9d94099c47aeeae850223af3e9819caac8bc61d92a283df59ff57e3f51093c3c

Resubmissions

13/11/2026, 02:57

261113-df1k7sez91

13/11/2026, 02:38

261113-c4yabaez2t7

Sharing

Copy URL Twitter E-mail

General

Target
Capys-Free-AA-v0.1.zip
Size 26.5MB
Sample261113-c4yabaez2t
SHA256 9d94099c47aeeae850223af3e9819caac8bc61d92a283df59ff57e3f51093c3c
MD5 8bb114acf94397bb4df44b954b88ff29
SHA1 9c988b23d726b4ce57bb1d9990fed4ff794cc893
SHA512 9b7cde7181ca24f034f3459dbe7b66cfcc1f1d09863d7d5320d213d500c041d222185ee9421bcb37dcf57e2a904f2a8257ee33d8dff9dfb13acca77b37fa8c15
SSDEEP 393216:LLpHJ7o0k7a3BM7en/8ebj4W1MpkIUzzdOWyP5XQahyjfIc9qlYN73QE9NtFRzV6:nT7oLaRM7HlCdOWyjaR9qlYN7rZzd+
TLSH
T1B457335A6F00D8DAEE86E83DA3D08603F87B34181452B165CFE59D5CCE1F6DD2339A29
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Capys-Free-AA-v0.1/AnimeAdventuresMacro.exe
- Size 2.4MB
- SHA256 f003b78676033f05b220818287cea86fd5987cb20b186a570d229c8250330959
- MD5 b421fa33c8f8222a68927ea6b0ec53e7
- SHA1 394159f4975f45a423beeec3da4b633a3f38f4a6
- SHA512 1b2a0f79a752e7be4be7cff24756bc242760afd8d3de2cec9e41c7aacf722d70647de6a275e19a96d83c54502b8cd25d2a5feecec7368e9f9a0d4f534f28d818
- SSDEEP 49152:AWjxPR1vMq0SJw7Zx+wHk7VBGKxSE97XtYWEQ0Vd+paou/WfMoDryGX:AAMq0SmmXqK7pgQd
- TLSH
  T115C5E10373E6C1E8DA7781F5C9564623EB3174641B388ADB2560952EEFB3BD04E3AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  Capys-Free-AA-v0.1/Other/Assets/Other/Transport/curl.exe
- Size 3.8MB
- SHA256 b3eefdc2420dd4e91c87dbd20682a29c64bf6fd8e5504eab3ab3c76a8a131ca0
- MD5 2f5dd7b6e09a514f0b13a78b1b0ad191
- SHA1 3d0a459fe028a6b16c6a70fd0ac21045a1cfd0df
- SHA512 8c61b37cfec447e19557d943b71a668d6d990512e64df33683044075ac3f610d0237673a5e82e164375892697ec6b770c01e54b0557bbd9c972475bb60b67cf5
- SSDEEP 98304:1fmW2rGyHozvTl9XvJG58FLYN8zxCPiQDt:fJ5N6ht
- TLSH
  T137069D67B5A061F8C411C074AB4692369A71B8893F34B9EF11D88BB03F96DF12F3DA54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Capys-Free-AA-v0.1/Other/Assets/UI/ItemIcons/cursed-token.svg
- Size 645KB
- SHA256 10ecb6052ffd3cd9e139c14d90c56532454a547bc41b895e821cc0824f2119d1
- MD5 265656fc93a288d6a9c4965a7ed66535
- SHA1 b448fa339f72ecd62a23e967c40a2b2d8a4a6dad
- SHA512 9cb4439e68778f924bbf6ba4cdf7e58fc9a991acc379771c9526e1ba35411acc5c873c50d9379dbd3fe88ab12640a6680adb6dafd43ddb3d911542f7b80612a4
- SSDEEP 12288:M33b05BwI90uTBU9bMeQ1keWF1T41Yvd99ZorYA5yiVfxHfl2kajG2H:miGQ0sUHeDW3s1Yvd993OBHBx2H
- TLSH
