General
- Target FrameHUDOverlay_0.1.zip
- Size 1.2MB
- Sample260703-prnlkahs81
- SHA256 df914b28940b6091ab1a7052b388e8788cbf27d8b13a59d7ec7ecbe720a215ef
- MD5 e4339bb89a992394147c3211eb96baf5
- SHA1 8539a30faca858ef662e1c7f9a0760f682345ff6
- SHA512 aaf68f33842a1acd10525bd5618aa1458bce488ef3cc0d881513f32265d5fec0f4168f75fed4628267351b968a99900c1dc5f65dad7aed5ebb690ae1aa3d01b6
- SSDEEP 24576:bj2z+wXFcfkmbyfLcCRLYqRybT3/WbArYjdrC+wCpInkPPWFiLHkN:bqvc8m2fLTsLebmMJC+wCVPVHkN
- TLSH T1E3453348BF490E92C03B1614E08514CB84AD3D55CBB86E92F8DBB2F506DC6264FFB997
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ForgeMods/FrameHUDOverlay.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
ForgeMods/FrameHUDOverlay.dll
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Behavioral task
behavioral3
Sample
dinput8.dll
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
dinput8.dll
Resource
win11ltsc2024-20260630-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target ForgeMods/FrameHUDOverlay.dll
- Size 4.0MB
- SHA256 f6096f2b4433958d44508f77bd0c50b64dbe4739def473a954344f44daf8e6f9
- MD5 c44b455ecf454b3f35666379c7735960
- SHA1 efd899dbb40953bd8c55b6b34d1dcc4be8c84fd1
- SHA512 1bf6c99c3eae36e776f73823da765e2f7f449345ca316309ae0986baf2ada2e8d894c4f4a2c5693f07bad1836119f432dcd2c2fb8b262290dce17d5237001dae
- SSDEEP 49152:rG4gQCAulzbxKa9NiQhhK5mGLb4fzXgfsNkpYetYCjMxU0QTgXPap1je2mz1:bCfbvXimNzXgV/Yap1je2mz1
- TLSH T1EB163B43B5DB0DA9CEE6677461C76336BB34FD358A291F3B9608C2312D636C0A95EB40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target dinput8.dll
- Size 49KB
- SHA256 bb75fcf6f911e7ea706e1cbe7b4d6abf1fdf29f5255579c624e4cd4f2a5b4ebd
- MD5 9a0e491c24fd89a1c305bf8d586751c8
- SHA1 8cd0fff7ce1c9f599892a7a64dc63239f7653790
- SHA512 35e26bf4f869b13d0ea9e72cbbe2acd6648dcb61b51dd9699e25a73d483a6df0a2bceb518b398fa68e5383fb0bef3c7e53e871c010f3a4c5e6744accc5e6a42f
- SSDEEP 768:I4v0yRxQMpLQuxcfmIgFwEaUv2RMefSKASkz6VaLJWZe+IzcMyQW5xv:ZvpieIgKpMe4zLLwe+ucMtW5l
- TLSH T185336C0F7A9805F9E4AA817DCAA35E46D2B3B04607228BCF0360526E1F677E2597F741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10