Overview
overview
7Static
static
3NFTGAME_BOT.exe
windows10-2004-x64
7NFTGAME_BOT.exe
windows11-ltsc_2024-x64
7app-update.exe
windows10-2004-x64
3app-update.exe
windows11-ltsc_2024-x64
3en-US/winload.efi.dll
windows10-2004-x64
1en-US/winload.efi.dll
windows11-ltsc_2024-x64
1en-US/winr...fi.dll
windows10-2004-x64
1en-US/winr...fi.dll
windows11-ltsc_2024-x64
1python36.exe
windows10-2004-x64
4python36.exe
windows11-ltsc_2024-x64
4Analysis
- max time kernel
150s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/10/2026, 23:18
Static task
static1
Behavioral task
behavioral1
Sample
NFTGAME_BOT.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
NFTGAME_BOT.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
app-update.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
app-update.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
en-US/winload.efi.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
en-US/winload.efi.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
en-US/winresume.efi.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
en-US/winresume.efi.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
python36.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
python36.exe
Resource
win11ltsc2024-20260911-en
General
- Target app-update.exe
- Size 7.4MB
- Sample261013-3ac1dsdf83
- SHA256 2e922e6d841ed81417785c44da60f551df9dc267b91550485c4a9a7a31a8ea4e
- MD5 becec6770a9bc4cce7024f9432b6a83d
- SHA1 921b0dc5f015adb12fb674e3d8a65d7ed2569d8e
- SHA512 784a761692d8d67c309a68cb49aaf473ce867be6084beaf108c7865068476e7eaebd6fa35ce08d25bc8a33214ca41c2e68ea0372f09653354f4b7d3700ea5058
- SSDEEP 98304:5K/nRexd8ow93JNfMVtPhJsX+Jxr6pXcKJbcLLpSwbnrhTtS8obNyHGXwkBBT0MW:5enRmg93JSv6+n2jILpdM0dIF4R50du
- TLSH T16076336996825332E0772A39005E5BB0A739F9107630BBCFBF1462585CE19D137EBB4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language app-update.exe