Overview
overview
3Static
static
3BepInEx/co...ny.dll
windows10-2004-x64
1BepInEx/co...ny.dll
windows11-ltsc_2024-x64
1BepInEx/co...et.dll
windows10-2004-x64
1BepInEx/co...et.dll
windows11-ltsc_2024-x64
1BepInEx/co...le.dll
windows10-2004-x64
1BepInEx/co...le.dll
windows11-ltsc_2024-x64
1BepInEx/co...PE.dll
windows10-2004-x64
1BepInEx/co...PE.dll
windows11-ltsc_2024-x64
1BepInEx/co...er.dll
windows10-2004-x64
1BepInEx/co...er.dll
windows11-ltsc_2024-x64
1BepInEx/co...IL.dll
windows10-2004-x64
1BepInEx/co...IL.dll
windows11-ltsc_2024-x64
1BepInEx/co...es.dll
windows10-2004-x64
1BepInEx/co...es.dll
windows11-ltsc_2024-x64
1BepInEx/co...re.dll
windows10-2004-x64
1BepInEx/co...re.dll
windows11-ltsc_2024-x64
1BepInEx/co...re.dll
windows10-2004-x64
1BepInEx/co...re.dll
windows11-ltsc_2024-x64
1BepInEx/co...on.dll
windows10-2004-x64
1BepInEx/co...on.dll
windows11-ltsc_2024-x64
1BepInEx/co...PP.dll
windows10-2004-x64
1BepInEx/co...PP.dll
windows11-ltsc_2024-x64
1BepInEx/co...re.dll
windows10-2004-x64
1BepInEx/co...re.dll
windows11-ltsc_2024-x64
1BepInEx/co...rm.dll
windows10-2004-x64
1BepInEx/co...rm.dll
windows11-ltsc_2024-x64
1BepInEx/co...ne.dll
windows10-2004-x64
1BepInEx/co...ne.dll
windows11-ltsc_2024-x64
1BepInEx/core/Iced.dll
windows10-2004-x64
1BepInEx/core/Iced.dll
windows11-ltsc_2024-x64
1BepInEx/co...on.dll
windows10-2004-x64
1BepInEx/co...on.dll
windows11-ltsc_2024-x64
1General
- Target BepInEx_RegionInstaller-v1.2.2_SteamEpicXbox.zip
- Size 32.7MB
- Sample261102-a9c58aes7x
- SHA256 2081dd006ef3b71de5151a652f8a07225a66b8a4e4c6ec376761a10ab1718fe5
- MD5 ca4e0cfa465c9198aff200eb4df92c08
- SHA1 1e977c4a8209e36b37b9da5a4d28f52f898aac3c
- SHA512 ba8ed189a3126c9fbc80c8ef1c55e1f249804680cdddbd364ceebfd389422cac131db0f7423b598f1e79defdf365e000079ae338c6cba0c18ee2352ea71ead47
- SSDEEP 393216:9VvD+FHiV5dZphIexc7ydepTudWjy4iBAVrgrA41FCm6GuB1W0FlHrdie/x1chdw:9V+FHibIuUidWuK4iG+M0riJWXY98
- TLSH T11C773391C996F403DD66B2F44A48ECB99A4B1326BD00ACE5FA2652B0DC4F38550FE5CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
BepInEx/core/0Harmony.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
BepInEx/core/0Harmony.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
BepInEx/core/AsmResolver.DotNet.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
BepInEx/core/AsmResolver.DotNet.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
BepInEx/core/AsmResolver.PE.File.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
BepInEx/core/AsmResolver.PE.File.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
BepInEx/core/AsmResolver.PE.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
BepInEx/core/AsmResolver.PE.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
BepInEx/core/AsmResolver.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
BepInEx/core/AsmResolver.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
BepInEx/core/AssetRipper.CIL.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
BepInEx/core/AssetRipper.CIL.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
BepInEx/core/AssetRipper.Primitives.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
BepInEx/core/AssetRipper.Primitives.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
BepInEx/core/BepInEx.Core.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
BepInEx/core/BepInEx.Core.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
BepInEx/core/BepInEx.Preloader.Core.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
BepInEx/core/BepInEx.Preloader.Core.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
BepInEx/core/BepInEx.Unity.Common.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
BepInEx/core/BepInEx.Unity.Common.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
BepInEx/core/BepInEx.Unity.IL2CPP.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
BepInEx/core/BepInEx.Unity.IL2CPP.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
BepInEx/core/Cpp2IL.Core.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
BepInEx/core/Cpp2IL.Core.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
BepInEx/core/Disarm.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
BepInEx/core/Disarm.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
BepInEx/core/Gee.External.Capstone.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
BepInEx/core/Gee.External.Capstone.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
BepInEx/core/Iced.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
BepInEx/core/Iced.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
BepInEx/core/Il2CppInterop.Common.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
BepInEx/core/Il2CppInterop.Common.dll
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target BepInEx/core/0Harmony.dll
- Size 258KB
- SHA256 6c898933b52149e8bcf6722305c7e4d94add47c9e53b364096f91721624c0877
- MD5 0a17eae2bacbe3aa05d19ad6523ac839
- SHA1 644d44efaf3098b023e614626ef368c8b31fcf1c
- SHA512 621713d4d43fb5665b7aebde1f8ffe3f35fb59386333113acd3dd105508b30d23a3de5491255c63a171d01a891d4921936c836ec1ce33b69cb5df46728eaf99f
- SSDEEP 6144:4HIc1aaJECVksgWuUQOZ47q7aZ8uM0+S:4HLOik3UQOC7r
- TLSH T1C5443C8567FC8A28C3BF1BBAE47020644679D927F829FB4E04D8E4E51DC5B56D6203B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/AsmResolver.DotNet.dll
- Size 510KB
- SHA256 b7de72ca9363a79c5fb6f08691eb82a8edcc1206eb1571511003cde3f5aaee75
- MD5 9357fa3a3037a25c7e061e398e53a38d
- SHA1 c3c4b30b73577d5a639be6dd306e959ba5005fe9
- SHA512 ed71a38541dcf2ae809400562b54f9031ed6842e8b1c9810ca2761d709e95e556868c22336ac5819624f56e97f6e6b45873f36de6d83ef90f011e03a4179ea53
- SSDEEP 12288:Zeuv2FWPMLKJELiU08GHYZHfjATu66Q9eyA:PAQMLKJWiU08GYfjt6x9ey
- TLSH T1BBB43A1033FC932BC1EE5779F03284085AF0E90BB266E76F1958DAE95D93B664D017B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/AsmResolver.PE.File.dll
- Size 39KB
- SHA256 c8f822e9caf1dce1d965441adcee00b94ce04b06a05a6cb292d5169c72da04ef
- MD5 b0b8e2de976d363882b50033b4b4b347
- SHA1 961937a5d7c7f67f19b1c240f7d9ddffe5e0569d
- SHA512 45b77addacb2b92c08d41e880a6e4cc600361e82afd9674a49f3135fc1b803b5a266a78f259f1ebacbeef58ca9a4f66c0c81a23a2ba10574d6583c378edc71a1
- SSDEEP 768:ghFbGog6xVbspRmbC9tYdPEXokUjfkymimm/d:gfjNBbC14rfkympm/d
- TLSH T106031A2063ACD33BCA9EC639E620811805F5D74F3646E79DDE98F0CA2E937C561625F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/AsmResolver.PE.dll
- Size 359KB
- SHA256 dfd0f77c9051d46b6a5d5818667385198df4eca2d7520ca46332d65349f53c76
- MD5 ced9547956c76f811742b3d15c1eafd0
- SHA1 2f0a3bc7cf3bb248709b0a316c4b800e5de522b7
- SHA512 b684032f675c103edfeecbbd58fbcdc0233015ec2004116f82f5a0b1843296d59bf56294fb0be972c79efc04a6dbc6ed55bdb6d0db137debec741b5c93790d1c
- SSDEEP 6144:o4qZh/94LFqO2YwNdE8GtdmUqkh//uxPNHaQk:+XEJWYmUt/a
- TLSH T1F8745A0067EC1726F4FF663AF07680294EB0B45A3319EB1FCA96859D1E23F585863736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/AsmResolver.dll
- Size 65KB
- SHA256 df58b7cdde0622de02d231d711d39e9814a79c953a2fe1794eda91d7a7901228
- MD5 fbd4ca7d8b4ec4a1b0027d7c739ba62f
- SHA1 40f6665acf414b44dbec02e5ee34ba1ccf64fcc7
- SHA512 9f7229adc79cafbd5c63438b7a9fc6e149652c2753fd06d86fc9c301a961269143d99eb386f46a4f9d34f80e430de06595a56ac6217cac51ee1d39cd66f4d1cd
- SSDEEP 768:4ph0wpQ41lkPfphCctStLYTkj1clLjdpZQ6A9sZ7tvQznxz/fdajsPbKWB6L00ia:gb1CJhCctStLMkjMYstGm20ixZ2RjS2
- TLSH T111635C3DA7588F37D7DF077AF4A113064FB0D1273657E34B92A9E0AD6853B840A22227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/AssetRipper.CIL.dll
- Size 27KB
- SHA256 bd8c2e660001b11f8c92885bec3d56611141595c23f3a3adef1cb8a95a7e9caa
- MD5 2dbf093aa982c08f0a6a72eceeaa8344
- SHA1 de22c05168ae67f3dad7c3de76725fab234bdbc9
- SHA512 4996c90aadf4eaef9b0ba5765d7c5cf87488ae00bd05528a70fb943e8dacd7342c4ea1a7c06d6e806532db1adba933e612ea2923c57151cf796f143b8f327b43
- SSDEEP 384:T84hUh3dSahaJ2rs5J8FQzoYEM1Rn+aor+iYOP4sIQdxv4PKwtbfWpQKtE:Tsh3bvs5JMQzoeRna55IQHsh
- TLSH T127C22935A715CF36CEFE8A7A6D6210919BBCE3016102DF032DE555DA4C8BB6A17213B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/AssetRipper.Primitives.dll
- Size 28KB
- SHA256 9802b9d85771985ae60780a945705d2da830bc6a3a0bcc4655a2e94a39b82d79
- MD5 6074760877519e771c4a9c6ce310b1a5
- SHA1 0b9bc2e16d37c1c61a403275c380d8c6ec2e9031
- SHA512 ebd8bc995d1d6bb9564baecf1827d1f809d06a2b0a99d7911dfec4fcab319af4368315965dc7075d3c568c84c134d4392744a035149ab4f8a951fd789540dbd0
- SSDEEP 384:n/oMh9wH2jV1ez2mE04MQYKwDhh+PqNFgFWCRDQUNpF2L+rR6Jn3x4Ib2YccxnAn:QuwH2bsx/4Wb2xabfEVJHdWu3+z8T
- TLSH T137D21904679C9732CF6E1A7A98F161105B74D28A7D63FF6B10C8A4A456573CC0C29BEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/BepInEx.Core.dll
- Size 132KB
- SHA256 c1ffc3a7ab7ae93251a8f97250bce58b31cb4e6abbeb399514e672ec5acd1e82
- MD5 8e7cf59ccdaab19d4c5c7d354dac36a2
- SHA1 05afa0eff02b215c229a48f105291bb46993a919
- SHA512 29397d2f9190136ff620f75e902def0efeb20272363b24b1ab68179decec8fa90b45b3f2a18ce190cba2f89bc6816bdfec18c8223c561a5129c402b2db04e753
- SSDEEP 1536:XSMs4G9IZMaCqcgEM1CB+YfSxK6uRwlEw7tBPRGl//h1Ak1/HMbx/Yj6ONE7FbKR:d1Gjqcy4IUSxLl5BPR2h/GYhXyup
- TLSH T13FD38C1633E84B27D2FF1B76B8F091250F31FA86E422F7DD4E8864AD6D2338595117A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/BepInEx.Preloader.Core.dll
- Size 51KB
- SHA256 671eacda611de7ffe95372d1bb26e36790c815d3b1779d018aefcbdb730fa191
- MD5 efc23e4e2b029015264d43e1364a6727
- SHA1 f1aaf9be6112573c0fd26762efac803ca1272bb4
- SHA512 f4f165ac0e81c1ad05b62149d330febc1597e45a4c10753fd26a9522cbfdf208206d891a04cf8f4712c363b8c907f52840c06da0e3909b2d3eca79eb35b50a0b
- SSDEEP 768:rvdTBiFGfUYMSca7Pzjp8lkZoz/pMyEka2GbO3nw+c/vmYh/jw9:rVgmTZI/3+zKE35c9
- TLSH T1E6334A1137EDC36AEAFE9FB47C70216601B9BE466832D21E1E8924EE1D37B840514F76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/BepInEx.Unity.Common.dll
- Size 13KB
- SHA256 bc27fb3fd1e1b566bfc1f78ce06574241ebf7dc1de7d9d04710a4f65ada91910
- MD5 fc9d42b861bb09344b0597f5097a12da
- SHA1 466cf6302895795777cf9402ba18584b71de4c2c
- SHA512 63bc5b5ce0af9b55318309d1a0b2f660e79c82366a5762f9f54c43702b02f496a8847a0777da48f2312640fee402810296f7aa2381614eca84d5abda624fe1bf
- SSDEEP 192:ctLvhS97YxyLfqLpLUm/jW7zs4e3aLI+S9RhR8RPL3J2R7aS8Ns:ctLhA0gyZ/jW7Y4g+StR8RPTJGh8Ns
