e48231c645f472c943d0dab83bcfbf0fede4cb54eb1e2d5955d0e584c4a67fbf

Sharing

Copy URL Twitter E-mail

General

Target
casino.zip
Size 1.3MB
Sample261102-p2asfstwfz
SHA256 e48231c645f472c943d0dab83bcfbf0fede4cb54eb1e2d5955d0e584c4a67fbf
MD5 9d102adf2d1f7d7772475d8e5e52b115
SHA1 c7525b9bfd6a9911634d04d497a46ba10982c682
SHA512 bd66ac1396382df0f1761e28e6daada1f23f582a3aaae95897a500ef734cb7e03fbfa6b42e87572c8c6599962ab89271bdf9331a9514270ade94db3206818d1f
SSDEEP 24576:gcKCuRLE7/w5/kNlW19iZd4UtJhyHjwUaB2EHTOcBMUbTQ+g9llMdRWGrL0JJf:gb/9+g1FU7wjS2IO1oTQ3lMdRWQL0vf
TLSH
T17C55337B4B99119102C81BE4B13687AAC3B8FA8764590F461DC189DA871B5F3713E8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution

Malware Config

Targets

- Target
  casino/View/View.cpp
- Size 3KB
- SHA256 6367ac720e12ab9e3476d7ecc96858ab59aebe41b9bafaddc435d93b279701ae
- MD5 794c3bcc9044a062f51ea6b0fa9a42da
- SHA1 406193ef072e9464482eb3298608cc0ddb142115
- SHA512 f9d3f254ff0f669357155a7e5b8675b53ef99cf002030bf135f310f07a69ae4849fe4f2e4a9e9df99448eb5685c3c397541885e03f2b23b779905386af678218
- TLSH
  T19761BF5E85B006A005F2F25CEB0B8122F854A1B3C5A553953F5F83C99FB6472D1B2E3A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  casino/cmake-build-debug/CMakeFiles/3.19.2/CMakeDetermineCompilerABI_C.bin
- Size 127KB
- SHA256 9dba07233d3ef39099f3a3b90d064671b3ec7fa51de9eaa72c9797770bf76136
- MD5 ae6f19be226db53d263a39c41bff088f
- SHA1 8ac7e1d351b57dd3d63ba266081200b9d91bb5f5
- SHA512 cda34d53e8be4de7bf6760fefdaf45ea88e5587f1323b4638e7527f4263db71634ead17dc9512c13c6a234d8d4f9e896b73b08215a68a978497433ed07e5e161
- SSDEEP 1536:5epi3WmfTsVyEmaGXRXwUeWEoZ1JQtcAUvMFMQiN3RpBI3xie:ApiDYeXEoZ1JQtcoCR7I3xie
- TLSH
  T10CD31ACBBB95DD97DD11433845E68319173FF3908B864B132D20A9351E23BE0BF9668A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  casino/cmake-build-debug/CMakeFiles/3.19.2/CMakeDetermineCompilerABI_CXX.bin
- Size 127KB
- SHA256 07db54712ed8b66f28db67140295eb98ab3519028edc9ff9795d71bc0de703de
- MD5 cb8162ea276b7d1886fd59f35a0bd744
- SHA1 4c42b22e12be05205149a4666e4a9e44090444b3
- SHA512 da6b4492ea2eedc0f27196a221692eedd2fca63421803a3167736d35b2c98a201a0e0b25dc4e5be858defbe50d287334567086e1f503862a3af71017e806944f
- SSDEEP 1536:cepi3WmfTsVyEmaGXRXwUeWEoZ1JQtcAUvMFMQiN3RpBajBY:NpiDYeXEoZ1JQtcoCR7ajBY
- TLSH
  T16AD32ACBBB95DD97DD11433844E68319173FF3909B864B132D20A9351E23BE0BF9668A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  casino/cmake-build-debug/CMakeFiles/3.19.2/CompilerIdC/CMakeCCompilerId.c
- Size 20KB
- SHA256 6b777cb67adc6dda7a897919a7b67b511f358aa4d2bdc3f05ee999d4b4c65cb0
- MD5 2356e4c70ae4a66fe1dd46aa48a34c63
- SHA1 fe68b7d87da20c0bbaa7d81a2823ed2759ed1ef8
- SHA512 9e5aa98d6fe2740f2403323f3f25281a6eda5851eb7b0bcd742bc050e79fd8596fe6d5eaae8d499a4777b81452d57cee315f1ed0154e2d72db57ee739300024a
- SSDEEP 384:NrvrJzO8HfXLW8Nkmht4qHyh0a3DxgXDMvDWKEfymdjRCRAyzmuVEVTyLHrLfYDe:p/VNkJV9vlGkxneQLw6y3MKK/iL56UbI
- TLSH
  T1D1A216131FE36094903B44E1011EA667F208D9BF236255E4F1AE7E5C1B59D09A3FE2DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  casino/cmake-build-debug/CMakeFiles/3.19.2/CompilerIdC/a.exe
- Size 128KB
- SHA256 813fb3028b64e868321d02a1c562145f8dae69168b6da046295d420f84558cc4
- MD5 19d239e4a621a2a760995f2e0fdc9091
- SHA1 74828c7f3297ebd2d9e2821c7596a80d623a4646
- SHA512 8f30098cedd8610ce21bc7093563125027312e9c2c5f8fa542975a5e0afde153576ce51d470d2651eb1d5202507843b8299cb55acf7a706f5a1b1c7a8b79b9d4
- SSDEEP 1536:/bLCZBxCmfFs+ymmaMXRvq/eWXsNVd/tEAUvMFMQiNNRp8q/aOhg:TLCZzDgvusNVd/tEocROq/Jg
- TLSH
  T199D32BCBAF95DD97DD15433845E68319133EF7904B874B132D20B9391E23BE0BE9628A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  casino/cmake-build-debug/CMakeFiles/3.19.2/CompilerIdCXX/CMakeCXXCompilerId.cpp
- Size 20KB
- SHA256 e38a71b5712f345a9845db6af8e1ad7a21bb2d744f502776936cd47cc895b249
- MD5 20f3986d37116e63bd65bf7584bd8b80
- SHA1 3cba38c06bdd2f0bde58422ebb1868c39e965925
- SHA512 c7301817b7ecf2efd3be1c94687d587980bcc06752018b79b06f160eafa6a6014a29bbb29d8f242204e46198641153b1c6ad536b145094f23caf937def668942
- SSDEEP 384:tpJzO8HfXLW8Nkmht4qHyh0a3DxgXDQWTn6WdjJqJYyzmuVEVTyrLfYDN2IYQsNf:D/VNkJVDzcEkZIQLw6y3MKK/iL56yaCd
- TLSH
  T1D99216131FE36098903B44A1011EA667F209D9BF236355E4F19D7E1C1B69E09A3FE2CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  casino/cmake-build-debug/CMakeFiles/3.19.2/CompilerIdCXX/a.exe
- Size 128KB
- SHA256 a989cd86ce3c2cdcb0641205a73e2a8e0e3994ef905142f8acedeae8f039e9c6
- MD5 2d020c2cd12326821235dca768b89f90
- SHA1 422236016e8f3aff4363e51da153b1430fa24f94
- SHA512 ba0af681c96e703fccf0f7847eb6b0cf3087a3e76f5e0f623eb07e79b1c7ecf6f2efde97a7d36deda966e21505e99844c4d8b5cb0acdfe3060d0ee1767fff9c1
- SSDEEP 1536:tMsEVHuvmfdswyAmasXRQqXeWKcNltPtxAUvMFMQiNzRi8f2A1sx:qsErvgQrcNltPtxoiR5f2fx
- TLSH
  T1B9D32ACBAF95DD97DD11433845E68329173AF7904B874B132D20A9351E23BE0BF9728A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  casino/cmake-build-debug/CMakeFiles/Makefile.cmake
- Size 10KB
- SHA256 bc4152f15e8253b74800e2d57779d90535b86d63e85522f20496086ed968ea0d
- MD5 ffdd730486a312615c4fe74981125727
- SHA1 a9b9548bbbae824ebd119879b5292b76d0f7508d
- SHA512 665a6cf4aa503d80c2a8fc2f16f3c314f749f927e0b3d01e06059236f669adee1e8a6bec2c1d70b533351730cc9e5b9614dc60da9777136cb8aa82714e84933d
- SSDEEP 192:HmQnmI3eOUpCpCp0plpfpMpKpl0C3vuzQ7X7vKEvqQrXrfrjrdd5Y2j+iAHAG5as:HCSSobBgaNrpG
- TLSH
  T1B6228614676E98620E3A1CD127C6A3654F70CE531D3974E93B8D80A8D7763B32A5F1F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral15 behavioral16
- Target
  casino/cmake-build-debug/CMakeFiles/casino.dir/DependInfo.cmake
- Size 1KB
- SHA256 4434540f0dba322ec017dae8fb5256d784814bbc609074418e4a68661c4d5d2d
- MD5 3487aa2bc88b9185e01bfce0d7bffc0d
- SHA1 d3575741e0f230a88f0c40c6824ada35d8efa6f1
- SHA512 c8a910ea34420d8018f387014abdcf34d9bd0b9d04944e8ea68d8e86bbacbdfc03e4f008528386889ac98a1bf3654bd70e93c2734d976bcda0adea1700cac506
- TLSH
  T18F317F738312631F0271977891B3811FCE587EF2249F5AE026D29581078D57A11B9EEC
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral17 behavioral18
- Target
  casino/cmake-build-debug/CMakeFiles/feature_tests.bin
- Size 129KB
- SHA256 3632039c5e27804be9ad457e6644719d0235e5fd7dae27277605123e67013b9f
- MD5 a2e8e910bd1dd2886a07694133dcede8
- SHA1 4cb54ab034c25a5407f4ed8489783bf3f1c80d5c
- SHA512 e17f699fc8f8dfd05c2a6a230433cd4b605c8ee076469160d42cf4a013bfd76eff4164d37938bf589ae476a3fb0ffe6b945ce951e0efceb6a518beb45ad2d691
- SSDEEP 1536:I8iJTR0CllG/9sWyGmacXRQJOheWkYolZPt1AUvMFMQiNwRFIpjmPY:WJTRX4ToQXYolZPt1oJRO5mPY
- TLSH
  T1B5D32BCBBBA4DD97DD12473845E68315133EF3D05B824B132D20A9391E17BE0BF9668A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  casino/cmake-build-debug/Makefile
- Size 11KB
- SHA256 3b9bea8c774e3c5e736c70dbc72bd1b860e48f3259d1a1810800cccfb73bee11
- MD5 741cc351359eff3230b0a44ae015aeaa
- SHA1 a9719b3698275fde1429d89461c46bcbb43e3d63
- SHA512 d186cf5f7f8fc27e3d6b3fab69ba84b6b9a7ef57cc2c14bd5c351e8207f7e65199fc6236bc1f93eddf0c46ee4338b9eb7f5cd5a9248164e0519cb4ec2f0d5f2c
- SSDEEP 96:MfOYvtWDLHpM8UIeLIHnXEGfn+c7eVFHDSQjHF9Ph8XuNv:vPTUDL8nlIIs
- TLSH
  T10C32AD77433382BA11E1BE4C61B14234ED214DDBA84758B5A8A6CC907F1FB6825B77BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral21 behavioral22
- Target
  casino/cmake-build-debug/casino.exe
- Size 2.9MB
- SHA256 7a61900873448b436d860b86f29669aee83c9020ce7b31b57209302194bcf1cd
- MD5 95b064b8792ebd83bbe65c036b5974c7
- SHA1 b7e290c4a224cbe86f1d14f377c42b0228f1d3e0
- SHA512 76ef2946328bb929d026d4cfb62489d2321d0e78804b692ac9c2e8ef61b477cd149ac6f564e41c3dea8f46cb3128be22da0a39c335d02a86b4b7f3bebe58c27e
- SSDEEP 49152:DB7+5eCnVbiiFAslU7T/UrWYzlMnRNlY8eiaTeWFi9/yk0tnlQwvQlQqwOHiwrcJ:DUfFAsYUTd0MFWZRWOwQOT0w
- TLSH
  T135D5079367DB0DE6C9C66B78A6D703385734FC61CB6A4B2B6A0CC23168536D4EE46F04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Visual Basic

T1059.005

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24