Overview
overview
3Static
static
3patcher/ga...er.exe
windows10-2004-x64
3patcher/ga...er.exe
windows11-ltsc_2024-x64
1patcher/libbunimod.so
ubuntu-18.04-amd64
patcher/libbunimod.so
debian-9-armhf
patcher/libbunimod.so
debian-9-mips
patcher/libbunimod.so
debian-9-mipsel
patcher/libmain.so
ubuntu-18.04-amd64
patcher/libmain.so
debian-9-armhf
patcher/libmain.so
debian-9-mips
patcher/libmain.so
debian-9-mipsel
patcher/pl...pi.dll
windows10-2004-x64
3patcher/pl...pi.dll
windows11-ltsc_2024-x64
3patcher/pl...pi.dll
windows10-2004-x64
3patcher/pl...pi.dll
windows11-ltsc_2024-x64
3patcher/pl...CE.txt
windows10-2004-x64
1patcher/pl...CE.txt
windows11-ltsc_2024-x64
1patcher/pl...db.exe
windows10-2004-x64
3patcher/pl...db.exe
windows11-ltsc_2024-x64
3patcher/pl...ol.exe
windows10-2004-x64
3patcher/pl...ol.exe
windows11-ltsc_2024-x64
3patcher/pl...ot.exe
windows10-2004-x64
3patcher/pl...ot.exe
windows11-ltsc_2024-x64
3patcher/pl...nv.exe
windows10-2004-x64
3patcher/pl...nv.exe
windows11-ltsc_2024-x64
3patcher/pl...g.json
windows10-2004-x64
3patcher/pl...g.json
windows11-ltsc_2024-x64
3patcher/pl...-1.dll
windows10-2004-x64
3patcher/pl...-1.dll
windows11-ltsc_2024-x64
3patcher/pl...fs.exe
windows10-2004-x64
3patcher/pl...fs.exe
windows11-ltsc_2024-x64
3patcher/pl...ld.exe
windows10-2004-x64
3patcher/pl...ld.exe
windows11-ltsc_2024-x64
3General
- Target patcher.zip
- Size 8.3MB
- Sample261018-3blc6abx91
- SHA256 a75c49e67510edff3116f51027931d2a6700f905fdf2e41d8dc813aed67a35d4
- MD5 d4a7152cd1eeae65e4da84add28c6f82
- SHA1 d009dbba979f9e3a9e6f5986c905a73cea486db2
- SHA512 16758073ffbce47c6a0f3f20bdf0a5e97dfcbed0cd4f252da0824f349bbfc3b783ab1286ed7f3619d15a8816d8ab2d3a23ed3dd5b93faea0d8e526d3b4abd998
- SSDEEP 196608:9Dvc4kcpCKy9cVqzLVRM1tZG5U7gvVzDINBH+6VgFYgBkCIso0WGPmPsmx/q:9DvcLcgHGVAWtZGmgvNDINglYgSNGvmA
- TLSH T1359633C009AAD48DDE9C2D2D12369E0674CB56B246B6CD85FC518BC69846C3FC7B83B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
patcher/gamepatcher.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
patcher/gamepatcher.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
patcher/libbunimod.so
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral4
Sample
patcher/libbunimod.so
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral5
Sample
patcher/libbunimod.so
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral6
Sample
patcher/libbunimod.so
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral7
Sample
patcher/libmain.so
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral8
Sample
patcher/libmain.so
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral9
Sample
patcher/libmain.so
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral10
Sample
patcher/libmain.so
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral11
Sample
patcher/platform-tools/AdbWinApi.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
patcher/platform-tools/AdbWinApi.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
patcher/platform-tools/AdbWinUsbApi.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
patcher/platform-tools/AdbWinUsbApi.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
patcher/platform-tools/NOTICE.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
patcher/platform-tools/NOTICE.txt
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
patcher/platform-tools/adb.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
patcher/platform-tools/adb.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
patcher/platform-tools/etc1tool.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
patcher/platform-tools/etc1tool.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
patcher/platform-tools/fastboot.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
patcher/platform-tools/fastboot.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
patcher/platform-tools/hprof-conv.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
patcher/platform-tools/hprof-conv.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
patcher/platform-tools/keybinds_config.json
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
patcher/platform-tools/keybinds_config.json
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
patcher/platform-tools/libwinpthread-1.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
patcher/platform-tools/libwinpthread-1.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
patcher/platform-tools/make_f2fs.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
patcher/platform-tools/make_f2fs.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
patcher/platform-tools/make_f2fs_casefold.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
patcher/platform-tools/make_f2fs_casefold.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target patcher/gamepatcher.exe
- Size 887KB
- SHA256 6d0e04a5e4c56cef419abde3bf43dc000f7c27284cc22e2fde39b9958bba3cb7
- MD5 8e365332c26e15c93edab926dda79c4c
- SHA1 010d9e556df53edcaa9748ec98f3c344f319445a
- SHA512 ccc849d9374e3d914ee2f77347e145414e33e6e73ca1a5b74696d3c9fc3f74101ca687e1a8d35375ff92a174d2bb48584b8887fdac1a913842684599103968df
- SSDEEP 12288:SYfCK20Z3IFHGCaHXdsUroFdBH3F4ooeqLvOaS7EKASiC5nfo6wAMttd:8EQHwlroF736dNLvOaQiSnfw
- TLSH T17B15AF59E3E801F9E0B7D674D9A26517D972785A07309ACF03D0055A3F33AE44BBBB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target patcher/libbunimod.so
- Size 383KB
- SHA256 ffb604c374af59fd2236be2d46daf9a544a87d1c31f6fbbee264b753b85106ef
- MD5 de3de3ca0cb6b9e650b9ec7a8ca07dfa
- SHA1 14afafac549b95c844d85460eede1aafa836f794
- SHA512 5aa4f6c7248aadece5814e8542f79346c0543b1d1b876187527ff6de078e2be1168f4c5bc681687212d467d2930b3cfb5f415ef31ab7748a66563a12581fd7d2
- SSDEEP 6144:PNUVqABzTh0bOTuMIoCD0i09L/D64OGNTWEnh7D3MA81nojFBLmFQqbsLgLsJGwx:17MBsToXCOIWQ
- TLSH T1EA846C09ED0DE927CAC5B53C93A61356B13278DC1320D1DB296EC11AEFC36D6CE26792
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target patcher/libmain.so
- Size 6KB
- SHA256 102c90a203ef7500ba1cae2f1b63a8e08c04844ed87cab67aee9870631c30a88
- MD5 374e937a6af8ddf648f621efd2ea0899
- SHA1 0523b53ad8654c192b3ceffc380cff6d948bbf74
- SHA512 b454c794ca00465bca96af0997fc8dbe9e429420c9e8c0af2d52513e0fc687bfbb3dccb059ac5ff036f763c73e623a59b351ba34e4b88086737f9241bd1b5c45
- SSDEEP 96:qqF5mi6Z1ZDQ/9jaH6YLKeGSpYc9nUWHwX:DmH1RQYHnZBFl
- TLSH T118E1A60FA764E617FC9D92B943DB03A4B332F61562924717691443E67F012CF2F26B89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target patcher/platform-tools/AdbWinApi.dll
- Size 105KB
- SHA256 120bef587119c6cb926b86b9be90fdfbce38937588eae28cd91a94ce63c7b965
- MD5 47a042211f076ac2ec64a8959f455d02
- SHA1 ddaf6836e376c7a5d649e7c66fb0f7f193097ab1
- SHA512 134a9484acd567957a6e35fc0a872ed6f8bd3ac6c1526cad2efe2ce392879c5bdf467dd994be4d2c7e78e9849f37710a91d506702a7df5e55e0d852f5734572b
- SSDEEP 1536:Rwqdq+3pvspmLh8SCykrpTG7kfGHuNezq02XJqo+iFi1yCPj7+9o:RwqD3L8Tezq0et+ui1yYco
- TLSH T130B36A227891C072C8D361B91AECF76593BEF4B10B6589C7339803DADE643C25B7529B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target patcher/platform-tools/AdbWinUsbApi.dll
- Size 71KB
- SHA256 6ca69a2ca0e31309c087d288f058977d421ad03500e4c3e1dbd981241a069c60
- MD5 70d9408186450f9aae9b284428593017
- SHA1 af00109a1596f5faa7aa0038d535c3ed54dfaa76
- SHA512 157354d5a866378f854eb3c1e5cb4d3ad8a8dde93931c0f9ca0e786bfda3edf58178212a066c8cf19ca22225363b08eaf68f6d30c986dae52bca512b39804811
- SSDEEP 1536:b72doFmOiHizFbPlspcsbj5ZsP+YeTs1pT7+w2:bSSfN9+YeTs1pT4
- TLSH T1F4636C237990C472CC9651B819ECE621A67FBA501BB184C7779C03DB9E203D1ABB9397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target patcher/platform-tools/NOTICE.txt
- Size 1.1MB
- SHA256 628f43e9c88e2bf5aee9fc4c1cb672bf3931ba12dd5ef75c8170678395f3ca23
- MD5 c9bd09bafb2d8c8a397b4a053df096c1
- SHA1 1e1c24fd54ec7a3b24bfc19e8d0937d02115dde0
- SHA512 21606171cad73069f4561f8939c07d4cbc67a465137842054d773e40031864996a52652eb4b73ebd079fde1ed6c0c8b3c6aa455b3b9a3eaa91ffd57e626d8913
- SSDEEP 12288:JRYx5JqVIRcViW8rP7lyWl+LpvU2jjpJl4sQSPU2jjpl4sQS1IgyqwU7zogg6ysP:rV4WeEr1sPUYDLtpwZ3uTcxx
- TLSH T10335952F7B4803B306C242A16A5B68CAF31AD03E37661554345DD16C2B6BB3983FF6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target patcher/platform-tools/adb.exe
- Size 8.1MB
- SHA256 957e46b8615f7af5b7292a2ddabe98d2e61940c3fb2b0545756507f080613e71
- MD5 f62bbae3edbffbf33f913a536c37f5c5
- SHA1 c8cb0d5720e2d34d359a89f4250e0971ba4f2da1
- SHA512 f2b79507c0b83006c304c5e3e0fce19c9685465f9e487fc0992e8447a6f43f47a18aa39cfe0d21b2e4a29f134c16b17285d5463547ca82347eed9f72d36a5577
- SSDEEP 196608:hQbvGuN6MGAaC1spB/fZEf7t/tg/78gPPvSQpZjXvDD+cNGwFZN:hQbvGuNtGAaC10Xi71tjgPnS0BfyMZN
- TLSH T1C6869D06E153A179C90310F1212EB37D6F244A148B258EFBDBD4EDB86B659E0353FB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target patcher/platform-tools/etc1tool.exe
- Size 435KB
- SHA256 6e4f7670d72e999aedc9900acdca373e8e7ae6fff858d19c2c6c005028292e3a
- MD5 f411c30a7aa4ff7a3311f21621868ba1
- SHA1 48a73394e593018ee2588e2d2dbbf3b565980a0d
- SHA512 79b32f710e9b0b10e5ecd135d8e1e14abc22d148f7a784b0daf7a45da3b7c06686a5189ec108c60e67da323b644271b213e3418e63cb30f7f09987a94a257fe7
- SSDEEP 6144:N4DVUCs6Sxxke7u8reqDjCXVars3fQiRqPqjx26y+IMUyM7K/PZI3rn3IqhM5j4M:N4D5slxxkejr5+nXJbaKJYSr
- TLSH T10C94AE8362F2A0B6E96341F0A7DEA37D4E105210CB364CEBC2D4DDB0AD96AD1197E71D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target patcher/platform-tools/fastboot.exe
- Size 2.1MB
- SHA256 dd55fef77ab2753b6423f37f39d91cb00ce53ab4539a2431577f07c4abcaa32a
- MD5 096328152afbd161223cb6f7f2c1e7db
- SHA1 7472e9523302049ac50c8e6d0a467de9f7bae0cc
