General
- Target 0.rar
- Size 226.4MB
- Sample260427-b36dvsa18x
- SHA256 7d6c2ce140d03efbfc09f8429f20153645dd65a28a3c81c81e95c33460a6ece0
- MD5 52978353f55dc604b2f754292ed0108f
- SHA1 0e47238e3612ec733fe0fc2815f5238ec7d6c25c
- SHA512 41b6a11d5a5dd33c455cc9ca02786a967648854e52fa4c9041fa7483f120b2ecd41d3d56e3629c335530551983d1dcb906c510dc355a5d7e8c083cb9748613ba
- SSDEEP 3145728:vUukcSied4nnHBvFdeckXSd7K62XST/0MR7OPg7L4A5SvclzJ+VIeaq6x4NhJTOJ:MlQH9Fdbk2cC17OW15SU1J0L6mROf+q
- TLSH T14DB8331163B2C9215E982A0725EDF72935EDEE3D29558F294F64FD030F13D9A09AB38C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Packaged Games/fungame/Data/bg.dll
Resource
win10v2004-20260130-en
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
Packaged Games/fungame/Data/bg.dll
Resource
win11-20260130-en
0 signatures
300 seconds
Behavioral task
behavioral3
Sample
Packaged Games/fungame/fungame.exe
Resource
win10v2004-20260130-en
10 signatures
300 seconds
Behavioral task
behavioral4
Sample
Packaged Games/fungame/fungame.exe
Resource
win11-20260130-en
11 signatures
300 seconds
Malware Config
Targets
-
- Target Packaged Games/fungame/Data/bg.dll
- Size 50KB
- SHA256 4c6a21e3c06bc45ed62e835a64258d29e576fa7ef8bb974a4173fb3dda18771b
- MD5 e26550861c5d74870882f6cd58b83359
- SHA1 cabf40eab361d1e9532f564f5d8a6ef491203e3c
- SHA512 42ce714e0c5c92ab5e17b22d531b84894ee637418482653bd3f019d2b72b3cdbb6d513b41abd2485ec327c72d2719163f256d94d370b99d43eb7ccb95b825a96
- SSDEEP 768:3+pLyyQ3p7KsUJdHldnbj3CK+0lEytwUvCq3f7:3+pYavFdniKPZf3f7
- TLSH T107339805553A63D9B9B2F38E4F1C32BE79C38D2122523069E4439D3FADBC66C8F84569
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Packaged Games/fungame/fungame.exe
- Size 6.2MB
- SHA256 69796bfdb431a77b39ba8a992050ab1092ac777d4267623f4ec896c7d8490524
- MD5 05cf3948b0d435a0c5c8dd5422ef2a41
- SHA1 36a10fbb13e7ac0da69fcea99a25b98ec6f60b71
- SHA512 8bee2b6ae81e06cab0d3c297853874c2161aedcf18e0dedd865251749cbafd7579851e83e6f48e10cb5b2b73cf5b91e465ad2219577cfc345cec3d99a69b64c9
- SSDEEP 196608:imY+dpmdyLiSEptymoXWym/PZwwHY4EnG1B:7mUMxomy8wwHNEnG1B
- TLSH T1A36633107B83D0BAD72210364693C2BD5762ABD43B275BCB3B503B285E756D2693B3C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL