7382d16627c61cbf6a529c536014d17ad47ded6353660a64d499b73fe126ab39

General

Target
hoi-enhanced-unlocker-dlc-2.5.zip
Size 1.3MB
Sample261002-qvphpswaqa
SHA256 7382d16627c61cbf6a529c536014d17ad47ded6353660a64d499b73fe126ab39
MD5 9559d2a9f895201b798bce4b5a510b9b
SHA1 0c2dbfe7c4922d85ec713d837309d2af207096f9
SHA512 05c56e9cf77574a4e29211b861fa6af63aa9cb8f490945cc425cef0c0bc4f0b7e00eecc3067c71a241cabd18e2dfa49329fbf84511523713530a8937a43a6787
SSDEEP 24576:IMZioZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRw:IMZioZ9bq+MmMEL+hcjXHC/wnwdw
TLSH
T1D8553387C17C18C84F3E06D7ABAF995C72288EFC100304766A6658AB253E75F87395DE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  Launcher.cmd
- Size 285B
- SHA256 1fab887caa066d040aaee133d831caabaf94ff9d98dab342a0e47dd926664519
- MD5 e31c01aad7fd46650088ff6250aa15b1
- SHA1 df37352a15f99cb79f88d412bf20b145f83cbd12
- SHA512 6bcd1641090815a2130b39b82bc17a2e39f51397f774857287b83995b07d6bf9035c2018b5bd8085b47405a05857469e751c6448c16be5b139c1db032facbd3c
- MD5 SHA1 SHA512
Score

6^/10

discovery execution
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1
- Target
  arch.txt
- Size 347KB
- SHA256 cf8ad38b4ee7859525558017c009b48685773ffbb255f88a170474439b73c0f6
- MD5 a75c65b4e56f7321d3658cb92ced94b7
- SHA1 c6c9d7de860a848e4053acca3993d2d914889e64
- SHA512 51cdad7f6e2559317d53f1733031dc947be0b8dfb73cd0eff13e1b87cd9c4c0b50d594550ff0c8e5370e069c748e5897c6e68d4399d1a60e74c63e622702b5d4
- SSDEEP 6144:nTltF21+O/4O7KwPk8sRIXgUA1Rc5Xo9EZ4Yj6575x1P:nTltM+mnKwPk8c7k6575D
- TLSH
  T14874B8F5514C0CF919FFA660DC6B9D9FA0BADAF10306664B0F1EE1A531A71A2C7CD806
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  lua51.dll
- Size 3.4MB
- SHA256 c7a657af5455812fb215a8888b7e3fd8fa1ba27672a3ed9021eb6004eff271ac
- MD5 4ebd617a3ad9a9619172bd14a902a400
- SHA1 270f66d2c84ee86ff4b07c6220c51abd4897b5f0
- SHA512 b008a00d7e57ef4786b14f28aee3880318820dd85d66539263a3f68b547e89bce8db32ad422d4eae6795219ec3ddcd72e7780aed9e725ed3c171d11492e47571
- SSDEEP 24576:QXEeYq+Fjb1h2Ac9qJqvqj+OhbaijGPDX732ywPKpQlABQFi8ePj40RvzinxO4xS:EEDv/2Ac9qB+OR4n3xBQKvjGQe11Fgl
- TLSH
  T129F54B49A7D1995AF112C2708E9B4375372BE410333B9FE76F8AE2203CD7AD8DD95602
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  luajit.exe
- Size 98KB
- SHA256 5343326fb0b4f79c32276f08ffcc36bd88cde23aa19962bd1e8d8b80f5d33953
- MD5 00f60ee3ff2dee681b5d7d442009b2c2
- SHA1 f5199b4191add11d02d58f521cbea21465b7ff6b
- SHA512 6e3754ec8596f3aaed92387c5bd56ee9d65fe54af6f44d2bc89b4df0f670e379137bc5eca5ba8aceb030bd4b45970b3c01f2132d1eef53f5070f9af4d4246562
- SSDEEP 1536:mmNzk2shF9CXUatIEqTIm4gKN2PwJy4wMUFA8:mmVvtQTKN64wHK8
- TLSH
  T1A9A3B5CBB6A44DAAF740423C80E6D321613FF6F0A6131B576A3476312F52B916DCB16E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4