General
- Target GameMode.exe
- Size 5.1MB
- Sample260623-thaesses9s
- SHA256 259fc04d3aa7b0fc44ac6adef13bec573e2c05efcc2cac34dbe6c41025484574
- MD5 a9028b0f7f1b9a9e650374d715394e96
- SHA1 e20e511dbeeb3043ef4eb464523bf00e6c0ef61c
- SHA512 f01f8cd05a28ec1ac64c8647611d6ef03fb08ffcd6365281c4c699cda5cb5c38449cd1ae029e1918f36f205afa0661b93346c3143bac066e6b4d4d2f59915a71
- SSDEEP 49152:/6K1f9Yv8cB2iKeRpz6iar9F9hKjmxTw1BMX4dkyOXKcDjEzcSkA2mjn:Ph9Y0w2itptaZFC1ModkKzT
- TLSH T1743616006EB85716E7AA1A35BC7137F49F30A9136916D61E39C8D4A93E627708C123FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GameMode.exe
Resource
win11ltsc2024-20260618-en
24 signatures
900 seconds
Malware Config
Targets
-
- Target GameMode.exe
- Size 5.1MB
- SHA256 259fc04d3aa7b0fc44ac6adef13bec573e2c05efcc2cac34dbe6c41025484574
- MD5 a9028b0f7f1b9a9e650374d715394e96
- SHA1 e20e511dbeeb3043ef4eb464523bf00e6c0ef61c
- SHA512 f01f8cd05a28ec1ac64c8647611d6ef03fb08ffcd6365281c4c699cda5cb5c38449cd1ae029e1918f36f205afa0661b93346c3143bac066e6b4d4d2f59915a71
- SSDEEP 49152:/6K1f9Yv8cB2iKeRpz6iar9F9hKjmxTw1BMX4dkyOXKcDjEzcSkA2mjn:Ph9Y0w2itptaZFC1ModkKzT
- TLSH T1743616006EB85716E7AA1A35BC7137F49F30A9136916D61E39C8D4A93E627708C123FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Peripheral Device Discovery
1Query Registry
4Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1