  T1C8E423468AD75EEC8F5C697929C28B9854E01DA5C944E3F7E31D34C203AEF358A072F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  Capys-Free-AA-v0.1/Other/Assets/UI/ItemIcons/gems.svg
- Size 755KB
- SHA256 e81a2f522b2c20abe1cf3bf4ef15f61c2b6af7d6c40ae88db354bb2defa1a9a4
- MD5 dda6208526879144a45e1b848a7a3311
- SHA1 9367f28b59f40f42692552c9a21b987e3262fd9a
- SHA512 52da4fe97089f71408516b90c8fb2d7370156d3c69dbab20f0a4f8c82aa26f2d264169dd2eff5ed7205aeecf38eb254d4a0f0e85b19601cb29b2c5a949600c1b
- SSDEEP 12288:rXN1Ph4lrigFKstORswCClQVVLqjCljMp4Zs8454Wq47Gq7aLV0nJqdxKtdI9auI:bZjgFhOZGVVLiCXl45Pq46q7lKqLT
- TLSH
  T19EF4233175449E0D1CFC733174BB1E0EA5D50CA7C8AD468AB6E7794B469DBB00AACC89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  Capys-Free-AA-v0.1/Other/Assets/UI/ItemIcons/perfect-stat-cube.svg
- Size 650KB
- SHA256 c9f1ad50ad483aab61c636527c01a94a2dc0731716969f1f3a5f0d7594bbf782
- MD5 28dbd083ac0a7eb4bc4261015cab9165
- SHA1 a5c22bc911e0e947ecc77e3e7f18438b41d1aad4
- SHA512 8ed51a492afe24c580e5ea15f3a13cb3e1308c186191dbd3587b9c110dbcd543797f7be91caa72dade26eb7b68e4c6843b25b2a1848a2651b6afbb0e3a43d6a1
- SSDEEP 12288:EcIpfkroWd6yUFBi3mhypwPAATeVrqfl/S9babj78GKH+VTLHPQuGe:H+rWIFE3lpwXTeVsl/+ijQPeTDPQuV
- TLSH
  T109E423827E265F6A13884718A44F57211F750FA8C089F3F66ED9BB97005EF2074EB678
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  Capys-Free-AA-v0.1/Other/Assets/UI/ItemIcons/snow-reaper.svg
- Size 1.1MB
- SHA256 d52286b75044cb05e060b3ae9f2beca2f92fa59a465d1901a949fa1cae050402
- MD5 46c56d16404e682182b9c13c8a06553a
- SHA1 4a6f30ce8a287d709cee426f3a0afffa0aac11ad
- SHA512 5da5dbea6cd6c2cb0586d65e6c76f065f101613ff392a237ba593c65d7e50b8b6c7691e9271e4eaa1a0f6052859073b19d445e7bb3cb58fd15d5fdd671b6bd04
- SSDEEP 24576:GJOtWOOafgdIEJgNKBuHYFI5IIKzZVMXuTRunt427Bl8vd5t4zZEkq:eogRxWXuInt4eVEkq
- TLSH
  T1333523435E302E1F8749C7A971761C7A2B6A6C6D620CD2DE80043FEAD6CFB91967F442
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  Capys-Free-AA-v0.1/Other/Assets/UI/ItemIcons/star-remnant.svg
- Size 406KB
- SHA256 b7610f8d2f675b46847183bce7f368f33e846b91738917b6f9cc66ebe4d750a3
- MD5 4f7791e38029fd04cbbdcaae47ded264
- SHA1 34738e8abc0db939a2f8ad4010ef8b384777ff5b
- SHA512 e055a324f6ffa07103ccafc1a36654bd2255ae6cd1e46d552d2d4644cbe49102495ef7242c28b9bedbd76fb4442207719360453491fb89039d357f215423aa41
- SSDEEP 6144:hcdi4i7s6yiIsttzf5jmbfy7lFdnUBoXymIZ3lkR234yeN4aZw76ipQzI4LR78:hcq7JT/zBjoAFeBoXyLI2IlTZuj
- TLSH
  T1699423A01F3C7E9CAA9C371B49FF438B3FF04542082BB1B62462CEE5951F619925E578
