af8e59bff63258fc241505a62cb6c0422c90177d8de8ccfea92bef24ff53ee9e

Sharing

Copy URL Twitter E-mail

General

Target
Geometry.Dash-SteamRIP.com.rar
Size 308.8MB
Sample261027-k1w7vaby3v
SHA256 af8e59bff63258fc241505a62cb6c0422c90177d8de8ccfea92bef24ff53ee9e
MD5 64cfa16299543696615c2574e86f3758
SHA1 9d1db2e469671bff8be93d9bc50f49b1be4b36ef
SHA512 e2990326c948007d6b7dfea043d4b4cbccabd350f717860619b1e269155a5321b9bd56ab271504131bcb0b36d14898d502c52d6fd4c45103484584d668b62b30
SSDEEP 6291456:Zfgg6H8bIXIqqLpGlZnBfU4S1JzKzd6l2kraRE1O9nbDafjNm2FZ0YfX9ZhcE1c4:ZHm8bpnG5fU1DKp6J9O9nb2BFOUtEF1+
TLSH
T1B0F8336261E810BBC2F2626A057045427FB3C853D97DF219EF4667B7C2F76E9A4D0E08
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  Geometry Dash/GeometryDash.exe
- Size 12.5MB
- SHA256 524265b3781596fcc7c9e4d60dc5ac2d0a4cd9530ee3ea637e123f9ac1f9b6a8
- MD5 ad8fa13abdbe3c43468fc79f0f0b37d5
- SHA1 00b0d426f1f5adf306410c3c836cbf686c093bee
- SHA512 606bf7c1f465279b5f66668f795e6f52bfb4e6d426ba2bdf2b5afbda0b347212bf6d686b38e53b7ca6351986945581f68ed528bc580e53caedb0daa8f3ae3554
- SSDEEP 196608:v30GgWj/PNaJ3QAHPyY4aWKLxMP55Owiq+dWoaoroLfL:f0GgWj/PNaFQUyY4aWKmP55xibdWoao
- TLSH
  T1D7D605A69264C1CBE0E1C5F8C61AFD32C5B13CC89360649745E07D2BBF17BA71E69923
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Geometry Dash/Resources/xStep.mp3
- Size 1.3MB
- SHA256 9164bf3594a2b0d2ce80e80927bab95d8cbc2e80f5a0198112c178957b0a1621
- MD5 57390e094c37599a790095af692cc039
- SHA1 3d08f483e1a43f029164eb06d89693446f314f48
- SHA512 54ee65cb2965c89c54b85358e0769bd0d361f804a7c29183d11d89e6fffe2374016b68affcf7928f76e2c28c506103f6047f09883537607476c0b47062a07fd8
- SSDEEP 24576:C/QH9dD0uc1tKjUvoCcHvtui+CWoIADt4BqgepaI+lUlAOhYfe4gyAKNOR7rFUGM:C/M5ueUvodHvtuYWDAmBFeP+lIhYfvgY
- TLSH
  T1BE553315840CDECBF98D25306693B392D2525DEBA4063E1E39CAFE4393F3A05BB67614
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Geometry Dash/fmod.dll
- Size 1.8MB
- SHA256 223f0e3fd8af19dbab92b4cef1a77580aef3d0a510b47a76561833e31348b720
- MD5 0569b56b6d337cf0f8a37071c3161651
- SHA1 194997deaf17665bab1386a6718cece3eb515f11
- SHA512 68680f1dd7ff7eabf71d5930d17f8a5d1a0cdc8cf95a97f3f400db8972ab0c162809a98bfc16b79d91d6d277b98a1946237d891ced17bcff572a5d38f627843b
- SSDEEP 24576:JqpE431ZFDhvvXm3AZ+RswSUSJtYP2MFZeiwjRrDKOlpGjQ7OJo5Tpji:JqpEkbDZv23ZRVk7YUrGO/I0aMVji
- TLSH
  T1EE85BE85B1F584E8E427D13CA127FB2BFA72348407206BDF47E045A96FA3BD15A7A311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Geometry Dash/glew32.dll
- Size 492KB
- SHA256 842a3f20177eb44ac0413116c66430f9508bf88a05fcdab14284a566d5d0774f
- MD5 0a3e7e9bcc0471f9f9d47dbe631e7c52
- SHA1 94f7a7e5ab3cba29ca0bf9e39f99cbbd4016036f
- SHA512 bf2a3e213b589e2e7a0f35d8258ea59b837c3044665d2cc78e9106f801b18a0d64e5f91ffec5a8829c39a69bd37ade5a871ad6c67d23f02397aa224a526d3099
- SSDEEP 6144:EkI4/e2zcb5gJ0rNxITpz0km2AiSu0GW05TiZ3VyfJt4QqU4qoZU8rnzMoL3BhQm:BJzcnkz0PZvDnzR/FJxl
- TLSH
  T11AB4A1AAB45F4B92F503703159529F9BC239E444B02EA39BB047344B3FDE79173683A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Geometry Dash/jpeg62.dll
- Size 789KB
- SHA256 de96d250f25fd6a50add6cea1e6abdedd4e56c05aebd1706e8255d5a4e0b2f1d
- MD5 4f3fa0a8560db931d3fdf18b344e49c2
- SHA1 2eb187fe495e58ea8c1058fb0f923a18592358ef
- SHA512 387a5613f6f0ea9330021a3b59edc099de02cfc3c9c66d5a2a42cd3e613f5d271d014293b2364c6ce11bee39071d9fa09bebbf4bab3bb9fc62f1496249b73a13
- SSDEEP 6144:IhG01pcez20aA7lISOd9Zn7TJfnn1CnE+qWxec0dOT38VuGwjt20Znh00URbkf1b:cg0PISOdrn7Tln1CE+Lqz5EUF
- TLSH
  T19705D203F2655C87C7E28034DE6AD975EB547C2D8BF746F7B080BBD93936AA07922640
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Geometry Dash/legacy.dll
- Size 98KB
- SHA256 0e7cda5a19c5313666db3ed74aac84b3d679f8f0704a03044b988bbfa9857042
- MD5 fba2de9746e180ac2df3a7b4ed15d79a
- SHA1 afccbb71b773c5c7eaa4cc7e88eea6419d168b3a
- SHA512 66a39df5af1bfbd1a92ac4e0af69563476d7bdc6a79f8997444e6b97548984350453544a1186114de46136b9eee3dc31eeff78616b34cee7fb94a196a6fc53be
- SSDEEP 1536:9irxRfI8+3liz4ytH/vLXL0XcrsEuNvgb5hmKZ99HbIey+X:9irxRfIF3lizJNAE997uO
- TLSH
  T121A3E702BAA110E9CD65917888F78D26E3B2F87517A147CF0B78622E1FB37C42E39755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Geometry Dash/libExtensions.dll
- Size 304KB
- SHA256 70783dcf99690aaa16b9773ed61f4bbb25fdfd6604dd2938eac470cbbed53ee5
- MD5 3db5df0cb04db5dd663cee3db7a0d4f2
- SHA1 89649d3875c2c18dcedd597f63cceac2e21910c6
- SHA512 92c1496936295213c3f1af9aec45bc5e001b38856bc7e12791f939c82e286cb6e913d72c79e2a8a1ce448be78d896b98085891c5b81c28a4a62cb5d58b0e559b
- SSDEEP 6144:s4dvYkXXq09Agm+KxMv+rsssO3cZDb4TP7pCxBo/j:rdvB+tUosss9aT
- TLSH
  T1D264810BF22A0D9BE1E6DA7ECA238405D7B3B8415B42F2DB05C156E53F933E46D7A520
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Geometry Dash/libcocos2d.dll
- Size 1.8MB
- SHA256 18a663ed1f457809ea0807c50191e2471d9d2dca4c047ab5dafa13d1aed57068
- MD5 4a063e99e0ca45587ca26d81a597d9c7
