Analysis

  • user interaction
    yes
  • max time kernel
    64s
  • max time network
    71s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/08/2026, 19:08

General

  • Target
    meccha-mod-menu-v1.1.0.exe
  • Size 52.8MB
  • Sample260810-xtnnca1vgs
  • SHA256 fa95468181d61f0864e06ece4b4826e738ff6a2c3d0481e0820456441816fcc2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 38 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\meccha-mod-menu-v1.1.0.exe
    "C:\Users\Admin\AppData\Local\Temp\meccha-mod-menu-v1.1.0.exe"
    1⤵
    • Loads dropped DLL
    PID:1044

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        config.json.04e8379b8e134fd0a3bdb82fff399c15.tmp

        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\config\config.json.04e8379b8e134fd0a3bdb82fff399c15.tmp
        • Size 895B
        • SHA256 5711dcdbc0efb50c535a49009112bee3dc20949440c172ba4b693e1c8210a988
        • MD5 SHA1 SHA512 TLSH

        startup-20260810-200922-1044.log

        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.1.0\diagnostics\startup-20260810-200922-1044.log
        • Size 1KB
        • SHA256 56e1488adf9726cd75b6f1c1c8183687301b1f56d0a361007b6cf41d3ab3410b
        • MD5 SHA1 SHA512 TLSH

        startup-20260810-200922-1044.log

        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.1.0\diagnostics\startup-20260810-200922-1044.log
        • Size 5KB
        • SHA256 13e6fb20b3299dd3c93c1e0b0eb68d9d69ccadb593ef7be3a9563ffe3251b1ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MecchaCamouflage.Controller.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\MecchaCamouflage.Controller.dll
        • Size 308KB
        • SHA256 690929f41e133771c20dd3cc7bc006f9c6cdae6c8c0e89120041b8ee9aa93b13
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MecchaCamouflage.Core.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\MecchaCamouflage.Core.dll
        • Size 156KB
        • SHA256 798faea142bbd2137d3d9b08105eaa03f59b9c5306f872bf7331805d3a209a20
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Win32.Registry.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\Microsoft.Win32.Registry.dll
        • Size 113KB
        • SHA256 eb249fb10eb8687d3505fd9276480fb9a0c13dc975ce6bcc35e2e2e723e8d559
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.Win32.SystemEvents.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\Microsoft.Win32.SystemEvents.dll
        • Size 113KB
        • SHA256 e47266840881921f19fd26df39d23cfbc247f7c4f7f8799a91c96e68f6a08513
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.Concurrent.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Collections.Concurrent.dll
        • Size 225KB
        • SHA256 5a4b728246443eb3b4c0a16d9b3d04bc0bce60b7a1998fa4a75716358cc572ff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.Immutable.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Collections.Immutable.dll
        • Size 953KB
        • SHA256 c1537a4f73a7d9fa028b127a5dd7d4f0e839c75c22c8e895722283a8aadf6028
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.NonGeneric.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Collections.NonGeneric.dll
        • Size 101KB
        • SHA256 b64b8f2acaf773bc08e20e3a43d562a15a98d9a8c19f3e5db292dfe4fe21cf38
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.Specialized.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Collections.Specialized.dll
        • Size 101KB
        • SHA256 8a1cf61a6cd079444ae790123ffc90bcd8d369ec5aed0f2f95d159a6479690b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Collections.dll
        • Size 289KB
        • SHA256 fc52be0abceac360478ffffce876c99997b4af56fc36fbf07cfc38ac5b7fdd7f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.EventBasedAsync.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.ComponentModel.EventBasedAsync.dll
        • Size 45KB
        • SHA256 d0e3554dc311c75014a9c7e9cf8137d5881d6f7a8c3b739fd9e85fec2be13164
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.ComponentModel.Primitives.dll
        • Size 77KB
        • SHA256 52e0988e01955d09170339429cede1d578690418b8851e19ddbba7d22a6490f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.TypeConverter.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.ComponentModel.TypeConverter.dll
        • Size 749KB
        • SHA256 f41fb0c7373b94e082d41a49a02f95ac6da92114aa712dcd8eddcfd27fbfd592
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.ComponentModel.dll
        • Size 29KB
        • SHA256 23c6a24f67244c647a614af3249181dc68ad02acc3ebd3cdedf62b2df8da503a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.StackTrace.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Diagnostics.StackTrace.dll
        • Size 45KB
        • SHA256 2436e12f3c710100f38b9404fb3893c3da3ee295641f5b4be442a4aa0deea8fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Drawing.Common.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Drawing.Common.dll
        • Size 901KB
        • SHA256 50efa359aab4998e57dd91575829d4f473abc99c3eec1b432ad751a6d780969c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Drawing.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Drawing.Primitives.dll
        • Size 129KB
        • SHA256 d55e07078df7e78a52992e8123f27ad01e632d6ed0ae12c08f099af33b36dbdb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.IO.Pipelines.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.IO.Pipelines.dll
        • Size 185KB
        • SHA256 427b8641bbcce1e355c8b72415bd8ef10c91eb4171c77fae001674df495cb5f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Linq.Parallel.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Linq.Parallel.dll
        • Size 757KB
        • SHA256 ce2d359ab186c59558967d3442e705558e0d13f814ec39f40c16b9076385652f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Linq.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Linq.dll
        • Size 681KB
        • SHA256 4a5d41332ed37f7e195503ebd3f478da2ad0008cb8a9f85739b53d2df7d33d46
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Memory.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Memory.dll
        • Size 157KB
        • SHA256 03c2fe17dbd4e1cd709f6da1ff221eafaf3f076d23f8fc62ddff5302c152e97d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.CoreLib.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Private.CoreLib.dll
        • Size 15.3MB
        • SHA256 76a49f17e83f613bc8a5b55fc98830b764e7838265aacbdbcc8f46707f80a3c9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.Uri.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Private.Uri.dll
        • Size 249KB
        • SHA256 27b93d6e754d7d2e538333e3c1d520c64d7eb012dde1705e776177b273662b7d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.Windows.Core.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Private.Windows.Core.dll
        • Size 1.8MB
        • SHA256 2f715608f2a3d8cf7ed8e65cae1bbebd7a038fe3701d6e017af5e06a8be6c811
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.Windows.GdiPlus.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Private.Windows.GdiPlus.dll
        • Size 417KB
        • SHA256 c4d00284a5c9bc4f3dffdc94873fe2ba538a264fac96229dec4fadf490ee1b87
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Reflection.Metadata.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Reflection.Metadata.dll
        • Size 1.1MB
        • SHA256 5e745d60bc682671b9a0813f515eca84b61710e1f84136b69fc09ec8821f92b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.InteropServices.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Runtime.InteropServices.dll
        • Size 109KB
        • SHA256 627a86a918f6669f94cf8db6ce064a4b2207b852ba6a4fecaccad7bb07859b4f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Security.Cryptography.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Security.Cryptography.dll
        • Size 2.4MB
        • SHA256 637104ff4a89fa341aad178fa4c6c85f247889d8d544f62411cc3febed9679b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Text.Encodings.Web.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Text.Encodings.Web.dll
        • Size 121KB
        • SHA256 775eab42196bf9466a69e9fc86e47b8da620b7652aa4b8a62245449131ce885d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Text.Json.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Text.Json.dll
        • Size 1.8MB
        • SHA256 6945c5fc52f811e32b13597b0d2a14d365227245e21bf7daebc6986f729b25fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Threading.Tasks.Parallel.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Threading.Tasks.Parallel.dll
        • Size 129KB
        • SHA256 ec95052ee31ac8bc4a08241939c3d3177ac671470caf898b8218245523ce4b21
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Threading.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Threading.dll
        • Size 81KB
        • SHA256 96ef32e315217f24b6b701fc182cac464966cad1da94dd25a3609fe2d9f5a6ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Windows.Forms.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Windows.Forms.Primitives.dll
        • Size 3.5MB
        • SHA256 370e416f04f342c04a989878f530820f6f6664eef153dbd02aa58c274339081a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Windows.Forms.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\System.Windows.Forms.dll
        • Size 13.1MB
        • SHA256 3161c84f8d0d255e3adff0687fd8eb6055eee41ca9d2ed69b5ccadc128474fcb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WebView2Loader.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\WebView2Loader.dll
        • Size 159KB
        • SHA256 12f7708910e1aac5cc9ac43603d122f1d2e770ae2651830a07ef8b3117f28c55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        meccha-mod-menu.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-mod-menu-v1.1.0\YwfPWmQqNHAF\meccha-mod-menu.dll
        • Size 9.6MB
        • SHA256 6cfe1d85c9b689a38227bbb51a8cca58f3666af0e41a0284f5d14baab5def356
        • MD5 SHA1 SHA512 SSDEEP TLSH