Resubmissions

19/01/2024, 01:18

240119-bn7ndadef77

19/01/2024, 01:13

240119-bla7dscefr10

Analysis

  • max time kernel
    268s
  • max time network
    320s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/01/2024, 01:13

General

  • Target
    fd8059b06f53e9ccac53b1252698b0c7f70f6818c087b984d4422ca1f6b94ea6.exe
  • Size 71.3MB
  • Sample240119-bla7dscefr
  • SHA256 fd8059b06f53e9ccac53b1252698b0c7f70f6818c087b984d4422ca1f6b94ea6
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Irata

    Irata is an Iranian remote access trojan Android malware first seen in August 2022.

  • Irata payload 2 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 5 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fd8059b06f53e9ccac53b1252698b0c7f70f6818c087b984d4422ca1f6b94ea6.exe
    "C:\Users\Admin\AppData\Local\Temp\fd8059b06f53e9ccac53b1252698b0c7f70f6818c087b984d4422ca1f6b94ea6.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:568
    • C:\Users\Admin\AppData\Local\Temp\2b8E8SiG9E1heypYMAe7xjpKggh\DarkAdventures.exe
      C:\Users\Admin\AppData\Local\Temp\2b8E8SiG9E1heypYMAe7xjpKggh\DarkAdventures.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2284

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        DarkAdventures.exe

        • Path C:\Users\Admin\AppData\Local\Temp\2b8E8SiG9E1heypYMAe7xjpKggh\DarkAdventures.exe
        • Size 1.2MB
        • SHA256 c0e72ff374b4a11f9ef50525db0dae08539dd7cdeee01b05853c6dacb091846b
        • MD5 SHA1 SHA512 SSDEEP

        ffmpeg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\2b8E8SiG9E1heypYMAe7xjpKggh\ffmpeg.dll
        • Size 944KB
        • SHA256 d4514458e0e101e6f65d33c234375770e0be5349d655a844532c7cbe15187801
        • MD5 SHA1 SHA512 SSDEEP

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Temp\2b8E8SiG9E1heypYMAe7xjpKggh\icudtl.dat
        • Size 2.1MB
        • SHA256 81555cfed660225cd9f141139e961b0312e2dc56f9a78891202b8b92bdad51a4
        • MD5 SHA1 SHA512 SSDEEP

        app.asar

        • Path C:\Users\Admin\AppData\Local\Temp\2b8E8SiG9E1heypYMAe7xjpKggh\resources\app.asar
        • Size 1.7MB
        • SHA256 3a7d4d05d8a5747df7209b70bae3453fd38aec00622455ed1ea2a5d0dd31b91e
        • MD5 SHA1 SHA512 SSDEEP

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\Temp\2b8E8SiG9E1heypYMAe7xjpKggh\v8_context_snapshot.bin
        • Size 656KB
        • SHA256 e1249d05bfc73c645b27d269f47b6923b33a3cf8088a8ca78b3b637c90f58178
        • MD5 SHA1 SHA512 SSDEEP

        DarkAdventures.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\DarkAdventures.exe
        • Size 1.4MB
        • SHA256 5d58612592be588c2d45c4a78a695e0128da07e4b7acb09dc60427c7f3c7c361
        • MD5 SHA1 SHA512 SSDEEP

        LICENSE.electron.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512

        LICENSES.chromium.html

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\LICENSES.chromium.html
        • Size 767KB
        • SHA256 fbf97fa2778c0a8c51704901b34365612210e2812fc640c7f05b403e150c82d9
        • MD5 SHA1 SHA512 SSDEEP

        chrome_100_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\chrome_100_percent.pak
        • Size 138KB
        • SHA256 53102833760a725241841312de452c45e43edd60a122546105ab4020ccef591b
        • MD5 SHA1 SHA512 SSDEEP

        chrome_200_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\chrome_200_percent.pak
        • Size 202KB
        • SHA256 4a438f0e209ac62ffa2c14036efdd5474b5ecaa7cbf54110f2e6153abdfb8be9
        • MD5 SHA1 SHA512 SSDEEP

