Overview
overview
6Static
static
3Mod Menu V...32.dll
windows10-2004-x64
1Mod Menu V...64.dll
windows10-2004-x64
1Mod Menu V...er.exe
windows10-2004-x64
6Mod Menu V...er.exe
windows11-ltsc_2024-x64
6Mod Menu V...rt.dll
windows10-2004-x64
1Mod Menu V...rt.dll
windows11-ltsc_2024-x64
1Mod Menu V...47.dll
windows10-2004-x64
1Analysis
- max time kernel
148s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/11/2026, 04:31
Static task
static1
Behavioral task
behavioral1
Sample
Mod Menu V5.87/Bin/x32.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Mod Menu V5.87/Bin/x64.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral3
Sample
Mod Menu V5.87/Loader.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Mod Menu V5.87/Loader.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Mod Menu V5.87/WinDivert.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Mod Menu V5.87/WinDivert.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Mod Menu V5.87/d3dcompiler_47.dll
Resource
win10v2004-20260911-en
General
- Target Mod Menu V5.87/Loader.exe
- Size 3.3MB
- Sample261102-e5wtzsey7y
- SHA256 66c40452401d757b674da91db8ef2a81ae340888e11a4feeb2664ce2d7ec5520
- MD5 1828cffbd2280b7e076c26456217d0cd
- SHA1 03bc2f55e5577a1c57f799565467919cd5aa1da8
- SHA512 17328d75f2ac0b0cf4fceb29c54be3111844567714e455406677adf793c2825acf3b5d5e2bdd9cf0d265c27d1508a3146a88473113726734a83e45c2bf0ad1f6
- SSDEEP 49152:wIIw0Afe+6D1cAoIui7SrsEvJld7DJ9D3P7HW5moQ:w40g9D
- TLSH T12FF55C07BED584ADD056AB35807742617A70BC0C9B3563DB1F90BBB82E727C19D36BA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname Loader.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain Loader.exe