Overview
overview
5Static
static
3PC_PVZ-Fus....1.zip
windows10-2004-x64
1PC_PVZ-Fus....1.zip
windows11-ltsc_2024-x64
1GameAssembly.dll
windows10-2004-x64
1GameAssembly.dll
windows11-ltsc_2024-x64
1PlantsVsZombiesRH.exe
windows10-2004-x64
5PlantsVsZombiesRH.exe
windows11-ltsc_2024-x64
1PlantsVsZo...ed.dll
windows10-2004-x64
1PlantsVsZo...ed.dll
windows11-ltsc_2024-x64
1PlantsVsZo...ources
windows10-2004-x64
3PlantsVsZo...ources
windows11-ltsc_2024-x64
3PlantsVsZo...s.json
windows10-2004-x64
3PlantsVsZo...s.json
windows11-ltsc_2024-x64
3PlantsVsZo...s.json
windows10-2004-x64
3PlantsVsZo...s.json
windows11-ltsc_2024-x64
3PlantsVsZo...p.info
windows10-2004-x64
3PlantsVsZo...p.info
windows11-ltsc_2024-x64
3PlantsVsZo...config
windows10-2004-x64
3PlantsVsZo...config
windows11-ltsc_2024-x64
3PlantsVsZo...nity3d
windows10-2004-x64
3PlantsVsZo...nity3d
windows11-ltsc_2024-x64
3PlantsVsZo...ta.dat
windows10-2004-x64
3PlantsVsZo...ta.dat
windows11-ltsc_2024-x64
3PlantsVsZo...es.dat
windows10-2004-x64
3PlantsVsZo...es.dat
windows11-ltsc_2024-x64
3PlantsVsZo...es.dat
windows10-2004-x64
3PlantsVsZo...es.dat
windows11-ltsc_2024-x64
3PlantsVsZo...source
windows10-2004-x64
3PlantsVsZo...source
windows11-ltsc_2024-x64
3PlantsVsZo...source
windows10-2004-x64
3PlantsVsZo...source
windows11-ltsc_2024-x64
3UnityCrash...64.exe
windows10-2004-x64
1UnityCrash...64.exe
windows11-ltsc_2024-x64
1General
- Target PC_PVZ-Fusion-3.8.1.zip
- Size 524.5MB
- Sample260807-28aggsdn9s
- SHA256 8eb5e014b06c9dcb60e66d802ec199ef2e9b185073e18da0212fa82fe05e5e55
- MD5 68be45f2721c8b331aab8ceddf934d35
- SHA1 4c82dc4e72f082abf7027a59ffc30486d5b4c4ee
- SHA512 76e8d88ba66062997935c1491741002dd3520625551426488b2e941035e6f8d5e2e2f7c9ce8f48643a740e2a15aba304e46cf3e7c0c41bd30678c61ce1c8995c
- SSDEEP 12582912:hyyhCNeL+Gk8Qvpmcx+ozU8aeytvm7wDwH6VSMIeajr+yho:44CcLOvpzx+ozUPm7wD3VSPl/+L
- TLSH T19449338C3F9006128169A241DC536CFFB75E701A8BF6653256816CD732C2BB6ADECED0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
PC_PVZ-Fusion-3.8.1.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
PC_PVZ-Fusion-3.8.1.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
GameAssembly.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
GameAssembly.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
PlantsVsZombiesRH.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
PlantsVsZombiesRH.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
PlantsVsZombiesRH_Data/Plugins/x86_64/lib_burst_generated.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
PlantsVsZombiesRH_Data/Plugins/x86_64/lib_burst_generated.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
PlantsVsZombiesRH_Data/Resources/unity default resources
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
PlantsVsZombiesRH_Data/Resources/unity default resources
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
PlantsVsZombiesRH_Data/RuntimeInitializeOnLoads.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
PlantsVsZombiesRH_Data/RuntimeInitializeOnLoads.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
PlantsVsZombiesRH_Data/ScriptingAssemblies.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
PlantsVsZombiesRH_Data/ScriptingAssemblies.json
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
PlantsVsZombiesRH_Data/app.info
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
PlantsVsZombiesRH_Data/app.info
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
