General

  • Target
    FruitNinjaFX.zip
  • Size 224.0MB
  • Sample260906-2x7mvadf54
  • SHA256 3b873ef0a0757442e329867cafd618f2501b97596aff85b6d444a82c9b8eeb6d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      FruitNinjaFX.zip
    • Size 224.0MB
    • SHA256 3b873ef0a0757442e329867cafd618f2501b97596aff85b6d444a82c9b8eeb6d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      FruitNinjaFX/arcade_results_numbers_0.tex
    • Size 128KB
    • SHA256 ca0734a343a8a8781cc3d80959564e44e9bd8ef6625d2b336311e2ad0a4c7544
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/bronze_numbers_0.tex
    • Size 128KB
    • SHA256 d2afc487ba7f3e0c465820168d504d4074cbc8a3f4027c48361df1de780fadab
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/electrofied_medium_0.tex
    • Size 64KB
    • SHA256 361e908a4f6a22b5f467590de539c046c63f7f75e3261b49788c8c412e6c64c5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/font_fruit_ninja_0.tex
    • Size 256KB
    • SHA256 f07646dfb861ab4c1fbd8d817de8adedbdf862412dd3ee0ab99387b0c706d298
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/font_fruit_ninja_00.tex
    • Size 4.0MB
    • SHA256 a747e38e2aa821048d6cb4bb6c7c12a67d24d02284d063dbbc4e1868334822b3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/font_fruit_ninja_01.tex
    • Size 4.0MB
    • SHA256 676035ffedb4f91a97e6629d42ddef04248c554b24f4663ac56c895bcb0c007f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      FruitNinjaFX/font_fruit_ninja_02.tex
    • Size 4.0MB
    • SHA256 74e07e25ad8a7d36a855564b5265495ad5be18a37beaf93a5b9d3e9a550c4fab
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      FruitNinjaFX/font_fruit_ninja_03.tex
    • Size 4.0MB
    • SHA256 e0568b3efed252664b87296734251d5c78a2c422da888abcdd96c888d4f85cbc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/font_fruit_ninja_04.tex
    • Size 4.0MB
    • SHA256 8f67781f283e941521773b2cb8bdad8ddd6dd81336094a004d97909bd4f92231
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      FruitNinjaFX/font_fruit_ninja_05.tex
    • Size 4.0MB
    • SHA256 a4ceaf5b93c3ef290345d7d0913ed1c7e329ebdcece529d533960c82034e2363
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/font_fruit_ninja_06.tex
    • Size 4.0MB
    • SHA256 cf1e0bcb04d5d920fd362396f00f16fd20acea6f9b52a8fb1b7be139d30c0b50
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      FruitNinjaFX/font_fruit_ninja_07.tex
    • Size 4.0MB
    • SHA256 6e1638b7e4b613ee6396319a0d67a91066611811ea891d975c226fefee471332
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/font_fruit_ninja_08.tex
    • Size 4.0MB
    • SHA256 7fb8e4404eaa486ab7dbee20cdb9481415f0a7db3c1077d72be27182d98a7809
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/font_fruit_ninja_09.tex
    • Size 4.0MB
    • SHA256 010652bcb1e968e3aea1a97afe81f872026afa9b5b742e589f535809b0ad64e7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/font_fruit_ninja_1.tex
    • Size 4.0MB
    • SHA256 3e158985a84becaa7b8f255eab59c2dd7b47beb1ec6924040258208f48bd5b3f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/font_fruit_ninja_10.tex
    • Size 4.0MB
    • SHA256 c957c7d253547d1c4496e75a17364b639c255d55ed71653614c08f4f87d341cd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      FruitNinjaFX/font_fruit_ninja_11.tex
    • Size 4.0MB
    • SHA256 b68e6ab08e1394a775daa5404f89d4b56dd6e6651237dbff7aa44eaf7e677720
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/font_fruit_ninja_12.tex
    • Size 4.0MB
    • SHA256 41705cfa601b0d9b7cced20143f6d6fb9b08999c795b89775d000e672f98e204
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/font_fruit_ninja_13.tex
    • Size 4.0MB
    • SHA256 824d1ce72d6d72e244384fcec46d2f439272f8abb5bab4613e1333390a9256c0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      FruitNinjaFX/font_fruit_ninja_2.tex
    • Size 4.0MB
    • SHA256 b27b67dd314bdea41212dead12183bd4ac5d64e61039fcbe3245eaac596847a0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/fonts/arcade_results_numbers.fnt
    • Size 1KB
    • SHA256 7deeba5612e63c5626227eaf0401aef86609dd07537e38109ea1a527c1fadf4c
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/fonts/bronze_numbers.fnt
    • Size 1KB
    • SHA256 27910719193209226025ad84437bcee21d9b7f4bbb7ec5fa7093c9ecdf79ddc5
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      FruitNinjaFX/fonts/electrofied_medium.fnt
    • Size 13KB
    • SHA256 0ec1404dd431b59a901a7ba61fb265f5415d79343e24dfa963bead1b5907674d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/fonts/font_fruit_ninja.fnt
    • Size 257KB
    • SHA256 022e92b8abdd1a57063bb4d3aa2147cbb7dda103dab5b7da217630d09d8670f1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/fonts/fruit_ninja_numbers.fnt
    • Size 1KB
    • SHA256 f3cdd160153a280c63f96cd3b06dde6597aafaf14b78fc8a55777032cd0a6b34
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      FruitNinjaFX/fonts/fruit_ninja_numbers_blue.fnt
    • Size 1KB
    • SHA256 73204e5c01d18d629cc1ed6216b3645c5e1d6541a40db79311b58ed4ab5810de
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/fonts/fruit_ninja_numbers_blue2.fnt
    • Size 1KB
    • SHA256 678c57529434b7128a8bb664180e52a10f0b557be38344d8de0ac6c76337480b
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/fonts/fruit_ninja_numbers_green.fnt
    • Size 1KB
    • SHA256 3c7f9e7fef433c6f881782668711d33f49b91c6d3779973716f6fdade208a4a8
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/fonts/fruit_ninja_numbers_red.fnt
    • Size 1KB
    • SHA256 5bb1efd4f30a29cee2da708cb1e0713d9fe26eddbf327ae9b2dddf282bf6c5dc
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      FruitNinjaFX/fonts/fruit_ninja_numbers_silver.fnt
    • Size 1KB
    • SHA256 6e30549bbc3d8053764beda1bb84595a22dc78234051fe3bb24a9ec5277d8e0c
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      FruitNinjaFX/fonts/gold_numbers.fnt
    • Size 1KB
    • SHA256 9e8331979fd3bdbfb824d148f645b2485ff6cac42dfa244c53a8135707d909bf
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral8

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral9

execution
Score
3/10

behavioral10

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral11

execution
Score
3/10

behavioral12

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral32

execution
Score
3/10