Overview
overview
4Static
static
1DCK/README.txt
windows11-21h2-x64
3DCK/creati...de.txt
windows11-21h2-x64
3DCK/data/Thumbs.db
windows11-21h2-x64
4DCK/data/b...ad.png
windows11-21h2-x64
DCK/data/b...it.png
windows11-21h2-x64
DCK/data/b...rt.png
windows11-21h2-x64
DCK/data/c...bg.png
windows11-21h2-x64
DCK/data/c...04.png
windows11-21h2-x64
DCK/data/c...ty.png
windows11-21h2-x64
DCK/data/c...ut.png
windows11-21h2-x64
DCK/data/c...nt.png
windows11-21h2-x64
DCK/data/c...in.png
windows11-21h2-x64
DCK/data/c...rd.png
windows11-21h2-x64
DCK/data/c...me.png
windows11-21h2-x64
DCK/lib/GameModes.py
windows11-21h2-x64
3DCK/lib/GameModes.pyc
windows11-21h2-x64
3DCK/lib/PlayMode.py
windows11-21h2-x64
3DCK/lib/PlayMode.pyc
windows11-21h2-x64
3DCK/lib/classes.py
windows11-21h2-x64
3DCK/lib/classes.pyc
windows11-21h2-x64
3DCK/lib/co...ars.py
windows11-21h2-x64
3DCK/lib/co...rs.pyc
windows11-21h2-x64
3DCK/lib/co...ons.py
windows11-21h2-x64
3DCK/lib/co...ns.pyc
windows11-21h2-x64
3DCK/lib/data.py
windows11-21h2-x64
3DCK/lib/data.pyc
windows11-21h2-x64
3DCK/lib/functions.py
windows11-21h2-x64
3DCK/lib/functions.pyc
windows11-21h2-x64
3DCK/lib/main.py
windows11-21h2-x64
3DCK/lib/main.pyc
windows11-21h2-x64
3DCK/run_game.py
windows11-21h2-x64
3Analysis
- geolocation tags
eueuropefrfrance - max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
16/04/2026, 18:45
Static task
static1
Behavioral task
behavioral1
Sample
DCK/README.txt
Resource
win11-20260130-en
Behavioral task
behavioral2
Sample
DCK/creation_guide.txt
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
DCK/data/Thumbs.db
Resource
win11-20260130-en
Behavioral task
behavioral4
Sample
DCK/data/button_load.png
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
DCK/data/button_quit.png
Resource
win11-20260130-en
Behavioral task
behavioral6
Sample
DCK/data/button_start.png
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
DCK/data/computer_browser_bg.png
Resource
win11-20260130-en
Behavioral task
behavioral8
Sample
DCK/data/computer_browser_page_404.png
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
DCK/data/computer_browser_page_empty.png
Resource
win11-20260130-en
Behavioral task
behavioral10
Sample
DCK/data/computer_browser_url_input.png
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
DCK/data/computer_button_account.png
Resource
win11-20260130-en
Behavioral task
behavioral12
Sample
DCK/data/computer_button_mail_login.png
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
DCK/data/computer_button_password.png
Resource
win11-20260130-en
Behavioral task
behavioral14
Sample
DCK/data/computer_button_username.png
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
DCK/lib/GameModes.py
Resource
win11-20260130-en
Behavioral task
behavioral16
Sample
DCK/lib/GameModes.pyc
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
DCK/lib/PlayMode.py
Resource
win11-20260130-en
Behavioral task
behavioral18
Sample
DCK/lib/PlayMode.pyc
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
DCK/lib/classes.py
Resource
win11-20260130-en
Behavioral task
behavioral20
Sample
DCK/lib/classes.pyc
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
DCK/lib/common_vars.py
Resource
win11-20260130-en
Behavioral task
behavioral22
Sample
DCK/lib/common_vars.pyc
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
DCK/lib/conversations.py
Resource
win11-20260130-en
Behavioral task
behavioral24
Sample
DCK/lib/conversations.pyc
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
DCK/lib/data.py
Resource
win11-20260130-en
Behavioral task
behavioral26
Sample
DCK/lib/data.pyc
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
DCK/lib/functions.py
Resource
win11-20260130-en
Behavioral task
behavioral28
Sample
DCK/lib/functions.pyc
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
DCK/lib/main.py
Resource
win11-20260130-en
Behavioral task
behavioral30
Sample
DCK/lib/main.pyc
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
DCK/run_game.py
Resource
win11-20260130-en
General
- Target DCK/run_game.py
- Size 230B
- Sample260416-xd8ctact91
- SHA256 7c8e6f9d2fbf252855688b52efa7a7da22065029a7d8bb759535a4668b60e683
- MD5 a02043ca3a70bbca372fa60c837d058d
- SHA1 1bf5dd2f65ddb852ede5d4ab44ff090563f9d8c3
- SHA512 5d206f620554125d3b4b33986370d7f2ef997a19763ae38ea547c46c6a2d1591764d5cb1a15581e6c8f8b672a8a7659749cf2cdd660b6a5d98c18500ecb16a56
- TLSH T1D2D023D1019008505942E31C602050F0469004F32C12000CFFC40D03CF021D0E30C17E
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5092 OpenWith.exe