Overview
overview
6Static
static
3Microsoft.Ink.dll
windows10-2004-x64
3Microsoft.Ink.dll
windows11-ltsc_2024-x64
3OpenTK.dll
windows10-2004-x64
1OpenTK.dll
windows11-ltsc_2024-x64
1avcodec-51.dll
windows10-2004-x64
3avcodec-51.dll
windows11-ltsc_2024-x64
3avformat-52.dll
windows10-2004-x64
3avformat-52.dll
windows11-ltsc_2024-x64
3avutil-49.dll
windows10-2004-x64
3avutil-49.dll
windows11-ltsc_2024-x64
3bass.dll
windows10-2004-x64
3bass.dll
windows11-ltsc_2024-x64
3bass_fx.dll
windows10-2004-x64
3bass_fx.dll
windows11-ltsc_2024-x64
3d3dcompiler_47.dll
windows10-2004-x64
3d3dcompiler_47.dll
windows11-ltsc_2024-x64
3libEGL.dll
windows10-2004-x64
3libEGL.dll
windows11-ltsc_2024-x64
3libGLESv2.dll
windows10-2004-x64
3libGLESv2.dll
windows11-ltsc_2024-x64
3osu!.exe
windows10-2004-x64
6osu!.exe
windows11-ltsc_2024-x64
6osu!auth.dll
windows10-2004-x64
3osu!auth.dll
windows11-ltsc_2024-x64
3osu!gameplay.dll
windows10-2004-x64
1osu!gameplay.dll
windows11-ltsc_2024-x64
1osu!seasonal.dll
windows10-2004-x64
1osu!seasonal.dll
windows11-ltsc_2024-x64
1osu!ui.dll
windows10-2004-x64
1osu!ui.dll
windows11-ltsc_2024-x64
1osu.dll
windows10-2004-x64
3osu.dll
windows11-ltsc_2024-x64
3General
- Target b20220424.zip
- Size 71.7MB
- Sample260805-dtmlhaxclg
- SHA256 721a9b3139b4c7bba32d4fb92aaa766ebe3af48e26f6e5cd13a7728327e56a85
- MD5 05fe517185c6588b51a974cd9927085a
- SHA1 4159ebe3aeaab5a395ea5e1589fe5fd7cb2fadb4
- SHA512 6d76fa5205631f05a8d889e01937db33ca4f44f0c2cd09797ee273eb6764e501f5e1c839e7f5e8180ebd83f09d67b53b3591b88f8a4221c923c62fda443de589
- SSDEEP 1572864:4hIP32zpqevmIfsnSnPJTuYuGQ34EULardj8uuv6f1hW8cPOaXzkKq+t/8rF:46P32zp7vTuC8DGCkardj8uuv6jqOaXa
- TLSH T12EF733036612D910C5A95B73FBF6DDE3D3702407FC1628273E6CF6054AC21ABA9BB259
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Microsoft.Ink.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Microsoft.Ink.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
OpenTK.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
OpenTK.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
avcodec-51.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
avcodec-51.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
avformat-52.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
avformat-52.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
avutil-49.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
avutil-49.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
bass.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
bass.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
bass_fx.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
bass_fx.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
d3dcompiler_47.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
d3dcompiler_47.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
libEGL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
libEGL.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
libGLESv2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
libGLESv2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
osu!.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
osu!.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
osu!auth.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
osu!auth.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
osu!gameplay.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
osu!gameplay.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
osu!seasonal.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
osu!seasonal.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
osu!ui.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
osu!ui.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
osu.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
osu.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Microsoft.Ink.dll
- Size 456KB
- SHA256 1081255de41aafd51bc8f4e4404ef02209e59625ae65fa926657df5690716c5d
- MD5 82d4ee89f4a39c764fa6297a95ebb10e
- SHA1 87b1f581ad017bf62604d8071a23fde8b81550e1
- SHA512 904fd99f7d5951a23af202fceeade044b6d4f40c75db09d0237618ff80b90934ca4ad3210751f6e5bcad71b3a4131e24d420e94292bcfb7acbc3490ebc844382
- SSDEEP 12288:X2LyFEvOpwDK9MHGBYbCV0/e5gTaN8XWRIrhGrQFaeyK7+ZkH61Qz2h8fSdILuph:X2LyFEvOpwDK9MHGBYbCV0/e5gTaN8XG
- TLSH T154A42801379C2235E56E97BBD2E62675C3B1E5162916FF4978CC22E60D237528B033BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target OpenTK.dll
- Size 4.2MB
- SHA256 b415f3e061d9758316074dcbf31d6dba48cb0b89405254db94ead0e43ed88511
- MD5 b4d949571134fc3ec6c28f1af7a75e49
- SHA1 07eb5685ff4f19ff8ed466c68c2426e2ead69241
- SHA512 7abb1128d4f9312ec714f7d3f4e1d1ce12a6f93235d6382cf25c39dae0d7d88b5ad5141f512659c33cf57a762e14711b6b690b33da7d16c7d7be35c8b292131b
- SSDEEP 24576:gGg1QKR0dSMIK0v6FMF2Y9JhGtZuD1/TMvXgZ2j41WEfyj+jNhlxZ:UQ1d0K0jT4L4htPlb
- TLSH T18B160759EAD6087BCA972E7E906304433136966B5B57EB3BA047D37C3CC6F642C1A1C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target avcodec-51.dll
- Size 4.2MB
- SHA256 e512fe71775f767285cfb3310d8f1ac042639ab3d1a02ca3675b82cfd3cbc702
- MD5 b66478cc0f9ec50810489a039ced642b
- SHA1 992ede70f0fee5cb323b4b810cc960bf2531875e
- SHA512 ed07e71fd6bc2bd9f2ada8b8d6aa80662d6ffadce7d692f078e9ccd8ada2ba47b0e25967809f567fb93ffc96271037f010a0038bb78301812a75e30eee9b2645
- SSDEEP 98304:UyIwuFFZZqniDGDHt+elelHjzMvIOFXEkGP0P7g+r0ZpSHA23yQ7D9cpTZY:UyIwuFFZZqniDGDHt+elelHjzMvIOFN1
- TLSH T11C265C85F6A380F6D8470C71902FF37F96392A08C525DFA5EFC02F59F9A2B529856306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target avformat-52.dll
- Size 711KB
- SHA256 b155e2bfce3adbbc45d01ec991160ab4fab7e8d33a0ab835463da860d3693867
- MD5 c00b30289cc427caff97af5aa3d43e03
- SHA1 8e70885a62b0fe510422c2367b1f6de489b67e6c
- SHA512 3a70161a5adaba0101f2d2ca1522b1e71d04079ad15cc87a030b00c14b45df9545d5cba55101e25d9bd101769edb87a8e4d893125780e86fa2551290ab720860
- SSDEEP 12288:AHi4xW+FLd874nWqfUMSEEmjjUy/M0gDJdvm0yfwea:AHi4AQd8sWCUNEEmjd/M0g1d+0yHa
- TLSH T161F45B85EACB60F5DE0B0C31829BF33F9B259702D420DE95DF986986FA33E62541E315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target avutil-49.dll
- Size 77KB
- SHA256 e51523f179a8ab8101eaa3e587c5e1dfe6c19636ecfa582896833f06d2e79064
- MD5 47c83b958951331ba409d6b80316250c
- SHA1 ce14566676a27a0899079781a41888a2f1303127
- SHA512 58408238279126e2b478a2f7cda513e5b5908140cc615f271e2baea7a2fe59046f51040406adb86194cc168ff4bc9ea2ca92834b9d90116f9ceb2384a4325896
- SSDEEP 1536:qVNjo4PqJXpzUv8e8wyqQwFBo2xDCkCj7TjQiK1WXiHjQi+WXiU:qVpo4PqJNUvIYDBo2xZCL2g4mgV
- TLSH T112737C89FADB10F9E9174E3081ABB33F9F3163018420DDA6FF90D406ED67B52A62554E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bass.dll
- Size 125KB
- SHA256 67766e574baa86eb8317623acc2957e8e28944bb801a8c10a0fa9d29fdb4cfd3
- MD5 7623474a8b9bec1e3ffca813cdf93bc3
- SHA1 4a1c0ecf8cbed18d0472136a7096ee8c3c2fa774
- SHA512 b7e7205e48eade918d63b483fb500867cc8196496fe9136f0177481d654a67af8319b6823fb04787e4bd6ee46c031c2b6fea57f0bf12b8a58cf8e0003834bd7b
- SSDEEP 3072:er+5IHiXfBXJ2omnEAOUqXfOq5Nny8+qvUFjuvQniIGwFE:A+5IHiPBJsnyUqvXNZjvKC2Gv
- TLSH T1F4C312B5CDFA60E7C28F45361071E05407F4FA649E428EE16ED9B508C9FE2F1AC1879A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bass_fx.dll
- Size 50KB
- SHA256 81111a1cb6f8f362cf232e21098c563fe1409160300f2a254f2a1762e5d4db04
- MD5 3ad3c0fd4dca001a2f9e707b74544919
- SHA1 c6176415ecd3e8f38f976e4234325452fe1fd2a0
- SHA512 436dac92e4a60dfc02c8c7a7ae496df7199c3fd15ef668bff2565f428f25be9c3ae1d0e120d64767eda1a9d4afa2e8bfeb6d047745440c3fce854080c44f42c5
- SSDEEP 1536:Exe5ceArKXVX7XDZjQi5IWXiYjQizUWXiO:E05i4XrDZxIg/bUgX
- TLSH T12333CFF56D786554DDA24E70D4D98A23FEB032914FA808EB2498C0571ECABE1BF2D11F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target d3dcompiler_47.dll
- Size 3.3MB
- SHA256 efbdbbcd0d954f8fdc53467de5d89ad525e4e4a9cfff8a15d07c6fdb350c407f
- MD5 c5b362bce86bb0ad3149c4540201331d
- SHA1 91bc4989345a4e26f06c0c781a21a27d4ee9bacd
- SHA512 82fa22f6509334a6a481b0731de1898aa70d2cf3a35f81c4a91fffe0f4c4dd727c8d6a238c778adc7678dfcf1bc81011a9eff2dee912e6b14f93ca3600d62ddd
- SSDEEP 49152:PyZ9lnpmVm/w+EwVOmufvkQS8MH2J9CqS5Sqr88pPWW5KhQYPsXqUiQ6:E9fWAwVBC8MH2JNSF8+YPsXqUT6
- TLSH T1DFF59F21F701C077C8CA01F0666E7BA6257C9B75033945C762947DA9EC702E32F3AA6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target libEGL.dll
- Size 146KB
- SHA256 041a631d114e45a11c43efe3b7712a10ce8052cf4b313c7f4577a5b9adb78072
- MD5 9f7f22cef980ec272a9b73bf317500e4
- SHA1 ae11d7cdfa84a242e31efd6f03b0ef764d5f900c
- SHA512 19e432313c1e28fc076fb9e9c3884c3c97cc2d05b6d1aecf429180a6f5cc407734fe758bcc63936d5fe7ef8ac01abdf5ec4b17bb08b26c5cc87c560f4b89c5bc
- SSDEEP 3072:AQpSfKDSjkC6G3a3xX4k6es65psG6gX6gr:AQpSfKWkCDeizA
- TLSH T1C4E35A0175E84030E4FB427A8565AA120BBE7D66DF268EDE3BDC4D4D06785C1BB39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target libGLESv2.dll
- Size 3.2MB
- SHA256 cbfc536b80405da7b5c37c97fceaf2310daf58d78c806140367b8f513352342f
- MD5 a4dfddff62d1e917ebb0688cf8d96be7
- SHA1 9376bfa069a72da76733cc72cf90386920815142
- SHA512 97de24a94f7aaaf3035853c0eb93f44c5c2cdfad99b563fef225d9f2b6f4fa3fe8f89850895d286322191cf8b372aa87da6620796cd32fe368f75b6722b556c3
- SSDEEP 49152:lnXliT77777777E377777SaTm7NCO7777ovwwz7777777y0pIyRTNEClTRyAlllD:Eg9TOW05n16Entwr
- TLSH T1EAF55C11BC408275FFDA01FBDAFC3E645A5C8664032E61D7D69C0C996BA07E32B71A87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target osu!.exe
- Size 4.3MB
- SHA256 1a4d5fc5f07cb48446bfb05cb4924ef9217f1695f39dc1bb0dfb156354a53add
- MD5 88394100b61ddd13136085498ea180b2
- SHA1 ad7ed6dd66adb634e6f951332cf829d125fcd9f4
