a2556eb1db8ed409873a20c094a9905a0f8f29bf5743394b41cdef949ae6dde3 | Triage™

Login
Reports

Overview

overview

4

Static

static

3

ReadMe.chm

windows10-2004-x64

1

ReadMe.chm

windows11-ltsc_2024-x64

1

binkw32.dll

windows10-2004-x64

3

binkw32.dll

windows11-ltsc_2024-x64

3

dsetup.dll

windows10-2004-x64

4

dsetup.dll

windows11-ltsc_2024-x64

4

libmysql.dll

windows10-2004-x64

3

libmysql.dll

windows11-ltsc_2024-x64

3

mss32.dll

windows10-2004-x64

3

mss32.dll

windows11-ltsc_2024-x64

3

rF Config.exe

windows10-2004-x64

3

rF Config.exe

windows11-ltsc_2024-x64

3

rFactor Dedicated.exe

windows10-2004-x64

3

rFactor Dedicated.exe

windows11-ltsc_2024-x64

3

rFactor.exe

windows10-2004-x64

3

rFactor.exe

windows11-ltsc_2024-x64

3

steam_api.dll

windows10-2004-x64

3

steam_api.dll

windows11-ltsc_2024-x64

3

steam_api_old.dll

windows10-2004-x64

3

steam_api_old.dll

windows11-ltsc_2024-x64

3

steamclient.dll

windows10-2004-x64

3

steamclient.dll

windows11-ltsc_2024-x64

3

tier0_s.dll

windows10-2004-x64

3

tier0_s.dll

windows11-ltsc_2024-x64

3

vstdlib_s.dll

windows10-2004-x64

3

vstdlib_s.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
rFactor.rar
Size 14.7MB
Sample260818-k9drvszbkf
SHA256 a2556eb1db8ed409873a20c094a9905a0f8f29bf5743394b41cdef949ae6dde3
MD5 2a5763da52c9cca07d45da53ef18d5cc
SHA1 1f4eaf6784ada3cf146813225a3106f4c3922909
SHA512 9ac631efc8e895d869efc5a4772d6d141ce72b12a3dae7282479a1c056f25bd0595be99125e782397b42b52e9c69b4bd05104cf02f2ee98dfeed8c68f55df7c0
SSDEEP 393216:jQB+QObJ8bDLcWyTNx/KfJCcY/CXkYApJnwaSnx+ZUqJjqMgZ:yU8zcfTrIJ7agMpJQx+ZU2qnZ
TLSH
T1DEF633632F8B7770D429501EAE84562E0CCA723ED1D5D8817D4BE71BAEC8D4ABE091D3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

ReadMe.chm

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

ReadMe.chm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

binkw32.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

binkw32.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

dsetup.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

dsetup.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

libmysql.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

libmysql.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

mss32.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

mss32.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

rF Config.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

rF Config.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

rFactor Dedicated.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

rFactor Dedicated.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

rFactor.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

rFactor.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

steam_api.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

steam_api.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

steam_api_old.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

steam_api_old.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

steamclient.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

steamclient.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

tier0_s.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

tier0_s.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

vstdlib_s.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

vstdlib_s.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  ReadMe.chm
- Size 316KB
- SHA256 b545f500edad66d2bd2e178354e5e38cf02b036af7bd6233ec8a6b8c187cf96a
- MD5 d8c595ed6fb67c3af3f190e897552adb
- SHA1 6554c871d287529943c8df9f52eb40299621e1ff
- SHA512 fc29f7ee150219efe2ac4d1fdada34606b1431bfd8a996edee1236bfbd9f41cf746d3b12d7684032faab90cb695df004c3d0f3154ee0a2c54840e45074788110
- SSDEEP 6144:aEeKI52AGcsPowomxHFUgaDukQmkfJ/r0etZyg+YM06ALNe9hGo:ZRxoWHK8pfxrVZ+YM0lNe9j
- TLSH
  T10064220186038E8FC31BF579FCDEBEE46209C445661A83D0172DD4FA569AF95CEA392C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  binkw32.dll
- Size 188KB
- SHA256 1081a63d08c085f0aa027e0d2d3fa9eca3b33fa3403a2a6d333f277dbea91907
- MD5 e4a527b2ce0d88330c36cde24f041a90
- SHA1 04242eb9834594ebac8555186bc017e21f6daf41
- SHA512 c6b15d19043920b6b25518708626a490f613e383bfdab4fedf702fb9f26b885d8ccd8ac9357cdfae7d40e4a185d23ce4a36e1461c70f3b07b5308f171026ff28
- SSDEEP 3072:5ce8HbW3IGPwrpF5IcKNglPvmXUYRMvgfqKRY622y6rD8bjOLDNy/u96lCH7YWct:IbW3IIe0l2lPvmXUYU7622y6rD8bjOL1
- TLSH
  T1CB14AE82F4965DB0E8CB1EB6109B3B579A251F05C32941E3EB642F979B61DE10D3A3C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  dsetup.dll
- Size 72KB
- SHA256 22d45921e8c238219fdda28b4fc836dc1a026fc160f45d0c452b414483fe421c
- MD5 5a8e20bed41e568424b62cb7f13d978b
- SHA1 19453dcbfd5392abe4eed0bc22181abfc3ae2296
- SHA512 1ef412a032465f1eb91953e2f127d88d870a3feb2a40d099f6376015966591d29a405fb21ce18bb4b0eabfbd2d1bbf5610f4efe38bf1ceca5daabf9759b11205
- SSDEEP 1536:xtBhvGi/CO8cSxiFUqwOWaB3d6m9a+3HiBEdktH0MLJ/61mR/o:xtHvGMCO8/mUqo+d6ZQetH0+J/61Go
- TLSH
  T1B9737C16BE109072D8D251B819CC97716A3EA2F617B884C3A70457DACDA37C2EA3D74F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  libmysql.dll
- Size 1.1MB
- SHA256 1562d61c4dc04525db4202c7770a72c246c6fb7ee7d140da4f29558e12195dca
- MD5 262508cfd81f9aeb1718bb6169982d0f
- SHA1 a0964dacf93078bc570c95dc22134bb8bae812ec
- SHA512 f580c97b5d007e6ea9c243f1bf33c1a97097f155e84d4d7f3127c2a12631991b4f64b87370b1c97cee499b3206aa6f477876dde7215601896f83b9c2c78b05ea
- SSDEEP 12288:H9FqB/2KsGD9MWprc9TkxnPDQGNga//zGl8++RNGMMzaj7nrf4X1fw4CiVPPd8:6B/wK9MAg9TePZg8KL+RNGajf4Ffl
- TLSH
  T1C435E153D7534E72E16FDD39802D2A5FC622D204639F88E7BF31AAC1D8529E012B917E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  mss32.dll
- Size 379KB
- SHA256 1df244d8edf0a0d85492c9fffcc879ee34796cf27eb494247d9e021cc21abc7d
- MD5 2033e3e66fe2382587be26f4eee4283c
- SHA1 b29a8790f07a1513cded9eeb9a05259b18f8d176
- SHA512 639628f80c185150eb64a10710e283510783f50d2432b590954f43d05ce20c026927bf099dfe6e4fbe02168c0baacffd581f18b65a8c1a8f0f6ef39b9ef3a852
- SSDEEP 6144:n5JGJb5dvTXO5TY+Zt1Keo5rp0d1ZahmQsoOArorYrXQo8Yq4aHrmtc6+AORvZyq:nn8HLXo7ZzKeoNp0d1ZIaHrmtcPvZqW
- TLSH
  T1B2847C4AB28498F5C897353B5E06532E253AC31B471A86D3B7891D05FF23ED1723A36B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  rF Config.exe
- Size 895KB
- SHA256 1368a0d964727e4b2fd3ce3fe773213cba1b4fb6b42dec2af949dcc1c5d3fe5f
- MD5 aff813b9308d93d75222f3c1a8d9efef
- SHA1 2982a87cb5a7e05fe1700046352844145d248406
- SHA512 1e5dc99d508dc84f92532cb18c04f5df5d49cc80e41fd18e4eadf20e312a3152d68849ad979ec18fcb97f54394224b8bf3b34136f3136714f995d16c7d7e5524
- SSDEEP 12288:ChiNcy2utvcmXkKsHki2FBa98pIEapoImJ91rricSC1bO7jg6CNHeeC5Q/R6AtMh:CsNBrhwVkjmQ99s7qNHeeC5Q/RgyM
- TLSH
  T13A15AE11B3D5C0B0D59614B5046EB72A53B7F34A0B385ED7B7E82D1AEA70BE05E312CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  rFactor Dedicated.exe
- Size 3.1MB
- SHA256 51b40f64d131852513bfe6a4f0261af71bc78015804811e523472eae7c8f0190
- MD5 b9128dfa494d23ea5b22f9d86bc3a17f
- SHA1 d3e154fe864ccef33c0225100e87333a3dfea28e
- SHA512 29a35092beab5f8f4ac37eebe081ef6563668bc4cc158c73fd267e625aa67364791966ce933ea579c29bd596b5c7daad5e2c230b57fcc005d55f4df64557ebd1
- SSDEEP 49152:n+Z+KTEmpHozyVeCYhthwnr9apV1Xw+e2xZLggJ8ALg2sRvclHGjOjA/yO6GfofR:n+Z+KRsyYCZu
- TLSH
  T1E0E5C052F7AA80B0CC4714709896672A963873754F389BD3BFF82E2E3B216F09575385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  rFactor.exe
- Size 5.4MB
- SHA256 84cb37a9e8e63abaf057af6e4aa2011125a9e915bfbe1f160afc2da0d19d1466
- MD5 5a1c1a3c2edbeadca4dda5424be3e1a8
- SHA1 90c093e4eb745e6115fabd5de44722be5fe3383b
- SHA512 c4da7499968276e470abfc4f7847f2f6c233847ab39d7d7ff9f308b283364effe278d0cf44d6a4c74c01fcd3d93858e91681be9912fd0da8a90b44870428f9dd
- SSDEEP 98304:ACxZITbyAw4l97gyowcy1fce1FQeDSW2UiEdukhB:AIZ5AX9Uyony1F1FQeDSWv5uuB
- TLSH
  T1A94602A6BB2FD8D0F81201316E93958A23737977DDA64B7733D9731E6B212F119023A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  steam_api.dll
- Size 15.5MB
- SHA256 ee7ac4f09e314aaf53117654057d88a12b60e2b848e99391f123e72165d94e33
- MD5 251d88c60aad13f6b1a0959cb1ae4a66
- SHA1 841e133490585989462aff7541e0dcf8066bd7b2
- SHA512 88592723900ed80cb25024ab7a6727ff0dc71797a0fbe7979aa72fefacd98676fa99156a14a0d97604103b25d3e8c72f28dca6a1af69c5fc780ef7a04527a2ac
- SSDEEP 196608:ir/Ihj/5/ysHEYFfGawduLzzpQhY9/bnfKhWQ/Jsn0Bd7wciZgA72D8UnBZsZo:b7/o3hY9/bnfKhUn0BxwcIgA72bBZD
- TLSH
  T10DF6BE02E241D135FBB701F68AFA46BA5F3CAE71171512DBB2C076588B66AC1FE31613
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  steam_api_old.dll
- Size 142KB
- SHA256 025a1fd2b3e81a1a3d474b1707e3696cbc1a0ff2dee65c4f74b186e688f01ec9
- MD5 69bee18efe39e0bd24b8ac979b560f39
- SHA1 a80abfb6d95d59536bb83776258d1094054c3595
- SHA512 e363ba05c4eecaec539a9b8f7ba142e3c1a25e95229db6a715f0e0801d0057cace829dfd5c7700043aa86fb6433b9d598e55f486146ea61d0c65be0c0b74d953
- SSDEEP 3072:GtavZpCLhjiRgMm3Z/vqoj5PKBSLaB/CG1:GAZQjr3BOCG1
- TLSH
  T141E38B1176F0C0B2E4B3027549B89B221A7EBE326BB59EDB7798134D19346C17736B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  steamclient.dll
- Size 9.2MB
- SHA256 66c67ae7de7e7a72714db77c1f3ab70ae79f83acc434fb2df73735907a14d167
- MD5 d925af74529ea7f105875e4bd3f51489
- SHA1 3d1c054fe0971f95c6826d18cc6b7e7e9f652299
- SHA512 c59b470c5dcdfcba773dfcb5c64fa90dadf5ee1372c686b9dbad0ee86b6801435758d845c92a50803de48b6b3aa5446b499828ccb6127ef5b6e2ac44bbe3215a
- SSDEEP 98304:Ax36cOmnSoLb9M8pTeQrVSvHxkJeIEnToyZvkTWPxvTmJE+0z8yChiqZwkXeO/nZ:VmnSoLOEzQIeZvkT+TmgCFwaD2Y
- TLSH
  T1C4A68E22BA01C271F9D302B9B9FDBB7D4A6D9634033CA2C396D5495E1D205D36F3A2D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  tier0_s.dll
- Size 271KB
- SHA256 e2d7cf8e0c39cb07877efd354b318718b53c1e81f5f5a30cae197aad98309028
- MD5 1992085a574a1fe328d9567198e860f2
- SHA1 60e94edc4fd1a6b04cdacfb1ca76f4145bd7bcd4
- SHA512 71d9fd4df1579a22a1b56a2d65eb62b320960356c7703efc46fab1e8f79f8f51156cffe5ca57f4a89114032ba791bc1d4ba720f3b14d1e54d2bb751ceb507a36
- SSDEEP 3072:Pyb0jjecwlb70zv7cr6c/MrBt+qUbp/egg5AD3CNWDdkCo0n4fl4ggPTNtjO7lJy:PrOkzw/Mrv+HAq3drlng4gI7S51Qc2
- TLSH
  T14D44AE017590C872E8F382B995BA5B1605BEF8624B3BD5FBF3C4455E08362D223B6B47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  vstdlib_s.dll
- Size 255KB
- SHA256 257d84bb1828086c2383ab4fd33d08fbbd878e0c84304cee03eb82d54ed76503
- MD5 65451c3167b9165eb9cf2c4b42e36ac6
- SHA1 772444aab92c4e3855ee512548da2d2fdcc65ce6
- SHA512 0686658b2c0719cbec62cd6b74dd427d8748417a5582834bdbde2c3a9d5a696f8c710aebc0d4f6fb41df5d9dd8928293f90860f304c26977b53dc53e79d106f5
- SSDEEP 6144:12TECWyG9qWk+QnBbsTznX/VmQGVVIGioCH4G:0TGyGRk+QBbsvnXEzVIdoG1
- TLSH
  T11A448D21F993D872E6F3013695B89E218A2E7F218735A6F37FF4352919300E16A36753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

© 2018-2026

Terms | Privacy