Overview

overview

10

Static

static

10

EasyHook.dll

windows11-21h2-x64

1

EasyHook32.dll

windows11-21h2-x64

3

EasyHook32Svc.exe

windows11-21h2-x64

3

EasyHook64.dll

windows11-21h2-x64

1

EasyHook64Svc.exe

windows11-21h2-x64

1

EasyHookSvc.exe

windows11-21h2-x64

3

Ionic.Zip.Reduced.dll

windows11-21h2-x64

1

Jint.dll

windows11-21h2-x64

1

NAudio.dll

windows11-21h2-x64

1

Newtonsoft.Json.dll

windows11-21h2-x64

1

Nucleus.Gaming.dll

windows11-21h2-x64

1

Nucleus.Hook32.dll

windows11-21h2-x64

3

Nucleus.Hook64.dll

windows11-21h2-x64

1

Nucleus.IJx64.exe

windows11-21h2-x64

1

Nucleus.IJx86.exe

windows11-21h2-x64

3

Nucleus.SHook32.dll

windows11-21h2-x64

3

Nucleus.SHook64.dll

windows11-21h2-x64

1

NucleusCoop.exe

windows11-21h2-x64

3

ProtoInputHooks32.dll

windows11-21h2-x64

3

ProtoInputHooks64.dll

windows11-21h2-x64

1

ProtoInputHost.exe

windows11-21h2-x64

3

ProtoInputIJ32.exe

windows11-21h2-x64

3

ProtoInputIJ64.exe

windows11-21h2-x64

1

ProtoInputIJP32.dll

windows11-21h2-x64

3

ProtoInputIJP64.dll

windows11-21h2-x64

1

ProtoInput...32.dll

windows11-21h2-x64

3

ProtoInput...64.dll

windows11-21h2-x64

1

ProtoInput...32.dll

windows11-21h2-x64

3

ProtoInput...64.dll

windows11-21h2-x64

1

SharpDX.Di...ut.dll

windows11-21h2-x64

1

SharpDX.XInput.dll

windows11-21h2-x64

1

utils/x360..._3.dll

windows11-21h2-x64

3

Resubmissions

09-08-2024 06:22

240809-g5c3zs1ejc 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NucleusApp.zip

  • Size

    82.7MB

  • Sample

    240809-g5c3zs1ejc

  • MD5

    5f3a75fec16233a6074e7a43e29a2145

  • SHA1

    e2ffd4d43120a828778b7ce27fdf0a938215f75b

  • SHA256

    9f83690b4ba738a40f8993645d5d02d3fda46041bf93a97cbde487fe09e3bb86

  • SHA512

    0594158c7a1629f0e5450b1532d40418a9fffada877d6746468e48691bcc0cc4631aa0e5d69ea2de259acab968d4f43267ced0d1e23944d005dd89e2beac0bf4

  • SSDEEP

    1572864:wNwiTiWW1A9y7pwZj/Lt5hKUwqWPTyMT3gYi5yvp5dVPIImiGFv7vrY9MmT:whieYlwV/p5iqOzNvbPILhDmMmT

Score
10/10
ploutusdiscovery

Malware Config

Targets

    • Target

      EasyHook.dll

    • Size

      51KB

    • MD5

      1125599eb9fdc1c3401edb4e9827a953

    • SHA1

      9d60451db256cf4f8955e80c8a225a686dc61a64

    • SHA256

      df58e7a3f6423dd8aa6e95867f59691845672a5884be2d4d28257c5c931fff0e

    • SHA512

      856c2623b068c39f3a9555becc68af127c7e769da5d72ed7541b1984eabd3680c01a17c7f5ce37f87fed2b811bb340cc128bb9a586431a9b31d70f3e006d358d

    • SSDEEP

      768:tfS88EkyREho0Mi9to3PlZJVAdB0oPKWz+9C+ab0d++XyC3NaRkuZl8R:tUEEa0MYtyZJVAd6zCvbq+GwRG

    Score
    1/10
    behavioral1

    • Target

      EasyHook32.dll

    • Size

      289KB

    • MD5

      e646a64fd89411e72122ad17fcaa3f2a

    • SHA1

      a7293fe9231e1e0ce2f67108d0109c89bf747544

    • SHA256

      aab29d771bdb8c600b4df654de2d6832cda259dc3f4955b2c697db30fd151817

    • SHA512

      134515adef961b1ce78d756b7b7d0e59cc99f744048a4d9617d62439be6d75121647adc01605647f352112fea1b77dc9b38292dd79bf8524f770f386f37ba693

