ca543a1e54f79652cba7454bbec4cd19629ca1bdedb2171d33c7c5be52d111b1

Resubmissions

26/10/2026, 17:33

261026-v4tw1afv4v6

26/10/2026, 14:35

261026-rx229axtcw8

Sharing

Copy URL Twitter E-mail

General

Target
PlayGTA5-Installer-v2.zip
Size 608KB
Sample261026-rx229axtcw
SHA256 ca543a1e54f79652cba7454bbec4cd19629ca1bdedb2171d33c7c5be52d111b1
MD5 d55860bfe90656b4f84591cdbc28c560
SHA1 31388ef2b00c1f02b81deaefb787686caf107863
SHA512 5a3675c5e694a7e89170dbac3530011cb4bdecd4b0b66d31368dd89da4e8d14a629d704e3ed9396a6c4d58122af576f44391719869852a8fc80c17b955218278
SSDEEP 12288:WeCAwCHO4xTasNgN998vx0DjDsgLv+HxhI7m2ClIARr36yFAGBqhdg:fw6lxTaGA99WFHnI76lb6Kb
TLSH
T137D42348282DE46218CABD3DB3AEEC45EB6323679A880F46E016BE40717F77E54D1DD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  PlayGTA5/Download-Game.cmd
- Size 219B
- SHA256 578d891f613834c0967e9448c3b0a331da7971b2bcfabad552310f196161ffba
- MD5 f24cc93b7085509698b9c579dcae7fca
- SHA1 67fa4bbd9c68943f143694e9359d059a22f79c5b
- SHA512 4e037a3e4c0195e0c6ae30382c5fd29bfdf4266696ebc3446bca5bba67c0ed9fcf241609beeacd11dcb7f8bf5760f5c2e917a02d6a3f709c2fb898285af0221f
- TLSH
  T10AD02317A7A7C3C931BB189490DD4061191D643B51115D113071463BF49A475CEC51D3
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1
- Target
  PlayGTA5/Download-Game.command
- Size 170B
- SHA256 87f899ecf577cb9ebb6e36391fc5cb0d0e9659866343dae37f57f9988b2c7d29
- MD5 848279b3ce11a6e3bf72b3cbf5f57247
- SHA1 6c34729ebc4a58c91964ef9fb1144e491211bbe6
- SHA512 f648a665d40e75961a9083625dd21b4472d32ce926b5094739403e7a8665ad480dfbf7cbae0c3f5c5ebb3ee4692062bb2cf7f5e805987eaa96c551e8079e4048
- TLSH
  T158C0805A800457690F13C150C54E84F5FA45185E8942787044587D7675755D2E1EDA17
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral2
- Target
  PlayGTA5/Download-Game.ps1
- Size 6KB
- SHA256 f13c678ccf4064c91a9276393ca85a941ab25d69458e65e56f9b2cb290dfb046
- MD5 5812595487201291c31bb89f96fcb213
- SHA1 0de176b6448ca3e1e02773d3697b6262bcf49478
- SHA512 d7535d2a96ec62c4da399ea760f5e8e59e46ddbefda9869d00021db34ff9986b0cebf481b2d0e9b5e8b1f0fc58126b6b4eddcf6bbb734dfe5e819a21a76a4650
- SSDEEP 192:Us/WgYyiKZBfmsNBqB5OcBXuW7jUZohu8vLaSx3p8:ljF26PhYm
- TLSH
  T19AD1B7461AA125BE2FDE2326450911A85F5940DF6190870039BED3C6EFF393F0B2DAE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  PlayGTA5/Launch-Local.cmd
- Size 309B
- SHA256 af3671c82b7fe2406380d2cd88271366e5a339cf759a1f7062b73df86c54f4d5
- MD5 ed1b89a9e04edbaf2f3a1d8cf7288c45
- SHA1 25071728fec1f4c33f51eb4610aec6e9c3649d95
- SHA512 e81ab819a3d56c8ca2a7df7787bf3e44670fe8afb5865ef3fcf05d4721b3324179feed9d4aa78acd5c93412472a5b91d05d19a35609e3c2118373c0cdda6518a
- TLSH
  T12DE0CD0B38DA827A5AE845D5555D11DDFB0C557740E50D2E3AA3917A2E4D50C4DC43C0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  PlayGTA5/Launch-Local.command
- Size 168B
- SHA256 bc5e354f41c8671436b4e92e526a0b9a30272f7900bb806caae02ea318e7a820
- MD5 815d13c91a05d1a7088afa87afe8dcc7
- SHA1 eee1a038e8bc788f8116e31d02a5dda70637b9e9
- SHA512 76503c1fd7a200d879242e80187c397305a0b61efe1cdc566689efbb6a4aa06844e435d2124e12bca1f82d81364b0266349317df34d4a37ba6b58a62686471f1
- TLSH
  T138C080558004175D0F22C150C54F84F6F944185D5D42787040587DB275655C6F1EDA15
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5
- Target
  PlayGTA5/Start-Local.ps1
- Size 266B
- SHA256 50782e0a949b891e774fea7d37a8b6b76d05ec7371dd729e11f341c2050a8790
- MD5 70e24b7354869bb34704790e8473181f
- SHA1 6dc2e34a93059a1de8943372c5dd52ed9829aad4
- SHA512 4c1e529b854dd9483edf5cedf4b0fd6bb8ed7e41ca4a9adc8c1e7f3c84a80a5c5fe44022cbf1a93d0c2bd34dc9e820e756ae76990c27f11ec3717185c1ca4309
- TLSH
  T152D02B0D2DE7E84F04EC238E047A80CD614F30F6102E8316553CC0914CE79BDCB06B08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  PlayGTA5/Verify-Game.cmd
- Size 194B
- SHA256 e729e82322da60872e763148bec0f3d370395a9e52daec64235618ec55c04618
- MD5 cd9c27acfdf86262faa739d760571d7c
- SHA1 1cde26fa7c06254a0f2e6a0c22536699ae8b1edf
- SHA512 4506e307c41d56e48de66217df278169942131f06e06d96baad1d3370bfec4aabf69af5a85bed1fb32a1efb6825027a9c14cfac5862c4c72d2d693684578a950
- TLSH
  T101C012074EAAC2E198F453D64A7925CDDF0881F764C84B1F0D7AC17A78AD95959C8341
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  PlayGTA5/Verify-Game.command
- Size 135B
- SHA256 13bf6a9a47040a1aad0ce287a7e420311819acbe6eb9318a5c52ec11cace5354
- MD5 4394dacf2dfcb9c8fc1f6431fcc9f462
- SHA1 d90f79b9e310b8aceb981f293c98cdfcf3d4580c
- SHA512 7cfedcddcb420123044960b62d4df894b3222d7441956a1108127e564114c527201b203488716517f6a7d3f6b90ba0982ba9ab4e915d167fce431b6c09bf2e60
- TLSH
  T136C02B25804016280F03C300C40E48F5FE44286E0E817C1080545C626128AC3B7FDF15
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral8
- Target
  PlayGTA5/download_game.py
- Size 5KB
- SHA256 7e44e96f70421fa74deedd70b5ec89f612d553c5ac3b620fd6e09469f890ebe8
- MD5 6b3eac533f6e90f7f7d33f3aa765b915
- SHA1 012d31da84ff7e72da0f24b344a96299daf11311
- SHA512 7f586edbe5dfaedc0265ebb96d805573594113d5f01fb5d4f95b9086c9dd0d550f529ac23d2deb910aba81f09b80064fcd2b9fca626dcf1335f7beca2adcda95
- SSDEEP 96:3gg+zcEqf7y3pkXUbD1bH3Xbfc5pO0yOrE+XUUDnoOPGYCtykILwcpNYWqWUoE/S:3AzcEsWGUP1bLfcpDrJUiPSxWqF6
- TLSH
  T177C177151F6D00B2F793C35C4A7AD631171358831D02A574BDACA3E43FA1AB39AB6C9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  PlayGTA5/mac-launcher.sh
- Size 486B
- SHA256 61f3a04a773a203892e455f0e1c76cd2a2e7d803bf3edb5f857a9c2b706b1edb
- MD5 c73a8445e7f7dfe0f567e52c6686e3fb
- SHA1 395a4d6ef7b95d72075aa4c1d6a477de100b59b6
- SHA512 4c48d0f481d26a5483306a7df73dbd155881ee0b8a78a4c49b0298bf09dd8e9e63232e1754fc407f4b66a30c734901bfc543496c469a829a83a17fb8447cd6d4
- TLSH
  T132F097679A05C931972881C83B1D3890F6F3116A20CCB85E06B342E9AD241CCF1E1B63
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10
- Target
  PlayGTA5/serve_local.py
- Size 9KB
- SHA256 58e1e791a71a3ced058f56107d3bb82f65454cab3e94b356e398395028ca8da8
- MD5 421fe5feb40388d113a403476b258f6b
- SHA1 056a07865acc10bd72dd557a011e234d9bd1dfd7
- SHA512 77fb34bada8658944f348ae1799aa81f410883de98417baaa42d27a29fba1d5d7bd24088d7269fe288b3c4a28303f2d2f18e3524c08d031010c64640544a0e68
- SSDEEP 192:XHZbbSEkFDEcfNPsrzoQu2jZ9KodG1U9w7EQRTUqTEiPitu3tr2UmqrE41wFe0uX:XHZjkVEctQfUi4WeBMHejxj2i
- TLSH
  T11212523A5D93310AC763D96EE386EC57330F642382098556767D82183FE0AB9C9F6DE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  PlayGTA5/support/check.js
- Size 3KB
- SHA256 a4bce774f2e11a5d7fbee0939af8f40459d55eed5e7a536fcd565d7bf502122e
- MD5 ed66e251e9a1ac2a7724a91625a5b950
- SHA1 fb3cb98c6300fcccf0cd4ed2540ba2f2f063f073
- SHA512 0104cb32986817cd8f1ded256b2a4c0516700436ff6875aa396e1722b986efa7bcef782540d025a8db84d0e8d0a8b25ed37670a99d336c4e90f7307d6b1bc590
- TLSH
  T11A71973B1D3E09360BD750EB258762C6B631C5117119CBE5358F0F0C2F8A5E64BB99C1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral12
- Target
  PlayGTA5/support/controller.js
- Size 4KB
- SHA256 8e244aaededb994afc99193ff15c436f81a3e753f49da5140c73751edda50be1
- MD5 f3e751f92b11ffdd31d3667158f077bc
- SHA1 bdd6d3f69d44c4a18a87a321649d097ea45e14b9
- SHA512 4eea3d77fe5cd38242753063fb5520f49eb1332462b82d42e7f578ad380bff6267c2f22f1ae4bc9ac4e4d6a7c377f16148b7c9c7f1b1ccd42c284c722c82de07
- SSDEEP 96:1Rvqs7jMMhx1eQxpDQxWju37Ss5raFzPS8doJYFQrmjOJL8UmQAx+o:HN7jMMn1eQ/DQH7SdzPS8dkYFQr+kL8R
- TLSH
  T112A143363097223B80A2B37D378B88367B2694172106D4E6B96D47847F5197883FE9DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  PlayGTA5/support/index.html
- Size 10KB
- SHA256 a5bc9c6cfe38d08d745a4daafa1d882eb96a090714c52eedf1933eec3a63e9df
- MD5 04e25a0d97faf0704d9d08712b36583d
- SHA1 17594606d4d59b7eab703b6b6eac0fbd399ce3cb
- SHA512 78e64e47c1d8f36d8969ce95677de70a59eab98630e7678dc30ee256ef487c210fa405804d746d11acf5352ca9573c687ebf6e85383caf74717d24e88396cdc4
- SSDEEP 192:THhUeII5OAHScSWccgjLV6Rz3qSYEVeq18Q9fsTXua19fiz1+d7:TB/DzPOXVYz6seq+za1k
- TLSH
  T1B2220B37A748123F2F331055F547B2EA77045011E2221FD678DD43ECA38A4A7527FA6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral14
- Target
  PlayGTA5/support/overlay.html
- Size 1KB
- SHA256 34071c613c3891552b31ce84f6f4d45034acae63f4f1f7cad809bec2ff832b71
- MD5 69b9d0e24340c38b55c9f1bed9684e54
- SHA1 9e7b2a8683b415e0546e2799f042e8d0f3426b94
- SHA512 693b43c135b7f77d739f3536ca79e322f4f796d12e64779dc0838ef9b516bad6e9a226b0c58603268a08b00982b5c8b96482b18627cb2c3ca9d117f025d6ab26
- TLSH
  T1513111BAB47716729673C30D32CAF65932539887A653F554778C86746FCE8B0042F683
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral15
- Target
  PlayGTA5/support/touch.js
- Size 4KB
- SHA256 c353ee5d93aa01265c4980e21e432a81a76ca61cfebdad082fb119de45719379
- MD5 a4ae25ffb7d0b13c318433226f32a889
- SHA1 b71106cc245004aea6c34a9b85ef70718af78db7
- SHA512 114c6cf88d4ca4e4519d535beb5f3e0fb1ef4d4afdafdfcb78aac4d13a8dc66e7d077a5ba1294d1cc1ef5e37f4d9614a667f534e1e3e2e23b21eb011d304da3a
- SSDEEP 96:o1KTCzYI2eldub+aSByOtvv/xYrAAjImb5S9sPZLSsiY/lLLFaSgL:v2zY7eqb+d4Ot5h68sPRSsiY/pLFaS2
- TLSH
  T17A91876724F22A380067B15FB707E118757A9016B042E9E1BDDCDD481FE2C7899BFB89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  PlayGTA5/verify_game.py
- Size 1KB
- SHA256 5f62c25b6cca569ce084abd17036d8a3ce028af1612bb0f1d8217e96579175ed
- MD5 30c00f1a1290614ed6bd3eeb6c1691fa
- SHA1 e0fdfb136bf7f4a93d5c908a1331460898991ec6
- SHA512 8fc16405fb7c46a9459e1c032c5f98375cc95dab7ca6e6bae26a1493090b50d263a005467465bdb63bd151bf77f8f98327004a50be5a53643bda988b1ef58371
- TLSH
  T1C831120459191055CAE3C7DD8E2589210722A5E3130CB97075DD6BE86F923E2BFFB964
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17