4da9db1709f7842fc34c0fcc50250609f6071b12e1b686803ab463c0066453af

Resubmissions

10/07/2026, 10:37

260710-mpa7cahz6k

10/07/2026, 10:24

260710-mfmtsaav918

Sharing

Copy URL Twitter E-mail

General

Target
Geometry Dash REAL.zip
Size 268.1MB
Sample260710-mfmtsaav91
SHA256 4da9db1709f7842fc34c0fcc50250609f6071b12e1b686803ab463c0066453af
MD5 d5c153097cb64c7c115bf4583933384c
SHA1 0febe36c4b07ef13a1259d3171d4ecc193a88849
SHA512 ee5f5023b8e60e42b34da519ddfd3e59e11d39edf6f8469679dd11d4d1dce765091fb3bd6b01005332440e1a3db519cd12ab2690b5918933e56121d9c3efa47b
SSDEEP 6291456:e5xj2qwQ6EvDsVyvit+B0koEEIGGVhGT2:e5xj2f/VJtC0knEI7hf
TLSH
T1ADD8333395E8403BC3B1E77A80301593BDABC411D63EA11ADD6163A787F79E8BB8161D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Geometry Dash REAL/GeometryDash.exe
- Size 10.1MB
- SHA256 a48650af2785567749c8e5dee1433acf71ddfffc3f602a8c0e3dbcc817098131
- MD5 a0cf271bbf8d028b7ee5fbc429fce92b
- SHA1 9604147c8a4cad0dfda9ef8d1de2d759e0e0c609
- SHA512 c771393a5f9668cb55a006b4e51196eb8191b75b57461077ab37b5cc6fe83f7ce054c22bdcb6ca46ac9c64dea7555d94df627b85b2483db2696ef4ce9e413da0
- SSDEEP 98304:6CBk0KiW1Ih0LRCh5jtk0LIQR23zkKmo2VxfS+VxfS:6CBk0KjI+RCh5Bk0LIQg3zkKX2LfL
- TLSH
  T19FB63961A72425C7D0D68678C219F932F97F7CC8E230649309E0BDA3BF475A32EB9915
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Geometry Dash REAL/Resources/xStep.mp3
- Size 1.3MB
- SHA256 9164bf3594a2b0d2ce80e80927bab95d8cbc2e80f5a0198112c178957b0a1621
- MD5 57390e094c37599a790095af692cc039
- SHA1 3d08f483e1a43f029164eb06d89693446f314f48
- SHA512 54ee65cb2965c89c54b85358e0769bd0d361f804a7c29183d11d89e6fffe2374016b68affcf7928f76e2c28c506103f6047f09883537607476c0b47062a07fd8
- SSDEEP 24576:C/QH9dD0uc1tKjUvoCcHvtui+CWoIADt4BqgepaI+lUlAOhYfe4gyAKNOR7rFUGM:C/M5ueUvodHvtuYWDAmBFeP+lIhYfvgY
- TLSH
  T1BE553315840CDECBF98D25306693B392D2525DEBA4063E1E39CAFE4393F3A05BB67614
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Geometry Dash REAL/XInput1_4.dll
- Size 60KB
- SHA256 e3233365b9515b7196ea35e68dbb1e76da0989f984b37f925b2b1cf359889786
- MD5 b4d6fe1186f2c864fe4285fcf3ba7416
- SHA1 9475ace32c10bdc0018203c999d62b3fadeb45b7
- SHA512 c199e0f72bbb27c538cd847bbee1181f7a89983ce1568cf11aa7a49bfb5d6ad1e35e1d3f0acf62b87c4104a3cf9933fac1cec7b3043409e1bd48beb3f2c3cc3b
- SSDEEP 768:eA1MLClmfM9lVQe19e7y0/cNSYmmx2TXzm62vk220gI9hvi2XzsIWfn:j1MgB19eiNSYmhTXzqnJ62XzsIU
- TLSH
  T16953280A7B8444A9DD47C13EC2070A569536F59A0F31A2CF4396A32E2E357F86F397E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Geometry Dash REAL/fmod.dll
- Size 1.8MB
- SHA256 ba377c62ad807fe17e4177b46259237035e544a5893367e296fbae07b11b1bcb
- MD5 09560a006e018382db7c4d24fc0ec928
- SHA1 8cb9273f6e9a5d5622bdf97b06557fba0e5d0b1e
- SHA512 f4dcf43c0e2a2de66c6dc5c53f8ff70c6755d1954313ea52655495096c230c907060a8f1f3599b934400b9c2a39e34d0bba1b11c4a9154205f35d4d4d1057506
- SSDEEP 24576:kowzMVNrxuvLxM37D/DgZj1CQ4NBIHSOqB+wxdZG3+/nL/5mRBJAxLJZUmgRPh:kowzM8vLi37jDQ0POmC+/rWeVfC
- TLSH
  T1D785BE85B1F580ECE427D13CA12BFB1BF672348407206ADF47E045A96FA3BD16A7A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Geometry Dash REAL/glew32.dll
- Size 492KB
- SHA256 842a3f20177eb44ac0413116c66430f9508bf88a05fcdab14284a566d5d0774f
- MD5 0a3e7e9bcc0471f9f9d47dbe631e7c52
- SHA1 94f7a7e5ab3cba29ca0bf9e39f99cbbd4016036f
- SHA512 bf2a3e213b589e2e7a0f35d8258ea59b837c3044665d2cc78e9106f801b18a0d64e5f91ffec5a8829c39a69bd37ade5a871ad6c67d23f02397aa224a526d3099
- SSDEEP 6144:EkI4/e2zcb5gJ0rNxITpz0km2AiSu0GW05TiZ3VyfJt4QqU4qoZU8rnzMoL3BhQm:BJzcnkz0PZvDnzR/FJxl
- TLSH
  T11AB4A1AAB45F4B92F503703159529F9BC239E444B02EA39BB047344B3FDE79173683A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  Geometry Dash REAL/jpeg62.dll
- Size 789KB
- SHA256 de96d250f25fd6a50add6cea1e6abdedd4e56c05aebd1706e8255d5a4e0b2f1d
- MD5 4f3fa0a8560db931d3fdf18b344e49c2
- SHA1 2eb187fe495e58ea8c1058fb0f923a18592358ef
- SHA512 387a5613f6f0ea9330021a3b59edc099de02cfc3c9c66d5a2a42cd3e613f5d271d014293b2364c6ce11bee39071d9fa09bebbf4bab3bb9fc62f1496249b73a13
- SSDEEP 6144:IhG01pcez20aA7lISOd9Zn7TJfnn1CnE+qWxec0dOT38VuGwjt20Znh00URbkf1b:cg0PISOdrn7Tln1CE+Lqz5EUF
- TLSH
  T19705D203F2655C87C7E28034DE6AD975EB547C2D8BF746F7B080BBD93936AA07922640
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Geometry Dash REAL/legacy.dll
- Size 98KB
- SHA256 0e7cda5a19c5313666db3ed74aac84b3d679f8f0704a03044b988bbfa9857042
- MD5 fba2de9746e180ac2df3a7b4ed15d79a
- SHA1 afccbb71b773c5c7eaa4cc7e88eea6419d168b3a
- SHA512 66a39df5af1bfbd1a92ac4e0af69563476d7bdc6a79f8997444e6b97548984350453544a1186114de46136b9eee3dc31eeff78616b34cee7fb94a196a6fc53be
- SSDEEP 1536:9irxRfI8+3liz4ytH/vLXL0XcrsEuNvgb5hmKZ99HbIey+X:9irxRfIF3lizJNAE997uO
- TLSH
  T121A3E702BAA110E9CD65917888F78D26E3B2F87517A147CF0B78622E1FB37C42E39755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Geometry Dash REAL/libExtensions.dll
- Size 290KB
- SHA256 ff438a2f452ea77a5f137515930aab946477a6de0ecea6fa5db32d6c2a8ad4c7
- MD5 b4089b73a33b6fef6145157a2c2d1bef
- SHA1 07b9a4c19904351e25edbe6319db44c8502fbf79
- SHA512 9b138acaae5c74f52c91e2c1e71cf104e6998dfd648bb839511c065630e8d6ed0e097e70da995f2ec7dc12331b4f8908ac236415af93819e76774714b117cacb
- SSDEEP 6144:rIEDf3OLxBjgyKCFkZxOH2Q0O3cZDSx3JzwyV6:8E768yKCFkZxOHL0oz
- TLSH
  T100548107B26A1997C4EAD97FCA378404E7B7B0515B03F6DB01C186A63F933E0AD7A521
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Geometry Dash REAL/libcocos2d.dll
- Size 1.7MB
- SHA256 c67976c6d4ce100594dcb7ca9d9461c89022a3b2af29b056c708504997002a1e
- MD5 2279e2d2c374d74491a977d1784a6288
- SHA1 fcebd51105686f0357477d89994b7eef4e0ed26c
- SHA512 c81aadee284598c1dbb13f72c4bdb6d61225531657a11a614734b43806c8e276956d50747cd625873cdf088f89f6572ca378f31c9c204765079f7314c25d8829
- SSDEEP 24576:AH37BUJ2oz8ENBUByj0aFs7ieVwQYOVUoE:mrBUkzENKByj0aFMVwQYO
- TLSH
  T173853A46B36A48E9D5A6E63BC89B9C1AE5B3F0100793A7CB15DE02DD7F537D0047EA20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Geometry Dash REAL/libcrypto-3-x64.dll
- Size 4.4MB
- SHA256 c5976bb8527b63d8667891da7807555b1941d44e1c0bf202c62c72212794535f
- MD5 1aff0eee5de8a85ff2ca71dcc5a07eb6
- SHA1 ddffe84de8fe6becbd30811bca8e4390e584d3e8
- SHA512 686dba07e3d474cfcbb57997fcbe746da0f493abd5e2d056fa41408ac9bdeecbba816a5d1e91d33a6a35564bf0bbeba913b6e3894084a9e0496962f9c90723a0
- SSDEEP 98304:Hc+54J+7X7eAoFFujyPkxx1CPwDvt3uFFZCdo:8W4J+j7eAoFFujyk1CPwDvt3uFFZCdo
- TLSH
  T1FB269E69A67C005AD86A92BCC2C35227D371B91153F05BCF6E6886FA0F63FD4267B740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Geometry Dash REAL/libcurl.dll
- Size 527KB
- SHA256 3ffb64501f5dde0a7fd817bea0bda3e470fa58c6ccb7500e1b3758ef316ff396
- MD5 95b7db05e0c4b7d08eedb426601249a9
- SHA1 99efb20deac3984fe941471dafcd80823beeca54
- SHA512 124e1fd8be2105d3d0b81c061769de8987b775da69b8eec77a92f9f60ffc68a69f0451c6d68dd3031cb6c656256e1882468f51c49d2750d0624fe0010888bd0e
- SSDEEP 6144:0FeRbBF+Wn1uLLEQi5HDusWCG7yyWzIcM4c75pPe27VtHwFgID3xAucFHegrh:CaloiTWCGuyWz/+5BeWVtHNHe
- TLSH
  T197B46C56B3B417A9E167C13CC6578603E6B6B0552321A7DF13F0CA7A1F13BE2663A360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Geometry Dash REAL/liblzma.dll
- Size 181KB
- SHA256 b8725ff8b702429be2ccd86d5b91099f08ea7427708348b8ee99566b295d1ee5
- MD5 58e1375c32569cae6f5d6a05e86d8b4f
- SHA1 ebbfb0b512229be7c4fe1697b84729cd34b9b113
- SHA512 9bd8adc69391235c3131ce281610fdca161fa57273d98ca1af05912e2fb258193f2630e78c80556834ce776eff4eda6ca23b6d2ee49f9e9dd22eab74343c890a
- SSDEEP 3072:neVdvoE839PToIqGnN6zO+IIVH7agXv5oi8JBCREQuI9mNofZOwDvt:nMvtyTTqk8Oe58JBCRpYOfwwD
- TLSH
  T1A2042895A694E0E6F2678C38CA674B43E7F27404031096DB02DC837D2B6FBE5663A317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Geometry Dash REAL/libpng16.dll
- Size 191KB
- SHA256 b8092ba55446324a412e61235d09e218434a9978ff8d2bfe21ef0c63f3069d4d
- MD5 258fbc7f31d7315bdad87fe8142ae7ff
- SHA1 d951b937b655951d29580987dccbc823bb4c8358
- SHA512 dc68564b1be0d0fe4480759839123916f4d010fc2db1711dac5d91fe739a80af56958f183d66f2ab5baa7d0603d6fe344b2af8d208e3377eb6039cd919e315c9
- SSDEEP 3072:mM2JJJP6wb2cvxxkZ8kr+o8SlU18956XTqFzSxIwJfGD1vjTWelkRK:mMOiu2czBoc18956XWzUpJemelkRK
- TLSH
  T1CD148D8BF1641479D997C03C8556A117D2F2746813609BEF0BD08FBD3B23AE97A3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Geometry Dash REAL/libssl-3-x64.dll
- Size 761KB
- SHA256 1bea1193f8f103c077cc09f913216685de246bf9b5234ea89976d07ee4d8f7e5
- MD5 a6d66ecdc2da250500e12bb26666ce5e
- SHA1 0ddd69b5b48e780e17f3fe53651a72952a695738
- SHA512 dd4bb420898f244b80e4501da63ff1957aadbb584b913979be6c93cab4bdcc10f271f029d00c2a16185182c1e3390a903518680b11db89aa5c6495087ed63311
- SSDEEP 12288:yIvndoeLxJafxl/79SHDdD+3YTRiNWMcdEVB3:yIvd3xKleJKa6NcdEVB3
- TLSH
  T12EF43BA9B7B8159CD876C13D86538623E7B6B4163370EBDB0B648A760F23BD4263D344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Geometry Dash REAL/pthreadVC3.dll
- Size 60KB
- SHA256 7e6417c37145bcb72efbcb97053a793ea92ac3efaa93673b1e4b578be3501ff3
- MD5 f988de95c6730cb31beb3da2ff402a9a
- SHA1 1ca50300d984f52598678e3373efb5c96b8ec8e3
- SHA512 e2ebd9e0bee83b58268c74dd6da65c00e5fdf5b3de642e56704186c01da4ccb79e01aaddf2112a5087f3ddf20654147b889ef1d8a1ee8158a502c966d62d696f
- SSDEEP 768:EYsfSkT117VfM0jqUIeO8l9Bv3NiS34Q65jjGFwzHgpElIHQO:EYsfv11xDlLRV6JBzHgpEAj
- TLSH
  T130531987121811F8F5638434D1A66286D273B81B53A6A6CF93B0CB171B7FBD2DA7C781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Geometry Dash REAL/pthreadVCE3.dll
- Size 62KB
- SHA256 49fd35b5d137aa20c97edd9542e9d26072c6668d7769694694a73d7ee9840bae
- MD5 e8ece83e33fedf35f9c68900f7502d6a
- SHA1 148452db5d9015f9748a8fc93cfc0a9bc37ef8e3
- SHA512 21301b3869b7cf3bf8b02305701547f2ba39c6e4f48c38c0867fdd8791e5e0cfba7893fbad07c1efccf5eee0cadf00e3c43731e36cd8d57b46f9301d5dfc8bb5
- SSDEEP 768:B37yC+XiXc4Weo33wY3mGEvh/s+NS7fi72HHnu4iJzXdzHgprXO:12CRTe6vhk2S7fi72ubddzHgprXO
- TLSH
  T14B533A96526801F8F5638434E1A65682D233F8075367ABCF83B0CA1B2B2EFD2D57D781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32