berbew | ad17097e3c9c8be3f27cbc08edc157c5c53fcd1c4fbc99249091f2b09ef5727c

Sharing

Copy URL Twitter E-mail

General

Target
MobBoss-v4.9.116-Quest-Reset-Fix.zip
Size 18.8MB
Sample261111-lz1djsvy5k
SHA256 ad17097e3c9c8be3f27cbc08edc157c5c53fcd1c4fbc99249091f2b09ef5727c
MD5 4e33b8261d4acc9cf5515d4302d7647e
SHA1 3b246afcdaeb66985e2298cf1bf74f7671cf4e06
SHA512 a08c03f40b0010c62bd7928ec6fabac29c9af935d3d82715d2e7d71d7ff9ac42897448392339a7cde050d693b1dbf122365754fca5a6cd70156905d9ab24f2c4
SSDEEP 393216:Bksx9aggUuTfwqLVV2WS0rqiPllnCN72VJZyj4p1r8bmu149ETrvvqOzyWcOz:5agEwYOW1rv/Lc01r8A9EPnL
TLSH
T1DD1723207858508ADE437338E1105A59A704C9D95AACEC9FEE3DBBF918F10D21BB761F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  MobBoss-v4.9.116/QUEST 실행.cmd
- Size 41B
- SHA256 e11a5105e29d5e0fcec7379789cd67ed37a29c49a01cd05a72d921585ec95fc8
- MD5 9983f71a55766abd29befebbe1f068da
- SHA1 14dd96f315fdc31ea0f166566fb3f963b41e77ef
- SHA512 77bb0fb01f9375c69202ee6946edbfb1669157f0b2d74bb9ff761a4f2c61fc879447a89b428e3e4eb21871dd1011087204adff3ef88a115d5af99179b7f24067
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral1 behavioral2
- Target
  MobBoss-v4.9.116/SlayersMacro.exe
- Size 818KB
- SHA256 28d4b9aeeaf02fc7b366ebfcec96da90265cf02f37fa1910acfa9023e193a335
- MD5 2c7e86a55362d35bbabdc028b9db6e5b
- SHA1 d9cfe98648657d02bce604acebd29793f29f036e
- SHA512 21debf7538821552e874eccc0d156f77132daf284a75c47f9c7c63c726909ef1371ecc53749832444f13a428cb1141f7b327558405f941239835216334c6be14
- SSDEEP 12288:eUGMHqDoVehJC7zZtojg7d0G0h6fwQFnSHXnD8olT:vHvVUJuz7ynD8olT
- TLSH
  T11205F64336DB0DE9DED32B7865DB233AA739FE708B6A4B6B8508C1315C131D16C2AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  MobBoss-v4.9.116/assets/slayers.svg
- Size 469B
- SHA256 6d789a064e5bf255a23add5e3f51e4d9c5a44cd56025b3e545937a02109a2b5a
- MD5 e19a70d090dee9bc05ad1d70b814cbe8
- SHA1 7b073a71738bfedfa59d4750c6523a84799406a6
- SHA512 dd6cf9084447268a37c63cd6d447f9c9d3a6ecdb36988a00b67843eca02c31167893cc165d85dfa14be475c45fbd5e14f87eed45fb364b77abf21c4e4843ea61
- TLSH
  T150F027A5C18D146AD714C518FAB0A05593AA5293525693208DC56B3610281DB1C5B6F9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  MobBoss-v4.9.116/combat_core/__init__.py
- Size 180B
- SHA256 db31e7c4324ff753a7bf1900c55079f8178acbe3fe877c3a05264460a60b929d
- MD5 f1707e75b08d24e849f5fe3d8b975739
- SHA1 1ed01dae77f6d13f5093660060c0fc12c332bd5e
- SHA512 655f605d055561e835a0a723cf26ab33dd7027924aae08a7d4c48bc68c3a4d5c82b78b161bc540da948f28d56120168d9bc1cab3dba7159f002bf5ecf455c3c8
- TLSH
  T1F7C080759365318D0D56517BC1971314077E40D16E61A5724C33C51D73F45D46E1FDD4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  MobBoss-v4.9.116/combat_core/aim.py
- Size 3KB
- SHA256 2207a0cc588c95dab3ef1d2cfb02a6fff2a75dce32153ed710ed5a558d47022c
- MD5 c348ce56e18a3fb7b1810fcd4453e7d6
- SHA1 976e4905aedab70a82dd5f3abfc734d27d2e6672
- SHA512 c908cfdc3fcc52372e8da0145733bc3a505e3ae9790a6341f0289c23a792e8c21e2c4c5c4f3b7da6a930bb692dda7adf92c5f9f428ad40fa3851c8f0f06d158f
- TLSH
  T1246194992E6208058673910C1A47A603DB074B63A33B17E7F92DC9941F7098A5E8DECD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  MobBoss-v4.9.116/combat_core/attack_guard.py
- Size 2KB
- SHA256 82f51b2d771321120f5890f71d765afddccab6f97653936fabd76c159d397e00
- MD5 f8351aacd933934dff03c619040329fc
- SHA1 5904a2816be9522411a618ff28788e0bbd22f099
- SHA512 8dec36aae7e19d64e13dac6c9b3ef1b16079d9be17020581ca8742068e73e3a0193d13ef796a4ec7e0aa637e64efdddeb9ef778a1c11a86aef408ba32aa3bb8e
- TLSH
  T1D551636537CA702BDF274DAC982BC252E346F853204E5670B58E23453FCA255E0BDB8B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  MobBoss-v4.9.116/combat_core/basic.py
- Size 1KB
- SHA256 5d919a59759bbcad09d304a83bb23983f99336cb9c72b77dcc3a82cbb2f13386
- MD5 e9df936917eeca117dd7fb9119ec3399
- SHA1 0ff78425c502b8eab333531d2682fbf0c74b40e6
- SHA512 22cea595a9941be2ae70f51ad52ae1d26a6d6dcb1650b16670b53f29d320ec6460f1518eee1e55a0ac612e6cdfadd3a59ba6ad62b69fc8015a69dc05c6daf6e0
- TLSH
  T10A31CF312DD8955D4E394C9FC87B4430FA0B09AE582616287D4D43E52FB2273816C59D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  MobBoss-v4.9.116/combat_core/cast.py
- Size 622B
- SHA256 8a4f74559e6ee7a0c209341d90fe1058be468ff3d43b1a6bc08bd1e4ad119b7a
- MD5 9b7e2dc6ee64553343ac785569301fb4
- SHA1 bf2631bc3d90486afa267821ed047014056c4891
- SHA512 e0953b55bf94643adc2dbf3c4f8757619163944fbdab2c9d3504041960ef1cc72f29bab63e4dd80cc6377b4e2ba6c381341293a531eee5e337dbaeb4edf47de3
- TLSH
  T1A0F07DD126CC64052210728E0A42F250DFAA0F9750607A73B22CEA1D1F1C7BA9D12A54
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  MobBoss-v4.9.116/combat_core/cooldown.py
- Size 2KB
- SHA256 a9a60a5be07db160779cee34118cce2f2bce501dd8e5a3d0547f014f26b2676e
- MD5 c3a3ea2f57d922916c0a1eab960f79d9
- SHA1 dc87dbc9256ee92c10cd3578e5b53bf08c8ab260
- SHA512 0f63673089a5560cdb80ea5e51210850291d3f2a54054e077ee144d92c88e04ff2450c501525fcea5f5c7c936238b40094cfa49d827629785651194e72a8de4b
- TLSH
  T19651436B1ED2F326C633C8681153A143EB1A855B1D2C82A7F87C51592FF406CCAF8EC6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  MobBoss-v4.9.116/combat_core/detection.py
- Size 1KB
- SHA256 682a04deac63f0f397248ab91f5d22b88ef6be7761f0d2eb96ceb2953d28a355
- MD5 bc3f82ad00f6efb0324fb35a241c27d3
- SHA1 2877fe66f0764c1a765f60da459aedf2b37c951f
- SHA512 cc2ae56696593c14b7ed1b4563537e8981183d7c294a876954323dda73e4dba84c62f7ff5d0471288b1780379712adcb29d7956621dfaac97c9d0a41373df2ba
- TLSH
  T13441EE612D52A218D932C69E2147A307DE0F8B43234D6846B97CD1AD2F74160D6B8FDD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  MobBoss-v4.9.116/combat_core/engagement.py
- Size 2KB
- SHA256 d36fcdbee62e16043d83ab6a083b25eacf12726e1acc8ad3a71ecacc05f61149
- MD5 511230aa32f25c9f506b605d18c9cc30
- SHA1 fd52932f4cb885383edd3c86f0080b258ab8884f
- SHA512 f9f99b0c7f53bacd830423cb8fe9654e275739e616edb0b53cbeca958126731fa4b5c9bed68691e4f61bd3ebf3bbd3014b8eed7bdd738fe633e1389e31f7ca78
- TLSH
  T12851F3AE2359683A48324D5D9F56C132A3560DAB94132370FD9E02513F8551E06FE73B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  MobBoss-v4.9.116/combat_core/engine.py
- Size 13KB
- SHA256 958b8113931b8301a6431fbb8f9736007eb6c5d61f1f9bc1009d29d46479d1a0
- MD5 12d36e0356e3fe5ec2d7caf5e5964e82
- SHA1 ca3af4108ca213a53b339348e71bb57c6bb3343d
- SHA512 22d403a0bc2b304034ca29f990106d95a56fa4b3cd2d05eab0cb119c996c8cfb88a0ef5cd1f5fc23e5dfad38c3ea43ee19dc6f32188da9795af897abcb5ac310
- SSDEEP 192:nAgHKnVK1Vy/8D28hTnf3Fs7YcW8S3l0q//PgoASSdSdB/30K9dovs:AgHKnVKFD2Snf3JeKSszAS0SFbovs
- TLSH
  T1465231661D95996944B38C5E8E46F202F70F4E83297F2A23FD3D42583FB4184C3A4EE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  MobBoss-v4.9.116/combat_core/geometry.py
- Size 1KB
- SHA256 9c557c7d72dde914ad54962a387544d97e0dfcc859493d0fa2171eab70efd469
- MD5 185ac4167e335341423478319bd63009
- SHA1 a7480475044d1b3a98a24b32c77d30cb1ce508e5
- SHA512 618673ef5ed00f25767869384c3a0182494c1e7f5d8765085e9145cf86277a81ff4339afc28ebc087063293f9b3c89d74a456ac7c1ceda8e420f89d69ff3d537
- TLSH
  T1ED21F3985F671032D7F286DC4844B802E20A5783DF3A3A1374FDDA94AF78065D5E49CC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  MobBoss-v4.9.116/combat_core/hold_end.py
- Size 3KB
- SHA256 e1e475b2f0ad545e633a1e38cf72e72f5d575f43aa951f1ed0e5fbee9e8f2144
- MD5 1a7f60aff08f0ac61b5927e197f39769
- SHA1 06475267ed8cf8461e02e829b6c2efd9e20a8a14
- SHA512 4a9a5644f02db324f384ca5a567c6170b9798aa29c4a40841a27b8cda6f79eae2c403e5b65699fbc1326b6630c77bb99110e3345e3cafb25a72b80c87493492a
- TLSH
  T1737140213F47812699B3CD9E54B67600F35BF14BA40C5A61BF0D260A3FF572492B87C4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  MobBoss-v4.9.116/combat_core/jump.py
- Size 1KB
- SHA256 88ab67ca671d33969519691243be4d2c2d6d66815ff84cf474a2fe37c915e14c
- MD5 8d39f38f29b3727ab76f267962b61d42
- SHA1 f289b70e7cd00512a85d2a2914b6b9f539c05227
- SHA512 ce22cf4a7cfebba5ae7a2a948b8315033c0a3825f32600d2cfda26b95f3d91ec9c7feabbd44593105b61264919422d8f29105421b4a5e9bfe0f473c8207d64b7
- TLSH
  T1F631992B5DD6A4AA0C310C1DC5CB5861D60B05672F222B623DBD06C53F32273C27E75A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  MobBoss-v4.9.116/combat_core/loot_view.py
- Size 2KB
- SHA256 90d2500ee004ff5f9787cc79e707e6f1366a8f3f78959dfaaf771a2efc447691
- MD5 69277c414bcb04364df959dbf0cb8b22
- SHA1 9653f70e6b975c0e852abc7c5e0972b3faaca7fc
- SHA512 affb9dfdf63dfb56b089573cf5672513ed3df7dc1623422fa6f1b0cf9d2212f1885a52c9287e2ee4877b26d11a4302403bb444e082514f8efbc15ae6e3167c8d
- TLSH
  T1EC51957C3A9B280D4DF3409D45471734F716491311B3BB91BD0C922EFFB4A46C52B6AA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32