10de826a332cbfe1e3451e7560d8a1f9268585314efedf18d62865122b370c40

Resubmissions

01/07/2026, 04:09

260701-eqvy5sd13l8

01/07/2026, 04:06

260701-en52bsdz9m6

Sharing

Copy URL Twitter E-mail

General

Target
MousePrecisionHelper_[unknowncheats.me]_.zip
Size 25.0MB
Sample260701-eqvy5sd13l
SHA256 10de826a332cbfe1e3451e7560d8a1f9268585314efedf18d62865122b370c40
MD5 e5e2ad88da27311d9e7626a144b461d6
SHA1 ca040a54f8f54b34e23fa5d0cb4c404d18cd935d
SHA512 28a77ef4854a485923427ad6362d88b60006714b536589983c91d2134ce2547544619700f1452fab9cc42133fe0d8e6f03441742fd1ee605369c9953e91ce01d
SSDEEP 786432:d9xOLPVqhfrVXoK7vBzJ2wpcYr9AEGK8aliF61Xb3V+ul:VfJXoKZJ2yr9AEGK8D6bF
TLSH
T18447339CE9FF6B94CB4E2C7238375815F0211CAE0EF902257952E2918AF7092B756CD7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  MousePrecisionHelper_[unknowncheats.me]_.zip
- Size 25.0MB
- SHA256 10de826a332cbfe1e3451e7560d8a1f9268585314efedf18d62865122b370c40
- MD5 e5e2ad88da27311d9e7626a144b461d6
- SHA1 ca040a54f8f54b34e23fa5d0cb4c404d18cd935d
- SHA512 28a77ef4854a485923427ad6362d88b60006714b536589983c91d2134ce2547544619700f1452fab9cc42133fe0d8e6f03441742fd1ee605369c9953e91ce01d
- SSDEEP 786432:d9xOLPVqhfrVXoK7vBzJ2wpcYr9AEGK8aliF61Xb3V+ul:VfJXoKZJ2yr9AEGK8D6bF
- TLSH
  T18447339CE9FF6B94CB4E2C7238375815F0211CAE0EF902257952E2918AF7092B756CD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  MousePrecisionHelper/Maps/README.txt
- Size 998B
- SHA256 c68d4369c63b8b1cfda696195eaf8d546c3be6f530dbde8a6e9147e2a7623e1c
- MD5 7148f6a6dc720c72c9a08f96de919748
- SHA1 a872d408d1ec69a2e6177a5f16e84575ecd17234
- SHA512 57b805d6ebf452f1a4b2db285da636a1c70c079b2fa711f73509718c839a2fdb74655ed2199338e7e7075058f7f68471c9c24eedd07766508d447f42368506ea
- TLSH
  T16E11D0A06E9852F3C32ED660640E16EB4F62601FE3567580719C44DCEFA63D085F44E6
- MD5 SHA1 SHA512 TLSH
Score