    • SSDEEP

      6144:ooQRqNwYXlrx5xZk2OusDJ2e/5tmlxAVswXz8EaLQ:ooQRqNwYXj5xdOusDJ2e/5tGxAVswXaQ

    Score
    3/10
    discovery
    behavioral2

    • Target

      EasyHook32Svc.exe

    • Size

      8KB

    • MD5

      642338e293ae96e6f43a003b7c5041aa

    • SHA1

      b610830981b76883d477ef3f43546e4460bd8f75

    • SHA256

      65492608f5da52ed8d5b6f9360b6d9792456802e6fb03adf38656223501a923a

    • SHA512

      efa34dc88ccf73418b78121721eaa1c26865b30dc36e953d4ac5c74af3b2a8caa9fbdf0fc681b966e297309e262caa4b78139a161850b3d1277fc302fe4f2eb4

    • SSDEEP

      192:qfbEkWW2wQ9bLcK9xs3+ETZrOnVSuGWFsClKHGzF:6b4HH9btfs3+ElrG06sClKmz

    Score
    3/10
    discovery
    behavioral3

    • Target

      EasyHook64.dll

    • Size

      346KB

    • MD5

      f8243afb8dc94d1bd47f25e524847104

    • SHA1

      30b33dacc2228f597d7480e0f26f9279a0f3aa8b

    • SHA256

      04f967d77dba69d8369218a2ae316c210749f0b1279ac563d8d281dea7b8c6e4

    • SHA512

      a07802ee45b03b1a446931b86b9c5ff7aed4fa6e60d68e76679f5f1edc7f9c46c2fcc0cc2c1ea6af8b768f90e311a9e052408cde1aa51b039bd429ab9159a5c8

    • SSDEEP

      3072:5S8LmKVNHVerrFxU52RW5eDOPIRTBjcRZEEk1nRtO0dxGUve5xEtFWrZ3Ta5Q3:tCKDHCPNW5aU2OsEk1nnYAP5

    Score
    1/10
    behavioral4

    • Target

      EasyHook64Svc.exe

    • Size

      8KB

    • MD5

      a769c48087512d942b9461c2ad292295

    • SHA1

      37d0df5603a6b7b591e6f4f9345f2fd2118da828

    • SHA256

      361a8652870dfc554f2ef6d87c517a3c50770b90bc06e9d44b06d2005dd67bcd

    • SHA512

      b46aa8de3aafcb920f44e88c84dc55729366d067b56c52f9bb57e34fd33a3ae61566606c9bb02da2c879fec801fc0cb37ce355f1dfc42d076e7b15be0d5094e2

    • SSDEEP

      192:WfbEkWW2wQ9bLcK9xs3+ETZrOtVSuG3f+lMXGzF:+b4HH9btfs3+ElrA0Xf+lM2z

    Score
    1/10
    behavioral5

    • Target

      EasyHookSvc.exe

    • Size

      8KB

    • MD5

      642338e293ae96e6f43a003b7c5041aa

    • SHA1

      b610830981b76883d477ef3f43546e4460bd8f75

    • SHA256

      65492608f5da52ed8d5b6f9360b6d9792456802e6fb03adf38656223501a923a

    • SHA512

      efa34dc88ccf73418b78121721eaa1c26865b30dc36e953d4ac5c74af3b2a8caa9fbdf0fc681b966e297309e262caa4b78139a161850b3d1277fc302fe4f2eb4

    • SSDEEP

      192:qfbEkWW2wQ9bLcK9xs3+ETZrOnVSuGWFsClKHGzF:6b4HH9btfs3+ElrG06sClKmz

    Score
    3/10
    discovery
    behavioral6

    • Target

      Ionic.Zip.Reduced.dll

    • Size

      247KB

    • MD5

      7c359500407dd393a276010ab778d5af

    • SHA1

      4d63d669b73acaca3fc62ec263589acaaea91c0b

    • SHA256

      a4009288982e4c30d22b544167f72db882e34f0fda7d4061b2c02c84688c0ed1

    • SHA512

      88a25138d0a491e5ee27499206e05b8c501da0c73ad2b3e23d70e810a09bfc1b701817de7f22c9f0b9f81f90235fe5eeadd112773035a11f01706eac364b34bc

