Overview
overview
7Static
static
3NoLimits_2...ll.exe
windows10-2004-x64
7NoLimits_2...ll.exe
windows11-ltsc_2024-x64
7parks/Colo...l2park
windows10-2004-x64
3parks/Colo...l2park
windows11-ltsc_2024-x64
3parks/Colo...ew.jpg
windows10-2004-x64
1parks/Colo...ew.jpg
windows11-ltsc_2024-x64
1parks/Cont...ir.zip
windows10-2004-x64
1parks/Cont...ir.zip
windows11-ltsc_2024-x64
1parks/Cont...ey.zip
windows10-2004-x64
1parks/Cont...ey.zip
windows11-ltsc_2024-x64
1parks/Cont...l2park
windows10-2004-x64
3parks/Cont...l2park
windows11-ltsc_2024-x64
3parks/Cont...ew.jpg
windows10-2004-x64
1parks/Cont...ew.jpg
windows11-ltsc_2024-x64
1parks/Cont...l2park
windows10-2004-x64
3parks/Cont...l2park
windows11-ltsc_2024-x64
3parks/Cont...ew.jpg
windows10-2004-x64
1parks/Cont...ew.jpg
windows11-ltsc_2024-x64
1parks/Crys...l2park
windows10-2004-x64
3parks/Crys...l2park
windows11-ltsc_2024-x64
3parks/Crys...ew.jpg
windows10-2004-x64
1parks/Crys...ew.jpg
windows11-ltsc_2024-x64
1parks/Dive...l2park
windows10-2004-x64
3parks/Dive...l2park
windows11-ltsc_2024-x64
3parks/Dive...ew.jpg
windows10-2004-x64
1parks/Dive...ew.jpg
windows11-ltsc_2024-x64
1parks/Dopp...l2park
windows10-2004-x64
3parks/Dopp...l2park
windows11-ltsc_2024-x64
3parks/Dopp...backup
windows10-2004-x64
3parks/Dopp...backup
windows11-ltsc_2024-x64
3parks/Dopp...CE.tga
windows10-2004-x64
3parks/Dopp...CE.tga
windows11-ltsc_2024-x64
3Analysis
- max time kernel
162s - max time network
187s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260630-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/07/2026, 12:18
Behavioral task
behavioral1
Sample
NoLimits_2.5.7.1_Install.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
NoLimits_2.5.7.1_Install.exe
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral3
Sample
parks/Colossus/Colossus.nl2park
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
parks/Colossus/Colossus.nl2park
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral5
Sample
parks/Colossus/preview.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
parks/Colossus/preview.jpg
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral7
Sample
parks/Contributed/Fenrir.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
parks/Contributed/Fenrir.zip
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral9
Sample
parks/Contributed/Storm Valley.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
parks/Contributed/Storm Valley.zip
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral11
Sample
parks/Contributed/Valhall/Valhall.nl2park
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
parks/Contributed/Valhall/Valhall.nl2park
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral13
Sample
parks/Contributed/Valhall/preview.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
parks/Contributed/Valhall/preview.jpg
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral15
Sample
parks/Contributed/Venom/Venom.nl2park
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
parks/Contributed/Venom/Venom.nl2park
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral17
Sample
parks/Contributed/Venom/preview.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
parks/Contributed/Venom/preview.jpg
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral19
Sample
parks/Crystal Beach Cyclone/Crystal Beach Cyclone.nl2park
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
parks/Crystal Beach Cyclone/Crystal Beach Cyclone.nl2park
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral21
Sample
parks/Crystal Beach Cyclone/preview.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
parks/Crystal Beach Cyclone/preview.jpg
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral23
Sample
parks/Dive Park/Dive Park.nl2park
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
parks/Dive Park/Dive Park.nl2park
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral25
Sample
parks/Dive Park/preview.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
parks/Dive Park/preview.jpg
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral27
Sample
parks/Doppel Looping/Doppel Looping.nl2park
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
parks/Doppel Looping/Doppel Looping.nl2park
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral29
Sample
parks/Doppel Looping/Doppel Looping.nl2park_backup
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
parks/Doppel Looping/Doppel Looping.nl2park_backup
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral31
Sample
parks/Doppel Looping/FNCE.tga
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
parks/Doppel Looping/FNCE.tga
Resource
win11ltsc2024-20260630-en
General
- Target NoLimits_2.5.7.1_Install.exe
- Size 991.7MB
- Sample260703-pg4j2agz2s
- SHA256 d97f5ac0ae7f38033661a1d4b07eb24bea9773e90c47dde0a9d0923066bcd135
- MD5 a310c8f82d11a32ede198865f2ca00f9
- SHA1 e943ceb4c1d4b37448117bb205c9be827ddb6a60
- SHA512 5eafd8bd837f04d0a249ed6b81f4da17aef6ef4d3922beb04bd18618b05aa61cf654025c8de9580470e40215f0ae3db75fee21e73d3f58c660ae1c61a86baea4
- SSDEEP 12582912:Ys0KpH8oELbaSSf6ctKwC7vBb3gmxQ3X+jtCgnt7Yz07zivddrvp7N6suwLLBUh9:MUHXxxqbBbwmCX+9nt7Yz07Ajr1N6sW
- TLSH T176B93371B2E2CF6FE50A62B9E052556BCEBC72E0453F01F88DF20ED81C45BCE64955A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 5848 NoLimits_2.5.7.1_Install.exe 5848 NoLimits_2.5.7.1_Install.exe 5848 NoLimits_2.5.7.1_Install.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language NoLimits_2.5.7.1_Install.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nsq44B1.tmp\InstallOptions.dll
- Size 14KB
- SHA256 8f24c6cf0b06d18f3c07e7bfca4e92afce71834663746cfaa9ddf52a25d5c586
- MD5 d753362649aecd60ff434adf171a4e7f
- SHA1 3b752ad064e06e21822c8958ae22e9a6bb8cf3d0
- SHA512 41bf41add275867553fa3bd8835cd7e2a2a362a2d5670ccbfad23700448bad9fe0f577fb6ee9d4eb81dfc10d463b325b8a873fe5912eb580936d4ad96587aa6d
- SSDEEP 192:3Gs+dH4+oQOTgDbzuNfrigyULWsXXZF/01JJijnK72dwF7dBEnbok:3GvdH4qMebzPY2Vijn+BEnbo
- TLSH T1F0623B51638888F3DBD6013EB4523707AB595126B4925DE2CB271FCA6D3B18E3EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsq44B1.tmp\System.dll
- Size 10KB
- SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
- MD5 56a321bd011112ec5d8a32b2f6fd3231
- SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
- SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
- SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
- TLSH T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsq44B1.tmp\ioSpecial.ini
- Size 712B
- SHA256 81dc8395281544cc1324d6403d6957ae3b6c53b83c5ba7a3401c62516041a8b6
- MD5 09be43d664662ee26905f93120b98da9
- SHA1 529575c620f1214b44a0bbf60ed873f27d52b0cc
- SHA512 dd6c33ead0622867b8ec727ba929919b1428252aac7fa85bc8b9da333330a6ab8402f1751c2082e6b95bc0e600b7b0fc4e9bd6943dfa4d7160adbfff4ebc7302
- TLSH T1EA017098841FF399056010A6A0F937D2D7D12C2C47627CF6B0628C86B38D9D38AE9DDB
- MD5 SHA1 SHA512 TLSH