- SHA1 3ae712b8b1bdb5b5c8826e6397e3eb2ccf1604e5
- SHA512 a583e60992fa4d78e24d5770f4de71f3274dbe59597c355280850a17aca4d7c568a805ca638d12a50e305f8ca72698d33b054eada692e6ed84053795c644bf6a
- SSDEEP 24576:qxnHYoNmT78aca7C9fQYONF20TS7xKez:2n4oAT78aSfQYONve
- TLSH
  T12D85380AB36A0899D5A6D27BC99B9C1AE6F3F0140BE3A7CB15D902DD7F537D0007EA11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Geometry Dash/libcrypto-3-x64.dll
- Size 4.4MB
- SHA256 c5976bb8527b63d8667891da7807555b1941d44e1c0bf202c62c72212794535f
- MD5 1aff0eee5de8a85ff2ca71dcc5a07eb6
- SHA1 ddffe84de8fe6becbd30811bca8e4390e584d3e8
- SHA512 686dba07e3d474cfcbb57997fcbe746da0f493abd5e2d056fa41408ac9bdeecbba816a5d1e91d33a6a35564bf0bbeba913b6e3894084a9e0496962f9c90723a0
- SSDEEP 98304:Hc+54J+7X7eAoFFujyPkxx1CPwDvt3uFFZCdo:8W4J+j7eAoFFujyk1CPwDvt3uFFZCdo
- TLSH
  T1FB269E69A67C005AD86A92BCC2C35227D371B91153F05BCF6E6886FA0F63FD4267B740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Geometry Dash/libcurl.dll
- Size 527KB
- SHA256 3ffb64501f5dde0a7fd817bea0bda3e470fa58c6ccb7500e1b3758ef316ff396
- MD5 95b7db05e0c4b7d08eedb426601249a9
- SHA1 99efb20deac3984fe941471dafcd80823beeca54
- SHA512 124e1fd8be2105d3d0b81c061769de8987b775da69b8eec77a92f9f60ffc68a69f0451c6d68dd3031cb6c656256e1882468f51c49d2750d0624fe0010888bd0e
- SSDEEP 6144:0FeRbBF+Wn1uLLEQi5HDusWCG7yyWzIcM4c75pPe27VtHwFgID3xAucFHegrh:CaloiTWCGuyWz/+5BeWVtHNHe
- TLSH
  T197B46C56B3B417A9E167C13CC6578603E6B6B0552321A7DF13F0CA7A1F13BE2663A360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Geometry Dash/liblzma.dll
- Size 181KB
- SHA256 b8725ff8b702429be2ccd86d5b91099f08ea7427708348b8ee99566b295d1ee5
- MD5 58e1375c32569cae6f5d6a05e86d8b4f
- SHA1 ebbfb0b512229be7c4fe1697b84729cd34b9b113
- SHA512 9bd8adc69391235c3131ce281610fdca161fa57273d98ca1af05912e2fb258193f2630e78c80556834ce776eff4eda6ca23b6d2ee49f9e9dd22eab74343c890a
- SSDEEP 3072:neVdvoE839PToIqGnN6zO+IIVH7agXv5oi8JBCREQuI9mNofZOwDvt:nMvtyTTqk8Oe58JBCRpYOfwwD
- TLSH
  T1A2042895A694E0E6F2678C38CA674B43E7F27404031096DB02DC837D2B6FBE5663A317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Geometry Dash/libpng16.dll
- Size 193KB
- SHA256 6f2fea5495917571e3df55d20a4cfd266ccdab4a8ff9683445a42cae724ea5d4
- MD5 ae179d7dc8d18962500b1f3fe0b1d914
- SHA1 03d5aa4616a9cc261c80bee40b260b25daee9335
- SHA512 13f4b78793f1c8010b216d4802bb2ba4851951d9df193f3ae81863e6a1b75568f8b0bd020b107bf9d0abdeb8cbac89a441fb5c5829b8563468960462815e5ca4
