2026 HİLEEE.rar
- SHA256 0642b1e7186ef5afebc65758d1161cfdc1cd79c67371fe1d01a97b353fd553b6
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MASK HİLE/Extreme Injector v4.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
25 signatures
150 seconds
Behavioral task
behavioral2
Sample
MASK HİLE/Extreme Injector v4.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
16 signatures
150 seconds
Behavioral task
behavioral3
Sample
MASK HİLE/Mask2026.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
MASK HİLE/Mask2026.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
MASK HİLE/settings.xml
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral6
Sample
MASK HİLE/settings.xml
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target 2026 HİLEEE.rar
- Size 6.7MB
- Sample260925-19stsaaa33
- SHA256 0642b1e7186ef5afebc65758d1161cfdc1cd79c67371fe1d01a97b353fd553b6
- MD5 f6598c3f69968bee27af2b20a456f192
- SHA1 79c15aba32b5f341bb6eaec2a1083ae348f70de7
- SHA512 18b7b72a48ffdd5029d3598312911bd4d250b204276ec9a64b5866e9d6acc964162f486c74c9e29d4d9f8fc66148ccde61a706f7f36c6dd0686e2a7ff98169c4
- SSDEEP 98304:D/IJrp65+Ic6Jn4YYtZk1Ftv6qQlbMR8qc2AaoSABmOqrrtrymMk7CQVQqcKE52m:wrs+Icqn4YYu6HU8V2AgAYrQ/efXh+b
- TLSH T1FC6633EE7FBB0BED6C486A79599440C71C1A20EAE4686E016C58D73F6CFA5F098C44DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/MASK HİLE/Extreme Injector v4.exe unpack001/MASK HİLE/Mask2026.dll
File Explorer
-
2026 HİLEEE.rar.rar 6.7MB
-
MASK HİLE/Extreme Injector v4.exe.exe 9.5MB
-
MASK HİLE/Mask2026.dll.dll 490KB
-
MASK HİLE/settings.xml4KB
MASK HİLE/Extreme Injector v4.exe
- IMPHASH 9222d372923baed7aa9dfa28449a94ea
- SHA256 4e57af02f430ffdacb81b8b597b251bac12de9c0703fb5325411dc83ca8d8e11
- MD5 ce84b5ced6719ef6680c681e46014400
- SHA1 7960e61fd077596e7d9630fe579ace4842a344e7
- SHA512 cc469fdadc02a8aeef9fccf532e82deefd43bc6bb06adc990951ce2a92a04c3349edd1ea2e4a38f7b933fab4deb42f84916673fad73bf0a7c03861c4446fdd59
- SSDEEP 98304:0bCTz8+F7j9+U22ihIYgOeieNEVJyZlng4p2V:0KzpFOJIEYEVcn1p
- TLSH T115A6E1447551BE5EC3E68C32E4FA1C1C933098A61743E30B653AF695EC5F2B66E803E6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
12872
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\DarkCoderSc\Desktop\Celesty Binder\Stub\STATIC\Stub.pdb
kernel32
CreateFileA
FindResourceA
FreeLibrary
LoadResource
WriteFile
SizeofResource
GetProcAddress
LoadLibraryA
LockResource
EnumResourceNamesA
CloseHandle
FreeResource
GetWindowsDirectoryA
OutputDebugStringA
GetTempPathA
GetModuleHandleW
ExitProcess
DecodePointer
EncodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
HeapFree
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetStdHandle
GetModuleFileNameW
Sleep
HeapSize
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
shell32
ShellExecuteA
SHGetSpecialFolderPathA
Name
.text
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9.5MB
Virtual Size
9.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=158, productName=VS2010 build 30319, version=30319,
count=68, id=170, productName=VS2010 build 30319, version=30319,
count=29, id=171, productName=VS2010 build 30319, version=30319,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=84, id=1, productName=Unmarked objects,
count=3, id=175, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
MASK HİLE/Mask2026.dll
- IMPHASH 168a74307604a1df2e741501fcb4eac4
- SHA256 fe48c8ea90d53060a55296cd4ba6ca8c43db2ba73b8b36fd1f3fe608a282f88f
- MD5 aad8d8a25b0a571d9200b26a9f5950e5
- SHA1 08c1c20bb724dd18d85cbbb19b5ba76263a6b930
- SHA512 3ff9b57894cadc7620ae6781f278084dd6b0bf679e77c75a27bd256ea88c3b380578c19b6064424101986caab0a41618a7447c71688574b6b4f9245f01133022
- SSDEEP 12288:uySG7l9bKcJA4Kw4JpWwvu7oduEMKk3YaDzi:uySG7l9b04EnBvRk3l
- TLSH T17CB46B4170E181B5D09D52B0B5B93B9FAC3A2D88432491C767E0588D8EF06E3B9F7B97
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
402625
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\cheat's\AlNa\new\Release\AlterNative.pdb
kernel32
lstrlenA
lstrcpynA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
QueryPerformanceFrequency
QueryPerformanceCounter
lstrcpyA
FreeLibraryAndExitThread
Sleep
DisableThreadLibraryCalls
CreateThread
CreateDirectoryA
IsBadReadPtr
GetCurrentProcess
TerminateProcess
GetModuleHandleA
FlushInstructionCache
GetProcAddress
lstrcmpA
WritePrivateProfileStringA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
SetLastError
GetPrivateProfileStringA
GetTickCount
InitializeSListHead
VirtualProtect
user32
MessageBoxA
SetWindowLongA
CallWindowProcA
FindWindowA
GetAsyncKeyState
SendInput
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetCursorPos
SetCursorPos
ReleaseCapture
GetClientRect
SetCursor
SetCapture
GetForegroundWindow
IsChild
GetKeyNameTextA
MapVirtualKeyA
GetKeyState
LoadCursorA
ScreenToClient
GetCapture
ClientToScreen
shell32
ShellExecuteA
msvcp140
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAHH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
_File_size
_Unlink
_Remove_dir
_To_wide
_Close_dir
_Open_dir
_Lstat
_Read_dir
_Stat
_To_byte
?_Xinvalid_argument@std@@YAXPBD@Z
?_Winerror_message@std@@YAKKPADK@Z
opengl32
glDepthFunc
glGetFloatv
glPopMatrix
glViewport
glEnableClientState
glPopAttrib
glPolygonMode
glBindTexture
glGenTextures
glVertexPointer
glEnable
glScissor
glDisableClientState
glMatrixMode
glBlendFunc
glLoadIdentity
glTexParameteri
glDeleteTextures
glTexCoordPointer
glTexImage2D
glColorPointer
glDrawElements
glDisable
glPushMatrix
glPixelStorei
glOrtho
glTexEnvi
glGetIntegerv
glDepthRange
glLineWidth
glClearColor
glPushAttrib
imm32
ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext
vcruntime140
_CxxThrowException
_except_handler4_common
__current_exception_context
__current_exception
memcpy
memset
__std_type_info_compare
__std_exception_copy
__std_exception_destroy
strstr
memmove
memchr
__std_terminate
__CxxFrameHandler3
__std_type_info_destroy_list
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
free
api-ms-win-crt-utility-l1-1-0
rand
qsort
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_crt_atexit
_wassert
_seh_filter_dll
_configure_narrow_argv
_initterm_e
_initterm
_cexit
terminate
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
api-ms-win-crt-filesystem-l1-1-0
_access
api-ms-win-crt-convert-l1-1-0
atoi
atof
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
fflush
fclose
__stdio_common_vsscanf
ftell
__stdio_common_vsprintf_s
fread
__stdio_common_vsprintf
_wfopen
fwrite
fseek
__stdio_common_vfprintf
api-ms-win-crt-math-l1-1-0
roundf
_libm_sse2_sin_precise
_libm_sse2_pow_precise
_libm_sse2_log10_precise
_libm_sse2_cos_precise
_libm_sse2_acos_precise
ceil
_libm_sse2_sqrt_precise
floor
_fdclass
_dclass
_CIfmod
_CIatan2
_libm_sse2_tan_precise
api-ms-win-crt-time-l1-1-0
_time64
strftime
_localtime64
api-ms-win-crt-string-l1-1-0
strncpy
api-ms-win-crt-environment-l1-1-0
getenv
Name
.text
Size
396KB
Virtual Size
395KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
66KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
152KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=261, version=28117,
count=10, id=260, version=28117,
count=10, id=259, version=28117,
count=4, id=257, version=28117,
count=2, id=29, version=9254,
count=11, id=257, version=26715,
count=210, id=1, productName=Unmarked objects,
count=31, id=265, version=28315,
count=1, id=255, productName=VS2019 v16.4.3 build 28315, version=28315,
count=1, id=258, productName=VS2019 v16.4.3 build 28315, version=28315,
MASK HİLE/settings.xml
- SHA256 a69c2d9070942a2c91042969877adf7feae9556e293702d36f8ccaeee79c5d25
- MD5 84480fb93f1fd3bc7fbb3caa987d967b
- SHA1 49a0f34c8a5ddb0d403b95fd54ee330a9c896e47
- SHA512 a0c7954c7b1ee0b18d4eb8ec72afe4130b522fc08933ef6b72ff9c5c4c4cbaf60e7cce615b1b369aaacdb13ef53d4cf5dfad7dab6328a309ac48ca649666bff6
- SSDEEP 96:zMaOpD0KapW/9Fz9KapW/9CKapW/9FuKapW/9CKapW/9FuKapW/9LxQxJjy3u8Xm:staNzcJjv8XhS+vcL
- TLSH T1B6A16ED06BCB350CF6EF629F5339A607C96C4092833238E0B46C521A6F2B0576B63C32
- MD5 SHA1 SHA512 SSDEEP TLSH