Overview
overview
3Static
static
3coldloader.dll
windows10-2004-x64
1coldloader.dll
windows11-21h2-x64
1steam_api64.dll
windows10-2004-x64
1steam_api64.dll
windows11-21h2-x64
1steamclient64.dll
windows10-2004-x64
1steamclient64.dll
windows11-21h2-x64
1version.dll
windows10-2004-x64
1version.dll
windows11-21h2-x64
1General
- Target Forza.Horizon.6-DenuvOwO.zip
- Size 8.7MB
- Sample260511-lt8gzaev4x
- SHA256 3e19cf0082fe58071986a72f8de9b78f4b450edf51f13e83fd5b690bd1ff1d86
- MD5 1761572a0e92a55f32a1fd0540dbad0c
- SHA1 4d3f099ae572dce2289ec8c2de5d26c658b45659
- SHA512 be51cac6d108f148f3dc1cf06d02b8da4ec4fc684fb3de23c4784d68c80c022b651ec6271f6e11c3fb7413eba67686248fe58d8c03867bb8b189ed9fbbed25a4
- SSDEEP 196608:rf34jej7O1NfNHEqsPT5tBSs3sMnMwrdTQQnKctxY0XimzG6KynYWgTBDv6CCYP:734Kj2NFa1tBbBv1Q+jU6rYXDv6CCYP
- TLSH T1469633499AFC34DF5671247B5EBD24D6293B010F89B1E99250872E2B38C3A64ECBF531
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
coldloader.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
coldloader.dll
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
steam_api64.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
steam_api64.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
steamclient64.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
steamclient64.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
version.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
version.dll
Resource
win11-20250502-en
Malware Config
Targets
-
- Target coldloader.dll
- Size 112KB
- SHA256 7b48f400b05c372a05057eba0f0126bbda5c5e89811fe41d98da039a41661ca4
- MD5 835bc0756135c4fe151202ae853b6f76
- SHA1 33b289997919ff1030d14b18dcf75abe0dc30893
- SHA512 5d2c3d2608e8bd53b66ad305e57bddcb76c1ce302ac480be9dee0cdf871ff2d7af8c6548814cd5ee70781b064ff2d8e47c4790516822ccf2e6ef3ce2b30ff59b
- SSDEEP 1536:zt1xwJ0XizDk8bxIu4Dm3NG8lhXsbf38avJ5VAvPNq6di3vpN509RX/NfdbZQX:1q0XKLxRBEPnv7iPgj3z5OjfdbZQX
- TLSH T151B33903F29440F9E05EC174C3ABA633EB76F8851526B3AF17A467112E6AF51AF0E744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target steam_api64.dll
- Size 294KB
- SHA256 9d6d2972c1571a2a058d79a8376e26a33d33813f29d93c3ca6e35adaddcd56de
- MD5 36f023155d9357e4c9c61af2e340abfe
- SHA1 48a9b3fd2670bb743e366da9203238a4fc69f903
- SHA512 6c13fa116eabbb6a1fbe9b5f8625910208a44c41103f9407a093328d00a682cb8a96d39356b76439b432b9b63f216288b044ecd1097ffc34c7f1bcd68f79e886
- SSDEEP 3072:M1mXZxtdMVhdbt9OFeX9qctF+nlD7Zh+iJba+RFSME5lhTbCCwGY2dbvIQEkyI+c:MMZTqJEK9TtF0hZI8Rsxvy4O2CH4SDKH
- TLSH T10154597AA2750CF4D076C13988565E0FF6B1745B23219EFF226053368E57AC21E3BBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target steamclient64.dll
- Size 20.8MB
- SHA256 9f0975e2bae41c715aa5adb6887127a0542b3731503b01b27270193b87e78e3e
- MD5 babb36232aa4c4ef33e6b7a050b364e6
- SHA1 99b7599332ccbf1b5c284a75e35c993c3c820fea
- SHA512 5f7211bd837d2f485a6d2465278dd7066c70b3a408a08852f46d2fc5321da420a0c027fed0a05ec1a55c2a7ab31cd64b2a44cc3f1edef355fb88791f05dc66ad
- SSDEEP 98304:UXdrvwmVyxTWFRHARFtv/AmbP7ZgZ0CS0ZUsaAj1oaA71y+4AxYZgAE6EZDi7QZq:U1xGtgaYusaABoaA7wciZgA72D8USYNG
- TLSH T151274A47E7BB01E5D6B6C03895B3623BFE7174A5833097D7A680560A1F62BE0E93E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target version.dll
- Size 56KB
- SHA256 492b2fc2668cd90f1fe934d6b0df03ade619f867e0ea9166889b7866080dda1d
- MD5 9f2d4c59b6cda70e1b68187e847bdced
- SHA1 f169d6aa889246da0be16eaff9ef1806b3d53fb2
- SHA512 412ac6342f1a0b1715896b2bc296c353f9fc472890e13c8b94133bd73e41fcea46a51fcb109bbffe240f875cbd67e7c948a55d86c15a3528bf85ff942e73bf9f
- SSDEEP 1536:Sq1kVwv/Lelu6MfpPia9zx2UfOKickVPxIiTLb31:L2wv/Le01pPia9zx2UfeckVPxIiTP
- TLSH T13B43B627A6ED8C39D10A903097710817C6FE725D257862EC77F9EF0037AA528B91F789
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10