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  Capys-Free-AA-v0.1/Other/Assets/UI/ItemIcons/stat-cube.svg
- Size 504KB
- SHA256 c1063b04db088cb05f4f15ae62f52685a7c1a77ccc7e2eab69aa9f84e3f09b0c
- MD5 9ccf12729638832547e034827ca5fd82
- SHA1 2f542c00580d5574018affe5af6ca311f3ae197b
- SHA512 22e5bdeba2e53627c09141ebdee97ff8ddb221a97174408cf17261e8191068d0dd6f6ce6e820edaf7e9229caca9eda7c4df76713cde61a74871a5f547f99843d
- SSDEEP 12288:BOjCQ6pNDcqRQNqdNqNaQUnj+Lqxd1bfZKLEllvusFT:weDc6M+o7aKW1bfAYeI
- TLSH
  T188B42302CA7E79A8C25C2A14748D0DAC54BA99F511FDD8F6EFC3ACFE641E71E104B911
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  Capys-Free-AA-v0.1/Other/Assets/UI/ItemIcons/summer-pearls.svg
- Size 1.0MB
- SHA256 4d42112d155c5b676e4e52f8e0ab9ca90511ac3180ca55e2348d7298b9544e35
- MD5 f642821b83ed7275d19caf4949b8bf2b
- SHA1 52b605f322c712fff18bf7df6e8736b6ec494417
- SHA512 041f0f772f514012ff1400cef313395b0c3200a0d9e8b59a95f5dc5051f75407a8a01b8e28bf35a760defff4c792df08a376298e8a7aa5ed658ef76b4047d4be
- SSDEEP 24576:5HRvPaoaWhEltr0IMmCroq5ZJjcW8flAJDASq/npKJ3n55sdyM:5AdXj8fDVQH
- TLSH
  T17235F135D9177FADA4452AE8240130057C9946BBE60702E8F68CE9BBF0E99306FC7DE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  Capys-Free-AA-v0.1/Other/RapidOcr/64bit/RapidOcrOnnx.dll
- Size 15.3MB
- SHA256 211693007280c42d4055db8fc54e1dc3809fa21e35e86949bdb733d028df6bf6
- MD5 c6f5e8160b23e15d668abad5c9dc1b80
- SHA1 ff3de07b78c0589e8faf383202cb187baeca7754
- SHA512 b0325e5efff2cca49fc25d0c78b24ac5162a206c783d36a59693c2813cb4a82ff0c90699d1358ecdd3ac2104710f9758873df40e329c833ed9f72be272580b89
- SSDEEP 98304:Y0CQZLmZZjaOQdYhNDLblkrI3HQWMPPa44B4UgKcxT/bidtRAklU165O:Y0MZjaOQdYh1ZkruXB4UgKgTeH5O
- TLSH
  T17CF67D57B2E811D8D1BBD1788A6B9A03E7B1340903B05AF7129545E92F17BE0BE7FB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Capys-Free-AA-v0.1/Other/WebView2/64bit/WebView2Loader.dll
- Size 157KB
- SHA256 bf2fefaff7fd4775ea1e07328cc3142721943948f16d261fb82cbd978b7f99e2
- MD5 5525f542ef0aee3c546cd2a4cef5c9d6
- SHA1 3ece5714527a45cd43b429e66c24cf3e7150d907
- SHA512 ecf1922ea28d2cec125cc81c2254922a81d2bbb5ee05d546e929d1ceec747da6b7314fa2102e7bb1c398bc53c283d50f09b1aa6716869f79752405998dd1e733
- SSDEEP 3072:Q/2N6GchehS7YQGKTtXBJZi9JGfJT8AEtJZkYmRSI+H8qF:FNNq67KTtXBXzEtJc+Hb
- TLSH
  T1D2F34B5BB3E500BBE16BC278C5A74A06E772B81117509AEF036447791F237D0AE3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks whether UAC is enabled

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21