8^/10

ransomware adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  MousePrecisionHelper/Maps/ancient.png
- Size 1.1MB
- SHA256 bc010595c56e3c1356e994890f41125924b322930976a3f0f155b07b98cc3d36
- MD5 8d673f0ec9bb1b9944e195d3c80d6845
- SHA1 d7cfb7d10fe776bca7bfd10a9162b7709db9d0d2
- SHA512 841db00823f4d11a221294c80133f4ad4d0cd5f7d3856005588834cafefc5a641c515cc0bb296672cb5d4b49efc2e8ace7e42ccaa464c7c7c928e194e9263a63
- SSDEEP 24576:nHY4F5HeXNCOeP4Y6KGHImIB0k/qMjAw4VEQBz5cFCJbBDWNdUXv:nzF09+4yGHWmUjjAw4uk55JbBDnv
- TLSH
  T1493512B292458BE2D5E4797819BCB40379F4D220CBF415D550BEEACCE11ADB01868BFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  MousePrecisionHelper/Maps/anubis.png
- Size 1.3MB
- SHA256 8a36c5bc65dd837072672623680550a5f4158e4c1863c04b31262a15ac37d99f
- MD5 9b93a69e052f3c0dd7dd591104eee60b
- SHA1 33e1517fd38c4b0f345a6e9be78a62ba80fdb557
- SHA512 6a53d41e2e28e53b5b4af8f4f2b6514bdeb9f3f38431288c4d187c692b978183a4c0bbe5cedba48ac9791f0e6fc3b729876317a2cd9db0e8a94267f6eff82789
- SSDEEP 24576:hs/gsQUCKkVXuLIuqkT9F6RLsxY+WNgzDkhRhyXL6/mvZ0PQyd4mXh:S4c09uLIZE9F6LsmeDkhRERkVR
- TLSH
  T12A550136120A8AD7E4D57D70657E6443ADB4C106CBFD099820FDF9CCA24BEA815A83DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  MousePrecisionHelper/Maps/cache.png
- Size 1.4MB
- SHA256 8c7e6998f65b3db94de484e949ed905c0041476db0a0397bc30a699c903babad
- MD5 a6c804cafbb8aed4d257657390f864ff
- SHA1 2e6a3b40a7ff8a8d8ad543c3c8722f0fa5fcb848
- SHA512 40b266dacb67b6dcd3519fe6dcf8aabab2be6cf3056036ab01554bd6086090b32df6daccca210e45817ddcef9bae6869733567079265f735d4b23f8736149ab5
- SSDEEP 24576:smj6KYv4zS9ILrZtys4nB1eLT2IVt3iyrWFMC5bnO0+Q21hOZW/DE1ekfSr3eJiC:sWfzSuBtyxnrYDtSyrWSlOZW/eVeQiGl
- TLSH
  T138651272464A8BD6E5C13874617DB1436BB0D129CBF8198435EDFA8CA11BFB410E4BEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  MousePrecisionHelper/Maps/cobblestone.png
- Size 1.2MB
- SHA256 5f0150dbea7829dabcf5b6adc9b080df244101a62b1f8e9e5c4403ef650e9e73
- MD5 ea08043492ae5d3b52b95819706c4f27
- SHA1 bb17cb62a3f04a73ed9ca8e4d90cec4124599fcd
- SHA512 1a4b1cc873c4f45d8857211f9749bbdea18fd43ddb26cffbae8fe8cb83ddddaf99d192a403e6631a1d10c3a98733aac93aa2c757d326c61efb5ed8994a44bcbf
- SSDEEP 24576:b/SyXQQC1SO8JxJ788yrrVRy90BLZOw+Cv6mMM03psVAKX+mdo:LQgOyXN0v+7L5sBX3o
- TLSH
  T11E450256820A8FC6DCD43974683DA0477D74D606C6E824A435FFF68DE089F642AA83DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  MousePrecisionHelper/Maps/dust2.png
- Size 1.4MB
- SHA256 4d52a4be2d8af6a416024512fa21f12bd65ebd5707b12a44cd122e453ac7c0e4
- MD5 f2dbcb3a957f2f3acda63701d7fff865
- SHA1 a65c42d60729f5603f8fddcb6db30315cfe4f9f7
- SHA512 068c69e791f576187c876dc9cc693a9a31ef4d7908fd89f10ffe382741bc69d928b94058b6f8e8382b469728ac56bde56a9b87396f2b3bd175304a43fa91bf73
