63356c4a80b6b3224a57078b5ad1cb393b8826521c26da88288c84cf4763d7dc

Sharing

Copy URL Twitter E-mail

General

Target
GTA 6.exe
Size 83.4MB
Sample260905-yr9cpsfg33
SHA256 63356c4a80b6b3224a57078b5ad1cb393b8826521c26da88288c84cf4763d7dc
MD5 86f1e7a206452a02ffba7f3b84d5d16f
SHA1 d1b4e768576dbf068ae9fded41246a26d6a4e6e2
SHA512 c93bbbcf7922d197aca226173ce795fde06e72133d549b00c8d5623b46534e3a16f18091f21646d650fc621a90c4ba5add8908e4248cc5476c644e0512867b1d
SSDEEP 1572864:2bCfKtdj3eUar+mUWVfyHA6sYr3ab5sCiprLUoQalsjvYmxEU7xaHzubq:2bCfKfzeUaFRJyHEYWsnNgoQalijuue
TLSH
T1CE1833F051F3C593D06F967EAB90D1B44DAFEE68A2E08097012D3B50F12D94E699E84F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  GTA 6.exe
- Size 83.4MB
- SHA256 63356c4a80b6b3224a57078b5ad1cb393b8826521c26da88288c84cf4763d7dc
- MD5 86f1e7a206452a02ffba7f3b84d5d16f
- SHA1 d1b4e768576dbf068ae9fded41246a26d6a4e6e2
- SHA512 c93bbbcf7922d197aca226173ce795fde06e72133d549b00c8d5623b46534e3a16f18091f21646d650fc621a90c4ba5add8908e4248cc5476c644e0512867b1d
- SSDEEP 1572864:2bCfKtdj3eUar+mUWVfyHA6sYr3ab5sCiprLUoQalsjvYmxEU7xaHzubq:2bCfKfzeUaFRJyHEYWsnNgoQalijuue
- TLSH
  T1CE1833F051F3C593D06F967EAB90D1B44DAFEE68A2E08097012D3B50F12D94E699E84F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  $PLUGINSDIR/SpiderBanner.dll
- Size 9KB
- SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
- MD5 17309e33b596ba3a5693b4d3e85cf8d7
- SHA1 7d361836cf53df42021c7f2b148aec9458818c01
- SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
- SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
- TLSH
  T1FF12D6861F9044F7E510607CA896B7EF93177B2AA382ADCBCE73849429115E32F79347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/app-64.7z
- Size 82.6MB
- SHA256 0de9f8459e5ff312ac6860b0d4bf57436a64f5d3f579019877d5187be148ad1a
- MD5 fe99d6939e378a16deec1b3e9386c215
- SHA1 8202e054fd1b964ce55d7ac7a13c72c2cb8ac648
- SHA512 05f2fe29f2ab5a730db3f9409b8dfb1db28e0da6783573b9b05610229c1ca0c106155abe6fc8c1c7c47b268d86d0b401708df632319a5876c9c626c2c1ad246e
- SSDEEP 1572864:HCfKtdj3eUar+mUWVfyHA6sYr3ab5sCiprLUoQalsjvYmxEU7xaHzub8:HCfKfzeUaFRJyHEYWsnNgoQalijuuw
- TLSH
  T11C1833F452F3C996917FD67E6F90D1A44DAAE87CD2E0C09B042E0B50F12D64E398E85E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  GTA 6.exe
- Size 178.0MB
- SHA256 01c13104d1bf0f2e1787b37ed87add7ac09861a32b7e7ee1ec50505e3c049514
- MD5 a5f50f8c2c1503745254721b2124095b
- SHA1 a33e440ceab01f85b7ce5f58cad73c0f7c241264
- SHA512 2bcc9773d865650b5c2acc5a9af160857645fb81aaf77e53ccfd590eaab113959a87c9504f628518cd0bbbe2ac8de10c1e457d4dd1336894c87a1d8770bf1e90
- SSDEEP 1572864:B0ORTnjSB/Ttde5oe7JyhLfYE1xX6BSgj7zIH+r4VOv1QsiLBRzDlJXlSubMXEsZ:iVKQxx9
- TLSH
  T1AC989C03F2D610D9E05DD1B19B8B9633EA72B8464728B2DF26540B562F77EE42B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral13
- Target
  LICENSE.electron.txt
- Size 1KB
- SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
- MD5 4d42118d35941e0f664dddbd83f633c5
- SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
- SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
- TLSH
  T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral14 behavioral15
- Target
  LICENSES.chromium.html
- Size 9.0MB
- SHA256 b1ac2fb5c8f0407ec73ffbfcff46aa634a3acf034eb10ef3f69cf483f43e591e
- MD5 a6788c05c8f55285267442473bc145aa
- SHA1 a19630a8a0536a80f095e0be19b5a21b9f8b7945
- SHA512 c7125e3062ce1591a646424e6f7fca36f0559cfe37197ad10f74415471916dd6d386b8d3f9c15accd43f678777b8a6f7c515be28f13b97d200942e5f13191d90
- SSDEEP 24576:c4QQf6O36j54wRaXe1Vmf/6k6T6W6r656+eGj7/4po:xseGT
- TLSH
  T12CA6A52F7B48037306C642627B8B65CAF21E903F3B561A54345CD1681F6BA2983FF6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16 behavioral17
- Target
  chrome_100_percent.pak
- Size 147KB
- SHA256 14a6a393c60f62df9bc1036e98346cd557e0ae73e8c7552d163fa64da77804d7
- MD5 3c72d78266a90ed10dc0b0da7fdc6790
- SHA1 6690eb15b179c8790e13956527ebbf3d274eef9b
- SHA512 b1babf1c37b566a5f0e5f84156f7ab59872690ba0bdd51850525f86769bfebc245f83988a3508945cf7617d73cd25e8469228974dd2c38415388b6a378552420
- SSDEEP 3072:Mz8JCGIdkwTPa/XKjKkxP1L2o418Gb0+VRLf0ld0GY3cQ3ERVm2I:Mz81Idk8a4Kkx5K18Gb0OV8ld0GecQ35
- TLSH
  T126E3E1D7B3F4ED7DCAA756F7A2260071ECF3462C0A92124B178AD4352A66748DCC8783
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18 behavioral19
- Target
  chrome_200_percent.pak
- Size 222KB
- SHA256 20c93f2cfd69f3249cdfd46f317b37a9432ecc0de73323d24ecf65ce0f3c1bb6
- MD5 3969308aae1dc1c2105bbd25901bcd01
- SHA1 a32f3c8341944da75e3eed5ef30602a98ec75b48
- SHA512 f81ed1890b46f7d9f6096b9ef5daab5b21788952efb5c4dcd6b8fd43e4673a91607c748f31434c84a180d943928d83928037058493e7e9b48c3de1fc8025df7f
- SSDEEP 6144:HDQYajN6svyABnI86uKkxugx5GMRejnbdZnVE6YoppO4:sfjN6svyABTKkxa6edhVELoXO4
- TLSH
  T1F424F1C7A3F89D7DC9730AB3522601F1ECB211394AB6521F53DB9C357996AC988C9383
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20 behavioral21
- Target
  d3dcompiler_47.dll
- Size 4.7MB
- SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
- MD5 a7b7470c347f84365ffe1b2072b4f95c
- SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
- SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d
- SSDEEP 49152:hCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN1:oG2QCwmHjnog/pzHAo/Ayc
- TLSH
  T13C367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  ffmpeg.dll
- Size 2.8MB
- SHA256 94efdb523162f7a55884f6bc423012f3dd046f85504deccfeef59603307db71b
- MD5 5253864a60577a0aa98db449cd7c6440
- SHA1 f4423def8024c5015367747c624d035a214ef49d
- SHA512 1af68134a381499134240d9ac42874005012127a81ba77ac3f1497509ba298bd092d7a17e49ca831865034d716ff156186c5547dab1ab8484431bdd1757baaef
- SSDEEP 49152:/tOSF+Xn6Rjc8E+E4Og1JytTbEcS2E+X6CftBJyN/4O5Isy:/t9cWOgTyZxzZO/V
- TLSH
  T166D5BF03E6CA50D9D029D071979F9223F631344A8F2567EF16905A213F6BFD82E3E729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  icudtl.dat
- Size 10.0MB
- SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
- MD5 ffd67c1e24cb35dc109a24024b1ba7ec
- SHA1 99f545bc396878c7a53e98a79017d9531af7c1f5
- SHA512 e1a865e685d2d3bacd0916d4238a79462519d887feb273a251120bb6af2b4481d025f3b21ce9a1a95a49371a0aa3ecf072175ba756974e831dbfde1f0feaeb79
- SSDEEP 196608:+SPBhORiYAXHiXUxY/iJ53IWhlVjEeIu2Y6U:++wkpHiXUxY/iJ53IWhlVjEeIZU
- TLSH
  T160B63807A2FB8DC6F9F76F30E8F452679567BD496E32805911042F3B1D332A08661BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24 behavioral25
- Target
  libEGL.dll
- Size 473KB
- SHA256 c9f1fb6b4ded3404ad29e629874ff05852f48f82ac33ba606847cac0ebef79e4
- MD5 cc528ba62f3867b7ad803ff22a6e1c08
- SHA1 e13118e48060a58bff0f8d5c8394a3ff7b60cc95
- SHA512 79f74d6f951624b3f8575acff6612aacae1e9f3e32b0abf9ea9688887666097429bf35d8eedf9ad3970a30957696eafd747020c6bebb76e2fd9b2d2e8526e0ab
- SSDEEP 6144:f5M81DtTHzR8J6E8cmqLD0x9cDEZAw6wu7fPbAT1TAswwdph:BMkBB8JB8cmqLD27ZOwu7fPbAuZwdph
- TLSH
  T1D0A48D1573D444A9E06BD1708A574643EB76B4920B65FBDF02A092392F7BBF89B3D320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  libGLESv2.dll
- Size 8.0MB
- SHA256 c636de2892cb651220331734ecc578003dfe31f6ed528ffffe66370b2114b086
- MD5 f7aa9fea497e88d41e61cd5090bcba53
- SHA1 54a9f86943d1c496d3a73dc888c39df7830194d7
- SHA512 6adf7de3f6462b15c7ccec8d4858d30f3cf042dd5698c248ee371b750896c222f7720c39b787200136eff80438d0fe977d1278f49aebb90d19ba9ada79175861
- SSDEEP 98304:6nXvuO/so95HjrmniuxV0OADYDOnOQP7sG+XC3OT56:6nXvj/so95DrIpgDfnBsvmOQ
- TLSH
  T156867C03F69680D9C04DD2B8975B9623FE3178990734B6CF269017292F77BE06BBA714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  locales/uk.pak
- Size 952KB
- SHA256 b76695b9352440d27c0319f59cd66df2d8d76eb1162d5f78a8374748562ad210
- MD5 1ac5ee33a091d5c44ea7b0c9dbcf01cd
- SHA1 97eba903ca99c5764ac11fb075eb06fcfe7fffdf
- SHA512 74c72262cdf2d9e02e91490d03c1801416851150a910221cb5cefc4ac5e7f888978d0ccb7583f98d7abd54695a97279b91a4bd466d1fa5a0d66db19212712278
- SSDEEP 12288:7MHxyqFx4gaqwmsSr+rhqdgZ0ZYd0IniML5iB3IjsHAf+rTjuuKLNiXErqXYjgX:7MHwY45kr9
- TLSH
  T14D2599A19A9D58DF0106F05BE84C7A0D7DA741FE7FA6471625A43DBF38F20248A3C35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28 behavioral29
- Target
  resources.pak
- Size 5.4MB
- SHA256 c8cea345bb0b6878b329c9ffa0a1d0e99036bca70ba40ac7be5842ac3ffe45d6
- MD5 3c1b2f7b2cd5c7608ebc5954a853f964
- SHA1 3ad812cd6e5e1d41efbc4c0ae0f68eaa9f2f73ef
- SHA512 6fc999e482e97019b03704db5b0e8e8278769b3a23df15f93a58c6cb33f7576faa32a6f9b123e6917c26ff289693922168fa3b839a497ee529f65d77a061eafd
- SSDEEP 98304:snNlfLKTPeIoXG13gkPOGuKJSml2rwrxySNYtu397pE2RSvc:YlfLKT1gG1nuKJSmQkrxOwkvc
- TLSH
  T15346338AB7261D3BC8AD437B48AC45331AADD93A0610B857724CE0746E273DC5BC95BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral30 behavioral31
- Target
  resources/app-update.yml
- Size 97B
- SHA256 56ef0667852774d432f3e4b69eb02bf42d08efcfa223910565665984da39e93e
- MD5 688ad569eeeedc6b49fe245f38b4a15b
- SHA1 57a8c6c98d2c28347b08bc84beed271b1648cb11
- SHA512 2b13022cd965bb4c5929e7619596a8c02d8f774401084003f2071033c4acd4f827e11a39f7a3bcaeda55e35ce1edaacc596a82bbfc5f92b2d4c90a10f9245e72
- TLSH
  T1A7B01260834CE4306E738824344C08B0255A10A3E2810170E4E61729905385208890CE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32