General
- Target NellCloneMod_v1.10.56.zip
- Size 71KB
- Sample260807-vfdj4ssxav
- SHA256 b7a285a888d280499cba4271526edf5bfc396cef61165434e9a79cd76d37aa5b
- MD5 e8300815e00cf2fb6bb6bd3cff194fed
- SHA1 06b98e33b37a3c8c89aa33b3927092d467de1d16
- SHA512 c0cc432aefee003a1d6595014e43877d6ead6596607a21536fb9e6083f3ca84a0f8beaee9e70acd6a56d689067fa5fa85be8d36abb96552d2fd17b2f30389bbd
- SSDEEP 1536:h4tOYPGN7RZ6wxTj+FRTBoervOOCaQgNAIoMVNsc+RVCqon5kEwzkEwK:h4tBPGlTwRmGmOCM2zMVec+RdChAhd
- TLSH T14D63025F87788392F468B036A2D19DCD311B48B9CB5E55BB6380A0C5586CEB7425BF12
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
BladeAndSorcery_Data\StreamingAssets\Mods\NellCloneMod\NellCloneModBookShim.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
BladeAndSorcery_Data\StreamingAssets\Mods\NellCloneMod\NellCloneModBookShim.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Mods\NellCloneMod.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Mods\NellCloneMod.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Mods\NellCloneMod_Data\NellCloneModBookShim.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Mods\NellCloneMod_Data\NellCloneModBookShim.dll
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target BladeAndSorcery_Data\StreamingAssets\Mods\NellCloneMod\NellCloneModBookShim.dll
- Size 10KB
- SHA256 0f732f2460efe4e966e32c7e7810897189e3abadffad34bba3e7ce606c7926e9
- MD5 a9fc4820d444fdac39496b8996b90925
- SHA1 7db4f47feea717f42dccdc3c15aaa95e08c69e55
- SHA512 5938076129e93d7904ff4b7d736625a14e1aacad4d82c341c6622afd37c971391a19ba77b241ec8326369bf8403b11136114549f810a191d828413abfec0058e
- SSDEEP 96:BO8jbAAzalrX/CXZZkQqQ2/XHXxAzmF+WfoXvQRb6xEQ9dLASuEH3vZuzruwuGu7:BOI8UaQqhXHhAaFXQnTfQmFbnJ
- TLSH T1F722E664A7FC8320DABB0B7C3D7A02611A75FEC09C26C76F144992462C603D59AB5F7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Mods\NellCloneMod.dll
- Size 145KB
- SHA256 8847c73c4c0f5a263538aef92cf922ef937e0fd90cce6eac692ad33dbccdc971
- MD5 43d2c104580e6f352f4670a975bdcea3
- SHA1 1ac85105d8db694e2fcc83e5ab9f8574360933b0
- SHA512 af474f048d7dc2ac47e837867f021e13c9ca95b9b888f704f7ac3419ca278dfbdbb90d8bb3e8bc9db02f9b920ec35e8846c42888ef64ee4af4ed279c3000cfbd
- SSDEEP 3072:bBJ54S9wnlvDZU37v0bTg2NoZRB38xNWwpQZnxRpzYLG:bBJZ9wn1Dar0bJNoZsxNWtxYL
- TLSH T1DBE3299527FC4E52E5BF6BFABC7504864A35FD229D36D38D0C80A0ED1A623C49A113B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Mods\NellCloneMod_Data\NellCloneModBookShim.dll
- Size 10KB
- SHA256 0f732f2460efe4e966e32c7e7810897189e3abadffad34bba3e7ce606c7926e9
- MD5 a9fc4820d444fdac39496b8996b90925
- SHA1 7db4f47feea717f42dccdc3c15aaa95e08c69e55
- SHA512 5938076129e93d7904ff4b7d736625a14e1aacad4d82c341c6622afd37c971391a19ba77b241ec8326369bf8403b11136114549f810a191d828413abfec0058e
- SSDEEP 96:BO8jbAAzalrX/CXZZkQqQ2/XHXxAzmF+WfoXvQRb6xEQ9dLASuEH3vZuzruwuGu7:BOI8UaQqhXHhAaFXQnTfQmFbnJ
- TLSH T1F722E664A7FC8320DABB0B7C3D7A02611A75FEC09C26C76F144992462C603D59AB5F7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10