14983682004c47502a839233b14c08230aa6a1186b6f43a95b5f235f87cd9519

Sharing

Copy URL Twitter E-mail

General

Target
[Windows]SurvivalcraftAPI_1.80-1.7z
Size 17.5MB
Sample260923-229yrsff75
SHA256 14983682004c47502a839233b14c08230aa6a1186b6f43a95b5f235f87cd9519
MD5 c31d7124bbe6a6cff650539cfd3bf184
SHA1 849d7e71d0c1d67650dd2df78cfe161ad9836647
SHA512 7658997e99db6bfb0fe32b65030a4e98bb19b7d0b33912f83f57c86a61c03cea93bec19f202f8e948ee4cb0506a5aca5b87496401bf8c5b61ce78c099ffad018
SSDEEP 393216:mMQ2VSRhsv3AF8g0EDb3z5Zpw0YDBLMqE1iC4xUoQV6+rOI:42oRhsv3rg0Q7zBMd6jfaI
TLSH
T19B07334FE37159C5D34930F9FE8E90C0866CA6B1B0B7B8EE800A71AD514E8B635A573D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  Acornima.dll
- Size 337KB
- SHA256 c8eff561bc295724be1720255983360f45efd912b3d32731e50bdbcaa489582e
- MD5 0e3ada6621f2116ce656ca29645d1b48
- SHA1 05ff85afc708459332c0616cf564623c5eea1fca
- SHA512 75c4e848db092e363514be703aee96b95cc2e7a8c15256f728d733f8031c0847b2cb8b0a77a3403c931eebfef34d1ae07162dc26ab884c5ad846b819d77859dc
- SSDEEP 6144:KHseVB31XcPkhL7RU/vr2TOEfbjrrG1c6/vBumj5:XeL1XcPGfR2CnG1c8L
- TLSH
  T1EE744C6973E85B36F7DF9B7E982415124279F406E71AE7CF287910EA0D427D08E30A63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Content.zip
- Size 14.5MB
- SHA256 05adaad8c2aea8312b7b1fa267691292f51015ad423a279ea90331d0f214dcc2
- MD5 e9633bc3d053e82d52a2af14195da5f6
- SHA1 0170a488edd1270eadeb4728591c478f81b97149
- SHA512 029d3ee98815b1587d97b8a96efc6f570901d2cbca4f55827afb7e62c91b1dffe740ebe73cb696fff3b2e4265e41f0d2cbe3154e4be5dfbf2ead32155fbc818b
- SSDEEP 393216:i9EagXcpQpI13oYKj79JMLxa9BFLYZMUZciYjZVri:MgXpItsj7z2x+KoW
- TLSH
  T1E0E6332DE7569C40D046AFBBB58F06C8F7E8866E55B2B05F05293029098EEF51B12F3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Engine.dll
- Size 372KB
- SHA256 350592cfff0ff1e341a5c03a345a251818182ecdebf217b8d00809fae470f6b5
- MD5 315f785c5d460650285e0a1925ea4ae6
- SHA1 a7a0539f049128f3915d3352e8a7b21534213698
- SHA512 053bcd7056c0a3489fccf3e7275fc4faa1e307f900c09e45572140dc03dff32d1734bcfd9f864ef9b2475299207a618267ddbb86d10301751d089986978891e1
- SSDEEP 6144:ixBQbneLdb0Yi5ZdPRcvZdg7mHMUXuL3j8lO9Q+Rf8aqPZlHc:Z7bMqCi7j8lqLf8jPZlH
- TLSH
  T117847D786FF84A29E99F07B8E0610B02E376E146F0A7DBEE5D9594F81C83754D9013A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Engine.xml
- Size 2KB
- SHA256 60ae052e7f9bec0a49265b77b15be742dee602ed24f5a96cab437d7b316d15e3
- MD5 36f5586c65a91a41592ae0776798ebef
- SHA1 d9aadfb6f1373c1266812fc86028f4074edb90d4
- SHA512 bf9792896a8a0b3d62f6adc8f4cf62dc2c0effc4d572593bdbb70133ca11295be57d0072f283ccd69ff57a3913ceed8ddb4fa0bf426b62a5932c55f16939055b
- TLSH
  T188415A64A5C29D060D3202326F70F5C8FE254C67125D986AB1CD3E93EF7A4C371AF824
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  EntitySystem.dll
- Size 59KB
- SHA256 3c9af28e29b99e2813ad6785cceb6cb7d3d6c996ca72d76263d4402559ef662d
- MD5 7600862cabe7467f28c3ee24431361ca
- SHA1 55a36691c085a204596ee414f44c1028b86e3b77
- SHA512 e11480a85d40810f9e66bfe4a62ecdb7a97c37d9128d01465d34fd29966c71daf84c970d86d5ac6421bb7572f820d4e31f20657f238719629de343d9f2f859ce
