27099f7b22aa124e26f27b4b715f7ba5dbf40ee22814470ab40b7ac94475e333

Sharing

Copy URL Twitter E-mail

General

Target
RuinarchModLoader-0.8.0.zip
Size 764KB
Sample261102-p266nah19x
SHA256 27099f7b22aa124e26f27b4b715f7ba5dbf40ee22814470ab40b7ac94475e333
MD5 122856f44b986da5945f84e58dac61d9
SHA1 e1eac2b96e4e95fe270b9f8e208a2d4ca88298d8
SHA512 6503aa0a922b037a1104ad6f5f2d2eb0d4dba14f5d4856258d712c70f4a228741fbe49cb51f5056ec9c10e1ba428638f90c2aeea3f4e5b362de91f1440668c07
SSDEEP 12288:QmZS+Rw7D0js2L8Xntdqci9nOgsCLjhSSnMx2SfimE9SOQeekZX:dS+mP0jHLQnqc8wChdnMgwCxQpM
TLSH
T1B8F423D8CF80CED1CD5F7A70A09E5A9C00E9D315A116C5CA384F63D4BE59258EAF0BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  RuinarchModLoader-0.8.0/0Harmony.dll
- Size 910KB
- SHA256 d04ec5b2590dd1bbb57f0f11dc417b1a5bebbb36b1f97006d35f2d87c3a2a69f
- MD5 993f258153c8a6ab14ac30a53434dc7f
- SHA1 f108b7cf5d8da38a9b3af951d95b585c15f979f6
- SHA512 cacc1f1ee8afdfc8b47d761d5ea38bf83332b7be277d3a64c1eaaa36b59570760473763773e0a250cfa2a50a17e600f6f26107a732a53bccb00c927879c27b57
- SSDEEP 12288:7ePzA5Qa0p+bULtqHoMF/8+wtZwBrLPnWn:iPbsY4IMgtuBrq
- TLSH
  T115156942B7F89B27C09D5277E0BA062507F0E506A29BF74B2D65D6B86EC37A44D003E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  RuinarchModLoader-0.8.0/Mono.Cecil.Mdb.dll
- Size 38KB
- SHA256 2bda97fc302904bf235d631e698a0c81324872dfad2a38e63ef66389155bfcf4
- MD5 0c2d7a3d146e193d7b8e50f0fe398568
- SHA1 bf0a6ab31388eab1ffd3cd87fae62b45e90cba24
- SHA512 5fdc45ae536955e6f66970b35008ce15c5c5624d0b31bd41c79d6548d0d1b950042f51fe7dbbbc33a6256f90f5db23bf0070abe24502a050505be66f086d6df0
- SSDEEP 768:ArF3HuZyOt78PeWSTkazhOOgfGNOV/pVxPRpaCCrHpTFuzL4oWB:ArFecOt78PeWC8OgfGkVh6pTcL4oWB
- TLSH
  T18F0308086FAD962BD2AE55FEE4A0261917F1D53C6603FBAB4DC4B4F3BC4374440122A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  RuinarchModLoader-0.8.0/Mono.Cecil.Pdb.dll
- Size 87KB
- SHA256 333397769114ffd13046a25b9cfffd41c44a3450ea9ea1fd13b76eec28e1a815
- MD5 625ce2e8be214194a161fe80e6eca7d0
- SHA1 58944e03ee249618e9440545623c4545777377f7
- SHA512 c324ea36e4a89a6052f685e4f96527323ab6f4eea4f4c70c71f08a84df2d46332d91c3f289463502887d9b098dc6e69036c322630b770531927d5329873b250f
- SSDEEP 1536:mffXkeOyX+6C5S6R7nQSALYKXNgJGsZaBcLevjCXeo:ao5S6R7nNArWJGPBEeveXeo
- TLSH
  T1D1937D36DB957776E6DE797638960C040BF0E276C193A74E4984FEF8390B31219622E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  RuinarchModLoader-0.8.0/Mono.Cecil.Rocks.dll
- Size 26KB
- SHA256 a6d3e6eab8d89dbd6fcf34268a08a6544ea142b6bcc5f665bee62317786b7892
- MD5 6fc634673b94c7ddde6e2ba277f7e7c7
- SHA1 f29feb86a8595d104b3b1b4be809f6e9fbc8f042
- SHA512 51f4782d7a8e2b3ffbb8fedddcfe85379e5adc499a2fd55c29e29628ca9519c33a33daf806eb3b8d01cfc10c964c1cd2558152c000c7ed2a8584f36c58f31c51
- SSDEEP 768:tkU1iy+QMBCocUuk0ThROoUheLXG99gmIt:tkUCCo/KjOoUhpg
- TLSH
  T1EDC209012395CF2BC2EF467A78E1522803F1CA962812DF554DCC90A95D8FB966723BE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  RuinarchModLoader-0.8.0/Mono.Cecil.dll
- Size 351KB
- SHA256 9c2908709da6761e9b5b9d4d46102d65851145bac987787d6c5a05ffe5689487
- MD5 6d8d43c5d7dbe36ec01ff8b951cf1e0a
- SHA1 d6b8214419870770e1ce398ca06a6a9f0e9e62a3
- SHA512 221955b05d83513fadcb79721c96fd467ea871cfa401b279dc8ade426c88df4cadc884dae7a9c418c1012af202263f31ce8b63ca919e1f725eb7c7e8008c3a57
- SSDEEP 6144:eCDxMlG40kOSV1L6RWDv2F2AEJHwBI+aB:rG1J1LQFLE0I+
- TLSH
  T1E1749F3727EC572BE6AE537AE06E04AE56F5D416B38FEB8D48C4E9F90C837421901253
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  RuinarchModLoader-0.8.0/README.md
- Size 7KB
- SHA256 9032baff83f4279b12799d931c9ed2768e61001f7b3850c3eb36b24f2ceeb954
- MD5 f45400b6e6f2b312abb275fe53cacc40
- SHA1 a68c2367b5ee28b02865e5eba915cdfafc86d2bb
- SHA512 e0683cfe58aca4da595c355a8478ed23c9811b42765657854397a6a57b247989d5f2008d587f594caabf8483a1a008c76408146ba1a39e70f02b685316ab83be
- SSDEEP 192:+I4KvDFqHpigHIk6tctaHY5LlNrzfeifKCnxMIM8dLwIOd:14K4HIk6yta45L/zfe9GM8dkzd
- TLSH
  T14CF1D86E276053736FA35931525F26D9F312D0A96F320822B4CF502C27E65A5C1BB3EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  RuinarchModLoader-0.8.0/Ruinarch.Boot.dll
- Size 7KB
- SHA256 386328d09af5203d230a2b96bda2431e930c20c6c7321d33886df5e2fa3970b7
- MD5 5f4810cca2c9c0e66a41c78c7cf17f9e
- SHA1 39129a8e4146fcb8d8097cf15bc319c04584c954
- SHA512 6e4f860e3b4603f6b8f81c9be5e636752b0a6efcb18ea827cea14c2f212f037f70939b288d7e3763acdf98fbc5387a272edd5cad4466f1abada5a4476b594e7d
- SSDEEP 96:JV3XlLSh/tU/8e0VCE1iAC1BqrX1U9kWZOnUIm4Jp230o7Gmm7Kf7YkuNIHL:JV3KtU/aEjqrXCknhm4q3D7GFekZu
- TLSH
  T16DF1B628A7EA0352D9FF537AADB71341173AB9878962C79F1D80305A6D233458910FE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  RuinarchModLoader-0.8.0/Ruinarch.ModContent.dll
- Size 69KB
- SHA256 edad67d659c229f703a819216d21be36633e761ce7aefb95584eac00a0a258b5
- MD5 f87913578055de9da70b49c004c375be
- SHA1 c00aa19dd42ed244d38f9dcc34464d1fa6d40003
- SHA512 870bb10671707e842da5594a6ad7ac59cdeefe63e00b401c1e0a2f16f279805c3164883af550f0f6980b3ce0a78e7554ef862fcfe73c9ad83fbc16206292c0ac
- SSDEEP 768:0hklgUTiO5fofwuaQErNxW6+M0LwjSknd89fwz3V4lpN0gyMRAeF821:wCxJzumNxSMAwfdS9piH21
- TLSH
  T1FD633A1923FC8605C6FD5F7968312145137AF78B8566E34D2E88A0FE1E363DA4B417A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  RuinarchModLoader-0.8.0/Ruinarch.ModMenu.dll
- Size 148KB
- SHA256 e4c3c87873344483d8f58784f6b3ad99c53f315c4a0615db9de16bb9e3b4c9b8
- MD5 6b8f94c4c6725f7aa1d75e9361120e4c
- SHA1 2faa22422dad2c31b464e45fabd6e0e58ff69659
- SHA512 07c1701ae553a5ac656e61822c596d314d043ea1303f6b4c41f41650107fba4bac35b7749fdd8ce32e402a95a43f0c515b69872737d7bb7ac61338923cfa8289
- SSDEEP 3072:sI5QSsKpJS4CqYLNmTO+ktluTkgW2k9/N7IE9:oSFpJS4QH+kv
- TLSH
  T1BAE328A532FD4620E2FF2FBA69B012410B79B917E875E74D0E94B0DD0D62BC08E58767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  RuinarchModLoader-0.8.0/Ruinarch.Modding.dll
- Size 45KB
- SHA256 9a821f8974e201cff78c4b7c2d0fc1e56f3852864c22dd42bf098548dece9428
- MD5 eaf27a711b83efc724fadc31f1a52872
- SHA1 7bdf3ed2b19e0b5f82fd6f7d60386ba71d4c6e6c
- SHA512 8e51cc8d684e8efca7807b6b1490f917f28b94908da5b8bccf7a22fc1520f10d1d221529e5624fdfc7ea0ad946573676cedb613e4fbbf799e6b7b44f8c048099
- SSDEEP 768:M+dQa6HgIehkC5/Q0o883Y6vu0ddqYuSybI1HplOcK:/dVIep/cY6vu0JybOHplOcK
- TLSH
  T19523D58033F94724E5FF6F7DA8B1911107B2FA579931DBCD1F84A48A1D27B846920BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  RuinarchModLoader-0.8.0/RuinarchModLoader.Patcher.dll
- Size 20KB
- SHA256 5f1ecdcc20c275acda4bb62e16b52618ef07da92aad389af3a1df9fab7e90a1c
- MD5 625e12d857ea96b1785303ca3762826f
- SHA1 3d43495bf0194b6a7d7b76ffbee1b70c3effa97d
- SHA512 141f239b40cb1710a45012f365d8ce059d15fdec14e9041f9948092df67aee0678855a7c8488f44d79b8283598719efe60a718d0b24dd8c81839c3aecc769b8e
- SSDEEP 384:GJXNlfC3jl8sx8XPpEjmxrMmarkjvJdm6ikB3ry:3zx8XPq4dm6ik5+
- TLSH
  T15192A41077F8036AE4FFAB39BCB122524A73BE26E831DB5E1995114D4D32B088961F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  RuinarchModLoader-0.8.0/docs/ASSETS_AND_CONTENT.md
- Size 19KB
- SHA256 9f73fdfbd2403181ff0b605b7aa0ee05384c46505750610939b005af439dbe31
- MD5 91fa27e97e8d636f09ae32e7d00ce657
- SHA1 c24b92907d40e26c30040deb668a7c65864f4a0d
- SHA512 f514bfb021f320a535d8fe8f79daf8fb843c063e99cc84d327dcd792ed8e92b7c98f3f6c204b83ffddc359ee522b2436f13ca50ddf52034ecba31126ca1f3309
- SSDEEP 384:oEqMYQ6Jo1KBDRW5QET3XKj7cLdqDfHWs68kh2gSEE9yvXQYtuB66XPnVjpqC:oEqPJoU5RWt3XKPcLdqzWs68khta9yvK
- TLSH
  T16492B62FBB2063F20BB340B2A71E75C9E336C0B9621555B1A49C90AC277276D83B77D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  RuinarchModLoader-0.8.0/docs/CONTENT_FRAMEWORK.md
- Size 25KB
- SHA256 cab3fb17937508352b190b8b7cfa2b24fe3b564fe37bc11b8b6f8f907c5efa8f
- MD5 a0ce27b02c8fd2869b130b4815e48b85
- SHA1 ab5aa6a6c3c0ef246db7e26bf5362265d3f0cbce
- SHA512 d2f28914a30901328e2987ac92cadf3298b0cc2d01833e8acf8b0ff92b6c33278931c2f1490ddfd6897fd4779667968759ed95f174da49413b10796bb1e0f111
- SSDEEP 768:qhxOyb8IdUn6i/ZyYhvJkt7BbCpthjXXFL6bMCm0LzpjZDcEh/hbdtQKrI14:UpskCthnCb1tcQXn
- TLSH
  T132C2952F7B24B7730EA280A5674E71C1A763C0E566292960E04E917C3B523AD437F7DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  RuinarchModLoader-0.8.0/docs/WRITING_MODS.md
- Size 6KB
- SHA256 bf374a58ce3f3d268bdeafa3bb4b46a19562fb42d115ef2f0d17d2bee29daff0
- MD5 22fc41c21a01f8bcef66bfe849f05cf7
- SHA1 b6d572cd2f0f8ae76d1b7f350c9a814b6969f648
- SHA512 4aa10f18357484b68ac8a62e7b8802ca28ba4dff936aa49f463a205949d1acfe3112a9b04f6e7791b00334639615f3e8b4557eb0c6af134ac3b0790813eb42be
- SSDEEP 192:s3urx2am88JW4jGhnq6yxLVpzFZrL8oOj:s3urx1f44JPyxVdvLOj
- TLSH
  T1E9E1E67627B1233696910532720E6BC66703D4E6572518326CEE231C3BF17D6C2B37EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  RuinarchModLoader-0.8.0/examples/ExampleMod/ExampleMod.cs
- Size 1KB
- SHA256 97f3d3fba016801efa2e11a0173ef8fc2b346fc66e82f9aa2e296ef1fab0552d
- MD5 64751bcd857687fe9ff5a5967c4eac50
- SHA1 f8b9f33fdb658086f3e879f893a909d4c5cac755
- SHA512 ccf336cee6289dcca6f1f498852fc7f0f477bf87cc2b6c475df2d44cfb85bc941b9d68c60c411cee54f53f587a0bf3eca47b360bbfbb8936574731e02b291bca
- TLSH
  T13841A8669BCE82774E48425AB28D09C46726D135837D4851BC7E293C4AF03E252FDF73
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30