General
- Target mindustry-windows-64-bit.zip
- Size 95.8MB
- Sample260709-rl1eaaby3j
- SHA256 cd6982e8950bcadc995cecda9ce819110f00b474d3a70877f7284fbf1455da33
- MD5 ee3a3b1a51c5c74996867f9a3492280e
- SHA1 254961f2a9fec27149c0d300e4ece92967351067
- SHA512 df514e5103e6d6cf5ddefffd86986e19f089ad79132d7057ce92ab666255f81461a398f630432c794931e4508f225761f91286d8770f2ad770cdd27b2ccf44a9
- SSDEEP 1572864:tFIZ1sOQ7EWfT0cBguGOjCRJsZXckRs6vMwGNGYp+m3N5DIEHzfSyQC5x6CxKmid:twdQ7EmociWqyZMkRstGrmTPHzfXQC5w
- TLSH T14D2833E997752D41F712F1B06425E7299039C821D98FCAA7FFC8AB004FAD4EA6F04D85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Mindustry.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Mindustry.exe
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Mindustry.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
Mindustry.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Mindustry.exe
- Size 584KB
- SHA256 f9afb4ade0ba4d8cd758fabdb9cd76af2c72b59130140604b29cf02295b74569
- MD5 07f788dd556b612fd064a73913f82bfc
- SHA1 3abe2d614dc63ca4d6b9907d36d5c35bd54cf020
- SHA512 68de704e7248e647744a44c5cc46b08c97f5c80ae73e009b6c45367dd6691bb331b6d3cf7a0d4503c60be1361f59c734499c77ba1ea5b5b8448a44d5d3385e38
- SSDEEP 12288:cPpWdd4P5jtbIHMavP0JLk2KgszHpaHwZMTVLzRBYkd2pA7okT1KP:cPpWdd4P5jtbIHMavP0JLk2KgszHpaQE
- TLSH T145D48D2AB79845F5E0B7D238C8929656F7F2B4061A30975F43A0476F2F372615F2E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.