General
- Target Install-GooglePlayGames.exe
- Size 39.4MB
- Sample260620-csheqacy3r
- SHA256 fe06ae73b51d562165d2cff33b0d0cdaaaafc7c0e3ab55bfac01bcd6310a92b7
- MD5 8a7b368b00156b2a9add011e2ea0a470
- SHA1 0f171c5a07dfb9e8807c2dc28a896e373f19b142
- SHA512 cd00e116bfa78b97f51129813e083ca4a20d7e682ddd2edaf11a6f854774b2ab92d7da53ab860771de5c7e58b8acb5ad065c6be667fad6b64eccecb23e608d28
- SSDEEP 393216:QVUj4kSMiohxJdVJiuDygSULgjBR2QCPLKsq+YpWhTlilBS+y161FdDEbBLhVACm:QVqvn+uWgLpX16JoY0wDzb
- TLSH T1F997DF13BA9190BCC49BC031E27F53355E327C964F319ADF4194AA182F79BE02B39769
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Install-GooglePlayGames.exe
Resource
win11-20260513-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target Install-GooglePlayGames.exe
- Size 39.4MB
- SHA256 fe06ae73b51d562165d2cff33b0d0cdaaaafc7c0e3ab55bfac01bcd6310a92b7
- MD5 8a7b368b00156b2a9add011e2ea0a470
- SHA1 0f171c5a07dfb9e8807c2dc28a896e373f19b142
- SHA512 cd00e116bfa78b97f51129813e083ca4a20d7e682ddd2edaf11a6f854774b2ab92d7da53ab860771de5c7e58b8acb5ad065c6be667fad6b64eccecb23e608d28
- SSDEEP 393216:QVUj4kSMiohxJdVJiuDygSULgjBR2QCPLKsq+YpWhTlilBS+y161FdDEbBLhVACm:QVqvn+uWgLpX16JoY0wDzb
- TLSH T1F997DF13BA9190BCC49BC031E27F53355E327C964F319ADF4194AA182F79BE02B39769
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in System32 directory
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1