Overview
overview
3Static
static
3BepInEx/co...ny.dll
windows10-2004-x64
1BepInEx/co...ny.dll
windows11-ltsc_2024-x64
1BepInEx/co...20.dll
windows10-2004-x64
1BepInEx/co...20.dll
windows11-ltsc_2024-x64
1BepInEx/co...ny.dll
windows10-2004-x64
1BepInEx/co...ny.dll
windows11-ltsc_2024-x64
1BepInEx/co...er.dll
windows10-2004-x64
1BepInEx/co...er.dll
windows11-ltsc_2024-x64
1BepInEx/co...Ex.dll
windows10-2004-x64
1BepInEx/co...Ex.dll
windows11-ltsc_2024-x64
1BepInEx/co...op.dll
windows10-2004-x64
1BepInEx/co...op.dll
windows11-ltsc_2024-x64
1BepInEx/co...db.dll
windows10-2004-x64
1BepInEx/co...db.dll
windows11-ltsc_2024-x64
1BepInEx/co...db.dll
windows10-2004-x64
1BepInEx/co...db.dll
windows11-ltsc_2024-x64
1BepInEx/co...ks.dll
windows10-2004-x64
1BepInEx/co...ks.dll
windows11-ltsc_2024-x64
1BepInEx/co...il.dll
windows10-2004-x64
1BepInEx/co...il.dll
windows11-ltsc_2024-x64
1BepInEx/co...ur.dll
windows10-2004-x64
1BepInEx/co...ur.dll
windows11-ltsc_2024-x64
1BepInEx/co...ls.dll
windows10-2004-x64
1BepInEx/co...ls.dll
windows11-ltsc_2024-x64
1BepInEx/pl...at.dll
windows10-2004-x64
1BepInEx/pl...at.dll
windows11-ltsc_2024-x64
1BepInEx/pl...nn.dll
windows10-2004-x64
1BepInEx/pl...nn.dll
windows11-ltsc_2024-x64
1BepInEx/pl...ds.dll
windows10-2004-x64
1BepInEx/pl...ds.dll
windows11-ltsc_2024-x64
1BepInEx/pl...rs.dll
windows10-2004-x64
1BepInEx/pl...rs.dll
windows11-ltsc_2024-x64
1General
- Target vala.zip
- Size 2.5MB
- Sample260806-nb8fcstxav
- SHA256 d9c4db8cf57ca2e59d0953acee7c687ff828b486064a3b6c97896b759ec14f8c
- MD5 d39254bd6c3a64599e5bb9cacb9220cd
- SHA1 80c1d40d0ce75ca1301d5ea0b7dc26663ee0a2a9
- SHA512 7f50f6f641b8719ec5274d24aa1a322d7e2612464b5fe53f4d1b2d4691293b74b8850069c0344b30e38622372405f500693428a62a691fa0ae3b8083f0afb537
- SSDEEP 49152:+8bLv9k3qa5UP2C6cNw0wGpAWuupd2P3j3s2WsNcKe+Kariap6kM:+8Hy6aY2ew0wVWuup63xF6aO469
- TLSH T14DC533E434899C07E5D8FDB5878DC4488C948F9AEC42FA3FE7508A5BE18B7587923B41
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
BepInEx/core/0Harmony.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
BepInEx/core/0Harmony.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
BepInEx/core/0Harmony20.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
BepInEx/core/0Harmony20.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
BepInEx/core/BepInEx.Harmony.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
BepInEx/core/BepInEx.Harmony.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
BepInEx/core/BepInEx.Preloader.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
BepInEx/core/BepInEx.Preloader.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
BepInEx/core/BepInEx.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
BepInEx/core/BepInEx.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
BepInEx/core/HarmonyXInterop.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
BepInEx/core/HarmonyXInterop.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
BepInEx/core/Mono.Cecil.Mdb.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
BepInEx/core/Mono.Cecil.Mdb.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
BepInEx/core/Mono.Cecil.Pdb.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
BepInEx/core/Mono.Cecil.Pdb.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
BepInEx/core/Mono.Cecil.Rocks.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
BepInEx/core/Mono.Cecil.Rocks.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
BepInEx/core/Mono.Cecil.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
BepInEx/core/Mono.Cecil.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
BepInEx/core/MonoMod.RuntimeDetour.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
BepInEx/core/MonoMod.RuntimeDetour.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
BepInEx/core/MonoMod.Utils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
BepInEx/core/MonoMod.Utils.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
BepInEx/plugins/AzuAnticheat.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
BepInEx/plugins/AzuAnticheat.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
BepInEx/plugins/Jotunn.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
BepInEx/plugins/Jotunn.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
BepInEx/plugins/ProtectiveWards.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
BepInEx/plugins/ProtectiveWards.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
BepInEx/plugins/ServerCharacters.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
BepInEx/plugins/ServerCharacters.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target BepInEx/core/0Harmony.dll
- Size 200KB
- SHA256 1a21cc03424fc82c3dd1346905d16494536b9595ae4162228d99fb7c285c1031
- MD5 4705aa1c7a9795d2787722bc8c419ae8
- SHA1 aa1552cf0311f27ca02d34df0558a718d16fb660
- SHA512 2f2bb761d21d7288c2b373958a5eab228797d1a348147f8ff0ea603611c6d79e938a4ccf45f23ffc82500731a68bce8feafcd26a5264d79fd5d7435e6ba69b93
- SSDEEP 3072:VQsxAaNWfZKtIZWTr7MDiIVXQ9PsMIuvq14e3Lvvv9L2yZKDVkNCuwMTfyQV:GBa+UWi2XCH7s3RqyZ5NCuTeQ
- TLSH T124145B6267FD0616D7BF6BB4F47050040671FC17E9AAEB9D6C8464FA0C12780EA513BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/0Harmony20.dll
- Size 110KB
- SHA256 bc871350b137491fa1e615b4da30c2ea46e03c87fd617a68c548c497e518c915
- MD5 bf8d1dc2714ae9b761873dbf333202b9
- SHA1 8b0f690110903eb3912583cb13eb1ae1a41fe4af
- SHA512 ec3ebcf8206c2ddfaf579e158a9c1759ff37cb56c606904ed57f166a0f91a7ebd925ec2b63d9e3594e2d813dda33dbac55658b4c13dab9c010b4ff7c96ba098c
- SSDEEP 3072:dm7LZRRGrHEPLiVOvvFKKKtl2kI1S85ll0CN:eRRq5MF6OE8
- TLSH T14FB34B1573EC4B52C6EF6B78E474221107B1F853E02AFB899D88B5F91C42F9256113BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/BepInEx.Harmony.dll
- Size 6KB
- SHA256 cc4f49b272d951413fd8bdf78b600ce9ddb7388cc5204d77f7d9ae5814eae37c
- MD5 ffdb62f6a851adc3fe32315b7045651c
- SHA1 1c2ad0a5748232bca5a10f55c86ec53944bcb129
- SHA512 5225fb900d3e04da65a0a386ef0d32730bbf4de997d19f573074fab9d961f0bf66d1b4b25b2be1e3003fad4d6d77df5c456cfb10ff244f9eb7e692dafcea09ef
- SSDEEP 96:5n31bAyCQCzoHwvxQYbLkmy3oqgfCKvtokuy:jAyi2YbLkJzgvW5y
- TLSH T11CD19520F3954333CD7B4775BCEBAB805930B540546B5A7E5A41F2426E16FE80E32E72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/BepInEx.Preloader.dll
- Size 42KB
- SHA256 94a1edc61fc60ce1c79eba21bb95e0c6d0bf5a2a01857ea365b979b57bf34bd3
- MD5 79165a2ba02def1e6e6220dbb32e6efc
- SHA1 fe52110c49c55816df296861b9ce74365e86bd91
- SHA512 0d25ddcdb284a40485ca63136ac0ca67fe3db822ff676b242a116a12a784b888f1f6f41654fc4df216129c510da2b73ad6f424bb72625fe95952a2fe77054d2d
- SSDEEP 768:enpt69Bk6vczMX7EuoqqAg5PsgDg1NE3KSbE6c6GypIV3:K6EQX+qqFPK128MPpm
- TLSH T139131A4037E94715F6FE2F39BC7271540AB6BA439D32E74E09C8249F0D26B948921BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/BepInEx.dll
- Size 127KB
- SHA256 e9ac3a950e91e71b13df5480b36ce06af27e981a688f0e62125b674d03a0713a
- MD5 27b960b8cb92dfa395237273ccb044f8
- SHA1 350f46e2c3edbddb4a04f19021a10529138302db
- SHA512 ad786e66ee50702c65f1e996d04fb47d7855eb9b1fb809560a0629671851899e9fabfbb6abaeb595d681f8e4014f460fbe5f4dcaedcc203f04363203cf032e1e
- SSDEEP 1536:mqdG2ZbrZUSSltqtP175+mb1RZGQ0dHSaIjMZVtNWXvMXJJkBye5l6OSWl5kkuRJ:mUfUZqt3bbX0dy1MZQ/MXEByerl5G91
- TLSH T15BD3391163EC462EEEFF1A76BCB051151B75FE07E826F78E1A4C68ED0922341A5217B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/HarmonyXInterop.dll
- Size 23KB
- SHA256 e30bd683ddec8d8bcef59528f643682d9fa6397dcaf4cfbb5f81ea532e39e2a1
- MD5 7b9a2ee371f41b7480ea6c7fcf8c5787
- SHA1 0f33e80c732002ef419110a5121c0dcdc8dea35d
- SHA512 6b14bc59ea4353fc25079b7c9b425d4d650a63141aaceb0c41073768088357c538d7e5bb76b78ea4d44fb21d8b1e4c13d1ad7077a9e3e0c63907c47cbe160c2c
- SSDEEP 384:qJpvQvdOrAh+fjhHIbSBohVj+20Ky/AZ8DqY3DBqZU2CamZM2/DVejhUpGSIZj8R:qDdrGwjObiohVCn/28LuU2nEGSIZj85
- TLSH T124B22946B7AC9B13C6FF477929F627010379EB23A806EB191DCC21E68C477A02B61357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/Mono.Cecil.Mdb.dll
- Size 42KB
- SHA256 5896d1898f616701fff18f3b2c71e6b844d2390ef9f41e1c5fccce8cb27c698e
- MD5 5a8b48fcf5e445095799e2c9149ff932
- SHA1 d4c514fbac7a30ddee7d0f597c3eae23a32ccedc
- SHA512 b99b02f296e5c817b8f984317e67c885099a3cc1198ee1808a0033b48ef60d27866719f0986d7f9a1ad547939bf6dc1886e858b9db7ba4375013b96db31957b6
- SSDEEP 768:XgjgMVEdS09ayuzjF/RwmanXdIiO1nqP+7y4CRIJZTMRTIzcRuYhpzt:XgUMn09ay6jF/WmcITIlITMRTtuYnt
- TLSH T12213F7112BFD8B1BC29D82FDA4E625061BB1912DA653E7878FC4F1E7BC13B8515021B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/Mono.Cecil.Pdb.dll
- Size 84KB
- SHA256 174db44a067f58561510af746f3caeb032037762c57a31c8d9ee32db25174984
- MD5 427e0464246b1e364c5a1a898db2ecf4
- SHA1 dc968ab6e3f9202b5550efb04c0e17c1df04d7d7
- SHA512 02ef1f9246e6117e6e958f019333720f07ff13feb5778b343e69d6e27e74e8ef1e6f122b486ce12b1e1eed546b17499ce906e8660babf281676bd8c6405f0dd6
- SSDEEP 1536:qguHKU52yKfwZyrw03xFjeylsP+ndKFi94lNSex6SU:qguHKU52rwZyrw03uZ+Um4lZ0SU
- TLSH T1FF836C39B7FC8972C1AD67B728AB4D0507F2D32ED243A75D49896EF8091776608322D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/Mono.Cecil.Rocks.dll
- Size 27KB
- SHA256 54ac539fb5ddc8b44c0e9acd0fcb7324f89d1a072edf8ebc1b06dd691e3d3927
- MD5 36a8284f264bdb2cb3420f5d2b8b10e0
- SHA1 b842aa70ac6ff9cc3922189e971a62659299ef64
- SHA512 3979601ce74b72e1519d020832e57e21b5269bda955878ad52e2d162d6de47fde4793fee9a163551f52081bc2dff90e197f030f8cb83128d07b8571073451e0d
- SSDEEP 384:ZNXMT7GsmR2jm13u4NcU11qvJCyIXcMeDz8PmR1uhLoXeuLMBG9UphJAprjE+J1H:v0I2jo3uobeCyV8uRsdeeum1pg1w7H
- TLSH T1D2C2291527598F37C9EF85BE78E1720807F1CA561213CB066CCCA4E9E9877D01B12BEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/Mono.Cecil.dll
- Size 331KB
- SHA256 7ae470288fff4a402899c254d0a76cefef55877f5c54f96e83c797cc5bb6e2f6
- MD5 50ae8a86b701c83fce3a814ae8d79321
- SHA1 7c8b821367897baa1b78157d5cea0767f424bc40
- SHA512 04b57207d4fd9fa9f1a71323ea803f023b4b0f2f7a7070bf431806c7a7f41277969c0f5979ecf134812001b47f5d36ec8e8541982473287323e783b3ffe93121
- SSDEEP 6144:BTU5Xn0f1oUh8dK9S5K0UEece8plCTNgoF:9pJS5KEpWgo
- TLSH T128746B3537FC5A3BD68F83B6E066142A86F5D419628BEF4D5888F2FA4C437529D02273
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/MonoMod.RuntimeDetour.dll
- Size 103KB
- SHA256 40e49bb314391cd7bddc2644f8553eeba92c194b940836b103df16955c464e0c
- MD5 04e1988b3ea65408d4c4c29e34bcdeb1
- SHA1 9c599b3c60f92bd3663042dc0781be78e2ff0882
- SHA512 93fd6df274132691a47e00c84e69c84620de7967434c2164deeb7b605038233be7d29d0acb2dc6dce5bbb4b13225094a61f12458be094ac9b2ec27edc6a524a0
- SSDEEP 1536:IFSuZYhhgotA6e4GDSGVjkodWWD7Fjsgql8R6AvdbiwbeMvdo:IUuOhhgsAPDlV5agql8cAvd5do
- TLSH T132A36C2AA7EE4E15D6AD9778B477178043B4F8064897E3AA5CCC65FE0817BC11A203F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/MonoMod.Utils.dll
- Size 183KB
- SHA256 9d1495f147ac93c4f81f84538c1a326e8f8a6aefc78d6289d798f3ce1162c5e9
- MD5 96c7b1340105a3b86f3e8d19a844903a
- SHA1 bc258633aab1a2a1839dcc44eed944d865fd6038
- SHA512 36706eb655c995d81aa731c067912452a566ef5b752effdf212603aa0099e28de56588191acced82fb97aeae33df06f229d8cbed969c92cf9b8d439d04c223de
- SSDEEP 3072:ojh9XBmF8HjDrQlDSKNcTD3dAC49Uock8dey4DAYxRDA8:oXUF8HjDrohO3KCllAAYD
- TLSH T1F9043C2D5799CE19C5AED6B1F46822604333DC03D2EBD70F7CB8A1F8499A388D6056E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/plugins/AzuAnticheat.dll
- Size 1.1MB
- SHA256 bbb2f5204e75bfe03b89d67e0f901e7e3e1768dff12504155d75981d463f420a
- MD5 4d4c17e3d5b61bb18ef5c517d118368e
- SHA1 630a76077dc9a6e89d65d429287077821b7e7635
- SHA512 b17c2cd53785fc3143f7be8d4e6e58f85537830adf7bafdcd3bce896e40711510a4e31dcee5bcf6cec2af734684afa151f8599af298e536af7ee976c7d53b50a
- SSDEEP 24576:KjLGHG1UXJgk9CdcOBDuRz51tToxjN6CPPkDa:K2FkxcwkDa
- TLSH T13335F603FAA78A92C2484773D5E7441407B4C7A63323DB1B798F636A1C437BB5E89726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/plugins/Jotunn.dll
- Size 504KB
- SHA256 f65751bc15e7ae7466b0f7d3b38c758397741c99a50890deb19acf738376bfb1
- MD5 25e2e6c190104eb40bbe050b2a680a3b
- SHA1 c9b298faa7bf19938aee72bf63c4cd37fea841c4
- SHA512 5e2af987f9a36044eaaee132422b3706d8871c7ae4a75d0f2fa1baf2e0d9dec2e9c31c0704255eccc79ca22a4cf09b2ef6e5cf4a1a9a4f9250690a4c866e93fe
- SSDEEP 6144:g2KhI0VbQQGbAQS/m8yC40m7IR4BSD7M0h6bwGUeqK2IdjRqYky1gIY2:g20hQQGbA80QddI/NIH
- TLSH T16DB48C2013F8862EDDFF1B79B438900603F5ED87AA66E78E0A4AA4FD1D4A7814D41773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/plugins/ProtectiveWards.dll
- Size 505KB
- SHA256 fc9c93f8206b76fc69cb9ed3181cd117b8e90bc95bf8fea86332d1489e4a20e0
- MD5 92beaf51f2af4ded7138d173c26b83db
- SHA1 2b897ceadc6af41ea10a245f3821b42e69b1c0f0
- SHA512 e9767cdbe86cd6b17859443257bbb93bf719994e682a9cb6a97d6940a617aa558b59026eda4579d73d562f475e0068bd2ffd935007f19f28475c7d717a501c1f
- SSDEEP 12288:yoT95fyfzj6Z9FDIiG5QdQNW3dC374g34Hiwyubh:dczjQ9FDIiGmQ
- TLSH T159B4C5A297E40D06F0BB1BB6D83B6201A2B47ADF5635C34E3B7160DD1E71A85C53A723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/plugins/ServerCharacters.dll
- Size 1.3MB
- SHA256 cc8ced09df5da839aaa9e0912057072f133e810710c4d60bb28346a52c95c38f
- MD5 67552ef935eeccb456a4e563e133a0bf
- SHA1 11ce00493a24b88a7e3839d3268be52a5efd217c
- SHA512 6b9b58b7b074f97dd5fa9e5fa71b8f892a10775ff5e889539f04c9264bb54c08d99115cb869f3236dc61930b70363d50e7df878c87d0605711e47dbe1448eed9
- SSDEEP 24576:qehUIFrrHwQ5ukKiqgmSpw2m06tUfheS+w:5FrGS
- TLSH T1B3555A2177DCCB23C3AE57B6B47101450BB2E942A793E39F52A4A2F43D923444F653AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10