Overview
overview
5Static
static
5PS22PS4-GUI.exe
windows11-21h2-x64
3bin/dlls/D...re.dll
windows11-21h2-x64
1bin/dlls/D...60.dll
windows11-21h2-x64
1bin/dlls/D...et.dll
windows11-21h2-x64
1bin/dlls/D...ry.dll
windows11-21h2-x64
1bin/dlls/D...ms.dll
windows11-21h2-x64
1bin/dlls/H...ck.dll
windows11-21h2-x64
1bin/dlls/N...on.dll
windows11-21h2-x64
1bin/dlls/l...et.dll
windows11-21h2-x64
1bin/dlls/lzo.net.dll
windows11-21h2-x64
4bin/dlls/n...rk.dll
windows11-21h2-x64
1bin/emulat...V2.pkg
windows11-21h2-x64
3bin/tools/ext/di.exe
windows11-21h2-x64
3bin/tools/...c9.dll
windows11-21h2-x64
3bin/tools/ext/sc.exe
windows11-21h2-x64
4bin/tools/gengp4.exe
windows11-21h2-x64
5bin/tools/...ch.exe
windows11-21h2-x64
5bin/tools/...to.dll
windows11-21h2-x64
3bin/tools/magick.exe
windows11-21h2-x64
1bin/tools/...md.exe
windows11-21h2-x64
3bin/tools/replhex.exe
windows11-21h2-x64
1bin/tools/replhex.exe
windows11-21h2-x64
1Analysis
- max time kernel
898s - max time network
489s - platform
windows11-21h2_x64 - resource
win11-20260513-it - resource tags
arch:x64arch:x86image:win11-20260513-itlocale:it-itos:windows11-21h2-x64systemwindows - submitted
20/06/2026, 11:08
Behavioral task
behavioral1
Sample
PS22PS4-GUI.exe
Resource
win11-20260513-it
Behavioral task
behavioral2
Sample
bin/dlls/DiscUtils.Core.dll
Resource
win11-20260513-it
Behavioral task
behavioral3
Sample
bin/dlls/DiscUtils.Iso9660.dll
Resource
win11-20260513-it
Behavioral task
behavioral4
Sample
bin/dlls/DiscUtils.Net.dll
Resource
win11-20260513-it
Behavioral task
behavioral5
Sample
bin/dlls/DiscUtils.Registry.dll
Resource
win11-20260513-it
Behavioral task
behavioral6
Sample
bin/dlls/DiscUtils.Streams.dll
Resource
win11-20260513-it
Behavioral task
behavioral7
Sample
bin/dlls/HtmlAgilityPack.dll
Resource
win11-20260513-it
Behavioral task
behavioral8
Sample
bin/dlls/Newtonsoft.Json.dll
Resource
win11-20260513-it
Behavioral task
behavioral9
Sample
bin/dlls/lzfse-net.dll
Resource
win11-20260513-it
Behavioral task
behavioral10
Sample
bin/dlls/lzo.net.dll
Resource
win11-20260513-it
Behavioral task
behavioral11
Sample
bin/dlls/nunit.framework.dll
Resource
win11-20260513-it
Behavioral task
behavioral12
Sample
bin/emulators/JakV2.pkg
Resource
win11-20260513-it
Behavioral task
behavioral13
Sample
bin/tools/ext/di.exe
Resource
win11-20260513-it
Behavioral task
behavioral14
Sample
bin/tools/ext/libatrac9.dll
Resource
win11-20260513-it
Behavioral task
behavioral15
Sample
bin/tools/ext/sc.exe
Resource
win11-20260513-it
Behavioral task
behavioral16
Sample
bin/tools/gengp4.exe
Resource
win11-20260513-it
Behavioral task
behavioral17
Sample
bin/tools/gengp4_patch.exe
Resource
win11-20260513-it
Behavioral task
behavioral18
Sample
bin/tools/libmbedcrypto.dll
Resource
win11-20260513-it
Behavioral task
behavioral19
Sample
bin/tools/magick.exe
Resource
win11-20260513-it
Behavioral task
behavioral20
Sample
bin/tools/orbis-pub-cmd.exe
Resource
win11-20260513-it
Behavioral task
behavioral21
Sample
bin/tools/replhex.exe
Resource
win11-20260513-it
Behavioral task
behavioral22
Sample
bin/tools/replhex.exe
Resource
win11-20260513-it
General
- Target bin/emulators/JakV2.pkg
- Size 15.2MB
- Sample260620-m8v1vsfx2x
- SHA256 c8ed64b35473c8de90abae8cba35d80fb5bfadc4fcdade7e838dc810c1665487
- MD5 2cb04b369ae89e625dbf3fe6724eb8a1
- SHA1 db897534624e54f40ba525dae5444c88f231b284
- SHA512 9083cc248fa4368fdffa8c725d22e5f585c731d2cd856470582ae43f08dc7e9b7c2ebd38bbb379fd59f7a2505d82016cd43bb300b2b4b3d4118f0359bf93da72
- SSDEEP 393216:WIQoB2+4mU6ywNZ1WiyrbEfcOK2GsgZiAP:qoM+4Iywyrb+tdvg3
- TLSH T173F633DE2FBD3E63D7496D3715BB3C7B89362E789F941E81E29B4B0124572931982C80
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1100 OpenWith.exe