General
- Target files.7z
- Size 25.1MB
- Sample260708-pbqe8ags3n
- SHA256 12ebd07200496246998eb9980990856d04070d9aaca9b9af743fb0060bf74e38
- MD5 cb5bb113566f2ea953549712208ef487
- SHA1 d93cc98ad467936adbbe251c1662a8a704bf5d95
- SHA512 645b8e8983f5727a23e1559321ab31e53de72d768fe3fb9a7e265fd8320311f7b5890e6aa7ee6d371219467b8bf8bc8576ec767db38973bd56df74bf5becb24a
- SSDEEP 393216:IJxTzKUTYLd5bhiqWq8b8VTvZrepjz539DJiMnRu1f5yruc8/N4aZgeUd3XJ4nHp:IJ1zbshRrP5feCYRshyrunNUeUdYFL
- TLSH T1154733730533A31BC805A97438FC832CA03BE6E1D52DDE5CF57A6960C6E1E1AA277C95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Marisa Game.exe
Resource
win10ltsc2021-20260513-en
9 signatures
300 seconds
Behavioral task
behavioral2
Sample
Marisa Game.exe
Resource
win11-20260513-en
9 signatures
300 seconds
Malware Config
Targets
-
- Target Marisa Game.exe
- Size 139.7MB
- SHA256 f2cf66c69fffc3a6db1a5b1e6696082de53e6f5b31761059837e9ed5e47b5c1f
- MD5 c26886156d8358204c0e10f8495abc98
- SHA1 e6ca7aef48561ca3c9e7cd5acb44b6e81cb7374f
- SHA512 dbd0653e37b479a1d15882c317562d1c66bda071d6250ab7d57dfa8b327d5861e65d31ebcdace4dafb0896a07bda4c97893cc271fc279591d2fb39ce4e7c97f5
- SSDEEP 786432:PBdSr/5RVvsZXCZMeQ6mtYptgPV1XvNWt2Vt1vxdUKit/Rye2vuxTFmXc:PBdSL5jsZXoQXNWt2Vt1J0RyelTFmXc
- TLSH T1AD68AD0277F6A563D1679179469FA002FB31B0032734DAC7366C8360AF53EE46EBAB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.