Analysis
- user interaction
yes - max time kernel
20s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
13/08/2026, 06:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
[Kimochi] ei-chan/ei_chan_1_2.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
[Kimochi] ei-chan/libspine_godot.windows.template_release.x86_64.dll
Resource
win11-20260513-en
0 signatures
150 seconds
General
- Target [Kimochi] ei-chan/ei_chan_1_2.exe
- Size 92.2MB
- Sample260813-gt67pacl21
- SHA256 852cc60d05debedf34909beca0704d80f381642d81af24ec52be252179f2a0d1
- MD5 40f0fca535b24682ed8e60eb8705feda
- SHA1 b0cb109ee1c25d697c727981243923bd6ed5ffaa
- SHA512 2ea85111ae96c54df44ea3687730beb8d20bdca8bb7d12fea2bb30ffa838c91d6330c7823fc5cfe47ce89374f21a16749276d380d95513117ec0c51b114b3f18
- SSDEEP 786432:TsXZHd3M0mrG9WTZ1xK1J5ZppGdWhuyb0L4:gpHd3ZmrGAcXpNuyb0
- TLSH T139284B07F2A370ECC46BF1309F7BA672BA71B85911386D6B5692CB302F61E10576DE18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\Local Settings ei_chan_1_2.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5696 ei_chan_1_2.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5696 ei_chan_1_2.exe 5696 ei_chan_1_2.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Godot\app_userdata\ei_chan\shader_cache\CanvasShaderRD\8f73ea59600218c7f4a72f38f0a825d4b9edae392f00688807259ea2faf43974\087916079fba7c625e62b0c2cca570e0fb87c99a.d3d12.cache
- Size 102KB
- SHA256 dbebdf7b09901dccc1cd5b5f545141dc8686ffda795f26b31f408ee3db61e2bb
- MD5 0b0ff1c11031713a877d97c01ac5dffa
- SHA1 ae9a5b18b0955249db5c8bb75ee7d183af7c65d8
- SHA512 8b0d808f691cafd298ceba908d9e53f708f083c81ba2b3771d3a247c3dfb0bea9b3bbe847b83d04f8e72d7d97c97611f0c2be32d2f3dc253a5ce7491197ff6c5
- SSDEEP 3072:YZcJ2qW4oGPmho2k26MArN6MAre0sx9a9lA0sx9a9lQ:YZcJdZoh5kpoyha9mha9i
- TLSH T167A3BE41BBD6DE56C4010B7B5C95C3C93B30FC52EE83A71BB0E63B6E1C7A6C18946916
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Godot\app_userdata\ei_chan\shader_cache\CanvasShaderRD\8f73ea59600218c7f4a72f38f0a825d4b9edae392f00688807259ea2faf43974\bd33586e5b4ab43d0ed44449bea9999213fbb45e.d3d12.cache
- Size 102KB
- SHA256 87d440204b7dbeff395924a7bda3a79366682b675b901c9596f0670388b36211
- MD5 7aa13da5c7d12aed6bffab6cb7dd650d
- SHA1 a8ab9b8fae3e4ef448c11bc79be440e9f789e4a0
- SHA512 b7354d3ccf4d5a8673061c7677bd719d9f4c27c00a4fe741de2bddabbeed70f39ea1990de5c338126ecbe8d6cdfd6daf6da175cf0020dd9ab08d79ef43087508
- SSDEEP 1536:aO36rA+IfH2RXQTd2Vj5G/sKj5G/sYN+0JiHqiAN+0JiHqiQ:aQ3xOROcpN/OAN/OQ
- TLSH T1A5A39C64B3DADE63D4450B738CD2C3C93226FC81AF5783637099333EAEB52A85926845
- MD5 SHA1 SHA512 SSDEEP TLSH