Analysis
- max time kernel
149s - max time network
211s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/08/2026, 17:04
Behavioral task
behavioral1
Sample
The_House_in_Fata_Morgana_1.3it_(41335)_win_gog/Bonus/fata_ost_MP3.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
The_House_in_Fata_Morgana_1.3it_(41335)_win_gog/Bonus/fata_ost_MP3.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
The_House_in_Fata_Morgana_1.3it_(41335)_win_gog/setup_the_house_in_fata_morgana_v1.3it_(41335)-1.bin
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
The_House_in_Fata_Morgana_1.3it_(41335)_win_gog/setup_the_house_in_fata_morgana_v1.3it_(41335)-1.bin
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
The_House_in_Fata_Morgana_1.3it_(41335)_win_gog/setup_the_house_in_fata_morgana_v1.3it_(41335).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
The_House_in_Fata_Morgana_1.3it_(41335)_win_gog/setup_the_house_in_fata_morgana_v1.3it_(41335).exe
Resource
win11ltsc2024-20260709-en
General
- Target The_House_in_Fata_Morgana_1.3it_(41335)_win_gog/setup_the_house_in_fata_morgana_v1.3it_(41335)-1.bin
- Size 583.5MB
- Sample260810-vlmd7stdlh
- SHA256 52e6f2d0ad2536632a95f2ca6db87d234444e6a1d89caeb7ce89759879b35bb6
- MD5 e6736be2239fba41a57a5f380768047f
- SHA1 4ec64ce151c77a0dee6a702a90f9d4d038252f87
- SHA512 5bb10b1e68d5fa9bc1ce13d9fd3d911e8c3ae9a537e46bc22add78d5023128225822d66fe0bb0bfb5bc81b822e617d4d4af2e626e84f432fe8876cedc6065b93
- SSDEEP 12582912:FZRgXofVv5noQdXi3gtJkwdLHZKaJ1fRCOb/8NAN2+uTqplkKMEEYA1FTUyY3:Fgo15oQdSwXkOL8O1oObUG04mKMEEYs2
- TLSH T1EE59335FD042892B3DDC6A32E867284E37DCC9915C65018CA91CBBD4726AFF53C9DAC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 3780 cmd.exe