671bc71dc35f7eb76481860fcda79d545b0e26eb136ddfa72774044d4948c5ad

Sharing

Copy URL Twitter E-mail

General

Target
Capys-AA-Macro-v3.1.zip
Size 47.5MB
Sample261029-22t8batwcv
SHA256 671bc71dc35f7eb76481860fcda79d545b0e26eb136ddfa72774044d4948c5ad
MD5 3fd791043e85de7dcccfd261cc00435f
SHA1 13b6d18244f8c69b7a4bed3282a5643d08cbde03
SHA512 b26cc6cfcd59c039fbb6ca32c7b8b45f6b393d2ef7ef80221214a58a8b087a7e2b3d7c34b400e90f061a0c51753c5087fe4616b5c38f375591e9dd94c49ca85a
SSDEEP 786432:ItrUlH7sU9IifCotEQdkAYhfHp5zJ7uO3zy5g7amCwCHIGXoiOuNnN9JK:SMAU9xEh5f8Ojy5g7amCYGXoYN9JK
TLSH
T18EB7336BBD009FC6CE4BD8349D708A54D875900BB820269715F9E7388956AEC3FBB3C5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Capys-AA-Macro-v3.1/AnimeAdventuresMacro.exe
- Size 2.3MB
- SHA256 df6064d7bd4e1487f0272648eca703d21f33321ff2e2b2c0d731ed95ef940cf6
- MD5 0cc7832c1d0f2cd17aeec170087c26d7
- SHA1 5f49ce34d31fa7be2cb91168e7939be28c4c4b61
- SHA512 083334c466ddfddc2933045a5af122034a15aa28490194142030cdfb253451f2516bcde800140a11227f8ab3135d8908132a319c3f71069e828fed64b05fd2de
- SSDEEP 49152:ROERR1v9szLtVXjed9pJb2RayE97XtYWEQ0Vd+paou/WfMoD5a8:lelVXjed9ziapgQ
- TLSH
  T116B5E14773E6C1E8DA7BC1F5C5664622EB31B8641B3886DF2150512EEFA3BD04E3AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  Capys-AA-Macro-v3.1/Other/Assets/Other/Transport/curl.exe
- Size 3.8MB
- SHA256 b3eefdc2420dd4e91c87dbd20682a29c64bf6fd8e5504eab3ab3c76a8a131ca0
- MD5 2f5dd7b6e09a514f0b13a78b1b0ad191
- SHA1 3d0a459fe028a6b16c6a70fd0ac21045a1cfd0df
- SHA512 8c61b37cfec447e19557d943b71a668d6d990512e64df33683044075ac3f610d0237673a5e82e164375892697ec6b770c01e54b0557bbd9c972475bb60b67cf5
- SSDEEP 98304:1fmW2rGyHozvTl9XvJG58FLYN8zxCPiQDt:fJ5N6ht
- TLSH
  T137069D67B5A061F8C411C074AB4692369A71B8893F34B9EF11D88BB03F96DF12F3DA54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Capys-AA-Macro-v3.1/Other/Assets/UI/ItemIcons/apricoins.svg
- Size 2KB
- SHA256 f3c635e82bcb5a2c2ba288c8b88b046db6c9a2782e92357ae0b11471aa1f3942
- MD5 580eb0e069ab4b060cfbc5cde3970023
- SHA1 c1731fb8a41569a8605b731145326c9f4c416cd5
- SHA512 53e7e621ec3e8da744d860d8a589b33c80c98c8cb36f1c26da1a9b8be640235c6d6f2914c0b5bc3b84cdcbcda15fb282e9e69d8b33a8bfb117a750c4798206df
- TLSH
  T1B7517DD8DBB3556CAB93411C07051647C38229773190308A8DE37E3F41D8495952FF06
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  Capys-AA-Macro-v3.1/Other/Assets/UI/ItemIcons/cursed-token.svg
- Size 645KB
- SHA256 10ecb6052ffd3cd9e139c14d90c56532454a547bc41b895e821cc0824f2119d1
- MD5 265656fc93a288d6a9c4965a7ed66535
- SHA1 b448fa339f72ecd62a23e967c40a2b2d8a4a6dad
- SHA512 9cb4439e68778f924bbf6ba4cdf7e58fc9a991acc379771c9526e1ba35411acc5c873c50d9379dbd3fe88ab12640a6680adb6dafd43ddb3d911542f7b80612a4
- SSDEEP 12288:M33b05BwI90uTBU9bMeQ1keWF1T41Yvd99ZorYA5yiVfxHfl2kajG2H:miGQ0sUHeDW3s1Yvd993OBHBx2H
- TLSH
  T1C8E423468AD75EEC8F5C697929C28B9854E01DA5C944E3F7E31D34C203AEF358A072F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  Capys-AA-Macro-v3.1/Other/Assets/UI/ItemIcons/gems.svg
- Size 755KB
- SHA256 e81a2f522b2c20abe1cf3bf4ef15f61c2b6af7d6c40ae88db354bb2defa1a9a4
- MD5 dda6208526879144a45e1b848a7a3311
- SHA1 9367f28b59f40f42692552c9a21b987e3262fd9a
- SHA512 52da4fe97089f71408516b90c8fb2d7370156d3c69dbab20f0a4f8c82aa26f2d264169dd2eff5ed7205aeecf38eb254d4a0f0e85b19601cb29b2c5a949600c1b
- SSDEEP 12288:rXN1Ph4lrigFKstORswCClQVVLqjCljMp4Zs8454Wq47Gq7aLV0nJqdxKtdI9auI:bZjgFhOZGVVLiCXl45Pq46q7lKqLT
- TLSH
  T19EF4233175449E0D1CFC733174BB1E0EA5D50CA7C8AD468AB6E7794B469DBB00AACC89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  Capys-AA-Macro-v3.1/Other/Assets/UI/ItemIcons/perfect-stat-cube.svg
- Size 650KB
- SHA256 c9f1ad50ad483aab61c636527c01a94a2dc0731716969f1f3a5f0d7594bbf782
- MD5 28dbd083ac0a7eb4bc4261015cab9165
- SHA1 a5c22bc911e0e947ecc77e3e7f18438b41d1aad4
- SHA512 8ed51a492afe24c580e5ea15f3a13cb3e1308c186191dbd3587b9c110dbcd543797f7be91caa72dade26eb7b68e4c6843b25b2a1848a2651b6afbb0e3a43d6a1
- SSDEEP 12288:EcIpfkroWd6yUFBi3mhypwPAATeVrqfl/S9babj78GKH+VTLHPQuGe:H+rWIFE3lpwXTeVsl/+ijQPeTDPQuV
- TLSH
  T109E423827E265F6A13884718A44F57211F750FA8C089F3F66ED9BB97005EF2074EB678
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  Capys-AA-Macro-v3.1/Other/Assets/UI/ItemIcons/snow-reaper.svg
- Size 1.1MB
- SHA256 d52286b75044cb05e060b3ae9f2beca2f92fa59a465d1901a949fa1cae050402
- MD5 46c56d16404e682182b9c13c8a06553a
- SHA1 4a6f30ce8a287d709cee426f3a0afffa0aac11ad
- SHA512 5da5dbea6cd6c2cb0586d65e6c76f065f101613ff392a237ba593c65d7e50b8b6c7691e9271e4eaa1a0f6052859073b19d445e7bb3cb58fd15d5fdd671b6bd04
- SSDEEP 24576:GJOtWOOafgdIEJgNKBuHYFI5IIKzZVMXuTRunt427Bl8vd5t4zZEkq:eogRxWXuInt4eVEkq
- TLSH
  T1333523435E302E1F8749C7A971761C7A2B6A6C6D620CD2DE80043FEAD6CFB91967F442
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  Capys-AA-Macro-v3.1/Other/Assets/UI/ItemIcons/star-remnant.svg
