5abc65af9e6e892c24befcf0d927cd10f2ef3d3bdc03c0465425794b2289383d

Sharing

Copy URL Twitter E-mail

General

Target
5abc65af9e6e892c24befcf0d927cd10f2ef3d3bdc03c0465425794b2289383d
Size 4.2MB
Sample260916-lrnpsaycmh
SHA256 5abc65af9e6e892c24befcf0d927cd10f2ef3d3bdc03c0465425794b2289383d
MD5 d90205cd7d979852e0e6a5fa8ce89c9a
SHA1 d33a4b10fa9d52f3880a8065f3e73e1fec63c9b8
SHA512 841278ed8215787aaca74745742fc8a896544586d93a81cfcc928ec02406e9d7d46e56aeb18edc5311d50114c0ff9401e8a8a40d886e615ca7295fb3adb000db
SSDEEP 98304:J2s4pAKXy1p6TAthg3np0AHJV73WJAGau:Cy1nthknp08J5GJAJu
TLSH
T149163336FA587568C846D37DB29A851A79C1CE0F11F8F08F1740736237AD5980BA2FE6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  DesktopGoose v0.31/Assets/Autumn - mod/Autumn.dll
- Size 11KB
- SHA256 5c0024fd7cb4fe2424c3c04c6036a2c67bb460f67a04b652afeeb5d4c757b70f
- MD5 ad4b80cc7ea519628734687452b8ac0e
- SHA1 1b096e964b4d44f2d6a77cbe4818f8914ce60eaf
- SHA512 62f74876bfc3c24d371ce2051f1baed14a0625d0699bdc3590e9ee7fc55a92a5997aa99e160cde0705e42c24940641e27baee648b73ff0d17f6aaf60a538fc75
- SSDEEP 192:C+3F7xb75FvYTyUhEazn54cpk6CEM9RCgEKdwnv/EyEiLc:LSpBm6C9DGnEuLc
- TLSH
  T11932FA16ABC59732C6FF0E7A5C938A0663B1F249DD76E7AE09C4B56B2D27B00110374B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  DesktopGoose v0.31/Assets/Mods/DragGoose/DragGoose.dll
- Size 5KB
- SHA256 cc342ae0fc9441c3d9b9289191fcbbe45eb2d9eca581ad665d6d4c4cc6a0ca30
- MD5 4826e08d50efcee7b00496a669a85a49
- SHA1 cf4024416cddc6e508b6a0098f3032492bd94604
- SHA512 bfa03df67edb2eb4dd4ec0454fced0d1ea40975e5fa1ed12a562efa0fa0a22c71eafb576ff7eb8be2b37e1837f5662de19098d6cb053e596fa38e2041854d423
- SSDEEP 48:6YEc+JoU6witMtwf5ShgN9NMmlJtKBmbo9gEN9EXtnplqndF:y16+c5ShgPl7vkyEz8c
- TLSH
  T1B9B18212A7B42337ED776B32A9A313411774F621DE2BDB2D19C2921B2C22A104D31F55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  DesktopGoose v0.31/Assets/Mods/GooseManager/GooseManager.dll
- Size 9KB
- SHA256 f77172c9a7a4a312027a1f4aa09f72b26ea58bc821ebcfb55442825933aa179a
- MD5 25c1c30f16bfa27905f3bb32e36f493d
- SHA1 5a467243b28c18d4dc5a6bb01a3f41332d3377cb
- SHA512 08ce05abddf9735a5877c8d7d5abd7554eb6580419b944a6128609d2c6ad830a4af36ddee72beacbcb650d43e03b7b25dcdc0cf51211e3c1b698a41e4a21321b
- SSDEEP 192:+zpRUcwCSQUAHUpDYx7ot1cTD2+fitJsDjngeIkDyET2:WUQ6A0yx7qULfitJsHNDX2
- TLSH
  T1F912E8407BE8A333D5AB8A3BB4E352412735FA119D47DA6F1C88A1DA1E327045F93B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  DesktopGoose v0.31/Assets/Mods/ToysModv1.1/ToysMod.dll
- Size 19KB
- SHA256 2e62f369d0d731b5f013cf1318040c245cf123c89cb22a62cd239dc7139a8c17
- MD5 b8039fc31b845f1cfbbe90bb4b61d843
- SHA1 c0aa05069a66b3b626cabd55e2158c33714718e6
- SHA512 67900b93005271aa166b7c35619b5d319dd6ddf25dbd5ac7fbdad66b5095f6f73ee2179b52f79b97762e23c007d81491880a3f4ce6743216bd974da70eca6cf4
- SSDEEP 192:2H00wsWv6rhamtk3lRzxTcZsNjGwNbJKH1W/FBbdOPM7igH6oJpd3TNpRclHy+O+:2gPaw301yUM7B6oJplTN/clS1YoWh
- TLSH
  T1FE92E905E6DB2636E7FE6BBEA4F72B012774F5179432D71C0AC4E18C69137818620B5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  DesktopGoose v0.31/Close Goose.bat
- Size 31B
- SHA256 9d3b5a6370f076a57651fcf06fc4f3fbce8d9e5156642e22141a8f521f35ffdc
- MD5 1fdef6890e156b9aa7b662a4314dc712
- SHA1 0c1e18150345fc43924c96844b8fd0fc53ec8855
- SHA512 474b7169f7a2deca1298391c42b0d5a8cb55b33853eaf1d79026c9b9b45d9a687582a0aa0d0ff639e5d9b40535cda3b3827546d26f1d35fa9169bcd73f050d29
- MD5 SHA1 SHA512
Score

3^/10

defense_evasion execution
behavioral10 behavioral9
- Target
  DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/bin/Release/DefaultMod.dll
- Size 5KB
- SHA256 feb32e09081e223ddaf453321abaebc12c3f18d533a393326142deec7c31394e
- MD5 d9d3634150a96a3d15961599979db1a8
- SHA1 ba4773062cac856ab60e35c29fb655dc82af9144
- SHA512 a086f46c1c2743cd13b59c492c23b8b15972070c3555f50fbbfbf5eb40d187cbc179f473939b615cd32672fb6c6d952d5b11400e7172770f2d968347df39b29a
- SSDEEP 96:GI8y5cZJb9GXfLJtDs/lKlz9yEh6zl2g:r8yiZuVtDs/gryE22g
- TLSH
  T11AC17495E3E84333EDBB0B36E89387012776FE10ED63CB6C0585920A5D226185AB3B25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/bin/Release/GooseModdingAPI.dll
- Size 16KB
- SHA256 fba607ccfd47e2b6ba04d449f1de10e3b66ba35b7d0e96f71e7c61d0c10486f4
- MD5 6f6c8f80d6c36739147b38016bd4b469
- SHA1 bf0f81a00ccc595242620b15ade2a0661424d9e3
- SHA512 1b3d6da8eedc140f3836c60eadc5251870d01db99e72d33ec0b2a585e2e4b2f7e643e2a12ad42f8e6d8704e8af67ca1df728acdbe18c614a1b8f6746d0c3fbc6
- SSDEEP 384:nBjGRs3XVRcYEPPPr/TXRTRGYK4swkqUICTy5o:BjGe3XVRvEPPPr/TXRTRGSCTy5o
- TLSH
  T10A72085437E58EAFDEBB15F8A99B0105BA30F04C0067D74B1A1DF0BDBF663291192B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/obj/Release/DefaultMod.dll
- Size 5KB
- SHA256 feb32e09081e223ddaf453321abaebc12c3f18d533a393326142deec7c31394e
- MD5 d9d3634150a96a3d15961599979db1a8
- SHA1 ba4773062cac856ab60e35c29fb655dc82af9144
- SHA512 a086f46c1c2743cd13b59c492c23b8b15972070c3555f50fbbfbf5eb40d187cbc179f473939b615cd32672fb6c6d952d5b11400e7172770f2d968347df39b29a
- SSDEEP 96:GI8y5cZJb9GXfLJtDs/lKlz9yEh6zl2g:r8yiZuVtDs/gryE22g
- TLSH
  T11AC17495E3E84333EDBB0B36E89387012776FE10ED63CB6C0585920A5D226185AB3B25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/bin/Release/GooseModdingAPI.dll
- Size 16KB
- SHA256 fba607ccfd47e2b6ba04d449f1de10e3b66ba35b7d0e96f71e7c61d0c10486f4
- MD5 6f6c8f80d6c36739147b38016bd4b469
- SHA1 bf0f81a00ccc595242620b15ade2a0661424d9e3
- SHA512 1b3d6da8eedc140f3836c60eadc5251870d01db99e72d33ec0b2a585e2e4b2f7e643e2a12ad42f8e6d8704e8af67ca1df728acdbe18c614a1b8f6746d0c3fbc6
- SSDEEP 384:nBjGRs3XVRcYEPPPr/TXRTRGYK4swkqUICTy5o:BjGe3XVRvEPPPr/TXRTRGSCTy5o
- TLSH
  T10A72085437E58EAFDEBB15F8A99B0105BA30F04C0067D74B1A1DF0BDBF663291192B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  DesktopGoose v0.31/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/obj/Release/GooseModdingAPI.dll
- Size 16KB
- SHA256 fba607ccfd47e2b6ba04d449f1de10e3b66ba35b7d0e96f71e7c61d0c10486f4
- MD5 6f6c8f80d6c36739147b38016bd4b469
- SHA1 bf0f81a00ccc595242620b15ade2a0661424d9e3
- SHA512 1b3d6da8eedc140f3836c60eadc5251870d01db99e72d33ec0b2a585e2e4b2f7e643e2a12ad42f8e6d8704e8af67ca1df728acdbe18c614a1b8f6746d0c3fbc6
- SSDEEP 384:nBjGRs3XVRcYEPPPr/TXRTRGYK4swkqUICTy5o:BjGe3XVRvEPPPr/TXRTRGSCTy5o
- TLSH
  T10A72085437E58EAFDEBB15F8A99B0105BA30F04C0067D74B1A1DF0BDBF663291192B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  DesktopGoose v0.31/GooseDesktop.exe
- Size 221KB
- SHA256 943fd1ea44266c5d7fa02f2b292db095a4e6ba8027a1f6c73fd60d1165e63aff
- MD5 c883e2c769ebe56240a71260b17f1b93
- SHA1 4a831d4f48f6ea81db508c2a87cf860acd17edb1
- SHA512 dae40d442794152285ce484b10095d11592a39cb1968bd38cc70ee23005bd1e04ad4312d7266107bdd375e10fa91ab9fd3d41d4d6ccd2268d052b343528c4376
- SSDEEP 3072:gzebbi+ndU/n6u4WhGINz6tFvaxWt5H3ANdl3Mn4bqwyW13B26wqIl9nNwo3WdZj:gzQU/n6unYCW74bqwye3ijlDwocZ
- TLSH
  T16524BF82E59A4B72CDBE8A3BC87326015A3178AFDD26C79904CCD52C34C35C44E627BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  DesktopGoose v0.31/GooseModdingAPI.dll
- Size 16KB
- SHA256 efa31df7ab1394092395365805f913dd023cdcd21796603f133641524fb9ad79
- MD5 9eb11041f2f11d939074e26b4b554088
- SHA1 50deec7591fcc5db40939543fc9bf92109f2df05
- SHA512 2d07f40f56ae0dcaba51bc65e4617a0bfd67be13be5156fd7c2850645a461f87b97e46b2c596c21752df2aa488f6e6c329534a523bd7f88234be956b8af13bd1
- SSDEEP 384:4BjGRs3XVRcYEPPPr/TXRTRGYK4swkqUICTyeX:ajGe3XVRvEPPPr/TXRTRGSCTyeX
- TLSH
  T12972F94437E58EAFDEBB15B8A99B0105BA70F04C0067D74B1A1DF0BDBF663291192B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  DesktopGoose v0.31/MMQ.dll
- Size 10KB
- SHA256 b06945029a9a667c9b19653c5d789dd825efcda959fd1dd57f341385eb99dc72
- MD5 e27e8063b337045e69dc37964db09e35
- SHA1 2dbfbef9f3c54b50f6a12da8dd881ee60bb5913e
- SHA512 12f50b6e638f227373d089b28624fd6913d0de0c4a2bed6cd5dec611a7945e53f1d114ea85d8b8ba23a76b35a280d62731ee3504e9468558a3dce22e105aadec
- SSDEEP 192:sT7Dg88dH8tUDvYJxuaaCUKUW9zz6q/T7:sXKqUDvCuaaCUKfzz6A7
- TLSH
  T10322F856E3ECCA3BDD9B17B46875074103B6F811A8E3FF6F0948807A6C937998A11763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26