1791bec90e41a669ee6aca389ae0944236d0e48366a4826a2c64cf1dde0d3284

Sharing

Copy URL Twitter E-mail

General

Target
rpcs3-v0.0.42-20017-e13ee157_win64_msvc.7z
Size 36.7MB
Sample260916-pbecysar8s
SHA256 1791bec90e41a669ee6aca389ae0944236d0e48366a4826a2c64cf1dde0d3284
MD5 178449d99e81523c5e9cb01e3d818a9f
SHA1 3ef6501a249d03225d8f53e7dabf4828e019a8d5
SHA512 da5bbc5a02b494918a529a364257bd008653d3c0a5758001fc948ff82ad7913af2429be53d5e0780088a2c604777e85ca84201b5efdcae1e35a30f5a1ade3087
SSDEEP 786432:saEcUX2I0eF1NZdWNyX7hHDHyYH5H8SvVdO+jVOx+iUwzfeRij:sgs00NZTXhDHpZzvO+jie0
TLSH
T172873371AD237494ED81C87028A30F7376AA7A17B15589E5FCB0FBE284A53F1E748493
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  GuiConfigs/Old Steam by FlexBy.qss
- Size 30KB
- SHA256 391bc2949d267ef0a159b5b8350e68856fb0c24c3187e2420da9ce995ad8633c
- MD5 c9a53ca2b7cc6cbbcf130b4dad7b0429
- SHA1 2e559c1385aa97717ec8ffa575540e37450bc706
- SHA512 5adbf41d83172cc97bc17b1acddebc32766763fcf572fc8ceb9dd7444a0d842e25dc643f9ba19936c060f7f6a4be8d25b8d0d600acd33977c9d8efc8b45c2515
- SSDEEP 768:6ag8ebqqaMSC3k7Z66ZevZbFgMpqupDdq:EJre6G
- TLSH
  T199E2DAB5EA865887333697397360C580F71653A3C9421B797FEDA3294F743B82836C89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2
- Target
  GuiConfigs/dark/arrow-down-disabled.svg
- Size 451B
- SHA256 9d0e2a16779a13fc8c804d60326c62a45be9fd4c2e83cab9a434b8cc36fdb825
- MD5 ab200548a0230caf30dd98ee2c8ecc7a
- SHA1 996c58c954e96993c6ea7a64af4f08107e568dd8
- SHA512 5dacccb6e0cc2a64af48b72f8b77292a7bef462a901470441a7bea1a5b1ebd409d5ccaf11e82ec177214b6cd56aa0ad8e5792dd5b65f259c8cf46e26bad8932f
- TLSH
  T1DDF0D4F9754CA501D046D713E8D56A730C3F20F97F8CC357544B60555101097DC04920
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  GuiConfigs/dark/arrow-down.svg
- Size 449B
- SHA256 17d1c525e69bd046c96696f276b17a0d00cf13d46b8baf60b2f730b38e59f581
- MD5 90897dd3206402dbc325c9ff46c7c781
- SHA1 22b8d7eb36ae1320639bff04a2db77e06a81d083
- SHA512 a2f6393349d489d6bd8340b578b84d1dc2b2b3790381a5c3f5990dddfbdbb2e2d2c1a82d870021e47fd299a7e4656816386e05959937ff0ae4f168bd0a60fdd2
- TLSH
  T1C5F0DCF9B54CA601D08AD713D8E96AB30C3F60FA7FCCD35B944B6065A102097DC00A60
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  GuiConfigs/dark/arrow-left-disabled.svg
- Size 445B
- SHA256 91e1739d6555229ce5c20558f1a9ed77ed1f51297b0e3ccc8604024cb5b106e8
- MD5 b1ba627bddab6c1cca94fe8db0aada10
- SHA1 72d334703ad8a14cf953a1c982913b7bb9fa0b59
- SHA512 b1e71ef4dc241c9bab92ca5c155a3e6f32504a30725cbe938a59efa1109692e0ce7d4010c0d05bd328f6ffa3c99eb7681696ec95d7a1d292422421ec6e003823
- TLSH
  T1F6F0A37655D823437000D793F03CE8517BB730BB2F8C1B89D4C1D4F1D4C10939848808
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  GuiConfigs/dark/arrow-left.svg
- Size 443B
- SHA256 653a4b43d47990ee7c09b1f7c9c3d043e8fb3e898319e07de7efbb6fabd3e620