- SSDEEP 3072:wDdA/U3PXyqdf6ZqA24+W9u7dSmS1b0XTBBuwUt:wD6edfp41MdSb1ouwUt
- TLSH
  T136147DC7B26400A9D9A7C03C8547A517D2F1796913509BEF1BD08BBD2B23FE87A3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Geometry Dash/libssl-3-x64.dll
- Size 761KB
- SHA256 1bea1193f8f103c077cc09f913216685de246bf9b5234ea89976d07ee4d8f7e5
- MD5 a6d66ecdc2da250500e12bb26666ce5e
- SHA1 0ddd69b5b48e780e17f3fe53651a72952a695738
- SHA512 dd4bb420898f244b80e4501da63ff1957aadbb584b913979be6c93cab4bdcc10f271f029d00c2a16185182c1e3390a903518680b11db89aa5c6495087ed63311
- SSDEEP 12288:yIvndoeLxJafxl/79SHDdD+3YTRiNWMcdEVB3:yIvd3xKleJKa6NcdEVB3
- TLSH
  T12EF43BA9B7B8159CD876C13D86538623E7B6B4163370EBDB0B648A760F23BD4263D344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Geometry Dash/pthreadVC3.dll
- Size 60KB
- SHA256 7e6417c37145bcb72efbcb97053a793ea92ac3efaa93673b1e4b578be3501ff3
- MD5 f988de95c6730cb31beb3da2ff402a9a
- SHA1 1ca50300d984f52598678e3373efb5c96b8ec8e3
- SHA512 e2ebd9e0bee83b58268c74dd6da65c00e5fdf5b3de642e56704186c01da4ccb79e01aaddf2112a5087f3ddf20654147b889ef1d8a1ee8158a502c966d62d696f
- SSDEEP 768:EYsfSkT117VfM0jqUIeO8l9Bv3NiS34Q65jjGFwzHgpElIHQO:EYsfv11xDlLRV6JBzHgpEAj
- TLSH
  T130531987121811F8F5638434D1A66286D273B81B53A6A6CF93B0CB171B7FBD2DA7C781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Geometry Dash/pthreadVCE3.dll
- Size 62KB
- SHA256 49fd35b5d137aa20c97edd9542e9d26072c6668d7769694694a73d7ee9840bae
- MD5 e8ece83e33fedf35f9c68900f7502d6a
- SHA1 148452db5d9015f9748a8fc93cfc0a9bc37ef8e3
- SHA512 21301b3869b7cf3bf8b02305701547f2ba39c6e4f48c38c0867fdd8791e5e0cfba7893fbad07c1efccf5eee0cadf00e3c43731e36cd8d57b46f9301d5dfc8bb5
- SSDEEP 768:B37yC+XiXc4Weo33wY3mGEvh/s+NS7fi72HHnu4iJzXdzHgprXO:12CRTe6vhk2S7fi72ubddzHgprXO
- TLSH
  T14B533A96526801F8F5638434E1A65682D233F8075367ABCF83B0CA1B2B2EFD2D57D781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Geometry Dash/pthreadVSE3.dll
- Size 61KB
- SHA256 780080e2049076bd4833ec639194de0604829fc0f0ff1a37b9223938ac9e1ef0
- MD5 7f920f0c157816fad7a2a4c76b1c08a1
- SHA1 2ebfbf20f9aa026d3045e1dcbe6574e4d07e0d71
- SHA512 b8077abcfc460636a3f481fbb982c545e2d6360a6eedbe402a5c204baef475e237dcd0e870570dd22069c5fa0cdf76a45fc4a06763fc600a4af65753d845531c
- SSDEEP 768:iVHesfaESmCH7rpxZlGxckvjigbKpXQJD3BXYxt1KnaWkzHgpgbinc0Drc:tsfaEyvbGqeLJDumahzHgpgkc0k
- TLSH
  T1C3532A8B536811F8F563C43891961686D173B81B53969ACF83B0CA1B1B2FBC3DA7C781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32