General
- Target MapHackDesu3.rar
- Size 485KB
- Sample260731-ph549aad77
- SHA256 7950c810cd998c3980f98a14fc9f512e062284ba4fa71f4dce44fb5bc1ba8ade
- MD5 c0c3b4f0257f339530075baf056c436f
- SHA1 75b751f9021a024b206cb7a012de3bc041bc3374
- SHA512 483874e09a7af1605070d7ed68ffbbae36b408ed3b37712d8a3d86a8e5d132c384f785b98a25e591db515a113f7869f63c62ea32dad6e66402a3155d1c40b3f2
- SSDEEP 12288:DsmWHz1aDTzwz4crmwbPOUbY4oiUo7Z4ERqnAHK:QmWT1akzNrmwKUNmsOTWK
- TLSH T1D5B423FE532F8083A63DBF11563EA6AB95C841CA288C1B5B75DDD01D548F1B7A36E032
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
MapHack Desu3/MapHackDLon.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
MapHack Desu3/MapHackDLon.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
MapHack Desu3/uninstall.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target MapHack Desu3/MapHackDLon.exe
- Size 713KB
- SHA256 7b7870040b46909121d61c2787b32aeee66251d46ca999a858b78c7617efa44d
- MD5 d23fb4526b26ad38290a5221d29f7b62
- SHA1 fb0cc50d97e1ca185be15a215f3f2610e5bed354
- SHA512 e23c6703ea7e9fc1bcc44dba3f4db3755ccbb842a48d421b2aa60867913ea907d628b292e14571d5e7106f5e08b128343a42b69453b4f0ac81d59033716ebec3
- SSDEEP 12288:9hkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcbNMQ4PNlX41:LRmJkcoQricOIQxiZY1WNMQ4jX41
- TLSH T19DF4A021B5C69036C2B323B19E7EF76A9A3D79360336D19737C82D315EA05816B29733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
- Target MapHack Desu3/uninstall.exe
- Size 229KB
- SHA256 4c61edd1aa6e941d0b5b144a7fffddf39732f8797c7ffa82dd88a924e1eb6e58
- MD5 1244be3e3fcd6cd8da85f899165d72a3
- SHA1 7e91bc24a60b10e9d6ada75abbdbaef07c3a5bc8
- SHA512 4e889aafced810f07ec2410d507e65fbe9ccc6b6697da99ea019dfee2d37dfd2cca2c060c629a26d3bddceb95a618e1d866ccdf562b62e9fc72ba61c5d5ea05b
- SSDEEP 6144:UfkIfjOzixt5AB57JobKnHE4J/HS9EvkP:Uf9jIixxs/HJvkP
- TLSH T1E834BE2373D1CC3FD4AB05B05EAB3B696DF5BA101631C45716E82D89AE70192EA3E317
- MD5 SHA1 SHA512 SSDEEP TLSH