9751c8c427e27e207658338d2d2ef4470d6be0131b3c01adc8307d07ab1a4324

Sharing

Copy URL Twitter E-mail

General

Target
Burrow-Setup (2).exe
Size 65.6MB
Sample261027-kgla8sda86
SHA256 9751c8c427e27e207658338d2d2ef4470d6be0131b3c01adc8307d07ab1a4324
MD5 056979fe1c09f47960eba95d032fa30d
SHA1 136f45850686d6ef83619427d36fa76a6e185e7c
SHA512 4395fafad1b171f69181f9f4537de1900d34f14198a4a66559d1d4b0967fe6579c5cf836b840fbf0e64bb4f1e93f5cc40200e8dbad003a43d55a48001ee7ef37
SSDEEP 1572864:Q10xsM5UOD683qft/iCq8dHxfu/gmyIuGraoTf9nOzNUAZ:Q145US62qft/huom9uGraoxOzNx
TLSH
T156E733395425D518FE3C89B32451B62B98B8CA35823CD73C6E10DF7D29669A3C05EF93
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  Burrow-Setup (2).exe
- Size 65.6MB
- SHA256 9751c8c427e27e207658338d2d2ef4470d6be0131b3c01adc8307d07ab1a4324
- MD5 056979fe1c09f47960eba95d032fa30d
- SHA1 136f45850686d6ef83619427d36fa76a6e185e7c
- SHA512 4395fafad1b171f69181f9f4537de1900d34f14198a4a66559d1d4b0967fe6579c5cf836b840fbf0e64bb4f1e93f5cc40200e8dbad003a43d55a48001ee7ef37
- SSDEEP 1572864:Q10xsM5UOD683qft/iCq8dHxfu/gmyIuGraoTf9nOzNUAZ:Q145US62qft/huom9uGraoxOzNx
- TLSH
  T156E733395425D518FE3C89B32451B62B98B8CA35823CD73C6E10DF7D29669A3C05EF93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  locales/vi.pak
- Size 111KB
- SHA256 7f94586012c85732d23b05dbdde2c497326d5fcab87de83aafa3594b614dbd36
- MD5 b7dd26646a77979ee0c4776ba0b1a52a
- SHA1 4b9ba889a4aeba5b162dada01982420527a76007
- SHA512 a8f4f2decf5367c02c8847bb6873a44a3389f4b3e637ab54197df5c56cef70c293a849ed260bde922b4d6a4bda4c95ec03c9d94a837028e21f74df699c434c03
- SSDEEP 3072:+WDKMPnIPPiz+sEqOa27xia1bNJoKlZpW8uTtdLpFeSIAV1vPH:RJLa7bNj7Wc+
- TLSH
  T16AB3850516E0302680BC593EC5CD540E6FCAA46FF3808FE16FF425797A635A56F31BAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  locales/zh-CN.pak
- Size 83KB
- SHA256 44a9dd0a830ce2feeb81523cce7fae8a0a553f05921b34d34c7826d50ac3a1b7
- MD5 dc160104962893fe87f3a5088a78926c
- SHA1 775945e0c70ab40d2b7ba10e58e7e0f857a95021
- SHA512 4b6bebf59513c27d5e022ae01f15fb0ecec0be4b547a1231eaa79555948c7ce92f08a7b6ddc6cea7484f945afd2eed5a29acb98afc568d21ec656b076912171a
- SSDEEP 768:m6J/Bm2fvv7UJAAJ/LbAsdx0X8SpWB8fa8K67cfc8TJWTPcYM1NT+IyVnl5LMgph:3J/Zfvv8b1mtJzqWXrjk0hS9D0lecJL
- TLSH
  T155837E9D25E8BCDC05D148512733B27DB9803207F253DEE9ADA184AD1B63E950E27E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  locales/zh-TW.pak
- Size 83KB
- SHA256 268041a1a95dd540cf7e92a01802b65df8c8d1c80726007da1bb8a9cba6e5414
- MD5 4bc50b6f5c29ea7cb60d5b79147326e7
- SHA1 c22a956b438fe25987ffb4654321dababd49d1ae
- SHA512 4c65d6d3b3db84412a589ea5c9a19e609d4b47e37b752d4231dd5ce02d5ed8a9ad4eecf23e321e4f48eb96c1e14f2da2a38057e6ca4079d0b025a2266783fd85
- SSDEEP 1536:AHBNlgwcxAhdmD/MC23mfQVouNsP1RhOKtoUxxVfKi5No4V3XiPNPuh95mxL9kBX:AhNlgTAhdmp8oeM/5N/9XiPm95dc8Tl
- TLSH
  T1C3836C5D29F6AFDE0630EE44738A627F3C89345DFD33B776BC6929981F67A400960809
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  resources.pak
- Size 4.8MB
- SHA256 7b953443e3cd54a0a4775528b52fbfe5ebecbc2c71731600ed0999d227969506
- MD5 d13873f6fb051266deb3599b14535806
- SHA1 143782c0ce5a5773ae0aae7a22377c8a6d18a5b2
- SHA512 1ab38fcb70d1958c74da2493459532b52a04b884009509a1ac8dd39f6e9e670658a52f4d19ef57f1bc71dccfdd6ceedbc18034bbcad0b500d75a97c74aac6939
- SSDEEP 98304:ysP2/1jJU5BiIUBXaC1hgW4k5gvXLFnhXKwggr0jgaMi7rwrwk:VOhJU5BivJ5h6q4LFnRKwSjPkrwk
- TLSH
  T1F336230272D6242BE5A671B14C1FC131B739800A315DF86DBE8D22D5BFB643906BAFB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  resources/app/ban-icon.png
- Size 3KB
- SHA256 fb0b4ae0ba05f9503c63880ce2869d1fee843d3726c6f55686178327fb0650dd
- MD5 cf1672e5dbf94515596619f6aacf638f
- SHA1 8c476c2a2206c54fb798088a6a35415e2de6d245
- SHA512 18f96516481a993c676caef71c7b66eda5de633f6c947c98992c73e43703a5591250f0768f6551ae24d728cf03466d56d6dd90dedfa0f583362f6e5597ab5fa6
- TLSH
  T1F3814AF6D5C1E36DCCD211324C594E0EC0B1AB07EE129188BF5ACECC186C07C56A2F9A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  resources/app/boot.js
- Size 2KB
- SHA256 b904b280e0590c8d4326e023c71b680cffc90590ece22be410786a7d773ee85a
- MD5 457e9bd0d1d6de9c193465a286e829eb
- SHA1 1a8cf4e77588a38c2a658bd42d6dd106b919b5d9
- SHA512 6ebaf9375ade08681717684514959d0316ce4953a7ab580c161a3fc4f2f18b1910c360a7913ff78a4b5120f9fc7810ee0a4a48f250dac0050e073aa6278338ed
- TLSH
  T15B5162AB22F783384AA6E39E5B5A541C776EC171329EDF915CDD20402F8302D07A29DB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  resources/app/build.json
- Size 38B
- SHA256 e443cb77b12ac215e26a07a162a1a17dcc34f4f505ac047e13deec59af3d8948
- MD5 5a1013dc75497e0bbd1fe14a930d0381
- SHA1 2e1f6e61658f6486c591e2d11a692a7f0e669b20
- SHA512 b758515a4a5640ba5cef1608c5af6885c6de25145321c010a0c2828f2faa9abb2eba0ad5eaa2407111c090c474af1f3f144daacc5323ad3c51a291aeb9b6846b
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral15 behavioral16
- Target
  resources/app/captchaPreload.js
- Size 276B
- SHA256 b9e1da3198f02dbafe377d8e5a4f5daa49959744ef7c61c52b2a7ce825718f60
- MD5 40c573cbdee883a4799d0482ece0f753
- SHA1 91d97baa761cbfbdc519ed7191dac72386a3ecd8
- SHA512 b5f129f9d591106b4e8c4447363a1097a9bc30fee2cc8e0a74f4904a1109a20b5e4b84e3233cfaadbc0cd314c5b314aadb2cd52c23d64fc9ebc373e5c1162076
- TLSH
  T1D1D02BB501AF9DBD37161AC1A3474C86ABD5C028F12DB5708704C0AA3ED84CA421BFCC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  resources/app/device.js
- Size 7KB
- SHA256 2e2886cae1745024945b1bb232aa8ade72ffff92f9dced735f3537fadc6ac98f
- MD5 243cd797f98bd4a183823dbcb4e83d48
- SHA1 059beef7ca20e0c8968f72b2879a7e19f5d0989b
- SHA512 4e207b0d7e9d869cbc813b815551587149b0c9db6439e5948db576d48156e7645aedb6d176ec752f279df3b272fe35c86a659058374e0dbc2b09eec1d05936ad
- SSDEEP 192:rWoqneRiK/w24eM7j312mBx/V6lYXkx5C:KXnepnY7j312mP6lYk5C
- TLSH
  T199E1E61952FE2275266624E4166B981377B2C1433089CBE576CC4180AFDF438C5F6AEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  resources/app/discord.js
- Size 5KB
- SHA256 6621e3359cc9ebcc9e56cc4fbc7f546ffaeb82cdbeeb367926be226a1692f7fe
- MD5 b9bc31aaab06e32865bee1fb9db9aa2c
- SHA1 8796f12652acb840de8811cb349c24d9c15c50fc
- SHA512 b088b871f80f98db4e8c1e3e37832fbf7d45fd7b8289d31460a009efb2d3d40c8217d36fecb6a7eeafb037a015fdc8eeccc5047a8f6ac97406b5954351f2f6a2
