87cce521f85f68c54d3145047c974d80e11dbfc433c0ab61bfc62d5f76d2130d

Sharing

Copy URL Twitter E-mail

General

Target
Exciting_Health_Checkup_Simulator-v1.00.7z
Size 260.7MB
Sample260903-124lbaca24
SHA256 87cce521f85f68c54d3145047c974d80e11dbfc433c0ab61bfc62d5f76d2130d
MD5 d6ae6cc73a8fc5195cf5ca7a1f92a524
SHA1 6c050dc1a90940284bb069a2ffb6e48f9126b8fc
SHA512 06478aaf56c97d23978bd01ba728e6d0b342facafd443b25258c53487afdb649763e835183372a15274f62df15ae2deac22ea855546e6551c20dd665ae7f67a8
SSDEEP 6291456:iufalyBMtSwmX78+NE3sEDT4vA+i33V3Sc:vK878+ST4voHBSc
TLSH
T101D83329AF424DE1D0ECC7B453BB8A5FFBF5A26895044205CB61E276AEC7C3049F2D49
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  WAKUWAKU_KENSA-v1.00/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  WAKUWAKU_KENSA-v1.00/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  WAKUWAKU_KENSA-v1.00/UnityCrashHandler64.exe
- Size 1.1MB
- SHA256 50a85b13a1b96c0ab97fe17eb931d1d8c24c5b6db21623227bc2e61bc6500425
- MD5 8434e7685833751a719ba87ec6ece7a0
- SHA1 a1333df98a05c37647a2145609100518bd57b091
- SHA512 5b48d3e5302af9f46a5611fc630118926445487edb41d4d7aad1199a865e72b9e4b3231051e7c454f0ae9d07e04049fb540dc06674947b333773bf91e745083c
- SSDEEP 12288:AdQguUWSv0LZ0dkXepg517sB0I5NTBpoEfHfR2o/EoK/u60pJgQfz2fzAy:AdlupSMLag1700IAiw1/YJdz+zAy
- TLSH
  T1A0357B5A6AA800E8D5679039C956491FF3B27C1607608BDF13A0B76B2F3B6D51E3F720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  WAKUWAKU_KENSA-v1.00/UnityPlayer.dll
- Size 29.6MB
- SHA256 bdede4f36654771d59af06f335d6d25d793320c9266dd88eb7282127e31c0dcd
- MD5 9235f02d1acf1409592bf5a5dc24fcd8
- SHA1 71314e739f613027bb54f5455ebfe0970877d988
- SHA512 047900963e11663fb4f6543f28ca06ff37ea4584fb07f05a2b19366abc79283e141a59bbd6a6052ed7b99b0638e847e622a10d905269ad033860a64aba65ee7e
- SSDEEP 393216:5sjEaaRL944S3fkPu4yInFMGDyicfbfuOpGvNhnSP2eTe:5sMS6lVzvNhS+ey
- TLSH
  T163679DA6B2B800D4D47BC074D65BA90BFBB1344A033086EB62E149956F73BF11ABF751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  WAKUWAKU_KENSA-v1.00/WAKUWAKU_KENSA.exe
- Size 651KB
- SHA256 8ce912668752d79e18d5c5a5627d655756723dc72e36e7a84cfa181189b3b26f
- MD5 33f97547e471d4225459fbc3bed40860
- SHA1 0f94be782a99e5fab72ebddff7d5f5e9cf8af6d3
- SHA512 d44dfb0a0823b2559addca051e40d4249a5458e56b0e66a39a07f9aa5988ea9c115c5624ae8b745bc6ac5eb33293e12d25cdbb953fe10f331788f4f48132d331
- SSDEEP 12288:t/744aOD8LJiEkIATDd1Q3BLagFkDZjDXLJ7ks5GXFumjmxR:N9aOqJAIATp1QVagFkDZv7pH5GXFyH
- TLSH
  T1DBE485D3864896E4E82DC1B1B4633CC39B186E7AA684B91E30D3F12755B207B761ED4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  WAKUWAKU_KENSA-v1.00/WAKUWAKU_KENSA_Data/Managed/Assembly-CSharp.dll
- Size 24KB
- SHA256 337bdde79eee73a1375ad1a162179ecd9a6960286d8c153e393f688a487140e6
- MD5 728f422d20adca35b1599192ce9ae55d
- SHA1 c12270193dd6541f018d6f6d810230bc75e54d43
- SHA512 fa832b223a7a8a93230bc6c349be645135fe65b9a5088dd0945dec823e4140fa5600544f02beb820d37f707122f5fe3c65fb07c24ba5601f1c04cf4545c8d6ab
- SSDEEP 384:5rOXfEMoZuJxknd9Xu/FKEJg7LfNMoTudmC929CqN+Y/IdKGjkpa:5ifEMoMcndCAx7LfaPmC998Gv
- TLSH
  T1C2B2D551B7F88323F7BF4FB9A9B452111772B5032921F24D498170AE9CB3BA48D117A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  WAKUWAKU_KENSA-v1.00/WAKUWAKU_KENSA_Data/Managed/Live2D.Cubism.dll
- Size 192KB
- SHA256 094ce5b9f6ce076009b13b809a449e2c3096b9c308e1da8959e02c6d5e64a1f0
- MD5 a118d5e91e238aedc8ad94b26616c71b
- SHA1 5a8d0bd735b9ebe6f11b87fa4f8d3a938c5dc3f2
- SHA512 dfc6f4cdf4f98f2acba544d1bb53a06fce7e99007205d4c07afaae7da85daf8c27ddd5e2f4daa49ce291e60093fca3fdfe511a5d4779d21354a09d5cc9c27dea
- SSDEEP 3072:RUdxmXsJvDQE1R1B3XgrpMKjVIejT7vKLaCzBWBYnZ:ixm4QibKZIejPKLaCzwBY
- TLSH
  T17F144B25476886AADB9F87F9B028052447B6B14634BDFBAD5A50A4FD1C83FF0C101B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  WAKUWAKU_KENSA-v1.00/WAKUWAKU_KENSA_Data/Managed/Mono.Security.dll
- Size 235KB
- SHA256 812da5399535464b183336800fcfc27798c3e71fe82609e4c36909d14d4ac858
- MD5 0376fabb4c72ea820b2ab42eba8f6c64
- SHA1 aea8fad3b5cf0abb3e63cf0f8ef8057515b07b23
- SHA512 8c8fb1a345bdad9ad46ba1cdb3cfb4dce7784832f75a345519a0d40e0408624a7ea2c2c379b819587700c18d198b776db0e5e33d414afdbe18325c86bbc8bafc
- SSDEEP 6144:wUjTQ70cnf8MoVRxS9iJdBF119RJXG2yL+Q:REiH119RJXw3
- TLSH
  T108344A1863F9531AF6EE8779D4B15019C3F4F50BB9AAEB4E5C8282AD1C027918C41BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  WAKUWAKU_KENSA-v1.00/WAKUWAKU_KENSA_Data/Managed/System.ComponentModel.Composition.dll
- Size 251KB
- SHA256 77b4cb55a78e36420ffed1e5082b6a39be80f0121e149b87a496ca466a9a3ce7
- MD5 8a8bdd210bbeead1288093e4aaac4f81
- SHA1 559f986a8d6e5727fb3b9d2ab8b495a4833dbbd3
- SHA512 f43b03a035b6e019355d0d94e9d2e521f91be683d732469110ddcf16b890d2e5bcaa6c1bde096ca0db07892747e4fbeea72e710e1d2d42379b0e2b67fe48cf91
- SSDEEP 6144:2kwkYfxuS0ZNORl1X1XYZGFU+22kUgUlAwU5e81hXJXee4jsURlXXMAX8O33iEP3:2kwkYfx8ZNCxL
- TLSH
  T17344281533FD0366EAEF0F78B5B480148BBAFA06B95AE71C2C8951FE091379499117B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  WAKUWAKU_KENSA-v1.00/WAKUWAKU_KENSA_Data/Managed/System.Configuration.dll
- Size 122KB
- SHA256 d25f2d7e107c96cac4be5b218f90eb00db66623c2277be5cf323ce6f58666a7c
- MD5 2b761923eed916d2b379ca29f18b62e0
- SHA1 31dca367ac1942092436986cee6adb5ebd8c713a
- SHA512 d0e56ee806fef5885b173e10f56608bc4dd55c1361acf56cbd936f6b9db5a3540b9504f5c0585190e88e135efc8ce5f2c2632415b6706bc9bcb646a3d07e91a9
- SSDEEP 3072:QGHTFkizuGCOE/htnREcacWown5WJGL0MIeNgNe:QGHT5+H/33vJ1
- TLSH
  T1CFC3F92563EC872BE2EE177EF8B515110FF1FA0AA436D74C5D89B0ED1827B804662367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  WAKUWAKU_KENSA-v1.00/WAKUWAKU_KENSA_Data/Managed/System.Core.dll
- Size 1.1MB
- SHA256 6b63b86c446ed4da755d0014ac1c6c906826d031ad7f0ec20b2c5e2725fb4401
- MD5 587467fb4d8b95868be8e6d84e9f984f
- SHA1 9efa88cf1a2ff2213d6caec11d9085bd96cd4f8c
- SHA512 5d0bad4b210208814c7a52d31e32f9d4ab3f8b5586ca3693f14c3be35770bfed34bf57a2af828860ef8aba147755cc192f3018c6e8f214f752ca5b1ce5e95a42
- SSDEEP 12288:EWK8Xi19FV57751umv0RX15PgLdfJ18VjjvM44hvetIX6e+/xHzR:ml/umv0Z15PyC9vMNV1+/F
- TLSH
