Overview
overview
5Static
static
3release.zip
windows10-2004-x64
1release/DD...er.exe
windows10-2004-x64
3release/DDNet.exe
windows10-2004-x64
3release/SDL2.dll
windows10-2004-x64
1release/Vo...nt.exe
windows10-2004-x64
3release/av...61.dll
windows10-2004-x64
1release/av...61.dll
windows10-2004-x64
1release/avutil-59.dll
windows10-2004-x64
1release/da...se.vbs
windows10-2004-x64
5release/da...st.vbs
windows10-2004-x64
5release/gd...pt.vbs
windows10-2004-x64
5release/libcurl.dll
windows10-2004-x64
1release/li...pe.dll
windows10-2004-x64
1release/libogg.dll
windows10-2004-x64
1release/libopus.dll
windows10-2004-x64
1release/li...le.dll
windows10-2004-x64
1release/li...16.dll
windows10-2004-x64
1release/li...-1.dll
windows10-2004-x64
1release/sqlite3.dll
windows10-2004-x64
1release/steam_api.dll
windows10-2004-x64
1release/sw...-5.dll
windows10-2004-x64
1release/swscale-8.dll
windows10-2004-x64
1release/vulkan-1.dll
windows10-2004-x64
1release/zlib1.dll
windows10-2004-x64
1Analysis
- max time kernel
149s - max time network
142s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/10/2026, 13:17
Static task
static1
Behavioral task
behavioral1
Sample
release.zip
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
release/DDNet-Server.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral3
Sample
release/DDNet.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
release/SDL2.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral5
Sample
release/VoidClient.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
release/avcodec-61.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral7
Sample
release/avformat-61.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
release/avutil-59.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral9
Sample
release/data/languages/simplified_chinese.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
release/data/wordlist.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral11
Sample
release/gdb_script.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
release/libcurl.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral13
Sample
release/libfreetype.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
release/libogg.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral15
Sample
release/libopus.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
release/libopusfile.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral17
Sample
release/libpng16-16.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
release/libwinpthread-1.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral19
Sample
release/sqlite3.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
release/steam_api.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral21
Sample
release/swresample-5.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
release/swscale-8.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral23
Sample
release/vulkan-1.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
release/zlib1.dll
Resource
win10v2004-20260911-en
General
- Target release/DDNet-Server.exe
- Size 1.8MB
- Sample261024-qjvkksh15s
- SHA256 94977dad2276a2ff0cbedcfb35c9cd9f713fb0772bfd030e644d78608365a989
- MD5 5aa8212c196f1d81425ad73c13892eac
- SHA1 c566cc1a4c3b7fd482dc49582756e8fa2208a6ed
- SHA512 91bba2b2a93ef9baf3b070e2f40e452e4aea531a2be2a0d447f7e87aa5fc4659a920d14912dc7b8a8ac19c70cc72da18b8e0c7e52cf27c4783daaf138feefcc8
- SSDEEP 49152:HIkpyPfnhcyh47Dk2ze5w0bwP4ggYcrz:ok+fnidk2a5wcwPcr
- TLSH T1C5957C0677A551F9C57AC0388F436627FEB0B46C0364B6EB0AA0D6562F27FE41A7F205
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname DDNet-Server.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain DDNet-Server.exe