General
- Target Gamble-With-Your-Friends-SteamRIP.com.rar
- Size 605.3MB
- Sample261024-hvfa2axx7p
- SHA256 b24a8364246ceeb03b169b5bfe7030d5219e9e3db17c8f6c7472a01397229359
Malware Config
Targets
-
- Target Gamble-With-Your-Friends-SteamRIP.com.rar
- Size 605.3MB
- SHA256 b24a8364246ceeb03b169b5bfe7030d5219e9e3db17c8f6c7472a01397229359
Score1/10 -
- Target Gamble With Your Friends/D3D12/D3D12Core.dll
- Size 4.5MB
- SHA256 625bd40005b1c3708695d5256ecf230d278e6b8edba5a88af70f3d91324f3052
Score1/10 -
- Target Gamble With Your Friends/Gamble With Your Friends.exe
- Size 652KB
- SHA256 d587602bef7b8c717034a300b11adb17dca31525c008e97dcadc4c779834e9a3
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/AllIn1SpriteShaderAssembly.dll
- Size 32KB
- SHA256 26ec9da15b6e175f0b2022d6fc3988b9cd86099601daf2469fbf8108e07a4085
Score1/10 -
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Assembly-CSharp-firstpass.dll
- Size 115KB
- SHA256 ba53b0e29b13784c3f804110d8385bdf21f0d5441c1040b4d71231863f2c5644
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Assembly-CSharp.dll
- Size 1.5MB
- SHA256 c4b69c9723273afefdf418209f8204800272e00eaa2e1261be68d64bd4b47b3c
Score1/10 -
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DOTween.dll
- Size 173KB
- SHA256 d74bfc3f37cd97d90f7f08a9a73e204c5eae66e77be24b12378a4e99f1690843
Score1/10 -
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Discord.Sdk.dll
- Size 164KB
- SHA256 93b11ba9fc5d3aa1e770dc9aa4f054590cb11e7f4ad63250a86c7dde1a133ce3
Score1/10 -
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DissonanceFMOD_Playback.dll
- Size 16KB
- SHA256 0967994a4a82a5579a461108cc94d9796a5f6efb9f720aa6d4d292d3c404bd7e
Score1/10 -
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DissonanceFMOD_Recording.dll
- Size 10KB
- SHA256 3d8278a540fedcf47bf3409475b1ec9bc2afd2ad3a6080760cfbf461556b1bc6
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DissonanceVoip.dll
- Size 328KB
- SHA256 12688e6f1bafab1a476e94feef822159612aa2b73a08f6e0b3c59b4701985348
Score1/10 -
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/FMODUnity.dll
- Size 227KB
- SHA256 b76f1be7db133e88efe48121f1c97444836c60dcfb0b46b9bed1f263b9063184
Score1/10 -
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/FMODUnityResonance.dll
- Size 11KB
- SHA256 18dd3350604ed2cb6b33afc0035316b4ebf842da7f803e5223109db8a6fe1b6c
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Febucci.TextAnimator.Demo.Runtime.dll
- Size 8KB
- SHA256 f6543d64b63af0451e91cc6d98e2fedef803c63e6d8c35e0132cd28ce589a734
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Febucci.TextAnimator.Runtime.dll
- Size 81KB
- SHA256 b24233386166035f0984ab017749b99c9160bfae04f2ec71dac23c1cefabd741
Score1/10 -
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/FizzySteamworks.dll
- Size 36KB
- SHA256 cfa1e00f1e6bbf5e3f12825c36322456fe68edc560f557fde432f7fe75292b48
Score1/10 -
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Gilzoide.UpdateManager.dll
- Size 36KB
- SHA256 1809aaeb77ee02d960d6aa1204536c8475f6517e18217662b0b12bd3251aa209
Score1/10 -
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Lofelt.NiceVibrations.dll
- Size 18KB
- SHA256 1216f5c27b35f109f498cdeebfbe41238b3c5f8fc23de3ffd038649cce1e3a17
Score1/10 -
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Masking.Runtime.dll
- Size 31KB
- SHA256 ab7c41219de387f529c8e95b8297e0da2acac17595168dcf7dbd01586d5d7d8e
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirage.Profiler.dll
- Size 13KB
- SHA256 0f6b951f10faadd72ab200b51cc027037096ef40f40213b1e113746a833fb66e
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.Authenticators.dll
- Size 31KB
- SHA256 3701683fcbae6ca57e1ca47151378c925194a8146db685e6807dde95eb7dfce9
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.BouncyCastle.Cryptography.dll
- Size 6.5MB
- SHA256 860787fa58288910f9ef0b3147ac1df96623d4d7bd7bc309c9161871b0819fcf
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.Components.dll
- Size 172KB
- SHA256 e307a850398834e07cc096734a5d204bcba7f821b017465e6456741913e1de5b
Score1/10 -
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.Transports.dll
- Size 93KB
- SHA256 8be75fc602a7f554d03a05599b0b9b0add8978c1f3bb4ac04cedc72004a4ef9f
Score1/10 -
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.dll
- Size 222KB
- SHA256 3411f17cc3093fcbeaaf7beabcfccb0731447a4ef9796fbda6d76e42ea72afab
Score1/10 -
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mono.Security.dll
- Size 235KB
- SHA256 095361bdec0d4cedeb86e32584f51e02ae9f74f0bcf105fe34347c12ee09544e
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/MoreMountains.Tools.dll
- Size 1.4MB
- SHA256 6163e1b45349f9f90cbc33fe05f7537040f7c0937038acd3447440f2712b11d0
Score1/10 -
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Newtonsoft.Json.dll
- Size 675KB
- SHA256 a56146202232958f46bd6a28b5a7da166aea123ee0d646735a46e5c341dfbf1f
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/ShapesRuntime.dll
- Size 373KB
- SHA256 b034b211cb2a669733f5ce37edbaa4410596d6680cc496db9725911161b33c58
Score1/10 -
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/ShapesSamples.dll
- Size 24KB
- SHA256 ac203c6022c04de60ed2d9b58c07bfa9253bcf21152bc061aca0cf48eafd838f
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/SimpleWebTransport.dll
- Size 47KB
- SHA256 473383ad839c46e586b8fe6f809c7682901a93feeb2155d54c4dfa7cf0735ba5
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Sirenix.OdinInspector.Attributes.dll
- Size 103KB
- SHA256 983a4b65af2b7894390efe1ebdae3fad3de000a5d8af015109fee642d15bf0eb
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.