ea0039ae59dea17e721c14acb2c149c511547c2804387e081984cf10f15a389f

Sharing

Copy URL Twitter E-mail

General

Target
Geometry-Dash-AnkerGames.zip
Size 402.6MB
Sample261024-m7fjsabt4m
SHA256 ea0039ae59dea17e721c14acb2c149c511547c2804387e081984cf10f15a389f
MD5 6c398a0156e0af40d90ac7cb82d550e5
SHA1 f46aeb154d559704543dcae3c66b4d4b7c98e007
SHA512 12bc4d6a612da80c8cde201e69dfe2be7df444906b8913b879df78ad1ecc0cc8a00bc6771a281a22bb05a68d4566ee6561bbc7f11e6ef6ca1ce80dcad7cd41be
SSDEEP 12582912:ACk++rYbhsYO0igqv6RVzzHjm6pm9k05+6cZ8t6xs:Ar++r6QgI6RFHbpmCw+B8t6u
TLSH
T1AA19331AD2ED10B6D2B7A7BE00B102127CB1D407E53C6217EF46136389FB2E95B93E59
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution

Malware Config

Targets

- Target
  Geometry-Dash-AnkerGames.zip
- Size 402.6MB
- SHA256 ea0039ae59dea17e721c14acb2c149c511547c2804387e081984cf10f15a389f
- MD5 6c398a0156e0af40d90ac7cb82d550e5
- SHA1 f46aeb154d559704543dcae3c66b4d4b7c98e007
- SHA512 12bc4d6a612da80c8cde201e69dfe2be7df444906b8913b879df78ad1ecc0cc8a00bc6771a281a22bb05a68d4566ee6561bbc7f11e6ef6ca1ce80dcad7cd41be
- SSDEEP 12582912:ACk++rYbhsYO0igqv6RVzzHjm6pm9k05+6cZ8t6xs:Ar++r6QgI6RFHbpmCw+B8t6u
- TLSH
  T1AA19331AD2ED10B6D2B7A7BE00B102127CB1D407E53C6217EF46136389FB2E95B93E59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Geometry Dash/Resources/xStep.mp3
- Size 1.3MB
- SHA256 9164bf3594a2b0d2ce80e80927bab95d8cbc2e80f5a0198112c178957b0a1621
- MD5 57390e094c37599a790095af692cc039
- SHA1 3d08f483e1a43f029164eb06d89693446f314f48
- SHA512 54ee65cb2965c89c54b85358e0769bd0d361f804a7c29183d11d89e6fffe2374016b68affcf7928f76e2c28c506103f6047f09883537607476c0b47062a07fd8
- SSDEEP 24576:C/QH9dD0uc1tKjUvoCcHvtui+CWoIADt4BqgepaI+lUlAOhYfe4gyAKNOR7rFUGM:C/M5ueUvodHvtuYWDAmBFeP+lIhYfvgY
- TLSH
  T1BE553315840CDECBF98D25306693B392D2525DEBA4063E1E39CAFE4393F3A05BB67614
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Geometry Dash/glew32.dll
- Size 492KB
- SHA256 842a3f20177eb44ac0413116c66430f9508bf88a05fcdab14284a566d5d0774f
- MD5 0a3e7e9bcc0471f9f9d47dbe631e7c52
- SHA1 94f7a7e5ab3cba29ca0bf9e39f99cbbd4016036f
- SHA512 bf2a3e213b589e2e7a0f35d8258ea59b837c3044665d2cc78e9106f801b18a0d64e5f91ffec5a8829c39a69bd37ade5a871ad6c67d23f02397aa224a526d3099
- SSDEEP 6144:EkI4/e2zcb5gJ0rNxITpz0km2AiSu0GW05TiZ3VyfJt4QqU4qoZU8rnzMoL3BhQm:BJzcnkz0PZvDnzR/FJxl
- TLSH
  T11AB4A1AAB45F4B92F503703159529F9BC239E444B02EA39BB047344B3FDE79173683A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Geometry Dash/jpeg62.dll
- Size 789KB
- SHA256 de96d250f25fd6a50add6cea1e6abdedd4e56c05aebd1706e8255d5a4e0b2f1d
- MD5 4f3fa0a8560db931d3fdf18b344e49c2
- SHA1 2eb187fe495e58ea8c1058fb0f923a18592358ef
- SHA512 387a5613f6f0ea9330021a3b59edc099de02cfc3c9c66d5a2a42cd3e613f5d271d014293b2364c6ce11bee39071d9fa09bebbf4bab3bb9fc62f1496249b73a13
- SSDEEP 6144:IhG01pcez20aA7lISOd9Zn7TJfnn1CnE+qWxec0dOT38VuGwjt20Znh00URbkf1b:cg0PISOdrn7Tln1CE+Lqz5EUF
- TLSH
  T19705D203F2655C87C7E28034DE6AD975EB547C2D8BF746F7B080BBD93936AA07922640
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Geometry Dash/legacy.dll
- Size 98KB
- SHA256 0e7cda5a19c5313666db3ed74aac84b3d679f8f0704a03044b988bbfa9857042
- MD5 fba2de9746e180ac2df3a7b4ed15d79a
- SHA1 afccbb71b773c5c7eaa4cc7e88eea6419d168b3a
- SHA512 66a39df5af1bfbd1a92ac4e0af69563476d7bdc6a79f8997444e6b97548984350453544a1186114de46136b9eee3dc31eeff78616b34cee7fb94a196a6fc53be
- SSDEEP 1536:9irxRfI8+3liz4ytH/vLXL0XcrsEuNvgb5hmKZ99HbIey+X:9irxRfIF3lizJNAE997uO
- TLSH
  T121A3E702BAA110E9CD65917888F78D26E3B2F87517A147CF0B78622E1FB37C42E39755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Geometry Dash/libExtensions.dll
- Size 304KB
- SHA256 6d6e22a50c7736a3844bbd80a1b43de936feb380a3bf99c3ab550c3a992236ad
- MD5 20dfa2accfcbfe0603b282438710c2c3
- SHA1 5c6787bc4e3d6641d3aefc202fbed6194a5b76b7
- SHA512 b40de13703bda3f07aab26f64a3cc198375629ff73a3d9fe6703f7079d51b9e702a0d4010eb8830801813050ddf7279fc4d8320bdb0dec3f462352f9c5d5641d
- SSDEEP 6144:E4dvYkXXq09Agm+KNMv+rsssO3cZDb4TP7pCxBo/j:TdvB+pUosss9aT
- TLSH
  T18B64810BF22A0D9BE1E6DA7ECA238405D7B3B8415B42F2DB05C156E53F933E46D7A520
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Geometry Dash/libcocos2d.dll
- Size 1.8MB
- SHA256 79c2f6567e5851225520803f460c6c5f6f49a2eac9afb8f3bd88d4c5697bef4e
- MD5 7608ec8138a355bbaccaf4fc69e29cbc
- SHA1 11af82bac31af2f168d2174d9bec554b06ac262d
- SHA512 6f587bcc0c139b0383be6901e65e5b81c47380acef7dc4f45ae65ec32eda5b8b978c956eebd6c91ece17ecadc170badf8721b25abf7b8f75d86bf5252841e927
- SSDEEP 24576:Ef1Ld2wsOUKg4yvKnTj51pGsQYOtEI2ck:21pEtKgLv0j8sQYOtEZ
- TLSH
  T14285280AB36A0899D5A6D67BC99B9C1AE5F3F0140BE3A7CB15D902DD7F533E0007EA11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Geometry Dash/libcrypto-3-x64.dll
- Size 4.4MB
- SHA256 c5976bb8527b63d8667891da7807555b1941d44e1c0bf202c62c72212794535f
- MD5 1aff0eee5de8a85ff2ca71dcc5a07eb6
- SHA1 ddffe84de8fe6becbd30811bca8e4390e584d3e8
- SHA512 686dba07e3d474cfcbb57997fcbe746da0f493abd5e2d056fa41408ac9bdeecbba816a5d1e91d33a6a35564bf0bbeba913b6e3894084a9e0496962f9c90723a0
- SSDEEP 98304:Hc+54J+7X7eAoFFujyPkxx1CPwDvt3uFFZCdo:8W4J+j7eAoFFujyk1CPwDvt3uFFZCdo
- TLSH
  T1FB269E69A67C005AD86A92BCC2C35227D371B91153F05BCF6E6886FA0F63FD4267B740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Geometry Dash/libcurl.dll
- Size 527KB
- SHA256 3ffb64501f5dde0a7fd817bea0bda3e470fa58c6ccb7500e1b3758ef316ff396
- MD5 95b7db05e0c4b7d08eedb426601249a9
- SHA1 99efb20deac3984fe941471dafcd80823beeca54
- SHA512 124e1fd8be2105d3d0b81c061769de8987b775da69b8eec77a92f9f60ffc68a69f0451c6d68dd3031cb6c656256e1882468f51c49d2750d0624fe0010888bd0e
- SSDEEP 6144:0FeRbBF+Wn1uLLEQi5HDusWCG7yyWzIcM4c75pPe27VtHwFgID3xAucFHegrh:CaloiTWCGuyWz/+5BeWVtHNHe
- TLSH
  T197B46C56B3B417A9E167C13CC6578603E6B6B0552321A7DF13F0CA7A1F13BE2663A360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Geometry Dash/liblzma.dll
- Size 181KB
- SHA256 b8725ff8b702429be2ccd86d5b91099f08ea7427708348b8ee99566b295d1ee5
- MD5 58e1375c32569cae6f5d6a05e86d8b4f
- SHA1 ebbfb0b512229be7c4fe1697b84729cd34b9b113
- SHA512 9bd8adc69391235c3131ce281610fdca161fa57273d98ca1af05912e2fb258193f2630e78c80556834ce776eff4eda6ca23b6d2ee49f9e9dd22eab74343c890a
- SSDEEP 3072:neVdvoE839PToIqGnN6zO+IIVH7agXv5oi8JBCREQuI9mNofZOwDvt:nMvtyTTqk8Oe58JBCRpYOfwwD
- TLSH
  T1A2042895A694E0E6F2678C38CA674B43E7F27404031096DB02DC837D2B6FBE5663A317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Geometry Dash/libpng16.dll
- Size 193KB
- SHA256 6f2fea5495917571e3df55d20a4cfd266ccdab4a8ff9683445a42cae724ea5d4
- MD5 ae179d7dc8d18962500b1f3fe0b1d914
- SHA1 03d5aa4616a9cc261c80bee40b260b25daee9335
- SHA512 13f4b78793f1c8010b216d4802bb2ba4851951d9df193f3ae81863e6a1b75568f8b0bd020b107bf9d0abdeb8cbac89a441fb5c5829b8563468960462815e5ca4
- SSDEEP 3072:wDdA/U3PXyqdf6ZqA24+W9u7dSmS1b0XTBBuwUt:wD6edfp41MdSb1ouwUt
- TLSH
  T136147DC7B26400A9D9A7C03C8547A517D2F1796913509BEF1BD08BBD2B23FE87A3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Geometry Dash/libssl-3-x64.dll
- Size 761KB
- SHA256 1bea1193f8f103c077cc09f913216685de246bf9b5234ea89976d07ee4d8f7e5
- MD5 a6d66ecdc2da250500e12bb26666ce5e
- SHA1 0ddd69b5b48e780e17f3fe53651a72952a695738
- SHA512 dd4bb420898f244b80e4501da63ff1957aadbb584b913979be6c93cab4bdcc10f271f029d00c2a16185182c1e3390a903518680b11db89aa5c6495087ed63311
- SSDEEP 12288:yIvndoeLxJafxl/79SHDdD+3YTRiNWMcdEVB3:yIvd3xKleJKa6NcdEVB3
- TLSH
  T12EF43BA9B7B8159CD876C13D86538623E7B6B4163370EBDB0B648A760F23BD4263D344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Geometry Dash/pthreadVC3.dll
- Size 60KB
- SHA256 7e6417c37145bcb72efbcb97053a793ea92ac3efaa93673b1e4b578be3501ff3
- MD5 f988de95c6730cb31beb3da2ff402a9a
- SHA1 1ca50300d984f52598678e3373efb5c96b8ec8e3
- SHA512 e2ebd9e0bee83b58268c74dd6da65c00e5fdf5b3de642e56704186c01da4ccb79e01aaddf2112a5087f3ddf20654147b889ef1d8a1ee8158a502c966d62d696f
- SSDEEP 768:EYsfSkT117VfM0jqUIeO8l9Bv3NiS34Q65jjGFwzHgpElIHQO:EYsfv11xDlLRV6JBzHgpEAj
- TLSH
  T130531987121811F8F5638434D1A66286D273B81B53A6A6CF93B0CB171B7FBD2DA7C781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Geometry Dash/pthreadVCE3.dll
- Size 62KB
- SHA256 49fd35b5d137aa20c97edd9542e9d26072c6668d7769694694a73d7ee9840bae
- MD5 e8ece83e33fedf35f9c68900f7502d6a
- SHA1 148452db5d9015f9748a8fc93cfc0a9bc37ef8e3
- SHA512 21301b3869b7cf3bf8b02305701547f2ba39c6e4f48c38c0867fdd8791e5e0cfba7893fbad07c1efccf5eee0cadf00e3c43731e36cd8d57b46f9301d5dfc8bb5
- SSDEEP 768:B37yC+XiXc4Weo33wY3mGEvh/s+NS7fi72HHnu4iJzXdzHgprXO:12CRTe6vhk2S7fi72ubddzHgprXO
- TLSH
  T14B533A96526801F8F5638434E1A65682D233F8075367ABCF83B0CA1B2B2EFD2D57D781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Geometry Dash/pthreadVSE3.dll
- Size 61KB
- SHA256 780080e2049076bd4833ec639194de0604829fc0f0ff1a37b9223938ac9e1ef0
- MD5 7f920f0c157816fad7a2a4c76b1c08a1
- SHA1 2ebfbf20f9aa026d3045e1dcbe6574e4d07e0d71
- SHA512 b8077abcfc460636a3f481fbb982c545e2d6360a6eedbe402a5c204baef475e237dcd0e870570dd22069c5fa0cdf76a45fc4a06763fc600a4af65753d845531c
- SSDEEP 768:iVHesfaESmCH7rpxZlGxckvjigbKpXQJD3BXYxt1KnaWkzHgpgbinc0Drc:tsfaEyvbGqeLJDumahzHgpgkc0k
- TLSH
  T1C3532A8B536811F8F563C43891961686D173B81B53969ACF83B0CA1B1B2FBC3DA7C781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Geometry Dash/sdkencryptedappticket64.dll
- Size 1013KB
- SHA256 3ab6108a5bf057fa1290a32b6a341da9de59a4485e6a3934bb691747c12d4f94
- MD5 c2cd8c57e3738b490ca5590814b83ccf
- SHA1 b8b0496deecf9cffa33f299483ff86741b61455d
- SHA512 0c21f4076d3228e9a2e248f96e5103f57dda6953e74eb7663d63cad26a3ff0e637faf6f20f399b0e8d1ee8ca4ea9b0ee4063e397878d2c142a03e8b7ca6b1458
- SSDEEP 24576:25svDrdY7Gl6FUjRl0YAldDReOFXVfpYHQePI/9:hDrdY7O6FUjRl0YAldDReOzfpYQePI/9
- TLSH
  T1E9256D1A66A811BDD9BBD07C9A179907EBB5780603B18EDF07A106662F237F05F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32