Overview
overview
3Static
static
3Fnaf World Ultra.exe
windows10-2004-x64
3Fnaf World Ultra.exe
windows11-ltsc_2024-x64
3Modules/Android.dll
windows10-2004-x64
3Modules/Android.dll
windows11-ltsc_2024-x64
3Modules/DRPC.dll
windows10-2004-x64
3Modules/DRPC.dll
windows11-ltsc_2024-x64
3Modules/Fo...er.dll
windows10-2004-x64
3Modules/Fo...er.dll
windows11-ltsc_2024-x64
3Modules/InAndOut.dll
windows10-2004-x64
3Modules/InAndOut.dll
windows11-ltsc_2024-x64
3Modules/KcCursor.dll
windows10-2004-x64
3Modules/KcCursor.dll
windows11-ltsc_2024-x64
3Modules/Layer.dll
windows10-2004-x64
3Modules/Layer.dll
windows11-ltsc_2024-x64
3Modules/Mu...ch.dll
windows10-2004-x64
3Modules/Mu...ch.dll
windows11-ltsc_2024-x64
3Modules/aviflt.dll
windows10-2004-x64
3Modules/aviflt.dll
windows11-ltsc_2024-x64
3Modules/bmpflt.dll
windows10-2004-x64
3Modules/bmpflt.dll
windows11-ltsc_2024-x64
3Modules/cctrans.dll
windows10-2004-x64
3Modules/cctrans.dll
windows11-ltsc_2024-x64
3Modules/cl...ar.dll
windows10-2004-x64
3Modules/cl...ar.dll
windows11-ltsc_2024-x64
3Modules/fliflt.dll
windows10-2004-x64
3Modules/fliflt.dll
windows11-ltsc_2024-x64
3Modules/fontembed.dll
windows10-2004-x64
3Modules/fontembed.dll
windows11-ltsc_2024-x64
3Modules/gifflt.dll
windows10-2004-x64
3Modules/gifflt.dll
windows11-ltsc_2024-x64
3Modules/jpgflt.dll
windows10-2004-x64
3Modules/jpgflt.dll
windows11-ltsc_2024-x64
3Analysis
- max time kernel
148s - max time network
157s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/10/2026, 08:49
Static task
static1
Behavioral task
behavioral1
Sample
Fnaf World Ultra.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Fnaf World Ultra.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Modules/Android.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Modules/Android.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Modules/DRPC.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Modules/DRPC.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Modules/FontPacker.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
Modules/FontPacker.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Modules/InAndOut.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Modules/InAndOut.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
Modules/KcCursor.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
Modules/KcCursor.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
Modules/Layer.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
Modules/Layer.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
Modules/MultipleTouch.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
Modules/MultipleTouch.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
Modules/aviflt.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
Modules/aviflt.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
Modules/bmpflt.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
Modules/bmpflt.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
Modules/cctrans.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
Modules/cctrans.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
Modules/clickteam-circular.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
Modules/clickteam-circular.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
Modules/fliflt.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
Modules/fliflt.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
Modules/fontembed.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
Modules/fontembed.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
Modules/gifflt.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
Modules/gifflt.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
Modules/jpgflt.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
Modules/jpgflt.dll
Resource
win11ltsc2024-20260911-en
General
- Target Fnaf World Ultra.exe
- Size 939KB
- Sample261011-krdddaywbs
- SHA256 f09a9397c3316c4443712bc36891b80ce42845f9065b9b1f1b1f32efc0741ae9
- MD5 1e2377a280ab310b0afc69698efff8c6
- SHA1 d51506ce067a5bdddca672794dd7cc5ebe845679
- SHA512 81dcbe30d58e35d177078f5cd206417421ba1622745e4429a33e26b49d7d5febbace2eae891197e5776300dbd4ddf73a11333157e34025aefb45560b47266d4e
- SSDEEP 12288:eacp1LPvpmdRi9HWd+OD07TecFVnScX3FW02JhZIdXhVbd8vSSn8/:eF1LCp0hxW02JhZId2PY
- TLSH T1E7152973E47560ADFAE508349378C976243D98189B6D02D38EC0AEFE7C60DC5AD3A563
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Fnaf World Ultra.exe - Modifies registry class 9 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\discord-1334212533526990959\DefaultIcon Fnaf World Ultra.exe Set value (str) \REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\discord-1334212533526990959\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\Fnaf World Ultra.exe" Fnaf World Ultra.exe Key created \REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\discord-1334212533526990959\shell\open\command Fnaf World Ultra.exe Key created \REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\discord-1334212533526990959\shell Fnaf World Ultra.exe Key created \REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\discord-1334212533526990959\shell\open Fnaf World Ultra.exe Key created \REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\discord-1334212533526990959 Fnaf World Ultra.exe Set value (str) \REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\discord-1334212533526990959\ = "URL:Run game 1334212533526990959 protocol" Fnaf World Ultra.exe Set value (str) \REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\discord-1334212533526990959\URL Protocol Fnaf World Ultra.exe Set value (str) \REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\discord-1334212533526990959\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\Fnaf World Ultra.exe" Fnaf World Ultra.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3172 Fnaf World Ultra.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\tmpF3DC.tmp
- Size 264B
- SHA256 6fb43a3c484735386f7402298013cc610bfd8b57b90eca72471cf073ca405157
- MD5 ac51a57211ac09c6e3f096c3eeda32a0
- SHA1 38f2348d3496bf08274f2c2283172c9962ad1891
- SHA512 d1c9637fa34718c204b5fc83387cccdf239576a633052abf81144134e40962d7ce103726b5b8ad641d56f0c48ee131f77768c7c85c42af770d1d123ff6a22e92
- TLSH T11CD02B0415E8141DC0E220749130454A42D519C8C3D6F185E8AECCFFBC0D043B9363EC
- MD5 SHA1 SHA512 TLSH