Overview
overview
3Static
static
3cb1aa7675b...e3.exe
windows7-x64
3cb1aa7675b...e3.exe
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows7-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$TEMP/mult...LL.dll
windows7-x64
3$TEMP/mult...LL.dll
windows10-2004-x64
3SearchPanel.dll
windows7-x64
1SearchPanel.dll
windows10-2004-x64
3SearchService.exe
windows7-x64
1SearchService.exe
windows10-2004-x64
1addto.exe
windows7-x64
1addto.exe
windows10-2004-x64
1appdata/pl...er.dll
windows7-x64
1appdata/pl...er.dll
windows10-2004-x64
1appdata/pl...es.dll
windows7-x64
1appdata/pl...es.dll
windows10-2004-x64
1appdata/pl...ch.dll
windows7-x64
1appdata/pl...ch.dll
windows10-2004-x64
1appdata/pl...ch.dll
windows7-x64
1appdata/pl...ch.dll
windows10-2004-x64
1appdata/pl...er.exe
windows7-x64
1appdata/pl...er.exe
windows10-2004-x64
1appdata/pl...rl.dll
windows7-x64
3appdata/pl...rl.dll
windows10-2004-x64
3appdata/pl...in.dll
windows7-x64
1appdata/pl...in.dll
windows10-2004-x64
1appdata/pl...ch.dll
windows7-x64
1appdata/pl...ch.dll
windows10-2004-x64
1appdata/pl...ch.dll
windows7-x64
1appdata/pl...ch.dll
windows10-2004-x64
1helpscreen.exe
windows7-x64
1helpscreen.exe
windows10-2004-x64
1General
-
Target
cb1aa7675b00c6b9612032f585febce3
-
Size
4.8MB
-
Sample
240315-lwj76add6s
-
MD5
cb1aa7675b00c6b9612032f585febce3
-
SHA1
7a83063ee7141a633d8398c36b785c38871aed18
-
SHA256
9a33ff3deea984165327d7334e3cffa8df23aebcc1d1c0aa144044a52df35421
-
SHA512
1817f83ac42aaefa5ba7a776fd5338a6cbd7728291a20bc3afe8a089287d516d22dde8a47e15e36c8a1a1627600881d830b0bea9b28edcb7447b30ff183cb0af
-
SSDEEP
98304:cwc8XamvuYltEHphS2ZyRVfFRAE05vBqNs15NQjj46WNqsu0cMEf5IND:hXam/DEHLZyXfFeEyQv4RxSXI1
Static task
static1
Behavioral task
behavioral1
Sample
cb1aa7675b00c6b9612032f585febce3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cb1aa7675b00c6b9612032f585febce3.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/UAC.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$TEMP/multibar_un/KillProcDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$TEMP/multibar_un/KillProcDLL.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
SearchPanel.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
SearchPanel.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
SearchService.exe
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
SearchService.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
addto.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
addto.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
appdata/plugins/friendmeter/friendmeter.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
appdata/plugins/friendmeter/friendmeter.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
appdata/plugins/games/games.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
appdata/plugins/games/games.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
appdata/plugins/inet_search/inet_search.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
appdata/plugins/inet_search/inet_search.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
appdata/plugins/local_search/local_search.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
appdata/plugins/local_search/local_search.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
appdata/plugins/weather/TicnoWeather.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
appdata/plugins/weather/TicnoWeather.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
appdata/plugins/weather/libcurl.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
appdata/plugins/weather/libcurl.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
appdata/plugins/weather/main.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
appdata/plugins/weather/main.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
appdata/plugins/wiki_search/wiki_search.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
appdata/plugins/wiki_search/wiki_search.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
appdata/plugins/youtube_search/youtube_search.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
appdata/plugins/youtube_search/youtube_search.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
helpscreen.exe
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
helpscreen.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
cb1aa7675b00c6b9612032f585febce3
-
Size
4.8MB
-
MD5
cb1aa7675b00c6b9612032f585febce3
-
SHA1
7a83063ee7141a633d8398c36b785c38871aed18
-
SHA256
9a33ff3deea984165327d7334e3cffa8df23aebcc1d1c0aa144044a52df35421
-
SHA512
1817f83ac42aaefa5ba7a776fd5338a6cbd7728291a20bc3afe8a089287d516d22dde8a47e15e36c8a1a1627600881d830b0bea9b28edcb7447b30ff183cb0af
-
SSDEEP
98304:cwc8XamvuYltEHphS2ZyRVfFRAE05vBqNs15NQjj46WNqsu0cMEf5IND:hXam/DEHLZyXfFeEyQv4RxSXI1
Score3/10 -
-
-
Target
$PLUGINSDIR/UAC.dll
-
Size
17KB
-
MD5
88ad3fd90fc52ac3ee0441a38400a384
-
SHA1
08bc9e1f5951b54126b5c3c769e3eaed42f3d10b
-
SHA256
e58884695378cf02715373928bb8ade270baf03144369463f505c3b3808cbc42
-
SHA512
359496f571e6fa2ec4c5ab5bd1d35d1330586f624228713ae55c65a69e07d8623022ef54337c22c3aab558a9b74d9977c8436f5fea4194899d9ef3ffd74e7dbb
-
SSDEEP
384:59TzaeW+WyB8c7LX+OGkrwWvVrkUiEMAWm5nskAvXkq:5ZaB+W62Mr5vGUiEum5sk
Score3/10 -
-
-
Target
$TEMP/multibar_un/KillProcDLL.dll
-
Size
32KB
-
MD5
83142eac84475f4ca889c73f10d9c179
-
SHA1
dbe43c0de8ef881466bd74861b2e5b17598b5ce8
-
SHA256
ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729
-
SHA512
1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1
-
SSDEEP
384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+
Score3/10 -
-
-
Target
SearchPanel.dll
-
Size
258KB
-
MD5
29fceeb4df481c034578d6366bd1550f
-
SHA1
8b40b762f778fb796c6c0b246125e07660e98901
-
SHA256
4cf3bb6cd8a3866bfab663543ba0bd59978cd9adb60d5f2f8096156a30abb65d
-
SHA512
69ab5f24e6789cf7425dad39f302aa39ba14a60f981e1ce18d1f2aa0b162945c11c9b187b52d458e4068246aa0d9f53a0df78b78cc71702d6119c5c748feed77
-
SSDEEP
6144:ai9NTNMuz8nPTkgMqL01/y0vG8DWOdWH4b5:aiPSuzc01KN8yob5
Score3/10 -
-
-
Target
SearchService.exe
-
Size
273KB
-
MD5
4d3a82f93fbc3b288f933c5e3182544e
-
SHA1
1412ebe89f20998a3e17ce52f6900e26f66c8438
-
SHA256
6db977ebfbabdcb2a034aaceac80a4c26be7280aaeaa907e0f8186a7682d7947
-
SHA512
c06f6eee5db6b56588e2748fbd7252083750921598cded2b90929961bdfddf0a120066102b721729f737decb139c6285abd29a665cba7456c6d528f94e37c380
-
SSDEEP
3072:6dtbYeBbF6J8KzatCH+ea9UEIBAMGKDglUFxmm8V2ZTqjhlvdNpP5ZjHv8p:3/+tga9UE5MGKDG2xmmKjLvvpbjHUp
Score1/10 -
-
-
Target
addto.exe
-
Size
55KB
-
MD5
fcef99f5e00a4c2ea71ea6ab5fd98b6b
-
SHA1
932e0d29f957eee225c67b8041150e8b03c158cf
-
SHA256
f1e7e407c2788109d1b317f1a41408ce1285daffa1435ff172188e344b304df4
-
SHA512
c04e2be881e0069f95cf24b6386bb5a2fa67871376de7712ec56e302137d47199f3dba4d301f982130e82ccb42c0c5c95677f8369b4680ec1d48973954be4a30
-
SSDEEP
768:yCWaaLEysoTO5gwaIbvCTeqkbJTckM2vKkp16LtOZI5WXY:3aRO5o7kdBKkGtB5WI
Score1/10 -
-
-
Target
appdata/plugins/friendmeter/friendmeter.dll
-
Size
236KB
-
MD5
913a87059e2b252eb7b0dcbd74c45fa8
-
SHA1
772277eb752fb8bd378644bf32be80d35fbe8b03
-
SHA256
ed97068d97d290eff024edfe9583b9469487077bc603771e299f40220ecf1480
-
SHA512
243ee0e9637c25f4c828dfd364451756640ce96e035d38357ef32b4082c8c890dc2503088d5081a8cfb7c58acd6d9dc61894c5db75f9034e668e05eff2e2b733
-
SSDEEP
3072:2S9u4WPs5mdl59anHdzlxZ0slRmktiI4jJ5FgkiYwKdLDc9LObEkPUJJSrSxRuCa:wU5mdlKnHadjHd09qbEkGZxRr+
Score1/10 -
-
-
Target
appdata/plugins/games/games.dll
-
Size
253KB
-
MD5
430afe4f16d5b5d1fd89e0e33a7949d0
-
SHA1
4191f45e27a45e278ea3f1978dd2ec5143ec8f03
-
SHA256
0bbc7e2e2479b5ae50d0b8f6842395c79541b6d5f71930806a50f3da5df86076
-
SHA512
6aae4bcc461c1d0d9c9b1958de448981712f39b6f09188a007d595e27e6ae806207d1ba4d45bb25593716d309a3118cd5876612a627df44f043d19f3f6d624ad
-
SSDEEP
3072:QD1qoLA+U0ORYD/Ul/xEANHF2G5UL4RH57SF0o/lmajuATIuGrahb4g5apoV8SgL:4Tkv0OaD8qSZUt9rTIHr6ap/
Score1/10 -
-
-
Target
appdata/plugins/inet_search/inet_search.dll
-
Size
319KB
-
MD5
7c0fac58f061d10c559389751b308a78
-
SHA1
1cf3491c06e095c67eba331858362927000aaecb
-
SHA256
cbc7a8045f947eb050bcc3b5a48dd7037d45c6b91d05ba89719e72bdc423dc0c
-
SHA512
9f3ca89c1a1bcc49f062ffc690a18afb4608541db0318e17223fbf8e65aaf41b0cf072c7131a4639a3d2de28fd93cd7a0e40b1b1407d77cfee99e066ec4b4a16
-
SSDEEP
6144:+VqWXSWtcPcctNR79+cQTHJwSwSfAO0JQ:SvCWtctpwcWHJw4fK
Score1/10 -
-
-
Target
appdata/plugins/local_search/local_search.dll
-
Size
321KB
-
MD5
328b85d8b7b2ace9dee75eb5f39abbbe
-
SHA1
6c15fbcd36cbda563293d6a1634b189baa07100f
-
SHA256
c3700902d8d0b9450170beee9ad1815c322877b57063fbe25134bb6f4fe21a93
-
SHA512
f5808d268e81d3121e5ea304004b77cc62a70fbbe57617729c2d8d4638671c21467366c0caf078c4a29f9cd89dee190e4555cf45b51cc37f3b014a1b47398e8a
