THUKUNA Nomad.zip
- SHA256 2ac703f0356ba859567b53faac5451f5815315726f25ee339458d0d89013b2d7
Overview
overview
3Static
static
3THUKUNA Nomad.zip
windows10-2004-x64
1THUKUNA Nomad.zip
windows11-ltsc_2024-x64
1THUKUNA No...b.json
windows10-2004-x64
3THUKUNA No...b.json
windows11-ltsc_2024-x64
3THUKUNA No...e.json
windows10-2004-x64
3THUKUNA No...e.json
windows11-ltsc_2024-x64
3THUKUNA No...h.json
windows10-2004-x64
3THUKUNA No...h.json
windows11-ltsc_2024-x64
3THUKUNA No...ad.dll
windows10-2004-x64
1THUKUNA No...ad.dll
windows11-ltsc_2024-x64
1THUKUNA No...e.json
windows10-2004-x64
3THUKUNA No...e.json
windows11-ltsc_2024-x64
3THUKUNA No...e.json
windows10-2004-x64
3THUKUNA No...e.json
windows11-ltsc_2024-x64
3THUKUNA No...bundle
windows10-2004-x64
3THUKUNA No...bundle
windows11-ltsc_2024-x64
3THUKUNA No...d.hash
windows10-2004-x64
3THUKUNA No...d.hash
windows11-ltsc_2024-x64
3THUKUNA No...d.json
windows10-2004-x64
3THUKUNA No...d.json
windows11-ltsc_2024-x64
3THUKUNA No...t.json
windows10-2004-x64
3THUKUNA No...t.json
windows11-ltsc_2024-x64
3THUKUNA No...bundle
windows10-2004-x64
3THUKUNA No...bundle
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
THUKUNA Nomad.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
THUKUNA Nomad.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
THUKUNA Nomad/Effects/Effect_ShrineNomadSpellOrb.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
THUKUNA Nomad/Effects/Effect_ShrineNomadSpellOrb.json
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
THUKUNA Nomad/Items/Item_ShrineNomadDismantleSingle.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral6
Sample
THUKUNA Nomad/Items/Item_ShrineNomadDismantleSingle.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral7
Sample
THUKUNA Nomad/Items/Item_ShrineNomadDismantleSlash.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral8
Sample
THUKUNA Nomad/Items/Item_ShrineNomadDismantleSlash.json
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral9
Sample
THUKUNA Nomad/ShrineNomad.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
THUKUNA Nomad/ShrineNomad.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
THUKUNA Nomad/Skills/Skill_ShrineNomadRuntime.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral12
Sample
THUKUNA Nomad/Skills/Skill_ShrineNomadRuntime.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral13
Sample
THUKUNA Nomad/Spells/Spell_Shrine.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral14
Sample
THUKUNA Nomad/Spells/Spell_Shrine.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral15
Sample
THUKUNA Nomad/THUKUNA Nomad_unitybuiltinshaders.bundle
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral16
Sample
THUKUNA Nomad/THUKUNA Nomad_unitybuiltinshaders.bundle
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral17
Sample
THUKUNA Nomad/catalog_THUKUNA Nomad.hash
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral18
Sample
THUKUNA Nomad/catalog_THUKUNA Nomad.hash
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral19
Sample
THUKUNA Nomad/catalog_THUKUNA Nomad.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral20
Sample
THUKUNA Nomad/catalog_THUKUNA Nomad.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral21
Sample
THUKUNA Nomad/manifest.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral22
Sample
THUKUNA Nomad/manifest.json
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral23
Sample
THUKUNA Nomad/shrinenomad_assets_all.bundle
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral24
Sample
THUKUNA Nomad/shrinenomad_assets_all.bundle
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target THUKUNA Nomad.zip
- Size 160KB
- Sample260719-drfeeadv51
- SHA256 2ac703f0356ba859567b53faac5451f5815315726f25ee339458d0d89013b2d7
- MD5 726001c074a198f389f7407ac98a8ded
- SHA1 d479382bcffdf97b390e8b83bb258fd1e52d3bc9
- SHA512 d773a6765775958f76564f60ccf2e84469794755d141195414fef3cc528a84fd3701a9386ffe7e0cd532648eed49044372195f27681b8ad316b9eaac295e2e4b
- SSDEEP 3072:YdxIsJpynjxAmasDi+Y/uFMEXbgECbdVeNvDQ6qMx9RhWINWm1Q0cDSl0WtLp:Yg9xAUY/unXbgECRqk6qMx9RhlNWmDAK
- TLSH T19EF31226E91BB0B4CD1645B0CB3CF62EA32163D527B33D5B8EC900132D4CEEA9AD5974
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/THUKUNA Nomad/ShrineNomad.dll
File Explorer
-
THUKUNA Nomad.zip.zip 160KB
-
THUKUNA Nomad/Effects/Effect_ShrineNomadSpellOrb.json3KB
-
THUKUNA Nomad/Items/Item_ShrineNomadDismantleSingle.json4KB
-
THUKUNA Nomad/Items/Item_ShrineNomadDismantleSlash.json4KB
-
THUKUNA Nomad/ShrineNomad.dll.dll 51KB
-
THUKUNA Nomad/Skills/Skill_ShrineNomadRuntime.json1KB
-
THUKUNA Nomad/Spells/Spell_Shrine.json2KB
-
THUKUNA Nomad/THUKUNA Nomad_unitybuiltinshaders.bundle20KB
-
THUKUNA Nomad/catalog_THUKUNA Nomad.hash32B
-
THUKUNA Nomad/catalog_THUKUNA Nomad.json124KB
-
THUKUNA Nomad/manifest.json164B
-
THUKUNA Nomad/shrinenomad_assets_all.bundle92KB
THUKUNA Nomad/Effects/Effect_ShrineNomadSpellOrb.json
- SHA256 6b04b37bdc64b42a4713feb725a8ed2e90a35738b8f33064f82d198132267c57
- MD5 1e897755389a612a075d3f371dbe39a0
- SHA1 873d6a93b6c74f3c231864461f6654c08b724d8c
- SHA512 4f6266f454ee5251d8f84cdcbcc2fcfe89a385167e85509d34a876d12ee9b635f1163aa4875199a6d3a22b4f4c3cc2b52ef1de4bb055176b946fa3d5cd249e3b
- TLSH T1B761B96BC9710C43B9825D3A24B806422A74818B4DD77C00BF8C998C4F9F99FE57879F
- MD5 SHA1 SHA512 TLSH
THUKUNA Nomad/Items/Item_ShrineNomadDismantleSingle.json
- SHA256 90409b4a1ba430e0ec875cd261536649558992827c345932951508974b549fbd
- MD5 4cc0ce0ff364abbc8c32515160c2dec7
- SHA1 4deb6488c65ed873bb61dac1363196601868beca
- SHA512 5c25b62e5b57c4f4a7e4329507fc72a4b82132488252a59eb4672874175f79a6cc7a438fa14dbefec58b16cad19d5eb9d74396e271ad7dfbc60fa30b78584667
- SSDEEP 96:FD9lOCjk3pFIQqVLSAcAcCvUA1AcC9ZEtTASAcCbXYr:FaCjGFFqVLSAX8Zsjce
- TLSH T111A1DE7BDA654C2366C01B7664AC418216608E5B4E627C043F8FC62C1F6EC5FE87178F
- MD5 SHA1 SHA512 SSDEEP TLSH
THUKUNA Nomad/Items/Item_ShrineNomadDismantleSlash.json
- SHA256 6ac958f6b6bcd7ab0bb251c4429c15d8d53b92ee859fc165d178fd03b45cb20e
- MD5 264edddf55d994cd2a87946595a9cbd5
- SHA1 283759c3fc42e175b5d1d4bfae5bdf3ac56b655b
- SHA512 abf4a65c79fa9eeec114dce9defbbda1999e4af8e3b5351771a68d46a8da8f16e19d1ea43945b17be8d460c0333ad494e8e46d48882c55b2a53e67e919c26ea5
- SSDEEP 96:gc9l8Cjk3UFIQqVLSAcAcCvUA1AcC9ZEtTASAcCxcfr:g3CjFFFqVLSAX8Zsj0U
- TLSH T1B8A1DE7BDA654C1325C01A6664AC51821A608E9B4E627C043F8FC62C1F6E99FE874B8F
- MD5 SHA1 SHA512 SSDEEP TLSH
THUKUNA Nomad/ShrineNomad.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ee3e695ac428cefbc48d1bf3eee148be17f8eac846f1814646f0131f80462630
- MD5 7099a019fa58d8c5855b59dd04a4b8e3
- SHA1 d3bd8b2167facf568d7fd651c070f6d623014944
- SHA512 2d4d47674f20c4c5b8373bad6d66008d9e2c59e3d6f6c79a64d4efa829f47f31263f87dfc0a7a7b69d2bc3596f9890189e7875a25bde87515ade9a2d949a3c96
- SSDEEP 1536:oGA+51eQzkOPj6k9o5b7yeXlIr6aYV1004U1ew8L08:oGA+bPjp9od7DXYYV58
- TLSH T1A633085867DC9A2AE9FF1F7A49B1241093B5A523E512F3480ED1E4EB1E323C19908FD7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
58782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\aneta\Documents\BasSDK\obj\Debug\ShrineNomad.pdb
mscoree
_CorDllMain
Name
.text
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
THUKUNA Nomad/Skills/Skill_ShrineNomadRuntime.json
- SHA256 a8213a9d9811e9cea91f17c0cb1abb3a46979e982c164305ca041c992d952313
- MD5 13a8e548f1ef2966d3b3e50ff5a239e0
- SHA1 0553c9aaa6182c08db8fdaf60dae4679c0ded651
- SHA512 7715258c2db72cdf4d7cc4924f2eb6c22d5c1b2fef7c789d444e21c1caff3ae85249c226a198ecf79f14ec54bc80a76f4148dd5b5a8a3f4dbf40b4c8f10f7a1c
- TLSH T105310F66010D444326C07EA64CF81A8362949D17D7AA7C1402EF906A53AFB2F50F7F6F
- MD5 SHA1 SHA512 TLSH
THUKUNA Nomad/Spells/Spell_Shrine.json
- SHA256 4c59a746c5f01fd1059524b822ccc5c7fe422f15be812f56fe1ae46ceb46b051
- MD5 190553efee322b9e27b508bd95eeaab1
- SHA1 c76f833c64573684efd0531b8da84fea7336bc5c
- SHA512 76dd4b00c74080460dd59108b67f282e88554272aeb33fa8c59fe9e2d54b83b2f519757d3dab7e5f76fabea6e37225b03fdd69e2b400dac61f97d6b455d14d4d
- TLSH T15851CA13C6044C6632C52E5858FF0B023668DE4B5B467D1868DBDA292B4E76B50FBB8B
- MD5 SHA1 SHA512 TLSH
THUKUNA Nomad/THUKUNA Nomad_unitybuiltinshaders.bundle
- SHA256 151bb6de4e2e4dc661ff0561f90fe6a8828d3f934e08714d70da42685cd9bb19
- MD5 3924b8ddad84063cbae6bb4a3d259a13
- SHA1 9f0b76d1a12df397c5c85ecea3d61ea7d77e58e8
- SHA512 be856c038e1f1cfd9808152f32e636a38a5be7dd15520c8ce9cb8abb2a653986229f4cf3b6e23eef974465f92cc23bc92193ab41c05723dda7dcd149972370db
- SSDEEP 384:o1CEKkbSTUubEXmR1AbWgMmDCsYzGsuG5aK89UrUpC5AAa8D6y0MRdc8uW:ooqbybEXmR146mDCsg+JX9UrUiRa8m/u
- TLSH T17D9206BB517B94EC9040A762908D639A711EC2DEB87DE2FC123FC0575C4182A3B8DC79
- MD5 SHA1 SHA512 SSDEEP TLSH
THUKUNA Nomad/catalog_THUKUNA Nomad.hash
- SHA256 5010e68523b3c296ca61d445f630b05cd9694448e98aaa1cf8329704aba39bb4
- MD5 0802a92e9902c95ed3054e7727130015
- SHA1 feeaa361f421f73f0c1d4b5a205a45c6c1e5f314
- SHA512 c902282b77937b7499702b49e134dba09d9b2c4ba766625f9e0d2d8991e5cccb312d92a4dc8df04690e1d661f1c1b2796784e3dae1509fbde3e39dbd2dbe87d0
- MD5 SHA1 SHA512
THUKUNA Nomad/catalog_THUKUNA Nomad.json
- SHA256 abb87239a08e6bcef1b0e54eef9383e1257b555bbc970add24f7acf3598a5145
- MD5 a6fb3522290bb7d9cee6daf7eb52fdf6
- SHA1 c7f8b07ab4a9734ec3576f212b7f7fe0dc95825c
- SHA512 2814f8fd4fb4a4b15159fece738d8f785ee3eab6de05430c61e1649cd9a7f0c5256b7a6b8f845c51da4bf527693f3347763addc4894ba73e688976a20e7920e8
- SSDEEP 1536:JqkIF/PJ2fypSa+QILKnsifWx2hiIc1xRLsFUzM5XdrIzEs2+:aF/PwypSaoYsifva1xRgvdUzi+
- TLSH T1A0C34431475BFC6A0E3C1E94902C6AE14EC85E5B6353D059DA602EB970DAC33EF95CB2
- MD5 SHA1 SHA512 SSDEEP TLSH
THUKUNA Nomad/manifest.json
- SHA256 c7c27a84a92a4a549487f520f1e03ec1384c1b76921941c12db7a30259bb94b1
- MD5 db28bbd803990a6f11efcaadcf6d80b4
- SHA1 af3a60f68724d20a857827df5d4a28664513d7f9
- SHA512 f1b904954bc01d5080f43a5f6a1a3dcb7d4dd5ee1d38566b5473c42f9ed20b502688fe63e5f50c9260d91228773bd9f1340138f44d4ee425dc222391b6da7628
- TLSH T19AC08C36144091A39DB00390A8301106B2A05F5FA1301D0EB87B21011883EF89444320
- MD5 SHA1 SHA512 TLSH
THUKUNA Nomad/shrinenomad_assets_all.bundle
- SHA256 46082e08b8bdb879d1cf99a1e8e7ddc83cf9587df9a248c7e0dd83d78430a43e
- MD5 92a4528ec289f44f916624fc5a9dd62a
- SHA1 1dc756662f43e9ff3aef6961b338585abcd31e74
- SHA512 65705b148c8d733d275669f3546b5133e8eeb49a5f97a272b7ca68025b55a3bece45d239994c7c46175ee87a16d60f985ba88c1ed1aa75e8f97d478148aac4c2
- SSDEEP 1536:uEJVqw1HWdjgl3q30H1FqTyiDfxG2wiooB10hnzFJmWXfsp/tmTs:poOHWdyqEH6TrDURi/ShnzH6Os
- TLSH T14A93027FA84759A1B80C210170CF53636677CB5BD0AAB23AB5E3C2AF421235DEC31278
- MD5 SHA1 SHA512 SSDEEP TLSH