- SSDEEP 96:IRJweX0oLiGxV7ukOF1Ul5se/9n3IkSUymysB21ETFJy8T5V5m8T2y4iZK+/9a+H:eqeXHx8k61Ulbt3IkSpHs81ETFYynz7F
- TLSH
  T1C6B12406AAF21236017331EA055AD8477326D403734ECF96752C46287FA667DC6F67CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  resources/app/fonts/CCDigitalDelivery-Bold.otf
- Size 37KB
- SHA256 9c4e7419ebd6f2f9ec660b92bdc6f01bb9b339eb2442437452a65d6066a66b63
- MD5 88fc8340cf320e1592d752e3a7848149
- SHA1 ff6c1dedd6354a4452e18bfc8195bbd363139a6f
- SHA512 fd6b771a1c607c8f392f261033c6e7c59823b270be552e5257970c5f2922a6ade83950fe05b1517f12c8b79bd377ce3f24a25d54b6f69e4cc04edcac0b3b127b
- SSDEEP 768:3JahX2AhpIYBqckRl1DK9h3RbosP9CB54FNjpmwxydG6:0c4LkRloLRssc0FhuZ
- TLSH
  T19403E10337B2A3E5E167D9F4514E9B2B76B178D55E34B328E84D02B248E4B80C97FA17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral23 behavioral24
- Target
  resources/app/fonts/CCDigitalDelivery-Regular.otf
- Size 32KB
- SHA256 5f63a87be90114c49db36d155026ee6595ff8f762ca675b2df358fe7df272945
- MD5 bfdbbc91c659264fa96dcfcaaad7aa55
- SHA1 bdb33874f1cbaf064d11f8a194d0e3b1e698ef24
- SHA512 8efb8c18ad5e5265b9bef314458e48930c87c6692ca9ebeacee7c50646a818e6c3a7f6e87c77cf6fdae1b786afd9a55a465ad58b459bb67285eefdb358b8ab05
- SSDEEP 768:1SDkymqRvrxQKIg/2oqBMyGNxu1O8IC4uMkk50dPvny08w:inrxQKIg/8G3A80k6dXuw
- TLSH
  T17CE2D0526A000B1FDEF7D5F05970DA221652F20E4A65CA0BB009A35BAE70E458EA3F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral25 behavioral26
- Target
  resources/app/gamePreload.js
- Size 889B
- SHA256 1260df0706b83ddc0af4e66d5c4f7d74f7a9821ffd3ce5576ff0852017eadb0c
- MD5 8a963ceefbc3ce1b6a4b30ab3fda4da2
- SHA1 fededccc30fd4d044ae36f69a7470d212a048396
- SHA512 5399d2a2a43465d5f4bc882bc19908546c15bfee82b6d64f20ce7637843a9f4dce5eb1d151f84f6962ced6ac0d446ca57953539e83655e0fc762f15c1019bcde
- TLSH
  T1D811E09014E6141B73BA30AEA44229163D76FC71E44C8A603A6D01E1BFF61D2892978F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  resources/app/icon.png
- Size 38KB
- SHA256 17c9a4468f4e02d05ecb5a8d83c92e26afee79df7f75d830ffd1a850fec34026
- MD5 8b2e5bdd7efa35b7c1714bdecd0e08a6
- SHA1 1baf522831314cbbc5d7a5c880fa0dbde38ab1c6
- SHA512 d10a09c0efe347c88bcc491b1948f166594ce61899720cf183d9076a3628af6298545f91f3e7d3ffdb1d8a21f534627dbe01f19b6b88729a4bb8760e58e8b80b
- SSDEEP 768:PyKoKV/I5Xa6VH+zGJUlRMBZGORCp9/NZHA++9tfl0t2Lmacd7dsIZm:6KoK/VDHM6Oc9/NGl0087nm
- TLSH
  T10D03F1D27FD4550AE432F629BD24FC1E8E2AC24A3237719856F975BDA14B1B8B01091F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  resources/app/index.html
- Size 74KB
- SHA256 d31d3ccd5838482bdf2a6e6053b19af220d3ad7aa76596e4fa379c704ef01756
- MD5 cfd62caae6b1fa070dd4ade74d582c00
- SHA1 e551d3b62f808e90da95e00314cbe1cc55b343ba
- SHA512 470287ee45fd9f0eb73c7007ff8b5e6f6895709878c2f05d5b9eadc4ca4be5e2950ade8a30d5bb8fa282fead58017c5880a33e6cd5ccf31bac73ee7f2ddf955d
- SSDEEP 768:FfD8Fkf+43x//C/NREluu/PGoueQgopuduphrN28aBk+VBVLnIRYeDWcw4NRnJPo:x86Bx/aEluu/P6uduptNJmQRJPCquL
- TLSH
  T1DE73092561BB06374E3351643F8BA1053B3990037205DE287E9D8B845F8E978C6EF7EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32