Analysis
- geolocation tags
nanew-jerseynorth-americaunited-statesususa - user interaction
yes - max time kernel
898s - max time network
414s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
19/04/2026, 16:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WeMod Hotline Miami 2 Wrong Number Setup.exe
Resource
win10v2004-20260130-en
22 signatures
900 seconds
General
- Target WeMod Hotline Miami 2 Wrong Number Setup.exe
- Size 155KB
- Sample260419-vb39zact8t
- SHA256 d100d0996ede2f262a42ed33da788299c4f6867d866d0fc3b4221a527f0207f1
- MD5 06a524532bad657f77d9f1c606fd5084
- SHA1 9899d56297972c57a2102f4558db1c0dd94fa3c9
- SHA512 d0c59dc5588ae6790445a7c3e7bce38b89d17e3b67a69297b3076aa2606489150c518f3f7da3c352f1be60b5efc609f4ad01023f155af697b7065a495ffa9a9d
- SSDEEP 3072:w0x45QyUyhaEtHZeO/deV4ILlCI+40OHHBpF:145rUwaEtHUx4SF
- TLSH T17DF3AED9E3E815BEE6BB8DBA4C351DB005B7AC421CD5ED5A1D8070A84A33354243BB6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000\Software\Microsoft\Internet Explorer\DOMStorage\api.wemod.com\ = "35" WeMod Hotline Miami 2 Wrong Number Setup.exe Set value (int) \REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000\Software\Microsoft\Internet Explorer\DOMStorage\wemod.com\Total = "35" WeMod Hotline Miami 2 Wrong Number Setup.exe Key created \REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000\Software\Microsoft\Internet Explorer\DOMStorage\wemod.com WeMod Hotline Miami 2 Wrong Number Setup.exe Key created \REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000\Software\Microsoft\Internet Explorer\DOMStorage WeMod Hotline Miami 2 Wrong Number Setup.exe Set value (int) \REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000\Software\Microsoft\Internet Explorer\DOMStorage\wemod.com\NumberOfSubdomains = "1" WeMod Hotline Miami 2 Wrong Number Setup.exe Key created \REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total WeMod Hotline Miami 2 Wrong Number Setup.exe Set value (int) \REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "35" WeMod Hotline Miami 2 Wrong Number Setup.exe Key created \REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000\Software\Microsoft\Internet Explorer\DOMStorage\api.wemod.com WeMod Hotline Miami 2 Wrong Number Setup.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1316 WeMod Hotline Miami 2 Wrong Number Setup.exe 1316 WeMod Hotline Miami 2 Wrong Number Setup.exe