Overview
overview
5Static
static
5PS22PS4-GUI.exe
windows11-21h2-x64
3bin/dlls/D...re.dll
windows11-21h2-x64
1bin/dlls/D...60.dll
windows11-21h2-x64
1bin/dlls/D...et.dll
windows11-21h2-x64
1bin/dlls/D...ry.dll
windows11-21h2-x64
1bin/dlls/D...ms.dll
windows11-21h2-x64
1bin/dlls/H...ck.dll
windows11-21h2-x64
1bin/dlls/N...on.dll
windows11-21h2-x64
1bin/dlls/l...et.dll
windows11-21h2-x64
1bin/dlls/lzo.net.dll
windows11-21h2-x64
4bin/dlls/n...rk.dll
windows11-21h2-x64
1bin/emulat...V2.pkg
windows11-21h2-x64
3bin/tools/ext/di.exe
windows11-21h2-x64
3bin/tools/...c9.dll
windows11-21h2-x64
3bin/tools/ext/sc.exe
windows11-21h2-x64
4bin/tools/gengp4.exe
windows11-21h2-x64
5bin/tools/...ch.exe
windows11-21h2-x64
5bin/tools/...to.dll
windows11-21h2-x64
3bin/tools/magick.exe
windows11-21h2-x64
1bin/tools/...md.exe
windows11-21h2-x64
3bin/tools/replhex.exe
windows11-21h2-x64
1bin/tools/replhex.exe
windows11-21h2-x64
1Analysis
- max time kernel
898s - max time network
449s - platform
windows11-21h2_x64 - resource
win11-20260513-it - resource tags
arch:x64arch:x86image:win11-20260513-itlocale:it-itos:windows11-21h2-x64systemwindows - submitted
20/06/2026, 11:08
Behavioral task
behavioral1
Sample
PS22PS4-GUI.exe
Resource
win11-20260513-it
Behavioral task
behavioral2
Sample
bin/dlls/DiscUtils.Core.dll
Resource
win11-20260513-it
Behavioral task
behavioral3
Sample
bin/dlls/DiscUtils.Iso9660.dll
Resource
win11-20260513-it
Behavioral task
behavioral4
Sample
bin/dlls/DiscUtils.Net.dll
Resource
win11-20260513-it
Behavioral task
behavioral5
Sample
bin/dlls/DiscUtils.Registry.dll
Resource
win11-20260513-it
Behavioral task
behavioral6
Sample
bin/dlls/DiscUtils.Streams.dll
Resource
win11-20260513-it
Behavioral task
behavioral7
Sample
bin/dlls/HtmlAgilityPack.dll
Resource
win11-20260513-it
Behavioral task
behavioral8
Sample
bin/dlls/Newtonsoft.Json.dll
Resource
win11-20260513-it
Behavioral task
behavioral9
Sample
bin/dlls/lzfse-net.dll
Resource
win11-20260513-it
Behavioral task
behavioral10
Sample
bin/dlls/lzo.net.dll
Resource
win11-20260513-it
Behavioral task
behavioral11
Sample
bin/dlls/nunit.framework.dll
Resource
win11-20260513-it
Behavioral task
behavioral12
Sample
bin/emulators/JakV2.pkg
Resource
win11-20260513-it
Behavioral task
behavioral13
Sample
bin/tools/ext/di.exe
Resource
win11-20260513-it
Behavioral task
behavioral14
Sample
bin/tools/ext/libatrac9.dll
Resource
win11-20260513-it
Behavioral task
behavioral15
Sample
bin/tools/ext/sc.exe
Resource
win11-20260513-it
Behavioral task
behavioral16
Sample
bin/tools/gengp4.exe
Resource
win11-20260513-it
Behavioral task
behavioral17
Sample
bin/tools/gengp4_patch.exe
Resource
win11-20260513-it
Behavioral task
behavioral18
Sample
bin/tools/libmbedcrypto.dll
Resource
win11-20260513-it
Behavioral task
behavioral19
Sample
bin/tools/magick.exe
Resource
win11-20260513-it
Behavioral task
behavioral20
Sample
bin/tools/orbis-pub-cmd.exe
Resource
win11-20260513-it
Behavioral task
behavioral21
Sample
bin/tools/replhex.exe
Resource
win11-20260513-it
Behavioral task
behavioral22
Sample
bin/tools/replhex.exe
Resource
win11-20260513-it
General
- Target PS22PS4-GUI.exe
- Size 340KB
- Sample260620-m8v1vsfx2x
- SHA256 0d79fa3f02b7bfc5950c6b0a210746fa2d5fd5e51fc7ee7e08851a0fce1a6df1
- MD5 91013483c99543a0aeec408933159f9f
- SHA1 0db890c886f58fa1d61f643a7866460900f1de35
- SHA512 5ff774054856900084b6bd40e4839fdbd6a64ac9db7a73b155757668347c2f55282738cb639e7ed5b2856b2c4a5f9c86906c1b314cecad2138a44f10defc498c
- SSDEEP 6144:5EOSd8ybz1qMF1tdF/G4F1tdF/GA28Fs2k7TbqEANd0IF1tdF/G/:5EO7+hNd04Nd04s2kGEAgINd0/
- TLSH T1CA748D2133A41B87DBBF573109E1A11422F6B956967AD60C3E9D50CC0DA9BC0EEB2F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 4988 dotnet.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3576 PS22PS4-GUI.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 3576 PS22PS4-GUI.exe - Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 3576 wrote to memory of 4816 3576 PS22PS4-GUI.exe 80 PID 4816 wrote to memory of 4988 4816 cmd.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\PS22PS4-GUI.exe"C:\Users\Admin\AppData\Local\Temp\PS22PS4-GUI.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3576 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c s.bat2⤵
- Suspicious use of WriteProcessMemory
PID:4816 -
C:\Program Files\dotnet\dotnet.exedotnet --list-runtimes3⤵
- System Time Discovery
PID:4988
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\r.txt
- Size 552B
- SHA256 3a540187aba2047118a389c22152a488c215f21766cd75e59c187f7c414bddb1
- MD5 bb1ccb3c24a94cf904ce4144c1253352
- SHA1 0f8bdf7add3f3d408fadfa1902f5436a4cd725e2
- SHA512 8893124fefb3effca66bd4b783b46f8f3adf0ddd4fd5146d879f1cc10303b1e5bef2903a87c5b8d5a1c85432ac83c6e201a5b8998b0e8af671cb2d6048308f9f
- TLSH T1E3F01249EB10D14366733944572F7A407F0A5EAF87C59E6203C74153D5C5F6B855C4D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\s.bat
- Size 30B
- SHA256 07ae7cdd12c6ffdb1173fa5413b894e70ada7ed6f27f3e3d6999a29e6e0f8cf0
- MD5 d47abb0f1c515fa7ebf6adfe7fd941c0
- SHA1 20ead5d2872e2831bc245ca3d34fc43f67775f70
- SHA512 c93722740beeb71803d92777ffa3584710200291bf6e2bb6aa3f907f6d10b1a5f2e7eae74ff92d580fb66bb6963144c81430e31dff9232ad7a9074ff59bf53c2
- MD5 SHA1 SHA512