a530fd00cebd66ae736265de109ef84f369e35819dc034fa66fddaa0da0aef87

Resubmissions

22/07/2026, 16:41

260722-t664nsvzb1

22/07/2026, 16:36

260722-t4e76scr9v3

Sharing

Copy URL Twitter E-mail

General

Target
P!WK_Win.rar
Size 94.4MB
Sample260722-t4e76scr9v
SHA256 a530fd00cebd66ae736265de109ef84f369e35819dc034fa66fddaa0da0aef87
MD5 89a2bfad7304b7b15b1c1e9a5438109a
SHA1 9a4f7df242b63ecaeb1f16c4d360a234afb50d1e
SHA512 37cbb867fbe697c7698627371b63cc39413994fdb752cb429b2e97fc5fa08b1e65a8328b9c00c5247850a6830cd68d66afe09504761836b884bebd184b27b16d
SSDEEP 1572864:ozeLv6zheCRdfLnHPVsM4mnST4HRZSZv6yxy5QCsgO1DiOARMSDzeJxbcKPbpJY8:ozer6VeWfj9SiSTKA6Yya8eirRM8illt
TLSH
T1E8283322989DCC53A62B41FAD133CE3391CF4AF8C09FB4A3DA3854796EA55E9510C736
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  Play! With Koharu_Windows/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Play! With Koharu_Windows/Play! With Koharu.exe
- Size 651KB
- SHA256 c37d313c0f3fff5db87033ac07f9254e666a823c5488af1e0a6c906ec3fd5a2d
- MD5 73e1c266fe43e7e1b7624a30eb526a4f
- SHA1 4b8cbdc219d932009912b68d9980b6f25f9e9bff
- SHA512 454b1b4ea14c375303eafd783014269b5b90893a55760c9df2008057eeae326a732e80acdf4b7da532a033139a6fd59cff4bfec8679c1a42519af1f9ac3b2dfb
- SSDEEP 6144:l/7FG9mpcJ/OD8sFkbE/gwbib1EiJRywqGWWF:l/744aOD8WkLb1XJIwqH8
- TLSH
  T1FBE428BA79C1955FD651A236C7A6C33257B724193E6F9D89EFA283D7CD002838F58320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Play! With Koharu_Windows/Play! With Koharu_Data/Managed/Assembly-CSharp.dll
- Size 51KB
- SHA256 f1c5d612fa6186201dd8ae45ff5279bfa4ec30925371cf0c511ee71f65f33935
- MD5 3a2060d2ef90f2a8298952df42680aa9
- SHA1 0e79d52b7cd6224192e28cf8aa86ee2440c95255
- SHA512 e281088a09e7a60d4526d96550bcc2a3d7cdcbe86a9ddb099db0916b0a845ee8725d09e518ce2a183a7cd94c72bb0a3b7ee9b1c8f7d61412e275b1e81f683138
- SSDEEP 768:gqx8dL2rZq4ml6z0bENQfs/ht3Bpbbb2Pc6ZdJOMjBNBIVzpOX/UzaXyB2mxJ7f:gqOLCZJzNQfs/zwZdbjY9Bj
- TLSH
  T162331AB91FA84B33CEDDC6BBF5E15394133993455846E78E088874FA0D927E50A832B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Play! With Koharu_Windows/Play! With Koharu_Data/Managed/FancyScrollView.dll
- Size 33KB
- SHA256 02ef2d2363b817db640585b6de5780823fe9931d2c0ecaca59ca1dc3d4d5e33a
- MD5 afd4f7cb82dfac5a2ffd59c447776e68
- SHA1 f49bc0df87df0f468cbeb20f91272ccdd8cd6e8e
- SHA512 758adfe0185c807eedcb7f1820d154c136ba1dd83357f9261188920feaf345fc3eb8b8ae12b963cac7a9618a9bc443fe43d7b802022f0072ff269d13284fc836
- SSDEEP 768:uZeimpRgQQAiRWwfHmNq0zrqtjzM2MUfmSI:15mXbPmNnrqc
- TLSH
  T1A9F22AB2B2588773D7EE03B9D479190812B0C49B3291F3A5CCC5B8E954BA3E10AE17D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Play! With Koharu_Windows/Play! With Koharu_Data/Managed/Live2D.Cubism.dll
- Size 182KB
- SHA256 33e8a4960d2c1f7bd69f811c4d934b41287e9ca7fd18b926f25684320de58ff9
- MD5 c3446f33cf3d789a0e885c25088464de
- SHA1 0c72ed92da9a55189ce86885f04044723890668b
- SHA512 a15c089a6a823b6134decdc86a1c78417715a1ea28a53ae25cbfaf7e771ab718c722ad0a1072678b7dbf5281fe2342c75cbdd254454854200fe87d69d7f3cb51
- SSDEEP 3072:T8oSygjLpG3jlKer0L1IaQJ1MEejc70KLxCzLln/V:ZEpG3xkIZEEej9KLxCzZn/
- TLSH
  T19A044B25466CC7ABE7DF87F8B028813447B8B156789DDB9D4A54A4F81E82FE0C0417BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Play! With Koharu_Windows/Play! With Koharu_Data/Managed/Mono.Security.dll
- Size 235KB
- SHA256 f88d997d5d72856a7f065d732cbda261c372d98d2487c25397da4ec740fa6719
- MD5 1b0505dd33bf159c0760c185112fb6dc
- SHA1 814fe64509fde64d7c27d72526084c4c120e807d
- SHA512 ca454e7cd59dee17ed7569558f124d42dc197739cbf15575fa6ba2919810c4c2d3e925b7a3161cdc51869972465e30b7847bb2a3bb73eb3d32c35834dc548b22
- SSDEEP 6144:1UjTQ70cnf8MoVRxS9iJdBF119RJXG2yA+Q:EEiH119RJXP3
- TLSH
  T145344A1863F9531AF6EE8779D4B15019C3F4F50BB9AAEB4E5C8282AD1C027918C41BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Play! With Koharu_Windows/Play! With Koharu_Data/Managed/System.ComponentModel.Composition.dll
- Size 251KB
- SHA256 a3d9a70805c03c994f06b2fcb2d1440c8d56a10118e31dc1e0ad59245a9fa539
- MD5 0ee818b9f5e1a76a39b39d97a9677a66
- SHA1 89185bd5a27c575728ff4acff4df0bc8077712ba
- SHA512 49d742065151e3667868d2b6a7751ddccb95854ed0babf32418c89366e94ee2a8fa49d7cf1b79b3fb88733f45a8b40c4a94621f53e5020b77ec8b04b43c7d44d
- SSDEEP 6144:6kwkYfxuS0ZNORl1X1XYZGFU+22kUgUlAwU5e81hXJXee4jsURlXXMAX8O33iEP3:6kwkYfx8ZNCxL
- TLSH
  T10A44281533FD0366EAEF0F78B5B480148BBAFA06B95AE71C2C8951FE091379499117B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Play! With Koharu_Windows/Play! With Koharu_Data/Managed/System.Configuration.dll
- Size 122KB
- SHA256 42e78b0335ecd4d0cde9c4f8a886008672e5cffd683fe2ad20006e5c839cb131
- MD5 cbca52bfb7c5e6d5c6329fdd4e7b5e35
- SHA1 df883252cdf16b3d427b91d38dfc558b0dd769fa
- SHA512 a71017395ba9ccd5bb41ffee7fdd89b974a6e93db1fc459fe9ac87857d8747333704efc302efa7cfdb9982f5f56c071e0d1dc7c7ee9d50bc24a2ff8e609d6655
- SSDEEP 3072:sGHTFkizuGCOE/htnREcacWown5WJGL0MIeGgNe:sGHT5+H/33vJA
- TLSH
  T17EC3F92563EC872BE2EE177EF8B515110FF1FA0AA436D74C5D89B0ED1827B804662367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Play! With Koharu_Windows/Play! With Koharu_Data/Managed/System.Core.dll
- Size 1.1MB
- SHA256 8d7f0436415ce97786efed7b935aa26e692a44504ce93ae309d50b22f2c9a850
- MD5 8201215d1312050b45ce9aac1f004974
- SHA1 3216f82c094ea8ebe5a672755ea746a7769db87a
- SHA512 a564e17c609110ef2c07b221d1afa2900c423028bb6a858a9ad7f305f623e92bb312befa8863880c1ecacc26051465f2ffdcd8b68c30d0a9f942361e855aa978
- SSDEEP 12288:8WK8Xi19FV57751umv0RX15PgLdfJ18VjjvM44hvetIX6e+rxHzR:ul/umv0Z15PyC9vMNV1+rF
- TLSH
  T15E354C01B3EC9B27D5FF7776A4B442A007B6FC46AB3BD78F104891A95D56B008D887A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Play! With Koharu_Windows/Play! With Koharu_Data/Managed/System.Data.DataSetExtensions.dll
- Size 29KB
- SHA256 2e75e7a6057918bfdba706b6cb68414808d3ffbeebd30dcd662aa45924dfb93b
- MD5 f6eef8b5b4d44352b60a54e1fef5d28f
- SHA1 34bb750202d3e7b043c41cb340663a4c008c0a7a
- SHA512 d0a36b6c259f5beab5bb6d7c6172bb2d2583befb196a12d93ee98949e2943117cb0606f904061a77ea1e5758e2cbab3411eea0622ac78d22179d60f408dccc42
- SSDEEP 384:PEAjm7aELetOdc8l4LodMqokNv2Y2rsFKOlIcMYOxlsnRbli3ESmMadMkrVr5UhH:PcZC8Ll4LiMXkv2Y2Mcd/sj5Q
- TLSH
  T1DDD2C815D3EC4311E3B727B5BCF9518A8AB2B913AD35D79D288E23CE18127804D62B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Play! With Koharu_Windows/Play! With Koharu_Data/Managed/System.Data.dll
- Size 2.0MB
- SHA256 ddaf840094c87ae60941fb81ca6a155dede455d113625e3062556a05374472dc
- MD5 f29e1d2b5354f7a047762195807132e0
- SHA1 61c75a97efc307ebb22685975e6e8871edd01772
- SHA512 e15c9005a8a5ed65a82090d57ae2738da8b18daa73574ae478c356c94a1c37179b4ffc0f9f89905966bc6e4ef2ccec8af99bb064e4a64791362b96a5a0183d87
- SSDEEP 49152:esWVZLbth7+KwFOlXJJWO/wjDqhxoZCkUBojsJ:esWPLbth7+KwFOlXJJWO/wj2hx
- TLSH
  T1FDA527007BF86A1AE6FF7772A47424140BF5FC56A7B2D38E6904A17E0C63B508D617A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Play! With Koharu_Windows/Play! With Koharu_Data/Managed/System.Drawing.dll
- Size 478KB
- SHA256 91e5904e7ef7f7bd9f1d747dc2aa9791dee243aa04dd3b193e7d64a13c812cd2
- MD5 356e689d6a9018b8d25fd58dfb5e9cce
- SHA1 9fcf12e9b47355adcd7ab02ccefaf523dfbf4960
- SHA512 9e39aaef342332498480f4d3a13a02fc076adb64319714910099af1a5e796454a3a9445118aab361b38e4800633d6f2111071bb74002843e459b8b1dc88aae12
- SSDEEP 6144:UHutOmSUsXjt/z5B4CqvhOgEGKPx+Jg/NY7c/nENZ4k7cheeEv:UOtOmVsXjt/PicgEN/MGq4k
- TLSH
  T138A44A1077B4592BD5EF2B38E0B24968A631FC076B26E75F4681B62D1CF2B809D417E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Play! With Koharu_Windows/Play! With Koharu_Data/Managed/System.EnterpriseServices.dll
- Size 43KB
- SHA256 6387454f78511a00f18d61e7e45ca8a2f6d89e56eb7aa51ba6f3e1ca7497cb00
- MD5 07a5e713e7d340585e2f8a272176bd2b
- SHA1 7ebdbc31435b2ad33fc781da7e758b8652b5e8c7
- SHA512 ce669b45cb89cc88ce0de43fc92659558a79ae62412d7d132a777c1a584f45b015b55ac1b1631e2a87c3c64c9386a518f50e33d569b684769eb02168fc787ec4
- SSDEEP 768:oT7LlB8tFJutlA/kUTr8yI32JVmugdQuwGHZgm5S:a7BBk8tlA/kVy7JVmuguuwGHZgm5S
- TLSH
  T16C13D51043D4877ACAFB4BBAFCB342264676BB026F37D3EF2605D2995E4374C4412666
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Play! With Koharu_Windows/Play! With Koharu_Data/Managed/System.IO.Compression.FileSystem.dll
- Size 18KB
- SHA256 6bd9ecfc75a7669e8230f4d189609d4baa2bc592440da9a1dd0cdf9bb2ab961e
- MD5 e39ee51858e82102c9c70fa232456e69
- SHA1 1f4eb122d31ff73fa1544639ce2a9413e747adbd
- SHA512 4ceb483feba9ccb050311a189a5a2919deb4323844a395b76462f3a91816018fbbf2d15981b5a42ed429b88e0eb2ac8b1a95ce4fde26f3857539a5d0a0cc9078
- SSDEEP 384:YPQA4DgKGRwrtLsW0Rbli3ESmMadM1vz2a:YoA4D/Jvq
- TLSH
  T1ED82602493E44315F6FB4BB4ACF7428686727D13AE36C79D298A135E0C327884D63B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Play! With Koharu_Windows/Play! With Koharu_Data/Managed/System.IO.Compression.dll
- Size 112KB
- SHA256 fce1248c4380286a85f3561ceb227fbc18e4d3c751bd573c5f108550e6e68fcf
- MD5 2747edbf5af36f6c351ae8b747431107
- SHA1 7e71e8576a93cc865f3a9c10d573a1343facd8e2
- SHA512 970160bea84b2079cb7da9e6c5325a85f871a17dd9a22cc05f3690c7aa274b88f476e8b4420c25c0d01d42e32f5c75b27608cd605a2c21932f9cd866c36bd13c
- SSDEEP 3072:XaN5/sy/nNo7hPjma0m9Y4gbcRiuT/RHuVra:XmsyPOL1M
- TLSH
  T1CDB3291463F80757F2FB6BB8A87509550772BD83A93EE78D390864EE1C62B808C61377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Play! With Koharu_Windows/Play! With Koharu_Data/Managed/System.Net.Http.dll
- Size 118KB
- SHA256 175b2377bf87ffdac5bf1034b797c9a64d7c4a0fe35df5fc2da7382fd2318acb
- MD5 15afa49a702be8b9e963a2a2407cd2c6
- SHA1 11f057388f8d7fe50669af78a85c44022518c78f
- SHA512 fbfba62c011fc24192d15fddb7f2c653c4eea52c01fc91909ca98e4e7bc0d20a3ab2aa72978df708ea61c9ccb1ebed0e91ac03835615057bb4b664d0f7477349
- SSDEEP 3072:/imm1Zlr7tCfMm87PY1cADkzZf/rN4xtNsK:At5CfMm8h5S
- TLSH
  T1DFC35B5867ACCF6FD79F6A79F07051958BB2DB063122EB8D6808B8FD2543340E9016B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32