General
- Target Game-Enhancer-C-v3.5-beta.5.zip
- Size 456KB
- Sample260622-rrfxtsc19s
- SHA256 8f2eb8422b5dae26d2ef3083f11426c4e585c465f3faaa224a0b93b025026888
- MD5 b8a8dc833e8a8b79431bef98e88d8abd
- SHA1 232562a50b1ab82ad90e1586121a4e4beb8acc9f
- SHA512 bf17804cf66c05d0806b5dfd4d73c748b01e346f8948df779bee7a6d5adcd4ca7a88e135255c4ee7fcbcb7d89bb66fa48377d3560d502430800a5670f5bc5cc3
- SSDEEP 12288:/LSl5r0s3bmfzYfcEaN9B/Jm0LU0gM7aQr:jQ3bmcfclN9BhmSHd
- TLSH T105A4236CD5820E71BCD336202F885F401B60A41A76ADEAF5DB2F32584DEEC784DD99C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Application.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Application.bat
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
lsp.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
lsp.js
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral5
Sample
lua51.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
lua51.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral7
Sample
util64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
util64.exe
Resource
win11ltsc2024-20260617-en
Malware Config
Targets
-
- Target Application.bat
- Size 26B
- SHA256 236d918f2c949603eb4a862f1987d265a2d478a3f25daee8e72b24457a1e5911
- MD5 ff88e3cae91c09e63e2399bf6b60210c
- SHA1 92e732e349672db26fd10baff1ccef6b7c90e1f9
- SHA512 258b93233cd3a2ee2560c2d9347307b9bfc6c9228a31879c71b08fb46ca9a8fc62b1ec324afda7389aae044d6f702f9922e686c121a3b2656953d612c9cfa495
- MD5 SHA1 SHA512
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target lsp.txt
- Size 302KB
- SHA256 ca27cac4f1c16da48671deaf3b2b1035137f05633e15d524ddd1df4a9667fbb7
- MD5 2741dc7eee31b4408d08b51c4e758534
- SHA1 19fac50db8200bb87d8697f499cee9104533eee5
- SHA512 f96cce33b4a5559201cba6ccf041f050c0922d4e973ef9f3965b7c61164edffbe999a48b161394e03ea9c3837b070911fc8b61407804df3c94720daa1401e3e3
- SSDEEP 6144:LL9fpPvANlJJ3LFfIKclCbrws8l9tRs+H:LL3OJJC3CbcsetJ
- TLSH T1D66409D0708814D2DAFB9690DC738FBB22B724FC8A0E278E0E1DF6E176412A5D5ED915
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target lua51.dll
- Size 587KB
- SHA256 04d3c82782927330d56827ff551697666dbab4b3abf5b86bde492efdd142bc58
- MD5 82e81158366a953c33d0720dfe34b95b
- SHA1 4b5eee1d2ba5bf3ca0389c0415626634c640a4bd
- SHA512 3c9f7360bafc48d573d24fe1612e23a97fe08944c9ad5f5d46818d5e74365d00d7e5aeee63391d4c0de7390b5fecaa695b698fd62ccc741dec181f0d24ee82af
- SSDEEP 12288:Psx+0xTI82jcKvyp9jvgEXXBKHKLx2h601BqStQIF3yB:OrmyXMKF2hXBtQIF3yB
- TLSH T173D4160BA6B362BCC267C134879B8BB1B931BC5402346DBF55A0E7311E71E91179FA39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target util64.exe
- Size 31KB
- SHA256 7ad4b911d05a12f91ab27ba3baa351a56653ca099dda7ad87ee2b94f8cd018c9
- MD5 c2a7f19ba96dc460d591d37d664fe6aa
- SHA1 2e930eb7072ac6f8906c5df11e041d88aaea1fcd
- SHA512 baf23c903b68e13786657cf1bcfc6db55493988eac28edc3caaee1011f65ff04eebef9e204853a3abf07d4a36ad7ef5bb8a3683863fac600b49590d7376624ad
- SSDEEP 384:ib7da2Z2gMMu7VGueXHa2RIC23208fKUS5CWhYJ8L:Wa2JLuZ/eXaIO3r8iuWhYyL
- TLSH T138E2C62DB68258DEC591D27CA0D60731F079BD56172766BE1308F23A7E21AA1CB3F427
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10