701cb78d69972fb3426ca391f5ac9721e40c891a41217188341c64e7b2196050

Sharing

Copy URL Twitter E-mail

General

Target
Granny-SteamRIP.com.rar
Size 715.7MB
Sample260910-axmh5avxa1
SHA256 701cb78d69972fb3426ca391f5ac9721e40c891a41217188341c64e7b2196050
MD5 f288ecc4cc5d7132c5773ff5af17f672
SHA1 94466bd031620db6adc0951044fa1aa94e25c4b8
SHA512 c6fa8d8ef0b97f96d40cf7d7e5b573a53f18887da3e8450d4e5401f1832939b6d05f505830637084dfb40c4566d87ab65b236d147f5dfa0bb0b1b52560704986
SSDEEP 12582912:wl/t31kNw7qcseX86cLNBNrdMiCob0kz5j+YwUYPMbbRnW9CQUsLk+CL/91srRDX:wNnk+8PNBpPFb0kzR+YwUMMblnWvUUfP
TLSH
T10F7933AEB8667D93E0075377930E0F8BF27087E73B8771256139AA2978D1BA0163F514
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

ransomware

Malware Config

Targets

- Target
  Granny/D3D12/D3D12Core.dll
- Size 5.6MB
- SHA256 31f364f2b3aa1753e7ba9ff912d0721c8f424be5fa14503efddafbb30c635d3b
- MD5 f2ba8763a1ef9857c4d4b7cab5631edb
- SHA1 296b7e537d6e986a2e4021834fad3334867acf3b
- SHA512 44f272560e1dbc282e70cb07c87e95ca3a7ef41839ebd20194fc411c67626e9c54e6f4b261aed3670dd21c6829b56ebdd0d28319207834a236fc462f97d4ce91
- SSDEEP 49152:k6PExwEh3ElnqHtuNfXlOunv5YcoqqjThYiwQF0Q29DgUOkpiq0SpTqJQEnUR034:1GYNfC50LRgg1x
- TLSH
  T13B565B47B2E942D8F1B7D17D8FA74A0AF6717421632097DF12110B9A6E13BE04B7B3A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Granny/GameAssembly.dll
- Size 37.3MB
- SHA256 e260d044cbaad538dccc6767e7e4344cc3abeebe7c56723acf1672ba5dd7af9a
- MD5 8fc4742a16e3770a4e21ea1534c656c9
- SHA1 412bb76d043dde637cb9abdeac0d3bf253e5f11c
- SHA512 85945fe08cb3f3348db2eaf00420b79995c052873c62fe7d22885a4fa15ea9c426a8ad1f8b09d3aff562688dec71a83140b42ac2e41b371eceb5680e4fd25566
- SSDEEP 393216:+wTZ8Co/7yGJa3UfVm7/F0S91/qNMFcNVFWpss6LohBjGsn6zJ8LWKjhwPHw:v6ZDDa3UwB0S91/cXsn6zJRKjhwPw
- TLSH
  T1AF87174AB7758448C0AEE1789A13189BDBF13C405F646BCB20904B9D1FB77DCA87BA71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Granny/Granny.exe
- Size 656KB
- SHA256 4871133ada7f623e0ca3128459c99faf6414f5c0177e9eab4dbe80eacf2a3e5f
- MD5 a17a665b42ae4c8c5f21ce2c032cf5d3
- SHA1 f791ecd183faca2249dce2e1bf82e711eb422710
- SHA512 3c6f04969467560be7f0aeebea9cb7cbc91930c000ae150231bb72a73a94ae4cbbe92fa807cb4570143c8f74fec12fd6cb23112ea79b275ac98153539bff0226
- SSDEEP 12288:P2NCDdJr3d4auDfCSofvRrHgUG6o5/Gr2WDp:ljauSontHgRB/WnD
- TLSH
  T185E48D590F684CCFD2510A3805A0F379A2B45D722B26D3A7DBF59D773E25E832C4A4AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Granny/Granny_Data/Plugins/x86_64/steam_api64.dll
- Size 7.0MB
- SHA256 4e9d12d437deb68a7f0db73f4db2fdc03428ae8b2aeefbd65d577f4140688529
- MD5 bcaaf64313369574d1fe5bf3a5dca1e0
- SHA1 e3aaf940b4410b4be1b90aa0437cd896017c412a
- SHA512 3846e4cd2818858720037a7b6bdc2ac14f85a568894862491a96961c7394477bd689b89f85c6c5dfeeaa00bb2fe866224e015f8ca5740d6de34c60841b406506
- SSDEEP 49152:rFVX+2wmw6X8pSrhXzP72O0PZKogvk5WFJpQ12hNHEMGs7bw4jQP7GTGwbYsj75e:o08k52OKFW3pFhF19+nU9zsxQq
- TLSH
  T193761917E7BA01E5E5B6C1789553223BFD7134958334A7DB9B805A0B1B72BE0EA3E340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Granny/Granny_Data/Plugins/x86_64/steam_api64.dll.bak
- Size 243KB
- SHA256 2197363bfcf05fbdee84afd7dec6d58721587cb3dbf57c0f02b38e82c5cb5d41
- MD5 3a0b908e4d059125dd79d9014f5b67a9
- SHA1 75576f6a714b7255cbb4910348d241b90466b52a
- SHA512 a13d05eabf9a9c514217ddd3111891d63c333287476489c50a2dcc72dbe6f2f5a3fb7d5f1c67d860214e229fbaf34d78de911b3df75b821a86341359de6548ef
- SSDEEP 6144:3nGFfNdDpDT1bnqIzmpCL0P9yCCJ5aYM6:3GFfDp9bquQVyCCb
- TLSH
  T161342A69633108F6D5B6D13CC9915A4FEB71308B23219EDF2B94433A4E27AC17E3B295
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Granny/Granny_Data/Plugins/x86_64/steam_settings/configs.app.ini
- Size 1KB
- SHA256 ca0209ee09f2c504b0fc050b66eb9956a14941ad67b430e4bfdd667c2e0a793a
- MD5 a316a981879228acfeb199ef455bd07e
- SHA1 cc8035655b73bc2d7a96ebe9cb53573329d05460
- SHA512 e0dcd873612be0a6e3ed5d979dadbe6bd4be81f2308c00644a80b9e16a1463a65ac07f97b3ceabe9aa4e3d4c2953a68dd86606c8d198cd6af13fe49ae09a74bf
- TLSH
  T1BA21C2A2538DC2716F37C15665CEF1F73721993E2FF7BA95A44E4318011684184537A9
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral11 behavioral12
- Target
  Granny/Granny_Data/Plugins/x86_64/steam_settings/configs.main.ini
- Size 6KB
- SHA256 1d9f7c9bdb7db1ae6e285f45abc835279dd9d91f7540ffebe33a310ab28a47d0
- MD5 0bc747b83ea9e368428f416880234ba3
- SHA1 5926eb6d1b356be107c3ae33ef05629eb2f4797a
- SHA512 2d65568dd74e6f788db3195a1df92a6c4e4048166c9162deea764bcfac6c7e91b8c775908daf351e3eaf79817add3ed0f7860557c0412221295c819ad5adba8f
- SSDEEP 96:Mx3vNAIta876xKBxfR3U1Ttb16pM8ADLskSjvOsaZ4Q78iLLVDMnb280PjHxs6nB:Mx/NAI+k0sfjAJ78iROU+NEzT7rC+J
- TLSH
  T133E197A3730533B25B1145968E0FB2E1573990AA3F331568B09C864EA311D6B623FEED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral13 behavioral14
- Target
  Granny/Granny_Data/Plugins/x86_64/steam_settings/configs.user.ini
- Size 1KB
- SHA256 c51dc494965701afdfe96cef83c034b629c05a020fed541524afe8a3e6b7721e
- MD5 76d484ccf4401ae52089dce129c92a08
- SHA1 dd86595139ef577d5f91d85c71fbd66366de8628
- SHA512 8f6be3852d615dfd3aa0df05bb2207f97890a68a2d192dddd690374c7a387e4f887404d393e19e94927647eba0c947023d2936ca591c2635a21043eb7f713237
- TLSH
  T14F3176676B4503303F6212F5B84EEEC5831CA3DD1D77386832ED9304A2A1EE546327E4
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral15 behavioral16
- Target
  Granny/Granny_Data/Plugins/x86_64/steam_settings/controller/InGameControls.txt
- Size 339B
- SHA256 ca5a23baedd6052c43a7cab37b203e808a2606f15b7006f7675d111a28e1fcce
- MD5 d91839f4a9769454503cfdf294f0a427
- SHA1 0aa37830481f71ced14e4a362869ef4ddb17c24a
- SHA512 c0a72e66a6c72b49df1d648768da628baad25c49a0a6ca6fc2c6f74723850125b29dbc7d90e9021a3ad0c720db2bcb0062e6b062d418537631a8cc26b6de22e4
- TLSH
  T163E026F24BC21A011DFB0CFA602A9680D16580C7884704A7FBDDD44EF4E54C2808FC82
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral17 behavioral18
- Target
  Granny/Granny_Data/Plugins/x86_64/steam_settings/controller/MenuControls.txt
- Size 291B
- SHA256 93bcc5f7196c64b113ed6866f66d12e27722f0cb5a23549f56b05cfc8f810bc2
- MD5 ed8f5f1732d99f7e81d9ea38d9cfa73a
- SHA1 f360906165048e6b6b01ff2a71c4085b563988fe
- SHA512 451e7dd287ecdf5ecc95831216aafe22fdff96bcd3fe9254e659ec49c68d3c84bd57062b73d9b224fc6b3601c631a319534bb504e3d168e1bb0be968e9b7ca5e
- TLSH
  T1EFD0C288A784180064AD15EBE31E3560B990664C05A264A9C693B38F30D2426D1D7098
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral19 behavioral20
- Target
  Granny/Granny_Data/Plugins/x86_64/steam_settings/controller/glyphs/button_a.png
- Size 9KB
- SHA256 aad85589c65f4624c283f3c0cc86b31bb230bc26a9fed29412191c8fb53d339c
- MD5 82edcac3c186dd2366101130cb565fb5
- SHA1 fbc579afa1b96f6d4f2b24403b848f66a0e439b9
- SHA512 bbec1237bbfaeda043ea60d47fd147b17a5bff9d6f39288b8a5bcfcd0e048d173eda6587ed0a301727ad4e1a47831a2c979fd77ab99628d51912c023d0b5c149
- SSDEEP 192:lbJ8Cue5R1nsC/GqM4qhBnNTc87E5KCKPR77TeYuBn5FqyohcK66le7ez:lpuurnsgGqTqnE5UFTeYuBnTL3Naz
- TLSH
  T19B12C0E389C87BA002086C9D44DB4732A6CB335491DD836552B36F9B77EF1F6648C222
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Granny/Granny_Data/Plugins/x86_64/steam_settings/controller/glyphs/button_b.png
- Size 8KB
- SHA256 40193d449c6992c00454cd6844986007cd361e46c12a5e175cdd9fc1d61b3df7
- MD5 388324635d98c7d64d17748b7d9ddeb1
- SHA1 398a09995ce23f6fb8ca43fdf9fe3c51920dc1c2
- SHA512 82a6ad9e23ae13e5f34405ee5215f9b902bbb27b973ff32b7ce0af31181f814c7036c156280499658072d2048a48d86118e110b90524bc67e398be5b58362398
- SSDEEP 192:nQPktkHEzyQTvaB82GONElzeuPfXJpGLH4:3zLapGO2VnR
- TLSH
  T1B102AF259BF0707E485B56700C634E6A76BA68233C7EBDB353BD11A3166B4919B3023F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Granny/Granny_Data/Plugins/x86_64/steam_settings/controller/glyphs/button_x.png
- Size 10KB
- SHA256 d48cfbe44767c432b70a25771a8be0162e5644270047497b423cf8078a03378f
- MD5 fabb09eb751085a0aab83058e049f9ee
- SHA1 024fc68ce1bc6804b97322acd9dd8cbac05bcdbf
- SHA512 304ca994d2fd6905a05200493306fb21c5c12673a3342397ed9b4f6118a7acb73cbe632e1cf2e12151e6382649cc6940f152543b56e291650802ae08d4c79460
- SSDEEP 192:eqN0eTTUUzXXOBjP0CCKnproisZQ53+EPBSFf8UfRzBeV9H9ggLWno:e4TT9bOBjP6KnproXhEPkTRteV9dggL3
- TLSH
  T1FD22C1C752841F6B679698BC8CD8D7D45D9FCD0B850D9A943F79E44B0711A4DC0027AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Granny/Granny_Data/Plugins/x86_64/steam_settings/controller/glyphs/button_y.png
- Size 8KB
- SHA256 7710d3113955f6e1933c07e1495c412a4e1ab2deeba30b9ec8ed7a19e20a891f
- MD5 2d996ebd75689dce767625edfee08ced
- SHA1 ab4c9216c12f1e717184aaa8c3c55f3de171c657
- SHA512 99313db2cba17c737bdf4acfa32104608391fb9ed0c6121e840f3235b253bf04e4755cb4c73bbf561883a96dde96c76fbd377d94562d514b290b4956ce03e45b
- SSDEEP 192:VdMMtrN0hQHp/90Mh2q74gFXK5gvRakQdT3ssPkVJWpJTvjec3:0Cv0ov74gFXN5zQd3sxmpJfB3
- TLSH
  T16312BEFF866A6A0AF92A88DB180F0632728487ED5581409F9B60B18D17F703B1A25695
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Granny/Granny_Data/Plugins/x86_64/steam_settings/controller/glyphs/shoulder_l.png
- Size 2KB
- SHA256 06f4007ee74ed82e1327cb1b03cb740b0f4d23fd1de4c242e47b10493396f286
- MD5 e1aa5b8a915e4efd00f3db34219ff018
- SHA1 06f27fe2f0faaa74d5f36db78ede0e24bb6a8419
- SHA512 fbabac0c9f9f80d2c10481c84816db11e7460cfb8ddbb208ce9aaf4155b9c18898aef5c98d94f3a4817aa2a6f2c0591c51efae623a87c2afc5a065cb78ff6240
- TLSH
  T170512C5EFDE54C2C0CE43AB3D65D09686B7404A79B0DC66D5054619C1DDABBC838041B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Granny/Granny_Data/Plugins/x86_64/steam_settings/controller/glyphs/shoulder_r.png
- Size 3KB
- SHA256 d00995974d66bb5e2bd83cd3a4990dff3ec108b9eb86dc4fd4f31a2fb33b40f9
- MD5 ad42aed0b371c0aea2bb3575314c459b
- SHA1 c24785d464297727a8b221b97123919f38e8c0ae
- SHA512 7bd722e323106cbb9f763852161c1ec2325b6924baa15e979d73189c6211f16346045e0befd8f0fc3818c2f966894ca5663e10b8890ac0ebb541ef6b84f700a2
- TLSH
  T10C5129BFD1E6F036EEE6A2F91455507067F520454A493196938AB0534D27B3E42383AF
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32