Overview
overview
7Static
static
3Batch CIA ...or.bat
windows10-2004-x64
1Batch CIA ...or.bat
windows11-ltsc_2024-x64
1ctrtool.exe
windows10-2004-x64
1ctrtool.exe
windows11-ltsc_2024-x64
1decrypt.exe
windows10-2004-x64
7decrypt.exe
windows11-ltsc_2024-x64
7makerom.exe
windows10-2004-x64
1makerom.exe
windows11-ltsc_2024-x64
1General
- Target Batch%20CIA%203DS%20Decryptor.zip
- Size 5.0MB
- Sample260628-amsx6aev5r
- SHA256 e6c7b104a0a3f8f2f639b767e4be9ab483a1bc57465de106653f211f3b4205eb
- MD5 61f5ea0a2e7553a9fa43c4dc208ea17f
- SHA1 4b2fb1c00d55be894184f098a334daa5b08e555f
- SHA512 0935d4f5c70d26d74e865b1bace7521f28921aba5745e4621cb8d783f101966837e9eed48e8440e532ecb561d8ee2994c0bfccab461a2d5d8e806e0ad87e25fb
- SSDEEP 98304:BqYqU2RGhR4qGipsHHF0Rf8KJ6K1jZG8y6Y7yAQlkt8FCEjnpoJyTG6UJj9/X5:AbO4qF+n6RfrJvG8wdbtipoJMUl
- TLSH T176363311B83EEA16DE15C09FD2804C561B09CB1F5963C1FBFD9CF52252123AA5D8BECA
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Batch CIA 3DS Decryptor.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Batch CIA 3DS Decryptor.bat
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral3
Sample
ctrtool.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
ctrtool.exe
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral5
Sample
decrypt.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
decrypt.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral7
Sample
makerom.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
makerom.exe
Resource
win11ltsc2024-20260618-en
Malware Config
Targets
-
- Target Batch CIA 3DS Decryptor.bat
- Size 2KB
- SHA256 8d412ad0edeeac91f56841f7d71076846e3b9d7acb7bc7214ccfb910661e3f82
- MD5 5d86ad3b724a51f72610afdb98c34929
- SHA1 9e37208a037b7112773a865742b7cdd7124c4cd1
- SHA512 851b1da7142fd649cc51c390a1b0420beedf198d050a9f8f9bdcb4075ae39c98504b7f543a26fae48bdd6159f5ab722cd492c52636b5d3ad695311b5513797b8
- TLSH T10951DCEF33CB4CD4836505E2593489062E5DC6C6CE1AD788B4C483BBB9A137D8679ADC
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target ctrtool.exe
- Size 602KB
- SHA256 81281895dcc4c991ecddf9a3df94e969787840c7fefa2c137283fbcaf107618c
- MD5 90d4fc7b0a49dee9865dd13f972a9fb4
- SHA1 e98071516b54d7b39ce143b0d5ddc4921afc442a
- SHA512 101d0bf584d3485a5764e36ba9a1585a9576a6240dc7fec9ab66d6079318f3f5d247489d36169be3b478dc90ec2fcd852289a86d783f482cef98acd1bb0c98f7
- SSDEEP 12288:VgaYy10l+I5tp9+PrnxxnHtKCMD2ik1ICM/WQpFI0j:VgaT10sWH9+PrnrHtDMDzbCM/WQpFI0j
- TLSH T1CAD44A96BB915CBAD6164338C6E3D3333239F9941332AB276618D6312F13ED06F86749
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target decrypt.exe
- Size 4.7MB
- SHA256 ab290f1a12bbd4526ef44ce87cd88a3babf0ec604cc64fcc43eb32bf4351b45d
- MD5 2c037dd206414acbdf7d08604cb41676
- SHA1 a30fef9be32c98a6be2bcfca38192434c1fa439e
- SHA512 3237c9c269fe60ed4ec85ac52220d1f810758ecba0e859794702c11de780c0818915452aa8802cacfd27b790b1d52768fb055b819353e768a9f0bb1826ab6a9e
- SSDEEP 98304:DMiKUYtizuTxI6OibE913yyN/R7d64P7W+emKY750J6xiEtZQWsewkKJ:DpkiOI69Abi+RhW+eSGJDXWs6K
- TLSH T15036334A99350E5ADE26C07FD5E3C832B8313C2D17625BE766C0E5333942F962E9D1CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target makerom.exe
- Size 558KB
- SHA256 80e2d084fa45d65f4a9d9a45689ad9fb8dadc453ffc18ec170a74893d83f258b
- MD5 4ada3c6baea23da329067b5845e805e5
- SHA1 9db7bc985b2868d80933c1fccac6112cbdab3f95
- SHA512 0c3925654aed19148902aae7e75aa57952afe725f709a9504e547a9ffde9c8a3ee8d8be8154a8e8694ead79742eccbd9a9f5b8aecc6779593e9e0e055825d028
- SSDEEP 6144:7M9+pnOtq1z231+Kn4vKI1GMxoPqxK/nxOGsFU8xowr/9rCec4:A0nGq1C3wK4iIU0oSmn0FBPtCec4
- TLSH T111C45B97F6D19CFCD51782388297D3233B35B88142626B5B2624BB341E32ED06F5EB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10