- MD5 8eea0588315f372b24d89fc2f8c2aaf0
- SHA1 b4556b69cd55e3dbab6f8fdd1ad711634a2500de
- SHA512 297da9df4bac1f5154407df1d8026ca804f910ae1a8a8dbd16dc7dc7ceb9b0a867471d93e30e7cdab20e8986ac6c3cb56a6cec766a1d25ca9fa89503e79e7661
- TLSH
  T1CEF0A37645DC23437000D753A03CE851BBB770BB6F8C2B89D0C1D4F2D4C10939848848
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  GuiConfigs/dark/arrow-next.svg
- Size 757B
- SHA256 8d9913f49698fd34ecde019cc611766f843a43fec531e219f18e8fdee19251c1
- MD5 7fde1f8ea5412b352a4d4ccd997c8469
- SHA1 da36734322795b932b168d8ff2281520b3b5fcf3
- SHA512 b10b5181abb77ac034ab51019c810f3a078642a78a9270285a9524a0173cdf38b75f9ff5aafddc08044bb80da23d4cf6e945b0c4ed225bea1bbaabfb4f057d17
- TLSH
  T19F01BDF610C4C9D15B40DFE7E5165071F922FE242A8C801AF09DB287E05B2773414E8D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  GuiConfigs/dark/arrow-prev.svg
- Size 719B
- SHA256 7153e4dbed1e238f5d6a493285f49891666e7bb3ad58887cbbeed6b0b15d4e57
- MD5 fc964ead0701464a485c8e88ef2821a2
- SHA1 0c5b1a9d3730709d3e7ab04fda78931853214018
- SHA512 93d8cf7095dd231ec51fbf377dbc17a3bffa94b2c9c2067a64b9c066d17fc60846f7cc6f97c662b58f522c7cd46e6a7c54cbce55cca66adb5ba83b8658ef11d8
- TLSH
  T16701DCFA02488BD06A006F73A52C20B2F832B5741DCDC05AE5CAA317A62D2921575ED0
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  GuiConfigs/dark/arrow-right-disabled.svg
- Size 445B
- SHA256 a90783efa8294b45851097ce56989321f61e0acd283229f0f3b64ba53dc7108e
- MD5 a4f5e8887298c9f143a29c4a2e76cbea
- SHA1 749625a04825765f28a635f5957e46eaa0134a2a
- SHA512 25c39799971140493011197fdda3284994003f7c901b4e673c4d397f5ee52bfc555997ec64a66def1eba85defdb48499a651a97cc1a2b4453c449d362b920a7b
- TLSH
  T1FDF0A3B3E44D57C1E002E722E93DA87159AB34BC278D4B7FD4C130D1D0410C6DC44E24
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  GuiConfigs/dark/arrow-right.svg
- Size 443B
- SHA256 d8002c862392366c418b0f14215c69f6e485cf3425b3100e08fb7490d40a3656
- MD5 52cd512832d543cd60d91e549ab18a0a
- SHA1 d74c1d364c0a6d8fa063fce7d1a654888efbc801
- SHA512 90bd4195903faa03888351bbc4236d78386ef1ef525e6b99a5d49107e0582bf1f31d019454ad0623cc8c9741501a71c15300c56154d4250c3c5ed7e7491c9ff0
- TLSH
  T12CF0A3B3D40D57C1E006E722D93DA8714DAB24B827CD4B7ED4C130D2D0410C6DC44E24
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  GuiConfigs/dark/arrow-up-disabled.svg
- Size 451B
- SHA256 6df8239c4d5959e3fc4de2ecc1f1188164b948e9dfde46941916183ad148a76a
- MD5 c7fa95986ea578da6f00663dd01360bc
- SHA1 74e1a84facde0ce2e919af783728e221511c65eb
- SHA512 4c4b8cff0f65689040f3a997803a390e70aa88246fe8fc90b32a66ccfc41a564fc27e3ffd5d42703facad5e4f4586a9b76155df322184ef2ed424a2f92b4d846
- TLSH
  T195F05CBA688C5A4A6040D723F46D9D727CAF7195B7CC83ADD489D4DE50461A3F848518
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  GuiConfigs/dark/arrow-up.svg
- Size 449B
