817a7547683bbaaf63bb6cb677d84ad0d5426910de35a72fb30fe96178c706a4

Analysis

max time kernel
150s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/08/2026, 03:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-02_ea0660308639050174d00f507f16dba1_amadey_cobalt-strike_glassworm_icedid_satacom_vidar.exe
Size 95.4MB
Sample260803-dlvl5sxeka
SHA256 817a7547683bbaaf63bb6cb677d84ad0d5426910de35a72fb30fe96178c706a4
MD5 ea0660308639050174d00f507f16dba1
SHA1 aadcbbc98b45ac5ecf63107c58e82d74ad8f5865
SHA512 1c40c7ac6f1227917c7c63792b885dad028b2650c0c1efa659385adb504690bdda62c123a7e818e69c167d0841c8b2f18e80caf114af53e0fbfe2b3f49fdfe76
SSDEEP 1572864:vZeYz/wsxSPQ4AAfkaimsqNTv5v6e86tYaGK+IELOoKk20rFLj8K9eK+VqYItX:vZeYz/WPQHsxsGT0kiKk26d9V+V
TLSH
T16E28336AF1748670D477C079C6D26A9AEA7130865730D6CB4286977D3F13BF68A3A330
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
4520	cmx.exe

Loads dropped DLL 1 IoCs

pid	Process
4520	cmx.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeRestorePrivilege	4520	cmx.exe
Token: 35	4520	cmx.exe
Token: SeSecurityPrivilege	4520	cmx.exe
Token: SeSecurityPrivilege	4520	cmx.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2852	2026-08-02_ea0660308639050174d00f507f16dba1_amadey_cobalt-strike_glassworm_icedid_satacom_vidar.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2852 wrote to memory of 4520	2852	2026-08-02_ea0660308639050174d00f507f16dba1_amadey_cobalt-strike_glassworm_icedid_satacom_vidar.exe	90

C:\Users\Admin\AppData\Local\Temp\2026-08-02_ea0660308639050174d00f507f16dba1_amadey_cobalt-strike_glassworm_icedid_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-02_ea0660308639050174d00f507f16dba1_amadey_cobalt-strike_glassworm_icedid_satacom_vidar.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2852
- C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\cmx.exe
  "C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\cmx.exe" x -y -aoa -bb0 -bd "-oC:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime" "C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\payload.bin"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of AdjustPrivilegeToken
  PID:4520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

7z.dll

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\7z.dll
Size 1.8MB
SHA256 9657871fdd714c96a3a21f59abf04abb14944516c2a10c8cb606c12a71a75957
MD5 910de767458feabfa4de2d7066e825cc
SHA1 51ecc880e3b6d1447a6f9e9fb6646278ca7a393a
SHA512 eab94840e17b38602cd0f3e40a5282adf5a1c1d8a3056162c039740d819b837802ea04f3ee052c4655d5cf3562282a838b4930469bfd9369fd039cb634cabdf8
SSDEEP 24576:NhnA9xGhdFIRw/PEhm8kvIv9hCEiptvu/DzEoFQ8Z:NBA9xadF+w/PU/kDpxboFQ8
TLSH
T1B6954B6BF6748270D0B7C075C5E2AB9AEE7134868730A6C712859B3D2F17AF5C639720
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cmx.exe

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\cmx.exe
Size 563KB
SHA256 2bff20bd679d45166b8c2d039044a4ca16189e6d69ff9c82345b4c1306986ec4
MD5 d966f9b3019464b9447526ca4f7f5082
SHA1 436615113bcfdadb71a60d61f73f97deb655faf1
SHA512 d6a39e85c536d489ee2d9d46f6bef538017516413a59771fe58bc97c5ec23930b49430c1bd2229c647fe11fed80a426f315a26ef591e059131da75bba33ee91e
SSDEEP 12288:xVPifKt0JnH6MCg72q8qNqnI1ujaZzd06lHUV:G00JHMgyqTAh6WV
TLSH
T126C4F825F6748331D073C0BAC5D6A69AE97230865B3189CB4286C77C3F676E6C63A731
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AnimationWindows.dll

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\AnimationWindows.dll
Size 7KB
SHA256 6e2ca06d33a30505f0d15be4b97f9c0a5243f6ac59750a5b86e3fc82474d846e
MD5 b328e55a7adee34045268587f7d51d21
SHA1 4b6462999959a7730b4de605427d98e1ba040cef
SHA512 519acbfdbe5f8f09af4aee4e1a14d01fed9514a9203bdc38ef0da483c356d50d09820c86a03d2a6eb813d4fb91b18fa2da5a84c5d5ffc15983e17e80d5c62c30
SSDEEP 96:e+264+nGSf/80RY/skz1XDIuy8i4AApGJXDWgUpxo8w:e96/M0RY/sstIuO4AsGJXDCw
TLSH
T1AAE1D71297AC8636CBAB0733F46553470975AF099923FBBB4A40680B7C17B864B23770
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CastleMiner.deps.json

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\CastleMiner.deps.json
Size 27KB
SHA256 a3fa557ac7a589de28a37555663bff45480a7d637eace1db7ab014a9045aa0f5
MD5 f9eaf11bc560e5c57b3b36fd2d61fe1c
SHA1 1c4d8c09b1ac8e13a50c4f025c5a03361c7a2ac8
SHA512 e7971929810e5c632cf6d886653b39f10ac4f61a4ec0ab074356477a76b5065606e73ace688cde6a06844a2f7923be975c2d302d98b228f856338f50c71738d2
SSDEEP 384:Qjv+9/aBnquNOMK0bGmA2HufuUzeukLsF:QdqF
TLSH
T18BD26174D9904EEA0835ABDE18398A49F2B1036F3084086EB4BC742DDF77EBA4155B7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CastleMiner.dll

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\CastleMiner.dll
Size 391KB
SHA256 91f6bc2a2de4a722e62596b3cef386fbfc587fc37617100273828cde02611adb
MD5 449f679dcae8edce81ef10d83cae0124
SHA1 68fc7df1fa938982e5d06c708934a6c26cd0d847
SHA512 fc0da238fa383c9c75173faba572709a8aa0be1c9aa0fd32822c8a3392f156de0ce9cea8f7bf6aaba843a8bb96df7670d16459679ed5a7ee8142aecd4d1a50a8
SSDEEP 6144:Jrl7KufJe82Tok6F2jsHbGzj2bVErGqmugAGCpxfXm9+tzOjy3fTbxv4XsqcPih:JrxKuk82TokeGubvqm6xk6yGbxXP
TLSH
T17A847C1073F86E26F0BF67B769B6A802D775706BD46FD75C0C8064EE19A2780DA017A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CastleMiner.exe

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\CastleMiner.exe
Size 152KB
SHA256 b418e2dc05e8a3998e4792a449792d617ac48767e9672152f7982285266b0e9a
MD5 f2dabd61e38bca03c63aed549b2224d2
SHA1 55efdf6962eff025c0017aeb495a2b2a0157287a
SHA512 ef48955137bb4715a126d52d08aed8874ed65aa8d6089277757dc22bed8d070974e5cd1fe88a507da409a8ee57a32459836afa2bf422bb136bb417d8aca8c033
SSDEEP 1536:a9YXnq9YamgiYSoGR6Ok84vKqILjiCBs86QKLRwqzm4XxCY01NTZZ2bo+W26mmIC:FqvmgiYSoIk8uIHzlqRwa/YB26mmIgx
TLSH
T1D8E33B07E2A851BEE1B6D679CD924C41FB7378594B71A7CF07504AB60E73AD0AE39302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CastleMiner.runtimeconfig.json

