c70ae5dcc864e555079376b3b6ee3c3a7503221d4967113397b1784eeb47b669

Target
enhanced-dlc-unlocker-hoi-hothearted.zip
Size 570KB
Sample261001-1tyebst1e1
SHA256 c70ae5dcc864e555079376b3b6ee3c3a7503221d4967113397b1784eeb47b669
MD5 1073104f284ea381a7291f1851056fc5
SHA1 fc0e4a78a149a7f80d91df4076c8b3ff23b38885
SHA512 7d5473465e216da2b79f1111722ef03aa945ecb5e466cd26c03664fb7bffba3fde46f1059d7df97b7bfaffa2c6971f127e2e22bc0f8738fa647e29b39b346bda
SSDEEP 12288:T6wlOMWROC/FTeHo22Qm7NzofOr68mPeA924EwCp:L4MQOC/gHozN7NzomW8VA9S
TLSH
T14FC42304340641D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7FD06DE92A177C1837
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  Application.cmd
- Size 29B
- SHA256 7e8bd9ba64fcbd1cb753baa2f7bc8d5d7f3e91552bcdc9ec1ec04edd4916ff33
- MD5 5422fc71d463c77d30bcda71798a74db
- SHA1 26b77b33954bac81d5f0bab8d045f5489f622f2f
- SHA512 d3d94edc59e609ea97bd5162e823fd28ac2a5bc4cb920ab93107bf9855d44a6a1cf3046f9b154d9d1c1c0651bd751a95a9a0ffeec89d3d8776b56e946d65c246
- MD5 SHA1 SHA512
Score

6^/10

discovery execution
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1
- Target
  compiler.exe
- Size 852KB
- SHA256 8b42ca9d05badf0e7327d816a56e5516431ae34627da68e12ae9347f365b2668
- MD5 5ec6ab89dd62ba41e2a491ad40e60133
- SHA1 721acedcebcdc53f5993172e39b5dd58a7b5103a
- SHA512 283e86a03e14d67326ea57df79909909275b1fec55f3c6951d71699380c0e7b51bff8a007aa04737ea0834f7f5eaf057d17befda56a3615e6be829b59688a96e
- SSDEEP 12288:6628L2HCSGt4FMz4+PUlv2kyK5yB1Tazo/UCjTMnvKdsoFwhiHBjBZom:v2HCSucMz4CYbV5yBtaziU0TcSNFPhL
- TLSH
  T151058E59A27401F6D9A78134C9569A4BD7B2781607205AEF03E06BB73F37BE11E3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  dynasm.txt
- Size 301KB
- SHA256 f9436ccb986760ca379d6cd2f00726e032a1d9c250a9bd261d40d98b914e7ef9
- MD5 e482d9f2f0cdcd1b388e10c105f66502
- SHA1 5b7f6e5802ffd5895185da01d8a24fa16eba186b
- SHA512 637849ebc8c25e3a19ac3b6e91484cbe98ad20b1f9f465e9ef26ed20b25be3c1733e23b23fd35fea759890744ed4ff6ff49f297f4654c36d2a5e3b2ab33b3d09
- SSDEEP 3072:u2pEiyVKiCDl9Qyb+vdWehYx74R30h2wZ4WszR+fA0hnAU3OQePKkAX2SlY0UMm3:TzWvwq0hdJO+oA7aNs5s+AninIkN6ZR5
- TLSH
  T14F64E8F0108408D6D6ABC695DF6759BA51772CF0978B2A8E0E1CF4F036AF591DA8DF02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3