:EIkGaj7yS4m67u2XMU+KPaSyKwGywgvfWg3V9RUcvqIo0/uv:+GUQ949z2EVAaqIcv
- TLSH
  T1C433074FA860D726FF60F17510EA0994E7AD3E92F220A273225E413A2DD77B6DD6434C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  updater_readme.txt
- Size 14KB
- SHA256 8bf1608f03347805b92d7bd3b66e43346db66579dd2bdf1e95c4e4ce74775cc3
- MD5 3bf22b20e4934da80c30cbc1dd693c5f
- SHA1 940f6c6d26e87a6e4dbbee5c848702cfbb3dd498
- SHA512 0fdc5dac66b1d2ca9ea9299ff1ba905bdca9a89ed177259bf69a13e0b15ef2aadd0b5ce7cc691bb2fb0d385c880ef4f4494c65d71d67a031c862a178d6596ad5
- SSDEEP 192:9u3AxhT/9ERzomuSxon0AwGF7Vo9weQBZ5FxQ6C:9tA6muSStwS7V9z3C
- TLSH
  T1DB52B76F9B44C2B559301659A50EB1A5FB07402F53A2805ABCBC804C3F37777D26A9EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral4