44af484ac66bae43cac2d9b89a6efbe1988fffa81adfd0dd522c6ca15be098c5

Sharing

Copy URL Twitter E-mail

General

Target
BLACKSOULS_VR_0.2.51.zip
Size 3.7MB
Sample261104-vbcf9aszgt
SHA256 44af484ac66bae43cac2d9b89a6efbe1988fffa81adfd0dd522c6ca15be098c5
MD5 f02f97804b98593e0757b82c632c3144
SHA1 f1667d1f94aa21cfc2419b4dece3bf281b164d42
SHA512 d9295713b25cdb201958a9199640b61fd637a1404276f8593a0790f970dc97bbe1672bafeb84e2823fc3f1098842129d42f6de73730bd381a892850962361132
SSDEEP 98304:HNwFVMHyM1RDWrX/QRcIBxrqOFEiPMrlSCrmmpWYIMOEJ:CFtMGvQeu1DEiUrl/SAxF
TLSH
T1270633526EBBD91BF8B020B6764FA1CE336C8B148116721FC6F9B2A57C5F083654DB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  BLACKSOULS_VR/BlacksoulsVR.Engine.exe
- Size 99KB
- SHA256 f5e47e9c8f10fca21b98da7e3ff3700d7f944bae2d40e74efd0e6453a77ab6bb
- MD5 69533f12c0b85c7dd85a0fb44192a835
- SHA1 a905962ded0bd89c3b4d9e0e8ca2b3a25cde93af
- SHA512 ef55aaa8a2b3517ace62deb925bc81efcc739bcc56fd6574bb9f5317932870087f6e6a2cea8b6014cea59bb6dc8c82a80bd4548c046ee8b335dfdf2a099ecb98
- SSDEEP 3072:dbMwCxaJuUWQZ/e7nyGLYCqhHQ5pHyd3kpBfOoNw:tLc1UWQZ/e7nyG8Cqq83emo
- TLSH
  T1A2A32A0833FC821AF1FFAB7858F106518B7AFD739976D68E0985908F09A17808DD5B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery spyware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2
- Target
  BLACKSOULS_VR/BlacksoulsVR.exe
- Size 2.7MB
- SHA256 51eab044a66714449118ce6533d87a4c26410e6070fc708b51b26daf6c42a620
- MD5 266af9756165d6fe912b069b5e04218b
- SHA1 bae17289a24cf80f9c809693e20a03eb824d1baa
- SHA512 7a5951ebf17a81ff60dd7641094c668837353df852800625d2b0c65de7d6aa969e98d6687f8b3345c4fe35bf59a215c300ee39623c40add567ac1ec15cf48149
- SSDEEP 49152:+CgS7lxuwMwKQF6zYuiRklRbtIH9UA86iY/qJ3OSDLSgn2Sdl:+Cgclr87HCnwOISc24l
- TLSH
  T11CD523A235F58F86D3BF1678A17605A10B35FF23E921DB9CCDA280BE48613614A15F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  BLACKSOULS_VR/SteamAchievements.exe
- Size 22KB
- SHA256 d0fa01c0189eea40889a66493c2770ac4fa5eaf11dcdceee6ec920a45a6c7737
- MD5 e1171dc4821a72cf8e8e892b69129cf2
- SHA1 cf7de9696277c83d6a27877655c6d00e51c7d065
- SHA512 56f6354213a992d9901800433717dc914caa3aa15643d597b25c9bf3ffadcea8214376d6304328bdc574171be9fd84d4d226d69ec6e88c4704d4dc9c2d0ca8f2
- SSDEEP 384:vn8BnKmaRIGZAEf+wbqTgUeCvX8xocKxo5k0ltoSF+wGEfmT0:9JZAs+L1eCzE5XtoYhxfmT0
- TLSH
  T13DA2C61A33DC0566F9BF0FBC25731A110BB1F9A34913DB8E89ADA0DD19637509D82727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  BLACKSOULS_VR/app/assets/index-M2wnqrQZ.js
- Size 2.6MB
- SHA256 3e76324be7dbec8ab0db405e6eadc3d5b60593d3f98c3c78c050533574fd464f
- MD5 dd52faffd3d02d5adeb48a50b6dd9be5
- SHA1 b23989daed0a22fe9498db126d4e3d5273d4c61b
- SHA512 a1616cd77e25478cb70cef64d22a207bfc6774fcb9c3362c89bf3e22ce5d88d2a88a484480d63ba52439c02a73a339e384bc308906b8d5bdc61ba83436192e96
- SSDEEP 49152:TbN/w8SUzW7Ns+s0MEH+6UbGLN3LRfGhXW6/rMEqG8arrVXTjzF3ITIhXOC/3qHx:E9F
- TLSH
  T186C5E7D5E3EC612A4AA5209A4C2D84CEA53CD463BC06CCEFBC5C64D4389582DD2BDF76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  BLACKSOULS_VR/app/assets/ogv-DkntsWbq.js
- Size 173KB
- SHA256 54f969f3874b5349ad033e97b56de14460c795180af4b6b18e060f4f1de6766d
- MD5 423a72b10b47387530f7b4b5cb1f233d
- SHA1 58ceeef698e343e530f7eccbaec8cfb933baf542
- SHA512 426767d33610ac1be79418d12792715cc102f9102fe2d111a8100d9036d7d332fbed79ae7be465568d74c4719d8882a1a959cfc936628c059208d9a11ef1511e
- SSDEEP 3072:t3Vh/BQfyabFEwCHnbWnMmIwd1Jg5Hrssi/AIq5:t3Vh/BQfyabFEwCHnbWnMmIwd1Jirss1
- TLSH
  T1370462C0FBDC5963C212B0505C3F89CE936CA57BAA1098AF7D6CE1DC099883D9275E79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  BLACKSOULS_VR/app/codecs/ogv/ogv-decoder-audio-opus-wasm.js
- Size 7KB
- SHA256 b250fd51637998eb03832f14d07932da3cc978bd80b0199ae26b038154421baa
- MD5 64917b4c1b1524d9abd01d93e6ce1307
- SHA1 b9c19310e72585b22250ad4b089df542e3ba1156
- SHA512 fe5c97142314dca5e7ebf26ed3062e0da4f5c04b059f155865ec62823c73429001165d601df2995bd93a55b14745c7e9cbf80f24ce1bab35a58d1c4a4e70e70d
- SSDEEP 96:pUxhSCL74c1OYMHRO5FlKAL6A9FOV/U2/zisY0YpLY64mwYyFuDeikZXaf+iDD7Q:pUxtOytKqia0v6iw4ZXa2k5mmH7mH8e
- TLSH
  T1BCE1D7DA3EBA714781A621D2A0AF890F74302573574880B15155FDAC3FB966A902BF4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  BLACKSOULS_VR/app/codecs/ogv/ogv-decoder-audio-vorbis-wasm.js
- Size 6KB
- SHA256 4f4935a0d3c7a4d4abf6e24c42b71c9cd6919a28595d6a22d8dcea267892b9ac
- MD5 abc2a831939bfad454fddccd40516ea9
- SHA1 b6b5e45141b8cc93658bbda1fa3cabc4fc4d12e3
- SHA512 b2b5c36f45328d6976eb4615cd33227ad5a0dc282b7b65b288f17105abd464365d547796ffbef278708f45fcc1aa2c9ce0604b01da49a267b237578fd9e05797
- SSDEEP 96:1UZSOCGA92ACygJYV6A9L5cGy0e564yisY0YTvyZuzlDeI8ZMaJ+in3MipUmTYE8:1UZQtewv3ymE0vozlIZMaUbmT7mT86
- TLSH
  T153D1C6EB3EB2B04B829262D2A0BF890B74701573564CD4615155ECEC3FB913AE12BF4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  BLACKSOULS_VR/app/codecs/ogv/ogv-decoder-video-theora-wasm.js
- Size 7KB
- SHA256 f3763697756b65547c29c7f5102186687a416c5f8321bc5bbbdcce97a5e5bbc2
- MD5 00ac921c11fddb4498dbdb6494c29506
- SHA1 7f6630c236f50c1e6e1728f713744d2f62d5042a
- SHA512 e629a2410274a6c57786ae17ca53fc5b047e20dfd3000e70d4b8deda64d69cc64decdc2d4dcfd1cb404db9bd96b49797ef66700dd04abf00e0ec548a966b67f9
- SSDEEP 192:UUf37TyGCIHO0Fs2YJY1mMeO+o0qV0dBrhHs:HaGZA2bteO+Td1hHs
- TLSH
  T131F1F89B3FB8704BC6536162D49F4E0F747454322A08C8617246EE9C3E7823D916BF8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  BLACKSOULS_VR/app/codecs/ogv/ogv-demuxer-ogg-wasm.js
- Size 8KB
- SHA256 da6f0f0706849715fc16bcdab3503e16b8da08c815dd1554ed996419992b74f0
- MD5 aa52db7adc49d6edee55f4078862df17
- SHA1 d28ff0fbd2df184054f73594a85e5156541de2c8
- SHA512 87794c3829bb69845342aa1e119a8090c3da801723bffb49fe8e99e128448367829a2c6951df32de1cd64af4ac884c5c634c09407916411662b30bce6119b579
- SSDEEP 192:rzUNIG5Bxe0SQMPB6IQOh9/W4KYpbEQ+i/VUC:r3G3QZGO24K8JVUC
- TLSH
  T19A02989E3D76674185E324DE59BF101F70355C621E88C9A1C302ECA83E70AA960BFF6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  BLACKSOULS_VR/app/codecs/ogv/ogv-worker-audio.js
- Size 9KB
- SHA256 da00c90526f1248f0a5787bcdc44825f55161fe6e1bb32f134b2a5d58a37c439
- MD5 79a7dc11c160064deecccb21c4d987df
- SHA1 41f0e8234ea5d7fc4e372bdda955b2873ec68350
- SHA512 a950327d86e1fa09f95daed39dc6620397e2b661a6bdc0a3dd31a45582699f2ba0bf32faf1e773514a7cfbe803a0ec67742f6fe5ee03b4431d7672139a1b0a50
- SSDEEP 96:mcvNQ95qTWd9JdZtm5schtgAGsLOSNucx7SWL4oTIxaoo6EBgfwvjbPLRe12DBb2:mt5OWaqMv9SWLwaTgfsPLRe2KJ5
- TLSH
  T14F1283A874A2F1E003C7E0E9112F650F91A8997A505CE1D4B7E6DEF15FE416EE223B34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  BLACKSOULS_VR/app/codecs/ogv/ogv-worker-video.js
- Size 9KB
- SHA256 87ee52f84043248e9a045be9d326e0aa0be08ccd707593f4466df633b735758b
- MD5 917f69a8e0f955ad7891970bf160c659
- SHA1 3dd86ac547dc55ab27915718e1dc59b769b4c0fd
- SHA512 9743912399c4d31155df74b8ac177629f24cad63fd7a50ba5d93e2fd39c59ddb7ffd892bfe0059e2251396b546bf3a907cc85449a8e980183e1b08b4e59b6d70
- SSDEEP 96:mcvNQ95qTWd9JdZtm5schtgA3sLOSNucxKSWL4ZT/BgfwvjbPLRe12oaWnl+Bb+9:mt5OW/qMvYSWLegfsPLReVaWnlyKJb
- TLSH
  T1291272A874A2F1F003C7E0E9112F650B51A9997A114CE1D4B7E6DEF15FE426EE223B34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  BLACKSOULS_VR/app/index.html
- Size 2KB
- SHA256 d98027cb31abd6b38f326a35762d4f27f7a70d32ebec18ae11b47aee070d2689
- MD5 8642b81b5b456f9df5fed6c84d4830bb
- SHA1 6d2b6fc7b607aea64b1e53583edae044c88c5ef5
- SHA512 81f3efa59a5222d192e8bc1a3596bb0780c74f1de008bfb53165ad4beff532adb01e632534fcd663b393708421286b9314f3043f5340c3d3ddf8c04ab264bccb
- TLSH
  T109512097790415196693E1587EA2E7AB1723CE01F30698BC2880085EC7CE6DAC6FF9A5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  BLACKSOULS_VR/coop_server.cmd
- Size 278B
- SHA256 db03d1728dc411daef021e2f6094ee4c8ffd9d6f9c767ecc346975db85bfd0dc
- MD5 9f8c3ad61e7d8fe83f4ad865ad7e2ad2
- SHA1 b8d40639afb62097fb202f3167bc8d5c18464010
- SHA512 77fe7cd7795ecccf69208ed9af18244237fb096321f83d3047d046544a37a71cfaf44b66b391668d0f5b90b07030458982f880b0c14e61ddf1c24fed30d56dfa
- TLSH
  T10DD02B039CCAA06A13A040C907ABE286AE0F98FBF5C59DC702B151579886633C7695F5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  BLACKSOULS_VR/coop_server.py
- Size 384B
- SHA256 db7f76bc5144eae6c118a39c5cbdad2dd4193775a5023bc3902c81e1fb988629
- MD5 c53d43e143c2142f4aebe5b0f88c618f
- SHA1 f4eb5c4d833a95d47fc6ecb7643eed58e046f1ea
- SHA512 290f0db550fa014a338b40869e72070014cf1223b531dae3cd7aca5e0021d6bad9bf78f00976023c051b129954454e69ec3c7f591a316129245f38059ddd8b7e
- TLSH
  T115E0C027697878E404E4C7C56254507A01174E0E0E4AC8A183694FA7474F3494E71BE4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  BLACKSOULS_VR/server/blacksouls_vr_coop/__init__.py
- Size 92B
- SHA256 a3b85ecda06b30afbcba684c2a6893c680542d4601265ce0ec92f04b8bec92f2
- MD5 20bd49f84edc226e63ec47af38b90980
- SHA1 fd10b01adff542a628c497c194469b42600abec8
- SHA512 e307c6ed535c143673f5de6e03526b54b05735d21bcbf15ce6b8f0c0f4e03107f6819f6a912512199d6f32fbeed19ddbd469afd4177305e1ea1b569bf19deeb2
- TLSH
  T16AB012045DF4257713034153371350CAEB1C242324B2000213D9E08C7180009A065489
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  BLACKSOULS_VR/server/blacksouls_vr_coop/__main__.py
- Size 30B
- SHA256 6d8b7d7846a845059d7a3107143f11131f63c5511d669b44085b15ec5e3d2279
- MD5 746aff14c3a098a28fe9d01d54f174a9
- SHA1 235727669d2347efcde8314826447d13b3522c17
- SHA512 93d8d9b31958024e560be3d99a2e5d8cea60337bf677d58a05fea4b7ae2a06dfb98a0c007a8b7edf539bf1003edd4f58e2188e9d67cd0f99cce4f1f7b5dc87ce
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32