  T18E354C01B3EC9B27D5FF7776A4B442A007B6FC46AB3BD78F104891A95D56B008D887A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  WAKUWAKU_KENSA-v1.00/WAKUWAKU_KENSA_Data/Managed/System.Data.DataSetExtensions.dll
- Size 29KB
- SHA256 35027b2b810c6de5a758e67b986a16ab424e8b24666280880737971b02213da9
- MD5 c68e4a9771d58ccf3d4a1cc6d6e892f7
- SHA1 6034843c478a7b16c200504a0621538e428a7ab2
- SHA512 be3a39fd9046a0ee1317a5d89eecb2b29a3d3b76cde0479b2a880883d9205a2fe445f1fa6d899f9043f3c469d0d20b2c2344f7c812e300aa888fc4e5dcd13210
- SSDEEP 384:FEAjm7aELetOdc8l4LodMqokNv2Y2rsFKOlIcMYOxesnRbli3ESmMadMkrVr5UhH:FcZC8Ll4LiMXkv2Y2McdMsj5Q
- TLSH
  T1C4D2C915D3EC4311E3B727B5BCF9518A8AB2B913AD35D79D288E23CE18127804D62B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  WAKUWAKU_KENSA-v1.00/WAKUWAKU_KENSA_Data/Managed/System.Data.dll
- Size 2.0MB
- SHA256 39268f2a37dd720a862db36ee8ecaf586eccdc5af117cea05b8a95ccb07ba035
- MD5 7d43433a8409868931fa21f03c3a4980
- SHA1 7cecc2df08edaa3b983bd95a78e3e1863b896803
- SHA512 709db3e56f41a1e85097275d021d5dfe41f7478d5a5acf26bc5ddbb6375679203777610a2ad15d154d37b9942371b247e2353359abf42ffe5db0d14634d794ac
- SSDEEP 24576:STy8NQuznGO4TiWB1V0Nt8OZUuhHwjpj5zuctRoOB4M2Q4cggyT:Iykz74VHV0MOZUsgoOB4M2i
- TLSH
  T124A5185077FC5A16E5FF2B31A871101567FAFC16EB72D38E6508A17E1C62B508CA23A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  WAKUWAKU_KENSA-v1.00/WAKUWAKU_KENSA_Data/Managed/System.Drawing.dll
- Size 478KB
- SHA256 5ef379f354af43862c4b56c3c651c8feeb137285dda66e51c037f30e7958e871
- MD5 4afdbcde02101fc3bb15a443b123b60e
- SHA1 e458c02dd4916a749cf871c594d812c2552fb5fd
- SHA512 e6aa99ed77bd86e545bd86317983894b4d30285cdd09ed8788ee176dc64f784e87e8d85cf6a4b4d9a76d0c72b8601ada8bfb8f8c7e335a78b69fa4ca5dbaa496
- SSDEEP 6144:AHutOmSUsXjt/z5B4CqvhOgEGKPx+Jg/NY7c/nENZ4k7cheeEh:AOtOmVsXjt/PicgEN/MGq4k
- TLSH
  T15BA44A1077B4592BD5EF2B38E0B24968A631FC076B26E75F4681B62D1CF2B809D017E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  WAKUWAKU_KENSA-v1.00/WAKUWAKU_KENSA_Data/Managed/System.EnterpriseServices.dll
- Size 43KB
- SHA256 7fd153084097302ffea7580c061c4d903d8b2f449e307a6d039dadaebcbbb5a4
- MD5 bfaccfa6de0d9931fe327c0faa3d12f1
- SHA1 df8969953ffcf98dbb4ef4f5083c9c841caeead4
- SHA512 92f2a179e88cf18223936312cb8d178a770013037cdc9f6d03fc0763d194dacf4bce7e7a57338ff2cc485780ea5de6b596fa46dadf095ccfd1eb46becbdf69b9
- SSDEEP 768:0T7LlB8tFJutlA/kUTr8yI32JVmugdQawGHZgm5S:27BBk8tlA/kVy7JVmuguawGHZgm5S
- TLSH
  T1A913D51043D4877ACAFB4BBAFCB342264676BB026F37D3EF2605D2995E4374C4412666
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  WAKUWAKU_KENSA-v1.00/WAKUWAKU_KENSA_Data/Managed/System.IO.Compression.FileSystem.dll
- Size 18KB
- SHA256 7ee447f271cf9703aed75a288422be1c923fe5e61b29e4ba1e3a8cca52b0cff1
- MD5 aa576c0023cbee41a6244c5ff3066414
- SHA1 877f673fb31dca114418c013ae86afa567f75040
- SHA512 e672aaa4139277d6360a2a3f3c03171d1264a786c47b1b5ef2719a00faa01599350b1fb549685cff0af6cf1a7c40e1221710d080c44c8a477488e48592bcd7be
- SSDEEP 384:6PQA4DgKGRwrtLsWtRbli3ESmMadM1vz2a:6oA4D/Jwq
- TLSH
  T11282602493E44315F6FB4BB4ACF7428686727D13AE36C79D298A135E0C327884D63B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32