    • SSDEEP

      3072:nrI52ReHNdAFnfPPShREuMPb9YlVVRxpop2i0KKCXrXSbS4KcMy8ZZL5QlcSCSLw:yNdA+Myl7TpNiWCL4EycZb4

    Score
    1/10
    behavioral7

    • Target

      Jint.dll

    • Size

      244KB

    • MD5

      734c5ce8f9b104d8ad3c7b494e96f9b9

    • SHA1

      184cd4152b1b65d9531867b06c2e1c215fb872f1

    • SHA256

      ed618668ae9e7c02c7c2b7332dd09079168cca96432a051044683c996337001c

    • SHA512

      1e3ac0649e3b7bf9e97681aa7b1346aa44afe96d8c86fc77a6e002b8cf5b14b1a57f19f669ed0d4ae9a94d3f65d4eefa99dcffcf5d74afc8731f913c9c9f79d6

    • SSDEEP

      3072:hE1DupDOGfyKkpsZa27k5t0f5jjBWV239UDjRFAkqYL36ZmvYYGUaKTUCRaikNrJ:hjyQlGunmvjPa2vRQrXPHNQHsq5+L

    Score
    1/10
    behavioral8

    • Target

      NAudio.dll

    • Size

      501KB

    • MD5

      047bca47d9d12191811fb2e87cded3aa

    • SHA1

      afdc5d27fb919d1d813e6a07466f889dbc8c6677

    • SHA256

      bc4bacc3b8b28d898f1671b79f216cca439f95eb60cd32d3e3ecafbecac42780

    • SHA512

      99505644d42e4c60c977e4144165ea9dea8f1301e6456aa809e046ecc84a3813a190ce65169a6ffef5a36ad3541ec91002615a02933f8deb642aa3f8f3b11f2f

    • SSDEEP

      12288:YnfnRe200wJT4WQ+NOStYVlJHMGwH7fu:ODIrQ+NOS2HMGwHT

    Score
    1/10
    behavioral9

    • Target

      Newtonsoft.Json.dll

    • Size

      695KB

    • MD5

      195ffb7167db3219b217c4fd439eedd6

    • SHA1

      1e76e6099570ede620b76ed47cf8d03a936d49f8

    • SHA256

      e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d

    • SHA512

      56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac

    • SSDEEP

      12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/

    Score
    1/10
    behavioral10

    • Target

      Nucleus.Gaming.dll

    • Size

      4.7MB

    • MD5

      45444160efad31767d709a46740b6620

    • SHA1

      121e1ba87d3e2083d3a94e270e407370f5629612

    • SHA256

      722ec6431e14035a14c4a214fb50543a3032f2673fdb0b665057807fc47255e1

    • SHA512

      f54847d7d7c7eb0172da9e4e0bc67b2e0325e04a2a55f3dd77ff41e358cc615993bca38d7a7b164ef0de5bd70b1e20502d9161620389fb5cc959be8ce9877b24

    • SSDEEP

      49152:GFW3lgRnkyRnkyRnkyRnkGTv7UEn5dWOxVvSDedn5dT6w0a2C01w7wGm+B00/Yvj:Pa6y6y6y6GX/n53aKn5/0a/L//Yhmn

    Score
    1/10
    behavioral11

    • Target

      Nucleus.Hook32.dll

    • Size

      204KB

    • MD5

      60cf4a67d7b291f96deb0c25abc45136

    • SHA1

      a7cd4d1bc767dcc365e311d9a0b2012ba40f83df

    • SHA256

      4b8fc9cd0679a3a61bd8adca793e23d2caa60fa0663091afd9846f32f247e622

    • SHA512

      b87742ae95e77ba0fad844f4c868e3031d834ccad00e9e555103c71bf0a4de707d0a121958aa088ae547020adef9f1b99dfd4dedabf43c07d5ab6f16f4dfbf86

    • SSDEEP

      3072:U/2dVVPsB3Q9/xokMRuCfn94nPFYRiXGJmZB5tBnnqOqrkZAg0Fuj0JYBK4:UubV1FxoL1nGPFY4XiE5tBHAO7K4

