Overview
overview
3Static
static
3Cookie.Cli...52.zip
windows10-ltsc_2021-x64
1Cookie.Cli...n-test
windows10-ltsc_2021-x64
3Cookie.Cli...est.js
windows10-ltsc_2021-x64
3Cookie.Cli...ies.py
windows10-ltsc_2021-x64
3Cookie.Cli...dir.js
windows10-ltsc_2021-x64
3Cookie.Cli...ain.js
windows10-ltsc_2021-x64
3Cookie.Cli...ang.js
windows10-ltsc_2021-x64
3Cookie.Cli...ain.js
windows10-ltsc_2021-x64
3Cookie.Cli...zip.js
windows10-ltsc_2021-x64
3Cookie.Cli...der.js
windows10-ltsc_2021-x64
3Cookie.Cli...dex.js
windows10-ltsc_2021-x64
3Cookie.Cli...der.js
windows10-ltsc_2021-x64
3Cookie.Cli...ter.js
windows10-ltsc_2021-x64
3Cookie.Cli...dex.js
windows10-ltsc_2021-x64
3Cookie.Cli...ter.js
windows10-ltsc_2021-x64
3Cookie.Cli...pto.js
windows10-ltsc_2021-x64
3Cookie.Cli...nts.js
windows10-ltsc_2021-x64
3Cookie.Cli...ors.js
windows10-ltsc_2021-x64
3Cookie.Cli...ttr.js
windows10-ltsc_2021-x64
3Cookie.Cli...e.json
windows10-ltsc_2021-x64
3Cookie.Cli...e.json
windows10-ltsc_2021-x64
3Cookie.Cli...40.png
windows10-ltsc_2021-x64
1Cookie.Cli...en.jpg
windows10-ltsc_2021-x64
1Cookie.Cli...re.jpg
windows10-ltsc_2021-x64
1Cookie.Cli...et.jpg
windows10-ltsc_2021-x64
1Cookie.Cli...on.jpg
windows10-ltsc_2021-x64
1Cookie.Cli...mbs.db
windows10-ltsc_2021-x64
3Cookie.Cli...ab.png
windows10-ltsc_2021-x64
1Cookie.Cli...nd.png
windows10-ltsc_2021-x64
1Cookie.Cli...ma.png
windows10-ltsc_2021-x64
1Cookie.Cli...ma.png
windows10-ltsc_2021-x64
1Cookie.Cli...ma.png
windows10-ltsc_2021-x64
1Analysis
- max time kernel
300s - max time network
59s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
24/07/2026, 21:38
Static task
static1
Behavioral task
behavioral1
Sample
Cookie.Clicker.v2.052.zip
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral2
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/greenworks/test/run-test
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral3
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/greenworks/test/test.js
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral4
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/greenworks/tools/copy_binaries.py
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral5
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/greenworks/tools/steamworks_sdk_dir.js
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral6
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/mods/local/coolerSampleMod/main.js
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral7
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/mods/local/languageSampleMod/lang.js
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral8
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/mods/local/sampleMod/main.js
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral9
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/node_modules/adm-zip/adm-zip.js
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral10
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/node_modules/adm-zip/headers/entryHeader.js
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral11
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/node_modules/adm-zip/headers/index.js
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral12
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/node_modules/adm-zip/headers/mainHeader.js
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral13
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/node_modules/adm-zip/methods/deflater.js
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral14
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/node_modules/adm-zip/methods/index.js
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral15
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/node_modules/adm-zip/methods/inflater.js
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral16
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/node_modules/adm-zip/methods/zipcrypto.js
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral17
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/node_modules/adm-zip/util/constants.js
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral18
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/node_modules/adm-zip/util/errors.js
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral19
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/node_modules/adm-zip/util/fattr.js
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral20
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/node_modules/steamapi/package.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral21
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/package.json
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral22
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/src/img/AQWorlds_CookieClicker_300x40.png
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral23
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/src/img/BGgarden.jpg
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral24
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/src/img/BGgrimoire.jpg
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral25
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/src/img/BGmarket.jpg
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral26
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/src/img/BGpantheon.jpg
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral27
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/src/img/Thumbs.db
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral28
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/src/img/alchemylab.png
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral29
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/src/img/alchemylabBackground.png
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral30
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/src/img/alteredGrandma.png
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral31
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/src/img/alternateGrandma.png
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral32
Sample
Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/src/img/antiGrandma.png
Resource
win10ltsc2021-20260513-en
General
- Target Cookie.Clicker.v2.052/Cookie.Clicker.v2.052/resources/app/src/img/AQWorlds_CookieClicker_300x40.png
- Size 30KB
- Sample260724-1hfp5stepa
- SHA256 9fe9130784e98d79c25d5cff227baa9d159f8db55a8b15fac3367d44866ad0d7
- MD5 3a4388208787f25f5389a41267b8bfcc
- SHA1 6ae6c2854bba6d8fb1cee69a23ab2f4cae67984d
- SHA512 bcdcfc4d54a7e693b38c015524623b4bd87b036635386a2ed8f110b9d758a8446a1d4b71908805aeae305a1d1e6a9cbc42b0278eee0819951ec040fdb22a92b5
- SSDEEP 768:pmMDmGMdyBGtS4Gr5VbBo7vyQ7n9DAxNK9iDhtZwAFhx:vuAoK5VFCDDAxqiNHwO
- TLSH T1D9E2E18A1435E4022394FE72A29DF7AA265ADA178B0DBF4CF51E53F78011FD24C784C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 468 mspaint.exe 468 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 468 mspaint.exe 468 mspaint.exe 468 mspaint.exe 468 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Cookie.Clicker.v2.052\Cookie.Clicker.v2.052\resources\app\src\img\AQWorlds_CookieClicker_300x40.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:468
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:4992