9e7a8c51f84f9297c1125b6862dd5415794db1c837ae1d7deb6d7b353b3e7769

Sharing

Copy URL Twitter E-mail

General

Target
frostveil-1.3.2.zip
Size 110.1MB
Sample260905-wer7jszaqf
SHA256 9e7a8c51f84f9297c1125b6862dd5415794db1c837ae1d7deb6d7b353b3e7769
MD5 839aa24f8addcc41f0f1efd171bbb1e2
SHA1 66c13d7d11222cfeb287b0ddc203fb7574b0fd96
SHA512 6c9f2d2ab4d2f4534620cfb6974f32f0a0d8684c707dd8fe13e631c5d2a3ff88d6d520d7fe8d4df1bd8b24c4082e983719d0cb80c78e14fdf5bd40db38b17664
SSDEEP 3145728:0OTEGymOTHqPkyYqP+GKTTurDlClamr1bn7ImHGUP5rmV:0OTFOmskmTuq17t9ri
TLSH
T16A4833B5B93B1096FCA03F7D5F710C409616B2E102FAEA44D5E61F85ADC20EFAA5C817
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  frostveil-1.3.2.zip
- Size 110.1MB
- SHA256 9e7a8c51f84f9297c1125b6862dd5415794db1c837ae1d7deb6d7b353b3e7769
- MD5 839aa24f8addcc41f0f1efd171bbb1e2
- SHA1 66c13d7d11222cfeb287b0ddc203fb7574b0fd96
- SHA512 6c9f2d2ab4d2f4534620cfb6974f32f0a0d8684c707dd8fe13e631c5d2a3ff88d6d520d7fe8d4df1bd8b24c4082e983719d0cb80c78e14fdf5bd40db38b17664
- SSDEEP 3145728:0OTEGymOTHqPkyYqP+GKTTurDlClamr1bn7ImHGUP5rmV:0OTFOmskmTuq17t9ri
- TLSH
  T16A4833B5B93B1096FCA03F7D5F710C409616B2E102FAEA44D5E61F85ADC20EFAA5C817
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery persistence privilege_escalation spyware
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Modifies system executable filetype association
  persistence
behavioral1
- Target
  Frostveil 1.3.2/Frostveil.exe
- Size 107.7MB
- SHA256 1abb0d661ef469b57359522c3198ed0f99a6c5d229db538ae0c604209cabea6f
- MD5 67b48bc7f837c90e5c8aa0c6bfc5e977
- SHA1 79f75680d0f54f4978f04abec708122b592b2161
- SHA512 a352985b447f31cbf096d5ab0a14faa588bf7da7df98af7ec0227e2b0e6877e7d679327e21d8cb975ccb0d78b830e190b4fa3e7209cda5696121803e68b349e2
- SSDEEP 3145728:kKHWKU4xcwnKWK9NOcsrnq5NV43s2vbTIZ04N4IZQ:kKHPxLK1+nqqf49JQ
- TLSH
  T1D3483365D4B6AC09CC3F2174C32B829A55195E1EC921F06B65D07F38783FDCB2723AA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Frostveil 1.3.2/OpenAL32.dll
- Size 877KB
- SHA256 d328341339ed44cbbfc9203d4cb8110db0cca3ad8ce1247fe160cf411d130240
- MD5 ecd8798d97f88a6538778cb16dc64963
- SHA1 defba996cc4c284166fa20ba3107718db00a51de
- SHA512 45eccb3d8e64175a95b8575369720f2b684370706b90f05a174d41274c3c807bf03dd14cfc8dd561bd00c584f2371ab0f6ca5c38f16694be08b09978106da89e
- SSDEEP 24576:+GD08N2TZblt1a36c8/M3puBuAwgFpti336i:5N2tltU36c8/MQBuAvpti335
- TLSH
  T16A15E056B76540F8E9AB803981E3B917F3B5305713508AEB47A089283F77FE15ABB311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Frostveil 1.3.2/SDL2.dll
- Size 1.6MB
- SHA256 986acccbab7c997da26c494868008b25ee829af215b55cdf467487e483fbe358
- MD5 05389053d5692e74225cbfabef763a81
- SHA1 637a2b19b059f19192d9cd00064dd78720c49640
- SHA512 3f1ae56465ddec2124ea81f99532011f943826ec5b0aa2c991f6c99dfe0238c8d672e6a53a212cef090741f6162a072efdc8693cd4d1e03426a1827856d92d03
- SSDEEP 24576:ph35Tu2hRQiB4b37eMcD0+UXMHa9HrwPyYlR4KHoYaY:pR02/Qic7eMz84wnl7
- TLSH
  T1D9758D0EF3A208ADC92B41B1C6977716D2B575581FD0A7DB3B9407E92E337E0263A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Frostveil 1.3.2/license.txt
- Size 72KB
- SHA256 fbf03e4141999fbfe3d3e106fe41d71dd5b64c9d5e2948d6e40fabb4370f753f
- MD5 eaa8c7aea2d4e096fee600890eefaf9d
- SHA1 9db8c5261c4b57a4e190f4fec05e4524765c657c
- SHA512 9f3abdc4336c7a80f8a41e80c8b896f9f2e54f58be057d015f2d873d9f28e7bf64f88895fe27a8d8a869814aa703b5b462cd901b285c0fb0d529c45629a9c262
- SSDEEP 1536:UfTbZ/Xp+28CRZwBhxzNvi3yYjV7oKxnraxaAelTPsCVItcxhe:KZ/Xp+288wXxZaCYjV7JrSZedPsJihe
- TLSH
  T11273B52E774A03B22AD202516A3F98DEF32A9078362B1954349CC15D337BD3593BF6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  Frostveil 1.3.2/love.dll
- Size 4.6MB
- SHA256 f8d5d7e976ecc0ecf1870b5fcf4d25cdf9bd3621445a8b8fea54cb4ad5d79816
- MD5 db1d05295d7ad48180541aa2b962485f
- SHA1 dcfa0ecc58087731b1d445ec676054032d45a5b7
- SHA512 291b9b40cdbcfe4ede2d3899d30830a69c10d52663ab00d5b0a00bf0f2de4acddb0d2597248c37780dd5300caa3c22065c69c7a668cfca013f29c47c55f3a4a4
- SSDEEP 49152:QOo0+OeZdwU+wnY7ZIh16+rdrKyW92YelbtDbEatI4Pd6237GMcKSLgfTuGRSalC:zI39xbDg/YSR3L0w/C
- TLSH
  T139268E06BBB400E5C4B7D03C8A9B960BE6B274650B615BDBA198436D2F33BF05B7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Frostveil 1.3.2/lua51.dll
- Size 554KB
- SHA256 94fb3e3d4b1f6acce0110e46aadf1ecab1fa17c4ed1ab34caef3c5c2121c208e
- MD5 a36c56eb127720a994198f3eb810edd4
- SHA1 1ebcbdc1211fb40f73152030eb8ffa27d53c7ecb
- SHA512 a8e0d1d9976ced1191dd3775b0f4051e68091ec6f7bc4810820eb2f4b01ae223deb26613425281e893a9bba9ea8b8460c6b2f3322d5f9fa379e41879d6835c6d
- SSDEEP 6144:FBqp9OvdK+PSbgI1qBK5tl1TUdxaE17SA7knaXMwEd3oBi60b0Nj0H8qdP1/Z:/q+vd0hn1TSxaE17SA7YiEuBJU
- TLSH
  T10DC45B46A5350399C5A780788A578E5BE7B67C4403608BEF02E0B7A71F37BC517BB329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Frostveil 1.3.2/mpg123.dll
- Size 212KB
- SHA256 895664c5b5a7f4fe8dbd9e5ba8946296d0d42c2ef31b36a35bd9431c566fb772
- MD5 c6ca4e769deeb3b97bc0e7b202dfb8ff
- SHA1 ff01ad2bd432071ec21de1455803c9a7fb7fa8ca
- SHA512 b2460d456e4932d67329c80c1b0bedfc2cf916ccf4f82de4ee36a692f10d95d4c1710c2a3b727b067b2684ef1ea01c5e098d0a530275a2d9a86417dfd925a990
- SSDEEP 3072:OTpbCxfWMQjwP/3PsBrfSImZZ2h2sbj3R7pk1O0b1IRYd7hj9eqWxzQ962ij:OTpfGImZZ2h2sbj3R7eTI8d9Mxc91i
- TLSH
  T12B245B41F272CC9AD676103C5A1E6A9FF231385147548BFB03B467AD6F372C12EBA252
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Frostveil 1.3.2/msvcp120.dll
- Size 644KB
- SHA256 2abf0aab5a3c5ae9424b64e9d19d9d6d4aebc67814d7e92e4927b9798fef2848
- MD5 46060c35f697281bc5e7337aee3722b1
- SHA1 d0164c041707f297a73abb9ea854111953e99cf1
- SHA512 2cf2ed4d45c79a6e6cebfa3d332710a97f5cf0251dc194eec8c54ea0cb85762fd19822610021ccd6a6904e80afae1590a83af1fa45152f28ca56d862a3473f0a
- SSDEEP 12288:N2fus43uu43Ry4GHlT4xH2K+M+/i+WSpY+7YOzCaK9A3gS2EKZm+GWodEEwnyh:muJzCaK9AB2EKZm+GWodEEwnyh
- TLSH
  T11EE44C13FB150AB0E192D3B891D74741D7F1BC898822E70752ABE27D5F67391AA2F360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Frostveil 1.3.2/msvcr120.dll
- Size 940KB
- SHA256 ad32240bb1de55c3f5fcac8789f583a17057f9d14914c538c2a7a5ad346b341c
- MD5 9c861c079dd81762b6c54e37597b7712
- SHA1 62cb65a1d79e2c5ada0c7bfc04c18693567c90d0
- SHA512 3aa770d6fba8590fdcf5d263cb2b3d2fae859e29d31ad482fbfbd700bcd602a013ac2568475999ef9fb06ae666d203d97f42181ec7344cba023a8534fb13acb7
- SSDEEP 24576:FkZ+EUPoH5KTcAxt/qvRQdxQxO61kCS9mmWymzVPD:FkMAlM8ixQI5C6wl
- TLSH
  T10525BE4676A106FAD463D2B4C9A79607E2B2B85B1530D7AF02E0866D3F23B30975F317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Frostveil 1.3.2/readme.txt
- Size 4KB
- SHA256 9cf6172876b85771d0dd6463bd92786b77bd40510d817eceaf5ff459611ce225
- MD5 05cb183078280382adf73bfc14ad9c02
- SHA1 a3b8f8c84bc7a12514f5521958bc5e43b9abf4cd
- SHA512 332ce80a0c78bb2123af189be75c1d6b984a5ee7ce5c5f0c9503ccd17e2d61c9b8870d3ca34277460c6a1f3502dd564cf832a9d0b95ac8d384bdb89a6c838add
- SSDEEP 96:Ltg9ZT4kpgOq7veiE9aHoemrjDtAG1GpGT2QGTHG85/GTHG8QJOuf1:LSZUzvMaIekjDtAwgy2QyHT/yH6JD1
- TLSH
  T1CCA143BB5F02D7351F11E1C0B1CD65EAE66E4118B99B406CA8A5008D337EC5362BD7BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11