d35cfaefbfc28045d1749a87073adc2f3a6d6681a54133f0ac62592af7851484

General

Target
Parasite in City 1.03.rar
Size 143.3MB
Sample261113-nzyk3aaz2t
SHA256 d35cfaefbfc28045d1749a87073adc2f3a6d6681a54133f0ac62592af7851484
MD5 44fd926a4d414bccbfaaa9a00a9a441d
SHA1 9b1e7931714748f5dbea46679ddacab5aca0a696
SHA512 36b37d6543ffd9e5eb9e7839e73ae09d484ab14baaec17a76a884004d63888512624fc470259dabc9c043dade80a572af1520dcab7ac2fce64f00bf3f2f00ee0
SSDEEP 3145728:drZ0kng/Yav9i17PFk+3pSsl5wcv0ZElL9+PcFV3mGvET:F041C+51zQC9+PIJmGI
TLSH
T12468333DD9A51095D92063F9E2436510CBA4D7260DF5D3223210AEAE2EF26F3DD3E5B2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  Parasite in City 1.03/D3DX9_43.dll
- Size 1.9MB
- SHA256 0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f
- MD5 86e39e9161c3d930d93822f1563c280d
- SHA1 f5944df4142983714a6d9955e6e393d9876c1e11
- SHA512 0a3e311c4fd5c2194a8807469e47156af35502e10aeb8a3f64a01ff802cd8669c7e668cc87b593b182fd830a126d002b5d5d7b6c77991158bffdb0b5b997f6b3
- SSDEEP 24576:8UtU6OIyl2Wy9M3bJ45fPS0zFZghQ6aOiFaKOE31GrvFXl74YZ29X1MDd6olmrBs:8566l2u45BiNYFrz31Cv3D29kd6kWa
- TLSH
  T14895AF51C5191075FDE69030110D32B2219C9B316391ABCF665E2ED9FFB8BE1EAB8387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery persistence
behavioral1
- Target
  Parasite in City 1.03/compile/D3DX9_43.dll
- Size 1.9MB
- SHA256 0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f
- MD5 86e39e9161c3d930d93822f1563c280d
- SHA1 f5944df4142983714a6d9955e6e393d9876c1e11
- SHA512 0a3e311c4fd5c2194a8807469e47156af35502e10aeb8a3f64a01ff802cd8669c7e668cc87b593b182fd830a126d002b5d5d7b6c77991158bffdb0b5b997f6b3
- SSDEEP 24576:8UtU6OIyl2Wy9M3bJ45fPS0zFZghQ6aOiFaKOE31GrvFXl74YZ29X1MDd6olmrBs:8566l2u45BiNYFrz31Cv3D29kd6kWa
- TLSH
  T14895AF51C5191075FDE69030110D32B2219C9B316391ABCF665E2ED9FFB8BE1EAB8387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  Parasite in City 1.03/compile/parasite_in_city.exe
- Size 61.7MB
- SHA256 5bc4f3adfc9c4512576b7b526c07d3bef59f87044a5c1ba06b88b95697e1f917
- MD5 637cc27fe03750e88a27bc7aaf615e3a
- SHA1 b878f7fc108a8c07b20e960a4bc3a5cfaba82005
- SHA512 dad1085c8a6cae091ad36e2399e0eb16853b0a41bf6357bffed594c8c89f8de6f40b2061706e1835f4a99ab79e66a36ff5d0da85c7d5a31736f7dba9163c7d12
- SSDEEP 1572864:klZiABDJ0cTsgT5b8Q+DH5TONM+55ysEBi1yc:kXl1CTgT5bNuONM05FEBiz
- TLSH
  T10DE70241F242C0A0CC3605B0CD56D55A4735BE1AEF2D1B9FB584BF0EB6B32529A27F98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  Parasite in City 1.03/parasite_in_city.exe
- Size 48.7MB
- SHA256 3b358a19eca559e97a246b708003013a6bee7fef9a984cfdac6807ccf7665d7d
- MD5 505f89772b297509ea4a1c5712d8efd7
- SHA1 ca5278a8b36e6b637b728e44606ba53731bd64c7
- SHA512 3084202c3c4217d59ca7db628d0b1b7ae5ae0bd9d8e855c7e75a1eb543ffb3b1b22b42f3e6c7ee2d23735cd49e3a7947dc50f2f7bab6e361a18e7d0164239cc7
- SSDEEP 786432:2TY2l3x/UU0UNeYq+W/ND/jEYscDLksxHtDdwqy9JtEvQ/a3gfqQ3HoXieecQxhy:2cSRUU/oX/NDnLDLNCZJtzG63DQEg
- TLSH
  T152B73324DC7A50B8EA103AB5AB438615D2B0A6770DF4C5637388AF9C7E92251CCFDD72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral4
- Target
  Parasite in City 1.03/setup/dotNetFx35setup.exe
- Size 2.7MB
- SHA256 c05a019ce69c2e6973e464f381c2b0b618ad9b135ca5275b052febf64c9f9257
- MD5 269f314b87e6222a20e5f745b6b89783
- SHA1 b0ca05c12ebb9a3610206bad7f219e02b7873cbd
- SHA512 34c574c78315cb83aac1b763a4f26f978d6c80d8e5bd61b601d16fdce2bccc109f8b46f03fb938a2ff2b9acb4793313f75b15539006e72b827ff7673507e5beb
- SSDEEP 49152:lQ1IXUtz3UXyYAtehSSJEWFU3P5F06520twrKf5gRV6Cs7esM7ELNgZkuudpvXps:ll8zkXyPterEf7520KrjYCsY0geuubXq
- TLSH
  T147D53312933A9F51F0B7EA3478D67A83BDF6181B650FCE59A5286DC8F80D15C493BE08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  Parasite in City 1.03/setup/dxwebsetup.exe
- Size 308KB
- SHA256 6bc92c7e34dff126b00f3f032952a35b50fa2dc06a9b2390baa6491735b63f4a
- MD5 5a79fb5e05fbf27afacdbdabf8579cb8
- SHA1 8a6f5ba56dcd1954dd7abfc2c2e8a30cd956e5de
- SHA512 16e8bbe1e286fe2b5fbfb08fb4531217ce4fa23a608ab32ca4f13a9080882ce9a4a6a264b1f6d33ec92b03028f4d49566351c0f89b23680b0ef22c3f232b395f
- SSDEEP 6144:RWK8H1bmbUWC3mzu84CGjvHyVHys1ifpkzpVuZABdgXm:ebmb/C3IzQyHyop8Zad6m
- TLSH
  T19F64F24127EA857FE0B52F745AF256032B30BD949DBEE32EA341688C6C31790B579723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral6