General
- Target 867025897d98a09523fd93002d8f617f75704ab2505c8cc6378243e705dd8ad2
- Size 83KB
- Sample261030-d2388avycy
- SHA256 867025897d98a09523fd93002d8f617f75704ab2505c8cc6378243e705dd8ad2
- MD5 10d357e2a44d75d70743aafbc122cb59
- SHA1 877566bedfb9519fe19837cf78095723ff13b09c
- SHA512 3a4913f574c1f8726df852688a41c57ba5f3418c0f602e32d20c5de4010c25d676807052315261f584575dfbb833a532b135c0d6a7a37b9e933ea71dae30fb75
- SSDEEP 1536:Qxaj7ni05u/FqxsSU5Ecn248n5VPWp/iGYx9rArbDaTh4ojKglw65Z2M+lASyz:e85u9jn244WoGPXWKglr2MIASyz
- TLSH T1708312242058C3F9FFE48B35B2AFEBA7750F974198064AA0C8C47269D0BF156B4E9C0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Evil Genius 2 World Domination (Steam) Trainer Setup.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
Evil Genius 2 World Domination (Steam) Trainer Setup.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
开心电玩.url
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
开心电玩.url
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target Evil Genius 2 World Domination (Steam) Trainer Setup.exe
- Size 124KB
- SHA256 560ce9b3492863ff1661de392d32ea7240b17b9f45cf5056291df07179a90f0d
- MD5 747d1513e7c8b39045ebca802cccf9ec
- SHA1 b2e0e4287e4428e2798c1fb9a1e7222a870e778d
- SHA512 0f177502c05f029e47a4b056fed5e7500ed7b0e62fd7ca38db9a641467b3a4cdd7339886dbd328c87a22c0ef7dd1d3759eb0cad012ca05dac94b68a55065af43
- SSDEEP 3072:IGO+5DW54ILlCI+4COHPZEoRT8R4ILlCI+4zOHbCxj:IGPc+f3nB
- TLSH T108C38CDAE5DC2522D4AB4DBEA1762E080AF05E551DEAF7DB8D80706C2FB37615407233
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target 开心电玩.url
- Size 109B
- SHA256 6014db8cb26a184cc7d09044d124e0a970e50fa47aaed6c8e803a0041df3af07
- MD5 b96a19867c08c887000187908edd3eaa
- SHA1 ce6bf1dce480d7bc253c604807c423e9908f8fed
- SHA512 ea67cac427ecc8d978fa9f9ac6f33411a787a1cc991d45f4ce73744d4e2107d9600c3513679f47ec9bb25b03e6bdd21dfbbd097ab83db28760301270ac2e6d58
- TLSH T116B0129C8504C199D641C81EB0B0F804980E79E04CC2D4CCA590DDEB1E07083C845B2B
- MD5 SHA1 SHA512 TLSH
Score1/10