- Size 406KB
- SHA256 b7610f8d2f675b46847183bce7f368f33e846b91738917b6f9cc66ebe4d750a3
- MD5 4f7791e38029fd04cbbdcaae47ded264
- SHA1 34738e8abc0db939a2f8ad4010ef8b384777ff5b
- SHA512 e055a324f6ffa07103ccafc1a36654bd2255ae6cd1e46d552d2d4644cbe49102495ef7242c28b9bedbd76fb4442207719360453491fb89039d357f215423aa41
- SSDEEP 6144:hcdi4i7s6yiIsttzf5jmbfy7lFdnUBoXymIZ3lkR234yeN4aZw76ipQzI4LR78:hcq7JT/zBjoAFeBoXyLI2IlTZuj
- TLSH
  T1699423A01F3C7E9CAA9C371B49FF438B3FF04542082BB1B62462CEE5951F619925E578
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  Capys-AA-Macro-v3.1/Other/Assets/UI/ItemIcons/stat-cube.svg
- Size 504KB
- SHA256 c1063b04db088cb05f4f15ae62f52685a7c1a77ccc7e2eab69aa9f84e3f09b0c
- MD5 9ccf12729638832547e034827ca5fd82
- SHA1 2f542c00580d5574018affe5af6ca311f3ae197b
- SHA512 22e5bdeba2e53627c09141ebdee97ff8ddb221a97174408cf17261e8191068d0dd6f6ce6e820edaf7e9229caca9eda7c4df76713cde61a74871a5f547f99843d
- SSDEEP 12288:BOjCQ6pNDcqRQNqdNqNaQUnj+Lqxd1bfZKLEllvusFT:weDc6M+o7aKW1bfAYeI
- TLSH
  T188B42302CA7E79A8C25C2A14748D0DAC54BA99F511FDD8F6EFC3ACFE641E71E104B911
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  Capys-AA-Macro-v3.1/Other/RapidOcr/64bit/RapidOcrOnnx.dll
- Size 15.3MB
- SHA256 211693007280c42d4055db8fc54e1dc3809fa21e35e86949bdb733d028df6bf6
- MD5 c6f5e8160b23e15d668abad5c9dc1b80
- SHA1 ff3de07b78c0589e8faf383202cb187baeca7754
- SHA512 b0325e5efff2cca49fc25d0c78b24ac5162a206c783d36a59693c2813cb4a82ff0c90699d1358ecdd3ac2104710f9758873df40e329c833ed9f72be272580b89
- SSDEEP 98304:Y0CQZLmZZjaOQdYhNDLblkrI3HQWMPPa44B4UgKcxT/bidtRAklU165O:Y0MZjaOQdYh1ZkruXB4UgKgTeH5O
- TLSH
  T17CF67D57B2E811D8D1BBD1788A6B9A03E7B1340903B05AF7129545E92F17BE0BE7FB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Capys-AA-Macro-v3.1/Other/WebView2/64bit/WebView2Loader.dll
- Size 157KB
- SHA256 bf2fefaff7fd4775ea1e07328cc3142721943948f16d261fb82cbd978b7f99e2
- MD5 5525f542ef0aee3c546cd2a4cef5c9d6
- SHA1 3ece5714527a45cd43b429e66c24cf3e7150d907
- SHA512 ecf1922ea28d2cec125cc81c2254922a81d2bbb5ee05d546e929d1ceec747da6b7314fa2102e7bb1c398bc53c283d50f09b1aa6716869f79752405998dd1e733
- SSDEEP 3072:Q/2N6GchehS7YQGKTtXBJZi9JGfJT8AEtJZkYmRSI+H8qF:FNNq67KTtXBXzEtJc+Hb
- TLSH
  T1D2F34B5BB3E500BBE16BC278C5A74A06E772B81117509AEF036447791F237D0AE3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks whether UAC is enabled

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21