ddcb07a02656952b45b0a852732058359dc01251e34caad9460075588cb95f45

Sharing

Copy URL Twitter E-mail

General

Target
Little.Witch.in.the.Woods.v7.0.7.0.zip
Size 599.1MB
Sample260831-vmz2pay1a1
SHA256 ddcb07a02656952b45b0a852732058359dc01251e34caad9460075588cb95f45
MD5 014fe07936ecf410e0884a845fad27e5
SHA1 570f68f6e8f35c69221f9872977f30649a52adf3
SHA512 233ff92e452369a4131339aa0f6d161d78b21d8124e64c6e2f126500805d9e51b5596905a3961e9912128f9d85469c20579de35928a39494f3152d3bce97f3c1
SSDEEP 12582912:uTh0gw0cozj5be4f2Jvjg74GPzHxgmfdzIOpRGsL1patY6vI1en+2viev5nWqMet:u100csjZxucSEeGw41patPA1CvF5nWqp
TLSH
T133693357D190AE82EC7B4035049F9F9FAA68C61F8461479E833C918EAED33DC7D66036
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  Little.Witch.in.the.Woods.v7.0.7.0/Little.Witch.in.the.Woods.v7.0.7.0/LWIW.exe
- Size 651KB
- SHA256 6f64aea9a224e565862444fe1cd7dfcfd2a135b05d6512d8adc8f996afc5808d
- MD5 b3facc5df169bdcc9a554c4fc4ba7d24
- SHA1 c86b72edd6cb581bf3af99ec7b83d4dec017d5f7
- SHA512 fb62dc759182a00558d860c4dde8267d63e55217421a0d2e59eaa16eddd2f7f3070f9b85dd9270d3333f4a660cd4821095bdfc071854964ab3b7665a17838bf6
- SSDEEP 3072:OQd/VdFg4W9mYucJ/OD8JOsI9WRAwN12YT:D/7Fu9mpcJ/OD8m4EYT
- TLSH
  T1E8E4F7E1259B9C45C1AD6C3DBFC5AB068E25926AD302A3C9F9DCCFD405F1D0DAAC7209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Little.Witch.in.the.Woods.v7.0.7.0/Little.Witch.in.the.Woods.v7.0.7.0/LWIW_Data/Managed/Accessibility.dll
- Size 12KB
- SHA256 b742a3d706344b3117c9239e34f5385d9339239f9419883b3ea795f85d110afe
- MD5 1aa8b6c6fece8baf960f6a34aee1c780
- SHA1 7330aa847544837bf354d8644e3dfe2ff82c6442
- SHA512 8aef40e70854e8910226764b9ae63856466b9488b9c402cd4f20bc45d6f3bf55d95ec5ccc92395b15c36a7c6f5d2c33dbcb6398a044b639beba518a1b9acbd3b
- SSDEEP 192:Uh8Qf8LoVMjgUiix4Dx4e7FBRbl9KYYoK3ESmMadMx6OSeFU:gEUVMjgfxRbli3ESmMadMPhU
- TLSH
  T18F42CF28D3E48325F6B747B2ECF7528799B7B903FE75979C294A170D08212844863B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Little.Witch.in.the.Woods.v7.0.7.0/Little.Witch.in.the.Woods.v7.0.7.0/LWIW_Data/Managed/Assembly-CSharp-firstpass.dll
- Size 17KB
- SHA256 63de2f922b16731978f31d8bf8746e496d0809d2eeb7e833e141de512a18af1c
- MD5 e7362c096f27cbcb41145c4ba73a6f42
- SHA1 c3c7da98cbd95e22e5357efcd09c78717aac2914
- SHA512 92e749191a51bb0bb566ae53711be8906f44b97548486897cd97ee3325eedd3d43b6d83c396806e8c2246ca7cbb24d6a3b6e6c6029a81bc49968c88f69a57b49
- SSDEEP 384:JHknlGzjNJqs0vNk7Cknncsyb9Ktown2RgpLWrlzQR:JElkxJqWYsyb9TmYgpLWrlzQR
- TLSH
  T195824DA6A3A06317F9AB9F7EFD648B0141708500DAA7F29FCD8901C83901F45EB19E76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Little.Witch.in.the.Woods.v7.0.7.0/Little.Witch.in.the.Woods.v7.0.7.0/LWIW_Data/Managed/Assembly-CSharp.dll
