Overview
overview
10Static
static
10Library/MSSOAP30.dll
windows10-2004-x64
1Library/MSSOAP30.dll
windows11-21h2-x64
1Library/Mi...nt.dll
windows10-2004-x64
1Library/Mi...nt.dll
windows11-21h2-x64
1Library/Mi...ms.dll
windows10-2004-x64
1Library/Mi...ms.dll
windows11-21h2-x64
1Library/Mi...rk.dll
windows10-2004-x64
1Library/Mi...rk.dll
windows11-21h2-x64
1Library/Mi...ol.dll
windows10-2004-x64
1Library/Mi...ol.dll
windows11-21h2-x64
1Library/Mi...es.dll
windows10-2004-x64
1Library/Mi...es.dll
windows11-21h2-x64
1Library/Qt6Sql.dll
windows10-2004-x64
1Library/Qt6Sql.dll
windows11-21h2-x64
1Library/Sy...rs.dll
windows10-2004-x64
1Library/Sy...rs.dll
windows11-21h2-x64
1Library/Sy...cs.dll
windows10-2004-x64
1Library/Sy...cs.dll
windows11-21h2-x64
1Library/Sy...ms.dll
windows10-2004-x64
1Library/Sy...ms.dll
windows11-21h2-x64
1Library/Vi...64.dll
windows10-2004-x64
5Library/Vi...64.dll
windows11-21h2-x64
5Library/cpde.dll
windows10-2004-x64
1Library/cpde.dll
windows11-21h2-x64
1Library/ja...nt.dll
windows10-2004-x64
1Library/ja...nt.dll
windows11-21h2-x64
1Library/libeay32.dll
windows10-2004-x64
3Library/libeay32.dll
windows11-21h2-x64
3Library/mswb70804.dll
windows10-2004-x64
1Library/mswb70804.dll
windows11-21h2-x64
1Library/odffilt.dll
windows10-2004-x64
1Library/odffilt.dll
windows11-21h2-x64
1General
- Target Full_Version_repack.zip
- Size 26.3MB
- Sample251029-tzkbbsan9v
- SHA256 7c98075093579134f7c9eed9a49120517c501e2efe2fa8c19b001cba2f4978c3
- MD5 075dc1ec7fe3b515ab793fd16b3188bd
- SHA1 ef33fd06e0875c4de9b451c0eca9175e6dedcb99
- SHA512 92a9990c8a5ede16078090d3a50bfbee9bb2f3016cd5aab77e8695f4f65f5bdf2d8bd0b033b3cb85ca1257a49fd496d38a13346be3fa05ed297b75fbb8d552b8
- SSDEEP 393216:5rCDcfWdFi3WKRoVp9h2K9ghLvspqDY85KqUdYmC4lgc411+ohnbEDduEa0WKtWX:5rC0G4AJqhc4Vi4AgcCAD20Ib0L8as
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Library/MSSOAP30.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral2
Sample
Library/MSSOAP30.dll
Resource
win11-20251015-en
Behavioral task
behavioral3
Sample
Library/Microsoft.Azure.Management.Monitor.Fluent.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral4
Sample
Library/Microsoft.Azure.Management.Monitor.Fluent.dll
Resource
win11-20251015-en
Behavioral task
behavioral5
Sample
Library/Microsoft.ML.Transforms.dll
Resource
win10v2004-20250619-en
Behavioral task
behavioral6
Sample
Library/Microsoft.ML.Transforms.dll
Resource
win11-20251015-en
Behavioral task
behavioral7
Sample
Library/Microsoft.Pex.Framework.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral8
Sample
Library/Microsoft.Pex.Framework.dll
Resource
win11-20251015-en
Behavioral task
behavioral9
Sample
Library/Microsoft.VisualStudio.TeamFoundation.VersionControl.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral10
Sample
Library/Microsoft.VisualStudio.TeamFoundation.VersionControl.dll
Resource
win11-20251015-en
Behavioral task
behavioral11
Sample
Library/Microsoft.WinForms.DesignTools.Client.resources.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral12
Sample
Library/Microsoft.WinForms.DesignTools.Client.resources.dll
Resource
win11-20250619-en
Behavioral task
behavioral13
Sample
Library/Qt6Sql.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral14
Sample
Library/Qt6Sql.dll
Resource
win11-20250619-en
Behavioral task
behavioral15
Sample
Library/System.Numerics.Vectors.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral16
Sample
Library/System.Numerics.Vectors.dll
Resource
win11-20251015-en
Behavioral task
behavioral17
Sample
Library/System.Runtime.Numerics.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral18
Sample
Library/System.Runtime.Numerics.dll
Resource
win11-20251015-en
Behavioral task
behavioral19
Sample
Library/System.Security.Cryptography.Algorithms.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral20
Sample
Library/System.Security.Cryptography.Algorithms.dll
Resource
win11-20251015-en
Behavioral task
behavioral21
Sample
Library/VirtCDRDrv64.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral22
Sample
Library/VirtCDRDrv64.dll
Resource
win11-20251015-en
Behavioral task
behavioral23
Sample
Library/cpde.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral24
Sample
Library/cpde.dll
Resource
win11-20251015-en
Behavioral task
behavioral25
Sample
Library/javafx-font.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral26
Sample
Library/javafx-font.dll
Resource
win11-20250610-en
Behavioral task
behavioral27
Sample
Library/libeay32.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral28
Sample
Library/libeay32.dll
Resource
win11-20251015-en
Behavioral task
behavioral29
Sample
Library/mswb70804.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral30
Sample
Library/mswb70804.dll
Resource
win11-20251015-en
Behavioral task
behavioral31
Sample
Library/odffilt.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral32
Sample
Library/odffilt.dll
Resource
win11-20251015-en
Malware Config
Extracted
-
hijackloader
-
directory
%APPDATA%\com_win_runner
-
inject_dll
%windir%\SysWOW64\rasapi32.dll
Targets
-
- Target Library/MSSOAP30.DLL
- Size 688KB
- SHA256 31588c267b8780156832e80e8013e4d257659b7a8c440514b7c3e719b8c82f8c
- MD5 aa19897b480c473d414d2308c3b96d6e
- SHA1 534f203a6cf4cb526c73f3661bbef92062b58c29
- SHA512 c83adfdae4aacc47ea60ae1e924ae5a1056d27fd2e282d23994193d4faa694037e3c09fd24e81b5f028a1651582caf309c4bf31d4f8f888b5889ea9aad2bb1be
- SSDEEP 6144:R1rVb8WkEIdMa2xm/W2yFdjV+/GF7ganDu79Bf6y2lveBrlv5dRgGZnBEOQCnOLp:RRzm/Zy4/GROjfBuCX+cKZqCR
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/Microsoft.Azure.Management.Monitor.Fluent.dll
- Size 763KB
- SHA256 eba1024441cd2801652b02e9bf60813cff30b7fac68e31f055e056ac75135d6e
- MD5 1e2cbea517a43333ff2a9543b87784fc
- SHA1 38a3b0eafc3ba9a14e980a370a9035dacb6729b8
- SHA512 151a10fa1e52c1aae768afc1da936c03de50025cd6b65d4dbd43c3d586f3921fc23bc96d08b06ecd185f432f89b254c6810701138b286e98885b785d728fc206
- SSDEEP 12288:wek1O6OGu8VUhqz1LbSSFo6nyqLXEI6aMJIIplk/U8bpTxPZUZJb:YU6epE99KJb
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/Microsoft.ML.Transforms.dll
- Size 745KB
- SHA256 9f4b5dd31266290321db61b5913fdde1707cfca7d9b978e675322778f6dea68a
- MD5 2376c66decf2248245d1938515dab0e8
- SHA1 64da2c0e3de71fbe3de454c272fde1515b999c97
- SHA512 a2567b767d298f24330091aa7762a83985d5cc9e364fbff43d66ee829a1f9449800cd71c81366f8dae769f263a0c3386af8ac57099cd398f0fa782d2ba62392f
- SSDEEP 12288:W3v7N93YKLFsqSTPQGzeTqVQLZQ8S088S:gMKqqST0RL+8b
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/Microsoft.Pex.Framework.dll
- Size 619KB
- SHA256 ed30b279a155fda6d605790e7eb7e0f590a36ab40138254d2ea6d77e590e0505
- MD5 c4e9bcc08a25904e1cdd44d70c62f17c
- SHA1 5fe970654f342df94f0a398060e7a43075c3ab14
- SHA512 97b5bb161123ce6bbeff1a9dc157bd170a3e03bc2f7cb736a8cc07f2e1e7049e454bb4a9bcc4983d7ae0f7b1898522b7df7f27b36d3858a21158904083c93f3a
- SSDEEP 6144:1VWnow6/o+0NyzwEcRUn6IxmKlnsvywOsXEyqr9oKdctI65pWqnBLmCFFfyEcjQ2:Oow6P0NyzTjAqlsrqx65pd1V0OHlQ
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/Microsoft.VisualStudio.TeamFoundation.VersionControl.dll
- Size 1.2MB
- SHA256 d21da2f6f2402703645d9d22bbadd1c471fb0e8a621e70f02e935787b5e7616f
- MD5 349d52e70ace42995a4d3d23de8a144e
- SHA1 5e064e4fcd5d4f747b1b964ab5b9b226382ad449
- SHA512 4fbdbea9a021ec73943807f34de89624a70a79c183faf9f505a5c65e0cb453a92695d9489156127c52e8f5a89ad6a61a5851c996f444eee019e57d228335dcb7
- SSDEEP 24576:pLPaRSO57LaevY54kGI1OgE7pXbBZIRYt5uyKh:pLPaRSmX61Og/5
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/Microsoft.WinForms.DesignTools.Client.resources.dll
- Size 339KB
- SHA256 24cab8fa74050ec9f3f91ffaa6c4b39e92d685d0ad1f782057ef27a42202e990
- MD5 207866ac196c9566cb11470a01f5fa03
- SHA1 707a45046ed85a21bef93a5ecfa0cb6317d94b87
- SHA512 c3271a18f02b3e0c5341b024d5b29d9b4b7d96624c2a6709673ee926f8c587b447093e1c958e162f42bca696683fd9f9432b81ce68835f9ea75a0c307ac59d4e
- SSDEEP 3072:xR9MtbGzbtyHZ/I11DKdwWorcP4nvCIDCavwbfimwTAYVXANScQwd6P3i8SnzKkK:EnOk/qeBH4FSj7m5Ki8OF
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/Qt6Sql.dll
- Size 311KB
- SHA256 ca43e048d389f3ca852447d24024ae63050d579a9e2ab9b5402a7cf2e45f88c5
- MD5 083cb9fc97b8d88b01b8a61621920322
- SHA1 68781ddf1c7f5835d589fbf8d86539889bb948a3
- SHA512 c2abd6ad673f726ae44883c44226012ae16b5f8a3dd78d62bf342755e2ee184138fe4f8af2e9896baa9fadcbd7d8c630a1d413ec719debe29261aa762b2c7a9b
- SSDEEP 6144:9sYPY25L2dywjC272GOlN69uq1MHk/7NaGjIoqgA2YyZMYTuiYnwytpf8RjnX6dm:9sXywz78N69piHg7sGjIoqgA2vSYTuHs
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/System.Numerics.Vectors.dll
- Size 113KB
- SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
- MD5 aaa2cbf14e06e9d3586d8a4ed455db33
- SHA1 3d216458740ad5cb05bc5f7c3491cde44a1e5df0
- SHA512 0b14a039ca67982794a2bb69974ef04a7fbee3686d7364f8f4db70ea6259d29640cbb83d5b544d92fa1d3676c7619cd580ff45671a2bb4753ed8b383597c6da8
- SSDEEP 1536:nPOw0SUUKw+GbgjMV+fCY1UiiGZ6qetMXIAMZ2zstK/hV+sUwS:nWw0SUUKBM8aOUiiGw7qa9tK/bJS
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/System.Runtime.Numerics.dll
- Size 326KB
- SHA256 3e654e81dfa4bd7dfd8710f59b0d597488e8e680b564fe274686c28c26c61bf3
- MD5 82055882b14284557e90edf5197ec368
- SHA1 5f9a1da7c271237751cc9ff0423e5f093befcd3b
- SHA512 320bc9c6ff47cae552498fbbb3954785b33e2f57fa00f4d64a500ee5f8ca294631101a7cad2ad3d2e33b9cbe1379aa3adb562f617dd0da0e2740e59ff17f8187
- SSDEEP 6144:XLi0K0WucTAD9aIABHJ0ROZRd0Qgq8ir0wYtOuyGm5Oz4ur2C5mD:XLw0WucTAD9aIcSOWq8irTsOuyDOz4uu
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/System.Security.Cryptography.Algorithms.dll
- Size 787KB
- SHA256 cf6e6c23ca7c80337a8f873984c30bf6a9c57efb037cca59cb3c6a9958ec871f
- MD5 137d522e48ac1b3191477181d15d7151
- SHA1 6fdb7ccca9d7f69f0a77a2839122e75661dc0a80
- SHA512 fc2caacfe1b24e98165abc82851822020adf9ad7b0b72c028d7e5fa9c11d340473feb6cef6c20621e6769f15efc8e15bb903fce84ebb6f4936f01f79fd075ff5
- SSDEEP 12288:1gi786uY2S+OUBExBtaoliINYYH2rbnL4mKSbxQH5dVnA501a:5o6Bs+4ENYZr1KgxQHf1a
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/VirtCDRDrv64.dll
- Size 214KB
- SHA256 0dab365c305cc851954d060bf95b44d22470b940d813c2cbb7e9e0aa6bbff4f4
- MD5 23562b08f47a01b05b68017d7c7a4663
- SHA1 f570bc202b1884a6bf373f925e44bf205106b7c9
- SHA512 a058a2c61b05167d45164d7136c0c88883aa7d5bb16dd565ffd8242871fd2bce016d41b7cd5c59776ea26c553db772510c32e6a2f7616fc83920c2809195ad20
- SSDEEP 3072:3cdMTC7FObAEGSzS54Op7rhYnYjvTmal2VYAHlmVX0KhMy8VC0O:3HTCzE1qVXhYYHmZwJfMQ
- MD5 SHA1 SHA512 SSDEEP
Score5/10Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
- Target Library/cpde.dll
- Size 888KB
- SHA256 30d93a023c334d5fd930507ba2692294fedff1211d9e026a3770cbaa2ead21ee
- MD5 35b04ee416898c9cd2ce242bff010cfb
- SHA1 dc2bfee6a760034b63265be1a5811026e4de12c3
- SHA512 670d403c50cfb0581c305149f4df728bc32e45cc2a99e300e9bac093651889bccc9569343ba47e3873359418a7fba0dce537a4fc97e11694522351f9671e194f
- SSDEEP 24576:d96lBFZorkmAuvTSnDrhdRVtStsE3u18k:T2uwrQTahdRVtSyE3u1
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/javafx-font.dll
- Size 309KB
- SHA256 900ea5bae7c8f7b5b3b30bfab506ead91abcba13055910b80a516318d76940c4
- MD5 28b0bcca71a2fbdf814e7c6ced4f8954
- SHA1 b799eb380b484be18d085a1668f33dddd07967f4
- SHA512 efd79a88f2abe9377be4eede468624565dccbf4d02c3a4bc37a3a940ab6036152e61347598e1de7b87cd706ad652bfe6350556b05ba7c3641f6b81a95b8ec46b
- SSDEEP 6144:WcmTEmfcqS73rZhaUF2Q3OVSvs1EkWuRdnsLjBqbltIk29g1FXuLNWb6uT:WS7iUF2Ks1lWu3sLcbbd1hb6uT
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/libeay32.dll
- Size 1.2MB
- SHA256 33dc10e86dfc598dab8ce80c154c0db951733fbe10b486dbb19009d9086b06da
- MD5 f1f0145b284d8dd72ab11c1c1fd59e5f
- SHA1 cb109de2522679fdf00e1b04b8c7d1885a479cd4
- SHA512 17ce42e49417e7eafceb45538c393a1869fbfc8f842f8a71f345b2d2369c0d4ba66fed2c46433988f87f2e3688017a1a4625a90e1f676939b025ba7c740af951
- SSDEEP 24576:yP8+KpPqNDAfFwigYTOHP+DI0/oobhT0CSmcMQ3K4xlY6NtcVDT25c7PAguq9hmf:L8AfFwsAAIFxxlY6NkTWc7PiqysZkXXB
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target Library/mswb70804.dll
- Size 1.1MB
- SHA256 798dcdbe9e2592b030d9b465a84ff8e804b52c34ef9d13d91cdfbcb7b8f797d5
- MD5 689013cdd144c6383612d80f5f2c069c
- SHA1 f2a7c6e943ad4f6080b854ec963a1972b5b8ad42
- SHA512 9f724386218ab1020ca95f9ef2cca0d05058c59a7e71fdad7f1ba94134fdbd0964593384efac3ab0a0dd3d8fc2c02c42a943462fb66f18a728292d8659528f69
- SSDEEP 24576:h5rO0nUMB1WBIRsVRK1c37de/tdI1z3IIohmsDLLzegqDpOEniJbf:9rSVR4M1z1yvYDpO/R
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/odffilt.dll
- Size 1.3MB
- SHA256 f997c1aea868bf8146b74a657a128fb9567faaa68c578028209a5521e62591a4
- MD5 f9359c2bb1a14f90d14c38e414930bfd
- SHA1 27c38a076b0409df2d67f927b4e402646410766a
- SHA512 dcc01a14d06075937d492c45930072a268c9775feb4a6edf64dee1fc3060d8f6996ca2abb125afa62ee256e6cdedad556e1c7c7112d44731908faf0b9d195921
- SSDEEP 24576:pcLfJsMyDHcB3pB/QMZAEI04u8OTVzJLHgZJJkpB:8mnDHct3oM6R04u3ThJLHkJkz
- MD5 SHA1 SHA512 SSDEEP
Score1/10