c40daaa932f9e30bbdb024e677b216e3ff0df3da14ebe8936893e5e0fd47b3e7

Resubmissions

24/07/2026, 00:41

260724-a162yaej5t3

24/07/2026, 00:30

260724-att4sszerf3

Sharing

Copy URL Twitter E-mail

General

Target
CUPHEADAIRSHIPDEMO-20260723T235745Z-1-001.zip
Size 290.2MB
Sample260724-att4sszerf
SHA256 c40daaa932f9e30bbdb024e677b216e3ff0df3da14ebe8936893e5e0fd47b3e7
MD5 70c3b53b13ae43f45f3279771090ee65
SHA1 04a8ea29f85e57f7be5f85e92ce7181828adbfb0
SHA512 886e31a0b1bfe164c7329fe1eda66dd09571f65ad7e71b992fe09b88fa3fb91a08ddd252c1083e0458b882b919162a1940b3aea6a7a75979e585b9a7528d1ba2
SSDEEP 6291456:cqVJ5hMtKNRo87xo9DWccW4ofc1pHl486IQoVhPRsQC0V4Fl5XL+Zhtjc47/F0bz:lVJItKNK87O9DxcW4oUxp6DahP6hC4zd
TLSH
T1CBE8331250CE1FADEBFF20B3CEF47E934735A9B67BD38E216945E9029CA17516430682
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  CUPHEADAIRSHIPDEMO-20260723T235745Z-1-001.zip
- Size 290.2MB
- SHA256 c40daaa932f9e30bbdb024e677b216e3ff0df3da14ebe8936893e5e0fd47b3e7
- MD5 70c3b53b13ae43f45f3279771090ee65
- SHA1 04a8ea29f85e57f7be5f85e92ce7181828adbfb0
- SHA512 886e31a0b1bfe164c7329fe1eda66dd09571f65ad7e71b992fe09b88fa3fb91a08ddd252c1083e0458b882b919162a1940b3aea6a7a75979e585b9a7528d1ba2
- SSDEEP 6291456:cqVJ5hMtKNRo87xo9DWccW4ofc1pHl486IQoVhPRsQC0V4Fl5XL+Zhtjc47/F0bz:lVJItKNK87O9DxcW4oUxp6DahP6hC4zd
- TLSH
  T1CBE8331250CE1FADEBFF20B3CEF47E934735A9B67BD38E216945E9029CA17516430682
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO.exe
- Size 17.3MB
- SHA256 32222aed1a3739650bfddd2662856bdbd41c872701f812edd175555ed00ba05a
- MD5 a6038719a8cd2a092f72f33137f9a039
- SHA1 0feaafd73376e25bb1fc3f20f1af3f4728c86f0b
- SHA512 45332e768ae3b12b143a11ebf00307581e011f99128f9b4ef46d21932e34198f5555f7e23fb9dd7c4a1e3ea77f23cfa7fc135a08048e940b22e7b1409df58bac
- SSDEEP 393216:86xwD0BTGTHupnmuc3/lub0gKuPUuA2uGeOX2CWhxRMgVjDWzrDKEWSKuYUHbKML:t6SDWSRKML
- TLSH
  T1AA079E21A818D171E99141B2E5BD7ABF5A389D25032C41D367E439C4EE741E33EFB2A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/Assembly-CSharp-firstpass.dll
- Size 3KB
- SHA256 cbd36e5f57e6e5f5e304449f58e5b1f6586f3b85ba085713240377beac7eb067
- MD5 a8859a0c7163c59d9f2e03eb976889b3
- SHA1 fd9b6c57f755bf52b9459e954fea870432ac8f10
- SHA512 b594cd9f5c128ce1fc9a691cec296ce1f222d7af7f7a38af26c416ad713a548eb6514e8b17f08d511aa23ae375acddf03b2e6123984316bb258fcd448a3b4d56
- TLSH
  T18E51F21253E8057BFCB78B346EB3434223B8F9205F739A7E0994122DAC61258CB31F61
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/Assembly-CSharp.dll
- Size 3.7MB
- SHA256 271626d88b4699bd63b778cbe0801af181b020c093845978f0c19b4ec972b327
- MD5 42913f5f262dd7dc0ec192312c85e4f0
- SHA1 0a8efda991c157b2ecf44a54fbcb4e54333fe69f
- SHA512 d6d7e3aed73a118cc1e95359e83769c0faf207b8aedada918ae4a49ba354700454a459788edc76e825231b5a68f75a55eef3ecadb4b1fb80b2c7f4108feccfb7
- SSDEEP 49152:pZckxcbrhhWJLsu/l3a+dnqR09hseEf5HgikbMpYZ9Ag9CQxAXmM57:pZ7cHh4vd7/
- TLSH
  T153060624F7E85D37D17E67FA80E56D0197B1E041A746E39AFB86A1BCE842B402C43367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/Mono.Posix.dll
- Size 172KB
- SHA256 6d503c2d76dbbf6039cf2ae638b44eb71fa35201034bbe9fff690b668f2dc614
- MD5 b54078e3bc3a5978de4661ceae413868
- SHA1 4aa2e5087b082d66c8e1ef160188f86544b9eb94
- SHA512 6b8a6f39375ea2e52ceef4f0db88469292f10463fb91d287a7e7cdad96af66b11cb9c82f3377abd064be313d23eb8d48d72350aea1104f8d419ee6f18b64d5ff
- SSDEEP 3072:X45qmT1uMRot8wHx8BeWFfh8Yahpj34iOuoe333eJTtTWdPOhY9SQeMXT:XMl8Ya7j4uo233eJTEOye
- TLSH
  T139047E55A7B58A1AE6AD5734E8731F058738F54EBE23E38E1BB9A63818373405C012F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/Mono.Security.dll
- Size 288KB
- SHA256 a43d90462146205b8c1e80b41d009e4810883fbf96fd9f725f09af64b51c161e
- MD5 aa14196e1d16294b87185ecfffcf64cf
- SHA1 cd9bae6041f73399bffa87c461edab659dcc0a92
- SHA512 9efbc7810212efa5c193798333d39d787aea7307f9fcdbd11f67ba8a9b2235296b5ec0703838bb266d52b7bf890feffaa04d01b736f208844b96e2b495c60d8c
- SSDEEP 6144:wxtgJ7SzJWhaeQTVJRj02o0nF2yUpub7H:ZB5ceQ502o02O
- TLSH
  T1915439082BE8DB2BF1BE53F8D0F04415CBF8A556B69BEF4E1C9610E818537419A05B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/Rewired_Core.dll
- Size 1.2MB
- SHA256 ccfc87681d5f59f642402f63a64c861ac86facd10296f254809999af6cbb67f8
- MD5 34350599c8eef76d27afc3499554f051
- SHA1 1af68cd287a12e41c3aef3251c1ae3a36731a72d
- SHA512 bbef8fea2bfc7b847ae2e6911bfc0a7de5bcaf7b95af502b37f3fffa2c3faea63f53318f95e9eeff5b655c4fe98a14e6ebc17780016696c56229c88c5adec5f8
- SSDEEP 24576:t7FLDcRyAHSs82uh8q4LwCGOVV0LEFoddBdw4O81:pFLCyr2QndddBdDO81
- TLSH
  T1D8457C007BF9A637D59E4B7BC8A59A4573B4E045AB1BFB5B38C0B76C1C823949D02393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/Rewired_Windows_Lib.dll
- Size 975KB
- SHA256 01554e805dc824fbfcac02cb7075fcbab2984b1a8c6b93a44a0d14a5d2a891b1
- MD5 6790f6da8d835ccbc95926b023ddfbf9
- SHA1 8398bb9a148ece7394e6aa4a1267455558262356
- SHA512 df5345523cbea0233a8d1c721d0ada5985eacde0cf79116890bfb58b04835a6db90091f4bddac3d10427207c4b53a9519f05ea67b10f3fab2773fb434bc07d70
- SSDEEP 24576:kbLYfEgGMj0idcBJ6+zW4q1QSHkYyKytmJTGcI2kH5lD:kvywiA/S4qjRyLkQxpZl
- TLSH
  T18C25337A869D4280CDCBB77FC132352E9A3E7209EF89362146FC05B4B06919E1D78979
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.Configuration.dll
- Size 116KB
- SHA256 c65d6a55bcd8cf5607fcce4925b422b920f7772932b9d0e90d1409481b4c77fd
- MD5 6377fc21f82737ecf7421729c2c02b0e
- SHA1 9b2b8bf386d1195cd8655221177268f8263d744b
- SHA512 5d94dbf1ce28fdb2d0c03ae4d3735a7b7b7854f2aa29c2eb3e7daa760dae5716be990741384008474371489830ed5be44ad2a8846add2298eed904e17dff7adc
- SSDEEP 3072:9rU7V0IiwJ16/jMPiyC9yCHpCA7QGfrS6CnFYaylev1p:a7VT1VKyC9yCHpCA7QAS6Na
- TLSH
  T187C3072527F8872BE7EE1779F4B104245BB0F60AB423D74E5889B0ED181B78186527BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.Core.dll
- Size 290KB
- SHA256 a45cec889abe7ca6f4e613f95a229a79db0168902fbdaeda11a1a99af3fbb2d9
- MD5 a3d61103e0ca37ba1d6cffde73a8a7d0
- SHA1 75771cdf6cddd228aaea69478ea6cff45285a623
- SHA512 54bfa3f8d4fedbd121e6dd86aa490a93947c3ab53698a9c63af6b011e9f72f0a606d0ef4a554933794bb5fcd03fa38908db615dd3222af4a797fb7ad9996fd7e
- SSDEEP 6144:z0rxcnyyZrWiXjnGtL5HDx0/5tZwfms6dQhFxsNhGCzlMpOMGDV3u6GZD+o:ycnyyZrWiXjnGtL5H2RtOOKxQhGCzlMJ
- TLSH
  T1C8544B54A7DD9612E7BF63BAE4F0150143F1B8E379ABE75D28D840E90C9B740AE013A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.Runtime.CompilerServices.Unsafe.dll
- Size 1KB
- SHA256 b27ab2dd6f3b7d12406fe69e8fafb66852575395e44d0a2778c19ebbef2e4930
- MD5 dd332fb08b7241283572b23a76329013
- SHA1 7478d114c62399b56b6dfe1d8d9e7def321f015b
- SHA512 ff6542071a32213fdf6928f7c2c509baea40980cd3a0aa128a2a4270531d3dd6190580869cca384eafbd056790334a85e0f4206bb892e246d2f26a75e9a97d64
- TLSH
  T11B314C279BE444BBE159033A0B93479137B1D229176A575A2DD50129BC0027E4D16BA5
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.Runtime.InteropServices.dll
- Size 7KB
- SHA256 d06923309efda2b79f1fd086263e4724ff54cf417cf1ce66304155b794c20a7e
- MD5 e5ada8338dcb4ff25344408260bf7f7e
- SHA1 57c6739a7a35273c098896a18b6e81f7dbc7eef0
- SHA512 98ea0ef54bd6a8199cca7fcf6e3f0099bb208ca7d895c8933b7e00e7ba169edf6c6a7201a5e8791f90adbfec9e7be79040e35fe51c0137e36125d7a2a1e4bb06
- SSDEEP 96:JGIO1zxxQQf/CzfrVYLIIeLhEEgJgYlvEyLoHbN+SElzxlSlBPP:PO1NmcqzUIIelEEsTZQHbW9xoXX
- TLSH
  T1B0F13E36EE08657BCC7E12B98EB224F203B324FC119E4D2A95CC867B51CF2660932365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.Security.dll
- Size 127KB
- SHA256 7ec7c4ec632691c431ec06a4b68c6c1a43875061bd71ac8cba7fd8dde13fce2d
- MD5 b6eadb05a75cc270c159de49630dea18
- SHA1 63951ad8d986ac1645e923bedf72c664b499fa3e
- SHA512 8835bc3bc8ac7d4a1b4f7185f8a47d8f44b53622ec4392b92919a2bf36fd152e294c1ea0de1d11ead5a3e9bf4d96ad992e9e54dd7e72a9ba0568b8cb212670c3
- SSDEEP 3072:nCbIP9QfljtJe22f3mhqYeqKjns8drZBb9LwoqoMZFsIHHrnmRKSCzwn+8sI1pU:RGfljtJnRhwwoqL8sA
- TLSH
  T121D309283BE8CB1AFBFA57B9F0F0041157B0E606B562DB4E1D9151DD2C27B421A12A7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.Xml.dll
- Size 1.2MB
- SHA256 9d7f6d24dbb453771bde990ba2b439bb6936e97cbc2c4a014e74e203b1675867
- MD5 32b9c54bec54955a352532511b377ffc
- SHA1 a88cc15101a638fa14a088d048f72e3810c4938e
- SHA512 b34a754e14b8ef4bb6d8ab0d24585d572a7affb7942e3711072eeece214ea3c1077537885b1bc9dd37c5590999a5543407adddc5dfa43d27ec9a1b27eb6e140e
- SSDEEP 12288:sY/AQi7KrtoHqE8KBvdWfFb3X84qoECPqTJOCjbr9hSFswDJZi:sYtT5CqEdBVKbAYCjbr9hSrDDi
- TLSH
  T11B4508006BF8DA1BE2BF67B499B016244BF1B851F2B6EB9F284124D91C537009E5277F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.dll
- Size 1.6MB
- SHA256 785e6b6f9f3d9089ba2ff693251143311d943c10e04cf14b23e8cb4f129745f5
- MD5 577c35506fccb10d10e05c330b65ef06
- SHA1 e43983972577c4c8e44907bc27f6bc317d638653
- SHA512 34be6955a93faaca87fa98710190d0b8239714341d4c219d1e8a404e46c886b42768fe2cf4250bbd070c37c481d0540d36fcfe7358935b7e4017fcbecaefbd0d
- SSDEEP 49152:Kv5u0KPEXzM3padHvYApy2kGWIU8V+sFP10AM2:KoiwgdHvYAesFP
- TLSH
  T17E756C0067E8CB2BE16E1379F0B209110BB4F50AF792E76F5EA568BC1C57B018D517AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/UnityEngine.CloudBuild.dll
- Size 11KB
- SHA256 bbfbcec8300a33cc4170f5099fcfb79ae4cadd6e3bb7bbd4dd239f3ee406adca
- MD5 6a4d2e336d21860ba43599c6f2bfc932
- SHA1 1b22e44b74151f99867ba30787bde781415c5180
- SHA512 87bba1e3d94b85c00fefbd4165d8548b3eeb349612727aac6149d04f9675717b88b17130111b0781af78960c9f717b1cffd0145bbfa449b2dbf8d92ecd985616
- SSDEEP 192:+TuO3KB8FN8I5WJH9Evak2ZgfQPHM1oWdfUJDsZZeuAvi2u//aowhBlk:+q0AJrgfQPH8ofJDceuLaF
- TLSH
  T14632E95AA7F88626CD9D6B7698F302404734FA46A872DD5F0CC452DB1C133E54D92B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32