Analysis
- user interaction
yes - max time kernel
30s - max time network
44s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
23/10/2026, 22:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
StreetLeagueFootball.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
StreetLeagueFootball.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
General
- Target StreetLeagueFootball.exe
- Size 283.6MB
- Sample261023-2amddsgv3k
- SHA256 904ddafb46c5f3070ff299218c758789567b851aa551c6db449f107a3e6a2ffb
- MD5 477cb950cc07d455c48161f3b9948a03
- SHA1 7ccbed80ac0d899fa095254a1c7eeebbd742835a
- SHA512 1695e10c6ad80d1956085722ac22414c217e4bc20d7d5062ba0f63b99fa1ac4e123cdcea0f02bf756029ceadbb82d697603e600a7f709b3806c4529be5edde0e
- SSDEEP 6291456:Xwck/pVlPjtj7y/7RWM9rzqmLXAr+XukNFP96:Pk/pVl7tvIhiSnc
- TLSH T194E89E16D37220ECC526873488D3367256A774592FE8AED6E1DCCE386FE2994672CD03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname StreetLeagueFootball.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain StreetLeagueFootball.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS StreetLeagueFootball.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName StreetLeagueFootball.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardProduct StreetLeagueFootball.exe - Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings StreetLeagueFootball.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1248 StreetLeagueFootball.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1248 StreetLeagueFootball.exe 1248 StreetLeagueFootball.exe 1248 StreetLeagueFootball.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\StreetLeagueFootball.exe"C:\Users\Admin\AppData\Local\Temp\StreetLeagueFootball.exe"1⤵
- Reads the TCP/IP host and domain name from the registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:1248
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Godot\app_userdata\Street League Football\settings.cfg
- Size 56B
- SHA256 45e68d4b3bad560e08b20eb88c33b655dfb097fee71ba16cb8fe15f467994bbe
- MD5 ce2354998c86cb076c327a9acf79c4fc
- SHA1 c6c6f7c71eb87ef7a55646ad581616089bf73fd7
- SHA512 fe52d094c0b1186c07f9260899d41f13e4361162e4f6615b1577d97d5067b66b1a3f408f2706dec524167191287e600c955b973a02c5f4653a4f1e7cd135d0b5
- TLSH T1B990040D74155C77543F050CCC1F7151D3345D40C54351FDC745550115454DC3475CDD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Godot\app_userdata\Street League Football\shader_cache\SceneForwardClusteredShaderRD\cdfe2a8d86deff48154b1cd0d6e857301f5e37f0d8930754f63ff9c2c85045a6\2437e70d0170ff8bb5719e2240323dedae7447ec.d3d12.cache
- Size 105KB
- SHA256 bdb5b17a49d38729377ddb00206269846118d2022720f5add12567576ab3515c
- MD5 fa845e1cd9feeaf17f26a4d9fb12b029
- SHA1 edc6a5ca65b334aefc684889cfd4af01e3788944
- SHA512 04f0fbb4d19c76c445dc6fde2e254894a31d767568c3c6c0fe8352ab74b45c89611bfc3bb8f88737525602939991438dab289689490c9834cfa3f3fa96dcaa40
- SSDEEP 1536:s4F1TeCV5ytR7GlexJJeN3msXZqPaV/tsM/QVWZJJ/7:s4raCVmR7Gle3JPsXWaVGIQVWZn
- TLSH T13CB3C042BBC2DE57D815023A0CE6C7D93374FD969F47A31379A9B32E6CBA3C19911184
- MD5 SHA1 SHA512 SSDEEP TLSH