7d6053d587dd32b578016fca12dabb54a64bc150d0aec3f8381b876014651e8f

Sharing

Copy URL Twitter E-mail

General

Target
SevenDayWYandereGirlV0.65.zip
Size 576.7MB
Sample261107-shmjpady3k
SHA256 7d6053d587dd32b578016fca12dabb54a64bc150d0aec3f8381b876014651e8f
MD5 b6d6e851bf90ab5c97380c124a616aea
SHA1 0d6e1ab89cab77111b8defb156c782fcc73b96c6
SHA512 3b38685ddff0b67d87f5104d298c0677a4a612ea21e39a5f962a241daf7a7870d7cd1c0a5f99e8d6e9abfd2255b5784c87a775b3c4680e303f5e55e3b984850d
SSDEEP 12582912:2yn6A+Uy8MZjP0bz+LsmPY8nOKe9v4IU+yem/Hnk6XeVyXk6Ft0UWNjX9:2yn6A+UAPI+jPY8nIxO/EVckit0UWNjN
TLSH
T1EA593319D655A40DD66E21330113CE188A3BBC02611847ADEBD2B73D2EFF6DFAE3A505
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware

Malware Config

Targets

- Target
  SevenDayWYandereGirlV0.65/Engine/Binaries/ThirdParty/DbgHelp/dbghelp.dll
- Size 2.1MB
- SHA256 135116507485451fb75fc564567e946b7b779a819e46679e70960df44c63ecbb
- MD5 87e4a843f7739ba96ae03bb368a37b58
- SHA1 d637bc348e177213a7069ada4b354a9e8c616529
- SHA512 391b7f4320f5a0df9b9600130807b1ce4050a7c7a03284d3412fb288daed1b70a29e651e56e704a28cbe0107ee7d15e5a1bb05c9c940ec6391c8d3d2b311a852
- SSDEEP 49152:uwocwVH+umtSiRFXIrZ4mTQHuEnmDdE51pw:uhcAH0r+OFrmD01pw
- TLSH
  T1AAA58C4792EC40A8D57EE13CD657421BD7B238450330A7DF52A887AE6F23BE51ABE341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  SevenDayWYandereGirlV0.65/Engine/Binaries/ThirdParty/MsQuic/v220/win64/msquic.dll
- Size 2.4MB
- SHA256 6c9457ddbcdedbbffdd6a4c212f42811964231557b77f69400127a34ee55830f
- MD5 b6f6851fae94047fe08039e714a7b6ee
- SHA1 6836ab65a4585288809fa06db2a32ecef631d7f4
- SHA512 539c2f4912459aab6891581b325d8fb487fc9b221dbd19d56525940de4ba8081c8ab5c3d08a9d2260cccc6427e034efef264eeaf10fa45cee266d437a4b35e46
- SSDEEP 49152:rVwASO0Gtlq1IU6idfp1s7NJt0fegH1yZWxWT4ttWDGyPj8VVb:P+FC0144b+8n
- TLSH
  T17BC59E17A7A811E8D877C238C9638137E7B1B81513B0ABDF16A4C6B90F67BD1673A740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2 behavioral3
- Target
  SevenDayWYandereGirlV0.65/Engine/Binaries/ThirdParty/NVIDIA/NVaftermath/Win64/GFSDK_Aftermath_Lib.x64.dll
- Size 5.2MB
- SHA256 fcdd7f3c59560c50337113e7cf1c520da27f26ad8c694ad46f418a6bb2cf8c8a
- MD5 2dd4b5141b2ce4e03ceb84351c99043a
- SHA1 c626130d9c0a464449021bc048c53af2a739ab7b
- SHA512 9bae88346022192032c0e00af84b102b0cf49f1d6b02485b4197c4b547dfd57402d0b71f3d29fff5c9e087b20f987a230b356bf92be141524bb0e097a882ff4d
- SSDEEP 49152:G51CObepcfBU/Rqt6Dg/Auobysa3amwQdvvT+FUnEui9a46W3BXlC133Zt9FSb4I:ygid4tc9pYNIOjgOJ
- TLSH
  T11D467C7A335841DDC47AE178DA431E0BC335BC454371AAEB03A29A6A5F277E51F3BA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5
- Target
  SevenDayWYandereGirlV0.65/Engine/Binaries/ThirdParty/Ogg/Win64/VS2015/libogg_64.dll
- Size 58KB
- SHA256 28d42a6c2730cb53ff51ea10b894bfaa58cd25cd810fd7c36b03237c3bc3c847
- MD5 02a1b056985316afd1323090eee1f3f3
- SHA1 76813056d48e30fadbe10f8e46f7235433084ef9
- SHA512 2392119f65c7f6908033c239c745c2241c6f90bf9e51ecabc577ca3c1fcca893721e31a323e86545cdc2e54880b4fa4c0a1ce55a60a40cb95c7063e7c28bcbbc
- SSDEEP 384:GJKN7KRked7VWjLmPnUunFqphqaNQL2PnQftfKNRvrzAcojOYPumOIYirsUP4y8T:NkSQyQUuFq19HAhjXumDYirm5ALc
- TLSH
  T106437B07475468AFE83B543DA8E5C326E5B6B850936157CF1248D34E0F23AC93E7A3B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  SevenDayWYandereGirlV0.65/Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbis_64.dll
- Size 1.6MB
- SHA256 85f99b4541a604db1124f3fc70d1409b644f0c4fe164c825c9194e2462a82909
- MD5 c30095d55093a17719ad7aa5224c2820
- SHA1 933bff5e6466d9fbe60463dcb33d947421316e3b
- SHA512 5c0431358233b6ebc29d5c083869eb7c8dd942297151118a58072aab179a9677049fc436caedd284dc194e6393b13ad5befd940f460b738b6e2d31c7b63835c4
- SSDEEP 6144:2bbUbUwlPxtVNA0ueMSMMYGUXoz0A1VoqxRCvTa:AulPcDe2XNS2G
- TLSH
  T1F4851F0759928B34C1BC50B588DB557853322C4DAE800F9E7BDCE67434D3678BEA2BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  SevenDayWYandereGirlV0.65/Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbisfile_64.dll
- Size 47KB
- SHA256 43e139fed85c945f73ff86be9d31c078e1fbca21d84e926080969b4d4034fa89
- MD5 8543297c2cd1c1cae9150220dd5e1f55
- SHA1 ba862a9ccd6297f05ebecc9c42bf22d3c070dbbb
- SHA512 029ba80a2652d49de7ad3244d80497a447d90a5ae22a9b30cd2c46c0eda966b578a8b1ee7bbd0f59855d011e66664a794b22776a9acb99431ae5081ad8a5b180
- SSDEEP 384:ue2rmsvpGwK9QaXYBZ9b/kwmVkSA3/pTNYTdk1aLPHXrgP7gpw5WOOBp8FbIYirD:Qnv89iBswdSAQS7kWW/BekYirqO5ALM
- TLSH
  T1AE237DD796F124DEDCA7C938A59B2B2BFEB27006536066CF535485291F22BC1333A325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  SevenDayWYandereGirlV0.65/Engine/Binaries/ThirdParty/Windows/XAudio2_9/x64/xaudio2_9redist.dll
- Size 838KB
- SHA256 25ba5a4c9bae5a4f7b24df3f53faa0863ab085b74795a043d75cbdc975290d39
- MD5 f5970280cbf24b1e261002305c6432a1
- SHA1 09c28664397599a37166385dac7fdda632ce4cf0
- SHA512 7701e6a3b5d700e3bb0e27f706c1d88ba762ee68556bcdffeb05022f51772e69558185f1f055c6bc743947773e0f33e456b45c3539bcc8a06e842123b0d55685
- SSDEEP 24576:J+6PHmQBNmTqtEcl+4n0wcktNvSRbESezo:JhBI9InQMNvMp
- TLSH
  T1CD058C53F6E549F5D16B51359167BB1BF672B40027254EFB02A086283FF37C01ABA3A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  SevenDayWYandereGirlV0.65/Engine/Extras/Redist/en-us/vc_redist.arm64.exe
- Size 11.2MB
- SHA256 77e53cef7c0a1b86701a55f491cf90387fd9ade897c10f4e37a2269e8e126a51
- MD5 c0303c0f1a64bb75e075cabb652e39f0
- SHA1 9712a953142d1704192c4a000aa74132eca51921
- SHA512 cebcb526f3cf2c59685a0b9ba9510200b9be31119bdf063a0056acca2cb4c90c51931492511c54391e60bb92388eaba80a4e0481831252649675de8c2197e8a8
- SSDEEP 196608:sLZLmQOh0nL5VU13d+ohfBBm9yaAo7GaO0Pm7wIwBI4/lZdJryezarDrSyd3THre:Qq7mLm3ddhJBdoqaJWxwVlnJGe2njdTq
- TLSH
  T1C5C6333291568123F7F50472B924E2303D7CB724679489BAE7D4F81C3EAA5C267BB217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral14 behavioral15
- Target
  SevenDayWYandereGirlV0.65/Engine/Extras/Redist/en-us/vc_redist.x64.exe
- Size 24.5MB
- SHA256 de98242e8efe739b80226c63d3251d65677fdec379c1c44f8bf5e44a4f2c3ef4
- MD5 3c62ed79628e36fc3fb0435621a8f509
- SHA1 7d89c83752ab611f5aa38e3e7f3358f83229bfbd
- SHA512 e6690208f55c9f458ede65d4aab9bb14a7f8f5381a74e71c5d842876d4c9de415df90396b6bf99b540c84569ca575129951e60f070e228534a114ed12023e806
- SSDEEP 786432:cjjpx5hYBug51eEdO41UnAyijgtUHFt9q4YYOQdK:6px56Bu61eGv1pjg6pE
- TLSH
  T10A473333E0448026DBE61037A168F5206F7CE624A3649ABBE6CCED0D37B649717FB615
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral16 behavioral17
- Target
  SevenDayWYandereGirlV0.65/Engine/Plugins/NNE/NNERuntimeORT/Binaries/ThirdParty/Onnxruntime/Win64/onnxruntime.dll
- Size 14.0MB
- SHA256 13c5fb5ac9dfe1abedbc686a2bc839ef76f78753e48f485709c28c8fa4dd2d8b
- MD5 c964fbcab233be953e4685405ca9cf4f
- SHA1 44210de266b8e464a40d7220aef702a09802836d
- SHA512 cec7a849b03f3261b6fd57ff53b19a18c9a0dfa0c6c0dfef7d146cc974caec27a9a3aa00480e8d59450b7046ba243068d031280a5f95a41a76bf69f6963beaf6
- SSDEEP 98304:PFoSlq0Rw2sadqTyYijSpYkrji69ROrjHpB:PFocRwvDGjMVrjX90pB
- TLSH
  T1C6E66C1666A902ECD1BFD17C9A4B5A03F771744943715BEB02F041AA2F6B7E09E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  SevenDayWYandereGirlV0.65/SvenDyWYndreGrlFree.exe
- Size 539KB
- SHA256 8a7207e82833a51889d6fad42d4f9304f1ef50da6e56f3dc7693e623745057f9
- MD5 194b3e5f0c24930c01923f1248845cfa
- SHA1 3b8cf27d169b2a33d2ba245ac944fcc45813bf09
- SHA512 6477a2ed07acdd9af26a37c52e51b06666ea452475cd2a5f92d5be4ea67aefc3904197089e17963d32a1ed4034aaf9981d0addb88ca6fdb800ce5a2a24f06e02
- SSDEEP 12288:JzadWQC677eIkbn9ZTuaj4yNc04lMWastPBdprrK7:RaMQ2Ikbnrum4oklMWasRBdprrK7
- TLSH
  T15FC407F12A64488FE350367CC5E1FB38626D57F81C2AE7EDBD0116D1AC62B48AC119ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery ransomware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral20 behavioral21
- Target
  SevenDayWYandereGirlV0.65/SvenDyWYndreGrlFree/Binaries/Win64/D3D12/x64/D3D12Core.dll
- Size 4.3MB
- SHA256 47986c4499222e61be84c2dcb434882e2d41f68f1323e9c1617d6f10e90d8b73
- MD5 a2349450589f179437952974fb0884de
- SHA1 2f75e67cc72f6c3b67efe5a1217b5f691a8ea254
- SHA512 c42f63e272205ef9a03aafad9920780ef139bd177c35dd494d29a5964c737cde24ab403f28d3ab1b841f381767c6f6a5d8a909f29fa29110c6863964edaf06a3
- SSDEEP 49152:sjdqq0UTKxFddI3OtRnSJpWO7UFZccaCVwEGDUIVvn+GtDotLmUXZEilSjpOJAan:sBXZ+vIefS+FDXzTf3TLPE
- TLSH
  T134267D07B7A940E8D4A7C179C967861BE7B27864537097CB1AE0835E1F63BE11A3F324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  SevenDayWYandereGirlV0.65/SvenDyWYndreGrlFree/Binaries/Win64/D3D12/x64/d3d12SDKLayers.dll
- Size 4.9MB
- SHA256 b63309fb8faf23f8436bafaca15f33ec6b387abd32b8761b792b7c6623a3a7ac
- MD5 ce983729e145535ca1c72134438ead5c
- SHA1 ae7adea0a86b20149c635d328874792700f7464f
- SHA512 77bee9c8ebf9e1225342d3e2ee95c61c4b3288c6ec28f8cbd9251afc211ecbaa49049657c043bda6b27ca82abfe920af6da849ad16a08921f1148b1e8c4dfe31
- SSDEEP 49152:qMOZT2LOibAvFGmcwBijneM1dNLF95J7kT0WPMw6rKxCe8MICMQLxKCHQkLJgBns:r8xijX6T+rAlI7Zm8KmiZL
- TLSH
  T11B367C1677F802F5C0BAD1B9CA938A07E7F2B86443B1938F05A5074A1F677B15A3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  SevenDayWYandereGirlV0.65/SvenDyWYndreGrlFree/Binaries/Win64/DML/x64/DirectML.dll
- Size 17.7MB
- SHA256 09683f48815a78ac2c96362bba14b3e8d7bf4d6a13c8d0eb2f752e8ad3419af1
- MD5 26290089dbd3b438557e25a5bd543a5c
- SHA1 785d6aed6372c5317d68e04eba50c934a7d60243
- SHA512 9d0dc6a50829bf2f48862fa0ba8fe00b2a986bf5683d9c44d4c1366e32cb3fe771865f9eb0ae3c9dd67843e1f2f95b873b1135650c2d785c6ce5519c718cbd7a
- SSDEEP 196608:v6Kj5yxjROGq0Ytzn7OBdzIkRnyrQAH5+sM3TKx:BU2GMtz7oZIkByrQo5QTU
- TLSH
  T13A17D01A6F6415A6C17BD23D9A530A43E3B6748A43706AE706F80D311F97BE05B3F386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  SevenDayWYandereGirlV0.65/SvenDyWYndreGrlFree/Binaries/Win64/SvenDyWYndreGrlFree-Win64-Shipping.exe
- Size 142.7MB
- SHA256 96a061ab68822bfb497a1fce0b9f6967609bf713ee1408449d116a4fa996fbb2
- MD5 76d38f78a9bb71f458a8b5e231ebafd2
- SHA1 2a0bab2272644fde2a361a23a9193aeafd8866e8
- SHA512 29b8b345538cd073bc2471bc823fe9cb988733891cc1dc81260a12c303983d2b6c2ae9c14e4b97d8658648c665c6e56d813febcb6ee406908aae1f9e9020f5be
- SSDEEP 1572864:Izkil7iGXxNPNZMfJyposaCxMiFQAE8uMG8vBYOSZuxGh2u90v6o+:HiUGn7YOS3E6o+
- TLSH
  T150687C46B2E509E8F27BD1748A2A650BE6B13C75033587DF06A045891F3BFE0697EB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral28 behavioral29
- Target
  SevenDayWYandereGirlV0.65/SvenDyWYndreGrlFree/Binaries/Win64/boost_atomic-mt-x64.dll
- Size 27KB
- SHA256 853c6a5f20a14ca23d73c996704d47d72b2f087846ddc60b9cd7d79dd87fbb75
- MD5 2ed6eb16afac490f44bdfc9b84bd0c8f
- SHA1 556f6f7a976d42a003ba4bd9fa3df4890b7d9631
- SHA512 e68b2b36817c73abdf44086ba5eca25e98aff99ab8b8255cf2e0c38cc36e599950db34824a380c25df53f80bf80693a56c3297a0e6ee33db545ad2d01f84a70e
- SSDEEP 384:1tx4Eklu+wuClSdbiUT6A2bdPnL5YvYwIYirsUqm+y8RbmL4nNyyxs0H:Spu+wnlSRwLegZYiri5AL+sq
- TLSH
  T1D2C28E8FDA54489AD92EC470F4D2CE39DA72B6944B8193C73264C26D0F527C13ABE6A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  SevenDayWYandereGirlV0.65/SvenDyWYndreGrlFree/Binaries/Win64/boost_chrono-mt-x64.dll
- Size 45KB
- SHA256 5b068d5f12d8bfcb57a54f008796d9b12dc7d74fdb8aa3c62f102161ff384e1a
- MD5 be4f9a0a75e558da78a96c8cf45b57e7
- SHA1 71a5f6dd98d003fecc4e6f5b5b2f836dcd44316b
- SHA512 74471ef2118092a8cf9bcc243215064f6b2195905053a8e150b100607d54483923e7c39006ae8cbf068d0968e3de0e1e917c7c98b26a2bfc0a6eb8d65213ff5a
- SSDEEP 768:4c8gOrxVo94Yo5ioLhth+rztFrfYirz5ALQIB:4c8t9a4gSJ+rztZ7rKB
- TLSH
  T1E7233BD2D75800D8F129D238E9965C2AD6B6B850475283CB23D4836D4F777C4AFBFA22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32