Resubmissions

20/06/2026, 22:41

260620-2l4f2sh18l

20/06/2026, 22:39

260620-2latqsh17p

20/06/2026, 22:25

260620-2b4ztsaz4t10

General

  • Target
    Half.Sword.v20260218.Early.Access.tar
  • Size 312.0MB
  • Sample260620-2l4f2sh18l
  • SHA256 2728d7ebbf19042871a241aa3c26f11be2530b008c1ea7bb2f97ae3117c7f637
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Family: Remus

    Remus is a stealer written in C++.

  • Detects Remus stealer 1 IoCs
  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

  • Unsigned PE 27 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 2 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • Half.Sword.v20260218.Early.Access.tar
    .tar 312.0MB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/DbgHelp/dbghelp.dll
    .dll 2.1MB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/MsQuic/v220/win64/msquic.dll
    .dll 2.4MB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/NVIDIA/NVaftermath/Win64/GFSDK_Aftermath_Lib.x64.dll
    .dll 1.8MB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/Ogg/Win64/VS2015/libogg_64.dll
    .dll 48KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/Steamworks/Steamv157/Win64/steam_api64.dll
    .dll 960KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/Steamworks/Steamv157/Win64/steam_api64.rne
    .dll 288KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/Steamworks/Steamv157/Win64/steam_emu.ini
    2KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbis_64.dll
    .dll 1.6MB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbisfile_64.dll
    .dll 37KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Binaries/ThirdParty/Windows/XAudio2_9/x64/xaudio2_9redist.dll
    .dll 827KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Content/Renderer/TessellationTable.bin
    253KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Engine/Content/Slate/Cursor/invisible.cur
    326B
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfSwordUE5.exe
    .exe 354KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/D3D12/D3D12Core.dll
    .dll 5.6MB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/D3D12/d3d12SDKLayers.dll
    .dll 9.1MB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/HalfSwordUE5-Win64-Shipping.exe
    .exe 146.8MB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/OpenImageDenoise.dll
    .dll 47.5MB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/boost_atomic-mt-x64.dll
    .dll 17KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/boost_chrono-mt-x64.dll
    .dll 34KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/boost_filesystem-mt-x64.dll
    .dll 137KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/boost_iostreams-mt-x64.dll
    .dll 47KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/boost_program_options-mt-x64.dll
    .dll 343KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/boost_python311-mt-x64.dll
    .dll 188KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/boost_regex-mt-x64.dll
    .dll 229KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/boost_system-mt-x64.dll
    .dll 9KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/boost_thread-mt-x64.dll
    .dll 72KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/tbb.dll
    .dll 208KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/tbb12.dll
    .dll 286KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Binaries/Win64/tbbmalloc.dll
    .dll 54KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/DLSS/Binaries/ThirdParty/Win64/nvngx_dlss.dll
    .dll 28.6MB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/DLSS/Binaries/ThirdParty/Win64/nvngx_dlssd.dll
    .dll 27.2MB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/DiscordPartnerSDK/Binaries/ThirdParty/DiscordPartnerSDKLibrary/Win64/discord_partner_sdk.dll
    .dll 8.9MB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/DiscordRpc/Source/ThirdParty/DiscordRpcLibrary/Win64/discord-rpc.dll
    .dll 390KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/StreamlineCore/Binaries/ThirdParty/Win64/nvngx_deepdvc.dll
    .dll 3.0MB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/StreamlineCore/Binaries/ThirdParty/Win64/nvngx_dlssg.dll
    .dll 7.2MB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/StreamlineCore/Binaries/ThirdParty/Win64/sl.common.dll
    .dll 657KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/StreamlineCore/Binaries/ThirdParty/Win64/sl.deepdvc.dll
    .dll 184KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/StreamlineCore/Binaries/ThirdParty/Win64/sl.dlss_g.dll
    .dll 436KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/StreamlineCore/Binaries/ThirdParty/Win64/sl.interposer.dll
    .dll 542KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/StreamlineCore/Binaries/ThirdParty/Win64/sl.pcl.dll
    .dll 170KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/StreamlineCore/Binaries/ThirdParty/Win64/sl.reflex.dll
    .dll 193KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/ZibraVDB/ZibraVDBNative/CompressionEngineNativePlugin_Win.dll
    .dll 113KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/ZibraVDB/ZibraVDBNative/CompressionEngineNativePlugin_Win_Editor.dll
    .dll 4.6MB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/ZibraVDB/ZibraVDBNative/Imath-3_1.dll
    .dll 329KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/ZibraVDB/ZibraVDBNative/WinPixEventRuntime.dll
    .dll 53KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/ZibraVDB/ZibraVDBNative/blosc.dll
    .dll 68KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/ZibraVDB/ZibraVDBNative/lz4.dll
    .dll 124KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/ZibraVDB/ZibraVDBNative/openvdb.dll
    .dll 3.2MB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/ZibraVDB/ZibraVDBNative/tbb12.dll
    .dll 322KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/ZibraVDB/ZibraVDBNative/zlib1.dll
    .dll 88KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/HalfswordUE5/Plugins/ZibraVDB/ZibraVDBNative/zstd.dll
    .dll 638KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Manifest_NonUFSFiles_Win64.txt
    5KB
  • Half.Sword.v20260218.Early.Access/Half.Sword.v20260218.Early.Access/Manifest_UFSFiles_Win64.txt
    3.8MB

Half.Sword.v20260218.Early.Access.tar

  • SHA256 2728d7ebbf19042871a241aa3c26f11be2530b008c1ea7bb2f97ae3117c7f637
  • MD5 SHA1 SHA512 SSDEEP TLSH