remus_stealer | 2728d7ebbf19042871a241aa3c26f11be2530b008c1ea7bb2f97ae3117c7f637

Resubmissions

20/06/2026, 22:41

260620-2l4f2sh18l

20/06/2026, 22:39

260620-2latqsh17p

20/06/2026, 22:25

260620-2b4ztsaz4t10

Sharing

Copy URL Twitter E-mail

General

Target
Half.Sword.v20260218.Early.Access.tar
Size 312.0MB
Sample260620-2b4ztsaz4t
SHA256 2728d7ebbf19042871a241aa3c26f11be2530b008c1ea7bb2f97ae3117c7f637
MD5 ef8b2ec7cdb3b0e4ae07a10e88a30585
SHA1 6ecfeb4e3a0a4353b4c5609bba008e0ec6fb9648
SHA512 fffe53a12db3603a1cd4731b61fe5068b49388b9c32a065f66adb3ce25e00d6e247aaee517c0deb94d37d6999d6d970db8daddb5ae113be392a3b546a96cd7d3
SSDEEP 3145728:vSjWC8xdGQk2UW3APFIe6fXuHrbcqCRtADK+TNFt+U42/Je6BOUDhu:KjWCGfVAtIe6ScBAuVMhhc
TLSH
T13BF8BE86F2E444E9E1BBC178C56B9616E6B0383603219BDB13D045AA1F27FF0597FB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  Half.Sword.v20260218.Early.Access.tar
- Size 312.0MB
- SHA256 2728d7ebbf19042871a241aa3c26f11be2530b008c1ea7bb2f97ae3117c7f637
- MD5 ef8b2ec7cdb3b0e4ae07a10e88a30585
- SHA1 6ecfeb4e3a0a4353b4c5609bba008e0ec6fb9648
- SHA512 fffe53a12db3603a1cd4731b61fe5068b49388b9c32a065f66adb3ce25e00d6e247aaee517c0deb94d37d6999d6d970db8daddb5ae113be392a3b546a96cd7d3
- SSDEEP 3145728:vSjWC8xdGQk2UW3APFIe6fXuHrbcqCRtADK+TNFt+U42/Je6BOUDhu:KjWCGfVAtIe6ScBAuVMhhc
- TLSH
  T13BF8BE86F2E444E9E1BBC178C56B9616E6B0383603219BDB13D045AA1F27FF0597FB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/DbgHelp/dbghelp.dll
- Size 2.1MB
- SHA256 4b803d0bfa5d360cfcb3237d260226743d2255eacf6a98615334fb55deb7cf88
- MD5 f97b15a663eb59ba6a9fc766e703c103
- SHA1 427e804092f86be73b4a85882c899fa9b2176024
- SHA512 1e7b97b4e1d55e7aefd0e1c0c8dad965b801602ed899da84308422653bc930ee1cc8125183a5211e4a49eaf655de37adb2bbf8102ecc72f3fa9f7035f3cc8d0d
- SSDEEP 49152:awocwVH+umtSiRFXIrZ4mTQHuEnmDdE51p:ahcAH0r+OFrmD01p
- TLSH
  T14CA58C4B92EC40A8D57EE13CD657421BD7B234450331A7DF52A887AE6F23BE50ABE341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/MsQuic/v220/win64/msquic.dll
- Size 2.4MB
- SHA256 150963f4a05ffddc9a8498ae0ec4ddf5bed762a83b6ad089d2fd8d499101c7ea
- MD5 a2c1cdfb561609d7b61d6a04c10579a6
- SHA1 c8610fb64c9b2eacd460b1776d77a2fce801b22d
- SHA512 b74122c94ce89d9bbd8275d9f595b5b344e19559cd822f58a69d62131fa14d042b4ea72f199f4c493f9b5b0b69018bc277297dabd0d8335b5b70d79115673c6e
- SSDEEP 49152:tVwASO0Gtlq1IU6idfp1s7NJt0fegH1yZWxWT4ttWDGyPj8VV4:R+FC0144b+88
- TLSH
  T12FC59E17A7A811E8D877C238C9678137E7B1B81513B0ABDF06A4C6B90F67BD1673A740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/NVIDIA/NVaftermath/Win64/GFSDK_Aftermath_Lib.x64.dll
- Size 1.8MB
- SHA256 4877a28a3edaa86257061d7de3d16f1aaa331bdd6e1b1446000553504d2fd3b1
- MD5 00d9315521c86a0c2bb6e8c21c4610e7
- SHA1 17ad2b545af6a91f7ae20575d10a5ab3abb2228b
- SHA512 20a03a04a550bf884043e15e2cc09d07a4c5194de6b10b4b7dcb21d21191576c2f95098cc10c1d0fa6736bce406dbe9f91056cdc4c0e3d601598f131c65180db
- SSDEEP 24576:jdVzJv5XXORlp5P6Rk0PZWw+d7di1zNiDVaSBZN25iAKu2f5Kq6I6397Szdxfawm:zE90BGKNsfAmKqB6397Szdv0fGT
- TLSH
  T134854916735940E9C16AE278D6435E4BE372FC02D7206BEF03D0A6A91E223ED5E7B710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/Ogg/Win64/VS2015/libogg_64.dll
- Size 48KB
- SHA256 284a6e70a6dce01f8a02d93e1bb78baf0efb6140459c587d8986d59fb6bd675b
- MD5 cd1f16736ccc5dd8c8ce8525957f4cfb
- SHA1 654144e0ddedc26b0b3be8e6562784abad1b471f
- SHA512 357df96397e21662194a30ce7f5d53cc202fcc464e1c06312eb12031c5683305638b7e674e5b4b758e142facb00963a53c419c430ea2b419b62f97c14b4812af
- SSDEEP 384:GRKN7KRked7VWjLmPnUunFqphqaNQL2PnQftfKNRvrzAcojOYPu:dkSQyQUuFq19HAhjXu
- TLSH
  T1DD235A0B6724A5AFE43A507E89EAC356D07A7810D3212BDF0358974E0F23DCD6D3A769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/Steamworks/Steamv157/Win64/steam_api64.dll
- Size 960KB
- SHA256 78d775496337e6703604f390fed06f52827f17fd030bc7f69a2dc735ab1f8db1
- MD5 bd0070202c2204db83d7821af2ce25da
- SHA1 821e298d63d2b4a52c7d14bc722f6ea04f59323d
- SHA512 dc00a215ef9a26fa2562fd8d38a8d1fd468248893a43f831dd13c9408e7ba22d2cd59701ce1452b4b796424a938fa9f2bacffb0f8c90f46c65e7cdb075c81d1d
- SSDEEP 24576:JpbGG325KVB+kOj1FJYUjrw2/7k8/48Q1QNnrlcMyJfCp:uGwKVw5DYUXRgR1QZrlIfCp
- TLSH
  T11125127A602B1EF8D4B6C4719D563E0F7990018F31515CBE7A808932C6878876FB7ADB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/Steamworks/Steamv157/Win64/steam_api64.rne
- Size 288KB
- SHA256 4df999c0c8cb12589f0864d52be5d4c775577aeb27fee28b49b188f9ba083eea
- MD5 500475b20083ccdc64f12d238cab687a
- SHA1 b13f17561a9a0671befbebf0aae7b51bcc0072df
- SHA512 de926d38118c808cde4d3a8f6fde7b56b755ef7938b9adadf0efaac45c853f3d19f4cdd5906b02a7dcca7d2c38b8c01cbd401ce3a7f5e3f9221776f0ed49355b
- SSDEEP 3072:ujTqkh2mB9mkVi635gRaeaZqk4YJDf32uB+rJFC9R+5z65lhTbCz+hnv91vFAyNp:Gb9mZOB3Zx4YUuoaRRFAymC2CPzbN
- TLSH
  T13C545A7AA2710CF4D076C13A88565E0FF670744B23629EFF2A6053369E676C21E3B791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/Steamworks/Steamv157/Win64/steam_emu.ini
- Size 2KB
- SHA256 a2c8480962e0fcb067e753532a7f020646a49e4f32001345a36bcb3d6178c431
- MD5 f05b1049c12a6eb127122daee2fde1b8
- SHA1 2cee6caf52acbb346849e50a870b92cfd729a63e
- SHA512 87632f7a4f5bc24e916705c4d79a7b974313e512958ea1fe55cebffbf93de27a202e206ba90d66bda684ade897f8493cd512c199c8b06b88473e7a14be1badaa
- TLSH
  T12851C75851517A3B0F0BB1F55BEBB52FA3A92097E7078CF8B29ED7C0B300310134846A
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral8
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbis_64.dll
- Size 1.6MB
- SHA256 0f66dcb5837e9b59c499277fd272b862043356aa9145802cf0a63e00a1bcca59
- MD5 ce94029c20227191bf97f6d719b651c5
- SHA1 aab805e149c4d8e79005ed190e60fcf11cd2639a
- SHA512 3a2aab9532b249d289395bded693d29e611322fbcda206e011877512764e6f2a55091cb93099282e02ce0ab2b4f98aa1b9f7f7343bec8297898f3d2331cd10fa
- SSDEEP 6144:XbbUbUwlPxtVNA0ueMSMMYGUXoz0A1VoqxRCv:PulPcDe2XNS2
- TLSH
  T1E0850F0759928B34C1BC50B588DB557853322C4DAE800F9E7BDCE67434D3678BEA2BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbisfile_64.dll
- Size 37KB
- SHA256 a9d6f5538f44011c1f65d7ace64216a237636717cb0c8c59f4f89cc08dd3d24f
- MD5 f453241dec90dbfa5b7322cc4a67a143
- SHA1 abcb7d34014ea23a64b8fe077ff629de6f10e9f1
- SHA512 1648b5ece47cd2ab447c02a8fd0086abc60bbd2e498268311bbe305dc8cf2407ecc110cf266e8c95ae9c6a3c48c78b92aaa763c45c63335defa62f61672b9cba
- SSDEEP 384:Me2rmsvpGwK9QaXYBZ9b/kwmVkSA3/pTNYTdk1aLPHXrgP7gpw5WOOBp8F:ynv89iBswdSAQS7kWW/Be
- TLSH
  T164034BD6A7F521EED8A7C539866B1B1FFEA1700693202ADF439445391F22BD1733A321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/Windows/XAudio2_9/x64/xaudio2_9redist.dll
- Size 827KB
- SHA256 0e01f400baa09694cacfd2cfbff0d721c17b56785d2d6e29b6fdd117f70ccc1e
- MD5 835591acabfb69a6f9dace12711f2243
- SHA1 f0103c77e4e3fb5640a6d01a79644a8cfc5e4eed
- SHA512 6a77646846a06b8f25772a24fb8414c8aa8db07ad2b1bfeae72b016a68c64326fcd0e1214aa463bae2faaaf0a019327eac911eda4de3930c541f5142e55c5289
- SSDEEP 24576:N+6PHmQBNmTqtEcl+4n0wcktNvSRbESez5:NhBI9InQMNvMo
- TLSH
  T18E058C53F6E549F5D16B51359167BB1BF672B40027254EFB02A086283FF3BC01ABA3A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Content/Renderer/TessellationTable.bin
- Size 253KB
- SHA256 edc4f3b628a139c5e185bbaeca661c95c1f427368d3b92892c5cff36c56dd941
- MD5 bc5d66a78840bfaff5bfc362de64afb8
- SHA1 3a3402ca2d3531ab8352c818ea1181288bd78c72
- SHA512 91cbf450ebb7e8e85a137ac018994ff0605625073e6cfd3e2a82cdb869159b2c843b301d455d250ff0f0a75ed1309456a4b2ca831aa0ab1d67f1c48298921014
- SSDEEP 3072:UzHWaDcj4kSIWdMfZDRAxjL4wPUjT8QiMtp+S2gWsMmuq:UF3kSIdfhRAxjLr8jT8QNqjgWsxuq
- TLSH
  T1D4448D1B434C6BE0D218123044DB5FB39DAF69A71B731997E7B56A2C0E31B90B8B53C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral12
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Content/Slate/Cursor/invisible.cur
- Size 326B
- SHA256 fef3980fa567e9c45d5d8dcaa432a2c1a3f3bb17fe67d7ab198164f56c142aa1
- MD5 2eada1ffcee14930f2c53a4d31b95c91
- SHA1 b8133a27e01a74cd5936a544b4473e77d13da618
- SHA512 ea02e51a3efd5cc5c10618ddc49784bd69ac9babc6c246afd1293d5150a2e9558439c488c4624931bcc93201f4e747f18240e006064537e4b02e65cc2a7f1c53
- TLSH
  T1DBE002413340C15AC0010334048387852B79EC519E66134335623F1D4C317445C25640
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral13
