Overview
overview
7Static
static
5Ghost.of.T...ma.exe
windows10-2004-x64
1Ghost.of.T...ma.exe
windows11-ltsc_2024-x64
1Ghost.of.T...64.dll
windows10-2004-x64
1Ghost.of.T...64.dll
windows11-ltsc_2024-x64
1Ghost.of.T...64.dll
windows10-2004-x64
1Ghost.of.T...64.dll
windows11-ltsc_2024-x64
1Ghost.of.T...up.exe
windows10-2004-x64
7Ghost.of.T...up.exe
windows11-ltsc_2024-x64
7General
- Target Ghost.of.Tsushima.DIRECTORS.CUT.Update.v1053.7.0809.1937-RUNE.rar
- Size 53.4MB
- Sample260720-znxp6sgv2t
- SHA256 b18af23fb398b0dedd0d47999bf2ca2d83717756fa141642133149f9f5039099
- MD5 a9fa4c4e8450113848d644b87bd7a8fa
- SHA1 305e3c1a7349bce7d4eaa8b17452a3015c50658c
- SHA512 8aa2a39bcc2598e96d34da36832f2a904b09aa42627145989b8d29f42bf150bf2b4f1b638219f2f0cea3d2c092aa0ac14eac5556d834032d1666fb7696f8f77f
- SSDEEP 1572864:0J8agsrtZLIbpAItYrD/CwH+0EMcOZt7lu/:0J7g2ZL4hWrD/Xe0fcOZt78
- TLSH T139C73307E0EEEA80E6B069711FDB2F5AE46EDD21551EF45845220F82FA2F401F6ED2C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Ghost.of.Tsushima.DIRECTORS.CUT.Update.v1053.7.0809.1937-RUNE/RUNE/GhostOfTsushima.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Ghost.of.Tsushima.DIRECTORS.CUT.Update.v1053.7.0809.1937-RUNE/RUNE/GhostOfTsushima.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Ghost.of.Tsushima.DIRECTORS.CUT.Update.v1053.7.0809.1937-RUNE/RUNE/steam_api64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Ghost.of.Tsushima.DIRECTORS.CUT.Update.v1053.7.0809.1937-RUNE/RUNE/steam_api64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Ghost.of.Tsushima.DIRECTORS.CUT.Update.v1053.7.0809.1937-RUNE/RUNE/steam_api64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Ghost.of.Tsushima.DIRECTORS.CUT.Update.v1053.7.0809.1937-RUNE/RUNE/steam_api64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Ghost.of.Tsushima.DIRECTORS.CUT.Update.v1053.7.0809.1937-RUNE/Update/Setup.exe
Resource
win10v2004-20260513-en
Malware Config
Targets
-
- Target Ghost.of.Tsushima.DIRECTORS.CUT.Update.v1053.7.0809.1937-RUNE/RUNE/GhostOfTsushima.exe
- Size 28.0MB
- SHA256 20e85c4c4c66c73004a2cfd0ea04cbbaf87f5675c4536f3ec02ec738d6b85054
- MD5 29bdd63b4fbaa17def861073b282bbe4
- SHA1 293b7ebf677141291f70b7fb5e59efe64876bf58
- SHA512 b090fb387044987b140b62e07c39728eb7295b2b416bb95aeb64ca74dd278d850c0a3bd75cddada353c13c43a0917faca1f642ac0079250aa2c8f92f4e1d992d
- SSDEEP 196608:T4D+8nKe7Gu7hc9Rjq+GCCAI3yGcU5w0k9ymeotz5vtMx4rN9Osmjga+fg7:G+853hcfq+zCXcOQX9JtMO9GCE
- TLSH T19B577B46B35A1CC9EC6BD438839AD61AE3313C350B2C57DB2190725D5F3FAE29A76B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Ghost.of.Tsushima.DIRECTORS.CUT.Update.v1053.7.0809.1937-RUNE/RUNE/steam_api64.dll
- Size 404KB
- SHA256 a27ebaa803d8608a3231c0d9a023ead245ef8568cc1ce5720e3d6375127ec9e8
- MD5 d6194829e77de1525c66907703397697
- SHA1 fd56cedb2d1dadfd4bd432f9b7816b5ea61ed33b
- SHA512 66db1cadba0bb8802e664bdb973ec3de2e4f813abcd9d5c8f047efea4c1a6c1f9d14f1dfbcd232d16e4cf99aeedd3de447b295685c5e4c8f93368e01fc5b721c
- SSDEEP 12288:yY7OF08Xz2e49DbnPGrcLuYH2iW2JEOtLkUqyJfCFS:yYibieQDbgc6YzxEIYyJfCFS
- TLSH T17894E036706205F4D6B6C531FE956E0F7AA080DF31252DBE3A508832C8DBA472E775DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Ghost.of.Tsushima.DIRECTORS.CUT.Update.v1053.7.0809.1937-RUNE/RUNE/steam_api64.rne
- Size 291KB
- SHA256 a44e5537939ae4eebc69000589aa9b2437a667813a1657cc779198bae9b815a9
- MD5 f3db5801dc9b75da671b39041e2e8bcf
- SHA1 40d0ae44e090db49b2309fb152fbd3e11124a376
- SHA512 9abeb8542ce48f3d263e9924a82cafa80b42b730636f1df6e594679482b6638997563b5d752d5505f25596a5d0e2f56f1255e4a94bb9523d47c180bc131e22f9
- SSDEEP 3072:B8Y+BDOgGIWcXSEJeRhqTMdU55UuT7+7JtN3RUOj65lhTbCMTiGu2ZvJpKCZyq+g:BYPNrQheMW5vTKxRo8CgCZyqO2CM4OYS
- TLSH T18B545976A2750CF4E076C13989565E0FF671744B23219EFF226053368E67AC21E3BBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Ghost.of.Tsushima.DIRECTORS.CUT.Update.v1053.7.0809.1937-RUNE/Update/Setup.exe
- Size 8.7MB
- SHA256 67a5ddc43b78b3c938a7533ca315cb279c787d8d7ed97d6d37cfb0dc5e9f2d1e
- MD5 48ccc0c70d088ad2d1f8159f0021221d
- SHA1 0ea3331adca237dea269fced417ec723a0ec1cc2
- SHA512 c6436bb607ce16134999635dd5c91f5eebf8d59dbe5211004e3aa9d75e2836e5126394439d38bf04d71fa836b752bdd25b3502ff7b751fa109dce534d5c3c8e8
- SSDEEP 196608:6PjgxUVgTMUqraAXz20gxDzbN4lAyL+eFfOiztS9DjUN:4yZWaiiDLyxd5M9c
- TLSH T1EB96231AFA8319F5D55C367585AA0F043FBA64A883C5134D0FF0D02D2E7A36D9CBA963
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL