8634228246dee5967537ad53dc55ad981212946ae7cf214545e5e36fae91ca77

Sharing

Copy URL Twitter E-mail

General

Target
Deltarune-AnkerGames.zip
Size 805.1MB
Sample260912-t5t3qaef47
SHA256 8634228246dee5967537ad53dc55ad981212946ae7cf214545e5e36fae91ca77
MD5 3853984252b626a1b6da3baee1331112
SHA1 0466023cc18f385fad4951806f6d0784a60fd074
SHA512 18850cfa3f0840239a60472dd2509dc23ba6271473b8b9e29b5ce020aa550735af68a785a7dc02131a93d37b909fba815bb868d5795870a3f6851e328b73e8d1
SSDEEP 12582912:ehPIROg1w8HC5jIDFkId6fbwXshN55KqdKHbwozjtvwm4MwYR05+6cZ8t6xT:IgC8UoFkMIbwU07wCRaYRw+B8t65
TLSH
T1669933A9CAA02E4EE9B77AF4A9E30A001BCD4C1C77C1C54BABF636545CF75422F69407
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution

Malware Config

Targets

- Target
  Deltarune-AnkerGames.zip
- Size 805.1MB
- SHA256 8634228246dee5967537ad53dc55ad981212946ae7cf214545e5e36fae91ca77
- MD5 3853984252b626a1b6da3baee1331112
- SHA1 0466023cc18f385fad4951806f6d0784a60fd074
- SHA512 18850cfa3f0840239a60472dd2509dc23ba6271473b8b9e29b5ce020aa550735af68a785a7dc02131a93d37b909fba815bb868d5795870a3f6851e328b73e8d1
- SSDEEP 12582912:ehPIROg1w8HC5jIDFkId6fbwXshN55KqdKHbwozjtvwm4MwYR05+6cZ8t6xT:IgC8UoFkMIbwU07wCRaYRw+B8t65
- TLSH
  T1669933A9CAA02E4EE9B77AF4A9E30A001BCD4C1C77C1C54BABF636545CF75422F69407
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  DELTARUNE/chapter5_windows/shader_replace_simple_x64.dll
- Size 150KB
- SHA256 c10210e3cd619774d63947116bd22fb3f60f2d992b21f3ffb0121393e596b124
- MD5 073bf090aedbb91c4e12fa4dcd2ad82e
- SHA1 6f55489aa34e0ec0688f53c7d849e28d368520c7
- SHA512 6b9528272bca7617948f3a578f98b272c4c876f3c0024d469b80b490e54d82d59dd16a7670bc3b5e64a0ec1fb5643fb984bdf0118532da76327682192dbb8296
- SSDEEP 3072:4Uz8MVVIwkYoAVVoAtqV+Qa2wRs3plNPWSfdx6+2U:4+pkYoqVo5na2wY
- TLSH
  T142E33A07B2A540B7D47682388953DF47B7B2F49A076097AF13648A7E9FA33D08D39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  DELTARUNE/mus/kris_piano_shop.ogg
- Size 575KB
- SHA256 289f6bbcd9da8e04f3ce8a4b11302aae96c6dbd9db10881dfc25abc13b1a69e2
- MD5 e85bb1f52b4b5b4192c11a5456d243b3
- SHA1 0d1c25d0d9ab324246df0dd8147e8e2b3f1db91b
- SHA512 a936765ddb3a2ea687323619256db50577c64a31da03c90ff8f2e3dfdabd0f82f88aefb5b96cf2d00bb923f94395c21e09203724188da2bb6ec69e9559c22bcf
- SSDEEP 12288:RBfyYUpNMqgPTCsOLu47VLfalLGvR3bBCi4i/DSZPBBkZl:2YoUOqUIGlbBCitDkBBkZl
- TLSH
  T1BFC4233B9C928D8DD69D13F2EAB72E21BB7B88580FA00346577E4478DD2775D2D18883
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  DELTARUNE/mus/minigame_kart.ogg
- Size 1.0MB
- SHA256 d32463755abcea1fbe498c06208151231a382540c406d1f827bef252c7e26699
- MD5 d589c7ecc52ea665bd7fe86665c798cc
- SHA1 fe3c456b3104dde124b0939823032e7cfe35a320
- SHA512 abb591504bab6be86ba566463825cf8d30a03eb0818594a734a8d162ae1d64c402033578d7686ab72df1e82b00e9fe0b238daaa28e4014237030f64ad8b18f9d
- SSDEEP 24576:sLwtG2VvqcI1T4/A3NPxgVx2tBETl3ytYtMo1JwDV:sLwtG2xq51WA3ECBE53tRJ8
- TLSH
  T117253355B3A3ACC6E01D72B38054099E6BCE6CD863F069EC2AE03D69570D392C25DF97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral7 behavioral8
- Target
  DELTARUNE/mus/muffled_rain.ogg
- Size 1.4MB
- SHA256 40e410e77a492d773547fa4b289fc344552a525c570219a17a0935856e813ac4
- MD5 51721780d8fed1c46236a0b161181422
- SHA1 6f3f31dbbdfbc197309bc8d5ee9beb8217f43b26
- SHA512 0679f7e6625b5d5f4a6f256d067c9f935541475aadb2c566f17d96e168a6d4ac89f1c051a2e2a7e62d2c07792baf35172bfb422cdc46be7d748a6c41e09a549a
- SSDEEP 24576:yZsqrsbwe0bdmNZon4M6oIbueRUg2m5gKL4+nut/RdKZv9v8omMyoRraKBUNssQY:yCbwSjfoIlRUgDWKLznkShmYRraGUDeI
- TLSH
  T131652310C0D2CA8DC7852FF985CE5EB0A2ED945C97152AC28BDC18A197EFD84E1DE367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral10 behavioral9
- Target
  DELTARUNE/mus/mus_birdnoise.ogg
- Size 416KB
- SHA256 b91ea1eaa245a3a110ad5f1ecba120f35d36fc1859efce01ab95293693661e5a
- MD5 4ec29b34cf16470e3e7fc2b68ece2fe7
- SHA1 b49d4c5bda55f9fe6685930cf0ebfcfea8bb9679
- SHA512 7c1772fc594b6c03219516dfb56c1ba4f3226ed95ba786c3085be4a5c083047e6dbad771d7de755df9bbe163b0d369509073787bd9747dcb34b3b389db84799c
- SSDEEP 12288:sfYrB+O64QS0xfO5934PavQ0tt3VgQjRC2doWEh+3uC:sMMz4VcqoPajX3V7jAh+3P
- TLSH
  T1969423EAEDC9C0C8D44CF8BB3D5210EA27B4BBED873675ABBB4D01905460B744D84A57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral11 behavioral12
- Target
  DELTARUNE/mus/mus_confession.ogg
- Size 210KB
- SHA256 7db1a507c192075c2ee29d7d307bc95e1e485d9f56bf9afb84e8dff242700426
- MD5 95d84e3183b0f46e6a643b8bf7fb01ff
- SHA1 7754d75f837c491fdebd2f2dae66b9cbef063fe0
- SHA512 f3a1e9b7566285d4e560bfa51975b9c3b7c154d3b0b7c30e840e999eaabd98a48949ce1e642fe7fcb7cd9220ee1124059251f6c5993c7d08172705879e9af635
- SSDEEP 3072:SiOb8lphzQk5g4FQC65ft6Ndo0BQdQptdPmMla6FTnGW5apFWQUnuFUv9q5zf0:SiObmPz24o2do0BQdQpfvGWcquW96r0
- TLSH
  T1202412ED9A66EEDCC0F555BC60970B55B3F366811E93ABE34DAC806024A37B84F13849
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral13 behavioral14
- Target
  DELTARUNE/mus/mus_date_fight.ogg
- Size 380KB
- SHA256 74f07cbaf33ac499e125a7b52e980e281928693b16bdc31ac2e923a765f6f143
- MD5 d41a043ab64279daeca12197a24c5a1a
- SHA1 11c62c8441e0afb491cfa8e9f469a8645109ff4c
- SHA512 1e665ab67f009573e7124b5ba9b801223fc03a32b3b54221fddfa83e72fb27a42b5e22fa116d21f695c23ee0f0738f0db48ae6b30897cd8caa6e07bcd63aacfe
- SSDEEP 6144:HcwoA6YYVwvHZbPrXB+D1dNi40CbyHLbCKqMIc6Z3lToq9yPl+anefbcEGXX6fao:8zAowvHBI5dxlbCGLRc6ZVD9yt+aGbcM
- TLSH
  T16984232DA290E738D68811FE8877171534E58AB732B93D5A9FB8DCB84CB35050E4A5CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral15 behavioral16
- Target
  DELTARUNE/mus/mus_date_tense.ogg
- Size 287KB
- SHA256 6d42943b35c93309cea1820bf1fbbe45f78753ee4fe7ef9740a0afa3e92afd54
- MD5 9058390082bbab3343bc27f35dc33709
- SHA1 74eeeb2eafee023a7f70aa16ae7892e933665c3e
- SHA512 566ea15e8da90cd7f4518d70f5a292f2a2cbabd9a3741ddd8a653c0678740c3b4e599376086029f5a649806fe21598635508f47988cac13f03e738dc90af065f
- SSDEEP 6144:OrCrcJenphbDyx2Z2xD27dwikZ6dyZ1/103XhcDnOErBOVNjdAnZ+Tbg5T80vOI+:/vhpd58bT0SieKN0jAnzZz3
- TLSH
  T15E5422E6F088646DDC18E3F0F8931B10F18E16562F52D56CEB79A6AE04F35C0E5A4DAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral17 behavioral18
- Target
  DELTARUNE/mus/mus_introcar.ogg
- Size 896KB
- SHA256 c560b1dbaa23aded54bba86eebc1bdc4e17bd3de7d8ad4855f0fc0822e9994d5
- MD5 fe7a66abe39dcb4f3b2534c35fadd831
- SHA1 3dfaaa8456d484ad2707ddef2067ffe430ff821d
- SHA512 dc9b359731c8cf49bc62104029d6491b3a6834b83b3d1f2ab367e73c351d9b4761aded55df642529dafe8b92d66d337df3e14f5de105d262eb1b0453e82bc837
- SSDEEP 12288:xKZMrZG6H5ZPzyjMKxA8BjVmnD9lW6vSmD+HfbeNX309+yH97SLzedUwPBeriXOn:xK0rHDPzyjMKHoD96VHf61jo7oshPNS
- TLSH
  T12515234A8CD05C02C0E9F4F5A45B931DFB4CD87EDF81AC5B46B4A2BD7F5A22C8553A0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral19 behavioral20
- Target
  DELTARUNE/mus/mus_knightthought.ogg
- Size 40KB
- SHA256 f26e917375fd1bf5057617554287898926221130ce51b8dcce65f1e6cedd2785
- MD5 394e342cdb24132f85af816ab8548243
- SHA1 2581c3e52d35f4a122f87044560f289a419b04fc
- SHA512 fc919bd995bc4151ef7a6034454f46bc3e200b8bd002f7c9174e8496e0b79d0e2c622adc93847013fc35f38c33cfa07e1a43ca8a15cb92ccd5e0679715f76482
- SSDEEP 768:hYFLTFupm1rzuEicjnlbqCO6+7wOg7E2TjgKK/julOrSKk+p7vLeQu:hYAczDi4lOCOPq7jTKk+p7vLPu
- TLSH
  T12903F027A946C41FCD2162FF66BF1B86367291389BD68A1BC8A630FD0C03978759A0D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral21 behavioral22
- Target
  DELTARUNE/mus/mus_race.ogg
- Size 485KB
- SHA256 e3e2fac9f7a92b5f5f127706dff2469cd7d9a72c42dd97dc548baa30b94427f6
- MD5 717a893578252151309a85782ed3b68f
- SHA1 ad96e83c77bc3aeb9ae60c813654eefbdf45d46a
- SHA512 ee988a92dfc3fd140d37e4f08fad4eb737bfefd35942a803ce49d533cbbbe84cfb9c5852e6a726407f4343f81cb4d54fd0e5388ecd2ea1a755fbdb5ad1fb6524
- SSDEEP 12288:YjQG4eBh/DMBku49NA7aNP3j3fiiIDpMPWDW:wD4qACf9RNPjv/ap5D
- TLSH
  T1F8B423F95883E38AE96BF8F44F21A0E8DF487B2D5DD013B93509CBC8244FB06494565E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral23 behavioral24
- Target
  DELTARUNE/mus/mus_school.ogg
- Size 1.2MB
- SHA256 888d1f33c77e24ff7c16c5e5cf5c29fd5d4c91b944dfa40a5e7aee4279e39138
- MD5 28100338c55da65a18f37794278ee157
- SHA1 0f39177b1038ba1aaccce1c08de41143c8ac91ed
- SHA512 1eb5f7a24bcb8df9c825ab2dbaa51d3742b14e60c7e0dfa5e4873d4b659d96d0e1a6805afeb01c51f32d9145b02848fd5a71c81c063913b5a50b87a7c179f85d
- SSDEEP 24576:fOTEiu2T1TI98f6scyowHYtVMQ0eQmHuJGa7xXenMYyoCDdAXB2/0Igq:0Y2hIMkWYAeSo+4EdARwVgq
- TLSH
  T1DF5533D84DD02EB9E8543A306F128DCD0DBFACAC6355C7036B7684EA8E6E5152C0726F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral25 behavioral26
- Target
  DELTARUNE/mus/mus_temloopshort.ogg
- Size 63KB
- SHA256 1e0fe6591fca6f2a5c8a44d1e72dec7298822682d2e10309b55896d263fb5103
- MD5 6332365c8942761649c211ab062244f5
- SHA1 8641ab1043d92908edf8e1363d6fd24c7be62813
- SHA512 cad43201a0a952d1c6b53c5189d40c80fbf87699df115759ee7e5104ca9649967fc3d33131a95f0e37eaef8644f1dbeb828281cf9addb76f614a1222672b86ae
- SSDEEP 768:cZr/5/Z8cnQog0iTTCvyJLPGz4GiPrvX2Hk2mLzz9+GoU2JiGTTp9vdQftzXAp8b:I/V202CaJjGzyvDH+Go3QOzeVOIzvqOJ
- TLSH
  T1EA5302981E71A8C0C10F6579E4771B2C575BBA0C984AE97E0380853AA693D133A7BE79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral27 behavioral28
- Target
  DELTARUNE/mus/muscle.ogg
- Size 360KB
- SHA256 64bfeec27f0622a69e7329c47b26357bb725802d120e18224082ffe48d7064a2
- MD5 d8beaeb1698c3d3764486a1b2c9bb90d
- SHA1 5a33f6ec27676f9b688ec6ade8da21075593138b
- SHA512 78b423ad0cdb5b6c24968d32fea6ea3ace413aec7e7e0e92ab323c17161c1dffa264895afc9eb2c6aa3ce1c7fad15f4a6639b6763fa9246fd9bbfb7203d9fc8f
- SSDEEP 6144:U+G/o2O1I/pcRQ0aSVFOhkwNW8LG3N4KeDiVHFNxbXQfxx2phu6t4F7Og9RdCaam:U+G/mI/pcydSkXNW8L028NB+xKuKGnC2
- TLSH
  T1C474230C9F974943E070FC3D7ADC186E028B5DCED7A29AED6BA6F140566F40217264FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral29 behavioral30
- Target
  DELTARUNE/mus/music_guys.ogg
- Size 66KB
- SHA256 e6663aa133228b9856ac39479408f03b3a5c13b67b29801f8cf102495920e42d
- MD5 a056c744d2e1c5480aabc9a7bbbc990f
- SHA1 8a78108857fb168d9e1ef1587193f5c3920abc73
- SHA512 c1c8ab1d9a7ab5197d735a17a5c2b2f7860c933f318da9a1b4d584a6e653b4f19f7c782a9aadc82c002124fb58218b4e6d1058d894fd06949e2d7c0f0431f36d
- SSDEEP 1536:LL9a/Av/xRBoh+SecvzfE2ICttzIs0pYXtbXHu:LB2AnxL/kLfENCtt3Z9ru
- TLSH
  T15C6302C5ADB7CDDEF1639278D8678B907E28523431624FA5E3D4916A37ABD008EC48B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32