Overview
overview
8Static
static
3Config.exe
windows10-2004-x64
3Config.exe
windows11-ltsc_2024-x64
3Data/Impor...ext.py
windows10-2004-x64
3Data/Impor...ext.py
windows11-ltsc_2024-x64
3Game.exe
windows10-2004-x64
3Game.exe
windows11-ltsc_2024-x64
3Game.ini
windows10-2004-x64
1Game.ini
windows11-ltsc_2024-x64
8GuruguruSMF4.dll
windows10-2004-x64
3GuruguruSMF4.dll
windows11-ltsc_2024-x64
3Official M...on.url
windows10-2004-x64
1Official M...on.url
windows11-ltsc_2024-x64
8General
- Target The Imperial Gatekeeper Animation Mod v1.76.zip
- Size 134.4MB
- Sample260703-vcrmkacz4v
- SHA256 c6e8e30a7f6dc9292282dde1fad447b25f8477fb3b3efeb717e8c5cb63df753d
- MD5 3a7be4ef691d91cfbcaa4f76bb2660e3
- SHA1 188e79ec3d6910eaa5bf96de0b34ec7e610cbef1
- SHA512 7645a5e602cc6c6dd8336800535fa6876bfa6c6f3a69196447e665959e6bba36dfd429eaca496a304634122cf518c221d1eab5cf0348ba85e152615bb4f63bb0
- SSDEEP 3145728:PpVW4dXFKGwZCs4/fmw3HHlfTJ45eP8FgaWa9gb:P9Xl9n2FgaWz
- TLSH T1B56833A8E3BA90D6D513DF7596DE9109F92962C3D2F0770F0768C420DF862FE8B91216
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Config.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Config.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral3
Sample
Data/Import/convert_export_to_usertext.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Data/Import/convert_export_to_usertext.py
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral5
Sample
Game.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Game.exe
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral7
Sample
Game.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Game.ini
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral9
Sample
GuruguruSMF4.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
GuruguruSMF4.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral11
Sample
Official Modding Documentation.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Official Modding Documentation.url
Resource
win11ltsc2024-20260629-en
Malware Config
Targets
-
- Target Config.exe
- Size 292KB
- SHA256 283f1e94ab5397e329366f30ab8e72ddb0098f1ce424c7f8a549d698a7fc00eb
- MD5 1e52c9cc6e46cbfefd1ac5d6e45471a7
- SHA1 44d7722e711db3c0f7a5d84620f4e0cf9ca580e1
- SHA512 d3d71cd9d519cd9dcee3f829725dea702829d21c64292fab64f26b84cc44c220008da5aa087c25e17f76f61ff1ded27491e7ab4083f77efda908b24890a1582f
- SSDEEP 6144:n+WW5qpjzXsDahlnQNWfbCEl5PHasRmB6ZVLBX:+WWIpj7nQInhmcZVL
- TLSH T1D8546B02B7D08536F96656380DB64A5252EAFF211B3CE1CF5B853A1FED326E1803D786
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Data/Import/convert_export_to_usertext.py
- Size 3KB
- SHA256 06f2f177137848f58954471fc70510d4e710c420368402d4faf40bc2354d0ae2
- MD5 b95753f07f47548bfb44961e7964466e
- SHA1 4ae1e30213b2ff4b8cd8b3d785bd107128b39190
- SHA512 606c439aaea1162a2f2f10193e230e3e70889eb45f69460ca4d7166e64c1c0046e1a966e63691d527ec69a73daadb772d1aec3b87a29c0565ceca05f5f69f680
- TLSH T1AC61AB7BCD958F2161F48224C1A36105F67A8B9F2105839BB1FE9E5D6F390353B8E18B
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Game.exe
- Size 6.5MB
- SHA256 6c8f2d8e82ecd6b763b96d65b10686e7c3f511027af5b1141c4c1ce1a808022f
- MD5 d5a7e74da1f51a5403f025e6cd22f0a8
- SHA1 e90bfc7835c774a70a11fa696f932d1b6794f642
- SHA512 8601c8bd10c61d88c8899b34e4edd67e6d440f22d6b82f91e093ecb15fd1e0bc757628628a19fe19bd18f6dec63459246db3282948eace9f22425c44044b0d6c
- SSDEEP 98304:xhKCxRqnWzPeAzOJvs4icrGkhi92UlEYEl8h3I+w5J/:xhKCrqU7zOJv1P6kZrl8h3I+CJ
- TLSH T14F66BF10E6C3A0E6C9A5087041EFB6BA56303F254F1497D3FB90BF6AB8717D1983629D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Game.ini
- Size 156B
- SHA256 c70024e7a4c5c5df510f971871df45de425cceebfb45a67c298aa21fe4f84b47
- MD5 f3542921b02fa39375166482e08428c4
- SHA1 2442c02875690467cb7d11e8e6755ffd5ba8e64c
- SHA512 f41ffa228b18ef42d492518135a125ea45f75e6bbeaa3e446232a545f67a5f04d14951519528a64dfb13658e920ad1554e71c026153d68fb0afdae53a55dd55b
- TLSH T199C08CA340285C1822FDE0C6B67A909222ABD6E0548C393A0A30197B0E6A0432AA8288
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target GuruguruSMF4.dll
- Size 144KB
- SHA256 0b42d9faacb31da4c44b92dcba11434c433726ce4baad405aad21aa7807779c5
- MD5 528ac7e063e57562df810a91d6b74cb0
- SHA1 44db1d23eb183e44574bfc95b09f5853e5b8351b
- SHA512 e3d033076d14b6ca464d2bbf9c79bb53c719c43afc307d8a9e11b9a575507e1da9b1bf723493c380e8c2d271054c349fabfea7038c274d38108f0ffdeada6813
- SSDEEP 1536:TXBpovdyQN3Rml4Qg1PrkYNh3rVAPE555D6EiS/ZL3wutO7srl:THL4bBtN0P86EZLTtO7s
- TLSH T17BE38E227553C4B3E48F463D84959B556BBFA543EBA002CBFF640F4E49A02D42E353E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Official Modding Documentation.url
- Size 141B
- SHA256 10b96c4cf879d81604be75adf9d9f3e8878b5f4e66a590aa0c1029360ebbf913
- MD5 736a8dd47d19b10c85d386ec5128f1d9
- SHA1 e1cd8bc1acb4f13b81455fbb5e2e2d506cba4b6a
- SHA512 1c36057dfceabd8650dd66a78b8b958f88222cbb5ae3a092647777775dfd9ae38de9726c7152f1f452cebc93bb62b14f491be4593ac006d16959a6c522677961
- TLSH T1A4C02BAE049E43A4D002595B2070F84C441E75B008D2D04C2008CDCF0C0C0C2C004775
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.