Analysis
-
max time kernel
71s -
max time network
95s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
03/11/2024, 08:12
Behavioral task
behavioral1
Sample
RPGVXAce_RTP/RTP100/Setup.exe
Resource
win11-20241023-en
Behavioral task
behavioral2
Sample
The_Moral_Sword_of_Asagi/Audio/SE/!$02_actor002_kiss02.ps1
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
The_Moral_Sword_of_Asagi/Game.exe
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
The_Moral_Sword_of_Asagi/System/RGSS301.dll
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
The_Moral_Sword_of_Asagi/WFExit.dll
Resource
win11-20241007-en
General
-
Target
The_Moral_Sword_of_Asagi/Game.exe
-
Size
137KB
-
MD5
bd9ebb7d09f9111a9f0a0ba2238eaf80
-
SHA1
28c753124d845f61373be87d392ab839914ebdc5
-
SHA256
e5435c0e86a8181a3d88206d5dd47145f2aa768afcae6d8c2ae449f8601a8724
-
SHA512
f2dcdc9a1e64af74eeded730112d87d97ca2e5d894f25324b27c5f1b0680c948e3bcc73136615a4822ac6a75ac43c3b21fb8dcd031ae4203c2798bc6f9773231
-
SSDEEP
3072:fWK+I+/wslzo5lwTU6gixJpLOaHIYsrIjPW4:fWK+xZSixJEaoYsM+4
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Game.exe -
Modifies registry class 3 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.key Game.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.key\ Game.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile" Game.exe