Errors

Reason
scan timeout

General

  • Target
    GameSetup.7z
  • Size 92.3MB
  • Sample260803-pr6gdahe39
  • SHA256 5826c717dbc010c383b3c1e37c07f9c8f093f1278bfd1ce182a86e398162024f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • GameSetup.7z
    .7z 92.3MB
  • GameSetup.exe
    .exe 92.5MB
  • $PLUGINSDIR/SpiderBanner.dll
    .dll 9KB
  • $PLUGINSDIR/StdUtils.dll
    .dll 100KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/WinShell.dll
    .dll 3KB
  • $PLUGINSDIR/app-64.7z
    .7z 88.0MB
  • GameSetup.exe
    .exe 178.0MB
  • LICENSE.electron.txt
    1KB
  • LICENSES.chromium.html
    9.0MB
  • chrome_100_percent.pak
    147KB
  • chrome_200_percent.pak
    222KB
  • d3dcompiler_47.dll
    .dll 4.7MB
  • ffmpeg.dll
    .dll 2.8MB
  • icudtl.dat
    10.0MB
  • libEGL.dll
    .dll 473KB
  • libGLESv2.dll
    .dll 8.0MB
  • locales/af.pak
    509KB
  • locales/am.pak
    822KB
  • locales/ar.pak
    901KB
  • locales/bg.pak
    938KB
  • locales/bn.pak
    1.2MB
  • locales/ca.pak
    571KB
  • locales/cs.pak
    589KB
  • locales/da.pak
    533KB
  • locales/de.pak
    569KB
  • locales/el.pak
    1.0MB
  • locales/en-GB.pak
    463KB
  • locales/en-US.pak
    467KB
  • locales/es-419.pak
    562KB
  • locales/es.pak
    562KB
  • locales/et.pak
    511KB
  • locales/fa.pak
    836KB
  • locales/fi.pak
    522KB
  • locales/fil.pak
    590KB
  • locales/fr.pak
    609KB
  • locales/gu.pak
    1.2MB
  • locales/he.pak
    734KB
  • locales/hi.pak
    1.2MB
  • locales/hr.pak
    567KB
  • locales/hu.pak
    611KB
  • locales/id.pak
    505KB
  • locales/it.pak
    554KB
  • locales/ja.pak
    675KB
  • locales/kn.pak
    1.3MB
  • locales/ko.pak
    572KB
  • locales/lt.pak
    615KB
  • locales/lv.pak
    614KB
  • locales/ml.pak
    1.4MB
  • locales/mr.pak
    1.1MB
  • locales/ms.pak
    529KB
  • locales/nb.pak
    513KB
  • locales/nl.pak
    530KB
  • locales/pl.pak
    591KB
  • locales/pt-BR.pak
    555KB
  • locales/pt-PT.pak
    558KB
  • locales/ro.pak
    579KB
  • locales/ru.pak
    952KB
  • locales/sk.pak
    598KB
  • locales/sl.pak
    574KB
  • locales/sr.pak
    884KB
  • locales/sv.pak
    516KB
  • locales/sw.pak
    543KB
  • locales/ta.pak
    1.4MB
  • locales/te.pak
    1.3MB
  • locales/th.pak
    1.1MB
  • locales/tr.pak
    554KB
  • locales/uk.pak
    952KB
  • locales/ur.pak
    831KB
  • locales/vi.pak
    658KB
  • locales/zh-CN.pak
    473KB
  • locales/zh-TW.pak
    468KB
  • resources.pak
    5.4MB
  • resources/app.asar
    44.3MB
  • resources/app.asar.unpacked/api/priv/SystemCore.dat
    1.4MB
  • resources/app.asar.unpacked/index.dat
    2.4MB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/LICENSE
    1KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/build/Release/better_sqlite3.node
    .dll 1.6MB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/deps/common.gypi
    1KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/deps/copy.js
    897B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/deps/defines.gypi
    1KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/deps/download.sh
    .sh 3KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/deps/patches/1208.patch
    597B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/deps/sqlite3.gyp
    2KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/deps/sqlite3/sqlite3.c
    8.8MB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/deps/sqlite3/sqlite3.h
    643KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/deps/sqlite3/sqlite3ext.h
    37KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/deps/test_extension.c
    587B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/database.js
    .js 4KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/index.js
    110B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/aggregate.js
    .js 1KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/backup.js
    .js 2KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/function.js
    .js 1KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/inspect.js
    174B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/pragma.js
    536B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/serialize.js
    625B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/table.js
    .js 6KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/transaction.js
    .js 2KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/wrappers.js
    1KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/sqlite-error.js
    717B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/lib/util.js
    .js 331B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/package.json
    789B
  • resources/app.asar.unpacked/node_modules/better-sqlite3/src/better_sqlite3.cpp
    129KB
  • resources/app.asar.unpacked/node_modules/better-sqlite3/src/better_sqlite3.hpp
    42KB
  • resources/app.asar.unpacked/node_modules/node-vm-detect/LICENSE
    1KB
  • resources/app.asar.unpacked/node_modules/node-vm-detect/dist/cli.js
    .js .sh 40KB
  • resources/app.asar.unpacked/node_modules/node-vm-detect/dist/darwin/arm64/vmDetect.node
    .bundle 161KB
  • resources/app.asar.unpacked/node_modules/node-vm-detect/dist/darwin/x64/vmDetect.node
    .bundle 175KB
  • resources/app.asar.unpacked/node_modules/node-vm-detect/dist/index.cjs
    .js 1KB
  • resources/app.asar.unpacked/node_modules/node-vm-detect/dist/index.esm.js
    .js 1KB
  • resources/app.asar.unpacked/node_modules/node-vm-detect/dist/linux/arm64/vmDetect.node
    .elf 314KB
  • resources/app.asar.unpacked/node_modules/node-vm-detect/dist/linux/x64/vmDetect.node
    .elf 288KB
  • resources/app.asar.unpacked/node_modules/node-vm-detect/dist/node-vm-detect-child.js
    .js 967B
  • resources/app.asar.unpacked/node_modules/node-vm-detect/dist/win32/arm64/vmDetect.node
    338KB
  • resources/app.asar.unpacked/node_modules/node-vm-detect/dist/win32/x64/vmDetect.node
    .dll 433KB
  • resources/app.asar.unpacked/node_modules/node-vm-detect/package.json
    978B
  • resources/app.asar.unpacked/stealth_loader.js
    .js 3KB
  • resources/elevate.exe
    .exe 105KB
  • snapshot_blob.bin
    306KB
  • v8_context_snapshot.bin
    650KB
  • vk_swiftshader.dll
    .dll 5.2MB
  • vk_swiftshader_icd.json
    106B
  • vulkan-1.dll
    .dll 874KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 4KB
  • $PLUGINSDIR/nsis7z.dll
    .dll 424KB
  • $R0/Uninstall GameSetup.exe
    .exe 411KB
  • $PLUGINSDIR/StdUtils.dll
    .dll 100KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/UAC.dll
    .dll 14KB
  • $PLUGINSDIR/WinShell.dll
    .dll 3KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 4KB

GameSetup.7z

  • SHA256 5826c717dbc010c383b3c1e37c07f9c8f093f1278bfd1ce182a86e398162024f
  • MD5 SHA1 SHA512 SSDEEP TLSH