Overview
overview
7Static
static
3Windows 7 ... 8.exe
windows10-2004-x64
7Windows 7 ... 8.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$SYSDIR/CardGames.dll
windows10-2004-x64
1$SYSDIR/CardGames.dll
windows11-ltsc_2024-x64
1General
- Target Windows 7 Games for Windows 10 and 8.exe
- Size 146.7MB
- Sample260827-3e3fva1gnh
- SHA256 05826057e52143eee7503215e3c28f725cd46f98f21a0b5a33b8e8fffa3bb57c
- MD5 556584533c862ea10410093f62f7d519
- SHA1 28564f6ec5428ab4874e4a76d01907b1ee1d26c3
- SHA512 d67c886ea87b81c23a4233ca2a8bdd3b871f01874e42a766690724aa6b25e0c190547d78b7191b3cdce9721af55592702fc75b874b1980f806bda4d4ad5b29d1
- SSDEEP 3145728:6huE4F6n/o8tfzvoO86PBoatc7IQkyvfTBj3bSll7B3xTBfPOHehbJgMQG/t:6hf4F6nHzQOZBoatgLky3TVbSv7dH8DS
- TLSH T130783375B695737AD7D0B834CFA55B29C9A3BEC43C08198B73D654041A72C007EBB3AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Windows 7 Games for Windows 10 and 8.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Windows 7 Games for Windows 10 and 8.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
$SYSDIR/CardGames.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$SYSDIR/CardGames.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Windows 7 Games for Windows 10 and 8.exe
- Size 146.7MB
- SHA256 05826057e52143eee7503215e3c28f725cd46f98f21a0b5a33b8e8fffa3bb57c
- MD5 556584533c862ea10410093f62f7d519
- SHA1 28564f6ec5428ab4874e4a76d01907b1ee1d26c3
- SHA512 d67c886ea87b81c23a4233ca2a8bdd3b871f01874e42a766690724aa6b25e0c190547d78b7191b3cdce9721af55592702fc75b874b1980f806bda4d4ad5b29d1
- SSDEEP 3145728:6huE4F6n/o8tfzvoO86PBoatc7IQkyvfTBj3bSll7B3xTBfPOHehbJgMQG/t:6hf4F6nHzQOZBoatgLky3TVbSv7dH8DS
- TLSH T130783375B695737AD7D0B834CFA55B29C9A3BEC43C08198B73D654041A72C007EBB3AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-
- Target $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5
- MD5 9384f4007c492d4fa040924f31c00166
- SHA1 aba37faef30d7c445584c688a0b5638f5db31c7b
- SHA512 68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf
- SSDEEP 48:iV6pAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Jlof5d2:2811GED5ZTvycNSmwVsTJuftpZR0Sd2
- TLSH T129C18333B3C24AF5D6950633252373C366539E342359804F9B6712AA69208FBDD6E793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- TLSH T1CA325C5993A0C1F3D5A0823C0D973A7B1779722016B14FA3CFA35842AE196D7AC7D227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- MD5 c10e04dd4ad4277d5adc951bb331c777
- SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
- TLSH T17F12F8675A4041B3E9A3223D306A3E3F8B7C9325D0927C03C677AE566AB031A7D3A354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $SYSDIR/CardGames.dll
- Size 5.9MB
- SHA256 959f28d9c016d64552321a46c8179fdb5241f24dedfacbb71c4dd2d51da0b05a
- MD5 6794d9d442e31dc5e95bdf65f37e4386
- SHA1 2d89db0e066099e514f5f626ce427a0cd39b9d70
- SHA512 6fbbb495d592e7eed498e4106576433ca695570e5eef0edabf311d5e039e194c3cdc2e2f6bba7909c95e263c151ccb5f29014415a719699f9c17bf3d4e4f5459
- SSDEEP 98304:PCHlGHDVwG7YsbOON4JBgwG3nNG4bVhCIuCcnMVyE2SB2xGjlV:VmGavh0vQNGRV
- TLSH T10F56221BE6D07F02F52B47383FD60E459E6D697A07C0025DB0BE9BDB2B819961C2F429
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10