8ca3152ee2e1c686c72b296c671439438c63aafb2e64293535db615867bbb999

Resubmissions

10/09/2026, 01:48

260910-b8b27scm5y

10/09/2026, 01:41

260910-b4ktjsv1bs3

Sharing

Copy URL Twitter E-mail

General

Target
SPECIMEN_HIDE_SEEK_v1.0.0.rar
Size 302.9MB
Sample260910-b4ktjsv1bs
SHA256 8ca3152ee2e1c686c72b296c671439438c63aafb2e64293535db615867bbb999
MD5 54579eba47b308b179dc8773fa1a9b6a
SHA1 90f3f79e29372f1108618b8f9e4a441ac80b8540
SHA512 f80878f2783a9564b28ac421a07aae96edcb99fc8130614b59ed900ef92d973702d55958a46861decb56f3b81f9ff3cf3909f12ea5bc2f229ec032081a7ba361
SSDEEP 6291456:mTwJufv85DeBBjzvpolS7ejC5qKgRCxym7Jufv85QdB7aG:rJuH8sDxnmCYKgEkKJuH8+z
TLSH
T191E833E31230B866FF7F5037D0E9202D9E36DB563197C16322AED506906F1CE86AB9D1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  SPECIMEN_HIDE_SEEK_v1.0.0/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  SPECIMEN_HIDE_SEEK_v1.0.0/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  SPECIMEN_HIDE_SEEK_v1.0.0/MonoBleedingEdge/etc/mono/mconfig/D3D12/D3D12Core.dll
- Size 4.5MB
- SHA256 625bd40005b1c3708695d5256ecf230d278e6b8edba5a88af70f3d91324f3052
- MD5 8bed03240b764906c937c0d6ccd560ac
- SHA1 2a38a4d7116b9d067e9d24d7da2646e2fc9f61c6
- SHA512 6fce3c735a101794634c53fd622be20e69e75c68ba216d0caa0fb48aadf97ed55ceb6ef205a4ea22f405bf5e663638add2f489df720c206739920093479863a7
- SSDEEP 49152:+h38HT1tnrx7KGN6McyBTwbreXHYTNeZQROL+qgGVO9EflU7slMWr+IGrh4TeeYo:IMBxrfwNFrfau5e/H
- TLSH
  T1B1266C07BBA840E8D4A6C079CA6B461FE7B278654370E7CB169087995F73BE1193F324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  SPECIMEN_HIDE_SEEK_v1.0.0/MonoBleedingEdge/etc/mono/mconfig/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll
- Size 596KB
- SHA256 3a3620611591ea82dc2e3e8379f7515a98d8a60917a151b7acf8837fb540c92d
- MD5 32da33d0e12ace15b02ea8caaf6cf562
- SHA1 a48a7d46effe6fe9af41accfe21a0d9f39bc73db
- SHA512 9c02044aa2ebb8672e16c8900e9effe3b91e2a2ca610388ad94d8ad3845468413bb2be4bb56cbe059882b157f79b13a528decaa32aba16912b8d15152a5bb51a
- SSDEEP 12288:+OmNAmdeVH9Mwe9Ek/7jY4hOTBPyU9Ga:+nAmdcMj9Ek/7jYSOT8i
- TLSH
  T103D47C56B7A402B9E577D138C6834B5AEAB27811572093CF03A897AB1F137E11B7F360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  SPECIMEN_HIDE_SEEK_v1.0.0/MonoBleedingEdge/etc/mono/mconfig/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll
- Size 7.5MB
- SHA256 1f3193c252b1f8c60c83422112abd492369b1122587b28ad4373a4a096af2f40
- MD5 5b1616368f5563e429d0f41c3b848ee8
- SHA1 73a9a8418cf54775e1eec7914431f6d7a4d3e4ac
- SHA512 f6c4f8c5aa962321a44f0475d5e0a50a39d2ed9d71b1500c9a3dba79c0d35cf9c1468aa7642a1f165284418d9855b4d0b8d183803886a2d3ac547b6261a9b3d5
- SSDEEP 98304:Z5zSSTg3JqYhSAqdsQKJ/UISfc9G8lClIj6UH:Z5zSSTcJ/hSzSLnSE9G8lCej6
- TLSH
