80300e44909d9bfb6b568e830af9ec88b4adfef3873ea12c40859c22d6180832

Sharing

Copy URL Twitter E-mail

General

Target
BorderlessGaming-1.0.2.0.zip
Size 1.1MB
Sample261102-kslfdaax5l
SHA256 80300e44909d9bfb6b568e830af9ec88b4adfef3873ea12c40859c22d6180832
MD5 94c2114d1bca262a7e5d313406c2eacb
SHA1 366dccd9ea3421902b6f14a6564d9e7e50d5821e
SHA512 d5e340caeefc5003cbc7af2b6b442aadaa476716db9a23ba14c89d2ae4f42a3702de215638332957b7ca1784fa5e891b3547c37bfe431d80e5ff547b8db0b67f
SSDEEP 24576:iD4+gdZ4nse4b/UL2OfysX3gQ4cUT/mN5xYcxMNEVMC:B+gdZvb/UL2OqsHdTUTkPBxM+T
TLSH
T14635338614801307C8A34FB740EC1F654E07A8B24BF942C5EAE8F66D474F3E9AEF5A55
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  BorderlessGaming.Logic.dll
- Size 97KB
- SHA256 31a0ce93e5c8bcc08935972f6238de972180a1ac0895624e5f557af8b98bf92f
- MD5 2ad8316bbeefce1f32ba3d3e2fb5191b
- SHA1 e128c473cc74694580f834b73380917d39713be8
- SHA512 dc8f9226ecea38599e625a68ca3122368399abffbbcf4158a1f97fb0ae8008522c195327f6ce46922153910261d3ab076e75bdf682c6eff80e97af02e1d8e6ef
- SSDEEP 1536:XvI6bdG8zzxsD5nHzexGyackW4CvEGdv0uK0nnnnKFCo/Fu:XvIcdVzAaxGyzQqLRO0nnnnqC+k
- TLSH
  T114A36C1563F88B65F5EFBFBAF4210A12CB71E58A282EF74A4D88B0D95D223D34514393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  BorderlessGaming.exe
- Size 516KB
- SHA256 6aa383f1f46ef7ce31db1d42f64d3b577b56e351558ad36ff2412756e9bc328a
- MD5 c5e8694861ecaa96a6316ce3026fba5d
- SHA1 b3c85af7ee48a0a1b26e150b1c377ab32bb638d6
- SHA512 e824cac2b9431767c5678397dcd14127d10e2560cef380b65a6bf62a0aac51655ebea7e308968a22f7595863dbad18b338f9dd10c643ca04ccf4041ba0a145c8
- SSDEEP 6144:IgaNZAH4Tkxpyaa33emDT6AQU+coCyZPw/+9XdNANPKgnTHoJRh3VJRhyJRhqeNk:IK4T+51ZPk+9DyP5kJpJuJoJhnJnyBQ
- TLSH
  T1E9B4B63032EB511DE5B79A3209E02397962EB762EA09D79D243523CD4B1364FAB1173F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral3 behavioral4
- Target
  CommandLine.dll
- Size 57KB
- SHA256 4923528d3d18689d58fa30b3d822ab72a13be21a57f13e0bc59b55b864424f7a
- MD5 ec0e2dd54144d6f6a317b7daa715d418
- SHA1 62c2e04bba8436912d9bcec1ec4d4c7afc843a47
- SHA512 ccaf01f89fab001ef2ded15b352e1dd2ab3967584a8720acb7c6b7203240f9c896f7d46600b12e0e86b25b30779b1e5ed59ce97fb3f295afb11d6391670265ef
- SSDEEP 768:Aa4UCvHii8p2scLC8OfyHxy1XdF0l1t8HQDGiejOsSZhD3T1x:A9hircRL9OfPtCJE9iejOsSv7
- TLSH
  T1EC43F95467E8872AE6BF0B75B83062510BB4BF46B963D76E4D44B49E1423FD085223B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Microsoft.Win32.TaskScheduler.dll
- Size 317KB
- SHA256 4d62c95536f88eee447042cf4907bde48c7f22cebac30f7c5afd4748497ccdc2
- MD5 6257d4a618328bbbccc63e2dd34ce45c
- SHA1 53381dbd1d92349a4c5f81fe0da21d3ec2ee9d9b
- SHA512 da359eccad0048cd1f0e5316d5d81b2d5adc1bdebea36e1a64c9a2024e6359c018b93d9781ae427035e1da093661fc4f18fa3c10da4371fb7247aa413d2a701e
- SSDEEP 6144:JmrqJZtlDVC+sEm8iR8RMXZyYzhJS+8sX6PxQEcaBKBAw:jZrcbPPR8RMXZyYzhJS+8sX6PxQEb8B
- TLSH
  T1F5644B2263FC872AE9FF177EF43541108AB9F94AA866DF0E4550A9988E73740C953337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Newtonsoft.Json.dll
- Size 704KB
- SHA256 f0c07af0e84d4dd4da4bd7823ba4535bc0481b3bf623ed40b659b68147a6bb75
- MD5 24704261e701b49b51e40c1292ed149e
- SHA1 db8ce5e0b7d8c14920bc9c4eebe51bdf706e3fc6
- SHA512 8ef6a6196044862a9d8d53c6a88e68d9591edf244385bc4888cb9c16c942eeb4a1689c49245d6cf80d619e95f0745898513ed2b67a6fc4c65fbc06b872f72184
- SSDEEP 12288:65RsO50fsVuW3icGomHAQ/DUHIdGFRrDTOAPKfhUUNSUmTIcvABXyoJl8fCfB5qm:om2VuaOKdKSUNz0IpBXyov8fC3
- TLSH
  T178E45B2177FC8E16D9EF2375B430D9181BF1F956A2BAE78FA504D9A51C837918C203A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  de\BorderlessGaming.resources.dll
- Size 5KB
- SHA256 3cf297f21a5817212fe39f699fe85ee9d2a0756ee7192ac6f6320c61e04743a4
- MD5 c2211f7b2ff2feee0997b48b5f940a45
- SHA1 42decf6488cda0ae967b85d136c20606dbac67ad
- SHA512 50ea38a13ff4e9b98f48e4aa82606cd9536a37981c9835f9f2d2e5b346b78227af296c270981ba75329bc06a8f971b15a2347878242c019f0c1fdc34fbac032b
- SSDEEP 48:6HzprHzkZdrH+XgsuNiePvd/dxzKbU/2XCJEGSMuMs58+COJQlc4vBNqo9Bhd7Es:UrkekNiKl1xUUNyM68+slcsqchd7E5t
- TLSH
  T12EC1DD01ABF91325F6F3AF3269B75681423AFA71DD62C76E0444026D2DB2790CA60F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  de\Microsoft.Win32.TaskScheduler.resources.dll
- Size 9KB
- SHA256 a6e68dee7fcce966e9059bd0d449ddd9481e6fee33087f2639d2563ac75038df
- MD5 0f50bae539bd0bd1631a9dd91768fef5
- SHA1 4c0d578279cbb96b83c3123d205dab093d2c73ed
- SHA512 33615213a2c0d79bb27adb83be958acb2e78bffd7041a33a63d5ca4d66b81c7f9cfe65de33d510f98b3746f5918c28a6ad0b6b007c572ab5a88b52f1df7ccae3
- SSDEEP 192:yiAN0xENtqVeFseIS+iyOdv7ZJSqSi/u4WRo1dS15rcN0XWr:BAN5FNIS+iyOdzZJSGuPRSM5rcN0XWr
- TLSH
  T143120C099BF8023DF5F62FB9E9B68531B43AFD968D32C62D1244814D4531642CAF2B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  en-US\BorderlessGaming.resources.dll
- Size 144KB
- SHA256 98a54aaadc1e22e91a4f8476b67885d2e483d0912180cf1ee26bcbb2157e56eb
- MD5 c180110b22392993a661e2eba9673525
- SHA1 e037f440ad195ea479d7f459b5968c6d2b232883
- SHA512 99b01e831d003a83b52a7a5d840d724568734b5950f77ff58f33f68d7af3504fd114788673bb2da48b9bbb82caf77587d73868ef1415ff18a9fc09722ea75ada
- SSDEEP 3072:iw5UxlfhI1d5YgNLmQw5UxlfhI+0w5UxlfhIok:iJRhA8gUQJRhz0JRhF
- TLSH
  T142E392313267611CC8AA493304606383A66D6749EF89DBDE727933DC5B5319F3B2262F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  en\BorderlessGaming.resources.dll
- Size 62KB
- SHA256 b26fe37f21a864a93905647d846de4781ca7ab3cb5047553d67c311a2dbb0d4d
- MD5 7d8d538dc77cb14869820a0f21d1eb26
- SHA1 9077944f2d79b14087f00e01a011927182887899
- SHA512 c9cba2b90bb56e5c7b7b11557e6225726f661521857d342564df7155f0e1189d10da55a2869e910a262dde7e8a81152318e6cb7e570e8aad67852dc3adc346b7
- SSDEEP 768:QQCzerv77IIAeY0TPTbpbUBQB2qCSy8uucuuL75kSbUhIpeRK6fU/O9re568ZiKK:vieI0TbpIQBxCSfhIpZdJHXXo
- TLSH
  T16753A5713257611CC86A0A32046463C7A6696748EF89CBDE327933DC6B5319F6B2273F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  es\Microsoft.Win32.TaskScheduler.resources.dll
- Size 9KB
- SHA256 1618e7a7a1b1de8bf0bb39debe419d5039d7ac82dd1ed839bf94f630cc9f9bbe
- MD5 b99f61a7a3d326b060976b8e902308e7
- SHA1 ff2a19909bbb48db533240d678e3c1f8a96ef6ae
- SHA512 3785c6c279782121ba2f4eeb3d567cc40a05fca472b64943c1fc9f3ce6a027f6bd1e76e18abc6af6154615784dc18d4e9ec85d93e326713e4a76396c8d2beee8
- SSDEEP 192:T+RHiAN0xEStoCotvVwjOjvZcMTPCb+BE00cUnhWuo1dSV5rcN0XWr:T+RCAN8oNVwjOjv2MTCiE00cjuSs5rcL
- TLSH
  T188123F0997F8453EF4F22FB9E9768032F43AFD959D22C26E4544820C5471A85CAF2B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  fr\Microsoft.Win32.TaskScheduler.resources.dll
- Size 9KB
- SHA256 013ce001b3b1d204a88f19422385e3c78d0d82de088535412f816324425f4ffd
- MD5 5557cad7f55e687ff7dd273609d50d31
- SHA1 db80a42ffcf4467ef80dea6ef6a836223c105893
- SHA512 d1bd4e90121ff5959917312f0229dbb6b8a7c207cdb485d0682f07ef2ae77e927b88acc8fee13196b126addaa7d65a1752d65a3c8df1830dcf3b7899eec860e8
- SSDEEP 192:IAN0xEYtPaB3iaJhW/ZFnOneII0HYZDKz/CW8o1dSm5rcN0XWr:IANTB3iaJhW/ZFnweH0HYZD48Sf5rcNJ
- TLSH
  T16C121019ABF8012DF5F22FBEE9768532B83AFD959D32C26D0644810D0471955DAF2B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  it\Microsoft.Win32.TaskScheduler.resources.dll
- Size 9KB
- SHA256 dd5466f5e5411459e1f1303998a8c3848aa0c3e3ee6b049c5464e5b6c83bd328
- MD5 f94cbb6736b6143c040f2d3849b34333
- SHA1 9eba8fc677fa480392d79843ef2391b96c3c74a4
- SHA512 53f450ae9ac0b8024cc13c277bb521935e0edbc1a009d98cee7f1b7a63c502d5335b0433cbb6a43d05474d1c1b8d4bb8327db4407a8a56b5d6363da836964bc0
- SSDEEP 192:qNqiAN0xE5tyYFGd+L25mZy/07BWOo1dSV5rcN0XWr:qN5ANpFGd+L25mZs074OSs5rcN0XWr
- TLSH
  T1AD121C49A7FC423DF4F32FB9E9768171B87AFC959C22C26D0644820C4431A95DAB1B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  pl\Microsoft.Win32.TaskScheduler.resources.dll
- Size 9KB
- SHA256 1b542f2386cda645fc6a05f9cdb9c6ce736ba7e7a2535399b4acc666c711953c
- MD5 c1d758d1f64d2ef9c874e10b3ad2f89c
- SHA1 673d7357dd8facfa5a85699423cd8cf97e20d4b6
- SHA512 5e2e1cb6d63e0aea1e71a7569637215dd3286f5efb2ad190d6959bbf5289331cad0ca0a147485bf9366e32138cf1ce5be8030e50ef2b17a368db55a77245d34e
- SSDEEP 192:LAN0xEYtqBoQPqeEKYeCBTrQsk96NWKo1dSK5rcN0XWr:LANLzPqeEReCBTUskBKSj5rcN0XWr
- TLSH
  T1E4121019A7F8012EF5F22FB9E9B78132B87EFC558D22C25D0644812C4831655CAF6B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  protobuf-net.dll
- Size 269KB
- SHA256 042b8c1c1e0eb7648b164ee48c95168c48324f1fb439cabd5f2e41db0938d807
- MD5 4a4756e227c10623d81228bc4bc49c1d
- SHA1 964014f538918d85f6eb6a7b4023b304067b28f7
- SHA512 93d2c6f47c618dc9493f5a538cbfb5a32c1e3bb35a623b51561057245f2fa557c452ee18ae274182c3e0440b77353c5490d196f16eda142b6129e8d1108e5a04
- SSDEEP 3072:2ne8csJldhXG4JhEj9n8RHq6MY7qLfoDb4LUcqbrKKu55O/u85wcT/0c8yiwo3aa:2nT7JxXJ7qFLMrKXE/9YLy1W2WNU6
- TLSH
  T195448D14A3EC4616E6FEE7B4E9B815484BF6BA4B752FEB0D589060FD0C2378189017B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  ru\Microsoft.Win32.TaskScheduler.resources.dll
- Size 10KB
- SHA256 3955417fac11f059a008c1dd0baa46d727f079354afa4c80453e7249037fb6cb
- MD5 440959033357f2f8a05340839cec1a5a
- SHA1 2fdecfd6e7d080da6585c490a3f5dcb0a41e312e
- SHA512 216d93754683b829f4b75b182eaa46cbf63fde393d7545fe458dc46755dd94879103dde8a1d208dc888b83bf680d2b5cb4452ad66856def2097c9c5fdfdb8031
- SSDEEP 192:3AN0xEfthbdMrrMH3uA0Jkm394in3fwB/C2WT1o1dSc5rcN0XWr:3AN9dMrrMH3uA0hhnYVCNxSF5rcN0XWr
- TLSH
  T10922411997FC012DF0F26FBAF9768925B87EFCBA5E22C25D2540851D1871914CAB2B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  zh-CN\BorderlessGaming.resources.dll
- Size 172KB
- SHA256 16523e3f684c583fe67ed7f8589ab8ef10e6bdf83bd8055f54bd689aa8ebe331
- MD5 a0a1307596571c938f8f5af1723bb07d
- SHA1 e2f0d17ce4616ac7c7da8a10a92d0104b776ed56
- SHA512 7a6fbc9f0b7aae14efd5296a5f62318404823f7ea866ef76e62667c54baa8f6c4234a8560331a2c719a93f5ff8898f69c3ca45e6a9039a16aca8d35521919bcf
- SSDEEP 3072:jw5UxlfhIhd5Yw5UxlfhIF0fK2w5UxlfhISw5UxlfhIZW:jJRhckJRhO0RJRhlJRh0
- TLSH
  T189049272326B651CC8AA993304601383E62D6749DB89DBDE723933DC5B5319F3B2162F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32