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\CastleMiner.runtimeconfig.json
Size 372B
SHA256 3e738dc1fc73e7063bdbbb62c3cddb610c33a70d6b324fd359cc835c4536ad5f
MD5 3a9596c0a90b1db0647fb9e2b8ae55cd
SHA1 06ca6df7e071ef3598b1b1007767b517d626350c
SHA512 50d2e4588bf8a8bfedefe7d35fa22de0a41be86e7f1bb3698bb0eaf5c2758cc89b4de30c39efeaaeedfd4e29300759b187ef8dde6b67baf3c18a2ab8fa2e46d1
TLSH
T144E0DF69CA146DA711FAB27ECA21C082EB30632700041C81B8FD080CAF7B5A50113F96
MD5 SHA1 SHA512 TLSH

Submit Download

ConsoleFont.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\720\ConsoleFont.xnb
Size 23KB
SHA256 7b591d21810124533a82bda1a9fe9304a6e8d4b6fb0a53091c905790166beb9d
MD5 c272885f6746ef1ce8ab77297abdc218
SHA1 307a40e7ac021e928b467965289525e3dbcde310
SHA512 616f9f96a8bd8e97ac539236812d997c87e1a08709d7018e74ac2a1fd7587ce9e79aa32aabe079a1ceaf0e33b21d5d96602f66173943cd295bc670cf24e9627b
SSDEEP 384:htfZ1L1x1sn6cW/SqKd8zOpo/kwoac9oArI6fae:RHu6wqKd8zOSF29br1fae
TLSH
T18CB2CB13B20CC658D8755D38983BCED4E3E6AADC826515CBB6C86E3FE8CE604DD442D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LargeFont.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\720\LargeFont.xnb
Size 99KB
SHA256 4693b0db2b24e16050b50c34bffbfd71a533b5d1b2c7bdf1554fc6d8ed73bd67
MD5 22e01e79eee44653876297a9dcd75550
SHA1 536e77035f758acdf33762a06ff93e26cf8a84be
SHA512 2e694a0469a130edfa68f323ed6f314fd78ece0dcdd40e5934b2a79db186c880ec145b2a9e4be1ddc0f16c383d8e367a15629f9b4143c83adcc70df9fa94eb77
SSDEEP 768:YwwyfgR4dSi5CoC5h16khMaBqRJ7nzF9rwww80JZ9sg0QCVXbNIv9Tw/68X5Zmjq:qWEX0XaBqRJO9VUVXbNk9C68X50627Q
TLSH
T1DDA3A811B98CC686D8964C309C1AD2ED26D2BDDCCE1944C7B6C87F5FE6BE200DC649D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MedFont.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\720\MedFont.xnb
Size 34KB
SHA256 294eb96cb7415ba347b57ce2bb94ef7675ce0aa57ffa24640375b0488b9bfb81
MD5 f593250993f926da2de4d5cc0c06523f
SHA1 6f13ad3f3b0905e60faabcab974d2fb969fb5a17
SHA512 0043a780d70dce41b527bee0d8ccfa085a40753f8c8c48f2b96f79e5545018a787dc04d3ec68f99bfcaafd9c0a82fd383fa083168b1fff4f3bb42f98831b7583
SSDEEP 768:nHm3Xriesn+wRWmo7pro1wVGEERqwoz6IU:Hmn9snlRWmo7touGEER2z6P
TLSH
T14CF24512B94DC296D8A54D34DC2AD6E832D1BDCCCA2945C7B1C8BF1FE9BE204EC542D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MedLargeFont.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\720\MedLargeFont.xnb
Size 42KB
SHA256 07d2ac8005e9464229a982bc5396def7eced0f086a74e01a0179be2072ddf245
MD5 fe4b140bf75a945b28d5d50b307c28f7
SHA1 b4e53c3cde1c620a9092483104e6ca64572e47f9
SHA512 536561ed360465b5ec4a2f3843ef258cb86d2af4ff7ebb39deef42e3e27b02e1fe61f890a172416b2ae8666f1fbc5db4fe53e8421bff40332f57204a64a219ad
SSDEEP 768:rBVcsckwfds0TeU+g012Ciw+cwwcb+y1bMSNwW85cAyKwwwaVnEJ:x0TggNB1b5uW85BvVW
TLSH
T17013CB12BA4CC686E8860C349C16D6EE62D5BDDCCE1944C376C87F4FEABE204DC546E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NameTagFont.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\720\NameTagFont.xnb
Size 21KB
SHA256 477d339fd88e31141ea27673c98b9221a865ef0bc103061f219f88ead6650a7f
MD5 b0b9762df6d285166650eadf96e47abe
SHA1 3254e457c75df889ea8ae50fbbc1782f6ac61aee
SHA512 75546405c6fd13bf6b87a3de5cef7a8dee6e833ad7f647e7931b84a68a5d447f1fffe8bf2d5bfd2318df985976ab7f4801fb01666d9cdb309237f6762c64434e
SSDEEP 192:DtfYWwQBBgjGXsevhLDJboJBmygwYcqKWRRElkLRIMd24KE7wHU/uSKyX2n6sSaZ:DtfZ1HGeplPPy/EynoEgRMCMDclkXKQ
TLSH
T151A21562BA5CC5C5EA468C349C56CDE963E5BC9CC9944A8776C87F1FF8EE204DC402E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SmallFont.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\720\SmallFont.xnb
Size 17KB
SHA256 f7dfd58bf0b3ddb70564e2ca1148161f81c729f5b1bfae982136420f4385bd1b
MD5 c266c946831b8bba74784af0041d1aaa
SHA1 a8c329a44602ae708dcb95e4adb7eec333429bee
SHA512 753f1331b2f1605c29e5a5a7651ea7347f33604114a46a6a9c6aff56d48589593e9c6a727b8d475934d17f5e48a5c4592115b624cf0980602a9fe9e5f402db99
SSDEEP 192:ztfYWwQBXzO76DyqIXwJMoLBkPV2qEa1Wfm5HlusaG5K6HFN2C+I4gkg:ztfZ11zO7oAwJMoeP1f5FJnR
TLSH
T103826713B94CC65AD9B54C34CC7ACAD473E9AECCC955198BB1C82E2FE8DE618CD202D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\720\System.xnb
Size 24KB
SHA256 87ecf98bdbdfe3dafc1753276cc78b4ae5da4ad8096f442750a416dc5c0772df
MD5 de83bc526982f7440c4e11d933445fa2
SHA1 5e407b2cd104f9e189efe0648bd81dfc619c105c
SHA512 4cf5543e52b23f875e1ff428dcada17490662191ce6a4ce9331afaefa6a013a1014d85af945f89621d986a8fe12fad12eda288d12d932ae10dedf6ef69cba546
SSDEEP 384:QtfZ1PL892JQ3Nt2eJJ3YJABGlJhN6ePuKWj5E2J5:08MJ5eJJQAwPvs
TLSH
T157B2C122BA4DC2D6D9920D35CC56CAF863E5BC9CC958568B76C87F0FF8AE148CC442E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Advert.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\Advert.xnb
Size 436KB
SHA256 765fb7bac77af39cd31295bd5f1faa5b767779571eca8bb06933f261eccc5ee5
MD5 1cef1905e8b364a5a6f5abb5b141d575
SHA1 96d191f9787832a96c01b8d8513b0d436da55e8a
SHA512 dbb36987e3fe2b3f18e1980a63f04898c6e9f3b5f950dd4eb5a24e0702ccc79a4f872060661a12c67cb722ac9aa5a40838aaf6de75980a362ec5c61e9a92ae3a
SSDEEP 6144:1jMwD4UHqfY2uKeE5014cyvsLb6v3RMQ/tz:eVYA
TLSH
T13994BD01F5E4C6EFC05E107DD87CF1E86AAF3A79D9547DC636876E6A06228772B080E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FPSIdle.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\AvatarAnimation\FPSIdle.xnb
Size 396KB
SHA256 117f975291132cdda16a777c838528ec9c33670703105670487e5c8cf8ecb016
MD5 de0f4e15cff047b688b807e1237a8039
SHA1 9806f0e7016f755300bb3dbafdd0eb4bdb04967f
SHA512 1a63716832514d3eeb79cb6f0c64cb8ebc988f06615e2d372d1bb0e1abe469f2b5727fd9ed9eb774d791c1e79b93c04786501b7efce9f8ef960f953d03b91c4b
SSDEEP 6144:5Hh89BnZJjp0npHG9NJNyru8wxlDsws4S:5Hh6BnZd2pHGUHGDswsZ
TLSH
T17B841944F05155D98116BB27B59B0CB8C308DDA64FAD02673A2FEF3CACD9B1A1F4864B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FPSPick.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\AvatarAnimation\FPSPick.xnb
Size 22KB
SHA256 b00161b2f309cab578bc91cf72dca925f74162e1fb82eeabf15d05402e7d90fe
MD5 d86a14aff9c0c5970d292253710305d7
SHA1 426d39800645a4897a8e6ec7d803a7797b6d7d4b
SHA512 5abb9e8a7c0d6029333e3f1298db6789dd5ef5f7c03e10e1e75a7101a0fd9e247ef9074406145c9b5bcd2c6c9f1c9ce1b4e2000886291924082879c2c92bec88
SSDEEP 384:nTw3RX0hPln633IrvpvorFTikRVBDA92z:s3REhPw33lFTi4BDuI
TLSH
T16FA2A544F10151C9C0257B37A6975DB9C328CDE10FAE0A672A6EEF3CACD8B591F4460B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FPSWalk.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\AvatarAnimation\FPSWalk.xnb
Size 41KB
SHA256 0943f951e2d22ab3f7d306408a90133520f2ee6ff4d634dcf261198c40a0788c
MD5 a352cae8e8d65920c5c195364af56ad5
SHA1 8aeeda44149acec0925bd0b3d2b2dd68ec275c91
SHA512 c43da5b9e94afd1e2a344da5dccc52d087e06112878834ca6942982c32e25bf67bf57b5afaf089e240a51fd228c4de016beadb0b60d93443ed762006794aa72c
SSDEEP 384:ED/0nFutdgPX+++6zDyDUhDUV2d+drL+fmTZwZXIMpKtKRQVG:2s0t6HPwrLKhRpKtKRQVG
TLSH
T17013E744F05155C9D1297B37A59B0DB8C328DDE50FAD02672A2EEF3CACD9B1A1F4424B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MaleIdleLookAround.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\AvatarAnimation\MaleIdleLookAround.xnb
Size 275KB
SHA256 58babb652abe4fce050345469daacbef30a4b76843352da7560c7e4873d31e7b
MD5 1b28b9c3b18aed8f4096074b681543b8
SHA1 e86b998675c142eb18ada64c9bf62092c3656abf
SHA512 a3912e84894689e8fd29b9e827308fad7d2d0f2257dd0b0ea4593dd5ca069f8e5af989854cf8c07f665852e044812a36322c6121f43b116763b6721facb05d08
SSDEEP 6144:NI5NTH4aHhEGCrszkOuz4yvtHdvbLHXDW7sz6Y+8jqKQzBaaa88aaaaaaaa8aaaA:O5NDYsZu7pdv3zW4zT+2VSK3vs
TLSH
T1A654AE00AC7BB610F5F1C3BBB6117E7ADF9644422E7C8DBF7B91DA0A48E70442186A75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Run.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\AvatarAnimation\Run.xnb
Size 42KB
SHA256 a26007045a2d672226a17a05e52b6e9f3e5ab3f0cde34d5d8d7d4be452b0bbf6
MD5 7d170b25ed83f743c02fb51126d1444d
SHA1 ba1f2b327e631653f2b1d2423c328ce038a2e1b9
SHA512 3c09852b16cdbb50220828182a0234e546f43625ebda5d789b67102fae03a8d160cc4a3dd5f19171960103c9f9202c30ab40c3abd6721d90545765466fe873d9
SSDEEP 384:5rm4xLxlff0NHXhebwXDSmTe47PDWh7zV4aa4aQupDRsWb9DMF5NsO11aq:1jx/ff0ZseSmTeMDm7B1aPbVZM1b11aq
TLSH
T179131889F15044C9E5257773761B5DB9C62ADE880B2C4627BA3FEFBCCCC12091A6164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Stand0.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\AvatarAnimation\Stand0.xnb
Size 131KB
SHA256 7e3cb8921d6a4011568553dbaa9e0ac9563a8b6a3bf1e2a309f9494ffdf2a32f
MD5 9d4bc44b6184967faf3ae71b780c51c5
SHA1 5d8c8eba14ee8477a9d273f5cfe5e0a7e59f3206
SHA512 b20dbd3760f7453b4fa1b73ef3db76bd4c011ff05c5e05bb1f47f34318542b6f9a91d33f7dadb0665ee82a81b89165981804a7e255619b2742fcbe95c234f507
SSDEEP 3072:cfEgP+ofEV+eP0KW2uFXtHD9tB8G8UmNPLXkk8uaa8aaaRaaaaaaaaaaaaauaaaZ:cfHPNfLeP0K7qFqDXf8uaa8aaaRaaaam
TLSH
T151D33C0589BF0A75D1F0CA3BB5827EB6C35618C18E6E1F374B84152D48F6B8EBB42725
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Swim Underwater.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\AvatarAnimation\Swim Underwater.xnb
Size 44KB
SHA256 6fa5d131f143054635f08709bbac51c0dea938bb57c0f9258377941a5bafe0f6
MD5 bc0b89c63546fbdd88f944cf49245389
SHA1 29b861fbac5aa6c0719ff8b4472008249d663ebb
SHA512 9dde2568d0d2326076138b3d54613c5bd1fb65f92af66ca02e05befb039b4e386aaf02805a2f55690228ec131327bf023ef3625264b643e3fe73f31ed2dd73ed
SSDEEP 384:ahmx9eEeKjp4hDLJ0f/D/+PRn1jPD7LVHVln1nnPdUl3sOjz9ZBTH9C7b:reUjgNW/i51j7lHVp1nnP+l3N/tg7b
TLSH
T18C135A80F45584CAC5217B33B61B2EB8C659DC954FAC2623322FEF7ECCC426A5A1645F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Tilt.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\AvatarAnimation\Tilt.xnb
Size 147KB
SHA256 d3ca9d570854b7c16ed76149aa037bf5cdd8edb849b8c1834c92012f2113e703
MD5 38cab24a78250829a354b59587f0df0d
SHA1 3d3738a8f0d45f48c8b0db22655d39694dc08b9f
SHA512 06161f2f595036cc5e4a2dda8448cc098067e1c98ea99d4eca53c9dc35b72d5dcf0b9336525264c9e3a21bfee4aef408a4da387eac5cd062f6b51978d2416193
SSDEEP 3072:2/QVQixBjGjVZWTzOu9zt4awc3vvvh+c/:2oKAUjVZWTzOYzt4awc3vvvhT
TLSH
T186E35042B104A0D8D4687777624B4DBDC39DCCD80F6E8623316AEBBEADD27062F1651B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Walk.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\AvatarAnimation\Walk.xnb
Size 64KB
SHA256 74d75dbd642b594f1d3cc27b524bb196740648ece23ccf285bf5eee4693474b6
MD5 3f21012addd550a35ea301efcec08439
SHA1 c685e1700b9bfa57aae39750a85c7a0968ec4f20
SHA512 807c4c94a5fcf69813646bbfbd1b5605454cf1db8bf9545fbcea82703929a189643f5f5b44b48ca074bc71e1153c50de631f0069973cc2399d5c7f1cee6d6c19
SSDEEP 768:k+PhIAYVVkeqGOIfducfBjwd24gQCL6Hn8BwwNPIPIP3Fy:k+5KJw3gQCL6H8Bww/y
TLSH
T1B0534C48F10049D8D155B7B7711B8EB9C2A9ECA08B6C1227723FEF7DCCE56082A1565F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Wave.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\AvatarAnimation\Wave.xnb
Size 141KB
SHA256 5bf8213faa50153f7b5fd5278403a7ea701aaa1ddf74ad1518dd0c08a1397532
MD5 8bf565c3e0ed31394d43fd7168ea0846
SHA1 c1483d1ff63c23bc0e08fc88dbf141288a455f29
SHA512 83120c47c4cfe747a4c8a650d285b61c4b964eda1f417438801c0b267579351900e06a68c8a8b73f3c42875d41212ece64a0f0e4cbc3d6a4c1ede7bd170c493b
SSDEEP 3072:4pDOCZWMOBUF+sfUQD/rEbkt5BZqE2n88uaa8aaaRaaaaaaaaaaaaauaaaaaaaaN:4p5Z0O+QBjc88uaa8aaaRaaaaaaaaaat
TLSH
T181E38E88E83B4BB2F8B010BFB9523F51DA84D499947D5EFB7F6491074C8F49A3A16324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AvatarProxy.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\AvatarProxy.xnb
Size 201KB
SHA256 583411780d33ad99e3b789434e453dcbf909c0eca59eb9ca1ad95b2183698791
MD5 7f8f7646c156ede0ffc5e70a0ba0ebad
SHA1 a2c7c1d0589f1be9dd5f553d20546afeb29ac303
SHA512 9151091ddfcfc9e145e49487bb2b7679e02961072ad6dbcfd3a0dde24b4808e0b3bf0fdf8af371d888bc6603ef441d1940c7b7af7a4b77fd23adf44fa0dd954a
SSDEEP 3072:lPVjO25aCmmzC4GTzjhhjQvQdHzp8Xpl3tA0YwGQurmbeEQD8HIKV5U:BVUCmmMTztavQdHzOXPd7YwGQurmXQDX
TLSH
T180147B192A430A98DA30373A0D6F5F67ED18A1AB5F318B7FE2307A0E6DF471DB601552
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Billboard.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\Billboard.xnb
Size 3KB
SHA256 b49b709493f3f5261f1e657067517cda67c94b6135007cee0cc74abbac268be2
MD5 1d6a74c0b324ebaf13793f66a69f247e
SHA1 c03db3f29865b0b0b887d0c727010ee6f494d2be
SHA512 fce128cc9097ffc7e0bb1ea9ced987cc5b140965a5ec61ff52423041fb7beb01f0852164a28c44a4154fd1d2c1133d49be6e8905a4092b54a72fdcf8928d1b34
TLSH
T1FC81CD626B40EE2BE5D907728DDB2BA0F3308955A763479724C0971E6CB03D8CD4B29E
MD5 SHA1 SHA512 TLSH

Submit Download

CircleBlend_0.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\CircleBlend_0.xnb
Size 21KB
SHA256 03a555d54bb23ce48c1cf018ed23a868246d2f707b06e1d78c75dfb6330c5cdd
MD5 de9c77fc13da9cbac59e69274a57ba80
SHA1 8828ba580dc683d01f7e0eede3c1b0af9af4dd1b
SHA512 053528cd53c1830240fcac82b024a1f96521ad8d80a43659581fd881d3991c5cb666c32de6566d46d5f14378986210bd66e2e64400c9d664b867bbcd83e1d57b
SSDEEP 192:ibJ5Uk/Vi+iH+P6045mmJuDJy8fL5M1B1dyOZ5pIbEj:iV5h9i+iH+S04DoI8fVwTdyOZ5pU
TLSH
T17BA28E09FAD8DAFFD12D51BDDA3CB5C94A2F1D78C0063EEA32166D600B425BB6B448C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ButtonA.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\ControllerGlyphs\ButtonA.xnb
Size 25KB
SHA256 1cc01807fdb68faefb96b4a713920082ebbbb71f49540230103847bcedae8f8d
MD5 32443ba6030f383f95eb6da18082faf7
SHA1 f2b44bbe5e90f8f2e8a16ecbb76daa04ca7b824c
SHA512 1aff7f9de70732bca025b92cdc633aee24d5fc64363bfa8ad098e26f0606c43ef9d17580a800712205b461d24d90fc00319d28956cb897b6db454bd88493c302
SSDEEP 384:cdYs1gogSKJCQmz8g0WTW1PJDb90E9QnCCzG8tXmaxK791/HXI7Ki:cY1SxTW1PJDb27dtxx4dT
TLSH
T19FC208694E7C4C0BCA526B740EB5F37026794EC4B85CD385ADE91C677A2ECCB74012B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ButtonB.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\ControllerGlyphs\ButtonB.xnb
Size 25KB
SHA256 81c330ef0190ba3dd87207a94463a1e76215c98b4853d53cdd679b11414eb098
MD5 12dd4a7550f6934ec1cbd7e58be9acd2
SHA1 71d71a6a438877f072e5ea3b9bf07c5d22ae46ad
SHA512 3b221838d0076553f0faf374a953127e769d60313787c12909db6b9d0a7281fc9e86073764f470d31b0dcab1e15361ea71c89f2ef668f694281fbf1b053f6f60
SSDEEP 768:c9Xv56d7aLaN6einE3kbnz54VHe3eAoVLgh:utuke+iM+V+3eD
TLSH
T1C0C22B291AE5A849C3D6B43E5AB1F73CF3995BC20425C3036BD25E7BBF59F825C80444
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ButtonBack.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\ControllerGlyphs\ButtonBack.xnb
Size 25KB
SHA256 42f42ae9238b67dd762e668262bd3677985f129df05e1a262bb8521d27a1a8ac
MD5 19d3b2244acd4e0b6339a526a7b9c372
SHA1 475eb4a88afc24d6a06df1d860b44761c499b27a
SHA512 87ff179e037fb5dce8a9ddbfb481d6ff2ecc29a968cdf09af1b350f99fffc42284d9b2ed10ff372ca5d18d2d2579ea59bcaf83e84662bc89a678f9b9a0592576
SSDEEP 192:1mY+JP+RUrv4Bny1/I4zvi/YgwGC5GVKwKFWLPEhf/5p8ptZocyHM:1x+gCvKCI4bi/Y1v5GAwuCgY5
TLSH
T109C2B50D75E18AA6E108113DF40DF8322F32DC4EA09B19A762CC9F9BB781261C09FA74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ButtonGuide.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\ControllerGlyphs\ButtonGuide.xnb
Size 74KB
SHA256 03cdc121aa87b9e0e78d62e8549563e5369f2674e7ca5a7c98a8a895c0416791
MD5 77008a6fa908ba4e9b2bdaf95abd5755
SHA1 f531dfc153de256433fca784368a7f377657f503
SHA512 864a4843b8114322ddb8a58e6a639733ccf3b248eb29195225b0907172add82637fb2ed7a29f970875901ff106c146a2e1e29f64cd9674b4c74333427fa34802
SSDEEP 768:je+9CY45r56yOEVzHxz7fe9DhoXJgLdu111ZckxoCyxaFH7li7liI+V6I:p9CY4bJOYzRz7kiy5QNKu7liVoF
TLSH
T10B73B087EC461F25E0495137215AC4B74D64CC80A384CA9B90EADF7BF2FA8B4DB6470D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ButtonStart.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\ControllerGlyphs\ButtonStart.xnb
Size 26KB
SHA256 45e91f882db044559e8e15de1fdc7dec33203eb25dad6afbf12a1ff4745c69ef
MD5 39f7f2adf12e8c62f67a033d06053675
SHA1 c7ed8ac388e255207fbb92ba98e83ffb99b58f9f
SHA512 019882ee57d7738041ce5d5635d90e6f2c48ab9a2c4bf585c6ffdb32e4f1371b45964baeb1268ba04995ecb9550dd64ac851fe8927eae13ce90d11550d8629d7
SSDEEP 192:rUBQ+gLpL0JfnL1/IpnQ32mn8SFvOLtxJPc+rLCFWQ+fnVGArJE35osSn8:rU9KpL0RtIpQ3jVFCvCcHSj
TLSH
T116C2EA0D35E15AA5E44A203DF84DF8323F72DC0E9996559B62C89FDBB791231C08FA39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ButtonX.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\ControllerGlyphs\ButtonX.xnb
Size 25KB
SHA256 082402f2d017b814392f9e346563f4bf956a9e28c5f4513dece0b33a62bfabcc
MD5 dab63dff31fc03ce1499560c720bce1b
SHA1 699b0adef944154abac822e8ac4d7e8502cc884d
SHA512 e55cc9a3d67e90eaebca327ed3791346b0d973675719a30dc4d5396bb0daa213f60a3da4a83af56c0ec59d55ff3dac901254f9fd62724c491cb8305f7157426e
SSDEEP 384:cdfBwtVKfVQt+tkfECs/8bHNd2mfjW7tieVhhncWHLrYfQHV:cfmiVQt+tkeMLjCtrRnciLrYIH
TLSH
T1C2C27D2E0AAF6E66C1827F7E4C7FD272E7B84E11182967079CF05D63F53D889B941160
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ButtonY.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\ControllerGlyphs\ButtonY.xnb
Size 25KB
SHA256 cf9f79087c91911216ed24fa5c46542df21e4cd8f397373b794202491640bcb0
