2914e0f7f44c5105baff9a2e446eca6d89a3128c90bcfd8d2c8346e4d732a62a

Resubmissions

22/10/2026, 16:10

261022-tmp12sdw416

22/10/2026, 15:59

261022-te5rjaaf986

Sharing

Copy URL Twitter E-mail

General

Target
Pig Friends(2).rar
Size 271.8MB
Sample261022-tmp12sdw41
SHA256 2914e0f7f44c5105baff9a2e446eca6d89a3128c90bcfd8d2c8346e4d732a62a
MD5 14658b51cf82ad4421720125e28ff9ad
SHA1 ab150039b3b87fb7f204cc2e2ef240a22f8861d3
SHA512 9b2e6634b853bd9b49452e845852a5c3b01e6cecbd64da2c4cf38a2f3ac9dba01fe3328d0d1497776398190dfe59677d1e54717565093c260dee297cade3d8b7
SSDEEP 6291456:w43kwtpcKEwsDg/kaxS8XQUwcTXJzZOfRLrb/wMCSFhkDRssajjITxBp:wsBrjhE0kyS8gxKdCLrblkDFajjqBp
TLSH
T1C4D833B7633981D9E90289FBCD0C82938DF79CF066289EF54C0F6046E7AA6513643DB5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  D3D12/D3D12Core.dll
- Size 4.5MB
- SHA256 625bd40005b1c3708695d5256ecf230d278e6b8edba5a88af70f3d91324f3052
- MD5 8bed03240b764906c937c0d6ccd560ac
- SHA1 2a38a4d7116b9d067e9d24d7da2646e2fc9f61c6
- SHA512 6fce3c735a101794634c53fd622be20e69e75c68ba216d0caa0fb48aadf97ed55ceb6ef205a4ea22f405bf5e663638add2f489df720c206739920093479863a7
- SSDEEP 49152:+h38HT1tnrx7KGN6McyBTwbreXHYTNeZQROL+qgGVO9EflU7slMWr+IGrh4TeeYo:IMBxrfwNFrfau5e/H
- TLSH
  T1B1266C07BBA840E8D4A6C079CA6B461FE7B278654370E7CB169087995F73BE1193F324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  GameAssembly.dll
- Size 33.0MB
- SHA256 54bffe12f216351f68cf486f9af677f98e60afeb4bca3c8387c1234b6b46f430
- MD5 c54320c90d51cd694f4bac51d8d8351c
- SHA1 68ef78739d556fbf9d41de7f4b769e38c4d79a12
- SHA512 eb6151792ff92243b0ebef41c533de83f499a4bf25ecbbf7c8fb6c5e7dcc5d9b3c87a9d1d15c350da449951635a1315a3103a5629d08aed65d3aa974ecb19b41
- SSDEEP 393216:YoyLzjg3IAbqOQ5X3za3gdXh6lNkRHK2ndVpzlc+c:ufv0Za36gYazr
- TLSH
  T1B8774A5AA2758048C1AAF2B4D9131C5BDBF23804AF346BCB21904BDD1F377D9657BAB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Pig Friends.exe
- Size 651KB
- SHA256 080fd936ce874ad28cc08ab6fffb04082f57456203af4e1cb6a16e879ca3a471
- MD5 56681cbbbccbfc06ab0fa35ea2e9be95
- SHA1 84756fe9120ac8154f58bc18675dc99978217241
- SHA512 1764dcb33da735223c11f7cf342215a540a04d1751eeb28931e86951b154b22f46c937ba03e94ff0bea0f27c38f67ecde5a6c60cf0457659ff9655396205b35e
- SSDEEP 12288:MtVwZpFhohGLd893SzUg79SBVnurxvxhsf:M/Vh6dGMJonurxvxq
- TLSH
  T15AE4A3836202B2F6C948DE709535A8F6E1DC0C6A286872D2D56D7DE539FE8940F49F3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery spyware trojan
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Drops file in System32 directory
behavioral3
- Target
  Pig Friends_Data/Plugins/x86_64/discord_game_sdk.dll
- Size 3.7MB
- SHA256 527768710ddb0953fce5eb1700c2566b6451135d76f1d0610b63907cd5ba94c5
- MD5 d8cc567718550ae35c1566c3315b90df
- SHA1 e5d8120a8a8583fe7e3177ae7d8fe797c002f263
- SHA512 5e1d72bbb466d032596147dd1a90f5ebcaa82d3d56ee7a0b1aa3a37d4bb42e1fcb510b269451a1b9c7f3b8a1c18b1c5f530b200f2fbbe2ec990b4e1c12e6f5e8
- SSDEEP 49152:cxytJCv8RbSimYQSaKCZhYtOVt7CPjitem2vUkcWDnVf6OuBimHdXopJErae4/KC:lD400amm+8m4
- TLSH
  T12B0648213A56647CC1ABC4B483874A725E3234CB1B35BAFF45D156782F69AF46F3C228
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Pig Friends_Data/Plugins/x86_64/libonigwrap.dll
- Size 538KB
- SHA256 6d539f2ad6e1b58d3c8836b9c3a1d50c97cbd7a6ca0c5de25d994a7c4b1ecf42
- MD5 ab2bd6d029d63fcf779f2032af98a5f8
- SHA1 28b1fd59b714d81bcfb353d1f2ae5cd4a9190656
- SHA512 7ca95bf475dd49069c0accfee0f41783824bc2e521ac7238f7a20aa1c04896b629c82d9518715e9193597f7efeab46f27cf3b2cdb382817ea58752abf07ccc05
- SSDEEP 12288:cGDjNa62yL+/RrsXdgcTE33T8Hhvrol87WruRGS2:cGDj9ZeYdDEIrolQx2
- TLSH
  T1D7C4C503FEC3DBA9C1AE4970C896D3F52136EC605A108E572358BE37BD626205FD962D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Pig Friends_Data/StreamingAssets/local/live_invasion_chinaassetprovider.assetbundle
- Size 2.0MB
- SHA256 1de4b2296d8036b521401a45b4d6130db037051cee8df912c4d9fccb5dabb133
- MD5 c3edaa348389571d7e2e935dd023ff86
- SHA1 22bf64b2a3c8fd990f595870c65d9b2814fb000e
- SHA512 b630c70e0bef7c80c1da8a5ef7451113082280aebae69afbbe7f99ade3f153448e5f03f4c9cfd222c71dd2f410473414a37379b7776fdcbdce295f06ff4f2e36
- SSDEEP 49152:rRMJbOmbU88BiEoe9Kd07vsbMmRMWsjqfHxAJiTCI:rR8CmZkTB7vsACMWsjAxAJrI
- TLSH
  T1DC9533CA0F2B52EFF6957806E90289E44F1E15F8410BB24501FB1E782E2761B77FE598
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
behavioral6
- Target
  UnityCrashHandler64.exe
- Size 1.5MB
- SHA256 4e5d1c618beeed99f1080e3169a00f9775c22d13c8f0989cf4497e99565cb77d
- MD5 937f3f374aa01e8a4edc03b154941e1c
- SHA1 068e4193ecfd3b08f65ce06254388968b854dc90
- SHA512 aaffe657e23f08fcd396d0380a429070a47fb5be0b5d2440d2d2153e889ad3d00ca1c0766989e9294ef64273b98e3dd591f1b4294a31d537f0e6745dc3696aa7
- SSDEEP 24576:5YR7jwRrY+OFtAV8KtDM3oxz/y/N9w/XY+:yj0Y+OPREAO
- TLSH
  T1047539292E641DDCD426843DCB83868EE2B1BC1A1F714BD717A17BA76E321D01E7B351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  UnityPlayer.dll
- Size 34.8MB
- SHA256 ef449a40fad552987b990701b76fde697ea81e1f14bd5535ed406d1faf2447b6
- MD5 46dfa9dc9cbcb70b2cbf9663a55ec57d
- SHA1 0ba41f8e592eff6127437cd34cc91a1369dd0ae2
- SHA512 669e9dbdea14b2af70491100e54e444ec8936f9948d3edb130c1308dd58f97588fa0c516f3e62fd50e8c7ca1201db16654f9c3b6d8af6a88cdbad3869f0fc58f
- SSDEEP 393216:r1l+0X1RsmVqap9HTFH6/kh3xUiRyU82a+pwQymGgjaTOQimbSHe:r1l+p/HWpwbgj/BzHe
- TLSH
  T10E87AE56A2B811D8D47BC078975BA91BFBB1344907308AEB52E049A46F33FF16A7F350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  baselib.dll
- Size 233KB
- SHA256 ab7efe383e9601f060b89762cf25b697db329f0397cb233eaee7e69362e2bc45
- MD5 8a33985345c832fbe50d375f31460078
- SHA1 8cb8f58b990f05f1d8dd85f7c4aefc2a1d206e98
- SHA512 03bfd5c65822d338687c43db49ae883744bca5f9352219fff3498c084a1d96a316e921d61369bac312f219bd3010c06776c379bb75b3b3e563a65bda2720b3ec
- SSDEEP 3072:qA6C9vPJ6yHlMPuplt90vtE5NajsutMKlDNM6aFsxndw5mskOYdNzw:qA6O3lMPi0vtQmxakLB
- TLSH
  T1E0347D5572A40DA6FDB741B4CC531A1AE67238034780CACF53A443A5EF6BBD06A3F762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

Drops file in System32 directory

Command and Scripting Interpreter: PowerShell

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9