General
- Target RollerCoasterTycoon2.exe
- Size 117.5MB
- Sample260820-wlkq2ssfrc
- SHA256 06e22272ef4638e5e2cf77521e92a1068ef278872025aaacf02cc634e10dd4f6
- MD5 68b147812b9f39df8cf07fb1a0397068
- SHA1 062962e1fc95ab3035d9be77801b2c48f1dba66f
- SHA512 d182a28633920ae38c2a2afa8c2973880487ef32113bfe857b8b6ea844eaffd22779cabc6e3e498528c26cd75331cdeaf0ab1226d72f0a1b05b21e6c39e3654f
- SSDEEP 3145728:K5UQuLuNquTlhH+BSHo1UjVbVRjiqstJRKAA91m13J+l+nIGJiLil:TQ3guTlhHvo1UjVbVh3stK51m1AFL8
- TLSH T1B64833B0D0FB9DD7F706D737DAB4C553902A5888DA2E06958C6F15802CC28E9EEDD18B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RollerCoasterTycoon2.exe
Resource
win10v2004-20260513-en
10 signatures
900 seconds
Behavioral task
behavioral2
Sample
RollerCoasterTycoon2.exe
Resource
win11ltsc2024-20260709-en
11 signatures
900 seconds
Malware Config
Targets
-
- Target RollerCoasterTycoon2.exe
- Size 117.5MB
- SHA256 06e22272ef4638e5e2cf77521e92a1068ef278872025aaacf02cc634e10dd4f6
- MD5 68b147812b9f39df8cf07fb1a0397068
- SHA1 062962e1fc95ab3035d9be77801b2c48f1dba66f
- SHA512 d182a28633920ae38c2a2afa8c2973880487ef32113bfe857b8b6ea844eaffd22779cabc6e3e498528c26cd75331cdeaf0ab1226d72f0a1b05b21e6c39e3654f
- SSDEEP 3145728:K5UQuLuNquTlhH+BSHo1UjVbVRjiqstJRKAA91m13J+l+nIGJiLil:TQ3guTlhHvo1UjVbVh3stK51m1AFL8
- TLSH T1B64833B0D0FB9DD7F706D737DAB4C553902A5888DA2E06958C6F15802CC28E9EEDD18B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory