ecee8e50924ccc86a182b65ed77bb672148af05f52ba67c7eb0f37acdcb5de0e

Sharing

Copy URL Twitter E-mail

General

Target
KF2Cheese_[unknowncheats.me]_.zip
Size 5.0MB
Sample260905-fg7f9atwds
SHA256 ecee8e50924ccc86a182b65ed77bb672148af05f52ba67c7eb0f37acdcb5de0e
MD5 c3591a09fa2edcb40ca2eee074a0a625
SHA1 2418f93988868293cb9716c9799b8ba423714f05
SHA512 3b009913f7e32547fb0c6a051d767031c3b281c67f494445d83913aa0aa72e820d8d919682fd497d325d2320e9d61f4be073918748791e61db944026c519f9df
SSDEEP 98304:d5F4Y3saCC1MEtEzaYvntNBpyCub6tiAyfqAQRZwYK9T3rzB/wQnrllxWmTvFd:ZT3sjEFInPyfIteqAaZwYijhBrRW4X
TLSH
T169363372D27035A1F357B5BA6F201C5C83688285CE4BDD53A43F16C6767358EEA388A3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

linux macos

Malware Config

Targets

- Target
  ClickableTransparentOverlay.dll
- Size 47KB
- SHA256 e3db8c52ec354964a9ce324746ee5c75d1dd43247ee4784ea614cf1b407c4c86
- MD5 495bfa5da0dcb05c7a15348e2b149fcc
- SHA1 09a262e5304ee01d2b7595ba2bb72b9461cab9f9
- SHA512 3e093c56265b84847031e9b6fabf2f11a4a485e81ff5601047ecfc66b8510dfb3ad36e6cd98077e46274902ec5be6b46ec4c22f7da409d29b14c188655aa6871
- SSDEEP 768:Wdgh15rtydPYsXnu/wBI2kThp8lXSYB2p0nt3elDWxnTiTSPbtqn:bNUdPs/t98lXRdnt3elixnOTCtqn
- TLSH
  T1D3234A11E7AA0313CDAF1DBEA4A3251E0733A994A63BF7041D8CB6C92FE77950618357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  ImGui.NET.dll
- Size 299KB
- SHA256 439ddeb2609edd6402af5fb0dadcbfce3b22af9fb3c206eba56ab99c70193ff6
- MD5 21324725f92ea7bdbb35b2aa9139baf8
- SHA1 87d3081e95a843e7af631f3d15fb9966b87877e4
- SHA512 4ea7d745376928cb28b36d9bb6274698c8ba99c0f224e741601b0459cf41d2cd028d90e9594499b842722f4cfcc8e1c85409968bb29373c54464cfc671227832
- SSDEEP 6144:2ET9idXnICTpjx/B3w7qF7YeFFOp5oPxs5vbvEEq:igWTPmtA
- TLSH
  T1A264D86021D9610FF3FE7B33A150D7683122909BC3464B66F6D6D87BFAD2235BA006E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  KF2_Peter.dll
- Size 10KB
- SHA256 8339368630f05d6efb80b021de712a93b5084f13a6431dc4320424f95b3c8236
- MD5 9f9d2bc61f071a4f5ba299a4e6ab7e72
- SHA1 dc54309f970218f5960cf05f6c295e2b25d0d0cb
- SHA512 e0f664a7aa1fdc2b499d346c30554ba9749795898908eedbb7b6c2db66d1d03ebcbda7e1b892f6619ce3ee74cad028043a32f897e1ef09aee999b5460a485866
- SSDEEP 192:302fhURgSROLU/UGUnflzBCnq5qrGQ2Uo9hSTOvCUaHqu8wQ9e:kWyRLSxBCnq5q32Uo9wTUCUwR8j
- TLSH
  T1FE222B1623E09937F6FD4771AD7283A093786B634211D7EE60CE231D0E6A718546B3B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  KF2_Peter.exe
- Size 135KB
- SHA256 0a8f010ce2e7279f5c5c91ba57b25fab8106d0ee631b47be65732aaf988456ca
- MD5 7f6a146e3c22ed5f6db163e1b90a8865
- SHA1 4da7d9ad7cbce353ee07acb192f62bd050337a69
- SHA512 16f070496d288136e3d1b1c08223d9fb6b292ea65f741e81518c553fe9c1accd40d92fee37e9cea473d963f1f33e05534db023c72245060cb0165808b240cb78
- SSDEEP 3072:WjK4UGDHXrQ8hy7qgpHulWD9ZvZ5Pf3Ca10xuZ04ntfO+hBu5:WjK4TDUqgpqWDLZ5H+xuZ04ZhA
- TLSH
  T19CD32903B2AC10FDE1BBA37C99A21A05F3767815477297CF0390866A1F67BD09E7A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Microsoft.Win32.SystemEvents.dll
- Size 25KB
- SHA256 35a2053d5114380b31295f771438d205e36368fc104658cbc5138d8ddeed367b
- MD5 f819e58b1fceac0eb1321310af45018c
- SHA1 a7076d2deeaf9fadf1e8b446d6d6d67798d25d5e
- SHA512 e3e9657ed03d2be8ac850dd99035b7a363f9da420da476e661d058bc166cbe799d213edc1a31cf3d8b6019fc2e636224e7de5a0248544cad43289abc61733611
- SSDEEP 384:h/+UKU7+XwadOx3YQnuWrTJWxYA6VFHRN72nFDR9zlTa:h/+UKUKLd8YuIFClql9zxa
- TLSH
  T11EC24A62DF44C5A6DCF70D315AA5E2561A38E3E6A811E74B248EE0080FA7BE497F0794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  SharpGen.Runtime.COM.dll
- Size 165KB
- SHA256 1e3eb1ce01aabf1b72eca7a78f6ebab7b99cd722188ab5f547b7e4f7148a2919
- MD5 ea2735bc076f447ef9d5715e50895a4b
- SHA1 667f5b2e0e57e8042670b9142db192bd0d0fe368
- SHA512 eab423f69ba126a159f42d68a2d4073dddc9966c994b567b9931df8caf148209ef53635a3257ca70d3619a73047fb129338a60fc8fa57ca0a32c53a45ed7e7c1
- SSDEEP 3072:0OIsQblPoGYsM16XSAIrQ14b0p2nIrm7yHz/aIdWHuA3768oBG:0pdYsM1qSAECkIq+H/dWOLz
- TLSH
  T115F36CE3FA0016B3ED0E8BBBAD92D1134AF092053D160B9E7984644B29FF6C465367D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  SharpGen.Runtime.dll
- Size 76KB
- SHA256 2e9cba36e67c4ea4f107427d2c7c33689f0d175ff23114e5280c6d6cf8cd9e7b
- MD5 ce9406c7630bf4f9f0485066ff659404
- SHA1 cccdbd68acc7150159759edf534903e2a7364ccf
- SHA512 8395fb23668f1d5b7bddf29ebcb21389cd0df6343ffb334011b0a6589548133960b27b756a948bda02312d39c9c0e9fb8972634fe92913831a4719cf07014fb2
- SSDEEP 1536:fMLhOvXXt8xo7psZ18S3XkbwH9BwlPKKLW3OVaUwXCrNpjjr9Gm1c:EOkodqF3XkbwdBwolU+CrNpD9Ty
- TLSH
  T125735C1927D98A1BFB8DA7B9E4F62875CB30E3062663F3AB654E58F504073941D023F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  SixLabors.ImageSharp.dll
- Size 1.9MB
- SHA256 4b1f8a0c6660d05b008c3568f6e5469ef0716815d82ddcb5d7c07d62c12e11ad
- MD5 7d75b3744dafc6d647f5043541357dee
- SHA1 a53f61ecf75de5231e7b3e9748b168e446ed4fca
- SHA512 8a710adc494e31451a61f8bb56b38eb6884a515e50d5ee275113bb16ea1d5c0916c0ff05e1ed4429391447af1b777c081f8709d00e5322d406a71293c83bf3c8
- SSDEEP 24576:VrOGFrPGEadvdKJtpcX79FsZryXRexQxYWjlK:VrXBaQ4m
- TLSH
  T18F955B0873E49F27E96F4E3EB0500509B3B1D96A93A3B3575154ABFB2E17B878C042D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  System.Drawing.Common.dll
- Size 461KB
- SHA256 5cdd76dfeb6b6fb9f3ef122b669abbea8713aff9834fec8d265dfffabf1159fc
- MD5 6385e86bf1136432c2c90d876ffeb0fe
- SHA1 ec5067793985d4618eb5e22cb7e1619adecdcb70
- SHA512 9628bee838d9b94dcff62424944c252e1b9cf55284a80291eefe3bd8199082d2561c143d8ac5cbf1715f11ec643e324ecc82df3c1303fb14e6758ea123f3424b
- SSDEEP 6144:N7GQdZvVdZNsf+dVidfCyI7pEze+PJXQh7Qr+BM+yM4ujE9hmpf5Tjq8pSEBk9/d:N7nq5PFQV9dTpxjq89BoHeQLJF
- TLSH
  T148A47D153BF5AD1BCA9E0F39E0610A284731D12EB697E7972E86D16C2CC3395AD103E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  System.Private.Windows.Core.dll
- Size 835KB
- SHA256 73df588df9f834271f0bc3a0bd286e784af0ff340ef84227b6d90cb6316e2f58
- MD5 0c3f8ebf188a681c1bf940bc012fa7fd
- SHA1 a4b92b11f77fc580b256e604d8afd32b0d9e8c69
- SHA512 24dbc12712729d6c7676fd280bad7585e4465b0d9df13c7e6ee71917e2b7e5fb894e50d24bb0ae9cc004ae305d84feb47edc8225fd3108557273396988cd01e6
- SSDEEP 12288:jE6hUXc1G+xQMcfrKX20Et8gAXowlq+rXbw6p2tyEuhRNTYhdvAD2:jE6hUXc1G+xQZxwlvp2YLhTTIID2
- TLSH
  T1DB05F540F62FBB2AFE4859B4B47914C644B24CC761CAFEB880DFA4E0D149A971D1B1F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Vortice.D3DCompiler.dll
- Size 22KB
- SHA256 dcd66322a7905b363a2b7e8473450ed397726fdca39a6bad1bf5fb2924a3739c
- MD5 9f9bd8a478a32acd54fa28fb435059f3
- SHA1 a0f733eff0db68001f7a7202e97db16bc6e3ead6
- SHA512 0e5bbaef079d6a00d9772e8ffe92bab8a19b3a1d78f34619c4c0c32bbbab954ec779d3625e3685d5afdb9f62acc390c361262bc051582e4a5d56e2cf97c5e1c5
- SSDEEP 384:/ATk6idOeL+5hHmEyo562XdjyY5vNm/gYwHBX:geL+5pFZYYQgYwHBX
- TLSH
  T173A22B96CBC89315DF5E52BDF87209408331E056DE0BAF0B69AC913866E7F684F39271
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Vortice.DXGI.dll
- Size 88KB
- SHA256 dd342fbf3091e73f2ef285b34a80c3723a31182b64a2d86bfeb40da37bbf8f90
- MD5 1b5e08292968af0c319bc791152ce574
- SHA1 93dea84f9c7dd715c27722d84ae0e99c5a77bf68
- SHA512 933d14e5d9958ef3408ecaa671fb1463017b74f61f3a089b192321381bd54e752a5bd623fa2d07769d1d407826148ec2c3a925217dc731691c49192962c89e69
- SSDEEP 1536:A9L44XWQ0Mbig1S5JvVA+P5ZuQNxaSl/qakxsMc/0X08aa:A9c40MbiOEJvVA+RZuQ1qakc/wDv
- TLSH
  T12C93F8224EB9D61AE68F2B39F9F6B119C3B1D338B133F756544860A219D37D0CA37462
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Vortice.Direct3D11.dll
- Size 339KB
- SHA256 42f869c0cf15f1fb0ce34207228a718bb061583a6853a406a5cecf0a586a7fb0
- MD5 1493e19815f9358b27ac95a125d233a6
- SHA1 f56d8dd0bd647063a1cd20c0e3d95e86d666d7bc
- SHA512 69642d9622e75fe70f506987badb321dc5e8d79b46bf16b10aa8e7942e4912e1bfe3daaa3705b25f6edc743970e3c1651fd4cfe2f7b686d3ca20415995d6aa22
- SSDEEP 3072:KfFbHD/kljgT/cUhMGXL7B7e/NS2XVwBPKDFce5rnrUUNyf9ZT7fe:KfFvgacKMGXBy/NSVEnUUq9
- TLSH
  T124745C12BB9C9713EE8F42BCF062293342F1D9198256EB594490EE7A1CE37E55E0F5C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Vortice.DirectX.dll
- Size 261KB
- SHA256 014a4ba7a806ce7e9cffd5cbe7184c9e6ac70e14c23391f829bbb9603c4c6bf1
- MD5 382c8e9cb8a173a5939cef2face4915e
- SHA1 5481bb1c1bde5dc07dace9ac76d68fcff895e43f
- SHA512 3baf7555bfa33c39e17658175bb2385ef76f783fc06623724e492cba0d6beab8c3bfb2b390a52293e221e87a5b04f0652d7a96be2fb4098676467636510bc51f
- SSDEEP 6144:qjL9OLSosz0qBUPlzkPoNnZIdIH4qbwh:qjmpsz0qBskgydIHZbS
- TLSH
  T1B744E6E6BF041C17E80BAE7AEEB144C723B3310125D1745DB940A32C59DA6D3BA277DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Vortice.Mathematics.dll
- Size 115KB
- SHA256 3d3302d888d95ac3962483e48e3529abba98e0c9a5ef5a964be3b4d700fc1c7e
- MD5 ab2a9f369c1a0de7eef90a4b910c32a1
- SHA1 2e3c000a5e361615c8e05b04a6ebee68c6868673
- SHA512 bfcceda799c370eaa7197570b98fd9fa246b79caf5bad88f7a43813abd5e479503b01a36d1c265fec4b74837738b0022b9a2b437e7bc8067d522c0cf890ba551
- SSDEEP 1536:3dg9hbp/mMLF18ElZKDlwWMUDbLUblAPqNvxKihY2yF9FAz00KNpLKlj9L:Ng9hbp/1HlZKDWooKihpybF8KLS
- TLSH
  T145C3F7785BE89A7BCB9F8B7FB0550C35E634A02A5613F3E2968C44F8144378EA5056F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  runtimes/linux-x64/native/libcimgui.so
- Size 1.4MB
- SHA256 9c1a2f437b7de6c81dbc07562be5f9598c23d148d894a8933a207716a9e5468e
- MD5 13bd9f77489d5b4182c66a70cf3e1490
- SHA1 00b47b320d70858b5633897d5fa131c6796066c5
- SHA512 0e0974843299ba637283b37e9afa0f835e7a478c2d1cf6fb63ca9d96c9a0366a9f4b8b1448c9be76c61fff892e5734341a4d0d5998e81185eeb3cfd8d67aacf5
- SSDEEP 24576:DZYzeSshosl15ujWljWeJ8zEksXvbjZpS:DZYKS2Rl+jWljWQ7ksXvbtpS
- TLSH
  T1EC657E86F2A10CB9C4E0E4307057ABE7563138A0503459373F98EA3C6DD792D99FBB96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  runtimes/osx/native/libcimgui.dylib
- Size 2.5MB
- SHA256 05b93dbf8f1b7d1138e17187f2e88c54aa800b00b71925c65329cac74b3433fd
- MD5 4fade5cde74c7675448927e7188960db
- SHA1 e69d50c62bf1193a5e68356ab9a5a74baadc50c0
- SHA512 7ef6a4bc1027707320c962cff655ba06f30eed8f174e5efed728a600c9855b986358cd8d1b9947c14c53c7847b6ae8dc5bf7737d25893d71d786dbde4d5703fd
- SSDEEP 49152:cu5qvDVL5E9GEg+wdPpfTB3yMpgHWprjfTB3y8ppg6:Nq5L5EYEYFWH0JJ
- TLSH
  T1ABC5BF8269696859C2E1B03D91A34F872737B8B047209DD336E2B16CBFC1CE1357A75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32