- SSDEEP 24576:tvOScsVj4jSjBOSzmas8l43ORV5Hxxm0O3h2bRMPgCyX+gfz+EahaA:Z8iBO3l8mWeRhY/RvfzUaA
- TLSH
  T1776512B362064AE6E5D03974A478A04779B4D21087F8199870FEFACCF65BEB400957EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  MousePrecisionHelper/Maps/inferno.png
- Size 1.5MB
- SHA256 30bc32e050946f110a966ec7cebbe43d7698a9604d14fbe7bdc1aed3993c894f
- MD5 aaf19593d3565bf97389527e1a462f39
- SHA1 0a0ff8a52d5bf9790e557ce938bd6c286aa26e51
- SHA512 82526bf68922cd33d94c75d19cc267e470d680ca4939c18b060fed9265eee5b48df8a09e727ed5616fe5e7db0deed79832aab181afcc300004ead01f3d0a8fb4
- SSDEEP 24576:BuldLrpIXjx+NAZRXxppbMjVgCJbFSWUS49hVl1qcH7APBf1+TQuFk4V1gY6SdZi:WrpIXjWAh4VnFFSWfuhD1zHUpfgTQg7k
- TLSH
  T12C75017252069BCBE9C13970606E90436EB0D65486FC14C874FDF6CCE65BEA425A83EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15 behavioral16
- Target
  MousePrecisionHelper/Maps/mirage.png
- Size 1.8MB
- SHA256 e4b9d2f211b993f23ce170a5b42304646a0ec0c9724bff7846fa55f68a6327bb
- MD5 189fb3131775a8943e558e52647fe93b
- SHA1 67993cc15aeb75e176263321987d67603182a745
- SHA512 d28c5c31b730c3bb6b46b1a40365ebd25ec8af9c8b330668c0585e41cfa995c0754ee4657d83a2aecb969f4102d5a5508aa374150604bbd1a499014ca25654e2
- SSDEEP 24576:bBTHZZfWDTHUHonmoAL6PomRvHgywWR26CNsJDQ1L5Tjj8eUvBSWlNL9TDpEcQqn:VTrCT0CAePbRvH7Uq4t/4eKBDnTQquW3
- TLSH
  T16085237642474E8BD49030B8A66CA5427AF0E68987B901D039FEF5DCD35BDB80DD43EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  MousePrecisionHelper/Maps/nuke.png
- Size 1.3MB
- SHA256 0a71422b382af0ae07acd4dbd3a1ed20cad05645708b83efd6c39a9d286e9c0b
- MD5 f36bae71967e0b2fecfd8b19e4d098b5
- SHA1 369d248970e8c154a6e540996176498aa1be0820
- SHA512 b863162ae85aa8dbad2b8ab3935337da7c74d6d05be1c3e9055639f3f94d31442882ae7289f5452429cde1b56d6ac4bbe69ccfbb5601990fe8f3618c0ab096c4
- SSDEEP 24576:XgJdCha/HfezkCuYI4WQhemVj12I6IDv4A6oMZPRjptzNbZ0C:IezkCuYIs5912iDv47tZPjPFj
- TLSH
  T1F45502B242451BE7E4E03874647D75433EB0D624CBE815D962EEE5CCE21BE702198BEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  MousePrecisionHelper/Maps/overpass.png
- Size 1.7MB
- SHA256 3fbcd404e21647bffd201c62dfc9dc0a75439591759dd079f91d7a5190f0aee9
- MD5 40d779b0a88a12de057fb4a54c17bc5d
- SHA1 9a90a587b0d115c06a40d19dcdd09201b048140b
- SHA512 caa0af496035c7da6afe43e81662ec794c708746cafaa032027d2e3b1abd108023831160ac23e523e0531fd14d48500aaebfba2fe127a4ae60bc6d96ce2ea941
- SSDEEP 49152:g1QkOEsLiA/HkZiDLea5D8M+AGpMxYczt4UWwq98cm:QHsiELNDlJGx7wqm
- TLSH
  T1F18523B592015F8FE5603470556D684BBD34A608C7F914E079FCF9CCA68BFB01AA83E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  MousePrecisionHelper/Maps/train.png
- Size 1.3MB
- SHA256 776e0f9947f074790f6f98d43ab88fdddcdb66159772b76ebf818c16b9f789c5
- MD5 223ccdf33971323b7990f78c91d17211
- SHA1 d0e317eb526891e0944921b0f11317e4fa3bcc4b
- SHA512 d85d2a186f23e9d8b3c8c99babeda493c4975bef295c9f6ce1d4a91c50f6d0eaf765c20a2ad55dd20f5113ea65048e352db0511d295d849e545ed5eb360b9249
- SSDEEP 24576:zgwJwvqNlS50OL7v1+9Qas6RorTmZ6qwL733wL+80thOnqgsc2HjLks:Pyv6ON+9QasxSZvwL733DLthOqgv2HjB
- TLSH
  T12155017256004FEBE4D03A30647D61436E70DA24D6F9298474FDE9CCB25BE7124A8BEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24
- Target
  MousePrecisionHelper/Maps/vertigo.png
- Size 1.4MB
- SHA256 79e29c550b1a235d4867d0ad1f923ffe2cb47d92d8c0f01121fc79e0a6450997
- MD5 7d014b9d119671baf868097ebd70baca
- SHA1 b063716369e53e56c2552d66fe22ce37d50fc47b
- SHA512 a470c820c48fcc5041fdcadee0f3cc331ee6a469213c1d64ce91706c3919fa8b42c2d180521062ff56b8fdec43d5fa9e9083d6719bcefed629ebf392fa6ec778
- SSDEEP 24576:Lg7BIbc4wb3bd0DaYa9r4hUf/nxpHLMjLGqs+JHioeuoAhR8SMNozjKt6:cT4MJiaY64yfPxZLMHFtHugR8SRf
- TLSH
  T16F6502BA53054DE6F9B074385CBD2043A970A334DEE4256896B7E59CB78AD305088FFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  MousePrecisionHelper/MousePrecisionHelper.exe
- Size 17.5MB
- SHA256 4adf55353bdcca11d31811081a480e20c759b8320673d14498ce0a450d302443
- MD5 96734e35b8fd4190ccd627a3879da09c
- SHA1 bb392b674ec397b5ed67507783d1fdcb79dd12ab
- SHA512 8275d54c2c4bb21419018f74b3100af00575a2b8e4f59eb4d6058f6eeacc9805469b986ce59ceacf6bdc74ff7ff7906ae0044d8c18b3601d7c61d26b9a1c8ccf
- SSDEEP 98304:3owWTYwSNKU0QB9r0Jwjef6CDL9BLJLP9xe/+FOvSmaRf+UcDN9NppBLxAHDfyLH:30TYwY9gJwjeyW5BNLP9xz8N9Nppp
- TLSH
  T1A2078D0DA7D80F3BC2EB5F7BE4A1A132257595162743E70B5A0AD33D0C963C48EE16DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  MousePrecisionHelper/Patterns/ak47.csv
- Size 616B
- SHA256 c0de331f41ccb582339ec861a76eb59ddb1acdc734f8274769c796a975e850bf
- MD5 a2b79e51fc792d9375b72579b517362d
- SHA1 86be1b855acc4e9b914b9d8af24e2efe214a2cda
- SHA512 67480baf0bf1680fe0fda247f1d51ecb50c57e3da94223c88487c7d3665780ed57181ba2be8bbdbf3aaa0412031b2e50d8d0e32672082011902f9d996e4c64d3
- TLSH
  T1B5F0AC6DA211C2E97EF22A3441F106D035E830FB342068D9C3F9329D712C492B82460C
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral29 behavioral30
- Target
  MousePrecisionHelper/Patterns/aug.csv
- Size 577B
- SHA256 f0c1f54c33381a5390a04fc2e137fbb0b115e7f1ebed60a58b404532f40bf8bb
- MD5 287e63d53fffdef8a0666dc0c0349f7b
- SHA1 e9f12868015657e4544aa100473db947c069d9bf
- SHA512 59a95d5133d07d9b6053f27276d4b1b4096b26bf512928dabe1fb895ccbe13e1049487b3a78cb4294f21e968c878b8ee70346d410a5c56ea0f088e2d6c9c50d3
- TLSH
  T1BAF05030C24AC3685C39337B45B82E147E6474AAAC3AEC52C686C004B1EC4D67067C49
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32