    Score
    3/10
    discovery
    behavioral12

    • Target

      Nucleus.Hook64.dll

    • Size

      255KB

    • MD5

      fcd498167afd34b9c445d4ec4737530e

    • SHA1

      feebecfe4bad90a8b467cc9d014c85f813228f59

    • SHA256

      ab2d8988e6c918c1bc4791ec05ea85452eb814749a14424e97ef9c1dda7ea6e0

    • SHA512

      8a17526fb017947926689d144bc33bda4388764be68a5e1e1d96769122fcf622c5dc7e17b23b9c8dbb09198474a0b9755a83965b5387632ec9cfe15016dac7da

    • SSDEEP

      6144:nwANuq9lRoRPWNDl+PxQZUmgohgE72c1Y2nvEc:nw89oIlyDof/vE

    Score
    1/10
    behavioral13

    • Target

      Nucleus.IJx64.exe

    • Size

      13KB

    • MD5

      45dc0f1fe131b7fe92cbbb22127f2bcd

    • SHA1

      70d2890da462fdbc3f69477ebe970d8dfdbd9cb5

    • SHA256

      b5563e2e74f4c1771e3dd30ff4b1f4d2aa077f27f9c844bd78b2b9a376842463

    • SHA512

      76c3c9f3e4716bcc923f81f7af531e3a5e1409a158eb20c5d31e00fd668a33a445e7e81f8aed6c0e7bcce47de2ff567c5c117a921b3c0af70da2744e7c88c5d8

    • SSDEEP

      192:YDFZNxUOACjGJGKP8b8uWZ0ZSfvaoqNlS8IinshWK1D+bfx/fr1:YxxUOACjaGKPOm0ZUaocEVhWCy3

    Score
    1/10
    behavioral14

    • Target

      Nucleus.IJx86.exe

    • Size

      13KB

    • MD5

      d6120809002266f5b7922950a0fd65e0

    • SHA1

      b81965e747f75244656dc839b8cd4b451b45efde

    • SHA256

      0b9adf4a20c999e6e9abd983967bd85d0b366697108f09ae7b24838df1701684

    • SHA512

      5f466377d4ee11dade9f1b87e95fa83d590f1c6b9698de04dcc36a880d1dd1e2723a9218a422d4660ae041117bbab03169adc247be65e3bf113621064e5ec44b

    • SSDEEP

      192:pDFZNxUOACjGJGKPeT8uWZ0ZSfvaoqNlS8IinfhWK1Dlbfx/fr1:pxxUOACjaGKPAm0ZUaocEWhWCH3

    Score
    3/10
    discovery
    behavioral15

    • Target

      Nucleus.SHook32.dll

    • Size

      397KB

    • MD5

      d7d6bd260d74d18f1f823e78b04bf6f2

    • SHA1

      7be4455c9741d2392c61d6230bf8e6332dd3ad65

    • SHA256

      54842638752709e6e655a3a64840d98b8a8ebd892248c6529d39932f69b0822c

    • SHA512

      5644aef19d47cdd7c0fb4625413eca663aafaa9c975188f38462d4c20bd0f70b82731f88ddc818abd92a65f2d9851eb7b6887f753b99bb1dd2082ee28caf7246

    • SSDEEP

      6144:A7IBJHj1CrNN7Grc8rLoEKxLZ8Lb3RNUO7vj+Xutn4q/iWc6DUDNbAfAO55jl:AdNAPoEKxLOn3RNT7vaXut23Aftl

    Score
    3/10
    discovery
    behavioral16

    • Target

      Nucleus.SHook64.dll

    • Size

      529KB

    • MD5

      4ce3864e69a5a8e34125045b472b9b10

    • SHA1

      35ed7c7e64c394e74c465c3b79148ad27c524de7

    • SHA256

      12169b7d8550441bc44df7273ef934136797cc8acb50b7642b56ef57721412d0

    • SHA512

      53cea2b8156b49b6a7b787043451837cc89905fffcda0fe1756ccdf0df91331fa141cd022cb81899983414f49fedffeeba351e7eb1b6a015dff2581f440f013f

    • SSDEEP

      12288:VhCl9DPrQlmMgcK0q6WekSk7BqWg9F62E+lCvjnqsChFwpLq6mGlX4+Tmlg6ohhW:VhCl9h5pXlX4+TmllG

