Dark The Finals (1).zip
- SHA256 96e6276b4d1ff728b1e2014a3be856a5e35a6a885df0797a54728868798feac2
Overview
overview
7Static
static
7Dark The F...1).zip
windows7-x64
1Dark The F...1).zip
windows10-2004-x64
1Accord.dll.config
windows7-x64
3Accord.dll.config
windows10-2004-x64
3Dark The F...s.json
windows7-x64
3Dark The F...s.json
windows10-2004-x64
3Dark The Finals.exe
windows7-x64
1Dark The Finals.exe
windows10-2004-x64
1Dark The F...config
windows7-x64
3Dark The F...config
windows10-2004-x64
3Dark The Finals.exe
windows7-x64
1Dark The Finals.exe
windows10-2004-x64
3Dark The F...g.json
windows7-x64
3Dark The F...g.json
windows10-2004-x64
3DirectML.Debug.dll
windows7-x64
1DirectML.Debug.dll
windows10-2004-x64
1DirectML.Debug.pdb
windows7-x64
3DirectML.Debug.pdb
windows10-2004-x64
3DirectML.dll
windows7-x64
1DirectML.dll
windows10-2004-x64
1DirectML.pdb
windows7-x64
3DirectML.pdb
windows10-2004-x64
3Recoil/gun
windows7-x64
1Recoil/gun
windows10-2004-x64
1Recoil/mus...er.exe
windows7-x64
7Recoil/mus...er.exe
windows10-2004-x64
7Recoil/sens
windows7-x64
1Recoil/sens
windows10-2004-x64
1bin/config...lt.cfg
windows7-x64
3bin/config...lt.cfg
windows10-2004-x64
3bin/models/load.onnx
windows7-x64
3bin/models/load.onnx
windows10-2004-x64
3Behavioral task
behavioral1
Sample
Dark The Finals (1).zip
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Dark The Finals (1).zip
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
Accord.dll.config
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Accord.dll.config
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
Dark The Finals.deps.json
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
Dark The Finals.deps.json
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
Dark The Finals.exe
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
Dark The Finals.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
Dark The Finals.dll.config
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
Dark The Finals.dll.config
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
Dark The Finals.exe
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
Dark The Finals.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
Dark The Finals.runtimeconfig.json
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
Dark The Finals.runtimeconfig.json
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
DirectML.Debug.dll
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
DirectML.Debug.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral17
Sample
DirectML.Debug.pdb
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
DirectML.Debug.pdb
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
DirectML.dll
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
DirectML.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
DirectML.pdb
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
DirectML.pdb
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
Recoil/gun
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
Recoil/gun
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
Recoil/music-player.exe
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
Recoil/music-player.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
Recoil/sens
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
Recoil/sens
Resource
win10v2004-20231222-en
Behavioral task
behavioral29
Sample
bin/configs/Default.cfg
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
bin/configs/Default.cfg
Resource
win10v2004-20231222-en
Behavioral task
behavioral31
Sample
bin/models/load.onnx
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
bin/models/load.onnx
Resource
win10v2004-20231215-en
| resource | yara_rule |
|---|---|
| static1/unpack001/Recoil/music-player.exe | vmprotect |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Dark The Finals.dll |
| unpack001/Dark The Finals.exe |
| unpack001/Recoil/music-player.exe |
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=260, version=32533,
count=10, id=259, version=32533,
count=80, id=261, version=32533,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=30795,
count=162, id=1, productName=Unmarked objects,
count=10, id=265, version=32822,
count=1, id=258, version=32822,
Jan 19, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=10, id=259, version=29395,
count=153, id=261, version=29395,
count=19, id=260, version=29395,
count=14, id=260, version=32420,
count=10, id=259, version=32420,
count=76, id=261, version=32420,
count=3, id=257, version=29395,
count=107, id=1, productName=Unmarked objects,
count=15, id=261, version=32537,
count=1, id=256, version=32537,
count=1, id=255, version=32537,
count=1, id=151,
count=1, id=258, version=32537,
Jan 19, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=12, id=259, version=29395,
count=25, id=260, version=29395,
count=15, id=260, version=32420,
count=10, id=259, version=32420,
count=82, id=261, version=32420,
count=9, id=260, version=32537,
count=174, id=261, version=29395,
count=63, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=150, id=1, productName=Unmarked objects,
count=225, id=261, version=32537,
count=1, id=256, version=32537,
count=1, id=255, version=32537,
count=1, id=151,
count=1, id=258, version=32537,
Unsigned PE
Checks for missing Authenticode signature.
Jan 19, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=8, id=260, version=32533,
count=18, id=259, version=32533,
count=6, id=257, version=32533,
count=75, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=45, id=261, version=32533,
count=493, id=1, productName=Unmarked objects,
count=1, id=261, version=30795,
count=35, id=259, version=32825,
count=623, id=265, version=32825,
count=1, id=256, version=32825,
count=1, id=255, version=32825,
count=1, id=151,
count=1, id=258, version=32825,
Jan 19, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=8, id=260, version=32533,
count=6, id=259, version=32533,
count=4, id=257, version=32533,
count=75, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=45, id=261, version=32533,
count=488, id=1, productName=Unmarked objects,
count=1, id=261, version=30795,
count=614, id=265, version=32825,
count=1, id=256, version=32825,
count=1, id=255, version=32825,
count=1, id=151,
count=1, id=258, version=32825,
Jan 19, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=8, id=260, version=32533,
count=18, id=259, version=32533,
count=6, id=257, version=32533,
count=75, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=45, id=261, version=32533,
count=493, id=1, productName=Unmarked objects,
count=1, id=261, version=30795,
count=35, id=259, version=32825,
count=623, id=265, version=32825,
count=1, id=256, version=32825,
count=1, id=255, version=32825,
count=1, id=151,
count=1, id=258, version=32825,
Jan 19, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=10, id=260, version=32533,
count=21, id=259, version=32533,
count=4, id=257, version=32533,
count=73, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=43, id=261, version=32533,
count=479, id=1, productName=Unmarked objects,
count=1, id=261, version=30795,
count=2, id=259, version=32825,
count=615, id=265, version=32825,
count=1, id=256, version=32825,
count=1, id=255, version=32825,
count=1, id=151,
count=1, id=258, version=32825,