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.3MB
        • SHA256 44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
        • MD5 SHA1 SHA512 SSDEEP

        ffmpeg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\ffmpeg.dll
        • Size 1014KB
        • SHA256 a516e514742af3c0b02e490928c5de9457b492e4506f4312450fb9ff49cf7b6a
        • MD5 SHA1 SHA512 SSDEEP

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\icudtl.dat
        • Size 766KB
        • SHA256 8a40af2cba1caa8e736af5af413d358d5bf3bec06c4354218d4c31a450c7fee1
        • MD5 SHA1 SHA512 SSDEEP

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\libEGL.dll
        • Size 437KB
        • SHA256 14a4aaa010be14762edfee01fd1f6b9943471eb7a2f9011a2b5c230461cd129c
        • MD5 SHA1 SHA512 SSDEEP

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\libGLESv2.dll
        • Size 1.2MB
        • SHA256 1a84194a49012776898e90b491b32ed241ff5c397fd6790f8041f1c0cf9f2c51
        • MD5 SHA1 SHA512 SSDEEP

        am.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\am.pak
        • Size 175KB
        • SHA256 7c2b9098130f1f9e0cf4507b64c0e96ac6354bd6c3616be20e2067cfccc820da
        • MD5 SHA1 SHA512 SSDEEP

        ar.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\ar.pak
        • Size 181KB
        • SHA256 e9df0fa338b763a3926c4ee3a87bedf650fa618b6fcf0560c3f5ffe891d48c60
        • MD5 SHA1 SHA512 SSDEEP

        bg.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\bg.pak
        • Size 196KB
        • SHA256 2339ff55464b4ff704fc3c5bf281eec52a539c494bd059cf0346d9c05ab7cda7
        • MD5 SHA1 SHA512 SSDEEP

        bn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\bn.pak
        • Size 253KB
        • SHA256 ceed32e429ed1018d4c49343cf52105cbfd1e877c531a5738fd6e6cd33d27da7
        • MD5 SHA1 SHA512 SSDEEP

        ca.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\ca.pak
        • Size 122KB
        • SHA256 7a39af99d55a1ea838d8d78c5f0da3e1402f9404d32255e31b676ceed4f0e414
        • MD5 SHA1 SHA512 SSDEEP

        cs.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\cs.pak
        • Size 125KB
        • SHA256 8be34e4f8226c1dd4e725711ddd884ef4476560f7863edcf378573dde9db3cee
        • MD5 SHA1 SHA512 SSDEEP

        da.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\da.pak
        • Size 114KB
        • SHA256 e190187adcbb5f829d162660968ba598ed17bd11339062ca4d807deec8a27fdb
        • MD5 SHA1 SHA512 SSDEEP

        de.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\de.pak
        • Size 123KB
        • SHA256 6dda3fa65232ca0bff7314f916942a2aa5d9be73a0b0c7a6d016eb34ea6fff5b
        • MD5 SHA1 SHA512 SSDEEP

        el.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\el.pak
        • Size 216KB
        • SHA256 b1f78df8a7edc914357a2e90bc8dc0ac46f4df642bb22894569fe4905fb8ea0f
        • MD5 SHA1 SHA512 SSDEEP

        en-GB.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\en-GB.pak
        • Size 99KB
        • SHA256 83ff81c73228c7cadba984d9b500e4fce01de583ecde8f132137650c8107c454
        • MD5 SHA1 SHA512 SSDEEP

        en-US.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\en-US.pak
        • Size 100KB
        • SHA256 5c56df9699fc7e8f09ec81421e50a6264cde055e822f5a8cd9bb1edb3066d816
        • MD5 SHA1 SHA512 SSDEEP

        es-419.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\es-419.pak
        • Size 120KB
        • SHA256 1380b9edc9cee4b505f12e8eefa288d8c746ca995b52ceaba27c7741ae8a5cd4
        • MD5 SHA1 SHA512 SSDEEP

        es.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\es.pak
        • Size 122KB
        • SHA256 5b929216ac823dbe2b0bb98e64db76519900e09a86c8513019325271c66ade0d
        • MD5 SHA1 SHA512 SSDEEP

