Analysis
- user interaction
yes - max time kernel
64s - max time network
49s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
19/04/2026, 17:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MelonLoader.Installer.exe
Resource
win11-20260130-en
3 signatures
150 seconds
General
- Target MelonLoader.Installer.exe
- Size 21.3MB
- Sample260419-vpd71acw2x
- SHA256 25430ea2cc01781ea0e45c1a3ef5de4c60d04aea4043d5639be85fb589cf9449
- MD5 96761fefc151688378c4200a8fc844a7
- SHA1 d5257a89c4158d1d815bb47111eb544fe6b669d2
- SHA512 126e95416f0df25d523a3a018ab6f0ecafc68332df06d5a39c1d326e9b89048c6a1a38b7ff65c9c16ee481aa7ce8a59b587a4d56ae6ea0281f6c744f6127ac44
- SSDEEP 393216:8CmXRQhAKPEe2kf4L/GBTGMBlvvXfGHTTSOgH99K7DYS2jh5sD:89sEmbBlvvPGPSLwnYTjrw
- TLSH T11737F156E2F900E8D57BC0B8C6574527EBB138551330A7EB62A48A692F37FE16E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 1364 MelonLoader.Installer.exe 1364 MelonLoader.Installer.exe 1364 MelonLoader.Installer.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1364 MelonLoader.Installer.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1364 MelonLoader.Installer.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\MelonLoader.Installer\QwKWW2sEPPKgijyfH1zwZhE8P5gp8Z0=\av_libglesv2.dll
- Size 5.2MB
- SHA256 9b203e40323b49dad29546a52b8b67d200bba8ff4cab9709a79cede23ba847d4
- MD5 11a4a07f31e4a91fff678c019b7736af
- SHA1 9912e11aa9c351be136474e0d0975e7964b1e124
- SHA512 4197cd706c7abb4782f05ba73177a018299365060c6368305b030f21733f3209545bc7d8f61968c79b24088ced4acc4eda92044821fb8347c3370bc6925a4bf1
- SSDEEP 49152:FJ2uagzq2YgAoS2tNydAOlzwn56aCqQ2iUAqC2rCnsZ1LT/Tq2XEoxEf6m8s47eF:9PTjAurCnsZ5T/lXEonmn56AL
- TLSH T104467C03F39690DEC409D2B9874B8622F776B88507257ADF229497242F77FD06B3A724
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\MelonLoader.Installer\QwKWW2sEPPKgijyfH1zwZhE8P5gp8Z0=\libHarfBuzzSharp.dll
- Size 1.7MB
- SHA256 eb76238c9e8e41d44b5a5b18167c4c5b39ca5db4277af5dbe92d730f0fc14a7d
- MD5 e0c86bbd88d6b8f5643c1ab1c050a4ee
- SHA1 f6c72b1fd89d0f9e3d7825a0450ae0c0af092c5a
- SHA512 023a1054d7516ebb99b46ca3f9a17b1ee00e55a46356586513fdd45c42bd6ccca16139a8e93e7a9bc533afa5abed121cb5fd40474bfb27bca22da3598ebef694
- SSDEEP 49152:MG+tDvarn9O+3KVv/s0upzEpOqw8k25Pj4LneMdTaGVW:FS2be5Pp
- TLSH T1E3859E4AF2AA10E9D9BFC074C666950BE7A274050314DFEF65E08A95EF23EF5167E300
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\MelonLoader.Installer\QwKWW2sEPPKgijyfH1zwZhE8P5gp8Z0=\libSkiaSharp.dll
- Size 9.0MB
- SHA256 9a0d95e8caaa852c70d085af6a40a744242172ad9ea3fd6bc7599875a8a1dbcd
- MD5 ef1fabce43fe32ca83260481253f5476
- SHA1 ad988af9826e5aacc7b8e5ed6d220b229d70060e
- SHA512 f73b56742e43b169177ff49f639c50f98a417f91175c70f7348bde1c7570c2838c181a59b628b003eb2618d75da920a449a724cccaec1dae8b9a80d5aac386f6
- SSDEEP 98304:4GKXmtfLM9j2KAdTzwlrdyc8HgGTngmY6+o/:cXmlLMvGsIaGjb
- TLSH T19B964A03B66B64ACC04AC474834B99665E2038CB0B35BCEF52C5A1393FB9BF46F79615
- MD5 SHA1 SHA512 SSDEEP TLSH