365a354fe4fae663ec57c54429e9bf964011e14d79626cf45c12a963ba77b538

Sharing

Copy URL Twitter E-mail

General

Target
blitz-legacy_0.2.4a.7z
Size 294.4MB
Sample261022-2b89jsav2p
SHA256 365a354fe4fae663ec57c54429e9bf964011e14d79626cf45c12a963ba77b538
MD5 3492bbab093225e16a95be37adc7d4bf
SHA1 f40a86514c5d35e548e64b02405f67148cf98686
SHA512 946179a92da2af1d9039d381d3852d03fd539c05961efb6f23a125e6648cb2512e9dcd3c5583e8367381b632b6b33376695099989adf9c156e8dd7d9ba2c6a41
SSDEEP 6291456:g7+kFB4M3rLYFPZfu9Z5HYviLhszySEXNRlnnp/7z62WMkOp+9ptO2We2A8s:qFB4yraPlu9ZjhJ7zIXM+9V2A8s
TLSH
T188E83303516F5F39C27BB26A99831D220451BD80785E0BC7D33F79EAEC3516A72ACE24
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  blitz-legacy_0.2.4a/Engine/Binaries/ThirdParty/DbgHelp/dbghelp.dll
- Size 1.8MB
- SHA256 9a02133854ff9f06c3b23a70f8c2a4814b2ed4eef613244b485e3737259ddf9e
- MD5 a970b7fcc13c18a1998cf65a5b8cb699
- SHA1 e4e2c71ed0caac10e4a1555b54c91d03bfda01b7
- SHA512 4dfefd27487f706a5f59181735cdf2f8e80a6b354d756bf198bdc0d0ffb1060d4576ba8bfbcc8f7f5973f106d60e07d31bfb94b3034138bded9f1cbb8c224a46
- SSDEEP 24576:92I0ZwKNsVquEs4na7aDb4FzoRlUFs/9w7l38jxb9X7IqLC4X3:92Itw/s4na75c6Fa9IlE5EqF
- TLSH
  T10C856B5A52EC01BCEDBEE13C8656821BD7F27825172197CF16A0876E6F27EE2163D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  blitz-legacy_0.2.4a/Engine/Binaries/ThirdParty/NVIDIA/GeForceNOW/Win64/GfnRuntimeSdk.dll
- Size 3.1MB
- SHA256 e741479b13faab35b34a60bd9e8b09791ea57d260a9336b44916e73ba2246d30
- MD5 c5be9b2846ad20b7abf3b1e3afe3f3ff
- SHA1 8f513f30ece2b7ce69021f5f0b6f3c7387544f02
- SHA512 5cf5ae65177e30361eb07840400c74c4b3a02a19670a9bc086c828bc4c51cc3a77385a8ee2027374cce3793573dbc14f655e3471da26f23575bbf9109f063d93
- SSDEEP 49152:smV2iSnjfr7LqZfJqsQFJ1xFilsPi8SL64d:LV87+KRBpS
- TLSH
  T1AFE59D1677988195D177E13CD99F8B5BC6B1B0089B2297CB209487AE2F23FE54C3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2 behavioral3
- Target
  blitz-legacy_0.2.4a/Engine/Binaries/ThirdParty/NVIDIA/NVaftermath/Win64/GFSDK_Aftermath_Lib.x64.dll
- Size 1.4MB
- SHA256 516e14af41a91fe960363728965f354aecc06bcdfaef6bcb45dd3537ede09195
- MD5 75a2969970775c2999e5c0e9bd11dacf
- SHA1 e8848291684ce2b65f48d4d04a67e93e23ef5164
- SHA512 06a90b6aaaeee5664d3a171521c5e4bcca89e51f0fb5e69f7655f0fee2f1ae674d7c75fed174ce4e32a2e2b3ae44dc816276b5740ec6257db61bea94c3e21962
- SSDEEP 24576:i/KlxXRBfAGKt1tEoG8wkxdShweSbSr2I6dM:GK/RB4Gg1tEoG8wkxdShw5S6In
- TLSH
  T193655C157705C2E9C02BE078CA934E8BD3B1BC919B2067DF72D15A281E73BE55E7B290
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5
- Target
  blitz-legacy_0.2.4a/Engine/Binaries/ThirdParty/Oculus/OVRPlugin/OVRPlugin/Win64/OVRPlugin.dll
- Size 3.9MB
- SHA256 d42d9a1b40ae9e4a86a1dc00536cc7139daea5addbddd32ca386c5b24b000cb6
- MD5 345bb5009e199bbbbcb3774ac9b92971
- SHA1 6b5fee4522ab7fc459e49b5d6f7fbd7d6df9cf80
- SHA512 6f77ee39118894d61373fa8ce3af9236ed4fe9e347e909adee42fd7ee559677aab29ed26fc8abcd78b01699349f2dba3f9b841f6dd135f462c26f9ee9898f6c3
- SSDEEP 49152:d+6HOA2JQ4at/5gY5AS5maSzZpVijLL/hWHz261RbC7tcT653zcbD1dHrYrmdm:Mgxm5ZdT2frmdm
- TLSH
  T1DF165A57A7B444A4D9B68079CCB79B02E3B238081BF186E7235105EDBE1B7D03A7BB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  blitz-legacy_0.2.4a/Engine/Binaries/ThirdParty/Ogg/Win64/VS2015/libogg_64.dll
- Size 48KB
- SHA256 284a6e70a6dce01f8a02d93e1bb78baf0efb6140459c587d8986d59fb6bd675b
- MD5 cd1f16736ccc5dd8c8ce8525957f4cfb
- SHA1 654144e0ddedc26b0b3be8e6562784abad1b471f
- SHA512 357df96397e21662194a30ce7f5d53cc202fcc464e1c06312eb12031c5683305638b7e674e5b4b758e142facb00963a53c419c430ea2b419b62f97c14b4812af
- SSDEEP 384:GRKN7KRked7VWjLmPnUunFqphqaNQL2PnQftfKNRvrzAcojOYPu:dkSQyQUuFq19HAhjXu
- TLSH
  T1DD235A0B6724A5AFE43A507E89EAC356D07A7810D3212BDF0358974E0F23DCD6D3A769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  blitz-legacy_0.2.4a/Engine/Binaries/ThirdParty/OpenVR/OpenVRv1_5_17/Win64/openvr_api.dll
- Size 583KB
- SHA256 6c5e18a3c12ddb9618c1edb36cd4834115735c1f3096bd4cb2022c3593af28b8
- MD5 9834f26b57de754808ae3d78a649323d
- SHA1 339510ad8c488148681179607e99990c4a4633bb
- SHA512 601a93497d8bca26653c74e208539063782fc0517f718c3721604577be2106fa9cbc24b5868bb8d6a32457c1014863f398d27a74dd48fb5a870f6caa617824fd
- SSDEEP 12288:Dd2NkqFa9Nr0Kyvf+VwBv+aiawlM1lonxPgW:Dbq09tFAfv5L3APgW
- TLSH
  T1EAD48D5AB7A847BAD4669134C963894AE3B27885077187DF13E0427E2F377A05E3F321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  blitz-legacy_0.2.4a/Engine/Binaries/ThirdParty/OpenXR/win64/openxr_loader.dll
- Size 608KB
- SHA256 2ae94572256dfd6d7e992a4474797d8cfe14cf3c030b2040a5b91a7d7bdfd8d8
- MD5 b2fa012e16597663c03ea02134d42a32
- SHA1 4ef77f73dce0cf262bf4ea8a1fa88022252ee66e
- SHA512 4e996ce78316fd71299ebe22dfc655c45e1c95672a1598a00f3433285f257f97d62a418bb0ca06716efcc2467b63b760a1ce64cb73b2e845146df5c7c4c6528f
- SSDEEP 12288:jM5/UqTILE+xs1iom7uey6rbJI7wIoa5TqrodDU:jM5/UqTIY+xXJuey6rFI7wIv5TqrO
- TLSH
  T1DCD45B16A2AD01BCE0ABD03C8A575E12F776780603B15AEF03E046676F1B7E45F3A761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  blitz-legacy_0.2.4a/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/APEX_Clothing_x64.dll
- Size 1.2MB
- SHA256 12e2803bca4a46990b6a00d2cb0869931181d82942e3a7853afb4ff795def072
- MD5 0b61bd104d431055b1ea5d5a7b608ab9
- SHA1 4c5f8cea43222cee0ed49d26b7b213dba4fe52d8
- SHA512 b395c8801bcb13962290364cb78c9e68509f71012775bc7f26fcb9e7204fe40daa93f664f188ad423be592337e8fedf4be19e4a2575c2e09fe9454b0923f8e8f
- SSDEEP 12288:YafheRojeXDHoZuwkGdcnKxXgWb18j1g+h8RjjQzH9FP/SwcIr7WxAvqj:YaJ8ojuIZuwkGGvuFRA79FP/UIr7wAv
- TLSH
  T18E457C4A727A41E5D56BD0BCC26BF11BF6323005030446DB53E286A9AFB3FD44B7AB16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14 behavioral15
- Target
  blitz-legacy_0.2.4a/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/APEX_Legacy_x64.dll
- Size 3.2MB
- SHA256 58ac9873ad9f1a4b6c7e607a86980fe00d992ec08138c16a5021b4890ef25b1c
- MD5 f958454319b2757aba7adc295fea89cd
- SHA1 9a0561d5c208847441b0e6e4199977fb70ac5f90
- SHA512 ee86a9b65b911f3a4aa3b4b25b932ccac8f82474b2220217b0c5fb2a313dc7772e24d87f9abad94cb4ef65c972c6de69c28bec05686fdc7abadc3409c6ea1c93
- SSDEEP 24576:JqL1PPXyEo4xuhI/Nlubl6NASrXjaG0t1lgEZooyS9g0Rm:JqL1Pvi4s4Nop6NtrXjanlxZLy0g
- TLSH
  T167F5E6DD7A6D4500C856D3FCC643A66BE9B2B2442F9567CF192082B99F23FE0A634F44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  blitz-legacy_0.2.4a/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/ApexFramework_x64.dll
- Size 1019KB
- SHA256 cce437454486fd7fdeb7b24ae2afc3e3b5123a1b739c7de0061b313bfff88e3b
- MD5 ef0ba4ab9321242dc5713a264a8da0c4
- SHA1 6579caefec3c565f9003961d18db9a712910b329
- SHA512 15a04f24bb34526e989215a5ac32a379f1fb358e0523d0459057daf8d325a9fa70e4ae1718485b9e403910a80a0023601062397d756b22dc32eb57692afc11b5
- SSDEEP 12288:lW9Of4W/7YTDOKQc+EHCr4ZpodxMeObK0E/sNl4TKNiZ:Y9X2JcrHCr4ZadlOO0WTKN
- TLSH
  T1A1255A4A723901E5E527C0BC856BA60BE6BA3482071047CF13F15ABB9F63BD46B7B315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  blitz-legacy_0.2.4a/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/NvCloth_x64.dll
- Size 259KB
- SHA256 46bc7ad33191c1fc72192002e6a432c1b9399d42c8849bcbd6a9487a777fc254
- MD5 e4ef58dff418857f576d40bb9a48040e
- SHA1 0599104ecb935aad9a7926ddb6cd9ffd02fb75ee
- SHA512 625af21aa3c5f206377d87d3d135b2f3b157bc95faf01a2057be75c78a9bf2b14ce8b27832c794d713f40a02e29ae4400504155afd6cbde898a1a2f0b6336ec3
- SSDEEP 3072:CjO7+h685VrcwMgu4UVjlFxkoi9xru2Q51nlQdLWJLMd5sF/BWwnaxBmO00:Cc+hh5ZwgNUVZFmo0rovnaWFXBOar0
- TLSH
  T16B445B59727E5DA0E863807ED3AFBA0FF1217904074085EB02E5019CEF17BE95F7AA52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  blitz-legacy_0.2.4a/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PhysX3Common_x64.dll
- Size 1.5MB
- SHA256 1ed491817611f251cdea84d438ccd9d9ab8cb7cf42a1ecd7476834b7bbe53be4
- MD5 34550b51772813110dd5d9c72bc9220d
- SHA1 e75a1dc4ecabcedf4f727b34ac36fb4c137f4b57
- SHA512 b4db45c9e955a0989aa8b95f701354c5720ac1b4c57a7d6f73141affe5787d12cb91542ab75d8c52bdb0aeeae67a30cb5fb245489d23ccf2ce55f5890ca8db35
- SSDEEP 24576:usC78OxGDNgoG4BDC3YIUXyu1FtfDR3RtFQBULfTogubs:usC78v1y2Ft7R3JQWjTogj
- TLSH
  T17E75F65024FD96E6E43A6428B06EF41FF521B4090B2449D7A3F10588BFB5BE34BF3A56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  blitz-legacy_0.2.4a/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PhysX3Cooking_x64.dll
- Size 239KB
- SHA256 bff31ef9eaded496fecdb1e2f89f3108b9529d6e221e56d53c7321cf2575bcd4
- MD5 40f98378ad1e52c485e9a6eaeca2892e
- SHA1 84fe474164d2261323ebb49bcfc996601cf5723b
- SHA512 3865df50aaca45586804a217b11d2625aceb2892b2a754bc1c03b5f7b272d629c2a6f6f6cea016da53e2764eda28c3ee1298f77821ce6ff59d8c7d2065dcbeb6
- SSDEEP 6144:Q7G4nOZPYUAsvOGiNEPBTEvPziDljrcAg:j4OpYUAs2GiNoIvbiNH
- TLSH
  T130346B4572788CD9E177A03EA51BF50BF67238410320C6DB43B6855A6F63EE06BF6B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  blitz-legacy_0.2.4a/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PhysX3_x64.dll
- Size 2.0MB
- SHA256 09c50ddccf9b31dcf97e57505f0b4616c8a963b6d4502ce10d836f0c460a1b00
- MD5 2fa1eeaaec322c035f71d1d3d0b74e8b
- SHA1 5cad84013c7edadcf717475bb2747d03596773b3
- SHA512 f8889069c8af9619cf04b82f16cb3340fad6c18e14e5f52f2b8287db23b7aa334d15b1a8bc921afa73a2e548c76819375aae85422267d5a0fe2b122a961f3e78
- SSDEEP 49152:P0tDdH9vBHJlDGvjCbHHH7IOqVph6Lm5PtRdDf4ZYv:4lHHH7Js3
- TLSH
  T193A56B46327980D1C6BB90BDD25BBA0FE53138050710A6EB13E5464EAF63FE507BB729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  blitz-legacy_0.2.4a/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PxFoundation_x64.dll
- Size 53KB
- SHA256 7690c1572c74cf8029258fa1feeb00ba938d6a6c4b5fea34b9fb421224672dbe
- MD5 e0d4f8c026f96c3300073935c35d2207
- SHA1 19251e84bb99ab238fb04f48c89382f9f04b2227
- SHA512 0de3ec81ec26a113a1aba762f1953250ef94fdda91c43e407e75249c012c63bced370cbeacd8ff79d88be8510fd5bb33cf879e23dcc6d8e4a317cce9e2bc0a92
- SSDEEP 768:w9Kd1REO4q6Dnwm/KQEFlyUKdXjAPrFANEeW:wAdnE7XDwmwlypYFANEeW
- TLSH
  T17233088532AA40C5F63ED17EC5939E2AB4777A1057D146CB0A24835E2F223CC67FB62D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  blitz-legacy_0.2.4a/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PxPvdSDK_x64.dll
- Size 184KB
- SHA256 39a7088bb1cb810fc2d6e461d3517339b34769d61ae5447df9ec3a629e048cf5
- MD5 ed4f5fad3a24d004dc775dea23f6c56c
- SHA1 4b1b71387f5df0daac28ae98fb0acb0f27755383
- SHA512 bd79d6f697ecf2f3b9bf1e62a6378463b3c8e9cf1c2f45f6dc7637e498e64289e783adea9973ee6d728f3274e7fdd1813f54fd31e48b4755c840e9a7e5ed35a4
- SSDEEP 3072:qQE5hsEHt/iQutkJJ5Y4aErpFpiw59d9WVqw9QMCC:7rjQuQE4ae0lYw9tC
- TLSH
  T14A043A8A323E0091DA7BE07C8E438A49E17234864781A7DF066947FA5F17FD5A53F329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  blitz-legacy_0.2.4a/Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbis_64.dll
- Size 1.6MB
- SHA256 0f66dcb5837e9b59c499277fd272b862043356aa9145802cf0a63e00a1bcca59
- MD5 ce94029c20227191bf97f6d719b651c5
- SHA1 aab805e149c4d8e79005ed190e60fcf11cd2639a
- SHA512 3a2aab9532b249d289395bded693d29e611322fbcda206e011877512764e6f2a55091cb93099282e02ce0ab2b4f98aa1b9f7f7343bec8297898f3d2331cd10fa
- SSDEEP 6144:XbbUbUwlPxtVNA0ueMSMMYGUXoz0A1VoqxRCv:PulPcDe2XNS2
- TLSH
  T1E0850F0759928B34C1BC50B588DB557853322C4DAE800F9E7BDCE67434D3678BEA2BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32