Overview

overview

6

Static

static

3

drive-down...01.zip

windows11-21h2-x64

1

.gitignore

windows11-21h2-x64

3

Directory.Build.xml

windows11-21h2-x64

4

assets/greencheese.rc

windows11-21h2-x64

3

assets/hit...nds.rc

windows11-21h2-x64

3

assets/hit...12.wav

windows11-21h2-x64

6

assets/hit...ks.wav

windows11-21h2-x64

6

assets/hit..._4.wav

windows11-21h2-x64

6

assets/hit...AA.wav

windows11-21h2-x64

6

assets/hit...a1.wav

windows11-21h2-x64

6

assets/hit...a2.wav

windows11-21h2-x64

6

assets/hit...hi.wav

windows11-21h2-x64

6

assets/hit...er.wav

windows11-21h2-x64

6

assets/hit...ng.wav

windows11-21h2-x64

6

assets/hit...ay.wav

windows11-21h2-x64

6

assets/hit...ly.wav

windows11-21h2-x64

6

assets/hit...ve.wav

windows11-21h2-x64

6

assets/hit...it.wav

windows11-21h2-x64

6

assets/hit...ap.wav

windows11-21h2-x64

6

assets/hit...ep.wav

windows11-21h2-x64

6

assets/hit...p1.wav

windows11-21h2-x64

6

assets/hit...ll.wav

windows11-21h2-x64

6

assets/hit...en.wav

windows11-21h2-x64

6

assets/hit...is.wav

windows11-21h2-x64

6

assets/hit...nk.wav

windows11-21h2-x64

6

assets/hit...to.wav

windows11-21h2-x64

6

assets/hit...le.wav

windows11-21h2-x64

6

assets/hit...ll.wav

windows11-21h2-x64

6

third_part...ldo.js

windows11-21h2-x64

3

third_part...sh.bat

windows11-21h2-x64

3

tools/ida/raycast.py

windows11-21h2-x64

3

x64/Releas...se.exe

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    drive-download-20260731T234438Z-1-001.zip
  • Size 116.5MB
  • Sample260731-3sg23atsfv
  • SHA256 95516d383a8a5dc47df460da03f2570c4440d3103825865a9d641f41f6f0a14b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
adwarediscoveryexecutionspyware

Malware Config

Targets

    • Target
      drive-download-20260731T234438Z-1-001.zip
    • Size 116.5MB
    • SHA256 95516d383a8a5dc47df460da03f2570c4440d3103825865a9d641f41f6f0a14b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1
    • Target
      .gitignore
    • Size 452B
    • SHA256 bef7ecacc1da085dfe3e6c918f391bde26343a15541fbb0db0b298594cdb3c27
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral2
    • Target
      Directory.Build.props
    • Size 219B
    • SHA256 2e6b772c0c2ec41cf9b464b2da815f9024254a654948338c434b9f3b234b9088
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral3
    • Target
      assets/greencheese.rc
    • Size 832B
    • SHA256 04572ff0a6ade2c138c917b77ec5095391b8c944640e5808866b053273f0638c
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral4
    • Target
      assets/hitsounds/hitsounds.rc
    • Size 5KB
    • SHA256 b54d8ae9c9081be8c48960dc302ad592c12555046ddb3dad32b1a3f3d160a691
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral5
    • Target
      assets/hitsounds/hitsounds_bin/000_12.wav
    • Size 27KB
    • SHA256 170d246b840032663828a5abbb299fd6d9a7c486a743894d4321df883e679425
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral6
    • Target
      assets/hitsounds/hitsounds_bin/001_300_bucks.wav
    • Size 488KB
    • SHA256 8eff25c4ce493e50712193bcd1e476b3e1f44674e51934781bd2b2f6f5ac1087
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral7
    • Target
      assets/hitsounds/hitsounds_bin/002_4.wav
    • Size 43KB
    • SHA256 ab8d11330a9bcbe6bc1648df9de34fc2bbfe1064334dd9bdb4856f18ffe481d6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral8
    • Target
      assets/hitsounds/hitsounds_bin/003_AAAAAA.wav
    • Size 344KB
    • SHA256 ead1c680a87e32da6ea0819f65af6c590efeb0ead5e035c3179dbbb8a5912c7e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral9
    • Target
      assets/hitsounds/hitsounds_bin/004_agpa1.wav
    • Size 328KB
    • SHA256 e1450cacea2608b3df924731482e55165abad850a4eb62d65f885c911ddddb0f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral10
    • Target
      assets/hitsounds/hitsounds_bin/005_agpa2.wav
    • Size 288KB
    • SHA256 3c33d616884226e22f87e7bdb9c6753c259d57595d082b7b822937cc528871de
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral11
    • Target
      assets/hitsounds/hitsounds_bin/006_ahhhh_gachi_muchi.wav
    • Size 328KB
    • SHA256 74a51e2a9fd6ebcb78c0b52d43dd7fe44f52600d6f5d6bd6c732d7585306ff6a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral12
    • Target
      assets/hitsounds/hitsounds_bin/007_aimbooster.wav
    • Size 6KB
    • SHA256 293d4f3592ba99a5a68ca476dacc91b045436d9231d90f5098c78d0831c3ac9a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral13
    • Target
      assets/hitsounds/hitsounds_bin/008_animezing.wav
    • Size 128KB
    • SHA256 ce285e9923ab4ff4accb8c6deae3cd8ff77564a3c01c77e0542e14d307fa56f1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral14
    • Target
      assets/hitsounds/hitsounds_bin/009_applepay.wav
    • Size 243KB
    • SHA256 1c4f1ceed617a2daa096b83b3dc6438df9c7d08ab67b22f2d2f09b71b29d7387
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral15
    • Target
      assets/hitsounds/hitsounds_bin/010_apply.wav
    • Size 75KB
    • SHA256 fc8244f01245f47855a573d4420dedcfa90d3d72c44080a366b8ede6b57db576
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral16
    • Target
      assets/hitsounds/hitsounds_bin/011_archive.wav
    • Size 146KB
    • SHA256 05fd1a87272d430ed52566a9ac7121b6812659d795e5e41e37f552764649f5ad
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral17
    • Target
      assets/hitsounds/hitsounds_bin/012_basshit.wav
    • Size 97KB
    • SHA256 dc02a953a776f7e5b9d13dcc9aacf8133eba901db752100c6e49c14916d86d21
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral18
    • Target
      assets/hitsounds/hitsounds_bin/013_beap.wav
    • Size 12KB
    • SHA256 a9d3da47eaed4a2305c301e61639258c03653332794b34eb45570d00a091ae33
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral19
    • Target
      assets/hitsounds/hitsounds_bin/014_beep.wav
    • Size 59KB
    • SHA256 eb8f0ce1992327f2d66bfd1ed7aa64fe450c0e89bdd94929d344ae3b84a4a30d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral20
    • Target
      assets/hitsounds/hitsounds_bin/015_beep1.wav
    • Size 7KB
    • SHA256 d9afbfe5d70a036cc01ff07b6d1da518e84443214928a98508c564705a65c70f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral21
    • Target
      assets/hitsounds/hitsounds_bin/016_bell.wav
    • Size 41KB
    • SHA256 ea72b142bb7e6ecae22b9312ac8abd8b0ff0017ca2f20ffe61328805ae15eb73
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral22
    • Target
      assets/hitsounds/hitsounds_bin/017_ben.wav
    • Size 53KB
    • SHA256 cdc626090b25c32fbca0910f81f7a05dd358424dc2e42fe69c6bf619fa50ef06
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral23
    • Target
      assets/hitsounds/hitsounds_bin/018_bepis.wav
    • Size 129KB
    • SHA256 fbdeb9e7f96e8d4cf652e1da88dafacc4802894833c3400cb828df81c66c0f23
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral24
    • Target
      assets/hitsounds/hitsounds_bin/019_bonk.wav
    • Size 37KB
    • SHA256 8f22831d52397c52801e30a458a99afe97e3ffd70b2922774c5ea1439b46993f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral25
    • Target
      assets/hitsounds/hitsounds_bin/020_brotato.wav
    • Size 15KB
    • SHA256 a1ea65165e48791d506f33554d9baef12db3d7600a8baaf7d811655c7180665a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral26
    • Target
      assets/hitsounds/hitsounds_bin/021_bubble.wav
    • Size 32KB
    • SHA256 c6b25c60f50838761839970a66f7bf2766659f953aa7759160ce558eb6cd7b5a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral27
    • Target
      assets/hitsounds/hitsounds_bin/022_Buttonbell.wav
    • Size 15KB
    • SHA256 64dceec45b7d687df5071750f7c029fa65ee9fe72d005c2dce97dd49980c16c3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral28
    • Target
      third_party/lua/ldo.c
    • Size 34KB
    • SHA256 009b4c97605a92037d8bd9a8d7d0c710045099e7175a602a22d75acaafea0e27
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral29
    • Target
      third_party/zstd/lib/common/xxhash.h
    • Size 256KB
    • SHA256 8cb837b21a8fe9a6b9dbcd0961ab16e733bfcbfa9e003f3a496ce07ae80aa8ee
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral30
    • Target
      tools/ida/raycast.py
    • Size 9KB
    • SHA256 efba744e0a125cc831c0c4bdc751c6653e63cf61a88184114724f8eb6688b306
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral31
    • Target
      x64/Release/greencheese.exe
    • Size 21.5MB
    • SHA256 715161044472ab7ce6d5559a36e7059a89456c485f3a0e08ebb4a6dbcd9ddd2e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

execution
Score
3/10

behavioral3

adwarediscoveryspyware
Score
4/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

discovery
Score
6/10

behavioral7

discovery
Score
6/10

behavioral8

discovery
Score
6/10

behavioral9

discovery
Score
6/10

behavioral10

discovery
Score
6/10

behavioral11

discovery
Score
6/10

behavioral12

discovery
Score
6/10

behavioral13

discovery
Score
6/10

behavioral14

discovery
Score
6/10

behavioral15

discovery
Score
6/10

behavioral16

discovery
Score
6/10

behavioral17

discovery
Score
6/10

behavioral18

discovery
Score
6/10

behavioral19

discovery
Score
6/10

behavioral20

discovery
Score
6/10

behavioral21

discovery
Score
6/10

behavioral22

discovery
Score
6/10

behavioral23

discovery
Score
6/10

behavioral24

discovery
Score
6/10

behavioral25

discovery
Score
6/10

behavioral26

discovery
Score
6/10

behavioral27

discovery
Score
6/10

behavioral28

discovery
Score
6/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

Score
1/10