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfSwordUE5.exe
- Size 354KB
- SHA256 ce8a2553b718a09777356fa9dff858f1679ed369a84512af5142ea9300d134e4
- MD5 40c86175a6c1c8942468eaab670c69bb
- SHA1 31b268ea1667c75bced4960fa295d013070ab960
- SHA512 bc6373aa2244a97357aa2e6115e5b50e2d3543939c73a55e5a604e32604f648996689bec7d47adfd308a61de9a7eecec9a73f6e74f43ee1cf9e8eb433516fcfa
- SSDEEP 6144:tEh4YywO4JSFj/Hz/PtC+zBkR/FN83iimSJEDWdo1f9IYHDcRO+Bwa8RY:tEh4Twx0Z/Hz/1XzY9NPhJeNwvY
- TLSH
  T1DB74D0077AC475F4D1A7867896B18102FBBAF831472ADB4F8B5183791E736D0AD2AF10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/D3D12/D3D12Core.dll
- Size 5.6MB
- SHA256 31f364f2b3aa1753e7ba9ff912d0721c8f424be5fa14503efddafbb30c635d3b
- MD5 f2ba8763a1ef9857c4d4b7cab5631edb
- SHA1 296b7e537d6e986a2e4021834fad3334867acf3b
- SHA512 44f272560e1dbc282e70cb07c87e95ca3a7ef41839ebd20194fc411c67626e9c54e6f4b261aed3670dd21c6829b56ebdd0d28319207834a236fc462f97d4ce91
- SSDEEP 49152:k6PExwEh3ElnqHtuNfXlOunv5YcoqqjThYiwQF0Q29DgUOkpiq0SpTqJQEnUR034:1GYNfC50LRgg1x
- TLSH
  T13B565B47B2E942D8F1B7D17D8FA74A0AF6717421632097DF12110B9A6E13BE04B7B3A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/D3D12/d3d12SDKLayers.dll
- Size 9.1MB
- SHA256 5dfc320d5ee27190181b1a63e74eb481b07ea727513dbeb38a96db6157969d24
- MD5 d372bc0d8c0177903caa4551cf916631
- SHA1 9e3d9a2fc8b3d70de6e1bb2e9b39bd3f0ed65d48
- SHA512 d7052cc19c4f77396ab7174524e6e03a442831050a25406b048fd7ff739d10c377c51fd4d0df0fe47316b723b998b9c6d743be857a90eea502531ce6a6688cb5
- SSDEEP 98304:SLGB9Zu3FcwGwO3rLbF2hH4tkVzKEYUOrUuqVHgMfahWHResoI:SLGB9Z8cwGwOGYWVTYUOUDb7
- TLSH
  T12EA67C1763A801E8D47BD17CCA879B06E7B274150361A7CF06A4879A2F27FF55A3E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/HalfSwordUE5-Win64-Shipping.exe
- Size 146.8MB
- SHA256 6660a2dff78b57d922e6f3ee8f28acbd1a6bdeff9412c3b12ee82cc3c1a9f613
- MD5 d915858a269822fb67107f12ecb7590d
- SHA1 2986e65c8ec9ecf72ec3ad5f5d25b88766da1fac
- SHA512 ec9978e377a67d79fb27ca2867e3e944fd814fca91512b68fb6a5a2e3e7dcc851d119192af59686929fe6011f3c1ec6726677121bc9161fab2ef001702c74251
- SSDEEP 786432:ajzufJAof3mqCoRexszwvbWt4Dv/49vrnD8zbi:WufzvmqCoRexsKjvA9vHO
- TLSH
  T141788C06F2E418D4E17BD079CA7A9506E7B038750321A7EF12E145A95F3BFE058BEB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/OpenImageDenoise.dll
- Size 47.5MB
- SHA256 7d47ea2ded08f14ff0565e3636d9e72f52a2a70bcd94c8331053b3814e17c7c5
- MD5 4b7ea8d37d71c64b73bab999411aac18
- SHA1 cb6ea677404c4194385fbda5a71999a6397a1813
- SHA512 7f7bd13a84c1f32e9809a3d28e579ad3594229e327851712fb7f560c7681b7603eb045d51b45b0fb9d64965466154d7a6ced4547d7b832eff7c77fa79e6d27c0
- SSDEEP 786432:MZtAKo2dZOplxaeiF9Oz6CJk9w5ksfQYOSCIAnrxeMMNKo6LnZyj4fm2YkLuyppG:MW3pqPFUzJgw5hfXOXHnrbMZOnC4fmtl
- TLSH
  T1B0B72363B1B6D4D5C17AC07E820F9363AB7278E9023766B7A2D1E6753CB1E502938770
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/boost_atomic-mt-x64.dll
- Size 17KB
- SHA256 d2afe12d3ac81f642266747a3688c157fbab614b442d12a54a15d08628c683b6
- MD5 799877fdabb7da8842bfcf732a2e6352
- SHA1 847a5a3c8629d524c6d69cdb9038cfc76e125b9c
- SHA512 74ad01fe38a5cb4be58829c35013e63b158e193b89a4cf23b0657f1c1efbab4665f07192d1f7ff88ece521157a835adb88ed14176bf4e158e958e6fdb928c8f8
- SSDEEP 192:g0ltx4EklGtTnhr4rLYMBXkq9Rve4yWlDfNBR8fcntxDH5Y/s:ttx4Eklu9rkLrBXkivZDfNjnL5YU
- TLSH
  T1D972394EB66500EAD13EC174CAA7CE19D272759487525BDB31A0927E1F23BCA783FB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/boost_chrono-mt-x64.dll
- Size 34KB
- SHA256 a0106a6c49ba4c249e830e5c2870e62be7225af4eb878871986adcc9d5ddb097
- MD5 caa8b28148b7e2fcf6073c0244d9809c
- SHA1 24a8d466423fcf6c9179df87b976a8a316949ce2
- SHA512 a3c4885cb99b03691099712cf1496371b37ad2d7926abb6970c6ebba306885a6150969c748572b8306b64ae4aa6e1450b33dd43f5f9b907caa498589abcb351a
- SSDEEP 384:/VxjxNBuaAYazw0+HhMySHU+jDh51rJmbt636yBHhigNymcTZZWi4UheQSUVw9/H:9l//l3P+u7gNy/tDhL7NV8
- TLSH
  T123F20895A32800E9F1198138DA676C69C2B6BC51874387DF13D9436D4F37BC4AEBEA12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/boost_filesystem-mt-x64.dll
- Size 137KB
- SHA256 696f9a8b24d270e79151bbab3c92411d103775340c20d738da34ef004c9cd07e
- MD5 909cb0dd75f2e7f9296e79662753526c
- SHA1 4684d4ec69803032e6535d6ed2f72db8115aaf52
- SHA512 36762c24fdaf734d1b12690a2d93249ab87f612ead5a1b8034b74db4c2c1e52d10ac7c928214465bdc01e60912b1f1aa12c1e592375e15dcdec47e084abb4b44
- SSDEEP 3072:FkqtzugHWm7yk9mpvtjMoWpmEAoRwnLN:NhHWTc6jMnHAoRwnL
- TLSH
  T115D34B1AF69801F8D19BE27899878906F2B37849C3661BDF03D486750E177D8BF7E620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/boost_iostreams-mt-x64.dll
- Size 47KB
- SHA256 9e39f72c251266f6f6c8e376c7fd7d0cd20269d60e9fcb2c05dcf65c69f7b14a
- MD5 5f72f845162f07dd3476037e39ac31e6
- SHA1 43616ea7fde4fda56fea3127adff9319e15c33dc
- SHA512 91ee5210f73b6e6e3dfd95e6c7d9be3df2d7bcedbedc2523a85a63431787dd98245ecb61e29ca54f83c7ea0dd06c94e1e88cb3c5664b01a70f65171939676d53
- SSDEEP 768:uNxMM/dghlj3EjvaYrX2QDCaumMrTNN1nwUanw+ofR50UgBm:ixzlghlj3EjvaYrX2iAm4N1wUanusUkm
- TLSH
  T17023E50AFE5480B4C4E5C23CC99B8E47D2B27855C70397DF83E5926D1E733C66A7A690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/boost_program_options-mt-x64.dll
- Size 343KB
- SHA256 8b5d87b598d3c99fd9653019ae6b1ca59d65e0e733d410409df7cd0c7b5aad69
- MD5 03d9bef577cdb5c2ac9ae75e60d61477
- SHA1 30c1ff8760e1bcd47b927537a70585bcddae96df
- SHA512 180c5fa25247f8ac6f602485d336665eafcf09c49b5e37a160624634fe723edb5288c7d29ef6da2dbbad85b19767e01ea0951cbfa5e34e200ca09b32a285b372
- SSDEEP 3072:9DA7/4Gr6lpinVRG4AfeZM0oarRAH7NA2hjLr1e7D/zmEpMuhWOfw5SLhQMHY:e7/4GOfinXqQrKH9Rr1e7UdSLhFHY
- TLSH
  T13A741817B21D09D7D4E7B2F8AA864901E331BC41A719E3CB46E593AB0F937CC957B620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/boost_python311-mt-x64.dll
- Size 188KB
- SHA256 e15bd4e6f18ddcc2f5c19c6e5d6c9d40540dd1a715399c793637976cbf324011
- MD5 f65d289f66265f36778d8c64fb5b1b70
- SHA1 db3b82a456869c4eca4e1f68687457f1fd47c134
- SHA512 79eedd1807c940300b1fa26cb950b3ebe5e0edcff7699908b4790806fed04b94c589157580af08004a53d1a7bec6e54ee7ac7ed4c71d242a5bc88bd7c34f6257
- SSDEEP 3072:g8+hRxF21tYfaucpToyHuLK3zwtAfzLcBIYCLyxKDueKjpI2N/syl:h+vxF2AfauYTLHWaMtAfzLcBIYCLyxKs
- TLSH
  T1AA14E61E721580D5D266D23C84538A45E673B8828F5227CF167AC3AA3F5FAC67D3E281
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/boost_regex-mt-x64.dll
- Size 229KB
- SHA256 6e08a46df6d8605e4d1a1065742bdc3e0450570ec539a4f262d95e6dbbc4a7b8
- MD5 3538715da788b89d0a11090d16638149
- SHA1 455b85733e2f455a8a0b031f20c5bbd1b51427d0
- SHA512 5320522d8c16179a93dbc1c112f6d90106d091462886a4cf6bc76e8b28334e9350aff95fe7cb7c4d3afced51968ea94f24eca51e6d5fb84d542fe2aec45ce0d6
- SSDEEP 3072:pc6w8JVVYJhXJxKM34miw+eLmBiRzOFUPUjpaDgYXs7rVVeGc7fm:p9wZXJxKM34TSOFiUFalsqGc7
- TLSH
  T18B344A1A79B848BCE56FD1BC86538E07DBB670071321DACF07D142A61F67BD90E7A620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/boost_system-mt-x64.dll
- Size 9KB
- SHA256 7f29d86095bdd46eb3ed13f8d8325cc363989720bc38ca7eff3079c04773c59d
- MD5 260d0234ab782edb00137be04c2be705
- SHA1 f63d0fec0f27b097f152fb83790564e7ce2bdf38
- SHA512 ac6bb979d987308cf806c9164887f9d8e1c9e80a72b5a2148cc7b5edbc3b2e433033e1d1a66850f23983fe1cadf9e970f4b9a55dea153716e254b3e85544d879
- SSDEEP 96:B1QxyNZ+/i8gNUWoI8GG4NGrJtqXs4fLVLOgMntkiaqYB6fczsPFx:GyNMgNUWVsitL3MtkPKfczs
- TLSH
  T1F21208C5FEA089F9D66582B8C4534E49E176F710436063CB23B0526E1F6738BB57BB82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/boost_thread-mt-x64.dll
- Size 72KB
- SHA256 001248097cdd4ec3492d1793e10d003ae860bec3efc109779ca9c6cd3ef82095
- MD5 e54b8fca16dfd8352068df4757d4c354
- SHA1 9f6fd451b8f3cb5a723dc0900017a23c3c8fc7e4
- SHA512 669581ccd55cc1be43070fd2ee6112067998f4773489d74f13ca68816c1a8c05552ac4639f1464b24dc24fb54efd7eb62250e298c3805a99a997b77b37c55e65
- SSDEEP 1536:502cFd9wdcFyvyfE0aMNVgltsgiUKcOsIYC:JcFd9wmyvytaMNVY23sIYC
- TLSH
  T12E73399A765C44D9D06AD0BCC8A38F05E333F85247228BCF56A5835E1F2B7E46C7EA41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/tbb.dll
- Size 208KB
- SHA256 d5db1d48d7025f2c59704dad2e9ba8dfc5562c134fa49d8373b823cf9ccd1957
- MD5 b3ba3b550f4ad8a23126cf040d396bf6
- SHA1 4a4e5341cf3e1549da99c101fec1ed5905f2c473
- SHA512 2bfaee53afdb0874a793cfe6e7b577d1eb908391cd3aa2951441cb00411fbd615f42fffc10d611028788ff5fb4edc75e81d8d2d91afe7055e32d64d757d7aff8
- SSDEEP 3072:Md+wnXGurqipVO50UUJQ2gDAyTnInPhw5ur0anjxonKDg8S7:MMWGuWik0Y2MVnI5wEHnjxongS
- TLSH
  T1A2243A5B71AD0895F86B9238CB874A45E2F3B4514762C7CF166083BA1F6BBD8B63D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/tbb12.dll
- Size 286KB
- SHA256 de25bc26f71c5fa53b585116db11d643dc63373fab094e5d786a2ef7eb50786d
- MD5 77eac9db2ccaac1708a3a678254e6725
- SHA1 02e7599d684ec3fc732e33d07ef6943f68fbcc0b
- SHA512 95b9ed5f24ed91e290ecba28e8a390ecf29d91de4e9f1ff6dbbcae407686ca065174b2b49a1f3d90123dc752306dc0468b77f6b91a96dcc1dbf2812b3c2f846b
- SSDEEP 3072:tiY6HLYWRi8VYNhYRYs9LBlmtmk5+rRf5FYpR/ngkZmL1nvbO:toHLYWB92hYrR4XTZmL1njO
- TLSH
  T106543A1A72981CA7E53F827CC9834649D7F279148371C7CF06A4439A2E13FEAB839365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/tbbmalloc.dll
- Size 54KB
- SHA256 c14ea6f54cdfe42b7e87455e220589799b764c5335dd3665e7343a404afadb34
- MD5 26a797b5812c7e06883fa5ee4de921aa
- SHA1 9dcc3060f706b0883ddc06480801539de5e163a1
- SHA512 301f2febeda455c336c6298ca960137105738d0d31e6b5238fc4264f24571211a57be3ed8187d37e0f0f77a6ce5d9d8e39ceb3a6c20d862c0acc162822986655
- SSDEEP 1536:OTE6dj7617su6R2Mb2zUAmPUHuZq9XGCrK2r9du:6E6daSu6AKAmcHBr9du
- TLSH
  T163435D8E769C00D8E2A68238CADA125BD3B27453276197EF12A0C7272F53ED5677E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Manifest_NonUFSFiles_Win64.txt
- Size 5KB
- SHA256 250931bbb8a84f00842fdaf38e0a133f6d0a81ae0dba9cdd3e409ca4a62cc7b5
- MD5 a304e2a0bc01c382f020cf443dd69a42
- SHA1 c45b74c3751ad5b97c7fd6d3d9ca5dd4157f7d59
- SHA512 d457c1db1dffbfb3d9e831ed6888397a36184070ca8134a2e4430fbd006488874d48a66737765d9b9516c7f5985ade4dc5125ba64c06745e32759d10a9fe6996
- SSDEEP 96:syKlJj9sUU6l2hnijCHh/hLw00HepNcYo0zz1Mm7NG89tB0Y9ZJ0XL7rqqk7am6L:kv/U6lmimHFBwdCNcYo0zz1Mm7N+H+q/
- TLSH
  T1B7B18E2D12B98891FE581140D22667CF247EB32F2943C6147387894FC7825B7592BFEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

ransomware
behavioral31
- Target
  Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Manifest_UFSFiles_Win64.txt
- Size 3.8MB
- SHA256 8853e76021b7bec514a1f6545583e65f95c7beeba9c687a1a7e277d95245d0e1
- MD5 050eade5b368ce579627924044c42651
- SHA1 5216b9d18818183310f1084ab68e1818ff1a26fc
- SHA512 42138f2efc75ddaaf05ffa094b47e485eb4a01ed562416733f850fdac9e822ff0414be0ab1b174a04f75f0fd2496547f91263bd3eea2645962f1116493f373c5
- SSDEEP 6144:qMM+3xxkWZsSDErIIsciWzs1HmLwKN+/rcu2b9FQ7GigLu6GaMTp/sBemmCjfTvN:qMM+3xxk0mLwKN+/rc2U5/k5C
- TLSH
  T11906DBBC5E7AC890BBA5D576F54C2FC4A6B8725F2407C444B1040A8D99C2E53683BFEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

ransomware
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32