Overview
overview
10Static
static
10HotPlugins/av.dll
windows7-x64
1HotPlugins/av.dll
windows10-2004-x64
1Plugins/Options.dll
windows7-x64
1Plugins/Options.dll
windows10-2004-x64
1Plugins/Options.dll
windows7-x64
1Plugins/Options.dll
windows10-2004-x64
1Plugins/Pr...er.dll
windows7-x64
1Plugins/Pr...er.dll
windows10-2004-x64
1Plugins/Pr...er.dll
windows7-x64
1Plugins/Pr...er.dll
windows10-2004-x64
1Plugins/Recovery.dll
windows7-x64
1Plugins/Recovery.dll
windows10-2004-x64
1Plugins/Regedit.dll
windows7-x64
1Plugins/Regedit.dll
windows10-2004-x64
1Plugins/Regedit.dll
windows7-x64
1Plugins/Regedit.dll
windows10-2004-x64
1Plugins/Re...ra.dll
windows7-x64
1Plugins/Re...ra.dll
windows10-2004-x64
1Plugins/Re...ra.dll
windows7-x64
1Plugins/Re...ra.dll
windows10-2004-x64
1Plugins/Re...op.dll
windows7-x64
1Plugins/Re...op.dll
windows10-2004-x64
1Plugins/Re...op.dll
windows7-x64
1Plugins/Re...op.dll
windows10-2004-x64
1Plugins/Re...xy.dll
windows7-x64
1Plugins/Re...xy.dll
windows10-2004-x64
1Plugins/Re...xy.dll
windows7-x64
1Plugins/Re...xy.dll
windows10-2004-x64
1Plugins/RunPlug.dll
windows7-x64
1Plugins/RunPlug.dll
windows10-2004-x64
1Plugins/RunPlug.dll
windows7-x64
1Plugins/RunPlug.dll
windows10-2004-x64
1General
- Target SourceDir.zip
- Size 72.1MB
- Sample240413-fgvsfsbf67
- SHA256 c477003d4707c9a4d3f483c049b3a9088aec84f1cfe7a4a1d9cee14c3159ab6c
- MD5 266588cc20ca6069ee822b9f7aefb083
- SHA1 2addfc605391f5b2de8fd987fb669094c1364a3e
- SHA512 1c335bb0ab0290b400806d2db4d3a38399257dc46530685da340d76a5d924a4c9ec31467eaeb3ff3a06c0f78dddd3a4f0ee18a796c0003ca2b38b07c12411c28
- SSDEEP 1572864:pM5O4BZ3hKpMKimvZjI3gQ9nbDGvCvakgB38irD4EAQjYkgiQbs:pTSKnxv63z9bDG6ZgBRAURr
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
HotPlugins/av.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
HotPlugins/av.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
Plugins/Options.dll
Resource
win7-20240319-en
Behavioral task
behavioral4
Sample
Plugins/Options.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
Plugins/Options.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Plugins/Options.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
Plugins/ProcessManager.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Plugins/ProcessManager.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
Plugins/ProcessManager.dll
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
Plugins/ProcessManager.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
Plugins/Recovery.dll
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
Plugins/Recovery.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
Plugins/Regedit.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Plugins/Regedit.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
Plugins/Regedit.dll
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
Plugins/Regedit.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral17
Sample
Plugins/RemoteCamera.dll
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
