Overview
overview
10Static
static
3Dark Spy/Dark Spy.exe
windows7-x64
10Dark Spy/Dark Spy.exe
windows10-2004-x64
10Dark Spy/E...on.dll
windows7-x64
1Dark Spy/E...on.dll
windows10-2004-x64
1Dark Spy/E...if.dll
windows7-x64
3Dark Spy/E...if.dll
windows10-2004-x64
3Dark Spy/E...ns.dll
windows7-x64
3Dark Spy/E...ns.dll
windows10-2004-x64
3Dark Spy/E...co.dll
windows7-x64
3Dark Spy/E...co.dll
windows10-2004-x64
3Dark Spy/E...eg.dll
windows7-x64
3Dark Spy/E...eg.dll
windows10-2004-x64
3Dark Spy/E...vg.dll
windows7-x64
3Dark Spy/E...vg.dll
windows10-2004-x64
3Dark Spy/E...ga.dll
windows7-x64
3Dark Spy/E...ga.dll
windows10-2004-x64
3Dark Spy/E...ff.dll
windows7-x64
3Dark Spy/E...ff.dll
windows10-2004-x64
3Dark Spy/E...mp.dll
windows7-x64
3Dark Spy/E...mp.dll
windows10-2004-x64
3Dark Spy/E...bp.dll
windows7-x64
3Dark Spy/E...bp.dll
windows10-2004-x64
3Dark Spy/E...re.dll
windows7-x64
1Dark Spy/E...re.dll
windows10-2004-x64
1Dark Spy/E...ts.dll
windows7-x64
1Dark Spy/E...ts.dll
windows10-2004-x64
1Dark Spy/E...al.dll
windows7-x64
3Dark Spy/E...al.dll
windows10-2004-x64
3Dark Spy/E...en.dll
windows7-x64
3Dark Spy/E...en.dll
windows10-2004-x64
3Dark Spy/E...gl.dll
windows7-x64
3Dark Spy/E...gl.dll
windows10-2004-x64
3General
-
Target
Dark Spy.rar
-
Size
50.1MB
-
Sample
250129-ye1vsswnhr
-
MD5
24ebd6a8c22657feb27e8558477d4cad
-
SHA1
62536287d61bfce30fb9f66e12d0e8afe2374467
-
SHA256
801397812be62baddb411c3ef74127bb1c55c725575de1e13fad5a3f6257ccaf
-
SHA512
7c6879b12d0b8e31c9eb5893664c383738e592d01cb5fd3041fd8590b317622389cb2dad8f308ac08991ece96e0fd4b741180aa73cd6e1c5a64f87d247201d22
-
SSDEEP
1572864:J47O4bfNxe/T6et/971XJLoMQfWoYOgnUhbXxz6/O:J47/fHe/T6elD5ksoYtU9xD
Static task
static1
Behavioral task
behavioral1
Sample
Dark Spy/Dark Spy.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Dark Spy/Dark Spy.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/iconengines/qsvgicon.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/iconengines/qsvgicon.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qgif.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qgif.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qicns.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qicns.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qico.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qico.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qjpeg.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qjpeg.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qsvg.dll
Resource
win7-20241023-en
Behavioral task
behavioral14
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qsvg.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qtga.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qtga.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qtiff.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qtiff.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qwbmp.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qwbmp.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qwebp.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qwebp.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/platforms/Qt5Core.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/platforms/Qt5Core.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/platforms/Qt5Widgets.dll
Resource
win7-20241010-en
Behavioral task
behavioral26
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/platforms/Qt5Widgets.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/platforms/qminimal.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/platforms/qminimal.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/platforms/qoffscreen.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/platforms/qoffscreen.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/platforms/qwebgl.dll
Resource
win7-20241023-en
Behavioral task
behavioral32
Sample
Dark Spy/Engine/Qt5/Qt5/plugins/platforms/qwebgl.dll
Resource
win10v2004-20241007-en
Malware Config
Extracted
lumma
https://toppyneedus.biz/api
Targets
-
-
Target
Dark Spy/Dark Spy.exe
-
Size
544KB
-
MD5
bdffc49e7282e00cd90a83af85162ba3
-
SHA1
a517c26434a583677564e2e173806a43d28d9368
-
SHA256
3531fd65021ae1c852211288c6c81fff47de860d30630e6367ad470199963fd5
-
SHA512
623c25584a089861d405362f7286e78c77208e7514ac97924a52f12261cc5a00d12239ad484e5a224abd37889a00cc5c2d43db38a761f702027ae750d37248c9
-
SSDEEP
12288:lZkEb6EcwNby4CVxkRngfx9JRV+K6ag77GybEBDM2:Lby5bkBgfPDV+pag77GybT2
-
Lumma family
-
Suspicious use of SetThreadContext
-
-
-
Target
Dark Spy/Engine/Qt5/Qt5/plugins/iconengines/qsvgicon.dll
-
Size
34KB
-
MD5
c86f23d1986a6edf1943a2ffd562a093
-
SHA1
56d0058d0dc006562ee1b735bd9b48f558f0cb95
-
SHA256
f128b3a7154433b449ba1af0186d7af7f4d480a2a42d7d0d23102aacf0fb5bc9
-
SHA512
9f7fd9b85b5550925318f6e2823a5d5a8dc1cc1aa776aaffd63136289100b68dc59b1bc41bff8f13f9009a3dd0417335de6c7ac25f2e083290a7eeb00b39a092
-
SSDEEP
768:krdZm5mjw1lQR8Z3Zf3V+hFem0wKk84XmydDGFUf2hE:Su1lQQ3Zf3V+Lem0wKk849kUfP
Score1/10 -
-
-
Target
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qgif.dll
-
Size
33KB
-
MD5
e3a1338efadabb9fc23d955af9a7e070
-
SHA1
dfbe82b183fff002a2e841d73474c78f646fdba2
-
SHA256
f1fa3bfeea6a600f2c6d209775154cee349b7f687cb4f7213a8cad8870dbb812
-
SHA512
0413a6116e227fa6a3dd7da6fa4bb8db59ed64fc16e37bfa49ca28c687fe791941b3a23193796eb0ece458e87f9f78f587b3a1fe0f188b63b9148037997df1a2
-
SSDEEP
768:aL5MPkjurnzyuVlfehyScQeOYGuOU9OOHhTNAYFdDGzUf2hW:aNYnzyuLeEfQeFGuOU9OOHhZAYFOUf5
Score3/10 -
-
-
Target
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qicns.dll
-
Size
37KB
-
MD5
a59edba49d8cffbce76000842eba6135
-
SHA1
9a93760424c7908c105156e97a47ef9e12a242db
-
SHA256
525f3e144e71caaa42a981605b3143462e057b82e7ff946e896e9aeec4f83038
-
SHA512
908de81da06ca9e7b57c98482a5420136720da67fba4f58e7ad5f877af8af00fa82ef69299102851715d850cf086531fd0bca083f72bcb9c52355d06aed0da5c
-
SSDEEP
768:nw7o5IoYXrOOmYaRCNOq9QNdhVJ0hBEH3lMwAJXGdtpZmPdDGGzUf2h2:w0BIf9QvJgEX6wAJXGdtpZmP3UfP
Score3/10 -
-
-
Target
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qico.dll
-
Size
31KB
-
MD5
7200f8e1af1c6a60501d5fef7772fd0b
-
SHA1
5f2bac81a60f7fdfbe8b1a01f111660a3614d679
-
SHA256
35cf0ae6bcd1b8322482d40bf2dd693e276548885284b88e6631ab18a0c2c60e
-
SHA512
097835d4c8c61c2489e831b31a8bb6f2feea277439d6697b6e3165ccb6e4758986c9a1fa754696da53b6005a041156ff8bc455a71dc31ea799f5891348a07f22
-
SSDEEP
768:1wLKUeP1ob4OgufLCJGqU2SZ6HseQdDG0Uf2hKT:4KUeP1WyufLCJGqU2SZ6HseQ9Ufz
Score3/10 -
-
-
Target
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qjpeg.dll
-
Size
365KB
-
MD5
438b696a9811cd821bbe2c54b5c1b4b1
-
SHA1
55eb74a0015228b1e6c1dc97e6f427c9dc804587
-
SHA256
84c23191b5e35eaf899358c21445a5377845c0653668bbd99b1aa8796e0248c7
-
SHA512
961ed9cfcd61a1fc32de89cb97100aaa9a9225c80673b2176975bf62af7f3a0e77a91fb723ed52c553e10a6f754a5e8c8085bdfbd56ef2de8144c53bf41f4e91
-
SSDEEP
6144:QsC804cB4tEXoOitMk5R8vsLK0LXz5pmglF90l7s0aGajl8Z9cg:Qr4bOzk5R+s5LFg9cg
Score3/10 -
-
-
Target
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qsvg.dll
-
Size
27KB
-
MD5
ac3a9b355c4613b4376392a4157280a7
-
SHA1
9ecea6ac45da1a0666c1d2d86618ce85c887b1ae
-
SHA256
96868c0ae9041d65b0599fb7a0fadc0f0e551d6dee85597065e42e2ed3ebe1c5
-
SHA512
6f4a999d63e448c3d592a6557e1924d13811fc982c8b3e2017a8970d057fba73ca4ad646d22d318ebe6de939cf6c0ec3f2ae2546da801a5583dfd0cd807ee9ec
-
SSDEEP
768:WV5VVvwZ12uh991MD9dhQwe+oQQUcesJbT73dDG5Uf2hg:IvwZ12aC9Qwe+ZQUbsJbTLwUfX
Score3/10 -
-
-
Target
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qtga.dll
-
Size
26KB
-
MD5
367c723591fde64c38202d4c0f5ecfde
-
SHA1
c13d74f417601c656f343f00d15e56517ee03b6a
-
SHA256
ccd620e74045d9c9157903120140b97419cbbe91fd43337e640c67cd4522072a
-
SHA512
31c084ba00e094e30c6f912ecd045e19c4451d8783a80dc99b99098f84c5500665a35ac901b0fde84d04df898ad67448e83539a7daa4928e8c78f798b359b256
-
SSDEEP
384:kg8gKOwVg6VjbFnOfEIzPMoVhWyrsdnyBSxQrrVIyndDGdEDgf2hR:kPxOQXOfEnoVh5/BSxQrxIYdDGKUf2hR
Score3/10 -
-
-
Target
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qtiff.dll
-
Size
345KB
-
MD5
49b6f0ba901f649ab110744e34076951
-
SHA1
4c9eebadb5b86147ea94f48eaa6705a4b75b3e61
-
SHA256
5128aedf4bd9b747ac848bf85e0ffb99ba814bd8e671adff7d26391d31259050
-
SHA512
b42a13f0215a194f77781ac74cf55c24a0f0bc99cc872ea06125cfe12ffef93add0665991339db3b7962262e6d381f20227da3272360450b53993d06bc0ec98a
-
SSDEEP
6144:BpYIdJpn0zXsT6DP64icIkjEkaNCTjM+8kBHWNFnHJXGFkDQDWr:jYIp06+IkjeNGjIkZZKr
Score3/10 -
-
-
Target
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qwbmp.dll
-
Size
25KB
-
MD5
7a05c8435fb60f43958120b22b653b54
-
SHA1
79d7122e4ab89dc9978fcd48fcbf0c6b8ae3f690
-
SHA256
7c946f750413716a714884c8836d24aa6d2561b48e7f3397bab88af348e078ec
-
SHA512
74800a623e4789c245095b6ad0cc03ec8eb00431487e7977bd3bc5cbf0278480474d74fd194873f220dd5682eec88864095659315f68d650c1cc8b40435b182c
-
SSDEEP
