Overview
overview
7Static
static
3koikishi_p..._2.exe
windows10-2004-x64
7koikishi_p..._2.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...om.dll
windows10-2004-x64
3$PLUGINSDI...om.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...��.exe
windows10-2004-x64
3$PLUGINSDI...��.exe
windows11-ltsc_2024-x64
3patch1.exe
windows10-2004-x64
3patch1.exe
windows11-ltsc_2024-x64
3General
- Target koikishi_patches.zip
- Size 57.1MB
- Sample260814-ymle3sbf99
- SHA256 302e929977d8efd6b379d1570f5bc2c66d38d37a9ec9ca9e2649225f84ecfab2
- MD5 73985d3d5c4e512c8a309365679c2621
- SHA1 55d96421207a56b7e657778dcd707f5788948338
- SHA512 e09c4b68a986184ac021ab5bc9cf6b18d2bc837a98ab07512b48e5c13d5d033a17038c22a5e86e881c98e72b45be91de5afd3ec0d68e19bdef90c05ac7bd257f
- SSDEEP 1572864:7C4y6Gis9cFw2FWTUBB2xttDsL9psMDwmyOJ:m4y6ucXDB2xttDsGMDhtJ
- TLSH T10ED7336925F2BA4A971545CB7EA00D810DBBC87EB905A3CC636D6B2F1D317CECE448C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
koikishi_patch_v1_2.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
koikishi_patch_v1_2.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LaunchCustom.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LaunchCustom.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/pb`Ǘ҂ƂăCXg[.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/pb`Ǘ҂ƂăCXg[.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
patch1.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
patch1.exe
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target koikishi_patch_v1_2.exe
- Size 57.1MB
- SHA256 597bfff1908b39a0e90a1a541bcbbaa330c0a567b5f88827087498de0c0aba32
- MD5 dfbba78f6c383e5d02f7fa36d708bc71
- SHA1 c52648577571d1498b102968a1368c8785048f29
- SHA512 58ca83b2072b5af5f011097c8e308f675a6a28172287cab3326d506f657b1c2dbd8efa0f960b8ae3586d4d81ff96c4fbfba8c8764c23fbbc2d31ee15b1ecd40d
- SSDEEP 1572864:1oykS0Uq9wHQInOfiv90dVXDu15/c00QAYN:KykSCw3v90dVXD4U0VTN
- TLSH T10AD7332925F2B95AD71545FA7EA00D814EBBCC3DA90267CC636D3E2F1D317CACE44886
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target $PLUGINSDIR/LaunchCustom.dll
- Size 60KB
- SHA256 8400d92300c908c11ec51d065d6eefd690bea78673d9a2d3ba887e8aaae6e28f
- MD5 c11a32e7eb1aff8b31a3232c5ff97c04
- SHA1 8f455406f2b5eba59e8906f0c599f87f3a5fd034
- SHA512 e5fdcb9963be915611fe430afb32f0b3a587206e1190288c9a04562696f64175296c8c2d5d34aebfb42160a484c1a86cee44ba8558f75d117bc12dce7598cc12
- SSDEEP 768:7rKDktFIXq7ie50ETOJZ2oshoddSyU7csHgCGBBJ+mOCopI:jtJLTOJkWddVUuR+EopI
- TLSH T1D4538D12B6A281F7CB8D017024924F3FD77EE9500AF509439FAA6BD96D716F0D236287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- TLSH T1CA325C5993A0C1F3D5A0823C0D973A7B1779722016B14FA3CFA35842AE196D7AC7D227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
- MD5 7579ade7ae1747a31960a228ce02e666
- SHA1 8ec8571a296737e819dcf86353a43fcf8ec63351
- SHA512 a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b
- TLSH T1E181857B92E50DF3D0A447BB00D71CE70226DC701769411E89472A8924E572BFE2EB06
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- MD5 c10e04dd4ad4277d5adc951bb331c777
- SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
- TLSH T17F12F8675A4041B3E9A3223D306A3E3F8B7C9325D0927C03C677AE566AB031A7D3A354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/pb`Ǘ҂ƂăCXg[.exe
- Size 34KB
- SHA256 45c01ca5ace79e0f948d08729792d19979fb19c32cad7a207767aa9fb7ac659e
- MD5 826422bac7904716eefe8f02e2342362
- SHA1 74bb4732fe3ea7a4ab253884d1cd62c46a98729d
- SHA512 096cf1c974f4c00a7481eff7ec21f71f61b528715b1dfea5866028961debce10c2081d4b9dd20f5d50c51bbe675c56d236f93c873b335978f58321ae68eaa971
- SSDEEP 768:uHJd0TpH2+bQ2dUWVX9Hfv1JMWmtLEJOyuBxG0D3mjfS3XJ4Cp:upgpHzb9dZVX9fHMvG0D3XJ4Cp
- TLSH T1CCF29E1B66D08DB7D5D2463105B7B77DE7BADAC901922A074BA43F7FEE32483C605282
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target patch1.EXE
- Size 20KB
- SHA256 db3642b694b4eee5a0d1edcfd3772e42177bacf2415f929882ba43a6a0697c07
- MD5 6b29059847192ace4ccc14f3801c2175
- SHA1 d640124a75ce804684f7addc000a0507ea2cd58d
- SHA512 cf1255da57c761ba516caa7d566c91e048d4b555bec5dfeb7073d9295f1ee081cbbf267d5e79e8269cc2349d871991b5dbadc3aa3967117cdd4685bfc89f936c
- SSDEEP 384:ayWtdNS2vSYCIOSVX1wHPH1ttsTLTCX32:a/d3vSdWo1tteXC2
- TLSH T158924B6BF6C45C57E4905B3444BB5726D83FE97227B281CBC64029FD2C366C0EA38346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10