Overview
overview
7Static
static
3Lovedolls%20v0.5.4.7z
windows10-2004-x64
1Lovedolls%20v0.5.4.7z
windows11-ltsc_2024-x64
1Data/Audio...re.ogg
windows10-2004-x64
7Data/Audio...re.ogg
windows11-ltsc_2024-x64
1Data/Audio...op.ogg
windows10-2004-x64
7Data/Audio...op.ogg
windows11-ltsc_2024-x64
1Lovedoll T...ry.exe
windows10-2004-x64
3Lovedoll T...ry.exe
windows11-ltsc_2024-x64
3Modules/Ac...op.dll
windows10-2004-x64
3Modules/Ac...op.dll
windows11-ltsc_2024-x64
3Modules/AnimInfo.dll
windows10-2004-x64
3Modules/AnimInfo.dll
windows11-ltsc_2024-x64
3Modules/DRPC.dll
windows10-2004-x64
3Modules/DRPC.dll
windows11-ltsc_2024-x64
3Modules/Easing.dll
windows10-2004-x64
3Modules/Easing.dll
windows11-ltsc_2024-x64
3Modules/INI++15.dll
windows10-2004-x64
3Modules/INI++15.dll
windows11-ltsc_2024-x64
3Modules/In...st.dll
windows10-2004-x64
3Modules/In...st.dll
windows11-ltsc_2024-x64
3Modules/KcArray.dll
windows10-2004-x64
3Modules/KcArray.dll
windows11-ltsc_2024-x64
3Modules/Layer.dll
windows10-2004-x64
3Modules/Layer.dll
windows11-ltsc_2024-x64
3Modules/MM...ol.dll
windows10-2004-x64
3Modules/MM...ol.dll
windows11-ltsc_2024-x64
3Modules/Mi...er.dll
windows10-2004-x64
3Modules/Mi...er.dll
windows11-ltsc_2024-x64
3Modules/Mu...ch.dll
windows10-2004-x64
3Modules/Mu...ch.dll
windows11-ltsc_2024-x64
3Modules/Onu.dll
windows10-2004-x64
3Modules/Onu.dll
windows11-ltsc_2024-x64
3General
- Target Lovedolls%20v0.5.4.7z
- Size 38.8MB
- Sample260827-jgr84sen6s
- SHA256 ebff88ee504ac1fd76ec52b36bc09a388ee81f5951ca502beecfb480ba7d4af5
- MD5 2ee961ae28a8121e8f0f146ea56e549e
- SHA1 66fbd6ab8ef938d941db58dd13d7270db0d349b9
- SHA512 ea7de7a441a020c23c2b482b97a2d946eb30a8c9045bde4ca69dec33fe1919acbf3fee02e853f2e451f9c59e0d7fc41f90b44029c58da13b243e90bf0e67cf38
- SSDEEP 786432:btXf28AKiIOr+mcsBcVfsRhBRQvIxxe0EHNsdOZ5ZHW3SpTiNxG:YyFC4sBmUR6c9E4OZyYTiNxG
- TLSH T1E1973398D71242EDC299BD7C20425BF35BBBCF2500D2D08E35C5B68894B4E99A97BF13
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Lovedolls%20v0.5.4.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Lovedolls%20v0.5.4.7z
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Data/Audio/sfx_bigJumpscare.ogg
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Data/Audio/sfx_bigJumpscare.ogg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Data/Audio/sfx_boop.ogg
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Data/Audio/sfx_boop.ogg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Lovedoll Toy Factory.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Lovedoll Toy Factory.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Modules/ActiveBackdrop.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Modules/ActiveBackdrop.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
Modules/AnimInfo.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Modules/AnimInfo.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Modules/DRPC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Modules/DRPC.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Modules/Easing.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Modules/Easing.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Modules/INI++15.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Modules/INI++15.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Modules/InternalList.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Modules/InternalList.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Modules/KcArray.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Modules/KcArray.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
Modules/Layer.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Modules/Layer.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Modules/MMKRandomMultiPool.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Modules/MMKRandomMultiPool.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Modules/Microtimer.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Modules/Microtimer.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
Modules/MultipleTouch.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Modules/MultipleTouch.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
Modules/Onu.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Modules/Onu.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Lovedolls%20v0.5.4.7z
- Size 38.8MB
- SHA256 ebff88ee504ac1fd76ec52b36bc09a388ee81f5951ca502beecfb480ba7d4af5
- MD5 2ee961ae28a8121e8f0f146ea56e549e
- SHA1 66fbd6ab8ef938d941db58dd13d7270db0d349b9
- SHA512 ea7de7a441a020c23c2b482b97a2d946eb30a8c9045bde4ca69dec33fe1919acbf3fee02e853f2e451f9c59e0d7fc41f90b44029c58da13b243e90bf0e67cf38
- SSDEEP 786432:btXf28AKiIOr+mcsBcVfsRhBRQvIxxe0EHNsdOZ5ZHW3SpTiNxG:YyFC4sBmUR6c9E4OZyYTiNxG
- TLSH T1E1973398D71242EDC299BD7C20425BF35BBBCF2500D2D08E35C5B68894B4E99A97BF13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Data/Audio/sfx_bigJumpscare.ogg
- Size 76KB
- SHA256 38a6de92afe8ae54602d2e022372175464ab71b2f90dc80637948928ea65c3c4
- MD5 6b5f7c39eb20d64c30d8cdeab52a89f8
- SHA1 a8ebc745271971682ed964e50957abd26adef8ed
- SHA512 464b76bcc6549ddeeee2e8334fc03133c9b6a7186cafd471d2104b969f9af40cb3b1114a98f4e45f9e56d162de3e0644dd22deb7e95dbd7c647a45c1406549e7
- SSDEEP 1536:bBA0nU9qz+Mt31vITqHIV+lHiNI7jbUfA5kHvPwMqjvZ:65YynT7V+lHiNIDUfAhV
- TLSH T151730273493534FCD862E13AEF3A420A0B74B57FB1B6C781B75C22F2CB9CA804895599
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target Data/Audio/sfx_boop.ogg
- Size 16KB
- SHA256 8aff9cb7aeb5ca1d2afc59635e6dc42a03f36977a87d45e0560303928c46e2f3
- MD5 c1b9690d0d96ad8cd4798849c9d8c671
- SHA1 1f5c10675d557d816e729ae99b949b3eb5a4e049
- SHA512 11d621305d5eed068f8481d8359ec6febec0e8bd2e21279f21bbd5e76f3db233916c39563c41aaa859e93e4487466f09f2d691262da92ce5d38998f82670f91b
- SSDEEP 384:atDzCPhGG3Usm9lktcdPIwEITNmZZY4bs:a4Pzm9ndQ2+Ycs
- TLSH T1D972AFCE8D6A5C87CC0636B595381257079872F453E564F79BB028EA4EA9310B8303FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target Lovedoll Toy Factory.exe
- Size 942KB
- SHA256 7589fefdd951951f44e773e387a7ecf5f8faa86a0b412e0e98a7e9328f1a2f99
- MD5 32189bfaf002cebfbe4dcc32ac87307a
- SHA1 2ad9c633196fc193eca86a310961103e0519643b
- SHA512 2583433cf5a4ae0d8ed0825408c469c26cbb46233457bf06a387e5914b9fd1f524d58020ef5bbfa3b73bb254f20153252b14ff8dd19ab21d6ccf0781559ecc34
- SSDEEP 12288:FQrkGHop6JrlDf82hKdXTtI1PRcF7Wn0jIIM/6s8WaZNXh7aaK/OqXkn2d:FykGHEpIm86s8WaZNlaaK/Oq9d
- TLSH T1BB253910E8C1A3F6C4A2BCB181E8D67E106CDAD74F1815F3E698A65FFB234C8D626553
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/ActiveBackdrop.mfx
- Size 24KB
- SHA256 e7be91e21c17e86c340086c1e8153be14a4ff6327f9c8ef6e93205b248728bc9
- MD5 62d562337643a4350a5cd1210099120c
- SHA1 6dc72db4c24d54dee872579ee41f07b8109c0918
- SHA512 d590db06f234f6f58e22dc7ee8986c45b291c0eda26825a145d1aabc38b3ecb732237c153b56ae2b2a9230430f5531569141fd70fd1cbfaaaaf897df007b7d15
- SSDEEP 96:6euWkSEQwZZ3P6OLhnSNMM1h+DaS0OKnpZNQpSDt+suAyJYIzxRpUjUwje1emv2X:6euWdgZJhI18T4t+sIlKgl2cu
- TLSH T12AB2C50363F404B5E0BA2EFB88FE15BAAA39FD55A939D01D0190D42D1D3274AFD0A772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/AnimInfo.mfx
- Size 69KB
- SHA256 352bc23b81b94911a9a20fad0c3b1190d59f78ec023ea1e2e5355a0029777415
- MD5 4209c04f885ebc98c4e8db4e2bdb2747
- SHA1 3d4c9a4afc16f4d687d9c898a246a425e2f6d8ea
- SHA512 946559ef8bf111ec5e4164795ae8f44eb7cee45c34e05550cd27013755c3ca249f7fd85f04cd0d974253acf0f23a37422286b08b5f4bb8afd197b6575efb4b3b
- SSDEEP 1536:AqBh7QqPn3umXWxotkQzsERw7ZrFRstlk/:h7QcLXWN7ZrFRstG
- TLSH T15C637B21BAC0C072C05E647A1456C7622B7EB910AFF494DB7F1A0B7E1F613D2993A367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/DRPC.mfx
- Size 865KB
- SHA256 48d5e7246d3e0b2e1da65f5307a1c920e56d372cb2fb112db70ce51d87afeceb
- MD5 eed9557c1f52908027e672a4e1c2282d
- SHA1 3a9bfc8f04638ff0eab599f5b1e14b3eeb25bb8f
- SHA512 47662c59ace0d416b0aba032cfc84ae10f903fc83338bdb1214204cdf0097888110ad5040336d691c4896a0c1f1fc4bc72ecda2c9de14382e08928b79727b069
- SSDEEP 24576:vnTIrjNZMHz1JOYti/T7N345ivEilDrhJ35MI2v+G:vnTIXNZMHz1JOYU545ibf7P2+G
- TLSH T1B6159D213D85C033CB6F31304C28F76796BEA9720E329ADB779C267E2F70582A625557
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/Easing.mfx
- Size 341KB
- SHA256 2005746083dbf962c0d22eda7a09ca065429f3d3f282129cc6c8b7295535ee75
- MD5 3920bb2225392a9c9fff0341d5629fb1
- SHA1 f343ea16abbca4719fef5ff1dfa0847032ca9b96
- SHA512 c162265eb220daaa36b478235f1ea8f1e6565a25584b568444fa89a59f1c3aa3778312fcb866a95fb320f1fc832045feff62ef7d8dac4ae4d79b9631a0094f59
- SSDEEP 6144:XSf3j42/xC+P+ThUtf58gbRUfeFUJtddfZS6WAOppz3LG:sz4X+P+TetxlbG28dBZSlxbG
- TLSH T1AF748D10B9C1C032C27738305979E6720DAD78211B38DAEF57E8197A9F745C1EA36B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/INI++15.mfx
- Size 439KB
- SHA256 4f7e3cc575de56d815589db22a1d96760e2f309e58b9bde1a57e108bda069393
- MD5 760454c677adda4b319272641680e331
- SHA1 348f18fb00889c3058451c2f034b51d6965522af
- SHA512 62f4d9c151adf2ce2430028185241f890849b3b0c2a11b5cc8c0e74bb3c02f3246e3abdc4031b75d2aaba9f24c26e60b165c410c2bf7c4e0569b34882b8477a7
- SSDEEP 12288:COUHF5C1qTcnhwMuTwRTqGqKCspFOclh:yF5uIT0qbKCspFOc
- TLSH T141A438603690C177D57E43F23A297B1A403E7961077E98DBABC1696A38B01C25B70FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/InternalList.mfx
- Size 43KB
- SHA256 969dc2c8d04d1249dee62d415c7a143d4da716eec54bec11a1e6d140821985cc
- MD5 4aa45f130bf4122116051cfccd82e154
- SHA1 a5ec3f0b25701eb81291d82c747fb31f83e34d68
- SHA512 7b72304b0cf08df58cd56eb4fff090ad7acf9bfde4f8d9f08d4956ae7c7266d3cfe61c82f189a6efff945915315251442df1276378522140134aa3cb613e928c
- SSDEEP 768:zWVGwbxBk7wsmFwQprG1Zx33nQi7P1KiiXB3eeZWeXaOyidqTv:zz2Bk7wsM4nZ7P1cB3eeZ9aOyoqT
- TLSH T150134C3235C1C0F3C28B15F1795BA6BA47FAE12115E56D23AFB7538E1F74982E8B1902
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/KcArray.mfx
- Size 32KB
- SHA256 4acc16898136313b0ba79b458c33f8d2194edb7f398124800bac70796086e5f6
- MD5 e6e75d5e75a02743fe0efd673620bc5a
- SHA1 5366b499e6413f6ddbbf53ce3ba4da3da260f69b
- SHA512 efb1bac52b282fbea2b7003697ba959029b362a3c35c96c30d155636f1bc3735b858d80002427d575570c456318b4095d4b9443b24fa63f57211083a978f916a
- SSDEEP 384:pZccdAN+lc5k0gboA0iI10RhU2eZrGg2evY8LMxG:PccdrxkApI1wg/vY8g
- TLSH T14BE2B555ABE254A5D9B64E7154FEA3337732BE432FBD912A8210D45C6C32343EA14B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/Layer.mfx
- Size 140KB
- SHA256 a223f59e510ccfbee3948106eee6a143e163440fb07c71425b1934d840b455f1
- MD5 c6617ff23fb7bf1646bb4aa4a7718929
- SHA1 e261f761ecbb6d3ee24711707c062ac5b7f3ff4f
- SHA512 cdad5dee6d0f4dcaa8f0cc1807ffc98bb5df61cb66cae67719d99e5db7f627f97b7440f23585747a908a36b95178dbcdf2d4a63bb777844b76fe4f0183517167
- SSDEEP 3072:MckEGK6OOwm13SdTIyqmYEGXj/fzHip+giOskkM/9W0Ol1Ot80eNcw:9kEZ5OX9S2mhGLf2pj6fZ
- TLSH T131E37C11B9C18072E9A71A3089789A711AEDB920BF74DDDF575C513E0F703D0AA38BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/MMKRandomMultiPool.mfx
- Size 265KB
- SHA256 ce4b4d9136711f263372dd4adcee610c16ed681cdf2727b4d800b388837bfffc
- MD5 b4a747c10e04c2ccb675990341872d2c
- SHA1 9024a5b3f1256159188ea0efd00a2613d506750c
- SHA512 37a073e14b49a883f26c048f431fe3718b97fd3f908470527e20a080670d8bfa29fd618b30c4bde02cb322e1e6c56c0c7b9bd63840435814ac2f4ea3d5e19350
- SSDEEP 3072:Li5iEDniPsgKngzZmQpXO80s9EJizfe8tsp4lh/Nm+i4LS37KQsUE:LsLO8QRJEJ58tsY/Nm2n
- TLSH T156449D113AC5C479D9EF02B15938872642BC7D6247A1D9CBE3C82D6D5A331C3AB31B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/Microtimer.mfx
- Size 82KB
- SHA256 aebff98c917fa3dde5a506b19461e60a2e18e41b2ca2762ec470d8a692f36b7a
- MD5 6f3c8b55bb56be328b4962fd5e33803d
- SHA1 b680aac85e1da292f2e3817fbfe05fffa27dfedf
- SHA512 c4cf904e31ab1586c08b83deeed8b72eaa3042f63a0fae4b58403a8b0c99500ecd1289bfd79b3fc84f4114495989df5a8968e400281b971a15ff2bbe99205f7a
- SSDEEP 1536:lK7VPHa9muxLXny+kHS+fJpJtrGCV4vLls2R3v:P9pbVkXJdV4ja2R3v
- TLSH T129838D11B590C072C09E997944B6DB726B7FA520ABF094CB7B28077E6F703D05B3A35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/MultipleTouch.mfx
- Size 338KB
- SHA256 6a0c98c111e69543c1e70972d5c485b5be9f40bd9ac10b872fef0fe9d123c5f7
- MD5 dc59a646cab06074a99eba49b14a2c00
- SHA1 faeebf91d96bb3a9e669b3279f75940f3d6ec785
- SHA512 ce438496323cef3908ace6a6bcdcccf2c41d9b97e2dd0e40cf0b11fb24fe69c625d6873026df4cbcdffc771beeb5da9ccb9f30dc80bbcecd0be580fd11561398
- SSDEEP 6144:7CKjgFL9yNyAQgCkyBUIi2zKr7EwNp/JLFjvYyAOYV:g9kryBUIrzW1p/NFzr
- TLSH T1ED748D00BAC18032C6B338304578EE724DBDAC211E759ADF57E879395F745C1AA39B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/Onu.mfx
- Size 175KB
- SHA256 276486bcb8219f5336348403336e0dbcc3d066c39d439494625e785dd05bf45c
- MD5 64cc6a16ff801438b8b78e382f74fefe
- SHA1 b0ba9e394c01f31a84d7c69309a8330d515fe88d
- SHA512 53bcb8dc42308a47b460d52ca89fa68324c5fab0d12fe03185a48a6ee08bf49d2091c095cc5d37dc8db862fa006e7f34aa3b391f96f120e9a9e8b32ff03a0d5a
- SSDEEP 3072:G72ilDtDlCRDwS6COR/Ag0FuuGYttHEEZrZN:wD6GAOutkEZrZ
- TLSH T1CB049E1275E2C4B6D9BB06BA4C61A7260E763C110A74C57F3FF4BA4E4E306D18A67363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10