- SHA256 712a28fabb048f5d9837ffad5570c92d830e28c54f4c6bf70a45e1d5f014db14
- MD5 e9dc003ef70f528b44842784fe0d4d3a
- SHA1 68f7875fe8e93f6eeeb9fab9a1993cce271de922
- SHA512 75697f5dfd61be1066e017d7834111b27d72b9c8bd6575fb72d6a560ce119531bc9690abe0b89264371a51150c4c77c22bf54f3c2d1da5f26ccff8c26b610402
- TLSH
  T195F05CBA588C5A4A6140D723E46D9D726CAFB091F7CC83ACC48DD4DE50460A3F844558
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  GuiConfigs/dark/check-mark-disabled.svg
- Size 455B
- SHA256 cc7e966fd6a2ab8ebbc5f758e97c0b03381fc6201e31416f01adf90cf2c9aaff
- MD5 8be2b4894f1d4f6aa505b468b2062251
- SHA1 8b105b43c676a73505514dbc7bf813542e1eae43
- SHA512 a989c12c262128fa219a0e23e71e332d4ad985dd291f2bbfde909108720b005f0a6f6ca29b358b182f933fa565aa32ab34caca0f7641ce7b5aba0bd0a3cf6fcf
- TLSH
  T12BF02EFC91964940DD809A749C2C7B46647311FA5695810AE4C5177A93342915C64EB8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  GuiConfigs/dark/check-mark.svg
- Size 453B
- SHA256 6049fc17cd4d82f8b5dd5f00757015692eea91b01a709fcd84371dad3d3e0638
- MD5 52a1cf09558703080105867993d4ae54
- SHA1 f45047131e05415a7f631bb8e755ed39bf1c477d
- SHA512 26dfd5465e67dbaff635cbd9e1f42d25ec88df9dceb3639f6c977ce0641dda1d998c131286793346b5b8aadc1cce2350dbdd50ac5cac465527df0317847262db
- TLSH
  T1ABF054FC81974940DD809A789C2C7B46A87301F757D9C10EE0C5173B93341D15C60EF8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  GuiConfigs/dark/checkbox-checked-disabled.svg
- Size 677B
- SHA256 3ce4f32bb396518543f7c2abbc1b17a695356fc28dff82841b0562c4edb1fa4f
- MD5 69f71d7a4d4f1b0e84b60f7d7a0ae4f3
- SHA1 bf7b69894a9c3ea47a34491fffcaa8b3ef0acc8f
- SHA512 2c44bb0f51160f02dd9de8f2ee3ab83d833a720873b497ad7923f30fa4c10028ac2480727fe962c3078fd8043c9c8e89bf617b6982351c072aeb6e08f3125986
- TLSH
  T1A70123BA90CC4900CA107FF1A22C6F5294577BEAB257C00AE9C5372B613C1879C7C74C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  GuiConfigs/dark/checkbox-checked-hover.svg
- Size 675B
- SHA256 d1e6072c73985d31aa66c249ce9c56184d3c3739fac537336cbc87576e660b10
- MD5 be43d7a7600d29c64d939bb9609c2baf
- SHA1 7cc5cc1034e3d8b5ac620ae500585f2e68e4d14f
- SHA512 41da5b75d2d9fd56ea24b6e2b149c3d9e2064511f0d1daeb7bdc309fe6b8b897438a934eda668ff9bd5be6e827f007b70f35787f7b6bf8c71f7844e2d4faaede
- TLSH
  T118019EBE80CC49048A107FF1523C6F52E4576AEAB257C00AE5C5361B611D287ECBC64C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  GuiConfigs/dark/checkbox-checked-pressed.svg
- Size 677B
- SHA256 06b4340fef3c75bc097d3b893eb2ee80b6dca427781719c72332649a2255ffce
- MD5 43836640ee5452fc42955b7fff577789
- SHA1 65efcdc379e392f762e911d9b1f2c4f7ef1d90c4
- SHA512 16a1a6cb5479929b9462aec962df7e5387a87a3c93eb818217248add09e4d83690dd63033d4a57200000a53819c7a968ce25b75eb2a3bce205ad105f12d6cd28
- TLSH
  T11C01FEBA80CC49108A107FF1923C6F6295577AEA7353C00AE5C5371B621C187ACBCA4C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32