fd358eacff1fb7abd4b3265d4226ccf994b1bac62fba6454d6f787b17f9b057c

Resubmissions

10/09/2026, 14:58

260910-sb8tcaveph

10/09/2026, 14:06

260910-rew4aaysdv7

Sharing

Copy URL Twitter E-mail

General

Target
Scritchy-Scratchy-SteamRIP.com.rar
Size 211.0MB
Sample260910-rew4aaysdv
SHA256 fd358eacff1fb7abd4b3265d4226ccf994b1bac62fba6454d6f787b17f9b057c
MD5 245c42b2dbba75f55929149b3915c241
SHA1 087d08bc45202b0767aa63dd61600a6ad605f3c2
SHA512 8a80ecf8fbf099cb01cf81090fd42254608815f6f593d97d6a93f74093ad2da6dce767605d85abe9c82f4769398c69bb62af2eda22eed8eed98b2788174ccb2b
SSDEEP 6291456:9SUZaOvzp69ORyveRxvW0BvuIXpmIgCxBrSXgRJQ3sZ9V9LOhIw:9RD09ORqcx+0ZRXpmIgC/66QYLOj
TLSH
T13EB833F1CB81AE97D2D7413539254F6FF3E680E184E7026BD8131E053E76AA583BA943
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Scritchy-Scratchy-SteamRIP.com.rar
- Size 211.0MB
- SHA256 fd358eacff1fb7abd4b3265d4226ccf994b1bac62fba6454d6f787b17f9b057c
- MD5 245c42b2dbba75f55929149b3915c241
- SHA1 087d08bc45202b0767aa63dd61600a6ad605f3c2
- SHA512 8a80ecf8fbf099cb01cf81090fd42254608815f6f593d97d6a93f74093ad2da6dce767605d85abe9c82f4769398c69bb62af2eda22eed8eed98b2788174ccb2b
- SSDEEP 6291456:9SUZaOvzp69ORyveRxvW0BvuIXpmIgCxBrSXgRJQ3sZ9V9LOhIw:9RD09ORqcx+0ZRXpmIgC/66QYLOj
- TLSH
  T13EB833F1CB81AE97D2D7413539254F6FF3E680E184E7026BD8131E053E76AA583BA943
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  Scritchy Scratchy/Scritchy Scratchy_BurstDebugInformation_DoNotShip/Data/Plugins/x86_64/lib_burst_generated.txt
- Size 208KB
- SHA256 1d5ef388ba6b490ad3cf7162a883761bb95a12724a9fc24a4ba75fdab86ce659
- MD5 f9425de8bb4a51ab6166507a3c6b9db3
- SHA1 4a8ed31be557e5f5a6f2a678a6235cbb61607149
- SHA512 33ba840656f077b74de5b9ee3542909138afdb16ee96969da9640f03b4164c4ba794b3b997e6c64b2eb2b6bcfb04c1500434ae7cf41260c94b15d2407bdd2b2f
- SSDEEP 3072:iivpNG8iuutQ01nGcGi66sz7hW6oUlivpNG8iuutQ01nGcGi66sz7hW6oUq:ceJ
- TLSH
  T19F248A302426A1EA0D455F46009819C7B3EF879F1F7C194CAA692B6EEE3540B9F436F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Scritchy Scratchy/ScritchyScratchy_Data/Plugins/Steamworks.NET.txt
- Size 243B
- SHA256 61b338adccd28fc685c1e242a5a2365591b49c4d3928242a3b58cd73d399f63a
- MD5 473a4b5f82b2ccdad6f81a2ea5651dde
- SHA1 d0861b7bbec15f26c747f8bc0587126390948ca7
- SHA512 5109ff3b9d5ae340c6f8d43acf32ebe4d7860ca9161e804c1552a806dc2947f76e8690df3ba083ec01ed8f04bad659e7ecaaeb0a6c47eaa550422d1c5424108b
- TLSH
  T1CBD05B0CC41A10322537F9511764674FE7EB630710795A35155FC76D07E53222584227
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Scritchy Scratchy/ScritchyScratchy_Data/Resources/unity default resources
- Size 5.6MB
- SHA256 d656c46a47e39c4346e1ae506f6cd8328408ff2d97156274d8ac7adf7b844513
- MD5 d382f9e4c170857737be73c23cb84518
- SHA1 e056dd1aa42cc5485b5a7c53b312eaf0c826fc8b
- SHA512 fbf59576a47140030351b48fce702666c08c2909340f82280ace6703d887ff0a23f489f0abc756e77387abf26f82ed58bc2fb6b2209e005cfbc457edc1503404
- SSDEEP 12288:uZ6QAM4hlnWPO9SUqxSkpnxYKhBvOjdCTAk:uIcOUvSybvAkT
- TLSH
  T190465255A6A1A93DEC6E203D87630DA1E3D8A55D0BDF8B43391C311CFF65A09CA372B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Scritchy Scratchy/ScritchyScratchy_Data/Resources/unity_builtin_extra
- Size 357KB
- SHA256 abe8834f215a55c6e37cb0504d2d431fd095c7a464d7b5618f185e1624b5758e
- MD5 c87bbe155df23f3e78aa73afe732face
- SHA1 523707987455f7707a380af56714e1f346824d55
- SHA512 d30ca08a2c0e3390a2c123fffbd2a8d8410ca3a8cb826dfac127a9dd20ef3acd76c60a7e20323e6ed4b6ad215b73982ed45fe53d2628b965f46ff7ca651eb05c
- SSDEEP 3072:MoipwxxN9ZvwQGV/afS4gLflU6e8PLi7rL2r:Moi6xxdw7afgLbjPO7mr
- TLSH
  T13E74F979635B583FCC21153748BA0B739731A5F81BEE0F236E2C6F6C28E5288AB11754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Scritchy Scratchy/ScritchyScratchy_Data/RuntimeInitializeOnLoads.json
- Size 6KB
- SHA256 85af836133c057689bf9e4af05d1edb2241f4c37308050a2de33a3469cb7d71f
- MD5 ee920483f99b147a14d6b5c4cd8d2c51
- SHA1 72b677cf4a33189d7293a86e6d10db2563a8fe2b
- SHA512 4ab666c5a2984fa8813f311fc021b63f3bcb6da5dd99bc23d5856e343c05294ca3f6d1d8d06be9be619dc540ad18d602286700b9e1ebceb12ed7854544acaf98
- SSDEEP 192:hoKUz48CvaTAU4a81OPsWIvxOCtLbusi1bcx4z8AoFvTsyLGAg:Po3t
- TLSH
  T125E126BD22868F7F6F4BC3977D7A1A5D31940A0F89CA4804EDBC1F3F95B45112A8622D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Scritchy Scratchy/ScritchyScratchy_Data/ScriptingAssemblies.json
- Size 5KB
- SHA256 c7f891fa284a6085eca6a3e1bb06d61baf3f836dcdfc3d11fd94f6a0779c17ca
- MD5 03a2eae9e691d8835032396c63f6b018
- SHA1 167b348390066badc5c2afe1109516e4c86e1073
- SHA512 8e43d4fda345a59e29ceeb701dcef9f31f30dfa492fe18b00bd31db53a1adec4f1ee3b63134677243dcf94db9644ddbc5acf37755d5b5ec13702ae6d60c31582
- SSDEEP 48:YgNAYrKMbuJvHdCCouNuQGoSfTG/fjdwXE2/KrSkKQeik63b9qYP:bxCJv9FouNtjRK2ke1P
- TLSH
  T10FC170B2C48B26D32ECC6EC38C358C8C3ED341960A64A0145FAEA79FA978CD57D4D6D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/UnityServicesProjectConfiguration.json
- Size 2KB
- SHA256 cbd49b511a41d5f24bbbf08d86ec2b71bb6df486e7b284f1d78d94cc12d065bf
- MD5 2818474182e89625dc55027ccd1cd978
- SHA1 6158616ca75f0d2949acbe6c87048e8206f34131
- SHA512 014af1f953a3f27b879d183ea3fbfd633eb3746df2af6d25388a98827f2a51bed17bb35194d88d527f10a0701a08329d7c19e97e1d2b0f01c89d9cd1c451692b
- TLSH
  T157419B31C0DB9D77EA48AAC53D7615CA2BEA034A2ADD2504577A2369FDB885F0F02C35
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/AddressablesLink/link.xml
- Size 2KB
- SHA256 fa8f7e311036dfa8a26fffc609cfc6fbb5c4d9e651f6144991f3dd6f99f83056
- MD5 213ed188ffd6f7b285542e6e74a58507
- SHA1 1e2d2ac54289ce5f0d3e95bc1d2a0992b26c1f41
- SHA512 8a084dd3c62b8a2f84f792b3293bffa2f87486e1d574f1378454638fec410476e57ca5ec932e941bc6399cf4d14165cb13d77c776297c15fab5cb5e009bbdaa5
- TLSH
  T17C413FF2529A3CB74B76EA233D1A84C5742941FB076431A53EF23537BBBA4461A13B06
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/bb093789c87317d19f291a3dbf0049dd_monoscripts_84066db7ab2948e33749b5cd3531c03f.bundle
- Size 1KB
- SHA256 16f07c705c3ecfe8f82d03c07817339019521034f0a06bd71d8259ccd1cde804
- MD5 a4c369dcc4bd5094a19f1da9e95e8376
- SHA1 81bb1671d3f2ceba06e046023d37c4032115509d
- SHA512 f317d478a1cab349784102e0fd9c5eed5d89bbc6d054778758fbb53de7bc5911049643e6e7c16638c5f61668e5bc5babe2af73dffc5fd64463c165256ea53ecf
- TLSH
  T13031B81875858A27C2C51A3D40978B358C3BE60AF526B6C92671D50E4C17A9E0F9B337
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/localization-asset-tables-chinese(simplified)(zh-hans)_assets_all.bundle
- Size 2KB
- SHA256 525ac2a14052dfa4a9fc78f468e6a9367d2075936e5fa52d653b23cc70efa7e8
- MD5 ac7ff8c8ea23a36ec1fe077ef7935e01
- SHA1 cebebdde8aee63134ad835222f2fb8e96a99acdf
- SHA512 65b791f2ced521dae6068deb125a32982e2b751665cadfe68f0dec5d93692b56c5fcea14b639120957f2b0350f05ffb4d919c58b6d116f7727f60bf2f9a56687
- TLSH
  T1EE41E700244A0202D30112BA869916A75BFBEB4D5E06734160F38EB75C69F6B6E702FC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/localization-asset-tables-english(en)_assets_all.bundle
- Size 2KB
- SHA256 2ec5541584e9a8d3c54821d6185853f4698edfe67d3c1630a4885d44cbb538e3
- MD5 34a6c571cf4bb060f28ac1acee466719
- SHA1 1ff6bed041c1dfd84c7c290c972d446254b4f143
- SHA512 c2e4e7c3c3338694cd7a641876862f2c8d73e6e7cd18d2665002a63ea233e97f44528c5225b6117f17c177fe75a9f98da37afa52191023e13fa5b2c94635b8b1
- TLSH
  T1ED41FA0064C90B02D30016BA85A91A571FFBFB8D6A16738134B34E6B5C68B6F5E741FD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/localization-asset-tables-french(fr)_assets_all.bundle
- Size 2KB
- SHA256 70a1d2bf947ad4e4f37b827894fdb2afa833e98475f019f7b74e1831b99b5693
- MD5 aa94b215d20b1b4d81a652851c6b38f5
- SHA1 3b2e6e7880ad6c6b65d626da7605383f8f2f4760
- SHA512 692e299f9ecbc022b736c6dca9673289c55dd9a3e620a40f2e7b61016bd1c94ec6120225399eb7a45ab08e493cba6b7d1e723cd5cfde15b386c194bd448963bf
- TLSH
  T1DA411A00F552C50BC78A01FF84DD28668CB6E76E5209B6C635B11E1F8C6CDAB4F293A6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/localization-asset-tables-german(de)_assets_all.bundle
- Size 2KB
- SHA256 3d86d8bedc494e0fd0d043089260de5d456edfa02c8ecbcddb40d9d57f26a1d3
- MD5 fa670651ff87e5254e5638dd6ebf96ea
- SHA1 1b000587ced25926059b4cf2189aad72df8a67ef
- SHA512 a0497bbaf8eadce5f8ea974578abba27ad9d90d83914f3549dbb02d9dd31075ca4bc4730db9daac42f6b333b35290c74b9edf2fe5d5ec5fa2709568159a746bc
- TLSH
  T152413A00B552D607C68901FF84CA29264C76D79F5209B6C638B21F1F4C38EAE8F653A6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/localization-asset-tables-japanese(ja)_assets_all.bundle
- Size 2KB
- SHA256 47cd65a9cad294448f9e73c6ec9fd03a38a697d862cec56b1a547d73d52b06e4
- MD5 1d6ba5166d8cfc3c178814e4bee509b2
- SHA1 fa27f5ee5ae4606a2937f298f96c3a1edcce2f8d
- SHA512 36c6d4ba3c146028a055a651a301276ed8cff141e61d9b815224d30451543cb4eb78bd1b200a1f7f5f2dd6f97c2500c0289837723936b769c0215f0cd084dab5
- TLSH
  T111413A00B141D507C74901BF84D96A264D7AE75E922DB2C338F02F1B4C38EAB9F693A6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/localization-asset-tables-korean(ko)_assets_all.bundle
- Size 2KB
- SHA256 1ed2e81085778c87e3625e2c1ed8f497675f582cae767fda8c0a579e88932b9c
- MD5 d28f72f980820906ace5dc5b0a515355
- SHA1 ef3f0d344d71bce42cbf34124a3ac6c396b4102a
- SHA512 06c7a6c9a6cbb9fcad362164194e44e9b1d7066e63e1d5f1595bbeff8ce7142c738edff6922c13824a93fd42a5e68f81239e0932262b33d603323d5e430b56ec
- TLSH
  T15E411810F602D507CA4D02FF84C929368D76E79E421872C639B21F0B4C3CDAE4F253A6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32