5e32b603aa4367c1d0c1d4bb819dba61dcce8241a19346a36db86f9d1b14bd8d

Sharing

Copy URL Twitter E-mail

General

Target
Microsoft.CrashCourse2_1.1.37.1_x86__8wekyb3d8bbwe.rar
Size 85.4MB
Sample260905-yfenys1flh
SHA256 5e32b603aa4367c1d0c1d4bb819dba61dcce8241a19346a36db86f9d1b14bd8d
MD5 99ac65c75c7fbf88f56058e27f4645e7
SHA1 43e4c2db585eafdad98b9f96f348bbf70c67aa18
SHA512 7a6ef913187b4429714d01b3f1b22cc6bc7907f2698b8f0ae7a220fb4eafde8d622ea6b06ad5c68dfdad05c75610e17d4299a8f806db09cf2f9396dcd66f292a
SSDEEP 1572864:fX929t+WczYr3tn9wG7dhnlUba4hIhF4rBcKvWsRyQkgpmyV9ivNj9Ud8Sn1nr:/MyWcMJn9nlT4hIhuriDsRyhgpmlNdwx
TLSH
T150183311F234F4D6AB32A5B08057550A98046982E24BC77EF8F56DFF24B35836F6BB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  Microsoft.CrashCourse2_1.1.37.1_x86__8wekyb3d8bbwe.rar
- Size 85.4MB
- SHA256 5e32b603aa4367c1d0c1d4bb819dba61dcce8241a19346a36db86f9d1b14bd8d
- MD5 99ac65c75c7fbf88f56058e27f4645e7
- SHA1 43e4c2db585eafdad98b9f96f348bbf70c67aa18
- SHA512 7a6ef913187b4429714d01b3f1b22cc6bc7907f2698b8f0ae7a220fb4eafde8d622ea6b06ad5c68dfdad05c75610e17d4299a8f806db09cf2f9396dcd66f292a
- SSDEEP 1572864:fX929t+WczYr3tn9wG7dhnlUba4hIhF4rBcKvWsRyQkgpmyV9ivNj9Ud8Sn1nr:/MyWcMJn9nlT4hIhuriDsRyhgpmlNdwx
- TLSH
  T150183311F234F4D6AB32A5B08057550A98046982E24BC77EF8F56DFF24B35836F6BB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1
- Target
  Microsoft.CrashCourse2_1.1.37.1_x86__8wekyb3d8bbwe/Avatars.dll
- Size 784KB
- SHA256 6486890b766052b7e4d671317bb80c155ba4a4469f84add138f4d2df7a36e205
- MD5 aa848d5ba3f5169616d80758ac31df6b
- SHA1 63692ea0e9520c00f5892b33ca8163af42ed2246
- SHA512 aa7501673f14cfc6ce7cd702e25ee3006ea4a5fe7fe2a59de348f27305f298099619d7eec325d495e210e85f889442f3537719935364635d68809db22179426b
- SSDEEP 12288:QWucH5oDREdegF9LVf85Wb9v0H413OKMxitJfTirdp36:QWFH5oDREwE9lqxMJbwd56
- TLSH
  T1BF059E03A6C1A937DA2D0331CEFB7B79717DE3551956CB0B9E581A2D2DE33C04A6220B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  Microsoft.CrashCourse2_1.1.37.1_x86__8wekyb3d8bbwe/Crash Course Go!.exe
- Size 4.9MB
- SHA256 05d5a7c42474ab428126d0aaa1ab6ddaa2881934c0634ef4f119249b2ad39749
- MD5 2af32c819295fadd6ddbf56729aef861
- SHA1 6daf6ecf91cc7ddb82961c0eb04dbbac539dffcc
- SHA512 3fb8f00fb24daa0a8e614ab7f7fd615cee807d5b7706d44bda537918afa7cda6f9797372e0e810f63f5c4c9a2b0deaa35158fa3f0c07b89a672898117958c92a
- SSDEEP 49152:X8PDK6HfJjT6jbWdN5KTR0PCmkWpC8uv8/77Kaodc8YRekv777krTlmDtxXVGr4D:X87jHRjmHWduTR0lknBE/XKdOxv777k
- TLSH
  T19E36AE00BB4BC172CF5109B554996B4E906C97984F2A69D3F28C2E9F5D71AC32C72E8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  Microsoft.CrashCourse2_1.1.37.1_x86__8wekyb3d8bbwe/MetroDoritosGameDefinition.dll
- Size 76KB
- SHA256 075e8a9e77bcbcf06c91ef6c23fa045a601e581965696ef8987f054eaf951aa0
- MD5 1f57b067f119a85e8e54ec75781fac40
- SHA1 5f9f21b68d5dd1664e8b011c3814b548c31b8973
- SHA512 3ef079c16f351ee739c773c31f9aaaa1da28e955eced63a2ecce6b1fa74d36e34ba8ec6f5b43c9af983890ef1c501381edc173a32d455fe32c6c6d47aa6785ab
- SSDEEP 1536:8IMwkW5TTLbXdKOyPkKASI5yEn2p/2I7XayEFrM9:yjETpKOpuILnXCz
- TLSH
  T1B173F11319DF81DAE0B5A7B842E15016B913B8275B33992B018E344D97C7E626CC7FF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Microsoft.CrashCourse2_1.1.37.1_x86__8wekyb3d8bbwe/Microsoft.Games.Sentient.dll
- Size 422KB
- SHA256 b25bb0b081cf65cd2f8c66e9298ec11d0e95dd7a7ede67d1500bcbd963af1016
- MD5 ede49fa52abf690764c8394181da3764
- SHA1 4a520c37456948c74d10fbf6f9a5afa7a8803137
- SHA512 597f7a4f3f0a19276b8e323a7ad3c98fe4692525f086d4f51a1be9a7d8c53f66a414f020374b02abc61b6d203e3adcbc1e3c1cee477851e43b60e2ace82555af
- SSDEEP 6144:rr5rSeNbFnanun+3dhbNAA5aufLDsJYyJp9I1FNpi40pRcl/iS8UoEFucJ523Pca:E+nanMWxwYyK1xnlCIm
- TLSH
  T1B6940920F75DC636F9AD02727A389B9F401A7E854BE9C5D7A398674F0E221C21F32917
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  Microsoft.CrashCourse2_1.1.37.1_x86__8wekyb3d8bbwe/Microsoft.Xbox.dll
- Size 3.8MB
- SHA256 c60cfb494d795d31aa1cb18d963bc7a302091ff63b9ee3ee664667ea4d62973e
- MD5 a86e76ed7bc714c814f21beafde8a635
- SHA1 9ffc74f2fd2644b2c19ddb66fe19523c049b682d
- SHA512 db4b781ac2c3062182ce9226e268cec17dc71c6f0768b2935ab5ca69170480cb45577fbe7d5c2e41f8b7e9f9592ab033e0573b031b838fc2acb78deeb11563f8
- SSDEEP 98304:4iJxH2MhbuHHaaksCGP0L6LlMNK55L8qzPahtgmcmVteYDrwSx56HXiU7FBwzmIi:yDUKR/1J3p
- TLSH
  T1DB06921237E84959F2F71FB3AABBFA55487BBE251D34D26E2114054E0AB1E618C70F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  Microsoft.CrashCourse2_1.1.37.1_x86__8wekyb3d8bbwe/fmod_eventMetro.dll
- Size 334KB
- SHA256 33ebfc41a8df0091c4fe023dabd040817570fffaf7effa8d9852653599e72aaf
- MD5 357a8601bc99abf08b114245fb08ad70
- SHA1 ec27302b7c42139c78ebf8bdca9f87b456c50a1b
- SHA512 9eb74bda95914b8de182c57799a9f2b1e177ff5cbd80a037530434d4ec1169f697c9544b53731297f157d34b5c09059c35cf02c4e6bcfbc42d9d78f44edfda9a
- SSDEEP 6144:FcObdmEySmqSeDfc5RbHvHGaXyCWm/GMe48o3eVEyJ+/q9eQg4fSrbesCGLRsZyd:VAEy/qSWEjXXRXGMP/9
- TLSH
  T1A7746D11AE4185B9ED85A032ABAC373BA07DC6F6173812D7C7681DF459712C33B392A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  Microsoft.CrashCourse2_1.1.37.1_x86__8wekyb3d8bbwe/fmodexMetro.dll
- Size 1.2MB
- SHA256 b29f5b5a91ef156479a011e74581787040f5671e4c7cc2aefb7cbbba3efa2026
- MD5 2a55cac9082d3e5663576c8b5c6434af
- SHA1 9cf8f0198ae59b4c786a7ed2f9be4171c36da53c
- SHA512 f4b649d2d79fe69028091dfaff7902ee6d493df7446913afbca691d5c0f605f79e4b35c670471902237f4922a13f7aaebc7960efda58dcf08a76efb3fed44ac3
- SSDEEP 24576:OSO9+SQ/NcGkBEeDI7Klz94TB1LmkTarr0lDV:CFUddl
- TLSH
  T1B8459D60FDD1C1F6FC5A5132B6AF3B7B65786BAA071C22C393A40D689CB01C26BF4255
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8