General
- Target Mod Menu.exe
- Size 11.4MB
- Sample260804-tkdj8sdd43
- SHA256 d636542b558c28949cf8929aa20bfc3fce4abfdfab2324c9e8bbb3bdba2391f7
- MD5 dd1dd0bf90e70274daf92df1421b8197
- SHA1 e0814f5aa59d7ee1ea5d28d6f3a45170544c8483
- SHA512 8041b8ec804440a32c3c30cbdd3d4b33595dfc9f85ae3c0433871c0ef49477ac2616cd67af7f04266dac64cbdddcf18fc850b07c36a9c294170b3d6973dbfb6e
- SSDEEP 196608:B1mPATfI+XMCHGLLc54i1wN+6IQsOalojnPwp5biZOc+rILFiahj+h693+AxLMM:+oTfI+XMCHWUjSKOrPwYSkAahyhqJo
- TLSH T14BC6331AA26D10A6E4E30735469286ECF6677CF143A0C99746787E653F33F60FE38612
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Mod Menu.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Mod Menu.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Behavioral task
behavioral3
Sample
app.pyc
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
app.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Mod Menu.exe
- Size 11.4MB
- SHA256 d636542b558c28949cf8929aa20bfc3fce4abfdfab2324c9e8bbb3bdba2391f7
- MD5 dd1dd0bf90e70274daf92df1421b8197
- SHA1 e0814f5aa59d7ee1ea5d28d6f3a45170544c8483
- SHA512 8041b8ec804440a32c3c30cbdd3d4b33595dfc9f85ae3c0433871c0ef49477ac2616cd67af7f04266dac64cbdddcf18fc850b07c36a9c294170b3d6973dbfb6e
- SSDEEP 196608:B1mPATfI+XMCHGLLc54i1wN+6IQsOalojnPwp5biZOc+rILFiahj+h693+AxLMM:+oTfI+XMCHWUjSKOrPwYSkAahyhqJo
- TLSH T14BC6331AA26D10A6E4E30735469286ECF6677CF143A0C99746787E653F33F60FE38612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target app.pyc
- Size 1KB
- SHA256 73e2b9884e8e0e92c48c7717d9507a8c66481ba4b7f551c3be9f8473f86408cd
- MD5 f012c7643ae0ce7f5e1065c51645d367
- SHA1 7cbbfe1e1ae429344b8f3365d99ee9dea2a4e3cf
- SHA512 1e68b7f9ba683cf3c5c0bf1b21b05860714308552a6875483b9056f23ed6f6f0f41ad0882216ead16842ee227fb1f7ab5c96a553a6eae178692c5a73b4c3f7b5
- TLSH T1F3118602B71340FBF0D8EAF9497437500199A7F8F211C74B4693A04D3D0D4715E64C8C
- MD5 SHA1 SHA512 TLSH
Score3/10