General
- Target ShinRyuModManager-Windows-5.0.3.zip
- Size 45.5MB
- Sample260711-c56cbaaw7k
- SHA256 d4b1dff7225c16c77f5708e90239a047a478e7e0082bf141cddbf82f80e24065
- MD5 44ba87bab7c635dc6ad391868634e0e4
- SHA1 28d26e3ed6693ff3cadfecea2372bf7fbfa7840d
- SHA512 13730c1a41e65391ffc101f6b316b89bb956cd8f999b17b08b39b2c6e9b06655360bfacd3bca74a0b464290961c6429de79819b6b74948e9b407d9924534af52
- SSDEEP 786432:zRjR8UXV0zI8sA6QEjTUn7MxtGnAfhN5UnwkjSO0q1DYQrwFb/cXeP0yi34ym/Yb:kUXeEk6xjI7UCAfhN0SO0MDYQkFbu001
- TLSH T1E0A7335D3DA9EB4C64F6852374A07D864010D2B21DE4A3B1E04CD9B60FE7DEED2918FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ShinRyuModManager-Windows-5.0.3.zip
Resource
win11-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
ShinRyuModManager.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
YakuzaParless.dll
Resource
win11-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
version.dll
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target ShinRyuModManager-Windows-5.0.3.zip
- Size 45.5MB
- SHA256 d4b1dff7225c16c77f5708e90239a047a478e7e0082bf141cddbf82f80e24065
- MD5 44ba87bab7c635dc6ad391868634e0e4
- SHA1 28d26e3ed6693ff3cadfecea2372bf7fbfa7840d
- SHA512 13730c1a41e65391ffc101f6b316b89bb956cd8f999b17b08b39b2c6e9b06655360bfacd3bca74a0b464290961c6429de79819b6b74948e9b407d9924534af52
- SSDEEP 786432:zRjR8UXV0zI8sA6QEjTUn7MxtGnAfhN5UnwkjSO0q1DYQrwFb/cXeP0yi34ym/Yb:kUXeEk6xjI7UCAfhN0SO0MDYQkFbu001
- TLSH T1E0A7335D3DA9EB4C64F6852374A07D864010D2B21DE4A3B1E04CD9B60FE7DEED2918FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target ShinRyuModManager.exe
- Size 110.7MB
- SHA256 121d0ebb9003befe060caefd2a351ac73b758481babbaa893c989f89eb3bf17a
- MD5 086dd19ca30631b4d88b1b9b9aa01ca4
- SHA1 fc6b2e970e7559b31ea8407373c4af9e0a8d1756
- SHA512 0d8f8a42a641584e60e68a9b1566e4e53cc9838837d4f2ce0a24285740578deb0ab432c3cc45686dfac56500f69d26de6d4172ce42056dedc49f00fe42ff76dc
- SSDEEP 786432:786MRlys003YrFHmZlOH09TTbdLDMTHepf3:7+Cs00HZRva7ef3
- TLSH T14648AE15F3D8462AD56FC27CC2638116E6B1B8871721E7CF0498DAA92F63BD05B36363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target YakuzaParless.asi
- Size 602KB
- SHA256 8696c0795c15d969163a90d2725aad0c519312cfedd71d6e1754ff9a4c8efaf8
- MD5 be4bb4f2e90d79659dde95f643605664
- SHA1 bebd9ce683d02a1d20f0e6b9df7d460a2506aacf
- SHA512 d619fc5c14869ec2045aa417421f3feff5edb939b93969dc6f6bfe5ce4a561c7e3e02845828cd45761b37ff954c22f3eaa2b8265398b8e43505fa41526b179d6
- SSDEEP 12288:W7937PS+HSVueH0mGbprKKGEPj2vbCUAteVVCF:WB3zS+Hbm04KG+4CUQ5
- TLSH T11AD48D29A7A404B9D1B7C278CE870517EBB27C464371AADB03E066A71F277E0573E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target version.dll
- Size 352KB
- SHA256 79c74febb21082474c5dfff54fa4a2514b1fc3b6e02245cf491eb6f2d055bfe5
- MD5 f2c24c1b702ea174dc1d62d1cecff058
- SHA1 c1cd63beee7bdd44128acd503005e48c9d717dcd
- SHA512 f4bf415ca2e00cdf2634f231fb60e412ea0f4838c35f99ac6506efe9f544a80c832f55eed384e24a40f939fb63a4a6dc035de77d39b2093c01e12d3cbe53da07
- SSDEEP 6144:7QNCYprhVYd1fazli4b0fekwvSFsaJ6WbyIV:QtVYd1y5ikJ0Fsak2
- TLSH T1A9744A85BB9402AAF976807C8533C60AE67AF9044360A6DB33B146595F37FD88D3DF90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10