c294398abe8302baf9daba8d4a8de7cd04a6bae9333ad4398a3f156735303418

Sharing

Copy URL Twitter E-mail

General

Target
RESCALE_FREE.zip
Size 79.9MB
Sample261102-eajaeazxgv
SHA256 c294398abe8302baf9daba8d4a8de7cd04a6bae9333ad4398a3f156735303418
MD5 d4e1953e345010ecd008f68d12ecb0d6
SHA1 41bac33bcd0c50340d0127c41bcf13c7ad031a88
SHA512 de97673ec7e6879d151fcaab8cfe53b32057c56cc7e8888c68fd699e8c8674e322d936530f6fd3d1f76fe0b79006d107685ac4701d17b4e7447617577ef73d11
SSDEEP 1572864:VZai/xcwVcGff54B2SY5NeIW7n1k+fg/vK4WETmMY8w/0UWnLYFzB37VLgxZ:VR+wL54B0NeISUvFva0UWLYFzBry
TLSH
T14B083363EFFEA228D8135AB9116A9F22D785E1325172B51D1834C84C94FF13D8C8A76F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Targets

- Target
  RESCALE_FREE.zip
- Size 79.9MB
- SHA256 c294398abe8302baf9daba8d4a8de7cd04a6bae9333ad4398a3f156735303418
- MD5 d4e1953e345010ecd008f68d12ecb0d6
- SHA1 41bac33bcd0c50340d0127c41bcf13c7ad031a88
- SHA512 de97673ec7e6879d151fcaab8cfe53b32057c56cc7e8888c68fd699e8c8674e322d936530f6fd3d1f76fe0b79006d107685ac4701d17b4e7447617577ef73d11
- SSDEEP 1572864:VZai/xcwVcGff54B2SY5NeIW7n1k+fg/vK4WETmMY8w/0UWnLYFzB37VLgxZ:VR+wL54B0NeISUvFva0UWLYFzBry
- TLSH
  T14B083363EFFEA228D8135AB9116A9F22D785E1325172B51D1834C84C94FF13D8C8A76F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  dxgi.dll
- Size 4.5MB
- SHA256 1df570bc9679851b8d46b9c142b20fc9640e66db07cdfea6d4517f302a94193c
- MD5 67034d9e1814c7d39f0a747a56cfe861
- SHA1 244a218023806e69bd83276b22583efff9390156
- SHA512 e8d06730b8bb08a6c166191c009257696c185059815a07a3286016363063c60f9daf0f1ea37a2fce405b6f8337b12621986f7abfd3ce3e46c8636049314d4657
- SSDEEP 49152:Q44l0+kSEUMRQDDdqNbxFZ9mL9cw6WSSsJl7UbLEkiXFjD7W6U0l2SHXLRSXSPF1:epGRQD6Icwzq3LRH74C
- TLSH
  T182268D0BB3A902ACC17BC278CA375A07E6713449133096EF17A596A52F637E05B7F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  reshade-shaders/Shaders/FXShaders/FXShaders/KeyCodes.fxh
- Size 4KB
- SHA256 0972534a18da30ea697509badd890e2a3788ac410f50eff9bc0b5709aacb684f
- MD5 e0359b115134b93bb5b9de1de1013a29
- SHA1 c426c9d1b3ac641a0f3698c0ceec903536d845e5
- SHA512 690b7ff4f42504e3377bc955f0978648da95a3009b04bffcaa9b906013aa06d95dd3b9bb68d07ee6ffb3eef36608d367f85730a6e54bdf1e45532c645a289331
- SSDEEP 96:MzbNWKPUgcOoZtmB4jTYXDVAAls9FFLaX7ERrJCaMuH:S48cO82XDVP6FAUwaJH
- TLSH
  T11BA198427EEAE410A77C222215ED5449B6A0DC37C43881EDB79AEC0DAC9A3247FF41DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  reshade-shaders/Shaders/Fubax/CurvedMonitor.fx
- Size 13KB
- SHA256 dd7e06dbd29385b915aff0ee9fc898ebd055e76fa6fe32f9106d21d3db6cdd6f
- MD5 2b08da27b50730c8aaad52fc4fafd413
- SHA1 9ca5f005ebfa520d31d69963f76a40bf35d369c3
- SHA512 0e3a058bff9c2006294b5f507e4b643b2da13a2cebbd5cf60b62a04e5591f7db3957aa3fc212661bc74edd311973e4d76dae4ac7d70c79b8de54d29fe0c02ccc
- SSDEEP 192:wLvTocn8/0BL4GQ37rNZDOa03cdxONOvZE86lY7RBNMzr+IJXkrU04e2INQCK7Nq:wLsA4gnslZEBIyr+IgU04dI2CK7Nx4Ki
- TLSH
  T18552F96BB27406014A42A1BF1A4ACFCE573962AA5A917F45280C617812DE0DE93377F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral7 behavioral8
- Target
  reshade-shaders/Shaders/Fubax/PerfectPerspective.fx
- Size 33KB
- SHA256 6813daabf7a470115fc3061d622661ba9e1f1ff4db99b56f80b2e136ad8dda4a
- MD5 169762c38803cb786a0a7f4ae3042427
- SHA1 bc44ecd7fe5bc9f4e4f7b876c13d8ab1e59f631c
- SHA512 02e76ccafd733ec1047b1d9a478ffc045ab31c992b78a296ed2d24576e8d22344b498e4212fae47fb3bfeab99519167058ae5fb8e9e34a4c5bb7176a52c5b5be
- SSDEEP 768:shIV+TFr0HeDGxcs+/tY3cQ8BCZaUzWhFEYL:st0HeZBCZjeOYL
- TLSH
  T109F207A6BE7509151F92E29A8D448EC9D73C42B81BB17E927C8C41AC1B4609D837F7F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10