MD5 5f34f75441ae916d3db02d237845df7b
SHA1 ba7799e0a565662ff2d7a485bbaa0178ff840d21
SHA512 f1f67e1bd89b6041123c3b74900a43e8fd76eca2b76aec38bcc73659887931c220fcc4def131325c25a1e70cdf46a9919210465ed5b9c8754ae042a097349800
SSDEEP 768:cDq/yFIr3gfjbbWtorm4XsQbh9Mx7MVT:IIUfjvWtormpahxT
TLSH
T102C27D5A805497C7DA2D6D36C063F37813BC2FEAE8658A8254CE9C33B056CC9C40AD7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DPad.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\ControllerGlyphs\DPad.xnb
Size 135KB
SHA256 9ff538ca558404ef06085a8c5df3e6c0eb0a4270abc04872885ff04baaf5197e
MD5 772d2f803731aae7dde913ddb56f079d
SHA1 1eab9576a3e5aa089fba6d9062aaecdcd939cf1a
SHA512 996b275a6f604ab0e0a03c15263d493df3955fbfad50d9de7a90ebd659338bebacfe489bb6453c7a02e6c4390c11e498da3f035d00619ce4c929ac4ca9c2dcd7
SSDEEP 3072:xWVmWWWWWWWWWWWWWWWWU4WWWWWWWWWWWWWWWWWWWWWWW8tWWWWWWWzWWWWWWKWb:xWVmWWWWWWWWWWWWWWWW9WWWWWWWWWWv
TLSH
T1C6D3750D1EBDA259D6A486F36DE8B70D8CCE8BC870EA871405356F4F3640DA59BF0AC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LeftShoulder.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\ControllerGlyphs\LeftShoulder.xnb
Size 78KB
SHA256 635b92b6d9a4b8d65ebe4158339aff6bf8ebd0755edd70c146b3bafa9f261dc9
MD5 192e81eaf7b770bf0d12e7cde376a7c9
SHA1 b8a37f7d5ecaae78b226a61b03a178c03f2a8322
SHA512 561a1cbd3dbc1ebf0a8f0e465aac882e91b39ea281b70849e2ed2529618345ddf3812be77b6b0362f29ce947089cdcbcb46cd469105ee561abd8701899fece96
SSDEEP 1536:G6mQ/GwXPNAmcMWG73CI9pK/GDcjV4MmIWyF:F/Gw1DHbnpjcjV
TLSH
T1D87320C271D802F6EFB85871FCEB2C26350199EF81440C6578F8362A9AC511A557BAFF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LeftThumbstick.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\ControllerGlyphs\LeftThumbstick.xnb
Size 94KB
SHA256 b36901060979d478b9f20b2e2179e21ad94a951198347715c6435c3c1c8c7c0c
MD5 fe7cc5d1cc3f3ebf3e7def590385a4b7
SHA1 e642424e3a8286f5f886d94ef4db68c3e31e3fb9
SHA512 931e997cf353b0d91a76320418bae8de76fcaed72006629160a20b179edff96af36b63982449459394d52eb6a86a675b529c185ba4e210358843e2625b0457ce
SSDEEP 1536:DyhQai7yrlbcHManCs/hBQgCFgmA8gC2gRVgkg7g4+g/4wGPFpGeByBOgw90cgxe:eOatlbcHManCYX2lAVFWPFpGeByBOgwR
TLSH
T13E9340DE4F792DADCBD08EB92A60CB1127FA096D608F8942CF726E57F4391C5356A1C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LeftTrigger.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\ControllerGlyphs\LeftTrigger.xnb
Size 58KB
SHA256 68fc5d0ad25d5b79e4983e0f8010211b36f4e3d50d899cc8a6f0dfbe3b21f55d
MD5 6fd3546f6f8ac58e3d6659b947fcdd88
SHA1 149e7439126f6f9b788d79eced4e9225ad622bd6
SHA512 d23f86ff484891ef46fcb490b37eec2d0f421aa9985340e777d4f9e0e9e84f57e5c727273b9ea5c1040c3b9c9fd0227ab263be9c5ea01af9e37603a8935a1f26
SSDEEP 384:b6tY6VXWipS85I8RqhfRtigJ4cUnjAr35P3LMbOMDIvX0ZsFmgh02VEIn1YIWZPB:ADR+85I8QfzJJ7kjAZIXIcZL
TLSH
T1AA43618530C009D4C95585B3AC67F8762D20AEDBD7A2CC48BEDEBB1B1591316847BB3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RightShoulder.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\ControllerGlyphs\RightShoulder.xnb
Size 78KB
SHA256 3c0ea429021061f1669446ef0288d950ffaec3036e8f0a3a95d1b25710649255
MD5 7dd8da409c59c8d19911a3b1117da9e3
SHA1 c3b0f7bb0edcdae5e02380eac462166c83e570db
SHA512 a92dba9786ed1c578c7e7907729bd22e0e3933a2e83eb9be03ca5517f15627ea55ebd6de86fb4f6f56d63af3f59c5ae6abdf459712f9794a0ad741ee9ed8a6c5
SSDEEP 1536:NX5MMMMMxME8vziIU41nMMMMMMMMwMr7MMx+q68tgZas026o9JUfo:NAh41Lt6agZaskTfo
TLSH
T1587365D6A14846F6EBBD0CB1D4DE9D243007ACAE80448CE670EC3A2ED7C9245557BBDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RightThumbstick.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\ControllerGlyphs\RightThumbstick.xnb
Size 95KB
SHA256 1286ec9780d8be3b8efc38dfd57e14d1464db1528ae786513ff21bd044504fa2
MD5 fd3bd65b994a48f6ad693a1fe58cbd57
SHA1 d6542a4f76e49292c0ab8058cebf7e5afdc09410
SHA512 f5decdbf9428a81fac044b97133f94b78497f9172a71480f0e1cabe587161972ee420c9c5a149c01748f188201f3a0396d13d9dda7c4c5bcdc0fe001ce4f2aa9
SSDEEP 1536:ByhQaiqyBRo6vaaqXAaNhuQgNFgv8grygcgDgXgZ+gx4VCBVs+Qv/3ffuCSgx09i:gOawRo6vaaqXVN4BaDzmCBVs+Qv/3ffR
TLSH
T16DA341DE4F792DADCBD08EB92A608E1563FA086D60CF8946CFB26D57F4391C5356A0C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RightTrigger.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\ControllerGlyphs\RightTrigger.xnb
Size 58KB
SHA256 2f9f867a4c5ea777e3e37440648fbfe36884cd33260321226aa588780ef6af87
MD5 6f191ea5e8d0c5fdffab867786c48887
SHA1 6f66ed3bc041a88b5b07e45745df2b5bd9c38d81
