Analysis
- user interaction
yes - max time kernel
563s - max time network
577s - platform
windows10-2004_x64 - resource
win10v2004-20260513-es - resource tags
- submitted
10/09/2026, 14:06
General
- Target Scritchy-Scratchy-SteamRIP.com.rar
- Size 211.0MB
- Sample260910-rew4aaysdv
- SHA256 fd358eacff1fb7abd4b3265d4226ccf994b1bac62fba6454d6f787b17f9b057c
Malware Config
Signatures
- Executes dropped EXE 3 IoCs
- Loads dropped DLL 5 IoCs
- Checks SCSI registry key(s) 3 TTPs 4 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 4 IoCs
Processor information is often read in order to detect sandboxing environments.
- Modifies registry class 2 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of AdjustPrivilegeToken 4 IoCs
- Suspicious use of FindShellTrayWindow 3 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Scritchy-Scratchy-SteamRIP.com.rar"1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\7zO863DD2A8\ScritchyScratchy.exe"C:\Users\Admin\AppData\Local\Temp\7zO863DD2A8\ScritchyScratchy.exe"2⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Desktop\ScritchyScratchy.exe"C:\Users\Admin\Desktop\ScritchyScratchy.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks SCSI registry key(s)
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\Desktop\UnityCrashHandler64.exe"C:\Users\Admin\Desktop\UnityCrashHandler64.exe" --attach 1432 16481884610562⤵
- Executes dropped EXE
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x460 0x4581⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
c
s
ScritchyScratchy.exe
configs.user.ini
steam_api64.dll
unity default resources
unity_builtin_extra
RuntimeInitializeOnLoads.json
ScriptingAssemblies.json
UnityServicesProjectConfiguration.json
bb093789c87317d19f291a3dbf0049dd_monoscripts_84066db7ab2948e33749b5cd3531c03f.bundle
localization-asset-tables-spanish(es)_assets_all.bundle
localization-assets-shared_assets_all.bundle
localization-locales_assets_all.bundle
localization-string-tables-spanish(es)_assets_all.bundle
catalog.bin
settings.json
app.info
boot.config
globalgamemanagers
globalgamemanagers.assets
globalgamemanagers.assets.resS
global-metadata.dat
mscorlib.dll-resources.dat
level0
level1
level2
resources.assets
resources.assets.resS
resources.resource
sharedassets0.assets
sharedassets1.assets
sharedassets1.assets.resS
sharedassets2.assets
sharedassets2.assets.resS
UnityCrashHandler64.exe
UnityPlayer.dll
baselib.dll
memory/1432-237-0x0000018195E10000-0x000001819651F000-memory.dmp
memory/1432-243-0x0000018195E10000-0x000001819651F000-memory.dmp
memory/1432-249-0x0000018195E10000-0x000001819651F000-memory.dmp
memory/1432-255-0x0000018195E10000-0x000001819651F000-memory.dmp
memory/1432-231-0x0000018195E10000-0x000001819651F000-memory.dmp
memory/1432-225-0x0000018195E10000-0x000001819651F000-memory.dmp
memory/1432-265-0x0000018195E10000-0x000001819651F000-memory.dmp