10cccf1ec23bdf2ab8a2d37abb0753a9f9fdc396ebe4f47b32aea7c186295a51
- SHA256 10cccf1ec23bdf2ab8a2d37abb0753a9f9fdc396ebe4f47b32aea7c186295a51
Behavioral task
behavioral1
Sample
Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Hollow Knight Silksong – Trainer.url
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Hollow Knight Silksong – Trainer.url
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Hollow Knight Silksong – YouTube.url
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Hollow Knight Silksong – YouTube.url
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target 10cccf1ec23bdf2ab8a2d37abb0753a9f9fdc396ebe4f47b32aea7c186295a51
- Size 12.4MB
- Sample260810-zrf7laybng
- SHA256 10cccf1ec23bdf2ab8a2d37abb0753a9f9fdc396ebe4f47b32aea7c186295a51
- MD5 ead4fb281720338fdfe65b9614bb1ab6
- SHA1 0123c255cee97aea5267bbbd4a28fe1ce5acd23f
- SHA512 b5bf61ed5c565a2c270b7e8383161d577a82be065a631c2ff8bde8505cb76efa79f04a44e41f66923d15648c439c937d855af91b93142c48dc106220ad410a98
- SSDEEP 196608:bCspxSiGN6zRf6uNENV4YZlM9uFkcbwZhIrWRhGQDCqzw6foXq5JDi0j4QS9V:bJlzBNqV4qlk+rkGUuUDfS9V
- TLSH T11DD633AC1E359FB0E117D82319CABD89E79F5A884D3905068D26D274CB27333B9BF449
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe upx - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe unpack002/out.upx
File Explorer
-
10cccf1ec23bdf2ab8a2d37abb0753a9f9fdc396ebe4f47b32aea7c186295a51.zip 12.4MB
-
Hollow Knight Silksong (+32) {mul0} [v1.0.30000] - Page 01.png.png 649KB
-
Hollow Knight Silksong (+32) {mul0} [v1.0.30000] - Page 02.png.png 646KB
-
Hollow Knight Silksong (+32) {mul0} [v1.0.30000] - Page 03.png.png 649KB
-
Hollow Knight Silksong (+32) {mul0} [v1.0.30000] - Page 04.png.png 648KB
-
Hollow Knight Silksong (+32) {mul0} [v1.0.30000] - Page 05.png.png 137KB
-
Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe.exe 10.0MB
-
out.upx.exe 21.9MB
-
Hollow Knight Silksong – Trainer.url.url 156B
-
Hollow Knight Silksong – YouTube.url.url 128B
-
README.md5KB
Hollow Knight Silksong (+32) {mul0} [v1.0.30000] - Page 01.png
- SHA256 a585ee90f42d59400f0bb456ab31f8fb5da01f356456a4ab5423c87f61e900a2
- MD5 d32f4cfa9d0b713bbb584f8502783945
- SHA1 e2969430425c4e41d2e4459a157e7f2219447938
- SHA512 26b81615541f31f78c8b66f8b2b0b60ef70881dbd26eb57d76b0f5ec46787524d4159f4bfa7f4dbb8babfc4f7128a05449c9f40ef541cccbef906fde302f28c3
- SSDEEP 12288:GdKfH4QpBZ/eSXop/8GrfPeA+j8+UzPp34kOVdN7klJM/pKEIbmQ0vDH70rFfwsV:sAd/v88GzP9+jMPJ4TV31KzmHbaFfeOT
- TLSH T127E42381A3D3DEE64D5FF2132F215B1EDEC09222D562CD3D2190C10E595AAFD89A43DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Hollow Knight Silksong (+32) {mul0} [v1.0.30000] - Page 02.png
- SHA256 de316a07559f5aaf3c0d70a85ff20e4f4b11a9847321f9bda0bef24dcbe3efd6
- MD5 caee6337b4b07678c2f5b7d6d4e5fcb2
