f9ce008de685179f196a60c2b14ebe6a6c1fbf21d7958a65a4bd039d9e957cc7

Sharing

Copy URL Twitter E-mail

General

Target
CheesyPizza B1.5.4.zip
Size 298.7MB
Sample260922-mhdnwstdpg
SHA256 f9ce008de685179f196a60c2b14ebe6a6c1fbf21d7958a65a4bd039d9e957cc7
MD5 cb31817d254b5f42b56294c67c4fe915
SHA1 15d3833083e74240eda88cb23928379cdb16f617
SHA512 69a9c2a5f6bdc9739c7c57f69c3afdf46253ab449925d67e0866e7566de5b4e19a5c63a702326f66bb786ac7e4f27563cfd35349881b2138a891466b6fb6edfc
SSDEEP 6291456:BB+BEVmtyXmRjU9vHpgj1p7ra6TZDYW8oDuBtZ3HMJ7kkm/vqZJCP/qnM:BB+BwmtCSjOHpKp7rpYW8FHMJ7EKZUPr
TLSH
T15AE83355772E4DA1D81CF57B96BCC26ABA910AF5C1EF8FCA6F3AC1808E3507A031505E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  CheesyPizza.dll
- Size 5.4MB
- SHA256 29195a41b1df80971e1e8fb6c680fe125bbcf18ed0cca58d3c8101c3c2969271
- MD5 42dd5e5dd2b821f299f15a0cd545453f
- SHA1 4a72db73c6a7de0e918bff95226e1887ed090b2e
- SHA512 8769edec99e78367b24c11f965e2cacfbc0458a6efd22c8f16e2162fd20faf12d1014eef72f6ab54f4fdad4e417bd3f9c388e89ad3e5b0729435ff0591b5c796
- SSDEEP 49152:chGtlqwVwASOqysrNjBBdL+LDwq3fRhyY1OXFTWyLcuX2zVPfZIU6iThif:87SLDw2hyYUobKie+Thi
- TLSH
  T18A461757F9BA10E1D8FAC13583937236BA71B959437067D79A0086A70F32BF0A67E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  PizzaTower.exe
- Size 7.4MB
- SHA256 736a54519c4b7f5b08d5ca4faabfb16cf037b96660fcd71ebf91ead2078bf834
- MD5 aa1c027d92eeb209f9dd933e71348aa9
- SHA1 226a5ad4af6518531eee456565aa932b8e0af68d
- SHA512 723094efc22fc80dd548e110feb3d18788c8058c773bc6ef9b5f043e752e85cfcceb47895670a6ebfea1becdab7f0ab8b5f1de119b2c71c1c829553cd062647b
- SSDEEP 49152:1qm8yRo+qU1gBhLMML4d2zqzAVAQhNm26XN1Y8FbBXH6324vRt5lmCYk3MSOmUBJ:DML68Ad6324FlmlIMSybSQ9sNPMHfVAW
- TLSH
  T1F9765B45B660C1DDD067C039C15AA6FAE2B13C44DF9092DB66A03E6C3F73EE44DBA612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral3 behavioral4
- Target
  fmodL.dll
- Size 2.0MB
- SHA256 798b9d4d6e5c65bbae6b0f62d221bb846d3c5235a5ccdc645e0013b751895d0b
- MD5 06894b127371c7427378fd7eb564d2b2
- SHA1 af1038cc67d3710eed6fbc9773568389b03ea9d9
- SHA512 65c481c94d391d9657601eeea14f1782f42ff5b19057a4d0ff60c00114c70dcfba27e1791ccddb517c0f29d3c69bc5990eb39fbab5ffb553edf4b098b896040b
- SSDEEP 24576:XZlmFKbuUkbcKvRO+w4W0aQG0CZfsypKpLwNYdarwmg7FFCSyUt+8KJNmXk2OfU0:XZlmKbtkb/ZOKWryuf7a0bwsk+XNmXa
- TLSH
  T14CA5AE45B1B040E8E467A13DE647B73BFA317050272466CF4BA44A799FA37D01ABEB0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  fmodstudioL.dll
- Size 2.3MB
- SHA256 fed0cd9425eead8a66f7864551723da4b3a7bfbc3c5e674475289aa928391e5c
- MD5 9ded0e96a79ed6ed87d1ff270a81c5ed
- SHA1 b59d3deaa2d6399c6da188dfc23ac74eca195682
- SHA512 a0e800b78df448bc3b16924be023a496b4146a64810df988259f3ef142ae7f5f213d2a87692d3e719ec564699eefd130400d4ee3bbe34bbd665b011aca196923
- SSDEEP 49152:kmYgs+ZnLtT9zAZ2sxjE3iHbuezn9dOkZOn:kuwekZ4
- TLSH
  T17EB55B15B1A411E8C4BBD278CA4B627AF9F0305077A477CF4D688A759F23BE5523EB08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  gameframe_x64.dll
- Size 6KB
- SHA256 c784b006f45e3d58f33e5851ea5bb7dcec090ad7649215249a3913faa4d5f0f9
- MD5 e523e2c81b6aff5393d1ea593d4e7f81
- SHA1 89642c01a8ad9073506cdac306c035adc8c072e3
- SHA512 ee0450eb3158818ade5b2500ec4ec71f73f0a19bbf6aff5d695d6b6ba03c30fa5b61fd4d5f3a240d4cf303fd9b1fa198e204a3555a71d291bde90171b9645c91
- SSDEEP 96:fZICGxX+25UvEP4pqAMaNe9dndVF8+iT1RvM:flD2VmNIfm1R
- TLSH
  T1D8D1B65BA7A594F6E43743F88DF32707612DB0B05B6383DF8A0001993A22BD92677725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  mods/Example Mod/objects/obj_example_controller/step.gml
- Size 109B
- SHA256 02d0f10f532d30fb1e33fbb6d9cf0cf42b0b56186734664882f90b1da75423e1
- MD5 06b2cbb75662e9e3de3a70d76ab39a9b
- SHA1 77103d6e2eeed97bb8ed6beeb28c9e1d42082ee8
- SHA512 b4e5b1613fc251c7df4faee0b9e9cf860e1afe2c458c7df7c621a81f01fd309cc7f0a684b414cfff8d829e17ae2b0dbb2436b992d9bd59a61f3b1d26d97b7e09
- TLSH
  T1A1B0920BE048468A43A557316CE4E1A22400B8AC890375053A688A901D7492570A4A2A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  mods/Pizza Multi/hooks/instance/destroy.gml
- Size 1KB
- SHA256 3db1e716cb38e3fa961ad3680de6a91540e7d39a156025ef702519b21b113df8
- MD5 ad817267c69d71f20fc8266bd14da97d
- SHA1 b3da54df02aeeb07c4ae99e502c945130a9b1979
- SHA512 38449fb213c3a42ebf0199647da69448096cb316252f2af6407b6607b80eb1d589cb7dad543c2ab61f0843d018555f3a92f49b62a0063c0e4e199b87ce82fb81
- TLSH
  T1CE218924DA53B6E84877E758CB4A9802D9050023306FA4497BBCCDDC8FB41625D7A993
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14