    Score
    1/10
    behavioral17

    • Target

      NucleusCoop.exe

    • Size

      2.9MB

    • MD5

      93ab02f4443af32a0cbf4349cae331d5

    • SHA1

      c02b792d5c03fa5ec1436b62c145a03925d42ddd

    • SHA256

      362a74e9ee98dcf44b26d2af94d14db0234253690e5aff4849735d30534fe73a

    • SHA512

      19fccc2393a3574ea807434a58fda638886aebb1addaaf85e7182871c054fd4767139f8f8444dc2f9e42cf5495f0cef60e57e310883fa90035a43f737931fc8c

    • SSDEEP

      49152:zaLIRnkyRnkyRnkXRnkLRnkERnknAonN:d6y6y6X6L6E6Ao

    Score
    3/10
    discovery
    behavioral18

    • Target

      ProtoInputHooks32.dll

    • Size

      1.1MB

    • MD5

      2afe7a51d0a8031b3a2b9953a70bc14d

    • SHA1

      f77a63e675c420bf941c2f2922dd6370d063a9ee

    • SHA256

      2938114ffa2cac3312c9f6a5c45772575edbdca9daad25aff3b457712566f987

    • SHA512

      9e7e408e7480a3e5e4e81ab6efedf2586c459350e4df5e787abe8cb337ff4ec0eedfc7c570809be1db8d017c0970f3cdf243aa2e65b0cdc4153ae93c5d5bf1e6

    • SSDEEP

      24576:5im+MezkNgHjNEI79SgqyfzVMjcEuAnb53H6t:UMeoNo79SgXfBEb53H6t

    Score
    3/10
    discovery
    behavioral19

    • Target

      ProtoInputHooks64.dll

    • Size

      1.2MB

    • MD5

      80ef797dae541df7ad838da94d3b2f9b

    • SHA1

      cce9d4867c1de900022709f0cd0f326f89538c0d

    • SHA256

      3632cc1c6cfb84d541c8acfe0ffbaba763da96b70d29387d43cc61b0f73358c4

    • SHA512

      b341f84eea65d94409752d197a47c960000c3f9a3828bded816ed3b6b1e1f572bfbbd4d0d9169c5c277fe4aece448854e9948843b7be56dcc73ae4612bc31a5b

    • SSDEEP

      24576:SfoyiU59h6sbBn03zJsOL9mlv2ERouX0Oo/tnpm8p:byiU33bBn0jJsOpEv2ERo4Utn

    Score
    1/10
    behavioral20

    • Target

      ProtoInputHost.exe

    • Size

      1.1MB

    • MD5

      a92b1a6240030392d6c9c8253749eca4

    • SHA1

      5fbb05dfc40e8a2b747199ca1c414ab2d4f5c6b9

    • SHA256

      333f71c416d7294a2f590743e5ede39d4c57059c9b76d4594c2b0bcb8b8ae26b

    • SHA512

      5b09e317f6cbb6baf95904141fbda48305fbebd4fe45a84e46ec6520c6ae05224ffd11f6461f1ed5aa3df618df4be1e2d5ba31361108d61359c5219b9ba3478f

    • SSDEEP

      24576:od/9zCNjnKRat9z7YHwUlHB2Eu3w932VJEdz0Mo5:od/BWj79zywUlH0A93mJb55

    Score
    3/10
    discovery
    behavioral21

    • Target

      ProtoInputIJ32.exe

    • Size

      83KB

    • MD5

      840197f78bebdaf361572f59f330e2fe

    • SHA1

      3729d5790cdd90f999adfb39ba28883b0aa33b16

    • SHA256

      4cf78dbe3f87de0952b20764e4925c808b48780f764bce1860df08d6975adab5

    • SHA512

      b71467986ad2a3bb56fa4102c02e3e6cd6afd44950b58017134131bdcab47ebeff3f19890a3c35bde017e74f40e80019f6580cd41fe63c645530539751bd60d0

    • SSDEEP

      1536:e4IbiP3fGUl3WcNOSWh+940faWV+xI6WhkcYgDlGl4D6Z3eXXvsWwWcdl25HIJkE:vPGUl3dhWhg49hWhkcYgDlGlPuX0l25k

