904ddafb46c5f3070ff299218c758789567b851aa551c6db449f107a3e6a2ffb

Analysis

max time kernel
153s
max time network
139s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/10/2026, 22:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
StreetLeagueFootball.exe
Size 283.6MB
Sample261023-2amddsgv3k
SHA256 904ddafb46c5f3070ff299218c758789567b851aa551c6db449f107a3e6a2ffb
MD5 477cb950cc07d455c48161f3b9948a03
SHA1 7ccbed80ac0d899fa095254a1c7eeebbd742835a
SHA512 1695e10c6ad80d1956085722ac22414c217e4bc20d7d5062ba0f63b99fa1ac4e123cdcea0f02bf756029ceadbb82d697603e600a7f709b3806c4529be5edde0e
SSDEEP 6291456:Xwck/pVlPjtj7y/7RWM9rzqmLXAr+XukNFP96:Pk/pVl7tvIhiSnc
TLSH
T194E89E16D37220ECC526873488D3367256A774592FE8AED6E1DCCE386FE2994672CD03
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	StreetLeagueFootball.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	StreetLeagueFootball.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	StreetLeagueFootball.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	StreetLeagueFootball.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardProduct	StreetLeagueFootball.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings	StreetLeagueFootball.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4552	StreetLeagueFootball.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4552	StreetLeagueFootball.exe
4552	StreetLeagueFootball.exe
4552	StreetLeagueFootball.exe
4552	StreetLeagueFootball.exe

C:\Users\Admin\AppData\Local\Temp\StreetLeagueFootball.exe
"C:\Users\Admin\AppData\Local\Temp\StreetLeagueFootball.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:4552

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.cfg

Path C:\Users\Admin\AppData\Roaming\Godot\app_userdata\Street League Football\settings.cfg
Size 56B
SHA256 45e68d4b3bad560e08b20eb88c33b655dfb097fee71ba16cb8fe15f467994bbe
MD5 ce2354998c86cb076c327a9acf79c4fc
SHA1 c6c6f7c71eb87ef7a55646ad581616089bf73fd7
SHA512 fe52d094c0b1186c07f9260899d41f13e4361162e4f6615b1577d97d5067b66b1a3f408f2706dec524167191287e600c955b973a02c5f4653a4f1e7cd135d0b5
TLSH
T1B990040D74155C77543F050CCC1F7151D3345D40C54351FDC745550115454DC3475CDD
MD5 SHA1 SHA512 TLSH

Submit Download

78757b8d842956aa9172f80ca395b1bc085b24fc.d3d12.cache

Path C:\Users\Admin\AppData\Roaming\Godot\app_userdata\Street League Football\shader_cache\SceneForwardClusteredShaderRD\cdfe2a8d86deff48154b1cd0d6e857301f5e37f0d8930754f63ff9c2c85045a6\78757b8d842956aa9172f80ca395b1bc085b24fc.d3d12.cache
Size 105KB
SHA256 89576065bd52e48246ff52d1531fe2e980f84f91b189ff9ab217733182046007
MD5 d7697ac8f4a07a1d7c55d8083ec0ba2d
SHA1 201bb2748c4de38fc66a33859fe87b54220a94a0
SHA512 16c5cae639914537a438a6819dab5cd1c26842c6e9d8ced98c0757cec961c9eb85503ff5df3d12432a0def73290205e0be5452dd3948612fc02b9b0306d91134
SSDEEP 3072:s4ramVmR7Zle3rsIczsXHBVGjKIaVWZk1L:tramVWZPIqsX/HIu1L
TLSH
T1C9B3BF42BBC2DE67D81403764CA6C7D83375FD969F87A31374A9B32E6CBA3C69921044
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4552-0-0x000001CB986C0000-0x000001CB986C1000-memory.dmp

Download

memory/4552-2-0x000001CB986C0000-0x000001CB986C1000-memory.dmp

Download

memory/4552-140-0x00007FF7D9F00000-0x00007FF7DAF00000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads