Overview
overview
3Static
static
1ddm_gt6_syracus.rar
windows10-2004-x64
1ddm_gt6_sy...ane.ai
windows10-2004-x64
3ddm_gt6_sy...ds.bin
windows10-2004-x64
3ddm_gt6_sy...ane.ai
windows10-2004-x64
3ddm_gt6_sy...ds.bin
windows10-2004-x64
3ddm_gt6_sy...rid.ai
windows10-2004-x64
3ddm_gt6_sy...as.ini
windows10-2004-x64
1ddm_gt6_sy..._1.ini
windows10-2004-x64
1ddm_gt6_sy...rt.ini
windows10-2004-x64
1ddm_gt6_sy...ew.ini
windows10-2004-x64
1ddm_gt6_sy...ve.ini
windows10-2004-x64
1ddm_gt6_sy...ng.ini
windows10-2004-x64
1ddm_gt6_sy...ap.ini
windows10-2004-x64
1ddm_gt6_sy...ys.ini
windows10-2004-x64
1ddm_gt6_sy...es.ini
windows10-2004-x64
1ddm_gt6_sy...us.kn5
windows10-2004-x64
3ddm_gt6_sy...us.zip
windows10-2004-x64
1Config.ini
windows10-2004-x64
1Patch_v4.data
windows10-2004-x64
3ddm_gt6_sy..._n.dds
windows10-2004-x64
3ddm_gt6_sy...8e.dds
windows10-2004-x64
3ddm_gt6_sy...2e.dds
windows10-2004-x64
3ddm_gt6_sy...ig.ini
windows10-2004-x64
1ddm_gt6_sy...NM.dds
windows10-2004-x64
3ddm_gt6_sy...ap.png
windows10-2004-x64
1ddm_gt6_sy...ne.png
windows10-2004-x64
1ddm_gt6_sy...ed.png
windows10-2004-x64
1ddm_gt6_sy...ew.png
windows10-2004-x64
1ddm_gt6_sy...k.json
windows10-2004-x64
3Analysis
- max time kernel
149s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/08/2026, 16:08
Static task
static1
Behavioral task
behavioral1
Sample
ddm_gt6_syracus.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ddm_gt6_syracus/ai/fast_lane.ai
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
ddm_gt6_syracus/ai/fast_lane_payloads.bin
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
ddm_gt6_syracus/ai/pit_lane.ai
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
ddm_gt6_syracus/ai/pit_lane_payloads.bin
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
ddm_gt6_syracus/ai/pit_lane_with_grid.ai
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
ddm_gt6_syracus/data/cameras.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
ddm_gt6_syracus/data/cameras_1.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
ddm_gt6_syracus/data/cameras_start.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
ddm_gt6_syracus/data/crew.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
ddm_gt6_syracus/data/groove.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
ddm_gt6_syracus/data/lighting.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
ddm_gt6_syracus/data/map.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
ddm_gt6_syracus/data/overlays.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
ddm_gt6_syracus/data/surfaces.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
ddm_gt6_syracus/ddm_gt6_syracus.kn5
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
ddm_gt6_syracus/ddm_gt6_syracus.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Config.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
Patch_v4.data
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
ddm_gt6_syracus/extension/28_n.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
ddm_gt6_syracus/extension/28e.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
ddm_gt6_syracus/extension/2e.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
ddm_gt6_syracus/extension/ext_config.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
ddm_gt6_syracus/extension/flat_NM.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
ddm_gt6_syracus/map.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
ddm_gt6_syracus/ui/outline.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
ddm_gt6_syracus/ui/outline_cropped.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
ddm_gt6_syracus/ui/preview.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
ddm_gt6_syracus/ui/ui_track.json
Resource
win10v2004-20260513-en
General
- Target ddm_gt6_syracus/ui/outline.png
- Size 3.5MB
- Sample260808-tk9bxaec98
- SHA256 6e82c1f717d661e45ac08d2e6be53c83280ceb1b313ff990b9dcab4993e343ce
- MD5 8ae0c06f0ae57ca976d84800f3dc81a4
- SHA1 8b88e3653a45530daf1e10fbd35d0a3e93cdafd3
- SHA512 c911168747b24c5dff917d593d700a14006c8881c872751bad7249c82dd2a4077ce7eb9440c799c035bb08235c9205156f99ce27e79f7c002055798a82dddbd2
- SSDEEP 98304:9ETWXbEL182P2wPrNWvxSuY8MikE7IDfwalEkBMSEDJCE33:iTjx3uwPYY8NkEED1iS6Fn
- TLSH T1EF0633DE999F1849374559740D46FFCD0BFAD3C46BA26A2973400E884F23612BF5EE82
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3064 mspaint.exe 3064 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3064 mspaint.exe 3064 mspaint.exe 3064 mspaint.exe 3064 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\ddm_gt6_syracus\ui\outline.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3064
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:2512