    Score
    3/10
    discovery
    behavioral22

    • Target

      ProtoInputIJ64.exe

    • Size

      107KB

    • MD5

      64df2641e9b27ca379a5146230b43375

    • SHA1

      af897e5c8baa78668b6436f4cf4d802b9818ff79

    • SHA256

      f6457b40c386ce470483dcaf9b3fb4682d638110013406ca4fa69266db0b286a

    • SHA512

      b891e03406506cffe66694e655c0152bddbbfa437cfc88a2c9c809e33745713016afca5a904f19c1289ce644e402b71643a45c4262eaa9565f5e8f3dedac24b0

    • SSDEEP

      1536:imryKJSblBnILMTrDranIuK+wqsBlpTtVXEsWld09dlaDX3wBe0N:imhJ+lBILMTzaIx+wzVmMuX3G

    Score
    1/10
    behavioral23

    • Target

      ProtoInputIJP32.dll

    • Size

      233KB

    • MD5

      9c5817ba6fa4fd8deb31309a776a1e08

    • SHA1

      0571ed8d66147069d801c4c6231068264d542c87

    • SHA256

      424ce8375956924481a42838060c3320b68a0cac845be1bc7d43f811ed198d0d

    • SHA512

      569eb6845de503227f6a735faec2d9b0bee0fcd80acdf9ee0eb2196d0b781a8d06eab204a16beb246f74f406257b5b646b419808543c83f6310c17cfcb731aeb

    • SSDEEP

      3072:831yH1FIUiso7EAsNpi8dU1dqxjJT2Xywh52jJmLH:8FyVEsohGp3dUPKjnFmLH

    Score
    3/10
    discovery
    behavioral24

    • Target

      ProtoInputIJP64.dll

    • Size

      273KB

    • MD5

      19e05591e3c1ca307c983ac0bf3263c7

    • SHA1

      7a6f4d917349b72ff6491b8d23017cb1c90b9498

    • SHA256

      3fea85f4c2755f73f9ff6858bc1db64664accd8178f6261a88cf0a5fd9ed64aa

    • SHA512

      1c133a641132921ca4fc4a43cd8cbe147d19ad325c1aec696361c024e2289b57f9d3fd7293df8771bdb0a05a2f9e7581912b56f94bc55100ae6ebabb37fccb7c

    • SSDEEP

      3072:zRdp5+kzMgVRt9aRC8KgTOd2LSW20Jtv3zvQq5WO1e+iEY:7+ksRcgmuS63oFE

    Score
    1/10
    behavioral25

    • Target

      ProtoInputLoader32.dll

    • Size

      612KB

    • MD5

      75d075096225742ecbf396b80ff0ce5c

    • SHA1

      464cf21f1437b3210e44abd8e9a6c03a1c035664

    • SHA256

      43dcb63cbe5caa2e5c221ac75a71c41ea3c948066a1e1475415368a6d974d434

    • SHA512

      90d3561de36aff9fc84e90b4649143955191a70e856651bcede2bd73ac25c5387257d1beb494859b5030b4496a4a06ceac5c3e5e25bf4a9e44ebdf0c67cdcd06

    • SSDEEP

      12288:sTSTaL8vLZ9QlNdNeqo4mYSrJPFCw4WXF2SX:sM1964frNF94UFd

    Score
    3/10
    discovery
    behavioral26

    • Target

      ProtoInputLoader64.dll

    • Size

      668KB

    • MD5

      264f495bbece87c95a3c95de1469f60f

    • SHA1

      b5f546d4fd29f6c79d3662b2f1323fe4d84d2c99

    • SHA256

      2568264ab25fb83298ce3430d102c2934d627eec178ebcee0f83b73a6d241bdd

    • SHA512

      f8503c44a8e06df81c69790d7bcc74f79448d77c6d9574b00df9dad9e58263bc2e3a505bf42324a66bec6d8b6abba1e1012a75a42ea0ef57efd215ec9bdb458c

    • SSDEEP

      6144:SeVSUeqUDUShwA7OL1V6VE9uitypvVAzItSIPPorzohlpgviEDbufSQG:SlISSrD6VdiEDGItqrzoqv5

    Score
    1/10
    behavioral27

    • Target

      ProtoInputUtilDynamic32.dll

    • Size

      101KB

    • MD5

      1de4e4f7dc354e03a6f266abc9b8bdff

    • SHA1

      e44fcb9eb0603e8ad2fb298842fe0447b191c8f2

    • SHA256

      8fc9cc273ef3c7a935ad453824455096a3d8999285927c9501492cc440893425

    • SHA512

      a82dfef6266f5c015a57cbaeda5f3eace909073e4ee320c0693978566eabcb8f2f559a31e6606b8238031e3a1170b5e7dcbe3c5a484efc73eeb87bfe6cd58fd7

    • SSDEEP

      768:enwNYBehOueOjgnaDyD2bkCOoDGpTm99h1VcYmZqBy/4KEHK94t8+T1jizgNTLek:enwNCOcnaSxm99hHBt86De2AbQ

    Score
    3/10
    discovery
    behavioral28

    • Target

      ProtoInputUtilDynamic64.dll

    • Size

      49KB

    • MD5

      70c51f56fa48f8d24072bedb6356a3d5

    • SHA1

      d9e19472d260f2b386b3e8f139b6d48ab0227590

    • SHA256

      82c52bcf2e74913ffcd03ecc706c80fa16835790e4f01c0020e64dc7744c36ed

    • SHA512

      35592d942f3f60f71a277a7b9baaf4b96139aacd5c1649fa8621f47ae8442ab5e2a3931b77f695bd0c9ef83845484e79744e979ccfdc45fc1e7ce9c0125f5adb

    • SSDEEP

      768:44FmdomOnTHefwXBDmcYmZqBy/4KEHK94t8+T1jizgSU38KDlAP:jAdLu+oXdkBt86AKDl

    Score
    1/10
    behavioral29

    • Target

      SharpDX.DirectInput.dll

    • Size

      147KB

    • MD5

      fd69cb080a5af1c2541c971c2da85126

    • SHA1

      fb0c31dd560abc8322611d938e8d2f0d8bb95a90

    • SHA256

      aabd8c944ed5a47e586f661a7aad4c0d990f2b85a29e14b32553714c58a523d2

    • SHA512

      5cb59508a77aca216326562e175669e85a8c9ac4d512e224d09b7429b705de0c70dbb4888f587202df4cbdb31a7b9a7b5386d746a07229de6b0d3a3ee56e363e

    • SSDEEP

      3072:DQdXINNcLUfv4gy9YGiphuHhA8fDn+dY6v9:oXcSQv4gGYGy0AKa5v

    Score
    1/10
    behavioral30

    • Target

      SharpDX.XInput.dll

    • Size

      13KB

    • MD5

      3aa932318beb4a089726ba441b9f66f0

    • SHA1

      a09a691671e4d43f926e13ea5b4887932a674f5c

    • SHA256

      b4808043d91f93f31369ade5e40b5d1016c527956c7868602d00e51482e34e33

    • SHA512

      6e452e4c84647c556e29a4927f79ecbf1df861eeb2ec276ce49528bd432ecefd51220d0bb871d62394b1f2c4864af17a92e4bc98d6ab536c2cc06a272f80de74

    • SSDEEP

      384:aqGDz2M2x43EKnwnKxlEbYy5REZk6EZZ:aqOz2M2m3Fy5qTQ

    Score
    1/10
    behavioral31

    • Target

      utils/x360ce/xinput1_3.dll

    • Size

      123KB

    • MD5

      5236623449893c0e1e98fc95f067fcff

    • SHA1

      50b4f1e2340b7c7ad065b2111fc075b2cafe6231

    • SHA256

      301f0d831d95bb5c3b5c57f8a92a35211531b410fcf2bd08927a286b867142a3

    • SHA512

      9b94bddcb5e64bbf3649567f16a828588423873b60858d45c40155f36cc7f95d205f4e9b6cdc8ac2852240fdb6a67d0940c60e4f103cecbf118eae1438019c0c

    • SSDEEP

      3072:989ldQHCjgnXBwyoi8MEpjhttvfqXNkMJWVaQlH:WTLvp9ttviXNk3

    Score
    3/10
    discovery
    behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

14
T1614

System Language Discovery

14
T1614.001

Browser Information Discovery

1
T1217

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

ploutus
Score
10/10

behavioral1

Score
1/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

discovery
Score
3/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

discovery
Score
3/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

Score
1/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

Score
1/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

Score
1/10

behavioral24

discovery
Score
3/10

behavioral25

Score
1/10

behavioral26

discovery
Score
3/10

behavioral27

Score
1/10

behavioral28

discovery
Score
3/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

discovery
Score
3/10