Overview
overview
3Static
static
1ddm_gt6_syracus.rar
windows10-2004-x64
1ddm_gt6_sy...ane.ai
windows10-2004-x64
3ddm_gt6_sy...ds.bin
windows10-2004-x64
3ddm_gt6_sy...ane.ai
windows10-2004-x64
3ddm_gt6_sy...ds.bin
windows10-2004-x64
3ddm_gt6_sy...rid.ai
windows10-2004-x64
3ddm_gt6_sy...as.ini
windows10-2004-x64
1ddm_gt6_sy..._1.ini
windows10-2004-x64
1ddm_gt6_sy...rt.ini
windows10-2004-x64
1ddm_gt6_sy...ew.ini
windows10-2004-x64
1ddm_gt6_sy...ve.ini
windows10-2004-x64
1ddm_gt6_sy...ng.ini
windows10-2004-x64
1ddm_gt6_sy...ap.ini
windows10-2004-x64
1ddm_gt6_sy...ys.ini
windows10-2004-x64
1ddm_gt6_sy...es.ini
windows10-2004-x64
1ddm_gt6_sy...us.kn5
windows10-2004-x64
3ddm_gt6_sy...us.zip
windows10-2004-x64
1Config.ini
windows10-2004-x64
1Patch_v4.data
windows10-2004-x64
3ddm_gt6_sy..._n.dds
windows10-2004-x64
3ddm_gt6_sy...8e.dds
windows10-2004-x64
3ddm_gt6_sy...2e.dds
windows10-2004-x64
3ddm_gt6_sy...ig.ini
windows10-2004-x64
1ddm_gt6_sy...NM.dds
windows10-2004-x64
3ddm_gt6_sy...ap.png
windows10-2004-x64
1ddm_gt6_sy...ne.png
windows10-2004-x64
1ddm_gt6_sy...ed.png
windows10-2004-x64
1ddm_gt6_sy...ew.png
windows10-2004-x64
1ddm_gt6_sy...k.json
windows10-2004-x64
3Analysis
- max time kernel
149s - max time network
160s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/08/2026, 16:08
Static task
static1
Behavioral task
behavioral1
Sample
ddm_gt6_syracus.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ddm_gt6_syracus/ai/fast_lane.ai
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
ddm_gt6_syracus/ai/fast_lane_payloads.bin
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
ddm_gt6_syracus/ai/pit_lane.ai
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
ddm_gt6_syracus/ai/pit_lane_payloads.bin
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
ddm_gt6_syracus/ai/pit_lane_with_grid.ai
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
ddm_gt6_syracus/data/cameras.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
ddm_gt6_syracus/data/cameras_1.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
ddm_gt6_syracus/data/cameras_start.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
ddm_gt6_syracus/data/crew.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
ddm_gt6_syracus/data/groove.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
ddm_gt6_syracus/data/lighting.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
ddm_gt6_syracus/data/map.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
ddm_gt6_syracus/data/overlays.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
ddm_gt6_syracus/data/surfaces.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
ddm_gt6_syracus/ddm_gt6_syracus.kn5
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
ddm_gt6_syracus/ddm_gt6_syracus.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Config.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
Patch_v4.data
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
ddm_gt6_syracus/extension/28_n.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
ddm_gt6_syracus/extension/28e.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
ddm_gt6_syracus/extension/2e.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
ddm_gt6_syracus/extension/ext_config.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
ddm_gt6_syracus/extension/flat_NM.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
ddm_gt6_syracus/map.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
ddm_gt6_syracus/ui/outline.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
ddm_gt6_syracus/ui/outline_cropped.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
ddm_gt6_syracus/ui/preview.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
ddm_gt6_syracus/ui/ui_track.json
Resource
win10v2004-20260513-en
General
- Target ddm_gt6_syracus/map.png
- Size 148B
- Sample260808-tk9bxaec98
- SHA256 08be2651d7e9ddb73380f7774de0d1236b257bcf99dcffb9efb1975cb47c0967
- MD5 3d005440efd4ae9785f5b3ee687e617a
- SHA1 3cee7396e1b029dda50426913c74b43c12e2ce1e
- SHA512 20f2069cec73f8a5bba8d7e7e9003efcfb139bccc8b26102df71d172cb3f5ae61f36295d92a4600d1cd92edf47392522ca879fc9e02228b8770837a257f75036
- TLSH T1EEC08CC29A562D28828885B683630010D829294802030B082C00003E00298855A513C7
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3032 mspaint.exe 3032 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3032 mspaint.exe 3032 mspaint.exe 3032 mspaint.exe 3032 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\ddm_gt6_syracus\map.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3032
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:564