-
SSDEEP
6144:2zzhw+xRDy8i6uszvwZSZwEi2jJpV90AO7V:E5i6uGvwweiJpV90z
Score1/10 -
-
-
Target
appdata/plugins/weather/TicnoWeather.exe
-
Size
1.0MB
-
MD5
91b472962cd804c2302b1850e28e4dc3
-
SHA1
a12d2832ef82c20f44179485222833bb5fbec502
-
SHA256
4bca71f10dbfdf4d3239f2dfc1840edafc08ec4ec0e1e02c556186142c31a10b
-
SHA512
12d39a185dbd70d681d92aad8113d55168e639b409613a58a9ca4e60490bab610a06d06a5d8b9b11933e2ea49ecd2d50857468f940aa76330a0622477fb6153b
-
SSDEEP
24576:sbfRYQ+fjoTzZAoRLSvcRrUy24IO36GXU5LHWrGmhzP9BDRFF:voRLBrUyh1E5zWrGmhzP9vFF
Score1/10 -
-
-
Target
appdata/plugins/weather/libcurl.dll
-
Size
240KB
-
MD5
fa4441c0eb1611d99ae18467c4d6deeb
-
SHA1
df5e43bf502bfd8cc47fa94109bbdfbd57a4e0c5
-
SHA256
2cd5e6d329de923b5a2182c6b455df9a63823102262cce24592f44dc84385d26
-
SHA512
c11191896d3fd10888616e8cbdb21954b6e19651afad9799ec5c65c3f89232a0cce5e4be71c6b984ee6a9a7e78d71ab07c7e65de0e708f5ec26a6960c3981d3e
-
SSDEEP
6144:AEWI2XRut6Ki2QE/3plWNUuEprInO4qTBh5Yi:AEWI2It6tcDWNckqTji
Score3/10 -
-
-
Target
appdata/plugins/weather/main.dll
-
Size
46KB
-
MD5
f8778f223c6676966b3c32850875fa08
-
SHA1
34bc813fd1ce85dcca704ab25560ae6fe330abf0
-
SHA256
b188663b86b3e8d6d7d7d133c401dde46912c8c25f40e6268cdcad539f469a50
-
SHA512
9063bf41adbf49f286e5f89ae581f6cd050fae3e6cc4e37d89437f5b7ad141a5ac27c887392abbc68b32f6f489ab3a52fddff41c20bd05180bcfe26c93036b74
-
SSDEEP
768:lo5Bffw4vesPm/cGilW8ZmV0V8X01ufooF+6JLD:kpKT/6W8ZmynIJLD
Score1/10 -
-
-
Target
appdata/plugins/wiki_search/wiki_search.dll
-
Size
125KB
-
MD5
bc7b6da51d09bf45648fd6cebf8618c7
-
SHA1
18344e96f725e74dc2b67971aed537f6a5be95f7
-
SHA256
6d4c5dfddbe7c7077163b713dfff3cd13fe681bfd457e3a9c24d8ba830f9866f
-
SHA512
f9ef72571168fc64129c8049add306265ef561f81724720d7ce163d14067f225f412169a71749f04803e7f0cc7ba9cf1459698cd9bd01b90679a9921112f99fc
-
SSDEEP
1536:3LyYFh9t1LbAIaEc+UqbPzwY+vuhvHhcwZd/fL57CL8LSqHaBpy5Z/bUkL:3LyYFh9PLbA8UOGuHRxoIOq6Hy5ZY
Score1/10 -
-
-
Target
appdata/plugins/youtube_search/youtube_search.dll
-
Size
125KB
-
MD5
864522048e14fa4292cc5c93c1bf68a1
-
SHA1
3370d04806ac03fcf1102d4cab83c3ac98b2f4ab
-
SHA256
12f114428fc3b5f4a4f26529efd7df69da0f39ce765630f723644de993bb2612
-
SHA512
2f18a4a76ac13c102f652fe7da79eb640c060c5802fed973b427894d8d88dc3359cdf7d4b63a6f0f1e6b25c0cd33de446c8cd5b5df5f1a501dba088862bf3153
-
SSDEEP
1536:kUpxqdpx7QYiUTXWnybKOQYJ72hvnO5dPPrLLCgK2tLSRXPgn5Az+ozf0PnE:fpxqd37QAGm7+nWx6gfORi5c+S8P
Score1/10 -
-
-
Target
helpscreen.exe
-
Size
313KB
-
MD5
c1aeabb20744007787b014a8c091dccb
-
SHA1
d44025a4184fdb20495f592f308bc90ef0156016
-
SHA256
622964d21befed9394eea2a6151a0a83a240bc03727f8747c3a4ef324b7bf26a
-
SHA512
3df81aca1fd5ec39628cd5e2ebfeff6caffd01bfe18a08a1a9b87aa1d3ddadd8a739d8c4826b63e25e2101d7893adb2763dc3feca2ee237e45696a17c656aa0a
-
SSDEEP
3072:36L7KbfTHZR9SCwRwmNZg4pVNhpe70XVpGVFsUVsaHpcEweRpNW5EK/20u4NiNmz:KL7YB1qw0re70F0fuEwvNukUk
Score1/10 -