Overview
overview
3Static
static
3WinToUSBPo...er.exe
windows7-x64
1WinToUSBPo...er.exe
windows10-2004-x64
1WinToUSBPo...er.dll
windows7-x64
1WinToUSBPo...er.dll
windows10-2004-x64
1WinToUSBPo...og.dll
windows7-x64
1WinToUSBPo...og.dll
windows10-2004-x64
1WinToUSBPo...re.dll
windows7-x64
1WinToUSBPo...re.dll
windows10-2004-x64
1WinToUSBPo...ui.dll
windows7-x64
1WinToUSBPo...ui.dll
windows10-2004-x64
1WinToUSBPo...rt.dll
windows7-x64
1WinToUSBPo...rt.dll
windows10-2004-x64
1WinToUSBPo...ts.dll
windows7-x64
1WinToUSBPo...ts.dll
windows10-2004-x64
1WinToUSBPo...as.dll
windows7-x64
1WinToUSBPo...as.dll
windows10-2004-x64
1WinToUSBPo...Ex.dll
windows7-x64
1WinToUSBPo...Ex.dll
windows10-2004-x64
1WinToUSBPo...ix.exe
windows7-x64
1WinToUSBPo...ix.exe
windows10-2004-x64
1WinToUSBPo...er.exe
windows7-x64
1WinToUSBPo...er.exe
windows10-2004-x64
1WinToUSBPo...er.exe
windows7-x64
1WinToUSBPo...er.exe
windows10-2004-x64
1WinToUSBPo...SB.exe
windows7-x64
1WinToUSBPo...SB.exe
windows10-2004-x64
1WinToUSBPo...90.dll
windows7-x64
1WinToUSBPo...90.dll
windows10-2004-x64
1WinToUSBPo...if.dll
windows7-x64
1WinToUSBPo...if.dll
windows10-2004-x64
1WinToUSBPo...fd.dll
windows7-x64
1WinToUSBPo...fd.dll
windows10-2004-x64
1General
- Target 98872c915e12259499f1f1a27a6ace74e0b39853bac86f2465ecd9d8140c825f
- Size 11.7MB
- Sample240530-eq9sasfa28
- SHA256 98872c915e12259499f1f1a27a6ace74e0b39853bac86f2465ecd9d8140c825f
- MD5 3d7edc0eb30aa164ccb5725d141b19b0
- SHA1 54b443b58bfb31a7b1366c7e8bd8b0850b38c1d0
- SHA512 5bcf1b99456be1e724abd2c541fcdec13cc916861e52e19cec2c284c9ccb4fb3b835ffa9b2ad91effc93e7ef3d6040d9cf0ae885952f27475a55f6969989b06b
- SSDEEP 196608:1p+BWPpdkzEOhJ5MoDPeE03P+Yw4oiN+oFks2wF+f1ZfkIBKtBXR9av3bswQctDt:1piCrkdrLC0Y4c+5HwFQ1hKp9CYwQDjW
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
WinToUSBPortable/App/WinToUSB/bin/CloneLoader.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
WinToUSBPortable/App/WinToUSB/bin/CloneLoader.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
WinToUSBPortable/App/WinToUSB/bin/ImageAccessorWrapper.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
WinToUSBPortable/App/WinToUSB/bin/ImageAccessorWrapper.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
WinToUSBPortable/App/WinToUSB/bin/Log.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
WinToUSBPortable/App/WinToUSB/bin/Log.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
WinToUSBPortable/App/WinToUSB/bin/Qt5Core.dll
Resource
win7-20240419-en
Behavioral task
behavioral8
Sample
WinToUSBPortable/App/WinToUSB/bin/Qt5Core.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
WinToUSBPortable/App/WinToUSB/bin/Qt5Gui.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
WinToUSBPortable/App/WinToUSB/bin/Qt5Gui.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
WinToUSBPortable/App/WinToUSB/bin/Qt5PrintSupport.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
WinToUSBPortable/App/WinToUSB/bin/Qt5PrintSupport.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
WinToUSBPortable/App/WinToUSB/bin/Qt5Widgets.dll
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
WinToUSBPortable/App/WinToUSB/bin/Qt5Widgets.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
WinToUSBPortable/App/WinToUSB/bin/Qt5WinExtras.dll
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
WinToUSBPortable/App/WinToUSB/bin/Qt5WinExtras.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
WinToUSBPortable/App/WinToUSB/bin/VHDOperationEx.dll
Resource
win7-20240419-en
Behavioral task
behavioral18
Sample
WinToUSBPortable/App/WinToUSB/bin/VHDOperationEx.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
WinToUSBPortable/App/WinToUSB/bin/W2GFix.exe
Resource
win7-20240220-en
Behavioral task
behavioral20
Sample
WinToUSBPortable/App/WinToUSB/bin/W2GFix.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
WinToUSBPortable/App/WinToUSB/bin/W2UTrigger.exe
Resource
win7-20240215-en
Behavioral task
behavioral22
Sample
WinToUSBPortable/App/WinToUSB/bin/W2UTrigger.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
WinToUSBPortable/App/WinToUSB/bin/W2UWatcher.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
WinToUSBPortable/App/WinToUSB/bin/W2UWatcher.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
WinToUSBPortable/App/WinToUSB/bin/WinToUSB.exe
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
WinToUSBPortable/App/WinToUSB/bin/WinToUSB.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
WinToUSBPortable/App/WinToUSB/bin/atl90.dll
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
WinToUSBPortable/App/WinToUSB/bin/atl90.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
WinToUSBPortable/App/WinToUSB/bin/imageformats/qgif.dll
Resource
win7-20240508-en
Behavioral task
behavioral30
Sample
WinToUSBPortable/App/WinToUSB/bin/imageformats/qgif.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
WinToUSBPortable/App/WinToUSB/bin/imageformats/qgifd.dll
Resource
win7-20240508-en
Behavioral task
behavioral32
Sample
WinToUSBPortable/App/WinToUSB/bin/imageformats/qgifd.dll
Resource
win10v2004-20240426-en
Malware Config
Targets
-
- Target WinToUSBPortable/App/WinToUSB/bin/CloneLoader.exe
- Size 188KB
- SHA256 1136be6e509a94a4f24766f13fc90d9dff6d135f8c24d531de4460f70c4e8480
- MD5 bacc27660ac899b314b1b3433a7de2c2
- SHA1 712cbd5deddca6ba8100bf2dea28bf07aac9e8f9
- SHA512 0cd7e9d3fd8d5cc08336d972d37aa6aac3f0f51a3d03c18bb1d3b3d878ddd9edc02dfaa839accdcae14db8d07ec1ecf6a6537e5e008254b15af11be120aedcd9
- SSDEEP 3072:v+Epo4QLxbkKXxapJtlpalGJlO/+X2th+TMlxCa8maQ7JcAn1iyie+gm:vFp6xbkK4tl4EJlOG0hflxCvjQVc01ia
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target WinToUSBPortable/App/WinToUSB/bin/ImageAccessorWrapper.dll
- Size 679KB
- SHA256 acb8078410fcb42005b74ecc831f69f7d11ec5c140ab66995b506493f2539882
- MD5 0ad46085c71737ebe1ee1cec77fc4b1d
- SHA1 1ba9eb3dbe0009c1b7166a66a4991710eb6d4eaa
- SHA512 9cc6a613aaf08dcf9f8e94bf040a80d0dac4c2bb3478b96d71343ae070004f36298d99c44ac8570afce21706622c3d282a8081e20bab79834064517aaeb4d7f1
- SSDEEP 12288:wwf6iBe/SQCZeKo3gN9hGffYNDodITAFI:w3/VCAKR7MfgNsdITA2
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target WinToUSBPortable/App/WinToUSB/bin/Log.dll
- Size 148KB
- SHA256 c5d8a4dcc9ace4a99a61f1c2c3043bedad50d346df71c2e444e9de7acca4d47e
- MD5 7dee5c214cfb862164af8f27ac8fff9e
- SHA1 82edd3a6d5f492d435d51c71f571f9ed669ef7b6
- SHA512 f7fcd655403c626e8c75d28d2b5702518f3bfe9fbfb5b28aadbfd2bc7dc835b79f9e962bc4a7b5c8f56530310387a99bd201f3e46d9460381db2ec1ae16daeaf
- SSDEEP 3072:7xhSOEAyRlSJtp8sPifIf4PR6OHha+gpELp/3H:7H8E4IQPMOHhaMt
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target WinToUSBPortable/App/WinToUSB/bin/Qt5Core.dll
- Size 5.3MB
- SHA256 d6514f0c26848e52f21409a83121e4c6016d755a042a0421384a35e85c4ef083
- MD5 e56adb37f382933d253b5cc6c03558e3
- SHA1 86aa67707ef59ad105d7b93922df5080c777dbed
- SHA512 8f6d9004921c529055e61b484beaf278586abfc7d2b3eb0f5c1b7ab849ece69594a2381891386930a9f0756fa49a0cab0204d29face3cdd2cdc9d4cb443c9f38
- SSDEEP 98304:QKAun4YNzLUbvyJsv6tWKFdu9CTTzRWHfej:QKAE4YNzLU+Jsv6tWKFdu9CTZWHfe
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target WinToUSBPortable/App/WinToUSB/bin/Qt5Gui.dll
- Size 5.7MB
- SHA256 b2f2b83b73898a1349e865387c5ac6bcfcb3b60262d86756fcaa719e11764962
- MD5 76b128b63cd4da34ba9331f18d5f134d
- SHA1 bf63a4acf3b7f0fcef49d45ff86f2bdc26b1ff53
- SHA512 6526f551dd18de82ee93f1abf8f40eb43d057716c76b85c19f0502a5bc7d406d5d0f3d390e9139bcac395e35ce300ddf7e27e41060967818632345b41f30ff16
- SSDEEP 49152:ujzhLDsRlJQJaC1jy/vm6Rl7TrWY/toKivPCnCxq6udDWE3n2ztbgRY+2ScqT4QK:EzJsSHwv7Rl/JC4njG3+2C4QAH
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target WinToUSBPortable/App/WinToUSB/bin/Qt5PrintSupport.dll
- Size 309KB
- SHA256 a301383f7ac56f3fb9d0ed8fc5920bf835ee5f84b99600bcbb9e75af7c1904be
- MD5 27955bdddfa4e769bee21d0c480da474
- SHA1 93d9f8038607545f87c20575c0568cf5b832abf6
- SHA512 58afb302e82336079e7c9ac238ca6222c844163ed140ee11fd9c232e4ab2f9903a49379c82b219ed54fd88015c95d443fd61354024353f4f38379bc57d33649a
- SSDEEP 6144:i+b142rDsf112Z7yxHZF7MauyOk/XM9POQtFA2vqWsL4BMzAneMmw+IMyxafG5uu:i+b142rDsf112Z7yxHZF7MauyOk/XM9n
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target WinToUSBPortable/App/WinToUSB/bin/Qt5Widgets.dll
- Size 5.3MB
- SHA256 ea7a2da56cb649c31553c4afcc5410e6485df53ef87e72fe2a34acd926076495
- MD5 2d2bbc295c9825572329b78ab23bc0a4
- SHA1 7d24dc7b3a2f4fac82dc1a4f118eb33040e3bf90
- SHA512 ba3ac9193f071300b652417c99fc2553769bc48b8c0e115b856dff5c74afd3af656aafd54b062195fb33afb6a215a8faf132b26da758b3c6f1716c83b1d0b370
- SSDEEP 98304:LlIHkZmyTtvkJJhddLL5ugGFPO2bacIGxfRu8/aJHYjzZSOaM3P7txZDSHs5t3a+:L6HkZmyTtvkJJhddLL5ugGFPO2bacIGw
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target WinToUSBPortable/App/WinToUSB/bin/Qt5WinExtras.dll
- Size 275KB
- SHA256 2bc571e6362e75310eab3afd9abf6f010a346ab1f7bdda87ee371a6b2611c2ba
- MD5 7b26ed0102b802354e15842e6e96476a
- SHA1 5cae4f2f0c3cc15ec8066ce0a7840ced83ce776c
- SHA512 ee5fd3030998f6b044c9a4ba3d784b1181b1a0304c4de02863ce7751b125dc376f0e707549ab6a96a523fa6d9f1334f7642dd746ec7b1a874293fa4f5c1d67d5
- SSDEEP 3072:tPadV1w6w69V3Zc9olfcTvOprRceX21IcOAiDNHo:s1w6wQ3ZOolkTvLeX21IcOAiZH
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target WinToUSBPortable/App/WinToUSB/bin/VHDOperationEx.dll
- Size 154KB
- SHA256 bac7612021aa0b41cd170d29d349b43a5c6c06174b5d947d57f9e34595fa79aa
- MD5 e2173401e74fcaffdb0773f4b2344367
- SHA1 2e64a32a724b42cf43d1036dc07555bee9c0f340
- SHA512 d89b4b86d8e5f68929ed6c924fb57326477250af2c6b6d0546a82f9e1924f883f34f0f137a7eecd1a9f42f98d2ccaaa0df5c25b5e319a6fea2c6a152bdb07a24
- SSDEEP 3072:ORzoVHwcCLVZTAQVBOTx04DTdnjbxcsjTyB7vnyd+Uy6vrq5bMW:OqVaLvOThDhnh/2B0i46Q
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target WinToUSBPortable/App/WinToUSB/bin/W2GFix.exe
- Size 138KB
- SHA256 12f1ef82930cbf0ecc93bc7e793fec6c66309f6be1d2be8250d931d7174db277
- MD5 207fb2b96b47a447eabb7fcd28b497b8
- SHA1 bc236b1a6d5230eec2cdf2b74026c82e41ddc1de
- SHA512 a496b3c66187f76d440638fb055ce974cb0b8420c241aff67159321ca5d084dfdce24d1610fe8ab90715c653e6c721c7a2ee84497cefea3b29463474a92c9f70
- SSDEEP 3072:Iq57BpWOk9dWjPjd3YUD3RqDo+GjMixVIYsZYksp9bQBZAxBLyuzmXV2kVLaP01r:Iq7PlLjVIYmYtvQ4x5yuzE2Maeaj
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target WinToUSBPortable/App/WinToUSB/bin/W2UTrigger.exe
- Size 320KB
- SHA256 62505f4e665d1fb54726031f4a2a009585c96fb829f0bc174bed0b87d86063bf
- MD5 0871e38e9baaae92c2eb1ecc53f439f0
- SHA1 1cdb2e3f6b78d0627b8b720655df5c218fffbbd5
- SHA512 47248d229c6d92d2849022cef17077a66742319bdaf430ee5c0f8cba5a117f32d64a7ce076f6b07b63be05a806ab4b33c45bd077a72f5e2a58041283d0ad23e7
- SSDEEP 6144:kkZevGdr6IBtWCQ48l3HLyby7mJjl0U5sU/z3BgkoULdsdN:kqevGdr6IBtWCQjl3HLF7WjmgBgfUJ2
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target WinToUSBPortable/App/WinToUSB/bin/W2UWatcher.exe
- Size 360KB
- SHA256 7a59f489a721354620165e1e44b12d5bdc12b5c61ed4e3d6274cbf61e0937e0d
- MD5 54617e9d035705e4a1808e35a5125d23
- SHA1 c5939e763982474ad17da4c8a7657a5b37956c25
- SHA512 d4ba787f269838874359e2a808a14aa24c5f2757142c26f395912c798ba4d562645c88048cfd00753e3bc6e871fe8ec4034586a6137e197b59e5d7784b85e93a
- SSDEEP 6144:mupQtvJrEEIrWpUkcO96S7aC5LMXZRT/jjS46LndcP7Os6q/RYt5gsbWyy:mupQtvJrEEIrWpUkcO96S7t5AXZVjCu5
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target WinToUSBPortable/App/WinToUSB/bin/WinToUSB.exe
- Size 9.9MB
- SHA256 6dc0f75dda343e775fbee3daf1aaebcdf0483ebf85b0ef1b7b132de77afd92cd
- MD5 f4cbde67f1af1fc0804a4537f3b2915f
- SHA1 108d2f03f0ae2d32580b9a2c219b7f1e2c1d8cd8
- SHA512 52bd92feaa13d54d080707accb02889c44ce2ef15a707b7840d524a4e79b1660ea3b5c0b43935716be07d56f0c8ea78b10fd3a1c295319fad7a8d8ec7e8bde19
- SSDEEP 98304:/OMZQJKFtVg9WjAu7rGVM1it42L87Lyw7eDLQGUff3+qAcvh:XXFvg9W5/GVM1it42L87efDLQJfPZ
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target WinToUSBPortable/App/WinToUSB/bin/atl90.dll
- Size 175KB
- SHA256 9645f00c8cdbd96ec61a99443ce4eaf178cfcc164848f847b70472c377be4fb9
- MD5 55241ddc9a3c9dd0ebecaf78d4a767d7
- SHA1 f65f38ddd4f4ec5ea0ea2fe069684072cb8637a6
- SHA512 04f44715858280ca3e95605b90dbaf4bad20712cc03243762d2372900c4ff7263baf45e98469bc3e493b2b047fd0d04b371c5070c6dc70018aa422f4626d9eb9
- SSDEEP 3072:8Kb0CPMXKeSEAlKRdPsBpllrfgVssZZsIq09kmE2XmwH/nXs523zl38Cy/n:JH+SEAqd0LllrK7sFenXmwfXpgn
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target WinToUSBPortable/App/WinToUSB/bin/imageformats/qgif.dll
- Size 29KB
- SHA256 a6c81dcf381cea02059d4d89e834e8e8905a8d2d1cce94de2b23fdc7cc5780c8
- MD5 47f87133502e9772951d215b4b0e9002
- SHA1 eed654364c205ce1d56b090e49bb33f4fd6f1987
- SHA512 2dfd780160cfb7e073af370f35969264056413bc95a42cd4a6b6893dea5235a6c59fd589f86f6bd6adb2fb603a31317600f291d18381e4ac33f7789e0ad0642e
- SSDEEP 384:tAo/vaqxoWpeqAAJlFtl99UuWJStnc71aLVxmeWoOn7Ij6AHBwvLtP/4Ww5sVshl:t9xoE7ZP1tn1LjJkA6ZwlNm8OAbGI
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target WinToUSBPortable/App/WinToUSB/bin/imageformats/qgifd.dll
- Size 96KB
- SHA256 587350a49074f555d9dd480796f350e2f0da753da90bcd9344e88ad9c4577b06
- MD5 ad9f7ca8b990101b3814239ec78efc09
- SHA1 3f92e0cc31889a539f74c9c17f0f98aaf0b4cd3e
- SHA512 690e712b2f02d9b945fd73504c3f9c1ec35b99f2bc0eb48eff62cefbcc3ce98579e7f1c769e276e8990c231d0cb8878d307fc80d7053607c2a5be757f942517b
- SSDEEP 1536:GD0xAY3sRNDXk0/uNAkmuRBi8dML2v1O5o:ttoXkg8dML2v1O5o
- MD5 SHA1 SHA512 SSDEEP
Score1/10