SHA512 08b5ab49647f871c4d83a03da500d82209916c494ab963e95f9d911a1e525fb1f63d89b1d6a42229820fec379b0c6648a5c041b87089eb22733aecdf92ae9ba3
SSDEEP 384:bHtkFJAgLILz+PDrJC3ZMt52FzIKd8qIIVdho2i3hsaYVvtfPqe/MxoRvAvmcxxa:bWze6PDOmt52FPZHCMOf
TLSH
T18A43418130C005C5C95646B3AC66F4762E14AEDBD7A2CC48AEEDAF2B5062315C47BF3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Controls.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\Controls.xnb
Size 432KB
SHA256 ee76467091e2e7ab497d1eb3e0cab680ec155b7a85e98336f32a91a73d15f298
MD5 133c207dd31d96e5e6f8656b953adb8e
SHA1 8b4bb2f50ee33675b3be3c55f339a7542ce14237
SHA512 8154d9dc9826cee6633c670d7890d0f7f29e243d36408819046a8fbce450e2a0e8a42d79914eaf441440cc5147a81e669ee3513ff521a439ab7d8d5e052ed51a
SSDEEP 1536:muJbVjfhzyghmag8XrkCu3XecroKClE1Of3brnTjGRUL1Wm3jz/Od:Nv64l2i3brnTiRUL1dad
TLSH
T114948A15F1D8D9FFC05D143DE93CB0E962AF2CBAC9197EE676872E1A8A251734B100D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Debug.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\Debug.xnb
Size 19KB
SHA256 6856f0c28f3a375390879b477eedcf5bab3fde662e7889673482cd50f2d062b8
MD5 a17785798715f1d9e4cca853ec4e9a4c
SHA1 a5db45852c432f86d050bc14567cb48539f94efb
SHA512 437ad5e7f9b4ed21d68c9e08bade7402ed1e0f631389ce643fd0cee39a510eb09c474a0a69a5970ac1ddb51d85bb2e6b2561e76ad17a5212ec9f6b3af63b1068
SSDEEP 384:MtfZ1tr6n8yTBZ8q+BoHHL5TqcorUAe4CO4Lz:QOsq+BExjLz
TLSH
T15E92E013BA49C991D8165C34DC68C5FE63E1BCACCA440AC775C8AE0FF8AE654ED453E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DialogBack.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\DialogBack.xnb
Size 309KB
SHA256 6d66164980bceacc1bfc02f7f9173c77477a58a38ed2e0658a7dcddea9eee68a
MD5 ffc4e4a0cd8010013adf843dc8a6abbc
SHA1 9d329531ecfe637b280dc6e7e90b61a623b89078
SHA512 90238925cbf3b9f54335a4d42742963848389c8d3b2a2925f35b6d5f4a00156ac40c0934cd8da2a27ec2397dc7bb6becbd3358562221342f4237187c4f290907
SSDEEP 3072:eqiB9fCucaj2N0tndty2smFafv826RXJhpxwp+JbJVpW:eqO5LcaCYdty23svsRXbpxwp+JbJVpW
TLSH
T1CB64C814C2E4D940C9990BF81EB2E1875AE6388C88F8B2DBB7DAD7C34D1D475E5299F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BlockEffect.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\Effects\BlockEffect.xnb
Size 46KB
SHA256 dbc84fb0d5c78e4f6d466c49f61ea14d830f7ae4b4d6690fb9c0d3c6434fd1da
MD5 9c65e389169b081f00714d6ea1686e5a
SHA1 ba0adbaa19cf4a6bd8c3a2e0f18b749d12072a2c
SHA512 3915f6436ad9aeaba98c71d4ff9afa32be3079c8383e17d90967f4546fbc703a7fb28debb4ef57e8c3494e22a3e8921e745cdf02860513d81c686e40d66a8f7f
SSDEEP 768:TUL1O3Re3j/1O3ke3jq1O3ve3jP1O30e3jE1O3he3jx1O3We3jK1O3Pe3jB1O3m/:TULgmgUgsgKgQgugSgogK
TLSH
T16A237B8EA6C90E3BD196137159AF6F3033F2D24327429BDB74B47A387DA5380AD9524C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UIBlock.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\Effects\UIBlock.xnb
Size 11KB
SHA256 a5d5a371e5911166c6ca6fa26b4132e5c71fa2958f413dcbfc07610d22fd7577
MD5 4757fdc0f9ad8b6e79c11ea5e6fc98a8
SHA1 a28ea2d65a0b076dfd66ae6000965c01eb316856
SHA512 b4ebb7b0978f0be00a4720f5139109eb891064e64274216db1730adfeb267216e96e9afd4fe1e2c743803c869518abaa61b2c6bec032073b10848590c2faf02f
SSDEEP 96:UxuIElSawwjqts0bL571Y1fH2+ZxVYjbPZdgZnjYCcJ6nxG:V5lSaw4qp35718BZxVOunECnxG
TLSH
T105423392F751EB37C95B1B708CD74720B635D8458B83879BA5D0973A2CF03E4AE21E91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WaterEffect.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\Effects\WaterEffect.xnb
Size 12KB
SHA256 64117cd2d7ffc45fd66eec7f55c015fcd128821bf9018d7781d224f97af0f616
MD5 4ec9bf2bc2c7643d3f5d3b1a86e1c907
SHA1 fbfd2e4c002547613c613dd7f1a0ec482be632a8
SHA512 10acc988ad2c70f7e300c402e0c6a38dd502aaa7f72c12cfa16d4fa365974ba976d8c1985d573193babcb964691c54435836f60f281d6249bf8606a3863d6c1f
SSDEEP 384:mum18Jvn78pa+na8Jvn78paGoq8Jvn78pa+4t8Jvn78paG3n:pm18vnnYa8vnnvq8vnnHt8vnngn
TLSH
T10242686EB3C85F37D522073518A74B153275D243AB83CB67A170A73CADA63C4AE5236C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Body__ColorMap_0.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\FBX\31F21DAE\AvatarProxy.fbm\Body__ColorMap_0.xnb
Size 903B
SHA256 3710013fbc271302167bb3627255ae14699390a34fdce0faa1d9d3507f5ab4eb
MD5 1343269bb0bcb985d819c4433d2baa58
SHA1 3fe4af819ec8fc8bd3e8334503de12c5a12f438f
SHA512 56b70cfdeb94783ae25da9079db03c9595baa61c2a11261b34fe0a236f70c89759bd781abbe030afda08ff067077d5e16ca945e1e125f4ba3f29d10494ef1d32
TLSH
T11111170AC12463F3CBF26261648239BD71D943C6616007CE92536E7833F2E078A23761
MD5 SHA1 SHA512 TLSH

