2a98c40acb2a46d30cde89f3072c039b641dbdf977985f9e82a040615f1b2381 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

coopdx_updater.exe

windows10-2004-x64

7

coopdx_updater.exe

windows11-ltsc_2024-x64

7

discord_game_sdk.dll

windows10-2004-x64

1

discord_game_sdk.dll

windows11-ltsc_2024-x64

1

mods/arena...ag.bat

windows10-2004-x64

3

mods/arena...ag.bat

windows11-ltsc_2024-x64

3

mods/arena...er.bat

windows10-2004-x64

3

mods/arena...er.bat

windows11-ltsc_2024-x64

3

mods/arena/main.bat

windows10-2004-x64

3

mods/arena/main.bat

windows11-ltsc_2024-x64

3

mods/cheats.js

windows10-2004-x64

3

mods/cheats.js

windows11-ltsc_2024-x64

3

mods/day-n...ain.js

windows10-2004-x64

3

mods/day-n...ain.js

windows11-ltsc_2024-x64

3

mods/hide-...ek.bat

windows10-2004-x64

3

mods/hide-...ek.bat

windows11-ltsc_2024-x64

3

mods/perso...-ex.js

windows10-2004-x64

3

mods/perso...-ex.js

windows11-ltsc_2024-x64

3

mods/sm74/...ry.ps1

windows10-2004-x64

6

mods/sm74/...ry.ps1

windows11-ltsc_2024-x64

6

mods/star-...pes.js

windows10-2004-x64

3

mods/star-...pes.js

windows11-ltsc_2024-x64

3

sm64coopdx.exe

windows10-2004-x64

1

sm64coopdx.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
sm64coopdx_Windows.zip
Size 39.9MB
Sample261002-23m6dsvdnd
SHA256 2a98c40acb2a46d30cde89f3072c039b641dbdf977985f9e82a040615f1b2381
MD5 bc803341ad1e9dc1df9758b2097337e5
SHA1 ed5f8758ef44dd743b9f5601efaa6bc5bb372789
SHA512 7c55e3d1605ad4695d34efbf52291d63955b6b6bc3447f7d1784cd04265b105cc7ceea8239ca7271b69fdee740684d4fde60995dce9f6f479121855996fe674f
SSDEEP 786432:5bqFVz2pfjAbQnzNIdpp6jBrfZ5EkHHISJM5gYYcXk376txC5KEFkVVjxD6k:5bqFVzCfc8p6p6FrfgyISJM5/cGg5KEc
TLSH
T192973356DD0D0874E89F9C328583DF5D586E4492CE6311883DE9A3C39D1B79AFAE0B0E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

coopdx_updater.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

coopdx_updater.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

Behavioral task

behavioral3

Sample

discord_game_sdk.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

discord_game_sdk.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

mods/arena/arena-flag.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

mods/arena/arena-flag.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

mods/arena/arena-player.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

mods/arena/arena-player.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

mods/arena/main.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

mods/arena/main.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

mods/cheats.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

mods/cheats.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

mods/day-night-cycle/main.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

mods/day-night-cycle/main.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

mods/hide-and-seek.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

mods/hide-and-seek.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

mods/personal-starcount-ex.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

mods/personal-starcount-ex.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

mods/sm74/levels/level_totwc_entry.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

mods/sm74/levels/level_totwc_entry.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

mods/star-road/bhv_dupes.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

mods/star-road/bhv_dupes.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

sm64coopdx.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

sm64coopdx.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  coopdx_updater.exe
- Size 5.1MB
- SHA256 711a51b7c1c3ed354737d5e3b6eaae4ed7543e3e8555a1a919362c8ef95db48d
- MD5 5debafe12e64a49eb80ea9779970e347
- SHA1 c80b5de69a67e098e73c3a0fa7bb406e8ddd2217
- SHA512 48cd18368f68b14168492bfcafe897ec32ea7a87d3e96a255b6d3551287bedb3b1b6ce0b088c251cff23b8d2958553c0d4b995890d04403a1bdba0c3215afba8
- SSDEEP 49152:JfxkgmmTsZdKWmakD4UxR5BUOtCkHMRjkqG4gAm7UE1rQhWRhZ2IB/u+//lsJO6g:JNeKPRP1XZ7NLu+//lsJxAb1
- TLSH
  T167368D0AA3D409E6D123C634CA65C332DB71B8525739CB4F15A5E74B2F33A909F2F629
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2
- Target
  discord_game_sdk.dll
- Size 3.7MB
- SHA256 527768710ddb0953fce5eb1700c2566b6451135d76f1d0610b63907cd5ba94c5
- MD5 d8cc567718550ae35c1566c3315b90df
- SHA1 e5d8120a8a8583fe7e3177ae7d8fe797c002f263
- SHA512 5e1d72bbb466d032596147dd1a90f5ebcaa82d3d56ee7a0b1aa3a37d4bb42e1fcb510b269451a1b9c7f3b8a1c18b1c5f530b200f2fbbe2ec990b4e1c12e6f5e8
- SSDEEP 49152:cxytJCv8RbSimYQSaKCZhYtOVt7CPjitem2vUkcWDnVf6OuBimHdXopJErae4/KC:lD400amm+8m4
- TLSH
  T12B0648213A56647CC1ABC4B483874A725E3234CB1B35BAFF45D156782F69AF46F3C228
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  mods/arena/arena-flag.lua
- Size 11KB
- SHA256 70476fb267e37144750a149759bc73061ae177919db41851262af4cd85399e19
- MD5 5430bb0bcd0a2e2d5ceb01c96a941052
- SHA1 503dab24e835f92af86a1e832c5303095ca04e51
- SHA512 ac4d43f9c462f69ffd54e78405d937ffc0ff43c0cc3c68fd4fabc998b0fa02e1ba958ef818c737c31eb2c6df835e293e485a36d47b77487a6e952a42d91f3ba5
- SSDEEP 96:x2YR6qQVOhR6GT6pDjR3rnlnySoOFjgicYjhXIswKCIw3wQq8Jt9Q1/WZ8Gu6Fjy:x2YRVQ/nnySJp/+jeQeVy3Ob
- TLSH
  T19432ED8B714F36F95AF7870C4A4A4A07D7224983331F2575B95C0AC13FB125C97B0ABA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  mods/arena/arena-player.lua
- Size 19KB
- SHA256 e3d199e9b35c372308465e5669df49ca1469fa3b192cd4bc1c24d06a0cf79b25
- MD5 de041b005128b8f4d07b9a8e5d73dffb
- SHA1 283a4ba5b54339d564691388bbd44cab1b3b6b8f
- SHA512 05a8bd3ce2b4d23ce98914cd71f6c4ff221c3a1a9f693c1ec665ee7be1c4d2907de4dc5e2ea48990770c7a2c04eac80f70f671258dc18a80fe37f679c3f2bae3
- SSDEEP 192:ffa5s4fDTPgrLMXPlARxDdO5TTFvwqixen6g6+bfdfoCgnHo6X6:HkMwildO5Thvw268mCYXX6
- TLSH
  T15C9243133B07527494FBC5981A874801E376840396699AB7B68C72C93FF926C8FFC766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  mods/arena/main.lua
- Size 18KB
- SHA256 0b04e9b7c30d875a730614a50cb23b61a2273f1f59cc70c40e6dd374b358526e
- MD5 c9e7de3ed8abebd325d010dc387aa549
- SHA1 ea339ca922910e4906c1ad589390b96f8ee9571f
- SHA512 0f2ceef760a6bbdd5be524dc63d1b9d9c129cb53a3de5ddc9a1a0d2c95aaafaeff68ea3e2c9e6cd0dd0df70db826c4ead6a35cfaa201c3a60325e36ecb9a2e71
- SSDEEP 384:/MF+4tq+8Roonu+Um6KycJVLuJvM4jpmKHDp9MxxuSa7o1oK:/PSonuXm68LuJvM4jpmKHDp9Mxxud7SB
- TLSH
  T10A925269675B2134A4F3DA5BBC4B580BF76206432B0D6675B85C01963FB4A1CE2F0BBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  mods/cheats.lua
- Size 11KB
- SHA256 08f46315455bb9da3880874d54d600e4614fd9801fbf1b693d95091af92f2a41
- MD5 961047de8eaadb72d51fd51e8e392c79
- SHA1 232e0eb872302844ba49b168361405683db18982
- SHA512 eb020dfe88539298edba0c8668771a972e0f522c0fd9216cae2ed4b75c03fc854baee881585cc76a1832469b43623566698b1ef5806933f48f5ebc500ae88e25
- SSDEEP 192:YM7yI8u/CXD8C2mQUrdnCz+AQ2u7wZ1e/E6fdW/xMFiMq3TSJx6vBlGguePUTGO1:YM7UxzV9IBQ2u7wZ1ecpawM4poguiUl
- TLSH
  T1E232701BF90BA7314CB39508448FA406F264222BB63D55A779BC55A4AF710BC53FEA3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  mods/day-night-cycle/main.lua
- Size 33KB
- SHA256 f7af9b51cf83eb5956d357a8a4db91f145349845c08e175be5e96853007b14e6
- MD5 064172cd2866424ff3986d2453ab7e6e
- SHA1 e0066f5a21071bc7b60582129fd6319f03d5c6c0
- SHA512 de2357546f469c16058421d5f9b229f0ce4cd4257b06cc963c4cf08d20afbe6d6ea6098524f96b1e709cdfb5ac7f8147859f6e25e62ef1f7fc97f2cc4fbd327c
- SSDEEP 768:Kt3VVCgmq+HmqP7qh/D2BguxWVkcO+d9fT/FhqWZEzfUTBjHul6qgQEO6/BvRT44:Kk169ONsdBTFfgZ8f
- TLSH
  T17CF2B87A664663911CF78EBF6C576107E31012831839263A389C92E93FB1D7D90F89F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  mods/hide-and-seek.lua
- Size 20KB
- SHA256 876c9abcec99f842a901dd1ec8fd6fa42ea9de612acd28c95bbf0a28216d1bed
- MD5 e7c201008a21dac7dd8781674e4613ab
- SHA1 bfa574df464c6c21568ed9a4f22dc5dcc198451a
- SHA512 7e314d0a8d0cd8a21227dd9acf529a7ec64a15c4e3439af700bce99dc8e8f1bd77977ae34648d949bc92fe3d47d658eefdb6009f46a7d634091de7723803c8a4
- SSDEEP 384:O1bsmDXfcE2/Sqir1VX/srSDuS/yrPTB/NXKC5CgceY63Q7aY/AXWSnL+zVHb0Zr:OCm7fcE63cjvsrmuTPTB/NXKC5CLDUQw
- TLSH
  T12492A8162B1B3228D8F6C48B68CB2416E3741703670D9A75741C62D72F789AD93FDFA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  mods/personal-starcount-ex.lua
- Size 13KB
- SHA256 be7a46ef8d395e1ee32ea463a66eb1424937a1bb8789ccd1c4987170bb47f577
- MD5 e688409362f5db0bdfbc1d38345d3b39
- SHA1 51da5e41d637663b0ce9666a7189e98a2c986751
- SHA512 98e52ace9aab730ba3732120bd6914522bfe0e3309ab85491bc5dd1f14aacb91b1cf6f82975632d4d4be7acb11ca415e1d13693dcb35f0ef49fe029d2d15e54b
- SSDEEP 384:RF7AlMHeSLIobXwZ7PBCxEQlhN6GlqGBROblorzpbDeAD1A8+lrA2eHvcnirIG:r7ASHeSkai7PBCxEQlhNXlvBQblo5O0h
- TLSH
  T1145221065D1742329EB3C64AF88E36A7E33442271216F44E35CC56A33FB657B85EEB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  mods/sm74/levels/level_totwc_entry.lvl
- Size 56KB
- SHA256 640109ff54aea107bed87433dff0827588ff165713cd6d7db5d70c00f074f972
- MD5 21c9190e69672731a5c38aab5692e83a
- SHA1 9d721d25393d3f15277361ee9241a97fefff0e37
- SHA512 837f92bf6f2af5ea50ee09969278b7b51cae87a1723a9205e14ac359372e28231028c0884490170ef8af65a5dce9767b837645fcfe9a228da2823ba151cbd8cd
- SSDEEP 1536:c22xgTfk8iL6J4Bn/5NBnHM/q1diYmS9JBfoERR:c2JT/iL6J4B/Bs69z9JWoR
- TLSH
  T1A543F18B5199A9B025EFEF6E741E06FF7D5FF1E7044403256288B1530076C816EACAFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19 behavioral20
- Target
  mods/star-road/bhv_dupes.lua
- Size 8KB
- SHA256 ca1926a1de8d1bbed9e73c0e49ea7646873cea3c5aa2c58e32a13fc3f08eec1d
- MD5 35f94ef993d37843fe0a94b330db1b2f
- SHA1 b9194d5c28c2d2219490bc3e3223c39599e954fb
- SHA512 939f40178be293397902c7c5a4c65de6527c69adee91e72cbbe65fe350c8309035f6ed42f071cb453cd1257b2b558b1e738cdec78e471f4d4a9d98fe5867e52a
- SSDEEP 96:HuVuGRyPjirY3DuWy25fXdkiu8tl08CWDRnYFfgajh2VkyreeGFTsvLk3RFDi:3zfF0ZWDRJ7fKsvo3RFDi
- TLSH
  T1F41214036E17D0A349FBD3B2448F1205C662513B222AD49C75ECADC52F750A92F9EE7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  sm64coopdx.exe
- Size 53.4MB
- SHA256 80e934fdf113ab7ba1ec3cc1d1fde07fc0e618b6c61f48727289d31c66216be7
- MD5 a71c573e603079fff85a71090bfea922
- SHA1 03b7748962c7e0e169629bf6e698a151b2a6e928
- SHA512 14f6354a7b499a2081e7e62e39ae41ba3f3223ea5501a82aa07868d0eb46d90996c7bd55a1cc046d40a24a267ea608a7f7bfe110568beb4696a434e4f0559caf
- SSDEEP 393216:PobtUdTSLfSE2HMxwk8iu9PBmNYVwsasZFHUzfj:gbtURSLfSlsxpu9pmNYVwsasZFHUzL
- TLSH
  T13BC7D2DAB752C1B8C9568131CD76D2FBA5217C5FCE211B2B25C0BF2F3E72A40CA56924
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

© 2018-2026

Terms | Privacy