- Size 16.2MB
- SHA256 3727eeed087cea309a345b434eadcaac2e4d4d6e4a604c8324844633e5aec594
- MD5 fd897a135c81aa3ce7bbca18ccdd5e08
- SHA1 8cc85b10c791568f5d1e6f7f07a2170b6bfae593
- SHA512 8e095245f6843527d393491f8ecb2286806a0ffa3769475480a9ccd2a16cf1fe639be93bfe9df14ad3859c4f0dcb4eb945dc07c462b34b73be4baf1ea49e4597
- SSDEEP 24576:aVIiS14qYPZHQsQaGU0Z9Uc5ICOAurHNAsdySKegFlEAY3fkPdqptH//Vrf1z892:yuKdbEtLXBqb4lvpUBAkkocY
- TLSH
  T1ED0756DA1E826F69315CF9381163B12689D9D73239CD09D8D1F30DB390A691E52EEEC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Little.Witch.in.the.Woods.v7.0.7.0/Little.Witch.in.the.Woods.v7.0.7.0/LWIW_Data/Managed/AstarPathfindingProject.dll
- Size 935KB
- SHA256 5b4e5dec16e4521f55a099ee0ba80798826960e5e5a2011fc6cafcde27fc59dd
- MD5 9e7dd91a6b902aba5c5c01fe90ea66d9
- SHA1 2ec28137c22a65dee08d3afc2d2b7d1af0f55b61
- SHA512 25f9d5c7ffe19a9c73efdad7132157a04cc6a69377d48adef14e54453b5adfee4145c331896518e1fb88e2047d765e152440f472d12b216e2257907da79da3c3
- SSDEEP 24576:ihP8GczEpgxzwT1Ec8vXTH1kpxIpfTgCd:i1jc3
- TLSH
  T12B155A1173D89F27D5EF277B6075091983B2F454A6ABF38E1A8CAAF81C97B400E15393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Little.Witch.in.the.Woods.v7.0.7.0/Little.Witch.in.the.Woods.v7.0.7.0/LWIW_Data/Managed/AudioToolkit.dll
- Size 69KB
- SHA256 abdfe1b56eac23772cbb355540e34a4e03ff341bfb9ec03d3c292907800389cb
- MD5 2f21953ffc2d7cc7c2086d393145bfd8
- SHA1 3d1e5632745a1557b1bbda9aa8f0a95ee1d2eced
- SHA512 8a33f13cf705436821c6bf0ee332ed9d183c64f214e328317205aba1be35dabdede5c0179f9a3ef580965a75e58890534364eae83951429dd40c4df3bdcdabb2
- SSDEEP 1536:uODaZ2uF3mO7HXO8Yhs1AGO64N9/LNni0wLLcU:uODgNFWUHShs1AGO6iVlwT
- TLSH
  T12C63173866EC8A27C3ED67FCF4B5195547B176363E23E78E6E8490EE0A417C44A413A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Little.Witch.in.the.Woods.v7.0.7.0/Little.Witch.in.the.Woods.v7.0.7.0/LWIW_Data/Managed/BgWaypointSystemForUnity.dll
- Size 10KB
- SHA256 ea97879e4e7b13d6d21110a246e8f6bda9ab91e7b91a428eb675516a9aaa66b6
- MD5 358910cfc4e3b10e3cbcbde7507bcb64
- SHA1 a5f95541431c31ce370050c91bdc2f66e5e810ae
- SHA512 079bdb72c9dfabfae94544f90badc0846458109767d3e7a060bc1d740746a4e0fa6ba61e95eb5db31aa7a668efbf43fd4da8e2f2381d72879faf56376d973a99
- SSDEEP 192:VzS2UXUbP7Turgc21AMDLliEbI5Ayxum8wP0nmF8S:dBXTu8RHDLrIO48W
- TLSH
  T10E22D9654F989232CDDD073579B32322127589333882FB676DE994EF3C0A3940E727A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Little.Witch.in.the.Woods.v7.0.7.0/Little.Witch.in.the.Woods.v7.0.7.0/LWIW_Data/Managed/Cinemachine.dll
- Size 304KB
- SHA256 e8577cf9f4138e8585376ff7aee3dbb725616d892f31b566e49467d5425a680c
- MD5 2b5cbff083a7d088af181a112f9a0139
- SHA1 fc6478520636300775a8d026dd8670dd9d7d924d