Plugins/RemoteCamera.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral19
Sample
Plugins/RemoteCamera.dll
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
Plugins/RemoteCamera.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral21
Sample
Plugins/RemoteDesktop.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Plugins/RemoteDesktop.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral23
Sample
Plugins/RemoteDesktop.dll
Resource
win7-20240319-en
Behavioral task
behavioral24
Sample
Plugins/RemoteDesktop.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral25
Sample
Plugins/ReverseProxy.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Plugins/ReverseProxy.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral27
Sample
Plugins/ReverseProxy.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
Plugins/ReverseProxy.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral29
Sample
Plugins/RunPlug.dll
Resource
win7-20240215-en
Behavioral task
behavioral30
Sample
Plugins/RunPlug.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
Plugins/RunPlug.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
Plugins/RunPlug.dll
Resource
win10v2004-20240412-en
Malware Config
Targets
-
- Target HotPlugins/av.dll
- Size 63KB
- SHA256 6d813ba03ff27bf4a342ce65020256f12c4c0cd3af802f2fe8b6176b9a01e50a
- MD5 0c2185d51efb900af3ca5d1ad8a36919
- SHA1 dcf6be79ce27720b95576c6eb7295a317af39d4b
- SHA512 f3956bb5f126e2e9612bfb9deee7ddfd0a3d8eed0da90c9d9768d60741de6845fcf1932371f5bdc5403ec7061e02dc0db01612d8a1369de0fdf1cfe3137252c7
- SSDEEP 1536:uRTDHKAAhYJz53WloceBkGHvxxIzzSPr:uRTDliYJl3OeKGIHSj
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Plugins/Options.dll
- Size 402KB
- SHA256 3de78a634f34eb74171ff05cb83d8da32dbadaaecfc6226b8847935ecc9ee55b
- MD5 af5e43fd6694d19f98b4e073df30b40b
- SHA1 a9ebe64ab2fa94dbfb6cb7657d72497072128f30
- SHA512 658eccc6b873724480063182df9599bb2fac75fe3ee218770a287696bf70185d4aba0d1f7cc7a58916bd36cbe2d2eb64425a1b0d179419faea2573770851118c
- SSDEEP 6144:NCjwXgvQfNlyE57D3g15ONiuwePZco/NawCUqB:sjyNhD3gbux5Na/B
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Plugins/Options.dll.duplicate1
- Size 402KB
- SHA256 3de78a634f34eb74171ff05cb83d8da32dbadaaecfc6226b8847935ecc9ee55b
- MD5 af5e43fd6694d19f98b4e073df30b40b
- SHA1 a9ebe64ab2fa94dbfb6cb7657d72497072128f30
- SHA512 658eccc6b873724480063182df9599bb2fac75fe3ee218770a287696bf70185d4aba0d1f7cc7a58916bd36cbe2d2eb64425a1b0d179419faea2573770851118c
- SSDEEP 6144:NCjwXgvQfNlyE57D3g15ONiuwePZco/NawCUqB:sjyNhD3gbux5Na/B
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Plugins/ProcessManager.dll
- Size 26KB
- SHA256 3d0722dc2d627978ac95d123d18b0ff637e4ef8ba414a17a41cab94e97330ab5
- MD5 b9e79f636d325cb7c6280bb9a554f149
- SHA1 996d45765032f0a545bbbf0772601a5b9e0bfb80
- SHA512 3b23b7ab53f2e626af2b2da77a892d7febb10b437eac5d2c4e6c362752be9bd27a8867d8500cc5036b7c63763282ac2e3841c9b5cc0c1b9563567f903ea1d23b
- SSDEEP 384:ZL3RGwIJampKt/a12XzFkCwdsehGwi6ZD4l9EH51DBqNvjV/1dRnB4aFAMFQHSJj:ZL3AXJt86WkfN6zRnOWAMFQHSJLf