- SSDEEP 1536:eSNv+LC4VJai7s0vViAZ1e2inX3e+WGZujzNfC:e0v+LCksGFinnujQ
- TLSH
  T1DB43E64433EC8726D6FF6B3CB870414946F5B9166233EB4D0D8EA0E91863B805E62B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  EntitySystem.xml
- Size 137B
- SHA256 882ef92c007fac14aee7076fa0bd6162da195c5f62d20a1ad90c82a2a11beb51
- MD5 ee5f6134fc666c5717956d8c7bd44c05
- SHA1 ddcb07f3cbca16c577530e8bf49f2435237423f7
- SHA512 7a3733addf9ff1a8d2099f59672e7597022a5b893581b4db62739bea796be4cfa6bb7af6ee228b748938973a40d42c7540b8b26ff346f4b9acff8cc67b6b6a67
- TLSH
  T175C09242A6C8D62A0E32292B2FF3F900FF15872B20F22039B49C2B03AF344482397520
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  ImeSharp.dll
- Size 22KB
- SHA256 363e4000084102cfc063743a65f6878f17a4cb71a4e64914ef3a534f54428ec3
- MD5 339b46c4c0060a8571aff8f09193d709
- SHA1 5e197bd26f927018c632eaa8d06a07d25495af3a
- SHA512 5e935110be6fcd23830f0dfefbe852852cd4caeee5284ec5d55fe18e56b7a1f9c088d7b254b68c04f98e284a6cf618e89cb37b6cf7868a453444df68539f792c
- SSDEEP 384:jmFqgsekfwHyInsK4lwt8l97KB7IB+0HPJZyTmDlOMInNLOjdF23VR:9g44SI14p971B7RZySDVrFc
- TLSH
  T14BA25AD0D75B57B7DEC8977720A30BEA8170D1C42103EF4AC85890A97A63F932621BCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Jint.dll
- Size 848KB
- SHA256 1deb34eb232ec7e21a9c35c935e0f55c79d375b31710c231e1796a9c98f8244d
- MD5 443619a346a6930b0e1f3ae47257f3a3
- SHA1 e55927dd5b0e0890f979967205b69df8158a8736
- SHA512 0fc495cf9956880a55b8cfc9b5a41fa2998240976cfe067e956cf5fca6c946097df4dea0953d9ab7fc3c70b02857b5e82a252aeeeb7ad0bebf561c085b35fc19
- SSDEEP 12288:uE6BawB32IzTtCJCN0E9J7b6MCrewY7TtGmlDrSXljUhHw:dGJzeCNx9JSh7Y7xGzluHw
- TLSH
  T1E1056D2437F42E57D0EFCB72A03C582D46F5E8B4A6EBD78F9412B6D62D023858E44297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Microsoft.Extensions.DependencyInjection.Abstractions.dll
- Size 42KB
- SHA256 8eb026fb7d26716a08e7886c5133abf9130ecc722afb33bc66e44156b06f0a8a
- MD5 e8d86c8ea27425bfa8b59619ca0ca7d9
- SHA1 8880eb2a9d3ba942ae476c0fda723a5e2a0f1e0b
- SHA512 a3e4f3200dee2ab6a15e60baefeca86c40f0993adf958118b5349d9c85fdd0a1a8cff39d016758e600084e2e879a6c6ed37505e76da7520c424d9716288a64bb
- SSDEEP 768:8FYYVIUh9uYM0Z3bugwaEOZPyJAPP9buo0p9gIadk9zI:8FYYVIqkMqgwk6JmMo0vgyzI
- TLSH
  T181133C4077F88322DBFE5AB498F592016E34B7473502E716754A912C08D7BC8DE72BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Microsoft.Win32.SystemEvents.dll
- Size 59KB
- SHA256 e2188f28064940cd59f8c309f921e7b086a079f4a4e8e156d629b8c9c84844e1
- MD5 57c851020f5004fbfc4e5be1d451c0e2
- SHA1 e63aa6d74f2beb232d4dfa3979ee8a303f6e7715
- SHA512 ee80247f2dec64861b87f904bada685e366dd74489583343f55014b5c44fbe7f6552fcdbda9ddf2185eeef9650db6b245916d1cc639d5b3ff823379614cb82c2
- SSDEEP 1536:VaF4wN0z/mc+40W/nMhosIhdiA1u5inTJzw:S4wA+unMhIhdir5wTJM
- TLSH
  T1C5536C10D788C7E6DADE0D376D32A9011A3CE6C29A12FF7F318E644546A3FC65B146A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  NAudio.Core.dll
- Size 183KB
- SHA256 fcf493fc47a2f478a65303886b975fbdbf714cbb1f2d79f7fce97e4bb16b01a8
- MD5 48867f392b8e77dc06c062638c6fbd36
- SHA1 ccc0931e2cf3d6d79e24c1f28d9c96b40c131af6
- SHA512 b536e18c482dcf810ec30b9a943ec06e0ca4f6f2bd8f187b807a9a9fd90d28c4c2fb69bada4766c72e0b7942f5e7d40dd94b193ab01e68f666838698bbb473bc
- SSDEEP 3072:n5nFpdQWUY6GwfIGsnLRp2qr2eeY0nVuEtEVEOUkk6uSYsM+S76t:jpdQJY6GwfIGyRp2qI/VZtEVETtHG
- TLSH
  T1CE046D2963E84256E5AFABB1F0F208175BF1F4463037DB0E5D806AE92A07B11C562F77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  NAudio.Flac.dll
- Size 85KB
- SHA256 c0e8fc63d7aca4dc3ab6e8c0147c2dea63d482c750c3061eab9d324aaabdfc43
- MD5 7b2aa93e5f2fe9af7c5e5701e7818ca8
- SHA1 df60a245c2700e0c120335ccbfd15e735fe1b8a8
- SHA512 55c8a6dbf3ebb18aa6b48295d9805e1a429c67498f85be69e01e77c74eed60b1b1059e3cb3ccddb1a18721a68e92a00c669e9731471bf42260fef37af077c943
- SSDEEP 1536:lmP6iEi71UNwRR+q5rMIm5Nz4JnCAwlhLanfQwrOXeMq3uw2GE3Fow2icqOIKSC:lmCiEi7qoNrPazW1cUfQwrOXeh3uw2GZ
- TLSH
  T1158307FA02BC863AE69A8F37A4F410008BF5728535D3DEDA9C84A4D9AB353575533732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  NLayer.NAudioSupport.dll
- Size 8KB
- SHA256 ce0bd802a21d2cd48363642a21281fe2945e6c85b8ec3d838266cf30e60e32e8
- MD5 878f34b40bc76993f79d8b72c2cd6d3f
- SHA1 4808d8e105da288f156c4a62975c2fabda3e4a72
- SHA512 1212a764da1e71705efbecf6f4a95b922258948deac6c2bdee1e607a8e09a66f456acb32a5b43a7dfe90ee304e2562475d4ec5a9a18629ee3edeb3d744be614b
- SSDEEP 192:N4mwe+r1k/ZBP9MDGZaxng1byK2Yk+nHnQDnbn1:Tc1kf8Gw9K2Yk+HQDb
- TLSH
  T156F19315DBB8C237C9A74F7BB55243051734EB62AA03CB5F0988B29F6D273061E527A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  NLayer.dll
- Size 71KB
- SHA256 396908d2afbb95950c9adfbaf26e222303b31e707d927c9c30927cc2912e2a68
- MD5 c3b9d243a74ee04128df5e80669702fc
- SHA1 955d9deb104810900e560115d6d76928c44bb120
- SHA512 630531b5e5cbdde0597e392a2f4ff22c978d77c3c4310f044ce8bbacec5ba1957a680590a9b31456fd5c242d74562f63af0d5bd95f1fd3338e329d1f2e3efec8
- SSDEEP 1536:jZ5eX8EhRfIbe0zVBqfKsutXQGm75QBeY0:V5eXxhge0yViXv3BL0
- TLSH
  T166638B07779C6B93EAAE67BC843E051653B18235770AD3AA2D84A2FD4F033D195013AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  NVorbis.dll
- Size 79KB
- SHA256 d4fd7a6a7b8672b30f77de08c0256dbcbd0d3eee07b78554ebce97741aa7a819
- MD5 d18ab89a5dd28d1a67be259830a96ade
- SHA1 1e18c1d2842de07daafe91947469edae20db3e0b
- SHA512 2a182352edbb8079485d74d713a5d77dd843b8efcb7eea45f5851b98fdc7aead209a9181a29607b0a9a9acc80e43142429d2aaa5e94c879b8191f5bd6e876caa
- SSDEEP 1536:gHganAGQaCjsh9NugfAJqotg9brf+Q5Ttpt4OYTnAfag/b8K:cgaQdjyA0bDfpp0I3
- TLSH
  T124835C2437EC8722CA9F57BFB874510203F9F6BA2D53E3D6AB60A6794C03B8145147A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  OpenTK.dll
- Size 5.5MB
- SHA256 2bbd3ac9651cb1daab679da57020f1054d5c18a1b89621b92ba6ac7ab1b1b3ea
- MD5 788eb5c2edeefb63e99b7ce472238584
- SHA1 abafc75b6fd61c6f7c14aab8c78d9ead962da920
- SHA512 a53f4daf7f04033971efed50c307189b138e972629adaf2c2b1be072aa083ef750f82a3be96286520214671fb93f3fb21b1704315f064cbcdfc79ebe1ac23b7c
- SSDEEP 24576:/TSEpwBCydF/FKKXK1aGIcIfsk9CeV3MZKnIJMNrjiPmpii1uoZbFZDdxT8WutlN:/TSEpr0/XsAD3q+iwDDdJluauOGp
- TLSH
  T18046D709B7C55F2ED64A2E7AC0625476307BD96A67879703A103833E1CC6FD81FE52CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32