- SHA512 c820e9093fcaa2260bc08b8631074f10d86109e3195e5aec2c8b4f4617b95b6444a5f0cff0dd835ab2644976daa37f0330899e2263674de9c6028eb113521acf
- SSDEEP 49152:rzs3rL5EhgYKDX49QugmVOVPBpqShNpMb:M3r9Ehp6X49QukV5Qww
- TLSH T14EA59D02E263E179C94310F1626D637EAE2006188711CDE7D7D4EDB4AB76AD0363E76E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target patcher/platform-tools/hprof-conv.exe
- Size 51KB
- SHA256 33321e7d44be00a1023d24fe34702df13ed9e5ab9edae219fbd8cde37dd766a9
- MD5 11556ac79e71f80457198e6f88ae3825
- SHA1 821a228dca28e90e26f6f54f791ff4446eab327b
- SHA512 965df5de9781aed67536b52bebcf33c1e966d400bbe42b4e039bb143c8d2347e516ebb7fee3fefacc050a5b856f7036facc137d1c07774e1e81b14f764863385
- SSDEEP 768:KxWLkQwAiiMy5FbHYlt1hZKgfP10Oqz3emcjW63WcbYiDLk5Psy8:KALkQ/yGbHYP38ITqSmcqk7+sy8
- TLSH T144334AE6C98354F0EA2F95B014E1EB3B4E37FA114B60CCE7C768DC54DA116C2A53E269
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target patcher/platform-tools/keybinds_config.json
- Size 593B
- SHA256 e4a6462e2511a7242d6e6b783347011fd84f959cca3d36e7bc3c2e0632a06652
- MD5 d85524d8b38cb43fcd97fe0ef732a989
- SHA1 19951ac7f7d6f0012da2eaa42144563429cb66b5
- SHA512 3a339bc15acff46d5263b674c120b8e0445b6a67c97861ffa96049d71fd913d325e2c84f10dbec6795b7c7d1bfd6f84efe4db32737ed9a8b1844a29f7b3f2252
- TLSH T132F02477FA895C2380B8256A54810E25F501AF5F52F83D2FB574B10E0F37144929B814
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target patcher/platform-tools/libwinpthread-1.dll
- Size 237KB
- SHA256 283a8c3f8d1542df333e0899757b00d484888978d62ccf8c99db662a95cce764
- MD5 feb38066af2c64419bd2c659bf402ca5
- SHA1 7590b9b3db327a8e943fa2d613ba0153e6504eaf
- SHA512 944a0c7d33ca54a8f71aab9b3daa9959af4f7a0ef42493d74017971ed60c3dab9e729576004d49cc4dc16afb19b57b8a52f4f79f6fab7c4410972f74ed6cc502
- SSDEEP 3072:Lj7MrkFLe6s7qS2RnQt+dw4Ijim3YwbX0Lh1Zy8KdwkdcmPqQzaxtubRRyNqJrdn:LjPFPsmtBDqim3YZLLZtvQz8YHrd4L8
- TLSH T17D344CA6B3858CEBE912173E44E7C757223DE2940B038F476F74A839BB5B78079C5249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target patcher/platform-tools/make_f2fs.exe
- Size 453KB
- SHA256 4b5f9fdd76a03a16788d3542b5445c70eee27f931d052973a881db420c975f2b
- MD5 1a3e830e3217d9717ff4b8d54da65d90
- SHA1 2521d5ee2817e75e4185a7583726c5488283a828
- SHA512 7c7fe0855b494cba98a4dcf4d1ed68c7579d5290ec650764ed38ac8a2d74f45a9be15d28636287d4b37ab5fb747f1d27d2d132201b745b1373b0490578bac61e
- SSDEEP 6144:AlPQUFxoX73IwD2aGO4CPhfy0QKAXkR+NoEH4BIidCO+3S/GaiL61UIIU7ElN+EN:GWXjxLPZy0QoEH4BZdwS/GaDEN
- TLSH T1C2A49D23A1B9A1B9D4A780B87BEF633D4D24A104A7218CC7C3B4EDB03D556F9263D64D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target patcher/platform-tools/make_f2fs_casefold.exe
- Size 453KB
- SHA256 7878e842693bd1a9321fe5a0b55cfef4ddda3807bac55de38e177f134b29b01b
- MD5 41a037ba36aa30ac35de352715148f45
- SHA1 e7aec6aaa1405ad188aacf7112ae64ef0be3a5cc
- SHA512 8c10e7207aa2640c10c1459df2847590aeba91dee518061ac0a064984d014fb0cb8d4843e49d5f528b4571446e73b5f326291972a8fba34e95b9c5768e58a268
- SSDEEP 6144:Z71PQEgAoaR34wTmqGO4yPhfy03KgXERetoNBd2idCO+3S/GaUL61UIIsccp1Wtp:ZBwa5xbP5y03oNBdDdwS/Gagtgun
- TLSH T11CA48D23A5B9A1B5D4A780B87BEF633D4E249100AB214CC7C3B4EDB03D516F9267D64E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10