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Plugins/ProcessManager.dll.duplicate1
- Size 26KB
- SHA256 3d0722dc2d627978ac95d123d18b0ff637e4ef8ba414a17a41cab94e97330ab5
- MD5 b9e79f636d325cb7c6280bb9a554f149
- SHA1 996d45765032f0a545bbbf0772601a5b9e0bfb80
- SHA512 3b23b7ab53f2e626af2b2da77a892d7febb10b437eac5d2c4e6c362752be9bd27a8867d8500cc5036b7c63763282ac2e3841c9b5cc0c1b9563567f903ea1d23b
- SSDEEP 384:ZL3RGwIJampKt/a12XzFkCwdsehGwi6ZD4l9EH51DBqNvjV/1dRnB4aFAMFQHSJj:ZL3AXJt86WkfN6zRnOWAMFQHSJLf
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Plugins/Recovery.dll
- Size 1.3MB
- SHA256 6abe9987d07871389ed15a66b0123f9b6c6f15a8414a011aa187e7c355254592
- MD5 aa029fa3057c8fd8dd9ed8b3c3487cc3
- SHA1 e4c168a84a6e931dd16d9e59e907cb99d7608f06
- SHA512 dda2595730237192a5645b61e689c90a0684d50fb2a5a85501927041bcbcde19a51aa782db416e975c5e96b91f467dd7c8169b3c6aa91214a6c8e2bb859e2fb8
- SSDEEP 24576:OjcjNgjeWwQyTGje9rjDvDW+2mwJ7Oe97v0uyJRE4wb:OjcjN5F+e9HzsmwJ7OeQrY
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Plugins/Regedit.dll
- Size 279KB
- SHA256 886a5b22e3f272b155e3afeca038d415ed2f1ab57dc4c4dbffc9f680490d8628
- MD5 8d08902592819068815a4445078b92e3
- SHA1 d0eea6aa4a8b1b2c61e95d87107a2b3fd109942c
- SHA512 c76f8c63d887bd026446910a92bbed7a13c3c6e1c90258da3d644d5b11a15ec947620540d73429e41b38704563ad4b32866ae8c3c6eba0e061f599a2a7e3233b
- SSDEEP 3072:Uz8SCxINKloZvaHRhBgU/5zLs9B4aI0GWNxwbo1dbJVzkeEE61Cg1fr7u/+B:Wa88oUi49Ls9BG+xNVHQHE2Cg1Dm
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Plugins/Regedit.dll.duplicate1
- Size 279KB
- SHA256 886a5b22e3f272b155e3afeca038d415ed2f1ab57dc4c4dbffc9f680490d8628
- MD5 8d08902592819068815a4445078b92e3
- SHA1 d0eea6aa4a8b1b2c61e95d87107a2b3fd109942c
- SHA512 c76f8c63d887bd026446910a92bbed7a13c3c6e1c90258da3d644d5b11a15ec947620540d73429e41b38704563ad4b32866ae8c3c6eba0e061f599a2a7e3233b
- SSDEEP 3072:Uz8SCxINKloZvaHRhBgU/5zLs9B4aI0GWNxwbo1dbJVzkeEE61Cg1fr7u/+B:Wa88oUi49Ls9BG+xNVHQHE2Cg1Dm
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Plugins/RemoteCamera.dll
- Size 107KB
- SHA256 7ab42add0570da2a7255341e8df28ff0d32f8f467f89f38196dd03b5bf7c438b
- MD5 80f65c889077a88b8eba07816309206f
- SHA1 8bceaad48fad25433d89865a5969d4ecfed38436
- SHA512 51dac722192b269f85da6809986d4323c6cd29eb9f76d2cf95dc1f2501ac801fb8de2419985866440fbaf102675d35562a8bdabb0e8ceaeff4b545d080ed9403
- SSDEEP 3072:SCmmsseegnQsBB33ppD7iiooqq0zYzh/0+rpk0qIpQkoL+OYylhwVJ:XmmsseegJBB33ppD7iiooqq0s4IpQkok
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Plugins/RemoteCamera.dll.duplicate1
- Size 107KB
- SHA256 7ab42add0570da2a7255341e8df28ff0d32f8f467f89f38196dd03b5bf7c438b
- MD5 80f65c889077a88b8eba07816309206f
- SHA1 8bceaad48fad25433d89865a5969d4ecfed38436
- SHA512 51dac722192b269f85da6809986d4323c6cd29eb9f76d2cf95dc1f2501ac801fb8de2419985866440fbaf102675d35562a8bdabb0e8ceaeff4b545d080ed9403
- SSDEEP 3072:SCmmsseegnQsBB33ppD7iiooqq0zYzh/0+rpk0qIpQkoL+OYylhwVJ:XmmsseegJBB33ppD7iiooqq0s4IpQkok
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Plugins/RemoteDesktop.dll
- Size 42KB
- SHA256 1380ddfecb74a0a6c3540778a3c62a9e318d43ac79084dd43bd1c2823f2013a2
- MD5 878d3cc940849e785ba379f91853f0b0
- SHA1 8060861e5ee6c051e0d6146f7826a049e748eb2e
- SHA512 34380161600f628658df51e755ca1ed96c783b1f56f5a72a9b50c3ef4a98498039586b95808e902763da67ba62aed561ad6d10f7bc0e6759ed92b1a6b8ddd077
- SSDEEP 768:lcIwgWCpOQx4kLLa7/fTOwpjAEM+WPWcpy4OLlz/OTThaZUa0egpuev3yX:aIUCpvUnTOwpjAEM+WPWcpy4OLlzSThC
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Plugins/RemoteDesktop.dll.duplicate1
- Size 42KB
- SHA256 1380ddfecb74a0a6c3540778a3c62a9e318d43ac79084dd43bd1c2823f2013a2
- MD5 878d3cc940849e785ba379f91853f0b0
- SHA1 8060861e5ee6c051e0d6146f7826a049e748eb2e
- SHA512 34380161600f628658df51e755ca1ed96c783b1f56f5a72a9b50c3ef4a98498039586b95808e902763da67ba62aed561ad6d10f7bc0e6759ed92b1a6b8ddd077
- SSDEEP 768:lcIwgWCpOQx4kLLa7/fTOwpjAEM+WPWcpy4OLlz/OTThaZUa0egpuev3yX:aIUCpvUnTOwpjAEM+WPWcpy4OLlzSThC
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Plugins/ReverseProxy.dll
- Size 14KB
- SHA256 f8463e1e852ded8fe6d542771bf7b0f39d5fadbb5533c31e26d993a734fba2dd
- MD5 5554d40435ad6ef99a0d085afc8c3cdd
- SHA1 4b70e9d0111c17835e0b4203431ea574f39bcd15
- SHA512 081a24945a8589e501e8d725efd5d3301202fe9a8be483bdd335fd9283079c3fa46e7125d939be38369e1c28d20faf004418f454ec1ed2023cb4e3741e3c31d3
- SSDEEP 192:+bBTOv+EgIRtac3iIs8YviqCOLUVw1xOa2ZHouB/By0t/WJIGWm9PIQ:0IvpAcFOLUqbkP/By0RE9PJ
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Plugins/ReverseProxy.dll.duplicate1
- Size 14KB
- SHA256 f8463e1e852ded8fe6d542771bf7b0f39d5fadbb5533c31e26d993a734fba2dd
- MD5 5554d40435ad6ef99a0d085afc8c3cdd
- SHA1 4b70e9d0111c17835e0b4203431ea574f39bcd15
- SHA512 081a24945a8589e501e8d725efd5d3301202fe9a8be483bdd335fd9283079c3fa46e7125d939be38369e1c28d20faf004418f454ec1ed2023cb4e3741e3c31d3
- SSDEEP 192:+bBTOv+EgIRtac3iIs8YviqCOLUVw1xOa2ZHouB/By0t/WJIGWm9PIQ:0IvpAcFOLUqbkP/By0RE9PJ
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Plugins/RunPlug.dll
- Size 41KB
- SHA256 6dee3bf3eaa9e674a86babb4c5e13620f80e0fe8934c9e03f1035c652f50ca4e
- MD5 b3ac8b30a0e5ebb04aee8fc11da5ba56
- SHA1 66fea52e544f4989e44d0e7dca796acc529e0c5c
- SHA512 a60c10ab4bb6a0ad426b7bb95617a53fa27f0eabed932aa8087c58a5914861dcc7c4c2559b2784e8f1460980ac0ee7cfb8edd243b443145185818acfe7a614ae
- SSDEEP 768:Of1YG8iqLEt83H4xkrofehyXsGgEeEU8/kFFf9PZfj6HwTdN37BboIHcpy:mYZiAHrhyXeFIwTdN37DB
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Plugins/RunPlug.dll.duplicate1
- Size 41KB
- SHA256 6dee3bf3eaa9e674a86babb4c5e13620f80e0fe8934c9e03f1035c652f50ca4e
- MD5 b3ac8b30a0e5ebb04aee8fc11da5ba56
- SHA1 66fea52e544f4989e44d0e7dca796acc529e0c5c
- SHA512 a60c10ab4bb6a0ad426b7bb95617a53fa27f0eabed932aa8087c58a5914861dcc7c4c2559b2784e8f1460980ac0ee7cfb8edd243b443145185818acfe7a614ae
- SSDEEP 768:Of1YG8iqLEt83H4xkrofehyXsGgEeEU8/kFFf9PZfj6HwTdN37BboIHcpy:mYZiAHrhyXeFIwTdN37DB
- MD5 SHA1 SHA512 SSDEEP
Score1/10