- SHA1 396e12b5e828a7ceaa291eb42466ea02b830bcda
- SHA512 2a3c2940b11211409b603b5fa3421abc063790b96651d887c35f1d656dc5b895dd895b476b40f706053860602095789cd0658dbae3b6d87dfaa2e25adbbb9df2
- SSDEEP 12288:Mdp9yKsIY785wVtboRlzA6lyP4kDb9utc7NJQLTvyMcRO/IbRI3UhL8r:uLyS5wVtu0LP4kPkFsOzwL8r
- TLSH T15EE42341B87BDA5ADEE3729D7C835D1A81B3BD5A61A3CB70F88CD4CD401781EA824397
- MD5 SHA1 SHA512 SSDEEP TLSH
Hollow Knight Silksong (+32) {mul0} [v1.0.30000] - Page 03.png
- SHA256 4d2a2bac04cba73f6c87818a10c561d4c8a22aa690448e7dbea77d273d5717c0
- MD5 b88e357b331f389a0553731a8ea55e9e
- SHA1 ad173f75232dfc6573086459e2e125fdbbaebcee
- SHA512 c9eed6d721448e326e1967964ede268d3d91aa0a15a84792933dcddefd2030477216d7e1595ca336d7e9378521ce68979fbc28d574207a979b95b4df7be46f72
- SSDEEP 12288:BdaRsHQp8sX3MOZLKDV9Drn2Kw0kOsT3t8CAiz5AMKOwMuNn0nxqgnGdlmu9c:Dm268sjL8932Kw0+98wz5AFOwMq04k2U
- TLSH T120E423E3FC57D8A81D0F2763AE00627A3CE4B9E3713AC1714757C6DB5A68B4A748170A
- MD5 SHA1 SHA512 SSDEEP TLSH
Hollow Knight Silksong (+32) {mul0} [v1.0.30000] - Page 04.png
- SHA256 33275807fad0b9a39d3b4cd113761690620780c13bc1ee8f341634664b196c42
- MD5 0ce5cd335b98fa09fb64b4e2beb5efae
- SHA1 a97123c9e991b0c42dd2f1f017a8f0ea1fe959b1
- SHA512 c9253b231aa4df6b8a42ea29ded2afefd4d3bb427aa6ed50dad7ea1403979a95d74c00e90241447d042645ea31804af9b0759407b7806e3a68e5cc5dbd993cba
- SSDEEP 12288:odOXnePT59EsjhZkcN7QF6r9mce/7kFVqgEYwcVZ5rqKT4U:iOXmT59EsjHkIQEwUqwrh
- TLSH T179E423A5D4DBFCF4C84F93536CA34323A5D2588AB06794307636C2DDDC989A62C90BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Hollow Knight Silksong (+32) {mul0} [v1.0.30000] - Page 05.png
- SHA256 9bdef86e4450443c0c3c22c3a8a0467f20a61249d816e4d47d1a5ce51c9f7f9d
- MD5 f7f3e0eb0e274e0e00b58dd9f3f47ddb
- SHA1 003a21591f173e937096ebdfc4b09d7b3e9cab2b
- SHA512 1a877912c2ec15dc14b49b2f6361be691616e8785a4f111292f6329bfbc90db2bb8e27c97d680ad4e4f7742043964cd62968b4672a1adc881aff071fe89972d4
- SSDEEP 3072:sckOmalqkyZyM1ucBDETFBqj1Ms1cU87LEQBTEz4cDyu4j:NrlOUCuI6Bqai87LEQ7Iyu4j
- TLSH T1BBD3010D85F3C8FCCDAB1AB386E41B02A33B529746D1463D6272766EDD09D3E2A5418F
- MD5 SHA1 SHA512 SSDEEP TLSH
Hollow Knight Silksong (+32) {mul0} [v1.0.30000].exe
- SHA256 759fad066d3fd1be9ac7b92f73b6ccbd55286c1e2629d76f5c38fefb82a6e7ef
- MD5 9d4495c3d2b4c4b435a46af574df0004
- SHA1 d3abc3654cf30d0583fafda9d3e7947ea0a186a0
- SHA512 bfe7fd48acb71360facbc37eec6a793be8e9dd2f04fdb453ee31fe2274e3967c31ebefb6a75f8955acb465869ce462d75fc15ac1c686ea7bff74bcd76631df24
- SSDEEP 196608:hnCyib4/t8Ah/OSRdIihUdnsOanyTm2SnNwkQk1+vKTLiABoNqO1HEOe2mRyj:h0m+qmSRSyqsOad2SnNwkJ0STLlUh1kD
- TLSH T1BDB63397034952FBE102BE3C9946FFA1842877929C89BF61ED1DD2D0C9F9BC3A481607
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
24842816
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
UPX0
Size
Virtual Size
14.0MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
9.7MB
Virtual Size
9.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
298KB
Virtual Size
300KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
out.upx
- SHA256 e80326be468024a5bc6b610a00235c63caced27438aea5837f7cffaff2aff1f8
- MD5 ae01f5dc853a6bce0520d67068d8bd7a
- SHA1 4ad307a9a80cdd324eae70844b7c0a58e0d3d289
- SHA512 98db18b5ba8bcf24fe36cb6d941f442d2a36c22d7317bdd81bfd58e6d9e2f935ceaae806c69880ff35b52564de1e05f5e573881f16d8d588f8cf932853aaeae6
- SSDEEP 196608:NYJBGMfTexHjPEZ4da0UhqqVBzU/B6dbPcKEUrMYb7eNPc:NY7GMfTeBEt0k7U/UdbPyUlb7ea
- TLSH T1C1376B5723A48118C1BE813ED1534B50DA3338B50FF18EEB6D9452641F66AD89E3FFA2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
10284528
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Name
.text
Size
9.9MB
Virtual Size
9.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
832KB
Virtual Size
832KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
118B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
109B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
401KB
Virtual Size
401KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.pdata
Size
492KB
Virtual Size
491KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
10.3MB
Virtual Size
10.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Hollow Knight Silksong – Trainer.url
- SHA256 72139175c3513cc162e6b945d8f3be8248fbb5b01c9a0f7d2bcc2e4465eb8329
- MD5 78011c49cfb93b7c88718fce5f379eb8
- SHA1 4bb0a42a198ac01af836a10c9969daf22e31dc6a
- SHA512 d43a89005267a828995f8f33a471071a4f37e8bbb1c3cfb8adaaec3e2e6d419fcd377f9905487e01effbe3a380fb05bc22170f3a19ca1e40e0b430669a0e287f
- TLSH T1FEC08C6A4A0245A6E260280E8060F4148D4EB95608C1F0AC6708DD8ACD480E6C505A25
- MD5 SHA1 SHA512 TLSH
Hollow Knight Silksong – YouTube.url
- SHA256 bdcac306c825b73db3dc04ce83764c7e2b97857f725879298bf6d598a05a57f2
- MD5 912135aae2dbc51cc6b9a35465250199
- SHA1 4b6b1c3ce9be2a2b2657302165970d5ed1af4ba9
- SHA512 07d90adf35bad48531d649ac5317656faa9057e1a9c28bee3970a5e38df8ac381bc117f35e35aaee31e1da1c129dcda8eea1061b5b1a0c2b74bdb0da33da0ea7
- TLSH T1ACB09BAD51464185E24574555170FC08891E756548D1D09C7148DDCF0CD41D5C459636
- MD5 SHA1 SHA512 TLSH
README.md
- SHA256 c19a74bb63a764a01b013a0d84b624e6bbc6e4f9c47a162704d49e45930b78a0
- MD5 d5c99c27cfcc55efb2632a285f53ef1b
- SHA1 a66f383cfca792629e3f34e792937a42f35d2566
- SHA512 23e17001526f45d5a20310d234f6ef88f073d2aa528ada8b261ccf003570e51cdbb8b03e60d7ee46b6dfbf141518aa305b848f469ca0ca82cf1efe15fbe9394d
- SSDEEP 96:BQCggMubhLoaCaPoZ8tXHw1A/MsV/ZcNh/GyMUxjSN7EVnx:BIgwaCG9XQm/MsVE/GyxcEP
- TLSH T19AC1A3936730337241A642D77901B9F27E798415D3BA3CB8A4AFA51CE02E875813ADE7
- MD5 SHA1 SHA512 SSDEEP TLSH