- SHA512 14421a80afc32917ce75ab16f48072677ed728342ca38b629eef26fe01fb0eab4501bae35c3df343002a0884897c121b1a9aaaba810ec70c30eb8a1fd60984fa
- SSDEEP 6144:+F/24AMCgV77c0R/R++SbFFZMtzI42mxaex+ZMud:5MCgVPc0RRC9MtzI42mxaex+ZV
- TLSH
  T128644B3133508ABBF98F07B9E45C4955D374D42BB79FDB892988E4EC2E0379064926E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Little.Witch.in.the.Woods.v7.0.7.0/Little.Witch.in.the.Woods.v7.0.7.0/LWIW_Data/Managed/Clipper2Lib.dll
- Size 85KB
- SHA256 4ae4b585afa04f38ba997c902d47c66182888309f441fb8024805c6e13cbb232
- MD5 947e9ba280cd7346059a02d0bfa1cb41
- SHA1 664533efebabe17776eb428ca1193691a2bc4e37
- SHA512 a19958947042e50e9237be8a576312a62e4acd373bd375c9fd9a2e8981cab2c89821705bc986d37d941451aeb83f92b279b2ca27f9dcb24b2c5c5f3babecf873
- SSDEEP 1536:nzbH6hWCraqkHxs6obJRXPzafndz9QiLAreSg2YgTqvvQNOaCV6:nzbH6hWCraqkTodRXPzafndz9VLArQgB
- TLSH
  T1F5830A7D5F9D8A33DE4D47FDA040196657B5E069E203E7E7AC9CA0F22C037D1980A2A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Little.Witch.in.the.Woods.v7.0.7.0/Little.Witch.in.the.Woods.v7.0.7.0/LWIW_Data/Managed/Coffee.UIParticle.dll
- Size 31KB
- SHA256 d6e217af18cfad17d63fb7107091b1ac0479ecb6a8f0f4ffd84d3b5d85e79ec7
- MD5 4b09e31b21aed6f678d287ed896ddaf1
- SHA1 2540b6977a8a188bdaf8d91b233de12356e7ee94
- SHA512 2d8a875012847b527de92f033b84c68e032e105224207cf901bad728b475b1a6be48c096959c24778cd631a181c6f57db268a0e4f08cecc5bfaf74a7b79bcfe8
- SSDEEP 384:lqHhZu5jSF4mUDNLxf/fphfdXaDnAB/qLMe+JsxnPQDMm+9+N8jX3AlNPR6Isj:2kjFmUhLDhfdXaDnUSL3PBYNMj
- TLSH
  T16CE2395056ACCF3BDACE1B79B9A5560103709657B553DBC8BED9B0EE0E2778003062EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Little.Witch.in.the.Woods.v7.0.7.0/Little.Witch.in.the.Woods.v7.0.7.0/LWIW_Data/Managed/Coffee.UnmaskForUGUI.dll
- Size 9KB
- SHA256 27b436e03c43616905997f1861047fbcd4570fbe77b2a7a5a8b57198bbfb6b4a
- MD5 07cf6152e3427a73b9cf8493d12972e2
- SHA1 70cf25b4756c4de6e38c62ab14b2c1852c91e569
- SHA512 6304c4df456d4c9a56e4a650b34b80000b80c684125088146ca92caf2d2493c2de0b6da3e22b63abb2d6862e76666937b68b5c6868ee94e89a6faa9ab9a7af9b
- SSDEEP 192:A6DxngWt2NYBjJK3HORl6N5Cpu7nKnnE8+bBPIQBRAsDuqQ:A6tngWsBsUfvKhIBAqbfQ
- TLSH
  T17412FB52A7B0C677C59F0BB194F6A35AA370CB07B683C7ED1DC4544CAC633980A1A7E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Little.Witch.in.the.Woods.v7.0.7.0/Little.Witch.in.the.Woods.v7.0.7.0/LWIW_Data/Managed/DOTween.Modules.dll
- Size 44KB
- SHA256 2866bfe7b467e9f41440ba2b79aa6196d2e91417d91a533fa3c031aa7fc55332
- MD5 cc80ef68f20717100e6d4117fdbc3643
- SHA1 96ad95938733a099993028c6a5d5cc4ce6f5fc93
- SHA512 afbf205695039de59bbcd24287910ce0a3e2fada066524d8e183480b4ad7e72a16e9a371b7b25b3e0122b1c29214b96a70d752e81ab887fb2d019587dc4ce73b
- SSDEEP 768:ZLuP08eOBk/hzu+NRH6nTLn4V/BJVyOId0VTJDLpoz5r:ZKPVDBk/haOsnSxNIJ
- TLSH
  T1E823E99EDE741277C29F4E3DA4245B024771D7278A12E396AD8BF0F980D7B8629403E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Little.Witch.in.the.Woods.v7.0.7.0/Little.Witch.in.the.Woods.v7.0.7.0/LWIW_Data/Managed/DOTween.dll
- Size 168KB
- SHA256 a5d5f45d862b2fbc6f4597c2fd01d31f505918459005c461b7142cf898f3b861
- MD5 4d122cb6ccf0f1acb4e05aacea3f3de7
- SHA1 07625b4cca8dcd4d3fbf12b9e7a7863e52bbd753
- SHA512 f3e508b3ecb74dd4194ccbd3bebb277b00480ea1ae0ff6bbec29e436c63cb0ca0096fc06b409ad1755f0a97d062b7b1d0d1a99155bf511c0820b381e91aa8f4c
- SSDEEP 3072:VLahNmBIczW5dqz++wjRqkoKZKEziT0D/l3R8XWrVtD2:VLSsBIczWC4Rqy/l31VtD
- TLSH
  T111F35C1467E95A32DBEF077A90791A0D9238F21ED8ABD3AF5D85E0F42C07B5598003DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Little.Witch.in.the.Woods.v7.0.7.0/Little.Witch.in.the.Woods.v7.0.7.0/LWIW_Data/Managed/DOTweenPro.Scripts.dll
- Size 20KB
- SHA256 f645bd475d0508cfb12577532c2511f0be0204f31a5c69155af33c3d0b7f7e64
- MD5 7a1ba4c4a0fe2d9d1ea9fa978449cf94
- SHA1 2beea9761a9a77b9e00b48bd44c47cad4f5f190f
- SHA512 7a0d10f659dce52137dd006be499262f0f96abd6e7d8f37baa95112f9d9fde6463e626cd028f0f51bd9e449ca0838ea8356db85317110e40769b4d5ac3b90255
- SSDEEP 384:jeJAaNIPar7NgmZT1wT4CCYQopcGkV9EjjfNrD52Gpz/:qNdZT2TMbo2G1lpz/
- TLSH
  T10292F854B6C48717CABF1BFFD9F752A04374EE265432EBDC18A820C926027945A8A3D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Little.Witch.in.the.Woods.v7.0.7.0/Little.Witch.in.the.Woods.v7.0.7.0/LWIW_Data/Managed/DOTweenPro.dll
- Size 15KB
- SHA256 a067e3ad9d73f8ae07309b278592ea94f9cf431c646a764c294b8f5531b6aaa1
- MD5 11d1954219bb6fb12589dd3460e37ce4
- SHA1 47ebee0d6da873087b8b2e716302d4ba8ea048b8
- SHA512 cfe4c01816113f2a009e6aaf61c0a36ee3ca60c8eb193cb2bc110da6e1ae09a262c63ff52701c33cc38acfbca7046f43f87fd9051fad791834e0418a7b3b1429
- SSDEEP 192:YC//IVa7LmC1PEIa7H2Gg1qU4+VF34qGcs8KbRIfnEs7BOQhXu7o4kEmVP:bo6iC1c72G6CqAbRIL7AO0o4kEmVP
- TLSH
  T17C623C6663A88633CE9E0FBF3D322F400370FA4A5A52DB9D245C98C92D077C655A1B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Little.Witch.in.the.Woods.v7.0.7.0/Little.Witch.in.the.Woods.v7.0.7.0/LWIW_Data/Managed/DemiLib.dll
- Size 13KB
- SHA256 aeddf43c10c1d8b8ae26d83ac75b227dd73ee64c36bf72ac59e893b7b517468e
- MD5 5d011330ae1fb9a1f34e2ce04d3848cf
- SHA1 357105b3c12cc651295d7c119495d5638b56fed5
- SHA512 7da26799de9cdc89711da565a550b384636ef3a418df52c3d30c1e590f225fdedbd66ad99b8aaba66b79e217f0344c057cf09318976eac7f9c099f7b9ad5aa32
- SSDEEP 384:bxwxxtKEOwAzmxrd5uMew4r3RNtmLlw6zZJ:bxQK1w6EHuMeXwLlw6VJ
- TLSH
  T1F3520770929C5A2FCFFF57BC49E62A0022309293D513EBAF05A4E22A4907B9D1D513DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32