384:j9NLeETizwsASWjsUE2rBiQtp4VmsdXurvZJ4EndDGgDgf2hcU:xNLXiHAS+E2rBi7mbrvZJPdDGgUf2hcU
Score3/10 -
-
-
Target
Dark Spy/Engine/Qt5/Qt5/plugins/imageformats/qwebp.dll
-
Size
402KB
-
MD5
b9416990af043ca8cfa668121184c05d
-
SHA1
4181d92e91704b961a22b51713705d53dda0cf51
-
SHA256
50fcf1fed7612ae4c346d7ae7dec3ebbbd2ac31c5e954263a7bbc655502e3b03
-
SHA512
e303e4b166ada78dbe75639b73efe275a0e4f49a1cd2da5016e1f31a1a012aee383e6acc21d63561e78321b1e162ec9cfec3915909e698d2064b1fb0dd33de76
-
SSDEEP
12288:llTSf8S+PHunhrYzVcS/CQVy7wycv+QrUwDHHgxgG:L08S+PO1OVcS/XVykyI+4M9
Score3/10 -
-
-
Target
Dark Spy/Engine/Qt5/Qt5/plugins/platforms/Qt5Core.dll
-
Size
5.1MB
-
MD5
b0260ca926759201b9ba4f39cbd43d78
-
SHA1
14ce6f859e51d5e27e84c8d0428a3b4b5bfed546
-
SHA256
c8946ad803fbda3206037834b5e7ea2c96d1f923a86b4103a0569edf5812b899
-
SHA512
e6072094350340c5b08bbb972d1f787583191b57ccc18e6c82da83a28dcad58d7a78072e90cb2324fff6324a3954ed364967881540983704491046ad2d414314
-
SSDEEP
49152:S1AH+7g4QrRpvOK8Bbl+Gy+/LZsxRFNHlZTlJsv6tWKFdu9C/cPk4VHEYI9CV4eO:c5gje5lCjzJsv6tWKFdu9CtvDhgwcY
Score1/10 -
-
-
Target
Dark Spy/Engine/Qt5/Qt5/plugins/platforms/Qt5Widgets.dll
-
Size
4.3MB
-
MD5
98895845aae307f925e28af6068c675e
-
SHA1
d70089fe67deee3c196c3e3df48b046cc712273c
-
SHA256
8045f9d0fd9dad5a6f48710afeff66da61c22abd4a96d8a62c6941de27b7b2b3
-
SHA512
9cd6da2867717b31b92345cda83285c2d188f0670a05ff7530a70f8120699b775415783f7b9b0c81272b43a7ac887caddb0c892c143497e1700cdede52ea0a34
-
SSDEEP
49152:Gpo1FNXS+dh75PMvZZNNt+iIo5uL5Sdbtye6cEu0n:UIPqZZUfwusae6ju0n
Score1/10 -
-
-
Target
Dark Spy/Engine/Qt5/Qt5/plugins/platforms/qminimal.dll
-
Size
685KB
-
MD5
2afd07c16a47b2cde639d777ca7224eb
-
SHA1
9a08d20b993c9fb2d070d69ca8e7642dac96df19
-
SHA256
81e59d22d5efdc2de84c75386bf136c9e4417eb9164decafb4198d28f29dba8a
-
SHA512
b69facb50c0f8ac0c6e994be16509190e57100905d6689b19f0ceba2dcf13a9ae4ec17b2302b9214c32a25d2896aafbeb8e9b4272e1a421b4020963afbf87051
-
SSDEEP
12288:49mqUd6YYwP+SbYFBsBHd5TsB0d3zV21lnjbduklgo123zDfEWmd9:49m4Y1+OYABHDsB0x41lnXIeZP
Score3/10 -
-
-
Target
Dark Spy/Engine/Qt5/Qt5/plugins/platforms/qoffscreen.dll
-
Size
614KB
-
MD5
e32bf024e3527cbefcd95e5db93bb8fc
-
SHA1
705ac738b7ad7281f31a8197053515a87d7a5099
-
SHA256
e8a180285147394733db92a532025a36824ea9416b993dfdcaa8e19a66b8b1b6
-
SHA512
032d5069c9e0819465c3f566d8555abf6fe569b4b8b22e67083469f69eef5aa03acb99e0b42c90280aa36396ab6152a4d00a985af5fd4c92d2428ea8ed2e7001
-
SSDEEP
12288:FU09s7Ydf07Kw7AzQXSCjsBn8fztOnULj6TOZs8AADIDfEWmmPJ:Fs7q0+wIQXHsBnS4nULu6PZg
Score3/10 -
-
-
Target
Dark Spy/Engine/Qt5/Qt5/plugins/platforms/qwebgl.dll
-
Size
397KB
-
MD5
c5a4f23c2f1cb00fac420ef89aeebb47
-
SHA1
2f1e73e076683c1f87081bb8ea97f007714fe8d9
-
SHA256
30dfc5f5614427cda0b4c97f25c2d6d19702562ec33e49c020768288ca1bea7a
-
SHA512
b67acc32be891ccaa2615b575d2a7b213917f3f6e78fac28d03b76f3eb48d04aabc96ab77190eca31fb3bce965e53657e2d37b2b71c379b4e96d1bbfb1e3c019
-
SSDEEP
6144:/Tq4StevYAunBi2Sq2DXfz3ARHh2nyPIqGfrTacq1iOCJ:/Tq4GewBrSdfODIbJ
Score3/10 -