7b371c6063e1335e86ad279e00bcecfd629deba37e57ad0da4751f9c4019b5f2

Sharing

Copy URL Twitter E-mail

General

Target
NBA2K16 ONLINE by Ye Xun NF V2.rar
Size 182.9MB
Sample261009-3pbe4seh36
SHA256 7b371c6063e1335e86ad279e00bcecfd629deba37e57ad0da4751f9c4019b5f2
MD5 af6622f76e4a84f21d61e737e7fcda83
SHA1 634eb5eff720615beef2b460a88bac5f0279a9dd
SHA512 e951a3d07efc0cb9a8af0fb4e1b9cb79b78f5f1b0099b73147a35b30d355020e212787bcce30c971e57d6d866b379b9ce80f67ff81c43ecca3126ea74294cd61
SSDEEP 3145728:Y0fJxP/Hwo65eLZ1kWAk27E6DFaNfx/pYo6aabxQM/btKPg54SuLRADXzIU3a3ux:Y6P/25eLZ1szDFa//kQAsPyu9ATz/K3M
TLSH
T1B59833F3535E16574613C3C838B9E5F5994BE87242F5D9828403ABBEAAC7F40A63D342
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Targets

- Target
  NBA2K16.exe
- Size 66.9MB
- SHA256 e91beb4772ad1dd756f6c7437c02455b0c0a97dd34101ed882d80ad8d27632b6
- MD5 4f8a3e1e78794dc5c28dd9fcf60fc092
- SHA1 c8121e533a847595bb130049d1bac06cf96aaf16
- SHA512 3f731b70d39f16ba7bdb5560c4db45576de1157e0628a13b9937fac70a3ba219d3f9bfd47cdd74fd877691a6adcea3241a6c4adc5bd31372a81c8025fffe34a8
- SSDEEP 786432:8OwqZB2fVhJdX67FzxriPWsFNsas8Gn4qw37KG3TR67FzxriPWsFNsas8Gn4qw3T:8O/f63
- TLSH
  T1CEF76BA53F4058C2C967943ADDA7D305E3FAB014272107DB99A3676F1EE63C20C796E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  NiteCru_Import.bat
- Size 2KB
- SHA256 7bdad5746a48d2185ae0c0d55385277f23cf007e1e4dd74476122a3ee8f1868d
- MD5 760a2867cabf8634f9d4d3a1237ff85d
- SHA1 f107a57f62a69247cb99ef18816381751eae30a6
- SHA512 9aeaf83fd98eedafa3d4ec133e88e14fcda54adc75bc481dab2a1af28365c7ff8c515d15914815b937652105a6c8bc40a22a6f81a1461a82570c6ed6b34470b2
- TLSH
  T1B44122BFEE4956B1F9C0CC92360B7022361FE05FE6689A9571C552345F9D38A81F88E0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  floor.1b0dcddd8b72ff99.model
- Size 305KB
- SHA256 b08a89a1ce784532a25d900c67f5fd8e933b43969948b830d556bc97393eeced
- MD5 2a7e46e273be6db275e5031b556d7f63
- SHA1 5d0b5b9fb1b17456c9c67099c43e98dc0dd11a1b
- SHA512 808602120763e64ea9127188343f17ba1ebd331abbe3519cc3fda81d68b868164a96580f20e513307fc38ba6df1679d3769258ca11adfb5567faeed1cab36315
- SSDEEP 6144:kRBWarGRBq6pnjWma7DkSbawm+GzWwbQK7f3gdTgdTgdeTgdZfwMCM:IBW7q6LNT7fKN
- TLSH
  T17A649D31BF53715FF3CB84749B218B855D6757889CA0041D2ACE6ECA9A092B4EBC6F1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  world_geo.b9e323e66a2c443c.model
- Size 1.0MB
- SHA256 bbf020099b6495f369b11df0781a35dd21f0746fb38415e43ab259f21b0a6bf8
- MD5 8179b6246e700ca5ffee37d3aec4f862
- SHA1 42b25d00ca7809c323abd33748e8057b18f83b57
- SHA512 f71228e9580181fb247f08ff9318dda14d1510d844956c67ca94e8d34a3ed230047b54dd28eae329aa4e4aff9016830c870b16cbce560d3386b064a0cb52aad3
- SSDEEP 24576:5+H/dfxN4BSrSR0ZGGyZGGydGGydGGyxIyhOw4vFZ:SxN4BC6ygvFZ
- TLSH
  T143355962F3814E0BCA59A2775B6FFB7017D676564E300003BA5BC691927A7823EC3E47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  iffimport.exe
- Size 24KB
- SHA256 fedf5b758a68138751d3ed61103cdc67001c716ee92170022f51ef1344ce4eb5
- MD5 38c45b85e94fa1b6e327ba80d092ed4d
- SHA1 620c06320eec5bb2e6451f629412fad899ad0f78
- SHA512 062b500038a32f997e97987279a17c1205f6f6763c38ef89f289f9665b832f7cfc9322d4bdf004bce135be90a5b10518f68ee86723d0018ba0d074daa2bda227
- SSDEEP 384:DvJg/snWyq2lObuQHhpvnxzClmK3Z8oGEF9SKwINT5YXmaxYXqOCZ:1/gjx/LoGG9TgxOCZ
- TLSH
  T172B2090A23EE81B8F1FF5B3D04F203555232BD02B835D70E1D85A6AA1D32B99CCA5767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  nf_launch.exe
- Size 513KB
- SHA256 347ac0b012aa0f24758a5f3ae57aff77e7c2d6af7b942f9034d6c383ec04a6bf
- MD5 0d4367a5e1abd46ca17c07f697f508a6
- SHA1 bca4308134d60fb87f68935bed5d7d003f224277
- SHA512 b1da59d057144c3359bb0f4264b9e868b72fde01b0d5d3775e80a8914f3dcffae10c0759d8504bf193d5c43008a71d019857d2cbfd90f2799a892c7dcc01e7d7
- SSDEEP 6144:GexEvQaD3KqUNckJCsPY3nUIPdwe2C6SHBHUWq+9yN86IpKIGl9AvXZq2qOqB9SH:GeYaGkJCsPYE/SH9QFOsG+Jl/o2g
- TLSH
  T175B4C58336DB0CFAEE936B7C51D753366B35BE608B2A8FAB5104C2321C136D16D5AB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  nf_netbridge.dll
- Size 591KB
- SHA256 ae0075789c3879b48d26c723cc6eaac0816f19607fc50a7635c3ee4a0fdcc2d4
- MD5 365b2c0c3054e45111641bd2e084396e
- SHA1 1415d87e9d16e42a006d0cb480ac369a5a75ff59
- SHA512 96f8f4c0d1c69e1598f9c1612674b6a7bd2a9ba166cadb77102c6bb012813875f2679ab04e2ecbd7a687683fe408eb0ffe63e0f90035cb640b81c7b3122e386e
- SSDEEP 12288:qB4E+boMJR4N6rxPxNCSH9QFxsh+bW+0OH6:qK3bpW6rxPPksh+bW+0OH6
- TLSH
  T1FFD4088236DB0CFAED536B7C51D79336A736BD608B3B4BAB9204C13129136D1BD5AB40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  steam_api64.dll
- Size 2.7MB
- SHA256 1ce9ed99b02bb01232ba70407611a5ac442f1120bdf1bab4de41c5f91a007d10
- MD5 4fc6ce6b3d8b51bde1a693ce5fe3ec27
- SHA1 b4683ef8ac366d81d4fa1a24c3cbef88f058319e
- SHA512 6eca8f3e812e2a1b0a2ee855f9edf322521bd896926b0c2a0cec1c148f189b80a23fabc6529af8e46e4319f9ff4a274199b9d976e6bc52d6b35e7ab3d6d8b6f6
- SSDEEP 49152:QUnFDuVxjUlajqQmgSSj6teQHW0mqbzk3eu:Q0QxjUlajqQJ+eQHW0mqbzk3eu
- TLSH
  T1D1D5F94369DB0DE5DED667F8A1C353366778BD368B2A1F2FAA04C23168536C47D1AB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16