701cb78d69972fb3426ca391f5ac9721e40c891a41217188341c64e7b2196050

Sharing

Copy URL Twitter E-mail

General

Target
Granny-SteamRIP.com.rar
Size 715.7MB
Sample261024-144dbsxtfz
SHA256 701cb78d69972fb3426ca391f5ac9721e40c891a41217188341c64e7b2196050
MD5 f288ecc4cc5d7132c5773ff5af17f672
SHA1 94466bd031620db6adc0951044fa1aa94e25c4b8
SHA512 c6fa8d8ef0b97f96d40cf7d7e5b573a53f18887da3e8450d4e5401f1832939b6d05f505830637084dfb40c4566d87ab65b236d147f5dfa0bb0b1b52560704986
SSDEEP 12582912:wl/t31kNw7qcseX86cLNBNrdMiCob0kz5j+YwUYPMbbRnW9CQUsLk+CL/91srRDX:wNnk+8PNBpPFb0kzR+YwUMMblnWvUUfP
TLSH
T10F7933AEB8667D93E0075377930E0F8BF27087E73B8771256139AA2978D1BA0163F514
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  Granny/D3D12/D3D12Core.dll
- Size 5.6MB
- SHA256 31f364f2b3aa1753e7ba9ff912d0721c8f424be5fa14503efddafbb30c635d3b
- MD5 f2ba8763a1ef9857c4d4b7cab5631edb
- SHA1 296b7e537d6e986a2e4021834fad3334867acf3b
- SHA512 44f272560e1dbc282e70cb07c87e95ca3a7ef41839ebd20194fc411c67626e9c54e6f4b261aed3670dd21c6829b56ebdd0d28319207834a236fc462f97d4ce91
- SSDEEP 49152:k6PExwEh3ElnqHtuNfXlOunv5YcoqqjThYiwQF0Q29DgUOkpiq0SpTqJQEnUR034:1GYNfC50LRgg1x
- TLSH
  T13B565B47B2E942D8F1B7D17D8FA74A0AF6717421632097DF12110B9A6E13BE04B7B3A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Granny/GameAssembly.dll
- Size 37.3MB
- SHA256 e260d044cbaad538dccc6767e7e4344cc3abeebe7c56723acf1672ba5dd7af9a
- MD5 8fc4742a16e3770a4e21ea1534c656c9
- SHA1 412bb76d043dde637cb9abdeac0d3bf253e5f11c
- SHA512 85945fe08cb3f3348db2eaf00420b79995c052873c62fe7d22885a4fa15ea9c426a8ad1f8b09d3aff562688dec71a83140b42ac2e41b371eceb5680e4fd25566
- SSDEEP 393216:+wTZ8Co/7yGJa3UfVm7/F0S91/qNMFcNVFWpss6LohBjGsn6zJ8LWKjhwPHw:v6ZDDa3UwB0S91/cXsn6zJRKjhwPw
- TLSH
  T1AF87174AB7758448C0AEE1789A13189BDBF13C405F646BCB20904B9D1FB77DCA87BA71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Granny/Granny.exe
- Size 656KB
- SHA256 4871133ada7f623e0ca3128459c99faf6414f5c0177e9eab4dbe80eacf2a3e5f
- MD5 a17a665b42ae4c8c5f21ce2c032cf5d3
- SHA1 f791ecd183faca2249dce2e1bf82e711eb422710
- SHA512 3c6f04969467560be7f0aeebea9cb7cbc91930c000ae150231bb72a73a94ae4cbbe92fa807cb4570143c8f74fec12fd6cb23112ea79b275ac98153539bff0226
- SSDEEP 12288:P2NCDdJr3d4auDfCSofvRrHgUG6o5/Gr2WDp:ljauSontHgRB/WnD
- TLSH
  T185E48D590F684CCFD2510A3805A0F379A2B45D722B26D3A7DBF59D773E25E832C4A4AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Granny/Granny_Data/Plugins/x86_64/steam_api64.dll
- Size 7.0MB
- SHA256 4e9d12d437deb68a7f0db73f4db2fdc03428ae8b2aeefbd65d577f4140688529
- MD5 bcaaf64313369574d1fe5bf3a5dca1e0
- SHA1 e3aaf940b4410b4be1b90aa0437cd896017c412a
- SHA512 3846e4cd2818858720037a7b6bdc2ac14f85a568894862491a96961c7394477bd689b89f85c6c5dfeeaa00bb2fe866224e015f8ca5740d6de34c60841b406506
- SSDEEP 49152:rFVX+2wmw6X8pSrhXzP72O0PZKogvk5WFJpQ12hNHEMGs7bw4jQP7GTGwbYsj75e:o08k52OKFW3pFhF19+nU9zsxQq
- TLSH
  T193761917E7BA01E5E5B6C1789553223BFD7134958334A7DB9B805A0B1B72BE0EA3E340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Granny/Granny_Data/Plugins/x86_64/steam_api64.dll.bak
- Size 243KB
- SHA256 2197363bfcf05fbdee84afd7dec6d58721587cb3dbf57c0f02b38e82c5cb5d41
- MD5 3a0b908e4d059125dd79d9014f5b67a9
- SHA1 75576f6a714b7255cbb4910348d241b90466b52a
- SHA512 a13d05eabf9a9c514217ddd3111891d63c333287476489c50a2dcc72dbe6f2f5a3fb7d5f1c67d860214e229fbaf34d78de911b3df75b821a86341359de6548ef
- SSDEEP 6144:3nGFfNdDpDT1bnqIzmpCL0P9yCCJ5aYM6:3GFfDp9bquQVyCCb
- TLSH
  T161342A69633108F6D5B6D13CC9915A4FEB71308B23219EDF2B94433A4E27AC17E3B295
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Granny/Granny_Data/level1
- Size 1.1MB
- SHA256 8815c9a1d7934fb2684a838c93b49773ca8c41202a8391988b2f40eb36b4a828
- MD5 0678df2e40151ca3ece132b8a88979b4
- SHA1 1bbb8368a0475228b44bdd10532d77870292df67
- SHA512 1dfa45c33cb76de5a5ff3525b78c06410a0bcb5680aedbba61d04eaca67c05f5ea5c7f7c9e380a9b95cac8b4682edb5df14de1d2886ae67b143a6e6c6f7b9902
- SSDEEP 24576:hTQv6YAxWNdhyBnNCvdHTMboTFOMjXhF0MwqM0Y37CF:hTQcWNdhyBnNCvdHTMboT9FB
- TLSH
  T1B8452F2476848A89D066623B1137BF91C91EEDC913B18B23377747EC4EF17E9AC86178
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Granny/baselib.dll
- Size 223KB
- SHA256 368b11fd3e372d938ae3aa0759b1f961d66bf5cb990ea1a573951b5e95ecb4bc
- MD5 14e284e5b8a9e6caff3f0c7f3ac15499
- SHA1 fdff6db30b204db413c0781012030bbc2c14a2fc
- SHA512 0e9214137b9579d5116aa6eccea41daba663eb077b726bd1248ef022bc917801aa0b36e73b19ecd510de6ed756f7d97f8ad45e376d87152a747f9d97460da0cc
- SSDEEP 3072:UAmWtNWxw0Yd/sgyNaytun4ePFoA+Azg+fTUfbBZblnE5oPcp:UAmUUGtyNaytuZPFolW7UjpE6c
- TLSH
  T12F247C45B3A409B6FE7781B48D435A56F67238020344DADF43A483B99F2B7D0663F7A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14