Resubmissions

02/11/2026, 12:34

261102-pr5vvacs6q7

02/11/2026, 12:30

261102-ppg11afb396

02/11/2026, 12:02

261102-n7lw8sszgt8

General

  • Target
    hotel-dusk-decomp-main (1).zip
  • Size 2.5MB
  • Sample261102-pr5vvacs6q
  • SHA256 4ca00b7269898825c3903a5ef99e1a62f1e3c2fec471df5e5c6009c31b7f6521
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      hotel-dusk-decomp-main (1).zip
    • Size 2.5MB
    • SHA256 4ca00b7269898825c3903a5ef99e1a62f1e3c2fec471df5e5c6009c31b7f6521
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      hotel-dusk-decomp-main/.gitignore
    • Size 292B
    • SHA256 dbc5ec2c99bbdbf7a957e6cbd63f2547ce0a5b8559ffc89a277bf140bbdeef97
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/README.md
    • Size 5KB
    • SHA256 827e7a2ebd4196e0b3aaccaddb8bb9daf537282cb795a6003be684d818dd6a90
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/arm9/include/hotel_dusk_arm9.h
    • Size 178KB
    • SHA256 ff62c69dfb155bbc7df688392cc9f77715967c23c2c1153269450c79cf351d99
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/arm9/include/hotel_dusk_types.h
    • Size 3KB
    • SHA256 3ad0dfa8b31e34279de6b17d9715c5f504ecc453e34acfba24e6036b25e2162e
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/arm9/src/hotel_dusk_arm9.c
    • Size 4.2MB
    • SHA256 ced7a724dda28182507acb75f6a0bdefec77a123ae001c9fd0d2cfcfa897c3c4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/arm9/src/hotel_dusk_engine.c
    • Size 7KB
    • SHA256 69501795182227dcd9bcecc28d7f8dc2da458f63d86268b541956b1630ba1543
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/arm9/src/hotel_dusk_main.c
    • Size 2KB
    • SHA256 94f667c95fcd1e5b2077aaac777e6dede94984a1908961241d424525b2276a1a
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/build.bat
    • Size 181B
    • SHA256 713333c49cc625679d41b1603a01a635f74728143f99b40b36476f7e6b92d4e5
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/pc/build_pc.bat
    • Size 2KB
    • SHA256 39cb48e688800ea08ec30b282c11ebf69da695a63fc5524883b7dfaa39cb7475
    • MD5 SHA1 SHA512 TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • Target
      hotel-dusk-decomp-main/pc/include/animation.h
    • Size 982B
    • SHA256 9bb11e5c66f8cc33fe9341fae9da97c48784bff0ab59e572ff37c65d3b74b8dc
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/pc/include/audio.h
    • Size 788B
    • SHA256 c6231d426e22da05d941a8cad32cc8bcbc3cd6f4a377b9bff0b2e64e61fece44
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/pc/include/dialogue.h
    • Size 1KB
    • SHA256 6b7043ffd82ec14176082f7179ca1551d7fe9a8d303b846d49a01083fd0af9ef
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/pc/include/font8x16.h
    • Size 11KB
    • SHA256 3973decb3ec8f0834f8f75f08305c85687075a65b1dfad14a595825eae3bba60
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/pc/include/hotel_dusk_pc.h
    • Size 2KB
    • SHA256 4b4d0f8d1ce9fb14974d751ac9daac73683d1413e0b62625bb9bdccdc1c889dd
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/pc/src/animation.c
    • Size 6KB
    • SHA256 ac5ba30f767392ee157032fd9d30fdb385c868e55e7a5d2df1e2d3fcaab4c5a5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/pc/src/asset_loader.c
    • Size 2KB
    • SHA256 15902ce49130d05c3efe8605f7743066fe1aabd94df3592eef7820ee6c69def9
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/pc/src/audio.c
    • Size 6KB
    • SHA256 9d328fac1e8e64cdc5dad44774f67fd07716b18b5141ad43680195f110d68844
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/pc/src/dialogue.c
    • Size 7KB
    • SHA256 48695e14d5ffd87ca2c8e03a86093ac4b84a478bc8541dc9592727e1c06e7b9d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/pc/src/display.c
    • Size 14KB
    • SHA256 084030c53f022f0c95260716a1300f72d57dd3def61d61a89844e4f34b6cf0fb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/pc/src/main.c
    • Size 11KB
    • SHA256 a5de0bcce88213e5f8f290ae53b1e650d88e13329ef3661fbe89c83e6ec4c077
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/play_hotel_dusk_pc.bat
    • Size 318B
    • SHA256 fe661bc79f8511825c3f8a629fda7b39e47d080934ba2618fbe048b1c5771710
    • MD5 SHA1 SHA512 TLSH
    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • Target
      hotel-dusk-decomp-main/tools/build.py
    • Size 2KB
    • SHA256 92d0812520d2a7bdbc05e24105e47fc4ef59984986d70ac4e1d28e94a4bf90dd
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/tools/build_rom.py
    • Size 3KB
    • SHA256 ba731e53f39851f21ba66d4daf33bf59344d68f2584028f2ff2a36aa5f72befb
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/tools/extract_assets.py
    • Size 9KB
    • SHA256 f3dce63a8cf03de9cfb6db15f261daab1981cd60904f0811b0eeddc1ac238658
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/tools/verify.py
    • Size 1KB
    • SHA256 438e567f2b2d283b97a6abf8d8d1cfec1406f0d4fc6775394bb51aa4c9297cd9
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      hotel-dusk-decomp-main/verify.bat
    • Size 182B
    • SHA256 7189070190bb4cc348d4e9f2ba728ec9d77b32499c4835ecc864cd6300f2172c
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

Score
1/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

defense_evasiondiscoveryexecutionpersistenceprivilege_escalationransomware
Score
7/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

defense_evasionexecution
Score
6/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10