- SHA512 c251b7a3cb6610d9e993704a16db61e32b2991d8fa7af4d8ee8802b03c5b48222223d7f721060064c47704e52c5c91f3c5bb882ac15a4984b9f99354fda532df
- SSDEEP 98304:4K9BadB+8IGHvBQg4UwnsOF6y2xRxpDOh0:/9I+FAUnl9Ki0
- TLSH T16B267B08AAA44F3EC66F4BB3A0651A1963F5CD5833C7FBCF5540B7B425B2362590326B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Drops desktop.ini file(s)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target osu!auth.dll
- Size 5.8MB
- SHA256 fd8321c346dc33cd24d7af22db750adc2f42d9c091b31a15587291dc086147fc
- MD5 e761006cb6e52f55aeec3a7e42a8f862
- SHA1 5632e2befb927ac6345d45e1a11e66580f7143ca
- SHA512 b024257f6df78217d5082aff13a375929622fdfb0887fd9e2189c935ee084b6804f61dd2c94cf15679861ef1aa7964689820ee63422fb2690f825f0ce8d6285b
- SSDEEP 98304:aHzhWatNRzBdFpuoJrUV23MpgsL5HSpbr5N0H7244xSf7RIJAHK48l8nDBfy/NmV:atL3XdFPJri2cpZ5yp2Fj98qmUJ
- TLSH T1AE56BFA1360EE1FBD2690C759411C90FF13C27F257209787EAE8393CA9539C166B6BC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target osu!gameplay.dll
- Size 30.4MB
- SHA256 ba3467a8db908d81a0729f78fdc5c8f1d1595d3da4e5a9a34be9a16e06da9f87
- MD5 4cb98d63f1b2b9dc38e10e9901ec52d8
- SHA1 42c0e8b8e5c7a4113e38a977221f845ef8406722
- SHA512 d351b9ff851490187b003c675047b6a20a2519df3818bcd18a674d6edab1d211c9661acc98403b562ff3268576ea203b4e0f10e962467b9849b72431c92735a4
- SSDEEP 786432:zKhRG6tozgdXGWZlwECKH22SkMu/7WHV0g5QQw:zKhRGSIgDVW2hfK195Bw
- TLSH T13E673352F0039694C96F09368CA2D5805B223AAEEE52052F706CF715B4F32177F67ABD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target osu!seasonal.dll
- Size 2.8MB
- SHA256 3e9d4d685ed0175d646ca09ae744da38c31b1ea418b74123b772efb4238a7502
- MD5 dccf5b6ff65257c9ea301f25f40b4a8b
- SHA1 8a60b477c8a05f12e0bac53e256ce28bdc45dff2
- SHA512 1c1e27d1b22641dd8764cde6a9fc8f318e31ca4acbd5e79196cca8c5849b1e528717238e92851ff7e537562b5f542f585cb39c675db2408dd2771be12a7c669a
- SSDEEP 49152:xBMIuP8hHqs1VTmgBUOc4gNfJzTZzqKn1JKTL+qDZkBlo8pLFzQ3tkNi0/SJM:UIu0hlVmgBUOWNhlqmK3+0WLFI2AeS+
- TLSH T1C5D5337B9AC0B287FC057535EFD678647E207126B28185CABC5098F8B451FF7AC6098B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target osu!ui.dll
- Size 24.6MB
- SHA256 7c5b5834977a3d6cf853c3db28492399721004e36e8ecc09c0f475d759e4c557
- MD5 450935f9812f0336e7968ec110548de6
- SHA1 52a238343d521106c29b11b71b6546fdbc21ab90
- SHA512 0f21b22fdba847b8b696fd40f34c26c89fa22e52d0abd342b67530609441fb7ec3ea12ad8badfca410c1f924ee9cfe401bc69ca645bf78371c48803f1d830b72
- SSDEEP 393216:wweL9xcZy55AfilHOlrGRWPxe/WGfvWJmaHQILW6UFoMMDGHTkuBZOq5OmlRkCx:srZSfKO8RWPs/WG3V5IS6UFFwIgiT
- TLSH T109472247730996D9F1521A360866C656C720BD0C6F120BDFFA6EBF28E5732861F2371A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target osu.dll
- Size 35.7MB
- SHA256 26246826de6f77a5b1f31091a267315824171996e9624cf7d6285ef7f15ad974
- MD5 c400362e88d44b45cd4b019235f95ffd
- SHA1 183f9ccbea83fa415632d2cb6d55c127d5142fad
- SHA512 a887f3c5e2ca20462c4ba8df01b4e9a6f23250a020936df74b011b9766a89673442ac61c247e2227220b86de738233dd8a4b957c0f9cdf95bd3af0805dc9eade
- SSDEEP 393216:NOyaD3Tsgd+Q7AzCELCcLNwgRRk/YRPYxq:NOyaD3Tsgd+Q7AeELCcJwGS/e7
- TLSH T11A87FA52DA20F875E291A0B5C5BBEDF200933CF0D66B194358DFBC3B76B2E006DA9495
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10