98b9dee3d7e39b56ae72639f76126260f59928da83032ba3423d57ba7729983c

Resubmissions

10/09/2026, 21:27

260910-1a7tnayvfy8

10/09/2026, 21:24

260910-z88m6syvd13

Sharing

Copy URL Twitter E-mail

General

Target
EnvironmentalVisualEnhancements-1.8.0.2.zip
Size 761KB
Sample260910-1a7tnayvfy
SHA256 98b9dee3d7e39b56ae72639f76126260f59928da83032ba3423d57ba7729983c
MD5 6ab42332167c155e70466190048cfcbc
SHA1 aaa4b6d588a30b350237f12ababdf993aa32d03d
SHA512 5d3554f317a90dc649f93cd8e5c9c41d13234a9a1fe74a65e7c07eace86558c0d9cb6aec66a7581125fffd6b0524229e3e49220ccbd198213e21f149caf0211e
SSDEEP 12288:iMCsMVMpyx/r1GyLhe73NRteRDQ5JG9DUXCG3pcjJwkz3TkI9X0lSvDBN368QFGM:ibsSrEo43NRURDQ5J0QXPkqkz3TkWElt
TLSH
T1E7F433A41FAAB764D486A170811E0BB6CF3BF5D99380F678770A613F48F35E4066317A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Targets

- Target
  GameData/EnvironmentalVisualEnhancements/Plugins/Atmosphere.dll
- Size 33KB
- SHA256 4bd7e28903d60e1c59e756cde9d98220a8f2bcb3e2a596fa7eb210641dbcedb0
- MD5 8cdcdbc93f18bca29a5b9a8a6b8a3b35
- SHA1 28e515309fb888db00533b7b1e5c6525776230d2
- SHA512 55c239795d1ef9f6241f976c3d5bec06242a2c8e7a0de7629d599abe2ed8157029966a5675d5486c3ee6a299bf73402abb87222538711afcefb4b831e9b049cf
- SSDEEP 768:gfwbSz/wUPwrFdX+TJk9XJkXv3IEe5eKoCkCy6BUkbWUEPNbhnGIt:gfwGz/rKFdX2e9Xe/YEbdBTpnL
- TLSH
  T1DFE20A5132AD8B27DABF17FD9890014013B4D997A522EBC95EC2F0CE18D3BD04B662DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery
- Downloads MZ/PE file
- Executes dropped EXE
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2
- Target
  GameData/EnvironmentalVisualEnhancements/Plugins/CelestialShadows.dll
- Size 11KB
- SHA256 d2cb025bc76c8dcdc032af96d4337b27149f6863aedf61bdb6fdfd3faa9b2ca7
- MD5 ed83d6c42053afff33fe2083bf9f2499
- SHA1 7ffaec3702ef21ed35f7920a21a9bd722e3d2181
- SHA512 16656cf933256b2bb6ec2cc50298d15793c09f7fd217c254b42c55228f9ef682ae3f4d4959a5f69bacdae3ba3062790ada82cfa9ab3224cf5ea27d981818b75c
- SSDEEP 192:o6Eusj3Mf+deENtxR5v6qMfERKbZZbPEL0an1qY0O:2usj3E+drNpsq8vbve0a1qYD
- TLSH
  T1B7321812B7E88727E8FF07BB78A106104375E31BC812D7591EDD64DE68A23804B523EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  GameData/EnvironmentalVisualEnhancements/Plugins/CityLights.dll
- Size 10KB
- SHA256 d60bdb438b99798832f6ec99b9d25e8e49b6b3a45980984f6034618452f53cfc
- MD5 7ba818807b1088842ba95a8a23deb259
- SHA1 57abdc4b27519c58740c98a11d5c99acb1d50c6e
- SHA512 e4f64d725e0c5ab04042b02e324cf3b933aac8738dcfc2d3f0ffcb8ced2b9f19d3e9773a286adc6ea882a509b68cafc29cb3e9218541d74c309d43c10a0f1f5c
- SSDEEP 96:2ao4GwaiFQfivvDUFUzFsA9KNNf1G3/kq99s+TQjFEhMqJIjF7MkJswJZJ0dvLWw:k9iFdzaUzFQ1WcO6+TeELmfJivLWAH
- TLSH
  T1FD22C81AB7DC866FDAFF0F769D62D60007B5E687AD22C7CA0EC5609E5C9630047113AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  GameData/EnvironmentalVisualEnhancements/Plugins/EVEManager.dll
- Size 16KB
- SHA256 ec3c493b1d286ee7d972c627420d52b12e29495da1865f5b557fc72c6482a9bd
- MD5 98746a6f6d51e217cfb254bb522cdf02
- SHA1 eebfdd53d2c7a57bb4c41f27ffd1b301018c2438
- SHA512 309cf1e6c0e291862c67f2580b72664bda97d87b0ac6f128868433cfa0d3082c73488c13faaae510bad71a4efe849ce19a6368cbca4079595f79c351dd0cd8bd
- SSDEEP 384:EieTkLy7ERGy9M4SkEMUtHUI/UD3ciSBNXSu613UMGv:EMLy7wfHSpj0WM3/SB9c1Ef
- TLSH
  T17E7209166AD48737EAFF5F3B6C22261016B0EB86A522E71D1CCC79EE48176080F4137A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  GameData/EnvironmentalVisualEnhancements/Plugins/PQSManager.dll
- Size 7KB
- SHA256 082c0d7fa7aecdb78e3e6717a14ac376924743c3d0e12a171d1bd94882aa34b3
- MD5 e71f99879e7f6106a9b7b5cd5f43f97b
- SHA1 240c809502349aee7ff5b284e029d60e195423f1
- SHA512 0418525f7313804763f2078d7107b99f0c77172850a79320c9db2616c2c620e9f325c4f5328502ac78beed98020be67e5fd33396c94a3687474ac516a7291cd1
- SSDEEP 96:VM1BvPmFlrPWMHRgqnHDgAQ6pEltRkw1FQBMzLq4mzdly06U:gBWFl9+qnHDgAtEltf1FQBM/xAL
- TLSH
  T1C1E1C81297F49632DDFF1B36D8A502511175EBA29A56EB1F1CC8600B2C132584B63762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  GameData/EnvironmentalVisualEnhancements/Plugins/PartFX.dll
- Size 4KB
- SHA256 2e2372be2cea6075191e847c2f0ae9f8db6861473e0579b25e4d704c18f0329d
- MD5 b9b52aaa95253e00d86982cc7273b2a7
- SHA1 ba5b7aa60f46ead138d46999c50ed7458e84b9b7
- SHA512 9ba3f6838734f003d7288abbda6d399e84d41e99c7a1f043e34b473a11a8c3585baa9aa789f501406cd511a3d9f65c303d64d73ad694a270d50b466d2f6a0551
- TLSH
  T1C581502257E8437BFCB74B72DD63138122B5FA50ED63AB1F09C0620A6C266106E32F75
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  GameData/EnvironmentalVisualEnhancements/Plugins/ShaderLoader.dll
- Size 5KB
- SHA256 8ec32aa896b3a3dccbda1512794266dec773d3765f96fbc9b03f4a6a37832cc1
- MD5 5b38ee1ba4735248ecba4ae56ebb67d6
- SHA1 9c647b0bd0d9441f1df9441f5cf8a7c23d3c2aff
- SHA512 5264e73f91a3209a17d2ad10f4f2b07b32293540a90823e935e581e234a7929900d5736fe6216119b1c8475d08df3eae783c9cdd84046f22401643a0cf0e7969
- SSDEEP 48:6xNlKsPikNAshTwQq4m/1ka6ZGepdMeeGIw3f+aUA+2ocVvNFiLOLi037391tm++:2UiAsZwQ9cWPwTfw3f+aI9c5NpLZPz
- TLSH
  T172C1815393E8832BECB74F36EC7A47A12231FA11AE77E61C1985210DAC757418D32B76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  GameData/EnvironmentalVisualEnhancements/Plugins/Terrain.dll
- Size 11KB
- SHA256 45447936c18fe9d120882b9a941b95fefd94e5a6fbe0a79b37f58fd84f4adc47
- MD5 bdffabb8666cf295e6b21b7cbdc6a29a
- SHA1 fce3132cd920896d597818c5a3d4de5617c245c4
- SHA512 3663d37d9cff4b8934f6f86a5d1a94d49a460adcdf5810009bc8fb875f5652b2cfb58eb181fc6d217c20dc0a6734d971b9c6b4d79e3058ace89eacd21d385fe4
- SSDEEP 192:qGF1/SvxUqOUAzrFrid/IUEZ9Iedcf5VQUEkrdU0McypIpDM/E:JSOUIrFriRhedi5bdUfYDMc
- TLSH
  T16D32D94277D8873FC9BF4B7F997106140AB0E7979012DB891DC4A8DD3AAB3D80A5077A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  GameData/EnvironmentalVisualEnhancements/Plugins/TextureConfig.dll
- Size 7KB
- SHA256 6c185aee2ff7911c4e415a7c920455d84384fb3c20d8e732be7855d5b9791227
- MD5 f733600f7d67ce2f9c7f30cd2f82db32
- SHA1 2e74835c1e034a9aded191da04eb73bcb8c82418
- SHA512 15e5ac034e1fc8b1feaaf1eaf67770456f6676f8d2dde257c6c8e578c080aad79cad24bc043c62842e5f715e0e488d88927d5776fff633f3a7c1a7ece477ae87
- SSDEEP 192:WVfSxMOKoo4vZn8qOu9mhUaPojGOW03+RVusf:gqOuumWSMVusf
- TLSH
  T16AE1D71FDBA41727DEAF5BF2AC9783114B78E7329A42DBEF0D492057AC427400921B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  GameData/EnvironmentalVisualEnhancements/Plugins/Utils.dll
- Size 58KB
- SHA256 b037481b00ad4d58e515ee89c76314c89dd08745632ad5a7e7c06ff0b4904bd8
- MD5 3ad676dccd79b4c7019983fb524050f5
- SHA1 10a550889063ffbb53436df506830e3756c66fac
- SHA512 16223881bfe18de116151a3244787be4d62795609301736f0fd2aa98c144a3d08e88c819a389b5cb5e3003bb7abf702ade3758dc2f9aa0979c79730dfead1f84
- SSDEEP 768:xFgBUMwLMM998cr06Hz6IL3qg9cL99tldz9cr8/kxAw68wwdl1RZENa/icfR+le3:gB13Qz6E3qg9cLnDFq3mw6Hwdj5+q
- TLSH
  T1EC436E19B399CD2AC5FF4B7BB8F1160953B08247A596F3CA1EC568FD09A73C10A053E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  GameData/EnvironmentalVisualEnhancements/Plugins/_BuildManager.dll
- Size 6KB
- SHA256 6923163ebfd6774d8d5d6e4f354ad7bc8a36fbe67cc87418f943576469a2ee9f
- MD5 19333e6db7bd5e66e7f50c9ddddb0007
- SHA1 b60bcb1f067e24917360ca9c1032d30b4ad194d4
- SHA512 4bdb99aa425412665b91ee4fdb47933ed8ffb3e8b9ebc9b41441b69610a065e15ee884f06e6771d8351ad3148ee18b17a2fa8297d961f5bebcf3182b18d9aca4
- SSDEEP 96:532+gkKeFuF4i5OHc3Oz/6SOAwH5z2GB7M:F2jbeFw4iA8+z/6SOAwHr
- TLSH
  T1D1D18315A3D84736FDFB0B36BEA252525232FB15EAA3DB1E4C44314E6D327144B62B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Executes dropped EXE

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22