Overview
overview
10Static
static
775003550df...e4.exe
windows7-x64
775003550df...e4.exe
windows10-2004-x64
10$PLUGINSDI...if.dll
windows7-x64
3$PLUGINSDI...if.dll
windows10-2004-x64
10$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
10$PLUGINSDI...nt.dll
windows7-x64
3$PLUGINSDI...nt.dll
windows10-2004-x64
10$PLUGINSDI...os.dll
windows7-x64
3$PLUGINSDI...os.dll
windows10-2004-x64
10$PLUGINSDI...ig.dll
windows7-x64
3$PLUGINSDI...ig.dll
windows10-2004-x64
10$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
10$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
10$PLUGINSDI...tc.dll
windows7-x64
3$PLUGINSDI...tc.dll
windows10-2004-x64
10$PLUGINSDI...eb.dll
windows7-x64
3$PLUGINSDI...eb.dll
windows10-2004-x64
10$PLUGINSDIR/inetc.dll
windows7-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
10$PLUGINSDI...ay.dll
windows7-x64
7$PLUGINSDI...ay.dll
windows10-2004-x64
10$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
10$PLUGINSDI...ES.dll
windows7-x64
3$PLUGINSDI...ES.dll
windows10-2004-x64
10$PLUGINSDI...NG.dll
windows7-x64
3$PLUGINSDI...NG.dll
windows10-2004-x64
10$PLUGINSDIR/nsURL.dll
windows7-x64
3$PLUGINSDIR/nsURL.dll
windows10-2004-x64
10General
-
Target
75003550dfe37e16c7ab4584c84320e4
-
Size
1.5MB
-
Sample
240125-t8yv3sbgbr
-
MD5
75003550dfe37e16c7ab4584c84320e4
-
SHA1
b0be403be030a7c2228fdbd7f0ffbd28f4fe1293
-
SHA256
0463b4e565fdeeb1511beea6e9d152ec3939298c20fdef976a52c1d8b5ecdfb0
-
SHA512
d0520c2631d12d046b3dd9e3cd7952c7df4d831e33f4020ac7ff55b4595fb4981aa67b4164e1ae48785d3bce0406441c6206ecf7af3c9595367a2c22aaf1c12f
-
SSDEEP
24576:EJ8GxR0H59jRD1AslvIolv+j4GEddH5ZN9LAfXqSM0s++4C3rCH8aQJwEH:480R0H5X2sVNGEddH5RUfXHV+d3mHNQ1
Behavioral task
behavioral1
Sample
75003550dfe37e16c7ab4584c84320e4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
75003550dfe37e16c7ab4584c84320e4.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/AnimGif.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/AnimGif.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/BgWorker.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/BgWorker.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/ButtonEvent.dll
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/ButtonEvent.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/ExecDos.dll
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/ExecDos.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/IpConfig.dll
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/IpConfig.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/ThreadTimer.dll
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/ThreadTimer.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/TkInetc.dll
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/TkInetc.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/TkNsweb.dll
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/TkNsweb.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/inetc.dll
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/nsArray.dll
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/nsArray.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/nsFILES.dll
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/nsFILES.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/nsLANG.dll
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/nsLANG.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/nsURL.dll
Resource
win7-20231215-en
Malware Config
Targets
-
-
Target
75003550dfe37e16c7ab4584c84320e4
-
Size
1.5MB
-
MD5
75003550dfe37e16c7ab4584c84320e4
-
SHA1
b0be403be030a7c2228fdbd7f0ffbd28f4fe1293
-
SHA256
0463b4e565fdeeb1511beea6e9d152ec3939298c20fdef976a52c1d8b5ecdfb0
-
SHA512
d0520c2631d12d046b3dd9e3cd7952c7df4d831e33f4020ac7ff55b4595fb4981aa67b4164e1ae48785d3bce0406441c6206ecf7af3c9595367a2c22aaf1c12f
-
SSDEEP
24576:EJ8GxR0H59jRD1AslvIolv+j4GEddH5ZN9LAfXqSM0s++4C3rCH8aQJwEH:480R0H5X2sVNGEddH5RUfXHV+d3mHNQ1
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
-
-
Target
$PLUGINSDIR/AnimGif.dll
-
Size
9KB
-
MD5
200b6570553d00a76de8a5a6c9587f07
-
SHA1
08ca76a84cba8483ab34285d07909e08bdbf4a67
-
SHA256
8fb060b77728fbe347e294d1174a732db7cf9c99b187f8f332662c87683fd0a3
-
SHA512
01ab8aa80d7d5d3083f2e3016aab5dad29c0bbba18b225a5dde51b3bc6fa4c8c1278aec17d76bc5ee2b9ccb8532c22d79845162f752bba6ee12341b4d64304e8
-
SSDEEP
192:gOHvLYKKad68vn0YQRbqLGWSMRH00yQTbxDdHw:bvLXKa0OqRqS1MRH00HJdH
-
-
-
Target
$PLUGINSDIR/BgWorker.dll
-
Size
2KB
-
MD5
33ec04738007e665059cf40bc0f0c22b
-
SHA1
4196759a922e333d9b17bda5369f14c33cd5e3bc
-
SHA256
50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
-
SHA512
2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef
-
-
-
Target
$PLUGINSDIR/ButtonEvent.dll
-
Size
4KB
-
MD5
55788069d3fa4e1daf80f3339fa86fe2
-
SHA1
d64e05c1879a92d5a8f9ff2fd2f1a53e1a53ae96
-
SHA256
d6e429a063adf637f4d19d4e2eb094d9ff27382b21a1f6dccf9284afb5ff8c7f
-
SHA512
d3b1eec76e571b657df444c59c48cad73a58d1a10ff463ce9f3acd07acce17d589c3396ad5bdb94da585da08d422d863ffe1de11f64298329455f6d8ee320616
-
SSDEEP
96:hrA2+5HGZFYJf9D8IjDflDCoMzncsGSmE:hE2+5mMJfJ8v1zFGSm
-
-
-
Target
$PLUGINSDIR/ExecDos.dll
-
Size
5KB
-
MD5
ebcf9f71d804abab3c2e5ce4c17dc22e
-
SHA1
17d13084e75cbfa5fbfdd0025e9a0ee5772ae765
-
SHA256
d387b725afbd2a6f9b44999278d21025fae55b391e45f7751b88dfb13511a993
-
SHA512
5576396c2d885c039668d7f401eeee583eb4de39e8497c3aaec32d47f4417a522fe6786c111d50a5fba7570f50e84144ef3a8aea42677d170e79114343c3a4a1
-
SSDEEP
48:qNpugCjmWaZ+rnHAUiP9JLw/RHFtly5vorpSpSi7+5HCAx31Oglt6Zlrz9QH96AD:r0W1nHAfPPORHnooAU3xYglt6WwE
-
-
-
Target
$PLUGINSDIR/IpConfig.dll
-
Size
114KB
-
MD5
a3ed6f7ea493b9644125d494fbf9a1e6
-
SHA1
ebeee67fb0b5b3302c69f47c5e7fca62e1a809d8
-
SHA256
ec0f85f8a9d6b77081ba0103f967ef6705b547bf27bcd866d77ac909d21a1e08
-
SHA512
7099e1bc78ba5727661aa49f75523126563a5ebccdff10cabf868ce5335821118384825f037fbf1408c416c0212aa702a5974bc54d1b63c9d0bcade140f9aae1
-
SSDEEP
1536:CPDzpyvLtmY7SeAmhPzV8+i7kRuACUxHf91MionF9JTwrLPG5zfO+lP7:UZl1e7L4ARzC3dwrLPG5zG+lP7
-
-
-
Target
$PLUGINSDIR/System.dll
-
Size
11KB
-
MD5
c17103ae9072a06da581dec998343fc1
-
SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
-
SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
-
SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
-
SSDEEP
192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
-
-
-
Target
$PLUGINSDIR/ThreadTimer.dll
-
Size
3KB
-
MD5
c43953f463c22e048e45b402d190e77d
-
SHA1
b4a5e6567bed3c783af030df9418f91a7bac3040
-
SHA256
4e2a7c511e0f2ef46ac9002e0666f058ea5a4657371f086e2e4797393ee2fbf2
-
SHA512
18facd89f3dc55826b7aa0c02b8fdf3a1e6741850e4d9c264fb095e9da7956f6a4d331655ef00862948397d1a3f99d15243d03ef09c145a39c3b9a0c2ef4c974
-
-
-
Target
$PLUGINSDIR/TkInetc.dll
-
Size
172KB
-
MD5
8777f46e35ab035d4b526377d9a7097b
-
SHA1
9780ff9145be4aa7a912e6dbaaf7d781316b9adb
-
SHA256
d5bb2ebaac75a1588f00cea3d35faea0e5a3c7c319785406315cda2d4a52bb47
-
SHA512
131d6d9de492d55dc55df396a5153119bcb1c09c723abf009d8a7ef3cc71244b51f7ac1715bf7bc23c9b94ac661c255cd7a30e97267295ce060487705395128c
-
SSDEEP
3072:bhW2YXDpNYCy32SHyE1k7skVSiIJz6Kp+CYF:bhW2YTIJzk7skVXIg
-
-
-
Target
$PLUGINSDIR/TkNsweb.dll
-
Size
59KB
-
MD5
c6731fd774db4835a5763afd404a50eb
-
SHA1
c6b20b36631b513ca8647d952b95469b77d2ac24
-
SHA256
23861a8828cedc363baa54760766c01fdd9e1414073ca1148ff9a19ca818b13a
-
SHA512
c3eca3f693f4ff6b078e0708c70156f2184708f0e07d40f3cd54dd24556ae6e010a89b9bfb777f4131f0d0ee0f87d79015e7eb8f0b2606fa156d846dd581e197
-
SSDEEP
768:LGGFsrrp6e7co2DLJUcUw9nf/bsJVtCcdWANKDrYsWjcdvCQFEzLr+M4dk:LGdNRIrLJUBwZUvCcdgYsWjcdqQdvk
-
-
-
Target
$PLUGINSDIR/inetc.dll
-
Size
20KB
-
MD5
e541458cfe66ef95ffbea40eaaa07289
-
SHA1
caec1233f841ee72004231a3027b13cdeb13274c
-
SHA256
3bce87b66d9272c82421920c34b0216e12c57a437d1955c36f23c74c1a01d420
-
SHA512
0bf6313e4cb7bbdcfba828fb791540b630adc58c43aa4b5ba77790367d0f34f76077cd84cc62e2a2c98c788a88547f32a11e549873d172c5aa2753124847cd0c
-
SSDEEP
384:b1JO6XgZkjxm+NpXaWgzxUX//EUhU7ya4LQ0Ac9khYLMkIX0+GBty3Sm0:b+6Xgsm+NpKWgzxUXnEUhUua4Li70
-
-
-
Target
$PLUGINSDIR/nsArray.dll
-
Size
6KB
-
MD5
f8462e9d1d7fd39789afca89ab6d6046
-
SHA1
7e9a518e15b7490245d2bef11a73f209c8d8d59b
-
SHA256
48941e9f5c92a33f1e60a7a844d562dd77ce736fd31b5503c980b49679dfe85e
-
SHA512
57dee2253abd7d17d53811d5e95237f9434288518fb043645524a517786db2d8a91df86a6da732c620f12ad0e7ea30a923b8d5f3de386c65bd3ff240bc0dff69
-
SSDEEP
96:TjGBPJ762z6gjutipI+h7jz5ozZt/aYfA7EfXxLfAZi:/ix7ibUpIS+Xa1wX2Zi
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
-
-
Target
$PLUGINSDIR/nsDialogs.dll
-
Size
9KB
-
MD5
c10e04dd4ad4277d5adc951bb331c777
-
SHA1
b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
-
SHA256
e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
-
SHA512
853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
-
SSDEEP
96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
-
-
-
Target
$PLUGINSDIR/nsFILES.dll
-
Size
179KB
-
MD5
7f74996a4bf2ff85bcce4d9183c8c5fe
-
SHA1
5def8ca9b766686e66d84d07398e2c6338c3fa36
-
SHA256
a51470865754c14bdd149b2b713213e48ab51b2c3a601912813cfd6312b410cf
-
SHA512
617c5f81505cf9400f572631c99fdd37359f15bbf7a4c71e20738c37dcced1b5506dce5371b0f791ba59a6686d61b0281b2ee4131435bfd300a051c585c2928d
-
SSDEEP
3072:REKCOhgO1kxaAzpXXeszpNo68+AVqwb2bcHRg:REEqB08p78DVCk+
-
-
-
Target
$PLUGINSDIR/nsLANG.dll
-
Size
80KB
-
MD5
fa1763b462940d9646732678a1f91b6b
-
SHA1
2d3651b31e97204302721d62c4432d06b82e8e85
-
SHA256
2e20675e85d0cf4c8b12b3997e7b1351329b954ce60ace01cd363571f7b8c3ea
-
SHA512
4b842cab31569c5e821ae729dd91b85f67e043e3628aee5fc71cd1b4caf51b062564570f1ecec2db3e9b4abd6c37583bff808bda479593f8f27464ead237f6ac
-
SSDEEP
1536:AsB1XsZc0dE+6MHqW+OciAaPqsWjcdqdg5y2fl:Dsh68qW+m3P1qdg5y2f
-
-
-
Target
$PLUGINSDIR/nsURL.dll
-
Size
109KB
-
MD5
ee1c41db6834538ee4048ccfc45055be
-
SHA1
efbbfc884a3193fadf542b0bef387cffc86923b7
-
SHA256
8904eb2c575ac5509d1a19f7c14b6ab804e88c22e3c2232d45de4198cf9850aa
-
SHA512
312c60a27ee625c9454cb8403c575bd2f9562fd1288ae84ad648018b62e455bf89928acb2508e75be8e76cd19ac1127e873b1187d06fa265ca2e624e02382ffb
-
SSDEEP
1536:kiGoWl8XxFrDWGDtOsVMHusRD4i4cx+N4cWsWjcdOE5BzlE5d:kSWl8PrDpQsyOxU+N7OE5xls
-