Overview
overview
5Static
static
5HabboAirPl...86.zip
windows11-21h2-x64
1HabboAirPl...IR.dll
windows11-21h2-x64
3HabboAirPl...IR.vch
windows11-21h2-x64
3HabboAirPl...ry.exe
windows11-21h2-x64
3HabboAirPl...ry.exe
windows11-21h2-x64
3HabboAirPl...rt.dll
windows11-21h2-x64
3HabboAirPl...OPYING
windows11-21h2-x64
3HabboAirPl...PL-2.1
windows11-21h2-x64
3HabboAirPl...PL-1.1
windows11-21h2-x64
3HabboAirPl...OPYING
windows11-21h2-x64
3HabboAirPl...OPYING
windows11-21h2-x64
3HabboAirPl...bo.exe
windows11-21h2-x64
3HabboAirPl...ir.swf
windows11-21h2-x64
3HabboAirPl...er.exe
windows11-21h2-x64
1HabboAirPl...on.xml
windows11-21h2-x64
4HabboAirPl...se.txt
windows11-21h2-x64
3HabboAirPl...ME.txt
windows11-21h2-x64
3HabboAirPl...go.png
windows11-21h2-x64
HabboAirPl...28.png
windows11-21h2-x64
HabboAirPl...16.png
windows11-21h2-x64
HabboAirPl...56.png
windows11-21h2-x64
HabboAirPl...32.png
windows11-21h2-x64
HabboAirPl...48.png
windows11-21h2-x64
HabboAirPl...nt.swf
windows11-21h2-x64
3HabboAirPl...re.swf
windows11-21h2-x64
3HabboAirPl...et.swf
windows11-21h2-x64
3HabboAirPl...em.swf
windows11-21h2-x64
3HabboAirPl...ow.swf
windows11-21h2-x64
3HabboAirPl...or.swf
windows11-21h2-x64
3HabboAirPl...metype
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
08/08/2026, 10:26
Static task
static1
Behavioral task
behavioral1
Sample
HabboAirPlus_Standalone_x86.zip
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Adobe AIR.dll
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Adobe AIR.vch
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/CaptiveAppEntry.exe
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/CaptiveCmdEntry.exe
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/DDrawFontSupport.dll
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING-LGPL-2.1
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING-MPL-1.1
Resource
win11-20260513-en
Behavioral task
behavioral10
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/pcre2/COPYING
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/Licenses/pixman/COPYING
Resource
win11-20260513-en
Behavioral task
behavioral12
Sample
HabboAirPlus_Standalone_x86/Habbo.exe
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
HabboAirPlus_Standalone_x86/HabboAir.swf
Resource
win11-20260513-en
Behavioral task
behavioral14
Sample
HabboAirPlus_Standalone_x86/HabboCustomLauncher.exe
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
HabboAirPlus_Standalone_x86/META-INF/AIR/application.xml
Resource
win11-20260513-en
Behavioral task
behavioral16
Sample
HabboAirPlus_Standalone_x86/META-INF/AIR/license.txt
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
HabboAirPlus_Standalone_x86/README.txt
Resource
win11-20260513-en
Behavioral task
behavioral18
Sample
HabboAirPlus_Standalone_x86/habbo_logo.png
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
HabboAirPlus_Standalone_x86/icon128.png
Resource
win11-20260513-en
Behavioral task
behavioral20
Sample
HabboAirPlus_Standalone_x86/icon16.png
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
HabboAirPlus_Standalone_x86/icon256.png
Resource
win11-20260513-en
Behavioral task
behavioral22
Sample
HabboAirPlus_Standalone_x86/icon32.png
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
HabboAirPlus_Standalone_x86/icon48.png
Resource
win11-20260513-en
Behavioral task
behavioral24
Sample
HabboAirPlus_Standalone_x86/local_include/HabboRoomContent.swf
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
HabboAirPlus_Standalone_x86/local_include/PlaceHolderFurniture.swf
Resource
win11-20260513-en
Behavioral task
behavioral26
Sample
HabboAirPlus_Standalone_x86/local_include/PlaceHolderPet.swf
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
HabboAirPlus_Standalone_x86/local_include/PlaceHolderWallItem.swf
Resource
win11-20260513-en
Behavioral task
behavioral28
Sample
HabboAirPlus_Standalone_x86/local_include/SelectionArrow.swf
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
HabboAirPlus_Standalone_x86/local_include/TileCursor.swf
Resource
win11-20260513-en
Behavioral task
behavioral30
Sample
HabboAirPlus_Standalone_x86/mimetype
Resource
win11-20260513-en
General
- Target HabboAirPlus_Standalone_x86/Adobe AIR/Versions/1.0/Resources/CaptiveCmdEntry.exe
- Size 94KB
- Sample260808-mgqbasdn9z
- SHA256 9f02b37794a806d8eb87030797eed3960431f0bdaed8773b463d60a3970950e3
- MD5 75ceecbe46fe62fdc524173265f1be5e
- SHA1 a40d62bc4bf3ea940eb9da8ed37f2b3960b9a23e
- SHA512 6fed1618d81a07d02c6b9176fac016c25e27556fa9eec8d1a9d2a791ecb5baa18f2304699f930826cf842d891a2b678ea07b65f2805581029d50a7a0e9c6d119
- SSDEEP 1536:lb7Ikkfretbwmty4WmeiHZ9bGOX5BrO3rsiYrBxOJ+Yf+osWU6cdWWWGQhEHYmM+:lftbf/WviHZpGgJO3rBHJ+KEWBydP3dV
- TLSH T1A6931713B5E19431E5B32A3518B498605A3EFE614F74CAEF2388126E0F746C19E35B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CaptiveCmdEntry.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\HabboAirPlus_Standalone_x86\Adobe AIR\Versions\1.0\Resources\CaptiveCmdEntry.exe"C:\Users\Admin\AppData\Local\Temp\HabboAirPlus_Standalone_x86\Adobe AIR\Versions\1.0\Resources\CaptiveCmdEntry.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3264