        et.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\et.pak
        • Size 110KB
        • SHA256 e8af084ef5e1062c5966dd7802074ac24f3672dc3c9b9c5453a397644727191f
        • MD5 SHA1 SHA512 SSDEEP

        fa.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\fa.pak
        • Size 173KB
        • SHA256 300fc1c735e92917a5ddf92feb812cbf3175d988ec7ad5955110248a1addbd34
        • MD5 SHA1 SHA512 SSDEEP

        fi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\fi.pak
        • Size 112KB
        • SHA256 b1cb0b32efa78fd8634652c74f298f1d5127f2363ef601cf000417e5c7fefd20
        • MD5 SHA1 SHA512 SSDEEP

        fil.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\fil.pak
        • Size 126KB
        • SHA256 39a9d63736e7b4593fc6873ed3c19d45fbf9eb78a012bfdcee0fea5906ebc5b2
        • MD5 SHA1 SHA512 SSDEEP

        fr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\fr.pak
        • Size 131KB
        • SHA256 66488dc10517b6e3638686be95b430477a39304e92ac45dfe62b58cae3a77272
        • MD5 SHA1 SHA512 SSDEEP

        gu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\gu.pak
        • Size 245KB
        • SHA256 e549ff4e5a094d04c2ce7bc6fd68bea1f03e935437bf164bebb6191c133fa70c
        • MD5 SHA1 SHA512 SSDEEP

        he.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\he.pak
        • Size 151KB
        • SHA256 f5cf34ce58b7f0d450936981aa7ffa060821403e6768eee3746ea4ffc9193986
        • MD5 SHA1 SHA512 SSDEEP

        hi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\hi.pak
        • Size 253KB
        • SHA256 089b9dd31090a987515809a68d26f6eeb64cd9283934e3dcc48b151eec7d3ad9
        • MD5 SHA1 SHA512 SSDEEP

        hr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\hr.pak
        • Size 119KB
        • SHA256 479dc4f75a889d45f62b4ddb6eb48f21c473e37875468c9c26d928a263e15840
        • MD5 SHA1 SHA512 SSDEEP

        hu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\hu.pak
        • Size 129KB
        • SHA256 b51bcb888dbc27bab88a8c9d081df7496de8a9a5a4cd2cfe08abc154190e75e6
        • MD5 SHA1 SHA512 SSDEEP

        id.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\id.pak
        • Size 108KB
        • SHA256 3339ef011c9bb64868da94adb25f4490acbc7f893e4337dbfe2797754cd659f5
        • MD5 SHA1 SHA512 SSDEEP

        it.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\it.pak
        • Size 123KB
        • SHA256 96e02ab6937a1f1cb58762159761a737ce0e1dcd6a253554392baf4389326eab
        • MD5 SHA1 SHA512 SSDEEP

        ja.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\ja.pak
        • Size 143KB
        • SHA256 74422db1a5f28522f9a8b31a3bee9a6df794b419bf723cb6a6c88e82eb72cec0
        • MD5 SHA1 SHA512 SSDEEP

        kn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\kn.pak
        • Size 277KB
        • SHA256 891e092c6895e23be986c3e6d39dcea9b6b75f1448239c13fd406680e50407a7
        • MD5 SHA1 SHA512 SSDEEP

        ko.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\ko.pak
        • Size 120KB
        • SHA256 f3581cea2e5b022b121010ffc5d67f86f717e3a0c0402abd81e24c87fd135b76
        • MD5 SHA1 SHA512 SSDEEP

        lt.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\lt.pak
        • Size 131KB
        • SHA256 776dba792df7b444e1b720326312d8b8312cade74a1372c49456d932b7c65769
        • MD5 SHA1 SHA512 SSDEEP

        lv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\lv.pak
        • Size 130KB
        • SHA256 a676a781c1a587eadf23e5c69bc52f2d352346a70bc53ca908450362535eefda
        • MD5 SHA1 SHA512 SSDEEP

        ml.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\ml.pak
        • Size 292KB
        • SHA256 556165b8b54c6e21bc66d12b3f5be393136714467c427f7114f314d18ad3c661
        • MD5 SHA1 SHA512 SSDEEP

        mr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\mr.pak
        • Size 240KB
        • SHA256 b03a3042f907aed13253ae8083d08f5fad59ff438d024b097276856e72526911
        • MD5 SHA1 SHA512 SSDEEP

        ms.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\ms.pak
        • Size 111KB
        • SHA256 fb5e125dd5e1f21e8df229d22cb3d1f9078bd79bbddca352899248f2a8b21b71
        • MD5 SHA1 SHA512 SSDEEP

        nb.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\nb.pak
        • Size 110KB
        • SHA256 1b17dcde8fc7308d926fbe0faa83dfc9ffe2efc5715e9afd557dde839ad98b7e
        • MD5 SHA1 SHA512 SSDEEP

        nl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\nl.pak
        • Size 114KB
        • SHA256 9a83ad866ad7fd9d65ecbc1e95c276cfce27e8257c76a16950fd14971e66b864
        • MD5 SHA1 SHA512 SSDEEP

        pl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\pl.pak
        • Size 125KB
        • SHA256 2ff9e382a31783285b7d85676e629e2f6db26bb9536ed17b7fbe5ac61a895ec7
        • MD5 SHA1 SHA512 SSDEEP

        pt-BR.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\pt-BR.pak
        • Size 119KB
        • SHA256 25f0bb0b0230d99a9064d52668636f3be85903bf27a68124d79a2fe93c30fe0e
        • MD5 SHA1 SHA512 SSDEEP

        pt-PT.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\pt-PT.pak
        • Size 123KB
        • SHA256 fcfaa9c44c445876c286388b6a1abc1df949f3dda3d64fb57d6e0d54a05cdb94
        • MD5 SHA1 SHA512 SSDEEP

        ro.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\ro.pak
        • Size 122KB
        • SHA256 38290b1c9712296d82ea1681ef95544a1eef4872289134b11e50af735e6deaca
        • MD5 SHA1 SHA512 SSDEEP

        ru.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\ru.pak
        • Size 195KB
        • SHA256 e0894d3aa3f8e0f8ac457a3300001d4e1dcf95980712f8c8e9c845eb4c2bbfa6
        • MD5 SHA1 SHA512 SSDEEP

        sk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\sk.pak
        • Size 127KB
        • SHA256 f47bc1f7f5ab64681d0b152e1a019da60f0ef057ee8bf2ccede019dc4030c177
        • MD5 SHA1 SHA512 SSDEEP

        sl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\sl.pak
        • Size 121KB
        • SHA256 99536d1bc73eec81d5bebbff641ea195544ee5e3a41bb17ddcedf9cde9b141d4
        • MD5 SHA1 SHA512 SSDEEP

        sr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\sr.pak
        • Size 185KB
        • SHA256 e3b80d9fdd420a05d66cc12e685ac94500106dd51a555bbfa2d085094f81e8dd
        • MD5 SHA1 SHA512 SSDEEP

        sv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\sv.pak
        • Size 111KB
        • SHA256 2533676479e9469ffcdaabcb47d3e39bebfe7ae2b80f70784e918a8827439e13
        • MD5 SHA1 SHA512 SSDEEP

        sw.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\sw.pak
        • Size 114KB
        • SHA256 8ec45ac391a085d531fb21815086c2da4841aa016653cb4f8484cfc2615d6c01
        • MD5 SHA1 SHA512 SSDEEP

        ta.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\ta.pak
        • Size 290KB
        • SHA256 457070b35c813175f5a7b630478073e478ff2bf23915dd3dc7a5b3b339cc2b0b
        • MD5 SHA1 SHA512 SSDEEP

        te.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\te.pak
        • Size 270KB
        • SHA256 5cdabd1ad41e8048f2cc6b1615e68b99159daa1aa6706b939447c1811bf0e255
        • MD5 SHA1 SHA512 SSDEEP

        th.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\th.pak
        • Size 227KB
        • SHA256 287897cf3df2db1cf59b872e6575ba8dfcaa0c1f68c17a9c91da6c4490adb8b0
        • MD5 SHA1 SHA512 SSDEEP

        tr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\tr.pak
        • Size 117KB
        • SHA256 43e99e132acaba88971b81a43531845dc7fc3a1e0794c3373de7d9a50a5655aa
        • MD5 SHA1 SHA512 SSDEEP

        uk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\uk.pak
        • Size 198KB
        • SHA256 ffae6286d44c8e219ef90d411ad8746159a6ff8ea610e2a651147a3956696a22
        • MD5 SHA1 SHA512 SSDEEP

        vi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\vi.pak
        • Size 140KB
        • SHA256 d7fdb53592de803a5fbcd8561c4918f1562f92fc8a3fd0039a2a1a7b76a8ecc2
        • MD5 SHA1 SHA512 SSDEEP

        zh-CN.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\zh-CN.pak
        • Size 101KB
        • SHA256 a55f568ad3a8854cec25699484f55024501c8a0967738ba694e073151e5981c7
        • MD5 SHA1 SHA512 SSDEEP

        zh-TW.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\locales\zh-TW.pak
        • Size 101KB
        • SHA256 cfe4c2c5eb131fd92e0d11f912714c5a9a048833ef3ffbe32679b3d58da8f8ac
        • MD5 SHA1 SHA512 SSDEEP

        resources.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\resources.pak
        • Size 846KB
        • SHA256 6bb63de34907029e6f12b1794bf3e2569a97b04344f7816a040ee3dcb26cfc71
        • MD5 SHA1 SHA512 SSDEEP

        app.asar

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\resources\app.asar
        • Size 944KB
        • SHA256 e0a141f199412b98e52a57b18feb49775bcee40f088a4b20f76ec46637ca4eef
        • MD5 SHA1 SHA512 SSDEEP

        elevate.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP

        snapshot_blob.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\snapshot_blob.bin
        • Size 342KB
        • SHA256 4d82fe1e642fe3ca7ad1a173f806088c0652ecfe9f0f6f6e246066e15a3431d4
        • MD5 SHA1 SHA512 SSDEEP

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\swiftshader\libEGL.dll
        • Size 450KB
        • SHA256 83d5719abee35e051d984510e1d5d9317a109031698814742b59bdbbe7d4e30f
        • MD5 SHA1 SHA512 SSDEEP

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\swiftshader\libGLESv2.dll
        • Size 1.0MB
        • SHA256 0a04e42f8280840cfaced8f2391e0933676da1f9a076d10dc0a86ce723c5aa53
        • MD5 SHA1 SHA512 SSDEEP

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\v8_context_snapshot.bin
        • Size 631KB
        • SHA256 a1aa0991e9c49caa14230d4c572419795bc4479508f4a109a05a0256d007fbb0
        • MD5 SHA1 SHA512 SSDEEP

        vk_swiftshader.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\vk_swiftshader.dll
        • Size 675KB
        • SHA256 e09dc9313eafed715fcec0c0cbda82fb52da0895fb061b26b92ecafb7a2b7e2d
        • MD5 SHA1 SHA512 SSDEEP

        vk_swiftshader_icd.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512

        vulkan-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\7z-out\vulkan-1.dll
        • Size 513KB
        • SHA256 44934654eea33b58c3953780faf2cb6a9b10698246deed67cb3256b5102f5ae7
        • MD5 SHA1 SHA512 SSDEEP

        StdUtils.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP

        DarkAdventures.exe

        • Path \Users\Admin\AppData\Local\Temp\2b8E8SiG9E1heypYMAe7xjpKggh\DarkAdventures.exe
        • Size 1.7MB
        • SHA256 c5ad3385138da7a9a23ae32238607aa957c9c3c4ebdea1f0b875075632d7a65c
        • MD5 SHA1 SHA512 SSDEEP

        ffmpeg.dll

        • Path \Users\Admin\AppData\Local\Temp\2b8E8SiG9E1heypYMAe7xjpKggh\ffmpeg.dll
        • Size 1.3MB
        • SHA256 d687f1ed3ab6b78ff8f9a8757b32b0b36a2a34b7e248dae08596c6971b06c1f7
        • MD5 SHA1 SHA512 SSDEEP

        System.dll

        • Path \Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP

        nsis7z.dll

        • Path \Users\Admin\AppData\Local\Temp\nsu9BD3.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP