Overview
overview
3Static
static
3Fnaf World Ultra.exe
windows10-2004-x64
3Fnaf World Ultra.exe
windows11-ltsc_2024-x64
3Modules/Android.dll
windows10-2004-x64
3Modules/Android.dll
windows11-ltsc_2024-x64
3Modules/DRPC.dll
windows10-2004-x64
3Modules/DRPC.dll
windows11-ltsc_2024-x64
3Modules/Fo...er.dll
windows10-2004-x64
3Modules/Fo...er.dll
windows11-ltsc_2024-x64
3Modules/InAndOut.dll
windows10-2004-x64
3Modules/InAndOut.dll
windows11-ltsc_2024-x64
3Modules/KcCursor.dll
windows10-2004-x64
3Modules/KcCursor.dll
windows11-ltsc_2024-x64
3Modules/Layer.dll
windows10-2004-x64
3Modules/Layer.dll
windows11-ltsc_2024-x64
3Modules/Mu...ch.dll
windows10-2004-x64
3Modules/Mu...ch.dll
windows11-ltsc_2024-x64
3Modules/aviflt.dll
windows10-2004-x64
3Modules/aviflt.dll
windows11-ltsc_2024-x64
3Modules/bmpflt.dll
windows10-2004-x64
3Modules/bmpflt.dll
windows11-ltsc_2024-x64
3Modules/cctrans.dll
windows10-2004-x64
3Modules/cctrans.dll
windows11-ltsc_2024-x64
3Modules/cl...ar.dll
windows10-2004-x64
3Modules/cl...ar.dll
windows11-ltsc_2024-x64
3Modules/fliflt.dll
windows10-2004-x64
3Modules/fliflt.dll
windows11-ltsc_2024-x64
3Modules/fontembed.dll
windows10-2004-x64
3Modules/fontembed.dll
windows11-ltsc_2024-x64
3Modules/gifflt.dll
windows10-2004-x64
3Modules/gifflt.dll
windows11-ltsc_2024-x64
3Modules/jpgflt.dll
windows10-2004-x64
3Modules/jpgflt.dll
windows11-ltsc_2024-x64
3General
- Target fnaf-world-ultra.7z
- Size 436.3MB
- Sample261011-krdddaywbs
- SHA256 88aa95762a6d0d88fd815783f58b14e8fd340c8877142c366a23adc54eb57e15
- MD5 5b3c9b9cfd077b85fc4c2511b1822401
- SHA1 af3b362c09cfec2825f4cf77a95b6576f40cb5fe
- SHA512 b0479ce6d627298db5237a208450d514157456fae8b7c85ece61ad8c4eca31ac2f1666f91cc45a83869237c859a0d70728fb363d5f6fec18f375ca4149275a53
- SSDEEP 12582912:bbiUlRUuFf2n4Dysykp+YtkQcV/PqfHN5JTngXD/JO:fbpZu4eIvkQ6EHP5L
- TLSH T13029331416405EE6852B164E43CE2453F8B4ADAC99868DF77F8E44D83ADF73B392C18B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Fnaf World Ultra.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Fnaf World Ultra.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Modules/Android.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Modules/Android.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Modules/DRPC.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Modules/DRPC.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Modules/FontPacker.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
Modules/FontPacker.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Modules/InAndOut.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Modules/InAndOut.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
Modules/KcCursor.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
Modules/KcCursor.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
Modules/Layer.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
Modules/Layer.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
Modules/MultipleTouch.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
Modules/MultipleTouch.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
Modules/aviflt.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
Modules/aviflt.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
Modules/bmpflt.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
Modules/bmpflt.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
Modules/cctrans.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
Modules/cctrans.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
Modules/clickteam-circular.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
Modules/clickteam-circular.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
Modules/fliflt.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
Modules/fliflt.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
Modules/fontembed.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
Modules/fontembed.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
Modules/gifflt.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
Modules/gifflt.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
Modules/jpgflt.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
Modules/jpgflt.dll
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target Fnaf World Ultra.exe
- Size 939KB
- SHA256 f09a9397c3316c4443712bc36891b80ce42845f9065b9b1f1b1f32efc0741ae9
- MD5 1e2377a280ab310b0afc69698efff8c6
- SHA1 d51506ce067a5bdddca672794dd7cc5ebe845679
- SHA512 81dcbe30d58e35d177078f5cd206417421ba1622745e4429a33e26b49d7d5febbace2eae891197e5776300dbd4ddf73a11333157e34025aefb45560b47266d4e
- SSDEEP 12288:eacp1LPvpmdRi9HWd+OD07TecFVnScX3FW02JhZIdXhVbd8vSSn8/:eF1LCp0hxW02JhZId2PY
- TLSH T1E7152973E47560ADFAE508349378C976243D98189B6D02D38EC0AEFE7C60DC5AD3A563
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/Android.mfx
- Size 129KB
- SHA256 69369bfc2772841e292b79d9c17ba3f855a4dc0652a61e4ec71f29d1c1b4e044
- MD5 f77d2502f0e60c9bab9470c0e4a1a127
- SHA1 557b146a5ba0b7b09ef85c9461ab0faa34fddf46
- SHA512 a190ec98d35c910a79cff84829558ce88530af05460f8cc53abbc36d6f227a61259908d01c0d1fadf0bda336a59f1cc3cc9ab8d5f2f4690425b39d68a558ebee
- SSDEEP 3072:UbOHpWCmObGPFt/zSipM+cRhexZ3ITKR:2OH1mgG9t/3pMo4KR
- TLSH T198D3692236D0D071D4BE063D19248A264B7EBE72DAB49C47B79C5A4D5F742C0EF26B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/DRPC.mfx
- Size 865KB
- SHA256 48d5e7246d3e0b2e1da65f5307a1c920e56d372cb2fb112db70ce51d87afeceb
- MD5 eed9557c1f52908027e672a4e1c2282d
- SHA1 3a9bfc8f04638ff0eab599f5b1e14b3eeb25bb8f
- SHA512 47662c59ace0d416b0aba032cfc84ae10f903fc83338bdb1214204cdf0097888110ad5040336d691c4896a0c1f1fc4bc72ecda2c9de14382e08928b79727b069
- SSDEEP 24576:vnTIrjNZMHz1JOYti/T7N345ivEilDrhJ35MI2v+G:vnTIXNZMHz1JOYU545ibf7P2+G
- TLSH T1B6159D213D85C033CB6F31304C28F76796BEA9720E329ADB779C267E2F70582A625557
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/FontPacker.mfx
- Size 336KB
- SHA256 b8a015a6ed17ab139af609499b2698bf4a1209fcf0c6627959d84684c175d5bb
- MD5 5b67c71f84089cd352cfb73a3ddcbca5
- SHA1 188a1420a5575903757f3dfd427c66b37802d911
- SHA512 317f660db33d2470ffc13fae29e0beb4aec76fc069fd1e4e0869746a9b8ef4b33511ce2750dae7c1863ff6656cdedd82c8dad8188ac6123e4aa2815519669160
- SSDEEP 6144:3cun79OAqLEB4e4s+Wx8+nTZBfkOxVp1n0LiV47zSU:3cu5eEB4e0We+TZB5Vp10o4qU
- TLSH T13F748D11B9C08031C27B38345978E6B22EADB8312D74DB8F5798097A5F74591FA39B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/InAndOut.mvx
- Size 68KB
- SHA256 678073eea715bdb105d7316a2ccbdfbf6185b6bd23c3cd9528ebfeafb9ade716
- MD5 e0a46539bf68ea083867457c962b0edb
- SHA1 1345276d8a0e2ffbc90bfd7a1aa7f75d9b908b77
- SHA512 d23a7e70602bdcd5e3de488c86d83a97038762fa42d588d385cd0ef00a60f32b2344c730a3208352cd0b7fd9de9534e6e8527e8d1e9a5bb36da315724e602e21
- SSDEEP 768:2orQYHSHsbXIQGQTZ0g6yaeRwh2To3PrFPb/5ZiB9ov9/XoKxRrGolluXGCgVEvN:2ocYcNQTZbXwioTFPT9PdRlggWvY
- TLSH T1CB637D1276E180B2D16F117519A54B3BA6BEBD100BF589874FA4EDDE5F30AE0C53A313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/KcCursor.mfx
- Size 36KB
- SHA256 947a3320e1d7d5d48dd4e86c76238c37f9e67388ceb24732023c47802733f873
- MD5 7f13cd709928cf74d10925042a674e1e
- SHA1 3e831d6b162a606368ed173807fe75029052e0ed
- SHA512 9a4c3b6420f70f5bbd994091fa6634bbb05f7b8e891bab71556a703c768870ef8271b27b88749d9eddbd006dfeaed0fb86950543f347ef71c27dfa4920040001
- SSDEEP 192:xF0hMD06Tll97BR8XnshWbv+pgt77wZOUQesSRaD/IPQ+9s9rUa0KGP6ZWlLbxY:b06DRTdXPQ+9Ra3GP6ZS
- TLSH T1E8F28622E3B58069F4B6AB750DBA4231A736FDA39939DF070290FA0D6D31791AC14733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/Layer.mfx
- Size 140KB
- SHA256 b8612eb76d8967e49e9ba74a2cbd557096bacfbdb2c6e84d69d381b76d42052e
- MD5 ef12eb1b8b4a804bca741734787fdfd2
- SHA1 43b8f7571067bfd2d7762f6d5c69fb6978894f37
- SHA512 55c2aa823ff69bea48948b04912e1d31465d9a9817ef53fda2957d44451d58fdb2efcf3c40c8431d26d8663f70729e57bbddaeca848ab4d6658f0d5b211d2f2d
- SSDEEP 3072:JLkEGK6OJm7Y+VvdRTOIXsR6hkCXHip+glO2kkM/9W0Ol1OtKweNmfx6TJ:FkEZ5J8jVvSIcR1Cyp463fN
- TLSH T1AAE38C11B9D18032E9A71A31497C9A711AADB910BFB4DDDF535C523D0F703D0AA38BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/MultipleTouch.mfx
- Size 48KB
- SHA256 019f2e914559265745cf2e001deda58f54410d6df0313de4a64e71b4ea2efc2b
- MD5 9b13c38bf349aa5b74e80a3cdd7fd145
- SHA1 db7966a98ad70408c552c30933a9f8c096934e5d
- SHA512 431b06ea6bd4b152e78eb805153309fe8092e5437e12bc8b323f66b495e19a32ed16d5f478d70307716e9d123b5d768cd8dcc15cd13df8e0ed07eebbf5f563ec
- SSDEEP 768:ll84Q4o1jJhQDDoyZTve7NqvwTVJzaZ3djCEYa:lG4QZFhQDDDTMNuu
- TLSH T10023F81297F401B4E9A16E7A547E2236EE39FD534839D12B8310F97E2E73600EE18763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/aviflt.ift
- Size 24KB
- SHA256 cb5f43c24df39973b983b7fda4abcef60f425061d880c7dd9514b501b84790f8
- MD5 97b3b613ed1f994389b1a963b6e781c9
- SHA1 13b38afdfd6ea283a2012bb8e5c652e13175440c
- SHA512 97cb23d76d926fe03573c127862b738217f91b0cb61517df7514597fdc50844ccb3d4f799b9a8b23b8da37a2b802ee2bd1e56b5e9fdb699bc3d511868ffd417c
- SSDEEP 96:MPg8rc9zp9HvjsedGNPUNAjtPq8y37QgavioyUuBdqaIZiMUj4epz5WY8FfH:MdcBvvjsedaPUctzyihSIZ80+dWBf
- TLSH T1D9B2B539B38205ABFF1A0E71989733B35730F9B09B9682D75F10E98D2C61613D819B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/bmpflt.ift
- Size 24KB
- SHA256 02d03c4847e34c9029cca452e37ada5ef40167406d4474a9393e11aace024c3d
- MD5 a73a9c8e91ef95cf4eabadf8f7334abf
- SHA1 763195d19f5467c593ab638dbdd0a0277a3048f3
- SHA512 cb5f451d8e637d466fec2dde865d5daac5a15ea44b6e2ce0506070c123ffad506f5f9739a9ea440f01c8f331cc9d42802cc14f82e1252ac667fa7318bcdf3acb
- SSDEEP 96:vw4ZE3IPfFPLM2MF9dDm47Rz9gB+pOvi6FXKxQM5/b:vw+E3IPNK9JP6EgqvGW/b
- TLSH T127B2D532A7D605B2EE978F3116A263325271FAF01BA0D3C74F94EA1E4D36443E8357A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/cctrans.dll
- Size 141KB
- SHA256 55e75e784e436cccd978192fba869656f879f0f126e99b375c3849c99872ec56
- MD5 ce3a36f85d2ea504b6d19c5f366c3f47
- SHA1 972629c730b65c17ac2c751aafeb612d0c7432f2
- SHA512 c6df293b4373552c3165ac27f2070973a8278bc72001a8c10f300ea30699a03811dc6a84864ff22aaa2b35d1ec75d41ceb2a8fee85b5404d4a5bbfd8333f248c
- SSDEEP 3072:EjqYJijkm4k6wR/NQzjFEgYfriCJ+7NgGWb9UetPTztsYsRn:UqoY4sNQFE1fJZNTZxg
- TLSH T11FE35B00BAA08830E6FB543D08B5DBA52B7E79A4CFB08DDB2B54177D4E702C15F35A1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/clickteam-circular.mvx
- Size 28KB
- SHA256 671a01a39fa56a32fc0a43b16038d3077202734a7beacd50d73439011a74a4cb
- MD5 670cfc229784a242beb960a430ae9764
- SHA1 9818a8a255e58e28c1e7617aa7ab38f29067e4f5
- SHA512 7eb59b4391fed479803c2c2ba075d3fa4581473495f2458b0a86fc3d27f8b7e56a012b920bf2b5f1697b4eb498c8d16de17ebed9f10eb55686048cd4f96df1a1
- SSDEEP 192:GaIqUB58KXfpShtO3ouyuokFTxdg+AiQp:3UrNXhS7O35JXFTxdLAiQ
- TLSH T13BD24E16D3DB00A4F1B62A761C7ACE37563AFC1199F9866E0F10E2DD3D71A15CE21B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/fliflt.ift
- Size 28KB
- SHA256 4b651eaa60da09038984a9b7027826941f61f6da58d3f57d11349c8c1896a6d4
- MD5 91b37f29180a7bcca82dd4682d677b3d
- SHA1 bca27cb7ddb271e6649f264777e04970f5ad1276
- SHA512 2fb10952f2671e6a42a9748279aa94e9ce9b307d57d562f9ebbaaa88e27ca96eda36a5fa209df0f791adab7e8d896916b30330ba759b9278cac4bff43600d6e2
- SSDEEP 96:yGmPknHTCymEDV/P8JWYrP2YQaVfsOtUpHtdwReGp6FZiZz5Gu:b3nt1V/EJHrP2YPtsfttGzwidGu
- TLSH T1E1D22956E3D554F6E96B857052D75A339230BDB84F88CA8BCF51CE4D0C23242AC25BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/fontembed.mfx
- Size 15KB
- SHA256 38b5dba1524e47ff474d29bb0fb3d7b0476e554cdb82f2de09c4a761ab5645b1
- MD5 f38352c344bd71eb21a78a1b69dcade8
- SHA1 eca1053fa4ce77f96752f400d4ffac8f2f158d15
- SHA512 70134d7e2d4c589fc3ca5c52e005852d07e6b3cce91db00d32bf121611480601d007ead98c3e2febfdd1ca03a0c723fa46e9b73c0f497b315a6cdcb9f15afd56
- SSDEEP 192:u02nHzUUsdbrkCqEhgU8ylfCV8VAvu5TcyiExS3fZLDJ65/e3XPEqR26gJx0DvNq:9e9sdcCTaU8YfnAvMTcqsKC/hQJx0Jq
- TLSH T199622821AF8682B2D553057E2E2B42761A7E920273D77CDFCB42A31E5DA13D32D31179
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/gifflt.ift
- Size 28KB
- SHA256 8fadc250c2afc00b0430c5df576cfd2d444367ad928027334c5d03829241cf92
- MD5 9a1a0b8e7045c06c47abeb52d861c377
- SHA1 6a1c36eb8354f62d5eab6d7c62316fd7d0e1aa92
- SHA512 918a672f82be50a42c237eeb361b971c724a1d7b11cab183dfd5125bdb7663cae588fa92b142dc99a88407a133bbe58bd7bc0c5c60d93287c470375fc094f079
- SSDEEP 192:KwanxqXUW6VDpwYMJP0R40392Wtcg4G9MsryrwfI:lUDiJ00WP9MOuw
- TLSH T163D21A4797544DB6E24582F0265E7B37467237A04FA18B47CCE1DE5E2C22282ED38B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Modules/jpgflt.ift
- Size 96KB
- SHA256 5bcaaff4c698581603d4165308260412b38ac6cf708486b53bda3bc76241098d
- MD5 ba4a1f5006fc3fc33f30e82a964cd7b3
- SHA1 8099283e645b6ef523757afdf552da3dc9b72924
- SHA512 8eaa1bae465a0ddd498372fcc9bd9c2b3bd9ba861abcc9158a0e3b8cf14f2a6fc8aae8fb129f96ea090c023247dec56524b2f42fa25239c08145dbe7c664a11e
- SSDEEP 1536:XVVotZiwEws9BGEumoVmLRhDeCKvmP7D50vBxJbdy01FLWdC:XUtZiLJ3GENTheRvu+HFLCC
- TLSH T1A9A36CC1BA8740F1D9852B7060ABA7739F391B07158FDB93D725ED625C23622FC253A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10