f928737ca642a356b9fc51825af9b3822e3c34c0e1968198b8805a18077be924

Sharing

Copy URL Twitter E-mail

General

Target
Geometry Dash 2.2091 PC.zip
Size 271.0MB
Sample261107-1tvnfavydv
SHA256 f928737ca642a356b9fc51825af9b3822e3c34c0e1968198b8805a18077be924
MD5 d9482a6d4f8a98af567962eb2ea3d090
SHA1 042177e9572d48680986b844ae117ec48f0dce77
SHA512 49ee36fa7fa362dcaeab760cbcbfad059cec9be7ac3f9af839008caa43e46cbc52b60c05ebb00f01d7e59f0cdbf457fde846b6aa53a3e0cca4e9cbcf528767cc
SSDEEP 6291456:Ra0po5P3PWudwNc5XcIavu/olLcugyyh1/tEZcRzVW/kilaQlLtNlKWN:o0q5PPWhSdGENhRtEuPmpFlJ3xN
TLSH
T14CD8332375D94035C7BFEABB8C74081A7D57C742C838621AED6A231399F33ED9784A19
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  Geometry Dash 2.2091 PC/GeometryDash.exe
- Size 12.6MB
- SHA256 4eee06d5c2e2213b4ba2b1f6233dd426bbdd0e9b29d7c375e499516b6f8f69d5
- MD5 00ebd4c51d7b9c9da9945bf50ad3d57e
- SHA1 98bf1ef439e9e5c5e7982402ebb8c702b24b8d91
- SHA512 48a66712bea57c4890fe3c0eaf8453c1e94947a0a7aabdb4d3ddfb7ecb2ce7a6181878815d7d4d79be9ac4c9b92e4643331c2403fbdc71cb2658f027fb72ccd9
- SSDEEP 196608:haXWsrvC1YXM0WQcDqkxKsgNPLJlVYUkRObMyILfL:0XWsrvC1Yc0XkMsgt9lVYUkRObMy
- TLSH
  T17ED626A99764C1CBD0D586FCC21AFE3AC5B53C889321649709E07D27BF27BA30D69913
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Geometry Dash 2.2091 PC/Resources/CCControlColourPickerSpriteSheet-hd.plist
- Size 5KB
- SHA256 980f92d2867c93f2b6f43bcb6aa05647e7545562055b51edd7eda38a3f6e5dc0
- MD5 77ce7c2080d0f2ac65c42cfa4ef631c6
- SHA1 9a6fb0127fb661d519cba5868b60835617859180
- SHA512 255abd0ba5c467ecf79a2dd90fe6768ac0b32a7896ded83f6d79ccea46e20b1ce32224d977ac333df6f96df2fadd711374bc8d6307983a90550855422cb83f12
- SSDEEP 96:/y+VHP5/QO5nNHQWI/QOj9kuH7I/QOj9ksHMCmI/QOj9kvHE/QOOiHc5/QORnHz1:aYb06E06D06d902VD
- TLSH
  T19DC114F602F8D22A68885D6613D0550B8DE835CF9C7211FAF8CFA1848F5BC1B82F7961
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  Geometry Dash 2.2091 PC/Resources/CCControlColourPickerSpriteSheet-uhd.plist
- Size 6KB
- SHA256 5517afdc4ea319ea42d2f120e758a6da6f4c19a2b10f7346ba38e6d7f0278c2c
- MD5 551af94aecec5dce55c41f7448703cd6
- SHA1 96b15e8559ed90923d9e76ab15107234d88a2a87
- SHA512 2450217df4ddbf64585c7d2e1c5acee7a2165efe8e5ef40471bcd6aa1000a0ccd66b962755bb7e279da2d19f35805fede5980a671c9848f969709a17df05c466
- SSDEEP 96:/y+VYk/NEaWkYk/N20uaYk/N20LYYk/N20LrYk/Nyw15Yk/N20I2Yk/Nywy9Yk/l:a1c0u
- TLSH
  T11EE131F512F9E6291D990A62A3D2510B5DD831CB8D7290FAFDDFB1408F4B84B83E3561
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  Geometry Dash 2.2091 PC/Resources/CCControlColourPickerSpriteSheet.plist
- Size 5KB
- SHA256 32ec9e42908a44d99fdcecde2f71f7ca23989c1351f0276275564bdaaf6791af
- MD5 fcb5d49e60350b4e061376d079c78c04
- SHA1 86e6da84404f79ed9105b8ed1a84c54f5a8cde2e
- SHA512 2b28d248db07cbda87ce36c6dc55d73c7fb5e84ea9d725ff0bc6a6bdbdff908eabbef74d20abd402f64406cc173cd251a45670aeb72ce1dc481a3665f888f3d9
- SSDEEP 96:/y+VH5/QOhxH+/QOdhHA/QOdpHr/QOdOHN/QOqyHS/QO9LHo/QOqqHO/QOfUHH9l:aQdZM
- TLSH
  T182C124F682F8D26AAC884D6A13D0580B5DD831CB9C7211FAF8CFA184DF5781B46F3961
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  Geometry Dash 2.2091 PC/Resources/DungeonSheet-hd.plist
- Size 2KB
- SHA256 cee6e59dc61c36ff8d4736aa2282eb26f9f2b126eaeb55649af16ed56c3efaf2
- MD5 10fee51adc022b93130b6057c7485561
- SHA1 9006272d6d2347dc4a053f78541b6a45aa692d52
- SHA512 87c15dee642f4df091a86dadbf0f2445f31810a6172b49ac778c9cdc646b7f8233c699a674149210f3aece07ffcef5942bc6093aebeaf7f91c0f13aff3792372
- TLSH
  T1BA41F2F242F8EA2A1C881A6627C0910B0DD831DB8D7144FBFCCEA4848F47C4B43B78A5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  Geometry Dash 2.2091 PC/Resources/DungeonSheet-uhd.plist
- Size 2KB
- SHA256 984ac735e8162222dc52e67886e8e94db5ea55fdb364c43912fb3d4967388faa
- MD5 0f49189463ecf33e5640f93f09f1fefa
- SHA1 22c0d88bd0748b870e123b0cde74f927819b58d3
- SHA512 548e1ddd6a7c22c0a6ef48e6fe59735615e9f09def04570e0f7fe52b831e68181abeed5976369d34a764ea59b9bfb783de37f3aa97740198322889652c7d116b
- TLSH
  T13841DFF542F8DA1A0C881A5653D0511B5DC831DB8CB254FAFCCFA4808F47C4B57A78A9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  Geometry Dash 2.2091 PC/Resources/DungeonSheet.plist
- Size 1KB
- SHA256 64fae3630a6f7f00729d1b2ad6b5a00e9273a480d5fbd30a3bce9f74223c895a
- MD5 90c005435db60222e36dc17bfb0c1f05
- SHA1 1533131a389e9c1185ee4d9038b84a4000188bce
- SHA512 e63ec543d6a0aabade633b987e0ef5e3cb2d5f1ae04ab939c357ea8bae70440b454773cfaced3fabcdcce49ee6b8f0cdbf79d2646ed15fd78916ec560226e3f7
- TLSH
  T1DB41CEF546F8D62A0C881A6A17D0550B1DC832DB8DB254FBFCCEA8848F47C4B47B79A5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  Geometry Dash 2.2091 PC/Resources/FireSheet_01-hd.plist
- Size 755KB
- SHA256 4744deb1760f9cd94ce5eca9a5ebedec40a1370e03c47df75bde47208aca9b8e
- MD5 238b7bdf61a9910e8a85339eb2c3c0b0
- SHA1 78d1f3fae4ec00ea9be1dacf6af9ef9055e60dcd
- SHA512 55ff5e043909ea74c1c2e57d8d7737ad9d5b7a4be09211337c8f43cef7be082631ce543b32b397b57ef39578b5e111ca09deeeb27171911ea400d40907028c20
- SSDEEP 1536:sWtqqbcAI9bJSkmn2ure1xfeKm6zN2BNOnFAjSL9ogMr79q7LdYgddI+2nm9cyyx:pqq4AIhMre1VeY2BNOnF8SLuDBgu
- TLSH
  T178F4EDF556F8DB6D1D990A6293D2910B1CD831CB8D7294FAFDCFB0849F5780B82A3861
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  Geometry Dash 2.2091 PC/Resources/FireSheet_01-uhd.plist
- Size 759KB
- SHA256 63dafebc8c11301d1acf747682ba2907d867442fede0253c726e390c8b8aceca
- MD5 b84c9cf5e3917eb238370cf4757831a0
- SHA1 63fea593a33b9d7fa2554fc024e3e5e0fba94b5e
- SHA512 3e819107b649ba0b59a93985874b7770740e770d1984f9974b0c197d14507a852915e0079e278a42000c5ab930b374267d0ee35a5eea30e2c5f1dd5a37134e0b
- SSDEEP 12288:DW3gekz00GkZ+7k4jCUg/ORX5vNKfS4ArTU2TldtP0eRK:6gekz00GkZ+7k4jCUg/ORX5vNKfS4Ar2
- TLSH
  T15DF4EDF552F8DB6D1D990A6293D2950B1CD831CB8D7294FAFDCFB0809F5784B82A3861
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  Geometry Dash 2.2091 PC/Resources/xStep.mp3
- Size 1.3MB
- SHA256 9164bf3594a2b0d2ce80e80927bab95d8cbc2e80f5a0198112c178957b0a1621
- MD5 57390e094c37599a790095af692cc039
- SHA1 3d08f483e1a43f029164eb06d89693446f314f48
- SHA512 54ee65cb2965c89c54b85358e0769bd0d361f804a7c29183d11d89e6fffe2374016b68affcf7928f76e2c28c506103f6047f09883537607476c0b47062a07fd8
- SSDEEP 24576:C/QH9dD0uc1tKjUvoCcHvtui+CWoIADt4BqgepaI+lUlAOhYfe4gyAKNOR7rFUGM:C/M5ueUvodHvtuYWDAmBFeP+lIhYfvgY
- TLSH
  T1BE553315840CDECBF98D25306693B392D2525DEBA4063E1E39CAFE4393F3A05BB67614
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Geometry Dash 2.2091 PC/fmod.dll
- Size 1.8MB
- SHA256 223f0e3fd8af19dbab92b4cef1a77580aef3d0a510b47a76561833e31348b720
- MD5 0569b56b6d337cf0f8a37071c3161651
- SHA1 194997deaf17665bab1386a6718cece3eb515f11
- SHA512 68680f1dd7ff7eabf71d5930d17f8a5d1a0cdc8cf95a97f3f400db8972ab0c162809a98bfc16b79d91d6d277b98a1946237d891ced17bcff572a5d38f627843b
- SSDEEP 24576:JqpE431ZFDhvvXm3AZ+RswSUSJtYP2MFZeiwjRrDKOlpGjQ7OJo5Tpji:JqpEkbDZv23ZRVk7YUrGO/I0aMVji
- TLSH
  T1EE85BE85B1F584E8E427D13CA127FB2BFA72348407206BDF47E045A96FA3BD15A7A311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Geometry Dash 2.2091 PC/glew32.dll
- Size 492KB
- SHA256 842a3f20177eb44ac0413116c66430f9508bf88a05fcdab14284a566d5d0774f
- MD5 0a3e7e9bcc0471f9f9d47dbe631e7c52
- SHA1 94f7a7e5ab3cba29ca0bf9e39f99cbbd4016036f
- SHA512 bf2a3e213b589e2e7a0f35d8258ea59b837c3044665d2cc78e9106f801b18a0d64e5f91ffec5a8829c39a69bd37ade5a871ad6c67d23f02397aa224a526d3099
- SSDEEP 6144:EkI4/e2zcb5gJ0rNxITpz0km2AiSu0GW05TiZ3VyfJt4QqU4qoZU8rnzMoL3BhQm:BJzcnkz0PZvDnzR/FJxl
- TLSH
  T11AB4A1AAB45F4B92F503703159529F9BC239E444B02EA39BB047344B3FDE79173683A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Geometry Dash 2.2091 PC/jpeg62.dll
- Size 789KB
- SHA256 de96d250f25fd6a50add6cea1e6abdedd4e56c05aebd1706e8255d5a4e0b2f1d
- MD5 4f3fa0a8560db931d3fdf18b344e49c2
- SHA1 2eb187fe495e58ea8c1058fb0f923a18592358ef
- SHA512 387a5613f6f0ea9330021a3b59edc099de02cfc3c9c66d5a2a42cd3e613f5d271d014293b2364c6ce11bee39071d9fa09bebbf4bab3bb9fc62f1496249b73a13
- SSDEEP 6144:IhG01pcez20aA7lISOd9Zn7TJfnn1CnE+qWxec0dOT38VuGwjt20Znh00URbkf1b:cg0PISOdrn7Tln1CE+Lqz5EUF
- TLSH
  T19705D203F2655C87C7E28034DE6AD975EB547C2D8BF746F7B080BBD93936AA07922640
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Geometry Dash 2.2091 PC/legacy.dll
- Size 98KB
- SHA256 0e7cda5a19c5313666db3ed74aac84b3d679f8f0704a03044b988bbfa9857042
- MD5 fba2de9746e180ac2df3a7b4ed15d79a
- SHA1 afccbb71b773c5c7eaa4cc7e88eea6419d168b3a
- SHA512 66a39df5af1bfbd1a92ac4e0af69563476d7bdc6a79f8997444e6b97548984350453544a1186114de46136b9eee3dc31eeff78616b34cee7fb94a196a6fc53be
- SSDEEP 1536:9irxRfI8+3liz4ytH/vLXL0XcrsEuNvgb5hmKZ99HbIey+X:9irxRfIF3lizJNAE997uO
- TLSH
  T121A3E702BAA110E9CD65917888F78D26E3B2F87517A147CF0B78622E1FB37C42E39755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Geometry Dash 2.2091 PC/libExtensions.dll
- Size 304KB
- SHA256 6d6e22a50c7736a3844bbd80a1b43de936feb380a3bf99c3ab550c3a992236ad
- MD5 20dfa2accfcbfe0603b282438710c2c3
- SHA1 5c6787bc4e3d6641d3aefc202fbed6194a5b76b7
- SHA512 b40de13703bda3f07aab26f64a3cc198375629ff73a3d9fe6703f7079d51b9e702a0d4010eb8830801813050ddf7279fc4d8320bdb0dec3f462352f9c5d5641d
- SSDEEP 6144:E4dvYkXXq09Agm+KNMv+rsssO3cZDb4TP7pCxBo/j:TdvB+pUosss9aT
- TLSH
  T18B64810BF22A0D9BE1E6DA7ECA238405D7B3B8415B42F2DB05C156E53F933E46D7A520
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Geometry Dash 2.2091 PC/libcocos2d.dll
- Size 1.8MB
- SHA256 79c2f6567e5851225520803f460c6c5f6f49a2eac9afb8f3bd88d4c5697bef4e
- MD5 7608ec8138a355bbaccaf4fc69e29cbc
- SHA1 11af82bac31af2f168d2174d9bec554b06ac262d
- SHA512 6f587bcc0c139b0383be6901e65e5b81c47380acef7dc4f45ae65ec32eda5b8b978c956eebd6c91ece17ecadc170badf8721b25abf7b8f75d86bf5252841e927
- SSDEEP 24576:Ef1Ld2wsOUKg4yvKnTj51pGsQYOtEI2ck:21pEtKgLv0j8sQYOtEZ
- TLSH
  T14285280AB36A0899D5A6D67BC99B9C1AE5F3F0140BE3A7CB15D902DD7F533E0007EA11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32