  T194767C5E92660068C8ABC23DCB676B73D375700443306EDB46905F6AAF23AE5537E7C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  SPECIMEN_HIDE_SEEK_v1.0.0/MonoBleedingEdge/etc/mono/mconfig/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  SPECIMEN_HIDE_SEEK_v1.0.0/MonoBleedingEdge/etc/mono/mconfig/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  SPECIMEN_HIDE_SEEK_v1.0.0/MonoBleedingEdge/etc/mono/mconfig/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  SPECIMEN_HIDE_SEEK_v1.0.0/MonoBleedingEdge/etc/mono/mconfig/SPECIMEN_HIDE_SEEK.exe
- Size 652KB
- SHA256 ba989c1f47d9c36140e28f07ccc2d5bfb3b6f240035215de14f47172b7174a22
- MD5 6239e4cf4183a458e6b106712440eebe
- SHA1 ed8513cab5c5aeed919f8bec792f230e8fcaf2ce
- SHA512 bd5549ca8cfe0d52eb874fbdaa1c1a53685bb36c25dba2d24566d1fedbbc1c5e6ce19231223b71fced51dd022fb98f22701acf62355a5040b85c92db30a1254a
- SSDEEP 12288:OtVwZpth7YJJo6SejbpcEcOcccccc1ccccccScdcscccccvccccc3ucccccfcccL:O/maVE42LhQ
- TLSH
  T1B4E42A439458B2B6E7A05DF853AD9F18FA10A2552CF99F4522F21430DA601EFDB2F63C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  SPECIMEN_HIDE_SEEK_v1.0.0/MonoBleedingEdge/etc/mono/mconfig/SPECIMEN_HIDE_SEEK_Data/Managed/AllIn1SpriteShaderAssembly.dll
- Size 21KB
- SHA256 b66b656d9e21348c50a31626cae0c374eda4c23231c5e12cc70faa811a3c24ce
- MD5 c2225aab21f24b3282bcb673cc6aba1c
- SHA1 197092a449e97de3a763443afc3da4cd41a4ecc4
- SHA512 b84bcbbbcae29261d5bce93ff26397df6ead8d51e4769fc7a745563dcbba67cc5630d725954ed70de53505021ed3324c3772f3bcd10cd66cc8c1870e41cf8267
- SSDEEP 384:zXPvRrRY4u4guCc6guB65KRp1JQjsUPRmkntEcm3RUmW6Lnj/hhIf9ckAuiln:zHPY4yuCc6guw0fJQjTPMknKBzP/hhos
- TLSH
  T1A2A22A1166D89B2FEAEF17B9E574991013F6E48A9923D68FCC8460DF18A37F04F00675
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  SPECIMEN_HIDE_SEEK_v1.0.0/MonoBleedingEdge/etc/mono/mconfig/SPECIMEN_HIDE_SEEK_Data/Managed/Assembly-CSharp-firstpass.dll
- Size 336KB
- SHA256 1c8da5fdc5f24ad20b1bb462b8e0b68934e78f86eb858c9a07c616ca4e01527b
- MD5 fe1a439e6ff454e1c636963a88bc801a
- SHA1 cb41382c566561a395c884194396a85a9c49f74d
- SHA512 4d7cf0fcd2099e12052bcd2750ba621627457634daba797b7f1d3814e9608de3a09735d7478a1fd74615d790ccbb6c616872c86631db2adff2d374b976415b3a
- SSDEEP 6144:I6ZqYn3M0+Ucb2gs4hzLGsd+T3lgnvXoqFWAk/LADDD5KtGqOfkf+0GY:IaqM8WcYuvpFWA6AHs
- TLSH
  T12474395623F04629DAEF5B7EE4350A44D7B1FA5BE8B9E78E6800E4EC0D43741E8113A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  SPECIMEN_HIDE_SEEK_v1.0.0/MonoBleedingEdge/etc/mono/mconfig/SPECIMEN_HIDE_SEEK_Data/Managed/Assembly-CSharp.dll
- Size 439KB
- SHA256 a81ec08d3d2bbb00873ccf86d9e5bbf2bdbf0e9d59da6690fef99b2a915a9abf
- MD5 43c5c472f485842927e1ae2d5c58615a
- SHA1 b602670df7fecf3ac136b5ddc3ae39cec20f1571
- SHA512 5ec9f3064e8bf938b518bc4a56e7350b3ca4af1988f64ad917a546759946d5b549f569a642c973a6ae6e037ea0bec3ab0787819852a4ddeaa2aee85936099700
- SSDEEP 6144:jHz3Aghu1BpZiSzEeFzXg6M2KQ9gjjPCQdy6pMP/3FfRabGXK8RM8ynjfv7m7Q6m:7z+1BpZiFe5g66TjPCQi2
- TLSH
  T167A4E80286F4603BE79F5FFDB40519B823755AC61193EECF5D88A0ED9E77BA08841227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  SPECIMEN_HIDE_SEEK_v1.0.0/MonoBleedingEdge/etc/mono/mconfig/SPECIMEN_HIDE_SEEK_Data/Managed/DOTween.dll
- Size 173KB
- SHA256 cefd0aa74f6cf643fea2c5d10197f5b34e8546adf885fd1e617c7e057f504a0e
- MD5 92d6fdc5501ab3773fc84ca5ffc09dc3
- SHA1 bcad557268806ba469cb1aaa8683ae66b2d2eb07
- SHA512 2b5937c4dc0828be199f8341f01ddd7ebaec86c3199c37a71883caa41235db605447515d96e5ca06b7e90cc509866fcc34855a16c6c8c47425cdf15d88a4a8dc
- SSDEEP 3072:yPSQfwI0zneuFAIlVMrwnM7GTGGGG8+GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGD:yPS60zneuFAIlhMc/1Oei2sL9j
- TLSH
  T123044A08ABAA5532D7FF83BFB0381929A235E51ADC6BD35E6854E8F42C17B50DC10397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  SPECIMEN_HIDE_SEEK_v1.0.0/MonoBleedingEdge/etc/mono/mconfig/SPECIMEN_HIDE_SEEK_Data/Managed/DOTweenPro.dll
- Size 16KB
- SHA256 5841f3c7485574478775aea5d5dc2ab2d10a1aad99f9a12f716caff647216d81
- MD5 883f52e726f73f28a8a7a25a0e0bdedc
- SHA1 c23bc0cc9c12da5b7de5346a73ca2e2223ccb018
- SHA512 ac02344e5e474d80d3eabe7d8655a19ab796ad9143325110892d8cac1b61fc7e5fed8129913a2898cd7c671f3c06510cfd8b90786504b3f4714366f1dbf61303
- SSDEEP 192:F0aEuvVVcw5he//b+dZj3JQv+aNpoSgJGDs8KkRIfnEs3yNrQOmXB0YekdKPVP:xtPjM/apJQvEJxkRIL3yFeiYekdIVP
- TLSH
  T1A7720C5263E48533CAAF0FFE3D732F440370FA469552DBAD1498A8C916073C25992F97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  SPECIMEN_HIDE_SEEK_v1.0.0/MonoBleedingEdge/etc/mono/mconfig/SPECIMEN_HIDE_SEEK_Data/Managed/DemiLib.dll
- Size 14KB
- SHA256 66d8cf31d41279d131a0efab0bc72caa1546082f2158a1e2dfaa24576309f2f2
- MD5 084c866d87288a5aa3ce6b3747be5ee4
- SHA1 af73adaa5365c42631cc3437bd1babbfd5d217f2
- SHA512 0a76e99f7c436ee678df70008d169b69e6f670fe1f2ecf26b15a984647ec62a71038988415f750ab33f9010c7d9595b0264552c281240d0c4b52c256ee6e1c02
- SSDEEP 192:0W2QjxowAx1mCS1v4vHlNy+BAkJg+2fREVkMLbwrPX5Ke:0WPAxqSFN6keRcLbwjpv
- TLSH
  T13C6208B8A38C562FCFFF1BBD58EA9A012231C5428513FFDB11E4B125650BBC8195239B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  SPECIMEN_HIDE_SEEK_v1.0.0/MonoBleedingEdge/etc/mono/mconfig/SPECIMEN_HIDE_SEEK_Data/Managed/GameCreator.Runtime.Core.dll
- Size 6.3MB
- SHA256 b1af1a799963def43c9f7bc7d5ae64dbd8055295b2b0f2c14f55c2032a22b7c9
- MD5 d24d8a8c8b01fb56f142c592f06690a1
- SHA1 a0d7d04d7e240e0d244024ac83c054d1c191dd31
- SHA512 592d23aa038cdc61f45360f533c74f5673f0085fa762110fd6fb0c4426f0c30b9f7ebe68d24fec1533a9971cb2b86603429083ee154361a73c06e2bb312f473e
- SSDEEP 49152:CFwCk5YSjrh/yy0MqWFX2ucwGf+n5Z5xocE9fWJqo5Pb/h:RJ5YSjrh/yy0MqWFX2ucwG
- TLSH
  T11166E5967AC1F650C08B567AE870C7F453A0FD84CD56D3973AA0BF2F3CB66964903226
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32