e9212f4c55cc080c7d146b170ff487898a5ef3c1925a19442fcd4f15e77b7a9c

Sharing

Copy URL Twitter E-mail

General

Target
Flyout.v0.2504.zip
Size 625.8MB
Sample261107-ly58eaa13w
SHA256 e9212f4c55cc080c7d146b170ff487898a5ef3c1925a19442fcd4f15e77b7a9c
MD5 dcff7aaed4476f90c8becc9cd8c774c0
SHA1 d3f9457909c306a806a6e1e67db40b4593657d15
SHA512 23c50cc9e98341b2065d5b048deb61fd9c41e731a7aaee29891ab57b1e995964d1180ff544b16019441fce46a8468ed7c96232178a20e1c76e184c6dcac15642
SSDEEP 12582912:4yQN4aojSF2gwB8HWhxUKiFu/PlWzzsj7ycQhl2rlKhdZU0YEWNs5Jt8KHWgbqXj:xQq5SYgD23UXeNWngycWlKudqEWq8K2L
TLSH
T1656933406137E60EDC1B703991B54B86EA668137F0D5CDFAF372E06D8B66AF04A2D358
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution ransomware

Malware Config

Targets

- Target
  Flyout.v0.2504/Flyout/Flyout.exe
- Size 651KB
- SHA256 ac1d8fc2b7b0b69633c026297000fa8e4c4b42aca6bfc2504f519185cf8f3214
- MD5 8a515d4af9378b8e89b4e29545006d82
- SHA1 5150628330f53743f82dd3897f2112c4ab5cbbb5
- SHA512 405c3b0f01bb1b02d53d72792c0b393854ad5570fbf2044c3bcbab7fd9de4e6616d98240b563d67f7e349bf6e1c2a2c5095fc9952f81664490dd979dcaf80853
- SSDEEP 6144:5/7Fu9mpcJ/OD8sLskhh8JOQW94s5+t2WItfmzlvtUrJOtutFqVsY2+dArK/5Htc:5/7g4aOD8TrBXw
- TLSH
  T1B9E47400A7C2EAAFC1E6EEBAD637C9FCC2619C210A2667DF53D07D0F793AB425511485
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Flyout.v0.2504/Flyout/Flyout_Data/Plugins/x86_64/FastNoiseSIMD_CLib.dll
- Size 977KB
- SHA256 d9a2000c601169697aea90f6fee64e9148df526a7c4265bea39589305b3c776f
- MD5 1e762d556fa9d085f9db7e7fef273fbe
- SHA1 e4f8b4a60b7d8f97433e3cfa47c1c821790804ff
- SHA512 4ff21c6e0cfea1df39210c29f4107aa03b6bdd71323ace73a85927838e4d74a11f46268df3f84b58850cb17277ff7444522f8c2c6ccdc1954cfc0dfc3bfb3b90
- SSDEEP 24576:yCExhKinCTZA+e6+loFJjzrVs8ee6SZMFYbhL0u8ya5CD0YXHiGgxIz31:ixhKinCTZA+e6+loFJjzrVs8ekZMFYbd
- TLSH
  T10B25F99922BF60DDC42AC471872F7154B0053D69434E0CBBD7E844986FBA7B25F38A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Flyout.v0.2504/Flyout/Flyout_Data/Plugins/x86_64/discord_game_sdk.dll
- Size 3.7MB
- SHA256 527768710ddb0953fce5eb1700c2566b6451135d76f1d0610b63907cd5ba94c5
- MD5 d8cc567718550ae35c1566c3315b90df
- SHA1 e5d8120a8a8583fe7e3177ae7d8fe797c002f263
- SHA512 5e1d72bbb466d032596147dd1a90f5ebcaa82d3d56ee7a0b1aa3a37d4bb42e1fcb510b269451a1b9c7f3b8a1c18b1c5f530b200f2fbbe2ec990b4e1c12e6f5e8
- SSDEEP 49152:cxytJCv8RbSimYQSaKCZhYtOVt7CPjitem2vUkcWDnVf6OuBimHdXopJErae4/KC:lD400amm+8m4
- TLSH
  T12B0648213A56647CC1ABC4B483874A725E3234CB1B35BAFF45D156782F69AF46F3C228
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Flyout.v0.2504/Flyout/Flyout_Data/Plugins/x86_64/lib_burst_generated.dll
- Size 542KB
- SHA256 9cf5e64cd6af8fe4e38d4ed8bcb484d7bcba3e57873904e9be224de017e0aa5e
- MD5 f8c15bafa55ce845fa28d22e8ca8d223
- SHA1 b14675ea0c682e86edced783fc7eb334afce65db
- SHA512 2798bcc8244575ad02a78e51082f7c3fc25143c2bf598d864a4f31b2235f340deaf506416a52096c333c6344c919e1ba42cf7a11fa588c5a9d7c13f2cfae3c5b
- SSDEEP 12288:YP8g39ofcTAk3CUWrzw//vsk43vWn/oQ:SP39ofcZ30wPfoQ
- TLSH
  T165C45A7C51D6096DE836C4B10BAEBA5731A33C4942CD09F361E264AB2D70593BFBED18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Flyout.v0.2504/Flyout/Flyout_Data/Plugins/x86_64/steam_api64.dll
- Size 10.7MB
- SHA256 1bc8731a3a9e9d1a68ee14a815c2525be713141c8e6abb7d40d9ac1dabc79fc9
- MD5 553c4d5c47253e13dc1e2c9df839cce0
- SHA1 989de27468efc2be0ad26832701cfe803be0f99f
- SHA512 d5c58ed10fa587fc4d5ad5f926c8833c525ea27b627f81f8f191dcf6ace73a66ab422bcea2771a9a6dc0e4ca7eb03c404147c1d3258863a7afbaf9e716dc05d0
- SSDEEP 98304:HhHTZ4Xod+k6uLfQZnt5oxxrSYlqdWMtojwNkZAPg7PdB:HhHTctOqdHojwNkZQUz
- TLSH
  T1FCB6F717E7BA01E4D5BAD1789563623FFDB13495833097DB9A805A0B1B32BE4E93E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Flyout.v0.2504/Flyout/Flyout_Data/Plugins/x86_64/steam_settings/configs.user.ini
- Size 50B
- SHA256 d6caa4c039b8ecfb65d057bc74c5b458dec8975a7a192c9a851f769f4c8c476c
- MD5 918740a514479845970385f08627dd65
- SHA1 501603e95c850c10efcce7e82c1e3b386ceb6da4
- SHA512 32f00d1ef3b190af062f814c8e32f45e410a73fbda51a89c0ed63bcc2bbbddf6ca4e6013c37d0ab4e94b9d7039d90c46dcc8a4fecda0767a478d0c2f03357c57
- TLSH
  T122900221085050665CB1142270833D09039551F560066D590280350651A5A210855691
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral6
- Target
  Flyout.v0.2504/Flyout/Flyout_Data/Plugins/x86_64/steam_settings/steam_appid.txt
- Size 6B
- SHA256 044880fe7d4cb9bf09adbd260228f35584c517bf4aa2b0cc074f49135c1d7f0c
- MD5 1cf5f7e81f87270189607147e8fbe6e6
- SHA1 c1ad10de90cafeeec0deba93e0ec432df7b75026
- SHA512 d6fa758233cdc4b9325dbd51c4af44777cf06b75c3fab2aca39e1b4985ac570a7a3b229d4cddcc8e7efbd8ae6d880f5a60ebc8fa2b92608aa19de15aa4f5f4ca
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral7
- Target
  Flyout.v0.2504/Flyout/Flyout_Data/Plugins/x86_64/steam_settings/steam_interfaces.txt
- Size 1KB
- SHA256 3593e17fc00eb3265eaf1cef05cbfea640965c61708060cb7b475b4b143a3324
- MD5 fd0a2c7e12f707a645d5ea55ebe1ddaf
- SHA1 6daf3a25052df14720f5d17404912e1698990ad0
- SHA512 c0360587f7b3f92c6e7c0a154eb233109a383c9dddb447c9b28580af72d544119e3e1d70996a632db46cf2186079c79836706e283fd5a1e1282c0cb497e5c1ad
- TLSH
  T19541062D91313E789A2D64E22D91791F725C22936191ACFDEE41D9E204DCEC71F7F901
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral8
- Target
  Flyout.v0.2504/Flyout/Flyout_Data/Resources/unity default resources
- Size 1.5MB
- SHA256 a11e3e24520676183b3750564b4d9f5a90e8f41fd3523cbfb0c49f3989453da2
- MD5 c9730fe286df07729a2811fbe1dfbede
- SHA1 6f5ea5605cb6771e20ab6d75e448b75307e21ec7
- SHA512 387ef73b2ad58786aac05cbf418a211664f0f0dc24aefff3af8acd83cdbbd072c7dfa6154464eb49218f7b03af62536b1a38c42e5df9f50b96d705c0e8f500bf
- SSDEEP 6144:h8g9JxVJ0aYR1CCVX8BAiZahi3YW+/OJ9WqCmKISHCkcCVw:hD8TpQahXvOjdCTBw
- TLSH
  T197755315A2A1153DEC5E053987A31E61E3BDE99C1BEB8B133B1C321CBF617488A77274
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  Flyout.v0.2504/Flyout/Flyout_Data/Resources/unity_builtin_extra
- Size 343KB
- SHA256 071740a790485a887ae25ce903e88932569ac633084dbcb2adc079b5d1a98fe0
- MD5 8979e8ac338dc41612bbbf8353a76d2d
- SHA1 2f2b14f1cb0274127b2c994413018114cb5bf63f
- SHA512 1ce611aabf1fccf644672014608640e8f5d4b39f4a54d49f5f3ef665a58cc5f1e2b8d2b44b63c5fc7861d7adc36641ea9da4555d2cc72d5f9c80fce3356a9806
- SSDEEP 3072:HkgbzxxNJcuVPyfN6F67blBJi855i7dLP:Hkg3xxnHyfN6F67N35Y75
- TLSH
  T15074F879635B583FCC21153748BA0B739732A5F81BEE4F236E2C5F6C28E5298AB11744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  Flyout.v0.2504/Flyout/Flyout_Data/RuntimeInitializeOnLoads.json
- Size 8KB
- SHA256 c90d61ab5a661d2e665c435b42085910ddf97cf03bd51cf42383c09bc3081979
- MD5 69573c24e97915fd54db2537a3b518df
- SHA1 e38e3f93897abf5198d33ca8060e92d30d466841
- SHA512 2c3253f08da215a9fd53ed63be7b2258f4a99edfcadec3c488526c39cc09f64d2f913d60240536af33a476550dadccd538cfedb79cf9709b4d03b9b5ad5f83d5
- SSDEEP 192:3PsBLsBLkBLL5BLgBLEBLkBL4BLmBLBBLIBL5BLYmBL9BLSBLvBLhBLxBLLBLHBZ:1
- TLSH
  T14812E1BC33478F3F1F07A792BE6B1A4D35D40A1F99CA4C40E9BC4E3FA5A9650658A118
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  Flyout.v0.2504/Flyout/Flyout_Data/ScriptingAssemblies.json
- Size 4KB
- SHA256 91663dd70c40c4bddde34c8a70b3d4d451b6d1a9ee5abc135e37573cd49da8df
- MD5 3cedf81572c427ae4a388e446cba120e
- SHA1 324ae50658a66f87b40b57ceb10339fb5fcf919c
- SHA512 ef3cf0ad804aa9a8d85cd489062f75bb0971e3ab9ab995d670e7d3def75e689f3e0d6281ecd6b6f6bacba7a627342924c09a46d66a0e44c20875c01f4539cc5b
- SSDEEP 48:YXNAYrKXrjFRlClouNuQGoSfTG/fjdqCKWW/odyIUvh:G0jrlMouNtjqodYh
- TLSH
  T130911BB2C08B26D32ECD5FC39C359C8C3DD301924A6490241EAEA79FA978CD63D4D6E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  Flyout.v0.2504/Flyout/Flyout_Data/app.info
- Size 20B
- SHA256 0773fe324da79a9f67b316673b1084f46adafb93e5db7cbd012423329ea17038
- MD5 336b97d9a997dc9c50675d8361561059
- SHA1 d0c1380ae01442d9a8e838fe1b05f9500b3db9d3
- SHA512 bac05352167161c804310192211578acc79eff75aefda03239411bf516c7e03d17d141caf436a5bcae09e24b2f1bf616526777e0b37794bb5666c6d02a823ce1
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral13
- Target
  Flyout.v0.2504/Flyout/Flyout_Data/boot.config
- Size 113B
- SHA256 ba486a20c8e5f94c366092612d50a0e8136dc6ef2bdec521994bd2e78d7af6e5
