Analysis
- max time kernel
150s - max time network
87s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/09/2026, 19:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MelonLoader.Installer.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
MelonLoader.Installer.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target MelonLoader.Installer.exe
- Size 21.6MB
- Sample260916-yhzrxadd49
- SHA256 27b9ec8d7e937e75333f32a4c8b38cb448b389cba9bd4eec32adfe67c96d0232
- MD5 8f55b503fb515a2b93b9765de5b6d392
- SHA1 5d5bd25f04e1f8f8cf43bccb9779abf1402a4ea8
- SHA512 bcfc1f480d81640f9304b16b2ad6146a70bb7e42abab25ac33e9d813a9680706777982a84b52ccdeaef9e1185810782879c1fd97ea72f37e4ce49df20a33d338
- SSDEEP 393216:b+ER4mLnPAPMSGkv4PFqoITGMBlvvXfGHTTSOgH99jhbcUA54Wxr/2MAbtL/e:6eV2MMoYBlvvPGPSLR8ruZ9/e
- TLSH T1C937F157E2F900E8E57BD0B8C6574527EBB13855133097EB56A08A6A2F33BE06E3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 2764 MelonLoader.Installer.exe 2764 MelonLoader.Installer.exe 2764 MelonLoader.Installer.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2764 MelonLoader.Installer.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2764 MelonLoader.Installer.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\MelonLoader.Installer\RxHvaxYTQ7BH\av_libglesv2.dll
- Size 5.2MB
- SHA256 9b203e40323b49dad29546a52b8b67d200bba8ff4cab9709a79cede23ba847d4
- MD5 11a4a07f31e4a91fff678c019b7736af
- SHA1 9912e11aa9c351be136474e0d0975e7964b1e124
- SHA512 4197cd706c7abb4782f05ba73177a018299365060c6368305b030f21733f3209545bc7d8f61968c79b24088ced4acc4eda92044821fb8347c3370bc6925a4bf1
- SSDEEP 49152:FJ2uagzq2YgAoS2tNydAOlzwn56aCqQ2iUAqC2rCnsZ1LT/Tq2XEoxEf6m8s47eF:9PTjAurCnsZ5T/lXEonmn56AL
- TLSH T104467C03F39690DEC409D2B9874B8622F776B88507257ADF229497242F77FD06B3A724
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\MelonLoader.Installer\RxHvaxYTQ7BH\libHarfBuzzSharp.dll
- Size 1.7MB
- SHA256 eb76238c9e8e41d44b5a5b18167c4c5b39ca5db4277af5dbe92d730f0fc14a7d
- MD5 e0c86bbd88d6b8f5643c1ab1c050a4ee
- SHA1 f6c72b1fd89d0f9e3d7825a0450ae0c0af092c5a
- SHA512 023a1054d7516ebb99b46ca3f9a17b1ee00e55a46356586513fdd45c42bd6ccca16139a8e93e7a9bc533afa5abed121cb5fd40474bfb27bca22da3598ebef694
- SSDEEP 49152:MG+tDvarn9O+3KVv/s0upzEpOqw8k25Pj4LneMdTaGVW:FS2be5Pp
- TLSH T1E3859E4AF2AA10E9D9BFC074C666950BE7A274050314DFEF65E08A95EF23EF5167E300
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\MelonLoader.Installer\RxHvaxYTQ7BH\libSkiaSharp.dll
- Size 9.0MB
- SHA256 9a0d95e8caaa852c70d085af6a40a744242172ad9ea3fd6bc7599875a8a1dbcd
- MD5 ef1fabce43fe32ca83260481253f5476
- SHA1 ad988af9826e5aacc7b8e5ed6d220b229d70060e
- SHA512 f73b56742e43b169177ff49f639c50f98a417f91175c70f7348bde1c7570c2838c181a59b628b003eb2618d75da920a449a724cccaec1dae8b9a80d5aac386f6
- SSDEEP 98304:4GKXmtfLM9j2KAdTzwlrdyc8HgGTngmY6+o/:cXmlLMvGsIaGjb
- TLSH T19B964A03B66B64ACC04AC474834B99665E2038CB0B35BCEF52C5A1393FB9BF46F79615
- MD5 SHA1 SHA512 SSDEEP TLSH