Analysis

  • user interaction
    yes
  • max time kernel
    119s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    15/07/2026, 01:53

General

  • Target
    Box Fights Champions 27.2.5v.exe
  • Size 311.3MB
  • Sample260715-cbacsab12x
  • SHA256 dd85d4dab06ffc99ad8c7ab49b1b53a2ed6782b151104f4ea54c2b15d7c26d7c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 48 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Box Fights Champions 27.2.5v.exe
    "C:\Users\Admin\AppData\Local\Temp\Box Fights Champions 27.2.5v.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    PID:3016

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Box2DBackground.mvx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\Box2DBackground.mvx
        • Size 102KB
        • SHA256 d7da690ccc3b78f930e4086b5db1a8f69d5ae3148ed80964c5275376757fd65a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Box2DBase.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\Box2DBase.mfx
        • Size 291KB
        • SHA256 2eae40d631ad5a31e7e45063e1b011f2eaaaf8a41449ba45cd83287b989122c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Box2DBouncingBall.mvx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\Box2DBouncingBall.mvx
        • Size 137KB
        • SHA256 d73d3b21b3f14d833cc7f0cf6fd152cde4de66ca4eb7c5da6a6b618ac84e06ef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Box2DParticules.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\Box2DParticules.mfx
        • Size 129KB
        • SHA256 f1ae83fbdd9b16bd9aab495c70b2de180333ac3fccb7a7a7af9585f23bf3c9ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Box2DStatic.mvx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\Box2DStatic.mvx
        • Size 130KB
        • SHA256 3a146beefa66b471a3e8ca2e38c64a5dd4a2d17a94a728543891a6450a20b7a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        GetNSetMouseSpeed.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\GetNSetMouseSpeed.mfx
        • Size 116KB
        • SHA256 bfa435ea7fa61d3bdf081c426a81645911326883fd407fe1db7a5e7facf3dc6c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        InAndOut.mvx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\InAndOut.mvx
        • Size 68KB
        • SHA256 678073eea715bdb105d7316a2ccbdfbf6185b6bd23c3cd9528ebfeafb9ade716
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Lacewing.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\Lacewing.mfx
        • Size 215KB
        • SHA256 50fe75b79197c5cff2d7f256ffff8d9f9d58e66c90f9fd00fd7aa4688c7d2e5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Layer.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\Layer.mfx
        • Size 140KB
        • SHA256 a223f59e510ccfbee3948106eee6a143e163440fb07c71425b1934d840b455f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Platform.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\Platform.mfx
        • Size 21KB
        • SHA256 722e0aeb4d6424e95df58c01e5b787a7bcc0b1e1f1c0cf86b18388c42980cfcd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        XBOXGamepad.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\XBOXGamepad.mfx
        • Size 83KB
        • SHA256 c5972ea4bfb176e250cbc36d38661e5fd1be47ca235d2032a174097a9b006172
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aviflt.ift

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\aviflt.ift
        • Size 24KB
        • SHA256 cb5f43c24df39973b983b7fda4abcef60f425061d880c7dd9514b501b84790f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bmpflt.ift

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\bmpflt.ift
        • Size 24KB
        • SHA256 02d03c4847e34c9029cca452e37ada5ef40167406d4474a9393e11aace024c3d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ctrlx.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\ctrlx.mfx
        • Size 44KB
        • SHA256 3407eb12f6bacec5ebd4df96ff3fd34741a3919fd46c2ec527364c5f1e753a65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fliflt.ift

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\fliflt.ift
        • Size 28KB
        • SHA256 4b651eaa60da09038984a9b7027826941f61f6da58d3f57d11349c8c1896a6d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gifflt.ift

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\gifflt.ift
        • Size 28KB
        • SHA256 8fadc250c2afc00b0430c5df576cfd2d444367ad928027334c5d03829241cf92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jpgflt.ift

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\jpgflt.ift
        • Size 96KB
        • SHA256 5bcaaff4c698581603d4165308260412b38ac6cf708486b53bda3bc76241098d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kcclock.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\kcclock.mfx
        • Size 110KB
        • SHA256 ec74ed51618143a66bb19db36986eb7cfe0c7c42b1a6cbd25478ef0e13f7591a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kcedit.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\kcedit.mfx
        • Size 32KB
        • SHA256 1fb56c1a5fb313c8c51fead10472566328c9260aacc72aa8dde8d345acf53203
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kcini.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\kcini.mfx
        • Size 114KB
        • SHA256 d1471b2685d45956c323baa2cab11dfe479eb1021f04e2949f03557527c5fc84
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kclist.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\kclist.mfx
        • Size 32KB
        • SHA256 c83bcec56f1666d6871e077cc54d0ee7f6462773c03afbb301b9180a4ad0a31a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kcplugin.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\kcplugin.mfx
        • Size 24KB
        • SHA256 10491218743ff2421d8d5cbbe622afc23b2256f27cebbd5ad6f035d914b9a2bf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kcwctrl.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\kcwctrl.mfx
        • Size 79KB
        • SHA256 a0ada42e3a4760097c1c2f98905f12b19de47159543aa21e1c604dbcac7337f2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mmf2d3d9.dll

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\mmf2d3d9.dll
        • Size 1.1MB
        • SHA256 4971b2294b825196a628a0a6855a14db99b491c66f39b046055f39b6dfbfc110
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mmfs2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\mmfs2.dll
        • Size 510KB
        • SHA256 987a24a65778ab670d4b5eafed78b7daef7a9d8c83e1899b2356601de900ede9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mode7ex.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\mode7ex.mfx
        • Size 37KB
        • SHA256 efc61853b403d5351898dc1ad96dcc0315d02bc41baf6277f49e8f18146de99e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mp3flt.sft

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\mp3flt.sft
        • Size 24KB
        • SHA256 ddeafda7b28bf7545e3ba164aa4a74219eb961c36bb974e0f5085a07daf18f44
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pcxflt.ift

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\pcxflt.ift
        • Size 24KB
        • SHA256 c9e1db8689c11a87f9ab30ebc705eeccc0fbd909ca493a6f589d6a9a5c2a1b15
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pngflt.ift

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\pngflt.ift
        • Size 288KB
        • SHA256 df948630fdb53ddad68d66994f5d2b18a67df32478b6b8b3720c28f40bde7b1f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tgaflt.ift

        • Path C:\Users\Admin\AppData\Local\Temp\1d28eff9-f9bb-445d-831d-33bc815b13a1.FusionApp\tgaflt.ift
        • Size 24KB
        • SHA256 756725f247592504d42c67257c3957e972ee490af06f12b00467b389e0ee6bbc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BFC_ANDREAS_ARK.ini

        • Path C:\Users\Admin\AppData\Roaming\MMFApplications\BFC_ANDREAS_ARK.ini
        • Size 224B
        • SHA256 108454260b7e3f9b58d032a97b485406570f8be458a5b8bcf705c0b2d97d4e68
        • MD5 SHA1 SHA512 TLSH

        memory/3016-124-0x00000000031F0000-0x000000000320B000-memory.dmp

        memory/3016-110-0x0000000003050000-0x0000000003062000-memory.dmp

        memory/3016-70-0x0000000002F70000-0x0000000002F92000-memory.dmp

        memory/3016-164-0x00000000049E0000-0x00000000049F8000-memory.dmp

        memory/3016-78-0x0000000002FB0000-0x0000000002FD2000-memory.dmp

        memory/3016-51-0x0000000001740000-0x000000000174C000-memory.dmp

        memory/3016-63-0x0000000002F20000-0x0000000002F69000-memory.dmp

        memory/3016-116-0x00000000030B0000-0x00000000030D4000-memory.dmp

        memory/3016-132-0x0000000003220000-0x0000000003242000-memory.dmp