Analysis
- user interaction
yes - max time kernel
399s - max time network
400s - platform
windows10-2004_x64 - resource
win10v2004-20260513-uk - resource tags
arch:x64arch:x86image:win10v2004-20260513-uklocale:uk-uaos:windows10-2004-x64systemwindows - submitted
22/05/2026, 22:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Game.exe
Resource
win10v2004-20260513-uk
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
Game.exe
Resource
win10ltsc2021-20260513-uk
3 signatures
900 seconds
Behavioral task
behavioral3
Sample
Game.exe
Resource
win11-20260513-uk
3 signatures
900 seconds
General
- Target Game.exe
- Size 2.7MB
- Sample260522-2pl16sh19s
- SHA256 767eb35e786e7674d91baa0a9a55a2a839b5eba89fea7814895594301432569d
- MD5 ae32c966029ecd3f27beed69164e17e5
- SHA1 1dc27be87ce97f6e78963990912b5f45a7c5659a
- SHA512 30803ba78675676f8396be87e58119bab70d3a9709a4553eff2b5e821259c24d400f96e791a5916cbb8aef23ff2c844d018fb0011e2746a232eb22b54896c216
- SSDEEP 24576:eqjctzbEd3GEL7w38ti80HccWAUDbM9b0Ek+Ec0xMk58UsU3AovTniyVSx4UI:eWctzbEd3V8K0HcubJOTniyVSx4UI
- TLSH T1C4D5E8436ACB0DE6DED267B461C71335A778FD718B2A1F2B6A08C6316D536C4AD1EB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 17 discord.com 16 discord.com - Drops desktop.ini file(s) 1 IoCs
description ioc Process File created C:\Users\Admin\Documents\desktop.ini Game.exe - Enumerates system info in registry 2 TTPs 2 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer Game.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS Game.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\Documents\FormatRename.ppsm.README.txt
- Size 74B
- SHA256 cba73ea5ee8fde6e3ecf524eb8396e291269a86fe1c5be34491346cb0debdcbd
- MD5 7d58147a906cf223543b7fa6e312b595
- SHA1 45d03cb33b63b0f92750bd141144b2d113c3bdd8
- SHA512 f67a77a7411276b4ae37822a3069d116402a6e023fd33cc9482eb9e8c611a3628faf07c1108d73025586df8f7b46f86a4c1b99af2bd03b34c5270012c10e4577
- TLSH T1D3A024371DDC34444FC0344154405C0157CD050C1103475C03334001343000057C4134
- MD5 SHA1 SHA512 TLSH