PlantsVsZombiesRH_Data/boot.config
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
PlantsVsZombiesRH_Data/boot.config
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
PlantsVsZombiesRH_Data/data.unity3d
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
PlantsVsZombiesRH_Data/data.unity3d
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
PlantsVsZombiesRH_Data/il2cpp_data/Metadata/global-metadata.dat
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
PlantsVsZombiesRH_Data/il2cpp_data/Metadata/global-metadata.dat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
PlantsVsZombiesRH_Data/il2cpp_data/Resources/0Harmony.dll-resources.dat
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
PlantsVsZombiesRH_Data/il2cpp_data/Resources/0Harmony.dll-resources.dat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
PlantsVsZombiesRH_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
PlantsVsZombiesRH_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
PlantsVsZombiesRH_Data/resources.resource
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
PlantsVsZombiesRH_Data/resources.resource
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
PlantsVsZombiesRH_Data/sharedassets0.resource
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
PlantsVsZombiesRH_Data/sharedassets0.resource
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
UnityCrashHandler64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
UnityCrashHandler64.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target PC_PVZ-Fusion-3.8.1.zip
- Size 524.5MB
- SHA256 8eb5e014b06c9dcb60e66d802ec199ef2e9b185073e18da0212fa82fe05e5e55
- MD5 68be45f2721c8b331aab8ceddf934d35
- SHA1 4c82dc4e72f082abf7027a59ffc30486d5b4c4ee
- SHA512 76e8d88ba66062997935c1491741002dd3520625551426488b2e941035e6f8d5e2e2f7c9ce8f48643a740e2a15aba304e46cf3e7c0c41bd30678c61ce1c8995c
- SSDEEP 12582912:hyyhCNeL+Gk8Qvpmcx+ozU8aeytvm7wDwH6VSMIeajr+yho:44CcLOvpzx+ozUPm7wD3VSPl/+L
- TLSH T19449338C3F9006128169A241DC536CFFB75E701A8BF6653256816CD732C2BB6ADECED0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target GameAssembly.dll
- Size 45.7MB
- SHA256 51346f4dae35cf145f72473fd0ae6f777c427d5cecc7732936d4e0c7bac5ef52
- MD5 b859a220470e86870f2f97cad3d65a6f
- SHA1 ceb388947375abcdba04608cffce3a2da3c77f23
- SHA512 b13420f8312aa72b4e629f6f89d02e92983bdf4a25ee7f7c1e17cb4981358cd83e8c6f9c36051ead3c59ac5486995efc81d61bbe239f923dd8475b600801397c
- SSDEEP 393216:ycK4WNOsw4w97KvGR1ffRZGYgxpPw6J7Mef6KZ/ROVP+Y7YwWm0dtFEZhZeP7/Li:y/K4TmEwYkPtAMu8S
- TLSH T173B73A4AB7754448C0AEE174A923189BDBB13C845F2467DB25900B8D1FB37DCA87BBB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target PlantsVsZombiesRH.exe
- Size 651KB
- SHA256 268e4133229d3071e4b55c701c5ab3bea4ebf240c8827fdc790edb6b1b2a268c
- MD5 a2bd3834c56d929704252d458eceb48d
- SHA1 cf1842d3a1f51e79814061aec9d46528ce01f835
- SHA512 50a98dbdfc1c9da9005bf556c03dced2ff332a9150c62bb6cc13a9092fc4bf1f3a02f4abe77a84578801598d1e44cdf76f3b9f640580eba492903753617a402d
- SSDEEP 12288:ZH744aOD8nsmV2eCczU3CAX+dwk7xkKwsBrO:59aOQFwf
- TLSH T17FE495C7B1F1D8C5DE11B938C4E4ADAD8725DEAB9E0F241E08217D9534E913C4AADC3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Drops file in System32 directory
-
- Target PlantsVsZombiesRH_Data/Plugins/x86_64/lib_burst_generated.dll
- Size 265KB
- SHA256 f93def045e85bd867f97dcae247646273d987364757459b81a6adc5f781198ed
- MD5 0d6f2287cc8c865e58a0a07eb27b2fb9
- SHA1 417542fc8355868917aa6c39f7e4d042cfea3752
- SHA512 5e473e90586308960510116be610df2e1c930fe04e67bdcce24ffec2bb89704a6fbce8aced811d9252c179d681882f54518560fa4b8990718f4c2bf80e25122d
- SSDEEP 6144:xAQ+LFeK4Tv/KLTmWerRnDXH+PSKwhBZCSDFELk3iW1:Omv/yTDe1hBZtYk3iW1
- TLSH T1D9445ABC218628ADD42A8070463EAA67B5633C0613D44CF714E154BA3EF5DD7AF7C92E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target PlantsVsZombiesRH_Data/Resources/unity default resources
- Size 1.5MB
- SHA256 a11e3e24520676183b3750564b4d9f5a90e8f41fd3523cbfb0c49f3989453da2
- MD5 c9730fe286df07729a2811fbe1dfbede
- SHA1 6f5ea5605cb6771e20ab6d75e448b75307e21ec7
- SHA512 387ef73b2ad58786aac05cbf418a211664f0f0dc24aefff3af8acd83cdbbd072c7dfa6154464eb49218f7b03af62536b1a38c42e5df9f50b96d705c0e8f500bf
- SSDEEP 6144:h8g9JxVJ0aYR1CCVX8BAiZahi3YW+/OJ9WqCmKISHCkcCVw:hD8TpQahXvOjdCTBw
- TLSH T197755315A2A1153DEC5E053987A31E61E3BDE99C1BEB8B133B1C321CBF617488A77274
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PlantsVsZombiesRH_Data/RuntimeInitializeOnLoads.json
- Size 1KB
- SHA256 4ba63ba4eba75302bd68b7051a1f8f0ade2dde50321935dcc7593db49d8adfe4
- MD5 8391e84fba7bc31c54480776fc406c0a
- SHA1 1b5d2fb2551fa97351478c3afe0ee0bdd86a5a5d
- SHA512 357c499c478ad5dd9e1837e3640928ba3412c689fe7a66ca08dae2ff681e97511f552cc9b3fe118353d34471df9b99237bac61a740a88c85ae3aa115b45f5fa4
- TLSH T13931DD6C26C68F7F5F47839B797A295D30C40A0F8ACA4D44DCB85E2F94742555C4612E
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target PlantsVsZombiesRH_Data/ScriptingAssemblies.json
- Size 3KB
- SHA256 ab0052f55dbdd8de4bd1e75c9be376ec8e4ee1c388de347ae237ad3593f87e52
- MD5 77df4a5c271f2d4fdee236e421b97b56
- SHA1 b3b85ef5fe483bad5944d881e3743e1d6b2db4d9
- SHA512 23e548e860189c4ba8221abf7f03d7f38d555d4dac8865803f28815a2ab3bf41aa0286ea089faf4cdcb142d827f9419592d33178449797779eccbeb27e9fc539
- TLSH T10A8114B6C48B26D32ECC5ED38C349CCC39D350A60A65D4244EAEA79FA978CD27D0C6D5
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target PlantsVsZombiesRH_Data/app.info
- Size 29B
- SHA256 e4b44b2423a81f00e6deac7e4d8f157dcb824a36e82082c8e31fd97f8f3e432c
- MD5 4c9e3a696cc4700e1edd9cecfac4b650
- SHA1 58b3de3b65f52d071347455aaa9814f578ce6488
- SHA512 1c18b6b2705a58180f3d7974c7515d167b40a4b00eb4296eaa71b6c898204db01730cf3eab231f4e040c4d53f03bfdce31e6d2ce7cc76d3bc9b9ee1c7108c975
- MD5 SHA1 SHA512
Score3/10 -
- Target PlantsVsZombiesRH_Data/boot.config
- Size 130B
- SHA256 136c6bbc6c1debf998935358833dfe1e801453ecd3a4b4450f1ef05ebfb35084
- MD5 a5fd6bad0036320bd5e780aa84ba3a0d
- SHA1 d70877ba8a31cd98a5584422a44844d712cf055f
- SHA512 ee605df2bf5dc2289a70787bb863e60c9da483bacfa878415b1c5c6c2e10838f295d75aa07b0716f9866407ae3932d78eac9b2d0663c416c7b1bd2fe08db4c01
- TLSH T17EC02B00AE74170014CC4050B5B11DC3E2364041441034F070B520602115C0F5553AE2
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target PlantsVsZombiesRH_Data/data.unity3d
- Size 512.7MB
- SHA256 5301673e5a0dfe85016da1707343f81bcca8672cbf99d95421b7a07e9efa89e0
- MD5 8172db98a2bf80df60d5fe70a5a197a3
- SHA1 5998a97e615548752eb2ce805cbd3ad4ff6dda51
- SHA512 83d6b802fb84233fd7980fbad92002ec486d90dd2a740ead25a1d837501b6076352a1051312e7ce73af1aba0db5bbf6c8e0b9b7b52a87dd9b4592161aaf485ee
- SSDEEP 12582912:s4dDEAVaNX7+pBhaHKj7wlEGCNY5HcTqJ6/:LdDvSXCpv7Koe8qA/
- TLSH T138492373B7489BB2C1EC6635824E9B1A82DB9D063DB3C40DCF11B78F48766494B23B65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PlantsVsZombiesRH_Data/il2cpp_data/Metadata/global-metadata.dat
- Size 10.0MB
- SHA256 7f7ba8c23075fecbd66d7be34f9bee2432f2df556aa23ac0dd14d0f52e43e217
- MD5 85410585300e366dced22431bf178cbd
- SHA1 78b1e191e0dac98d64f73f050fc60cda53ac0ba7
- SHA512 d5fc488b808e5dd3a95b0ea9366d0764efc0ac077d6c6f6a33b2e69a70a5b11cc661ee24837b88524193797ae8e26667d6cce5498d35328bba261dca2481a99b
- SSDEEP 49152:nLIH9XjwFZBdEBaGh+QBTB0Ahm34ZupUOotSr+fJMb2ZDUStvGh0D4hFpd0sViZi:UjgOSr+MkDUavG/0EgtTzDk9lc7FV2dF
- TLSH T126B6D7E1BE64CA2EC15563354AD7CAF46671AE4A0F12C2E77344B7AEB4761048F032F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PlantsVsZombiesRH_Data/il2cpp_data/Resources/0Harmony.dll-resources.dat
- Size 551B
- SHA256 c17d55aa2abf41a63668a3d212c55578c2dd6f17a2f1006f9a24251623bffc4d
- MD5 9ec46b8461233ecdaf02d909b03532bf
- SHA1 4d8bf20f27c0a60782606a8746cb9cd7dbd5de49
- SHA512 7fd1e5d5ce95dc5ab7026ea3e639526fb8b9641b8b656c089657603c94d5a6277298c85705928a44bc4b22e6c5b1ab24ea99c11c46aad06d272ac271933a26c6
- TLSH T110F01D706861E4694DA046641092278A32EF068D4FBCC76CB52D227FE95C84BCF160A3
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target PlantsVsZombiesRH_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat
- Size 329KB
- SHA256 c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f
- MD5 21d06dbc8af6432b2b49536ed30609af
- SHA1 11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d
- SHA512 2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e
- SSDEEP 3072:c5j+evAPQ48RhHkXKSmLZsumnWpevI1kMqXkD3by+BEL:crvS8rHXSmJmnjvXkSr
- TLSH T1F7746CD8B5728E76FE57A9BCE85E928D43D9C1E2C182523B3D75C2E04D52386181EE3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PlantsVsZombiesRH_Data/resources.resource
- Size 40.0MB
- SHA256 b43f3b0cd65cea7d96d28e8d731f0fddfb9601ddd30dd85a47781561612522ee
- MD5 8c6bc8c43501bda754e068c4a8d716ee
- SHA1 17c90842462901f9c9287be6335f566edf17c4b9
- SHA512 84436bc56192e9114597c63a5445ebbe79d8de15e3e96e00b505d033058803fe241389857b7e42100de2f4af8e5186486f44c5f0a2eeeb4d545c220643d48fa9
- SSDEEP 786432:EYvV57aK9y3czu3EO4oy/GtEqYOmj5P4liu/xnmlEj5LIDNe1:E2V57aK9X4IoXEqYbj5AgQF1W5m
- TLSH T1A1973316EE4B5DD6C45C56720AFF4F6767B190F443B0662B31BB3E28EC6BB18490381A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PlantsVsZombiesRH_Data/sharedassets0.resource
- Size 1.0MB
- SHA256 89e1a1a23b64abe97dfbc26832c459e30b151daebeb5f1db7bb1ce1fcc6e90dc
- MD5 35d10c1eab1d2153c03e907ed69e0551
- SHA1 c27b7be1ea72ff64ed26a5a9c365947638ba9ff3
- SHA512 d17011b8fbb8e507b7dd4b5c03e1ecf58f5208a835faa4c4ffa5ab758d27cd1df68a2e06c18911544095e65da176e1ac4314bb1bef4c80a54cd659c0396cf4dd
- SSDEEP 24576:TnirLcOy+5CYrbVU6Duc7ey/rPJx9wEXTbGRFDQx0qcIlti9gXt:W/1yY5VpCkey/LJ6RFDhqmGt
- TLSH T12B3533D5CAB65E29CA5D94F06582FE37C387C218223CE27F538A1F2AD6472B9D0C6435
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target UnityCrashHandler64.exe
- Size 1.1MB
- SHA256 c3b15b305f837bbb5eadb31e847d4a968ebdff9ddb17194bae003511c1bbcc98
- MD5 89bacba4e7daa0936ac06a035358efc6
- SHA1 ae60acb27f22a0714491e791481300b34f100678
- SHA512 fdeba12f5ebfe4cfbf6297ebf8d44b82f56a52b71b3842a615c128d308ceaef8053b53f8d1837cf1347b65194d925381fe9546c3db8be1f8ab410ea490fc0681
- SSDEEP 12288:7oocFwRhNcnvyhYTRZTBpu74xl6PwsinRZw2Gthb4DBq7QkoPZncNcHylQfz2fz6:7ooqwRhNLYLmMzRZw2GHE8n0cHKz+zZ0
- TLSH T183457C6AA69800E9D5779135C952490FE7F27C1907609BDF23A0B7A72F336E41E7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10