General
- Target tomiragame.7z
- Size 23.4MB
- Sample260626-1a1eksfw5n
- SHA256 ffdcb47ec40d078b384302f81376fe97f547c9f0a1afbbdde7d84a891f23057e
- MD5 afb12a70cbef1b70a8534df6d06dbae5
- SHA1 4568101654c8fcbe8a7e03cf1b7d501bc6f5b99e
- SHA512 200c26def99d40c212686d2e94ded4b11086b46cdad8c7e628612dd86888125d1c10556c27e4053e4adec8aa2f7b1505d6fca31d8b36a0e8daf77bf24f3dd80c
- SSDEEP 393216:krQCJpED5VF+tiJtIDB8f6Ec2C8Ech25fkxK7JjNsMTer5OqW0LbGh2T//YqpkP3:uJiD5TaiJZ3CTchuRNRdw8qW0eq/2IWl
- TLSH T18837334D5328340BF1988B4B6A86351F72B17FE9F2D654CD7CA649E23F94026E3A0F25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tomiragame.exe
Resource
win10ltsc2021-20260513-en
9 signatures
300 seconds
Behavioral task
behavioral2
Sample
tomiragame.exe
Resource
win11-20260513-en
9 signatures
300 seconds
Malware Config
Targets
-
- Target tomiragame.exe
- Size 124.4MB
- SHA256 d39cca5060221a4543b18488ebd2301cc772d02932c04d096863e58a187e5c81
- MD5 748b28564fe95bcda69fcdee73b58d8b
- SHA1 0ba273d5c25a347d346106f53a814ea14e736d29
- SHA512 af3ea88733fcc625cbf9e80101a806a584cc3a2282215df290bed54834630226ea90ebfbe4f63f36b89ecf4e7629ced165061504cb31d098eeaca7d05aa2fc7c
- SSDEEP 786432:gdBeI7LfOCDsno80dguj3/oyngPV1ByjNWtfzNavxdUKitWuWe2vuxTbSf:kBeI7yCDsW/oR8NWtfzNaJ7uWelTbSf
- TLSH T18E58AE0277BA60A3C1679179879FA002F731B4071734DAC7776C83646F67AE06EBAB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.