General
- Target Lobotomized Playtime free.exe
- Size 1.1MB
- Sample260623-bpptyshx3n
- SHA256 a2253b2f2f5e4fe4831934d2799e3fbc0ad2a5e5367430e2bfe82cd6836a83c7
- MD5 2580a322d7e598f5d4e93aa775f29f49
- SHA1 4adaa5b7e83fc0a424125e80990e45724bf6bd49
- SHA512 a26b0457ae2c3092e4e586eb2ed98d12c511bb58148f8f2befaa89b6e9ab5957a2fb338ba6fe8174d39e64aa13a2f7b039c294cdfae3b0ea4f0c0caa1bb44e0d
- SSDEEP 24576:jU+9XNrenyktDLdYNtcdvQNC9wHAP5c1gfHzaw761LPW5A3uHp4/pHlpAg0r7tqS:D5OVeyffV6Qm
- TLSH T1CB45BE61F68540B7D5E238B059BAD3665839FF31273469CB7BE83D6C09312C26A3C35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Lobotomized Playtime free.exe
Resource
win10v2004-20260513-en
15 signatures
900 seconds
Behavioral task
behavioral2
Sample
Lobotomized Playtime free.exe
Resource
win11ltsc2024-20260617-en
26 signatures
900 seconds
Malware Config
Targets
-
- Target Lobotomized Playtime free.exe
- Size 1.1MB
- SHA256 a2253b2f2f5e4fe4831934d2799e3fbc0ad2a5e5367430e2bfe82cd6836a83c7
- MD5 2580a322d7e598f5d4e93aa775f29f49
- SHA1 4adaa5b7e83fc0a424125e80990e45724bf6bd49
- SHA512 a26b0457ae2c3092e4e586eb2ed98d12c511bb58148f8f2befaa89b6e9ab5957a2fb338ba6fe8174d39e64aa13a2f7b039c294cdfae3b0ea4f0c0caa1bb44e0d
- SSDEEP 24576:jU+9XNrenyktDLdYNtcdvQNC9wHAP5c1gfHzaw761LPW5A3uHp4/pHlpAg0r7tqS:D5OVeyffV6Qm
- TLSH T1CB45BE61F68540B7D5E238B059BAD3665839FF31273469CB7BE83D6C09312C26A3C35A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1