Submit Download

cylinder_0.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\FBX\A407220F\PickAxe.fbm\cylinder_0.xnb
Size 1.0MB
SHA256 5b94c3f796d9509a8dae04e66205f6a429bd96f732612a23ec23e30b59570e8f
MD5 e569cc0556b3c077c3cc18a5a627b0f6
SHA1 8cdf0ad4fab0d57cae840ddab1147bd126cd5d6e
SHA512 8d41cb844124fe5bbeb9ee446733abac42e733f6af984d15834834e0fdf9437f7a375a72372414bc15369f4e627f0ae90d6051fe086150d615955035fa4229fe
SSDEEP 6144:ZtTO5h6QRYNYtZxnvcwsFi45dpQNtDtfToVuIMicpx1PqIXaOpu+LVrshWAdof8:ZYh6QNipg7tc
TLSH
T1B725411D830E18AC15E8BBFA6A900457CCF98E4442AFD4BBB9773C67983D5E92749343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Aurora2_0.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\FBX\C72E228B\Selector.fbm\Aurora2_0.xnb
Size 21KB
SHA256 7f8225d6f828025b60af50bf9d306f44bc05d619632b6e0088a5a9a610af14ae
MD5 ebe43ca41c799367f645b3ada4a58819
SHA1 3e8a9af74f19ac7065c8e9c76ebaac8a293816f1
SHA512 e8c7122f8ddfb861d5ed2b02ef96a824bc61ee0a2cde7d43e4c0d7cef43819bb75facbb63570a925009066d1471f126e8a011adb515419d3a41a79bd51ffc0a3
SSDEEP 192:2BQ+J+nxsyi50YgvZUdfFONcx+idQf9I9nR2hCcFXpZn8Sdi:2W+W450YgvudUUZGuYCctxdi
TLSH
T111A25C15F3C8D0FED94C1271EC3D33C9138E4A38C0996ED32997B57542419AA9E06EAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DiffuseAnimUV_0.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\FBX\C72E228B\Selector.fbm\DiffuseAnimUV_0.xnb
Size 2KB
SHA256 35b4e1c727a00ade8f6c1c686d828b13d9020cffc68d37c9784cc74a3d7c9964
MD5 fb7903fcaa919c6765f12cc165023073
SHA1 c0bc52f0a91bed5c427a9920d1cc5391031b7dfb
SHA512 868d347a4450fd66a5993fcb173f0c80dfba9e697beb21225801f9243e955ea5392ad4f9d00913ba13e2aeac075b9f0372480625b03944cbf1027501aa6f9ed1
TLSH
T1A34198D1BB40EF2FCD54437148D70B92B238D8559342C78B72D127292DA06EB8E2EB9C
MD5 SHA1 SHA512 TLSH

Submit Download

Frame_0.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\FBX\C72E228B\Selector.fbm\Frame_0.xnb
Size 21KB
SHA256 e9708645721a32f041700a87d28eea7da37c64c5d015bbc04f1fc0b6c826504c
MD5 acaf27cfe42c010ca792002c2298b14a
SHA1 9c6b1bba888f12207bcffba28f9eb0d8a2cf8722
SHA512 d6166685b3a32d7304f448bb3d1956ed7f653b2eff528da718f498db0c7542528207ea3838521ed7755bda1c4e5395c9ee9aa3a1d85642ac2a89e76fb41bc4f0
SSDEEP 48:fr/uHsBi2WaWObHmnLvgVLBOsiMMMMBQXVRMGwqDSjFC:fbuMpWOz+s
TLSH
T128A2AFA5F9D0D8FFC0AE463CD63CB5CA161F2DB1C5897DC2B28B2E4A56600775362AC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

White_0.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\FBX\CB3817EA\Sphere.fbm\White_0.xnb
Size 219B
SHA256 762ba1df787661b35f6fffa0f8e024ddd44bfb0a53539ae3464c36a672a44ec8
MD5 3885acc797242547157cb15323217fe1
SHA1 3fda4a4c72f9380082cc22d36f143df323511b64
SHA512 34db235019da8aa93fcf81f4843b033a83d5a6cc2bd1447e05c7e549aaba98de9e56a56d4e5a6112a52ba95564a47ce54d4f6745bd80a37a98ed4ab783f0f32f
TLSH
T10BD02202B088E8F0CF23A1B17C009EE1B2DC0306A5100BCF32502B0E01E225BCB323A2
MD5 SHA1 SHA512 TLSH

Submit Download

GradientSkyEffect.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\GradientSkyEffect.xnb
Size 2KB
SHA256 8256ea21d383b46c057b5684ce20924aa199075e8636c55d8feb3c0a36bd18c9
MD5 ef8bcb7d2b50efe1afe0917ae6b57764
SHA1 27f9a1e8626e19fe8b8e274a7675c9abea7199c8
SHA512 909a6dc00598f940816dd86d532e53678dcdf1b2f5a9fdb909a66fe057575ee6f9c88c3fc7d5fdadfcbaaaa055cb1ee28fffdc119c0ba8be3deb1dcaf3b981ef
TLSH
T1B941A853B750FA3FEA990330CCC74BA1B3B1C91263038357A292672D1C513D98D6538D
MD5 SHA1 SHA512 TLSH

Submit Download

LoadScreen.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\LoadScreen.xnb
Size 450KB
SHA256 b81c30ac60b8bfde78dce2f2181a6085df7969948d730a8dbd3f871b8fef7c9d
MD5 222a0e181209dd0ca5a0b3e4b34ba8d0
SHA1 5a8239d63d82cc1a9bc3f88709071fdf974dca15
SHA512 b3ba2638bed8af43c8bfe307633820eca82c05fbb0c2ab580f1b2dcae08af26b376272de7258f8dc5894a25d18df772069b88bce2a605b46af61db7e21e4945c
SSDEEP 3072:KuVNNNPNN3fKDQScZfKKKqHkWPoGWZsWmdeS41RZ11p:VNNNPNBUQScZRKPvGW9GeSMj
TLSH
T156A4486826E74424D08DE4BF63C8F73891A469D1DF1B7FD3EDA6790723B9049B220CA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avatar_skin.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\anims\avatar_skin.xnb
Size 11.1MB
SHA256 7f7207da00a524c0a94e4e8990658028f89035f5728121b1571c838368607376
MD5 2adab754bd2a9cb98785f284ab7c0e9f
SHA1 0f97d6108d5cc7de75f25be7c0513a46b98e3886
SHA512 f035a314c58133903b014764413bb27c9e851348258609a1404c47a732f5e338f1cab7e2c36e3811d20002edd0340c7b14092f8d99e0a02116d59ef2636e5b45
SSDEEP 196608:5oP6zVC6gE4Bw/wNS/JR34G8NPBXJwfH0FTCmkc3xBdXL:TL1JRobBXqmnBBdXL
TLSH
T167C66BE4A45606ADC27D627121AF4F75FC3885B885F9A13B1B78E29D3EC138F60510FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

castleminer_avatar_atlas.xnb

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\Content\anims\castleminer_avatar_atlas.xnb
Size 128KB
SHA256 9257ff3a0150b8340f9daea56940f532569cfc96326eaba77f8eb1db02c40c64
MD5 d66a347343b9cfb10f50b0048ccb3f42
SHA1 8036ccb99dd2abc1eb8418841d0eb607f113d66a
SHA512 4a65a95b8abadba615e3c4c5bf8edc23975eb1dc1dce11ac7cf9e65fa6c5c18479f2a38df83f405a8d834900ce2b248efd33abe9a7d90e01def115d1bc06221d
SSDEEP 192:aVkMx7ilDqQqdNTgmlDlrzNFvpVG3FyHwDPMDNYB+lYY:aq2iZYlRu3FyHYMRqY
TLSH
T14FD347526C62809358ED71F02D4135F6C3FFB624AF120BA7199113EF6EB3AA45BC1B49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

clretwrc.dll

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\clretwrc.dll
Size 303KB
SHA256 847d61be7c0092ca6c3285b13ad3fa9302910a56524b9b2c9cbcfe21b61f733e
MD5 ce9846768c4ac076862a6ae2cc3120b2
SHA1 412cb8706608fafe4dc28e2cb10cb8f90fe87dda
SHA512 4e426f97789ba636e583e5e823fdc9c69c99c1d75356e70f9147c09615a35ef608e5d9734eb226f5d4dc636398ea10b5529025c9f86922f49509864e70a8f9bb
SSDEEP 3072:2f9XK6chFjbdP7oCE33XfQIBchLZtfqYZdzWPN:Oqn7fqYZdk
TLSH
T1616488063BFD4409F5B75FB0AABB5235A676BCA52A51C01D2054D22D2CF1F80DE62BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

clrgc.dll

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\clrgc.dll
Size 652KB
SHA256 7c97df587df02dbc362fee764575d1d10b964c987442813825fac4f52972cd94
MD5 e6e36d8a194e3d874cd0c7f767d9c6fe
SHA1 42babec589b8ad4a90ebc01b2eed5e79a7fbee24
SHA512 babfbc207166c4f499e886154671ccab560b1bced995ac27bced90a9f5f7a55fa73d71214b3f4e43a8114c72a3c2e33c981646a54439c3dd937eaff4258ff196
SSDEEP 12288:zxzB0FedABnetPW92ntex4yVmTJfP+Tuu8WNB:zl2FeyBnedttY4yVgJfP+f
TLSH
T1E4E48D5EF2ED609CC527D07A866B7237E7B5700A1B0179EB079487606FA7ED4673A300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

clrjit.dll

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\clrjit.dll
Size 1.7MB
SHA256 fec1da303a5905090e00d15f3c30c1a6950048073415ba34b9f6659e9f3c57bc
MD5 3ebd148584eb037174f6cca3d2a7f19e
SHA1 728ceb3de0bf7349cb629c5702c87b19c432ddc8
SHA512 4960168996b67476fb25e9e7562b3b5f83bbcc752f2a0ccb879ec39283227f136f9f9a188fb869208c0c1b6d38eeb83ed37a45956aca8bac9f2151cab68634b5
SSDEEP 49152:WSQLg0khGTcN0/kaHF/W+tWp1V1q3+YsNbeIopSaUcrzzcT59LvTde:rPhl2/kX+YTVotEbeI/aUKzc3s
TLSH
T17085AE42A2F805FCD0AF9534C6574A1BEBB2B45913209FCF43F44A96AF237E2162E715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

payload.id

Path C:\Users\Admin\AppData\Local\CastleMiner\Runtime\.extract-2852\runtime\payload.id
Size 46B
SHA256 e66b5469bc2788ed542d09a78dbbb8184616cfc168fd5e0b0875dc4184f65f5d
MD5 453417d290da0a51f6fdcaa717459b5c
SHA1 36be66417eab6837fb23c109093cd98d102d31ad
SHA512 f5093da47bd13b64f40103008e12eb516584ba6a49882f7542329144a78d6cc31dddbd0bf838ca6da0e0b048c827f12ba28bcf26d6cd5aa603e69f86caf28002
MD5 SHA1 SHA512

Submit Download

memory/2852-718-0x000002059B8E0000-0x000002059BAAA000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads