Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-es - resource tags
arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows - submitted
29/07/2026, 03:12
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
gd elenemigos/GeometryDash.exe
Resource
win10v2004-20260513-es
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
gd elenemigos/fmod.dll
Resource
win10v2004-20260513-es
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
gd elenemigos/libExtensions.dll
Resource
win10v2004-20260513-es
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
gd elenemigos/libcrypto-3-x64.dll
Resource
win10v2004-20260513-es
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
gd elenemigos/libcurl.dll
Resource
win10v2004-20260513-es
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
gd elenemigos/steam_api64.dll
Resource
win10v2004-20260513-es
0 signatures
150 seconds
General
- Target gd elenemigos/GeometryDash.exe
- Size 10.2MB
- Sample260729-dp72mstbmd
- SHA256 fc5a16c292278bc2e8e078fb1d5023c2bd658322dd72712767ea70c2dd9ec6d0
- MD5 86c9fed4084cda75ff4ec648063a6769
- SHA1 cab5d760ecac53e5bbfcb3a1fbd67754fd504d74
- SHA512 cb03601e93e2f51a655e60c173a3353c2fbbfc3d69ded4a962d353761fa18f6235615fcddf680a75f4f372f19dbef1fe2b6349d981a8e0526756a38a1968a0e5
- SSDEEP 98304:mxqymadz099aZ57ZNL2SeuFJ5hKLi7fDBoVxfS+VxfS:mxqymMA/aZ57ZNL2SeuFJ5EeT+LfL
- TLSH T1E9B63961A76405CBD0D18AB8C769F632C672BCC8A330649349E1BD27BF5B0E31D7992D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\INF\msmouse.PNF GeometryDash.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2468 GeometryDash.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\GSE Saves\settings\configs.user.ini
- Size 422B
- SHA256 b1def4c0d8c2c50fc95100791cec56e990c76af399c369df512a085b1301e8c6
- MD5 33743ae3c070a469b051d6e300a14691
- SHA1 cf8d6c2ce3fb588123130b9ac1aa64a19b61d8c5
- SHA512 d76818eedf9d869b8705762cffe5899fc10056bb11f639f162a33c2326568cc876ac2f14368b97bf186680d2b9ec9c54d88f4abc90dff81e49393305bf2ce852
- TLSH T1EDE0F1565C071DB91F7206A374E57EEF4F0E93DC09402D9D37C127065192CC29821B44
- MD5 SHA1 SHA512 TLSH