Overview
overview
4Static
static
1Steins Gat....1).7z
windows10-2004-x64
1Steins Gat....1).7z
windows11-21h2-x64
1CDRomance.url
windows10-2004-x64
4CDRomance.url
windows11-21h2-x64
4Steins Gat...1).iso
windows10-2004-x64
3Steins Gat...1).iso
windows11-21h2-x64
3PSP_GAME/ICON0.png
windows10-2004-x64
1PSP_GAME/ICON0.png
windows11-21h2-x64
PSP_GAME/PARAM.sfo
windows10-2004-x64
3PSP_GAME/PARAM.sfo
windows11-21h2-x64
3PSP_GAME/S...MP.bin
windows10-2004-x64
3PSP_GAME/S...MP.bin
windows11-21h2-x64
3PSP_GAME/U...ST.txt
windows10-2004-x64
1PSP_GAME/U...ST.txt
windows11-21h2-x64
3PSP_GAME/U...A1.afs
windows10-2004-x64
3PSP_GAME/U...A1.afs
windows11-21h2-x64
3PSP_GAME/U...02.pmf
windows10-2004-x64
3PSP_GAME/U...02.pmf
windows11-21h2-x64
3PSP_GAME/U...04.pmf
windows10-2004-x64
3PSP_GAME/U...04.pmf
windows11-21h2-x64
3PSP_GAME/U...N2.pmf
windows10-2004-x64
3PSP_GAME/U...N2.pmf
windows11-21h2-x64
3PSP_GAME/U...01.pmf
windows10-2004-x64
3PSP_GAME/U...01.pmf
windows11-21h2-x64
3PSP_GAME/U...03.pmf
windows10-2004-x64
3PSP_GAME/U...03.pmf
windows11-21h2-x64
3PSP_GAME/U...05.pmf
windows10-2004-x64
3PSP_GAME/U...05.pmf
windows11-21h2-x64
3PSP_GAME/U...07.pmf
windows10-2004-x64
3PSP_GAME/U...07.pmf
windows11-21h2-x64
3PSP_GAME/U...09.pmf
windows10-2004-x64
3PSP_GAME/U...09.pmf
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
181s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/06/2026, 20:22
Static task
static1
Behavioral task
behavioral1
Sample
Steins Gate (English v1.0.1).7z
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Steins Gate (English v1.0.1).7z
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
CDRomance.url
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
CDRomance.url
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral5
Sample
Steins Gate (English v1.0.1).iso
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Steins Gate (English v1.0.1).iso
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral7
Sample
PSP_GAME/ICON0.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
PSP_GAME/ICON0.png
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral9
Sample
PSP_GAME/PARAM.sfo
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
PSP_GAME/PARAM.sfo
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral11
Sample
PSP_GAME/SYSDIR/OPNSSMP.bin
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
PSP_GAME/SYSDIR/OPNSSMP.bin
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral13
Sample
PSP_GAME/USRDIR/CACHELST.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
PSP_GAME/USRDIR/CACHELST.txt
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral15
Sample
PSP_GAME/USRDIR/DATA1.afs
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
PSP_GAME/USRDIR/DATA1.afs
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral17
Sample
PSP_GAME/USRDIR/MOV/INSERT02.pmf
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
PSP_GAME/USRDIR/MOV/INSERT02.pmf
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral19
Sample
PSP_GAME/USRDIR/MOV/INSERT04.pmf
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
PSP_GAME/USRDIR/MOV/INSERT04.pmf
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral21
Sample
PSP_GAME/USRDIR/MOV/OPEN2.pmf
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
PSP_GAME/USRDIR/MOV/OPEN2.pmf
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral23
Sample
PSP_GAME/USRDIR/MOV/TL01.pmf
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
PSP_GAME/USRDIR/MOV/TL01.pmf
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral25
Sample
PSP_GAME/USRDIR/MOV/TL03.pmf
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
PSP_GAME/USRDIR/MOV/TL03.pmf
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral27
Sample
PSP_GAME/USRDIR/MOV/TL05.pmf
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
PSP_GAME/USRDIR/MOV/TL05.pmf
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral29
Sample
PSP_GAME/USRDIR/MOV/TL07.pmf
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
PSP_GAME/USRDIR/MOV/TL07.pmf
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral31
Sample
PSP_GAME/USRDIR/MOV/TL09.pmf
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
PSP_GAME/USRDIR/MOV/TL09.pmf
Resource
win11-20260513-en
windows11-21h2-x64
General
- Target PSP_GAME/ICON0.png
- Size 23KB
- Sample260603-y5ncdset7t
- SHA256 aa1b5e090246c7d6ab2f703c7be8ba4935f790e352b04d7ff0e3c10b28851470
- MD5 de2765572f41000ff69dd76d2f384875
- SHA1 5f768f5456c4bd58192e8532d0e291214fd93e91
- SHA512 a74e746649989405fda55e79e55a7c5897dad5060fd7d31abd3ac7f38bcb56aa9e00abbd16c78f7f89c58b9c29652b12286576c5af42e8ab14718c0644d0ed4f
- SSDEEP 384:rmn0DRVdqLgPWGRsYRMEIDiHGkjK0TxHvUkE23BU2CccWDYCYn7qN4ZI6fstVR0y:K0DRAuWG6YRMEIfw7lPuqcW8TuGZI6fU
- TLSH T175B2D091EA03495A325C9E479CEEB19322B32DB44B54E0588ADC0A0B6DB40B2C4CEFD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1636 mspaint.exe 1636 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1636 mspaint.exe 1636 mspaint.exe 1636 mspaint.exe 1636 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\PSP_GAME\ICON0.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1636
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:2184