854dbeae0dc55a95cc55f162652bb80fbb2bf73c641500fca36b409a7fc85cba | Triage™

Login
Reports

Overview

overview

3

Static

static

3

D3D12/D3D12Core.dll

windows10-2004-x64

1

D3D12/D3D12Core.dll

windows11-ltsc_2024-x64

1

Naughty Be...ources

windows10-2004-x64

3

Naughty Be...ources

windows11-ltsc_2024-x64

3

Naughty Be...s.json

windows10-2004-x64

3

Naughty Be...s.json

windows11-ltsc_2024-x64

3

Naughty Be...s.json

windows10-2004-x64

3

Naughty Be...s.json

windows11-ltsc_2024-x64

3

Naughty Be...nk.xml

windows10-2004-x64

3

Naughty Be...nk.xml

windows11-ltsc_2024-x64

1

Naughty Be...bundle

windows10-2004-x64

3

Naughty Be...bundle

windows11-ltsc_2024-x64

3

Naughty Be...bundle

windows10-2004-x64

3

Naughty Be...bundle

windows11-ltsc_2024-x64

3

Naughty Be...bundle

windows10-2004-x64

3

Naughty Be...bundle

windows11-ltsc_2024-x64

3

Naughty Be...bundle

windows10-2004-x64

3

Naughty Be...bundle

windows11-ltsc_2024-x64

3

Naughty Be...og.bin

windows10-2004-x64

3

Naughty Be...og.bin

windows11-ltsc_2024-x64

3

Naughty Be...g.hash

windows10-2004-x64

3

Naughty Be...g.hash

windows11-ltsc_2024-x64

3

Naughty Be...s.json

windows10-2004-x64

3

Naughty Be...s.json

windows11-ltsc_2024-x64

3

Naughty Be...p.info

windows10-2004-x64

3

Naughty Be...p.info

windows11-ltsc_2024-x64

3

Naughty Be...config

windows10-2004-x64

3

Naughty Be...config

windows11-ltsc_2024-x64

3

Naughty Be...nity3d

windows10-2004-x64

3

Naughty Be...nity3d

windows11-ltsc_2024-x64

3

Naughty Be...ta.dat

windows10-2004-x64

3

Naughty Be...ta.dat

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
0-1pre2_2-win.zip
Size 228.7MB
Sample260910-sja72s1fkc
SHA256 854dbeae0dc55a95cc55f162652bb80fbb2bf73c641500fca36b409a7fc85cba
MD5 0b86df08d15a7e13ec39948a72ef325e
SHA1 af9539f0eab77ab0961e5622e1cf55fae96dc78d
SHA512 a79c5147f3eb2063e9f07b57ab04ffa375fcc2a69f8343dc0f1310c4c73517e6f55d44443519cee120a68b7a2803dd5cd620ec6d308199fdfc9011f0857046f1
SSDEEP 6291456:2lFNspkg+hUawpIbcnblwkcIizUFd0S9NwDC0ukmTLM:1pb+CpIonYTzUjhzwm9LM
TLSH
T16AB8338B6667E2B27F3AF3280988555DDB3AD86C212535F0A6D00D36C38D3E9635F50B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery execution spyware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

D3D12/D3D12Core.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

D3D12/D3D12Core.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Naughty Bear_Data/Resources/unity default resources

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Naughty Bear_Data/Resources/unity default resources

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

Naughty Bear_Data/RuntimeInitializeOnLoads.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

Naughty Bear_Data/RuntimeInitializeOnLoads.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

Naughty Bear_Data/ScriptingAssemblies.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

Naughty Bear_Data/ScriptingAssemblies.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

Naughty Bear_Data/StreamingAssets/aa/AddressablesLink/link.xml

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral10

Sample

Naughty Bear_Data/StreamingAssets/aa/AddressablesLink/link.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Naughty Bear_Data/StreamingAssets/aa/StandaloneWindows64/8eab5c795f943e981b26b2959e7e5287_monoscript.bundle

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

Naughty Bear_Data/StreamingAssets/aa/StandaloneWindows64/8eab5c795f943e981b26b2959e7e5287_monoscript.bundle

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

Naughty Bear_Data/StreamingAssets/aa/StandaloneWindows64/8eab5c795f943e981b26b2959e7e5287_unitybuilt.bundle

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

Naughty Bear_Data/StreamingAssets/aa/StandaloneWindows64/8eab5c795f943e981b26b2959e7e5287_unitybuilt.bundle

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

Naughty Bear_Data/StreamingAssets/aa/StandaloneWindows64/defaultlocalgroup_assets_all_733475ba1d972be1e1936257ecfa2654.bundle

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

Naughty Bear_Data/StreamingAssets/aa/StandaloneWindows64/defaultlocalgroup_assets_all_733475ba1d972be1e1936257ecfa2654.bundle

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

Naughty Bear_Data/StreamingAssets/aa/StandaloneWindows64/defaultlocalgroup_scenes_all_8b4574661f617449649a502cae037b33.bundle

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

Naughty Bear_Data/StreamingAssets/aa/StandaloneWindows64/defaultlocalgroup_scenes_all_8b4574661f617449649a502cae037b33.bundle

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

Naughty Bear_Data/StreamingAssets/aa/catalog.bin

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

Naughty Bear_Data/StreamingAssets/aa/catalog.bin

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

Naughty Bear_Data/StreamingAssets/aa/catalog.hash

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

Naughty Bear_Data/StreamingAssets/aa/catalog.hash

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

Naughty Bear_Data/StreamingAssets/aa/settings.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

Naughty Bear_Data/StreamingAssets/aa/settings.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

Naughty Bear_Data/app.info

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

Naughty Bear_Data/app.info

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

Naughty Bear_Data/boot.config

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

Naughty Bear_Data/boot.config

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

Naughty Bear_Data/data.unity3d

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

Naughty Bear_Data/data.unity3d

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

Naughty Bear_Data/il2cpp_data/Metadata/global-metadata.dat

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

Naughty Bear_Data/il2cpp_data/Metadata/global-metadata.dat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  D3D12/D3D12Core.dll
- Size 4.5MB
- SHA256 625bd40005b1c3708695d5256ecf230d278e6b8edba5a88af70f3d91324f3052
- MD5 8bed03240b764906c937c0d6ccd560ac
- SHA1 2a38a4d7116b9d067e9d24d7da2646e2fc9f61c6
- SHA512 6fce3c735a101794634c53fd622be20e69e75c68ba216d0caa0fb48aadf97ed55ceb6ef205a4ea22f405bf5e663638add2f489df720c206739920093479863a7
- SSDEEP 49152:+h38HT1tnrx7KGN6McyBTwbreXHYTNeZQROL+qgGVO9EflU7slMWr+IGrh4TeeYo:IMBxrfwNFrfau5e/H
- TLSH
  T1B1266C07BBA840E8D4A6C079CA6B461FE7B278654370E7CB169087995F73BE1193F324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Naughty Bear_Data/Resources/unity default resources
- Size 1.4MB
- SHA256 1efb42c5ec6926e2590fba9903e3913609c7c9d3986282bacbb06f0c22d47d0c
- MD5 54ec18f92a8e62adf47d12a5bbc8afb9
- SHA1 2c162f36d0ba5a677c4dc429635c779b5eb28d79
- SHA512 d9023683a6df62b2a7d520c80a7937219e7397cfd7cd3c1a4ed6b897fad3babff37e818b328904d42c26851af2f498a2b01159c81ccddf9b17f0b7396e437912
- SSDEEP 6144:Tuvf+5LaLV1rbVXBJAnZD3Yhu3YWI/OJ9WqUmKlSHCkcCkJm1:A4mH1wchbFOjdUQcm1
- TLSH
  T1EA6565146272052EDC5B023907A71FA5F2BCE85D5BE19B133B1C722CBFA2A54CB67274
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Naughty Bear_Data/RuntimeInitializeOnLoads.json
- Size 4KB
- SHA256 3e47808eab5cb98d5e35248ade0b6c87709537c61875cc8239012e83addd5659
- MD5 72c72668a8b6638eaf7f9bc1dc158b6c
- SHA1 323ac4f07ddda2abfd8ad50166bd5b768f4812c5
- SHA512 e546e6f264ef7ce8f20b6588fa964b9c4255c7d197faedc335761ae957fbbf17e6160a0398732e4d03b56a79cdc4af957c2d493d6a42888a10a0fdf8fc88aa5d
- SSDEEP 96:w65XmaT9IlGAKRM4g9f/81zEyCpSmZsAcodrcL1:w65XmaTulGAKy4GX81wybusAcqrcL1
- TLSH
  T1D09134BD2B86CF7F9F87C39BB9BA1D5D31940A1F8DCA4800D8BD1E2F9935101295622D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Naughty Bear_Data/ScriptingAssemblies.json
- Size 4KB
- SHA256 abe82b28fa7a0e427f40f5b0c6992b14d1636d7f7e425adecbb51831736cbe73
- MD5 f0fccec6a269cc6abb40c61d75af1421
- SHA1 b8468d4bf2884f9b88b70b59b9f030d72627107e
- SHA512 7bf2d58569811c7608ffe05e3468029f41cdb08a2b9dc28f250b7a2edfb3f7d11edc641994290d8e3dd0fcb3ae55b77a0354f4d6b8c564d65bdbf48c91b475e7
- SSDEEP 48:Ycrg0a7cTQ5tVFbYrA4GfToSQdsPxIYRtsbmQml699:PrU7c646xIa+mQm69
- TLSH
  T158A114B2C58B26D32DCD5EC38C758CCC39D314A60A64E0245EAEA79FA938CD23D0D6D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Naughty Bear_Data/StreamingAssets/aa/AddressablesLink/link.xml
- Size 15KB
- SHA256 bd51f4cf58fd67f6b66faf1babdad9ed16ba499dc85c9114059ab4becea24f2d
- MD5 aa592b5cb2ae6b8ad7091d7c5cb8fdba
- SHA1 3e661e5143e481d84ade2122547faefc138c1639
- SHA512 9cfeac9af50cbdfef7249fa252775b86b05e2a4c21c6e8b962225aaf6ca48bbc8b0c5c4eaecc914aeee9fd0b8a3596209f721aaa516f849190ee596be449b6f0
- SSDEEP 96:1XxSdlJLjg7/a028tNfTPITJL7/7B4Ecwa:57i01fTPITJLmEM
- TLSH
  T1FF7228B44A8B3D6B5B768A22752D88D4343944FB0B2C30A67FF63437BEBE8451617702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  Naughty Bear_Data/StreamingAssets/aa/StandaloneWindows64/8eab5c795f943e981b26b2959e7e5287_monoscripts_f684107cb8676e0162b953b077a7c721.bundle
- Size 2KB
- SHA256 f0e8ce0616c83fb04e3e94932dd95cf8e4ef31c164d6ebd421fe0f113febf351
- MD5 a039fb40d7fa6a8c0648be0ab23a3112
- SHA1 4faa6ab7d60bb57fd68aff92ca4382221cd05139
- SHA512 300908ef564579511fc247a813b83cd1e15aa8d948d2e8cf0d7c2301ed62f5b8c007fa62526b6e5da82e6ee3eb9aa31d6e45663889ecc49a49dff650eb90146f
- TLSH
  T1BF4129FCE26DA962A06FB2A6248DD80664F187BF489D53E015E2FAD800CE0554F42318
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Naughty Bear_Data/StreamingAssets/aa/StandaloneWindows64/8eab5c795f943e981b26b2959e7e5287_unitybuiltinassets_833a60b7dc2477823623e9c429da90e7.bundle
- Size 53KB
- SHA256 02a044035a2e1a54386cd6fef40ab64de85ad75f6ab09a9dc00c35fbda6526fe
- MD5 8b4414a35aa6fd0112ac522a5d57d30d
- SHA1 b8c466ae756056d93dad821c3b0bd3a5e9fe2d55
- SHA512 7eb1045b9eb26f60f394327adadc50cf16d1505c84f2cc32213e0e9ad8e9529373b72cc354dd4ff9a8527e4a4f83901e55d35537d32fdac8f86c5017eb113ce5
- SSDEEP 1536:zVmtVpAA6VWGJy/rvOA285/5yuHd+R2D8RELeS1:BgVpAHVdyzvOAf5hyu9+IDoRS1
- TLSH
  T1E04302147C8FA2D0BFB360D1496EA9867EC5D6D97D02023942E38443FC5B73A9691EF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Naughty Bear_Data/StreamingAssets/aa/StandaloneWindows64/defaultlocalgroup_assets_all_733475ba1d972be1e1936257ecfa2654.bundle
- Size 54.6MB
- SHA256 0c00de65b33dd1f62c3735c84e5a7b4ba62c0c25664d7cea0858f8c6da7c4fe6
- MD5 a4d90f9ea6570765d94d1e99e05cad26
- SHA1 aada40d552a762c840295bcfd3d7f8f1b728288b
- SHA512 9d325830c898eec4e8d36610c13c947c77de51bc61635cde3965b43a8bd3bc7aa0877b44322cf556611b6c35f4767e625aa3d6f8e44660716b64e1355a48676a
- SSDEEP 1572864:G2+nacykEqmXFCmx90Bp2NIX/qJvbrfNo1fDz:G1pykEPFCmrqXSJvNwDz
- TLSH
  T1AAC7332EAC509E72977CC6A450C894DEC7DAEED953B930C13799D33C62143932672B8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Naughty Bear_Data/StreamingAssets/aa/StandaloneWindows64/defaultlocalgroup_scenes_all_8b4574661f617449649a502cae037b33.bundle
- Size 43KB
- SHA256 a24a3ef337ab24f0904ad409fd07e24c785da89426f7789172677390fa33b39d
- MD5 b3d61a0178fcc95945c1354bd2c08069
- SHA1 39fea60ac5ce23a31a1fd077f155ae799c254592
- SHA512 9aa923ff90de554c11387a7f6f879f2e734a2424d2093f46d0bb67909ac6c41230d2ed80836e2afd77cb13b3dd98dae70627446f6459eae32716f43b795326d5
- SSDEEP 768:GOpWHNqZ591rKTWD0CbQMCiXSbtwyPqxF1lrwbg5bf:1pWtq39/0FiX4twyPqxlrw6bf
- TLSH
  T14513F2B51C9FA97946FA3F5F418C878E5B067C24880E0F52E79C93EA5F21C36900A4BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Naughty Bear_Data/StreamingAssets/aa/catalog.bin
- Size 83KB
- SHA256 7b35b2d9036959ec48ca76ea9c44a6ba470c05c663ee5a748dda6a7aa2e5466c
- MD5 001308b028079d6f6772dd6ee3bf8cfb
- SHA1 1bcc2f6df4d4e10234898b41cda9f1c4fd2acbef
- SHA512 a9487c33bb9d1322ce230a435e3c521bcfd6afdc24881b7fe600cc0bd55cb170ba27c6c012ce66ba5dfdcd29be92445a6d15e8b6612a1dcd1e5e35f325029df9
- SSDEEP 1536:pJkiPdyzjIm81Vo7GdYR31Cw28+U7DZ5eoO4B:DkiVyzjs1vYRlB2tU7DR
- TLSH
  T1A583825A34D016E2CF2AC7B12A5215C47E821631CF75ABF7643A77DC88A4FB60E94E07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Naughty Bear_Data/StreamingAssets/aa/catalog.hash
- Size 32B
- SHA256 630a971f6698508282b17fa7b98177c3405ee69ceac4aa3e8b9f330126f67b90
- MD5 f61a38c9433fb64fcad03bea4292477d
- SHA1 3f483055ea08aaa1be993b36cb376a62e1b0451a
- SHA512 64cbfe374d4f69c19e02125e76c1970d60dd2a048c34147bb793abda06d52c00e1e41c37af9dafbd7e8658930680a556c13fb05c2ca16cf14b09f68d7c950845
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Naughty Bear_Data/StreamingAssets/aa/settings.json
- Size 814B
- SHA256 7fbdd8af2541687357fb38fe0a3b12c319365dc39a6637f50b2997d16cc1bd1b
- MD5 23f1e0f1c8f5b845ddd84c47bd552b5b
- SHA1 37cad548799e31239a0b84b7d7bc7457d3ad4faf
- SHA512 308d86b8bdab7bd8c99d19c8d557e35343fae5b28ea2e9e7fa0cacf25eb6b314ad2f9f7d4351b94890688f794aa5cc5b8fbc980b7779c4ad06f0c86e4c87240a
- TLSH
  T17A01C239374C34BBB7105E179895B56605D50189459E50388CCF420C73FE5753D31B17
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Naughty Bear_Data/app.info
- Size 26B
- SHA256 468c9054fabdc1d197f4e0c0cfb2739f936026a2f601860e394880f4ab3b3864
- MD5 dece6ea2a0c4385478e0ba8a8f02694c
- SHA1 3da5e5a925007666ba6b63d2240b00b4ca30d50b
- SHA512 c176a13334f14ce1dc7bc3b0a97d8a88b89e0c003a667ea08fa234918bceb67de52f7f7e2e48bef1eb1a7e3514579345cfb9533cfe474e22e499aea56761e8c6
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral25 behavioral26
- Target
  Naughty Bear_Data/boot.config
- Size 189B
- SHA256 5150781819bf3f1881117a8a84c262bd39bf2ae86e29e534cec60af524165e14
- MD5 0c71a039fe49a4f788a5e1579c0fe0d9
- SHA1 40a071ec783a52210953a5e2d216f109c6c30d7f
- SHA512 7e78a61bc882a40f7ae1a6ec96eb8cc8992096b51f32fae8de9984b48e6f14a9b2ea0c728789a2556c301b22e8ce739d709b8db584cb8c60ce7607f35b92ae57
- TLSH
  T111C02201B4FC3281918A844EA4F22FE2D2338059080E28FEE28000AA372800E43028D2
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Naughty Bear_Data/data.unity3d
- Size 172.0MB
- SHA256 e3b7d4cfa2eca94a3b4e5a2b58498c19eb5b053123ba540c40be49e00f0df79f
- MD5 d2db552751dfa70f3d833bd57361ee84
- SHA1 1ad62f953b483f13131bf935d258c1806cd934d9
- SHA512 3451023b6f596f81ef7fb93f01d6ac4a77b0117223fb6691b9b76827b1db6fec5f0dd0bbfa235ab4a33c81581b02e22fea462ee6e269258b356352eb59d0ea41
- SSDEEP 3145728:zGyOmOesj8nTWQQ6TmnV8/AlrkMX7LFeXW:zxOlgnTWf0mV8/AuMNeXW
- TLSH
  T17F88029176428A32E1BE123F809536257FE2680DD243CC3EC27FAA2774CBB79B155B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  Naughty Bear_Data/il2cpp_data/Metadata/global-metadata.dat
- Size 9.3MB
- SHA256 c57d5fd7d2e449c7d90c0af28cd4b7fd19795cd3435ed3c289b17bf6dd710b92
- MD5 5c00f4958486a68294dae32458712fb2
- SHA1 8e23e98979e8a10863a0557c518f2e021e4e5c5a
- SHA512 adead5cefb2fe33996afcfa6da4f390a81a920cb4fe7e3013e431f45e412e2d2ecd09c85b60f77fb1c12d92448a0b4ad55b82a614cbae8bee6c578e3075a210f
- SSDEEP 98304:9EoGyr7JD52eNI8VdhzLnXXnV7Zaf5MxAm8ZfAK5U0XImh7dt/FlUxmBdOq9seQI:9EoDA+vaf5YAm8v5bXF7UxidD2ePAi
- TLSH
  T1ACA65BF8FA59C8D2D4612139A8A8C3C1B2317DF1EE09D2F7355DBB2EEA75145CA131A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

adwarediscoveryspyware

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy