General
- Target Among-Us.gml
- Size 1KB
- Sample260731-xp2dmsfc26
- SHA256 009ba6c66e7fe78488767ee223659575d8475169ba5843060656121473c0effd
- MD5 2a0db40133d08743afb05996db1a3841
- SHA1 735e3ad63738441acd1d65a2fc5637c557c4254a
- SHA512 69150b662c0bf290a628109a91b174a5ae727bf77c16e2ec1f3f75a4d5a00f3918abef190bced71b7b5f86a49e71a68bb7f0f39e7398579765d71dad4a8c2f37
- TLSH T16E31642476B9C5C962D0788D813DD9890D1AC212C63DE0E2DDCCD67AF5147CE46BD8F9
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Among-Us.js
Resource
win10ltsc2021-20260513-en
13 signatures
900 seconds
Malware Config
Targets
-
- Target Among-Us.gml
- Size 1KB
- SHA256 009ba6c66e7fe78488767ee223659575d8475169ba5843060656121473c0effd
- MD5 2a0db40133d08743afb05996db1a3841
- SHA1 735e3ad63738441acd1d65a2fc5637c557c4254a
- SHA512 69150b662c0bf290a628109a91b174a5ae727bf77c16e2ec1f3f75a4d5a00f3918abef190bced71b7b5f86a49e71a68bb7f0f39e7398579765d71dad4a8c2f37
- TLSH T16E31642476B9C5C962D0788D813DD9890D1AC212C63DE0E2DDCCD67AF5147CE46BD8F9
- MD5 SHA1 SHA512 TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)
-
Suspicious use of NtSetInformationThreadHideFromDebugger