- TLSH T140527D12BB989333CD6E577B28B7166103F1BB866863AF7E178D80CB6C1258505A1B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/BepInEx.Unity.IL2CPP.dll
- Size 78KB
- SHA256 565f2bd6e58de2731466b4cd4ce8264338974cbcdb28ed1d89f588e00cc6ad7c
- MD5 772d1e4d78a0627b607b1f746fa57648
- SHA1 6a6b4cbf9513c393af7e4003c4841ad0cdcd9490
- SHA512 2ac4dd2956626c6fcaa7475fbdeebd40cf141b1ff2154d1a43ccc75c7fde11460c3543242a30247e55ee686b35beafafb0f8efb1f1210771cb719ef96c1a3df5
- SSDEEP 1536:HhEkVDwFZYGXNyHB9wavUZMGTz7CyCN7tuRxs:SkSFvwHB9wavUBv7CFN7Q2
- TLSH T19B735C60B3E89104EAFD677E7C7214140FBABDF35422EA5F25485DED88B2A404E537A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/Cpp2IL.Core.dll
- Size 347KB
- SHA256 df0217a8a964c3b05a493fecce6651b624739cafa3683e5c67f1a1d8478bb4fb
- MD5 d8b81dfc563f51056d49a0a725d8bb42
- SHA1 cdb8e70aef6e43176d734943a587e2f209d937f0
- SHA512 c23545520c5486694440a39f1d5c2b2a2f579c865ef5b57ed25e0ce940fe945f53e1004aeade015cdd75f4a9800bfa4650ba471cb84b62c7bf8cb2a913b6abd9
- SSDEEP 6144:FiCAwHLvp2iPv1a2ncxDv2Fc8Xv3ixBGUuFIsK8DL1zj0d:g9wrx2iPv1a2nBcmfixVKX1zj
- TLSH T1A3744A1033F84379EAEF9BB9F8B4114407B1B867F47AE75D2498A8E80CA7754A910773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/Disarm.dll
- Size 135KB
- SHA256 6b371d0dfaa0631c81f898a567f750babfec5c361d8d2065e69be32e3a08e9c0
- MD5 a7fc6b6b8a1d0eccb20a7b4a83702ec6
- SHA1 41158bf112439786c5887b94a1899f6610fd37c1
- SHA512 649565ba38bee7d2f402df0912930fa9a63d64f0dcce7f8403e44f811373c259c085175653fbc96b8531e3c56e211107525e0ce88a177667033525b9a0bdc0b7
- SSDEEP 3072:FwYnyovJVbnC+lP6rWCBSwSLhUGMz+J68Ekvh:OgvJ51lMBSsGZE
- TLSH T12FD32A06BAF97537E8BD0F7604B350160BB679AA6B31E78D708CD0590920BC98C57FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/Gee.External.Capstone.dll
- Size 289KB
- SHA256 18f9cfbfd10b479143a46b3e417ccfce4a62d4c2770da9ed12d553a0b326302c
- MD5 e58b4ce725dfda194749a037fd778e5e
- SHA1 adad54dabb32678814f10c28176f55a8cd9a51ea
- SHA512 9e579f5f6ad15b646d7b956223e7d9bfcce5ab110a5f598840a64015077d8eedb5551cfe54bfdf59a65e64bb2da568ccebb635c11013472caac3e29977806d53
- SSDEEP 6144:r2+lRt6xWJtN2d0W1B0oOQxB0C931P7J1PpBZEU9:lt6CK0Mq8RXpsM
- TLSH T19A5496303EA45E2FDBEB033852AC4457056795091A196352E716F0AE5CEAB6B32CCFF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/Iced.dll
- Size 1.8MB
- SHA256 f058c01321b4cdfc9b9151879e88e59571c8d0ba176fbcf95bc936a8f3d073ed
- MD5 e1e3347e46e1777f93b5b2072bf12ccf
- SHA1 e8b5beca2777afbce30ce9216d228658b08512d4
- SHA512 4dfdc0037c61429369eca863a8ea17861ef69a70a74e3c15f39e1b409b420a884745a16dc60779279e362733da9b219ab4aa1eca56a804461ef8ff644cd47859
- SSDEEP 49152:VjmtTXJbStv4Bvh9qr5Wo0LKA3h1nrlDohXK5r32hQoKbRCU/832JY0XQ6mPzSsg:stTXJbStv4Bvh9qr5Wo0LKA3h1nrlDop
- TLSH T1D695B481EBFA8DF7EAB9A371E88913106020ECAE7F17D7676671A4710C477D016530EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target BepInEx/core/Il2CppInterop.Common.dll
- Size 39KB
- SHA256 6d8df18b3fe8181a4595865a1d85a52dd46ef7cc3f4dbc57a329f5c40a7a22a6
- MD5 09ec80976ada2a534009195ec2579d99
- SHA1 0dd73c8a9cd18fdc444831425f6b95ce3bffc367
- SHA512 09bb134750bb27398e82ba036d35fb7d3720bc8e0cc6ed067a9a62144389b80f62f980305d1d0094a55e6bda09ca048886bb85349e9c34cc2f29ad4378d98649
- SSDEEP 768:5ij1Nq3OVAxHytndZaW/+tSkOVtY22koL3VO:s1NDXndZp+cz83VO
- TLSH T1AF037D1126EE4733DBEE0BFD78E134010BB5E556B412EF8A48C8A4999C93B516B62373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10