Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/08/2026, 20:56
General
- Target Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe
- Size 10.0MB
- Sample260810-zrf7laybng
- SHA256 759fad066d3fd1be9ac7b92f73b6ccbd55286c1e2629d76f5c38fefb82a6e7ef
Malware Config
Signatures
- UPX packed file 21 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe"C:\Users\Admin\AppData\Local\Temp\Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2444-2-0x0000000002580000-0x0000000002581000-memory.dmp
memory/2444-4-0x0000000002580000-0x0000000002581000-memory.dmp
memory/2444-3-0x0000000002580000-0x0000000002581000-memory.dmp
memory/2444-0-0x0000000002580000-0x0000000002581000-memory.dmp
memory/2444-6-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-7-0x0000000000E42000-0x0000000000E43000-memory.dmp
memory/2444-12-0x0000000002590000-0x0000000002591000-memory.dmp
memory/2444-56-0x00000000025F0000-0x00000000025F1000-memory.dmp
memory/2444-55-0x00000000025F0000-0x00000000025F1000-memory.dmp
memory/2444-50-0x00007FF903BF0000-0x00007FF903BF1000-memory.dmp
memory/2444-49-0x00007FF903BF0000-0x00007FF903BF1000-memory.dmp
memory/2444-44-0x00000000025E0000-0x00000000025E1000-memory.dmp
memory/2444-43-0x00000000025E0000-0x00000000025E1000-memory.dmp
memory/2444-38-0x00000000025D0000-0x00000000025D1000-memory.dmp
memory/2444-37-0x00000000025D0000-0x00000000025D1000-memory.dmp
memory/2444-32-0x00000000025C0000-0x00000000025C1000-memory.dmp
memory/2444-31-0x00000000025C0000-0x00000000025C1000-memory.dmp
memory/2444-26-0x00000000025B0000-0x00000000025B1000-memory.dmp
memory/2444-25-0x00000000025B0000-0x00000000025B1000-memory.dmp
memory/2444-61-0x00007FF904B70000-0x00007FF904B71000-memory.dmp
memory/2444-68-0x00007FF905DF0000-0x00007FF905DF1000-memory.dmp
memory/2444-70-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-67-0x00007FF905DF0000-0x00007FF905DF1000-memory.dmp
memory/2444-62-0x00007FF904B70000-0x00007FF904B71000-memory.dmp
memory/2444-20-0x00000000025A0000-0x00000000025A1000-memory.dmp
memory/2444-19-0x00000000025A0000-0x00000000025A1000-memory.dmp
memory/2444-18-0x00000000025A0000-0x00000000025A1000-memory.dmp
memory/2444-17-0x00000000025A0000-0x00000000025A1000-memory.dmp
memory/2444-11-0x0000000002590000-0x0000000002591000-memory.dmp
memory/2444-71-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-72-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-73-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-75-0x000002591AB30000-0x000002591ABD9000-memory.dmp
memory/2444-74-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-76-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-77-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-78-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-79-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-80-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-81-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-82-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-83-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-84-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-86-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-87-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-88-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-89-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-92-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-94-0x0000000000D80000-0x000000000257D000-memory.dmp
memory/2444-95-0x0000000000E42000-0x0000000000E43000-memory.dmp