- MD5 c9e706e1827de697b95ff32fbd93fae1
- SHA1 4cc2d1330bdfc6054e614c31cc83b934f92b3c9d
- SHA512 1da03f5e85b2143f9f1d0dcf7733285776d552ed2806acb6fd85cd24597b2dd09e6a784bd48fe8f5be37d500a0ee15f05620e4787990830ebd7ec97f5ddc757e
- TLSH
  T12EB09B10E56C3D5471C4800154A55D93B1694465505525E9D9942994312780911034B1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral14
- Target
  Flyout.v0.2504/Flyout/Flyout_Data/globalgamemanagers
- Size 1.8MB
- SHA256 670c08dbe2f80428986ed949475c090a8ad0c1ae3e18b5eedc904d9c73899e4b
- MD5 c03d45eaf7c6ada1cb199bbb343abcff
- SHA1 2f2ae07510a58227cc70e14efdc54ea2e4f82b25
- SHA512 816add13a1f9ffbe5a908cb011bbd56ef2d5e2df10a308931223431ae7133df0152ba7cec5ae4cef54b87f14c97d237c5185a9c0c8465125edb406634c8bda5b
- SSDEEP 12288:lDqYQa3ApgtXT8UzByNbklWC3L4qWgF4x69Sr3+B/WW2VoH6Vu9+j:Mpa3pp4qWgF4HoQ
- TLSH
  T1A785F94C8BE6DE3BC69A43BA48EB1B593A3CC2D5E343F367601964501C553FD2E4A29C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  Flyout.v0.2504/Flyout/Flyout_Data/globalgamemanagers.assets
- Size 12.7MB
- SHA256 55fb0ba701e76d4bcf8e10250b94360a6438b331a6847f627a98d2306c387d9e
- MD5 bd480432acf69d1f966ed8db763453cb
- SHA1 478b68c008503bf58ddafb78de4ab16160e79562
- SHA512 0957b3f5d8f278c23124ff685841ae985a021530f9288423c7ff053a405f60b1d32b5101fd3d9e3d8cd5cd07c116692f904004d99879666e70a1c86d87dfba30
- SSDEEP 98304:+cU/urHx16MXzGqYhR0aW6dZHEwxN7AwuuwxiD:+r/mHx16MXzGqY70aNZXITuwxc
- TLSH
  T1A7D6C50B5302AB3AC69D9377C8D76F70B33195712EEA0A830F9C155918E635DAD331BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  Flyout.v0.2504/Flyout/Flyout_Data/globalgamemanagers.assets.resS
- Size 14.4MB
- SHA256 5dde347b3d349194cb0bfbef9102eed952d96a54eaaef7cbb790fb140e3b969c
- MD5 d5e7ad5b1f69038052bf2134be225574
- SHA1 15fe52262fccc5dcbf5a34a7cf3dfd5008354f38
- SHA512 09e442f4378464d7c2ac35cb7ac69f1addfb13a82f475fde19b2e8753a4211e5aecdf276a45c2d7cd190aa2a1c8c673bce29de31649d48de87431eef52e84e20
- SSDEEP 393216:TZlKpR90tmvTahy9MNaW952LdihnxTnLX4jT:TZl4RmT952L4hnxTnLX4f
- TLSH
  T1B1E62683D5E5E0CFD94A60BCE83B68E4D48F59BCC7998FD226176421D2A31735329ACC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  Flyout.v0.2504/Flyout/baselib.dll
- Size 409KB
- SHA256 1e35be4c04d748071d98247c199eaa6ddfcbd297e3de96842c27576777a691fd
- MD5 8b727802e0de4ad39e6b96563c043ac0
- SHA1 ab7f68bb949441cb024ac6925a418e0c711b06c8
- SHA512 a64a06805e9a6f0356cb0ada0aa4b13b1ad58d95f15e3a8c9b1068184c2508d73b40decf706d2f1ae40ab61bf18f88001cef7169499d03854a437d76d5479179
- SSDEEP 6144:tuInkY6mJtoLpzxkzt0R60Htptb+REDqDY92q31YM9Ci4DTF89GCXTnD:4InZ6mXWM0NptoDY92qFn9J7D
- TLSH
  T162946B59F76408B5F5A790788973850BE7B23C8A176487CF23A4439A2F33B91593E372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18