Overview
overview
10Static
static
10AudioRender.dll
windows10-2004-x64
1AudioRender.dll
windows11-21h2-x64
1FileAnalyzer.dll
windows10-2004-x64
1FileAnalyzer.dll
windows11-21h2-x64
1Library/Au...er.dll
windows10-2004-x64
1Library/Au...er.dll
windows11-21h2-x64
1Library/Cl...ce.dll
windows10-2004-x64
1Library/Cl...ce.dll
windows11-21h2-x64
1Library/Co...er.dll
windows10-2004-x64
1Library/Co...er.dll
windows11-21h2-x64
1Library/FS...ce.dll
windows10-2004-x64
1Library/FS...ce.dll
windows11-21h2-x64
1Library/Li...rp.dll
windows10-2004-x64
1Library/Li...rp.dll
windows11-21h2-x64
1Library/MCppEE.dll
windows10-2004-x64
1Library/MCppEE.dll
windows11-21h2-x64
1Library/MSOCFU.dll
windows10-2004-x64
1Library/MSOCFU.dll
windows11-21h2-x64
1Library/Mi...es.dll
windows10-2004-x64
1Library/Mi...es.dll
windows11-21h2-x64
1Library/Mi...ed.dll
windows10-2004-x64
1Library/Mi...ed.dll
windows11-21h2-x64
1Library/Mi...ts.dll
windows10-2004-x64
1Library/Mi...ts.dll
windows11-21h2-x64
1Library/Mi...or.dll
windows10-2004-x64
1Library/Mi...or.dll
windows11-21h2-x64
1Library/Mi...al.dll
windows10-2004-x64
1Library/Mi...al.dll
windows11-21h2-x64
1Library/PP...IA.dll
windows10-2004-x64
1Library/Qt...ts.dll
windows10-2004-x64
1Library/Qt...ts.dll
windows11-21h2-x64
1Library/Sy...re.dll
windows10-2004-x64
1General
- Target setup.zip
- Size 22.0MB
- Sample251108-s28w2afq2v
- SHA256 03c3e5d36e6297e798dfa57308494f26e4d651a034fe11aaaa0fb848dcbfb12a
- MD5 0c5e3ff94f8c40b68ccab4187fa9adf0
- SHA1 86d32475d53a4a24befce555cca6b33c93d18709
- SHA512 4d5030a5c1ea4f882a95ecc443988d10db33941ddf29e1859f3747d2eb97809e437e3ef417c061212e0d9c6bdcff0d52f1b0a70f4d282efed5a6e3aa8cb349fc
- SSDEEP 393216:Gd5EmNQZPwAdaDxAl1b4KnIhw6bt6Cms6wsyNTLhs8OqK4U20XnCY+JgK:GPnNBvDxO1b46Ih7bMCR6wsOT9s81bpT
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
AudioRender.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral2
Sample
AudioRender.dll
Resource
win11-20251015-en
Behavioral task
behavioral3
Sample
FileAnalyzer.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral4
Sample
FileAnalyzer.dll
Resource
win11-20251015-en
Behavioral task
behavioral5
Sample
Library/AudioRenderer.dll
Resource
win10v2004-20250619-en
Behavioral task
behavioral6
Sample
Library/AudioRenderer.dll
Resource
win11-20251015-en
Behavioral task
behavioral7
Sample
Library/CloudMeService.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral8
Sample
Library/CloudMeService.dll
Resource
win11-20251015-en
Behavioral task
behavioral9
Sample
Library/ContactPicker.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral10
Sample
Library/ContactPicker.dll
Resource
win11-20250619-en
Behavioral task
behavioral11
Sample
Library/FSharp.LanguageService.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral12
Sample
Library/FSharp.LanguageService.dll
Resource
win11-20251015-en
Behavioral task
behavioral13
Sample
Library/LibGit2Sharp.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral14
Sample
Library/LibGit2Sharp.dll
Resource
win11-20250619-en
Behavioral task
behavioral15
Sample
Library/MCppEE.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral16
Sample
Library/MCppEE.dll
Resource
win11-20251015-en
Behavioral task
behavioral17
Sample
Library/MSOCFU.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral18
Sample
Library/MSOCFU.dll
Resource
win11-20251015-en
Behavioral task
behavioral19
Sample
Library/Microsoft.CodeAnalysis.VisualBasic.resources.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral20
Sample
Library/Microsoft.CodeAnalysis.VisualBasic.resources.dll
Resource
win11-20251015-en
Behavioral task
behavioral21
Sample
Library/Microsoft.ProgramSynthesis.Extraction.Text.Deprecated.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral22
Sample
Library/Microsoft.ProgramSynthesis.Extraction.Text.Deprecated.dll
Resource
win11-20251015-en
Behavioral task
behavioral23
Sample
Library/Microsoft.TemplateEngine.Orchestrator.RunnableProjects.dll
Resource
win10v2004-20250619-en
Behavioral task
behavioral24
Sample
Library/Microsoft.TemplateEngine.Orchestrator.RunnableProjects.dll
Resource
win11-20251015-en
Behavioral task
behavioral25
Sample
Library/Microsoft.TestPlatform.Extensions.BlameDataCollector.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral26
Sample
Library/Microsoft.TestPlatform.Extensions.BlameDataCollector.dll
Resource
win11-20250619-en
Behavioral task
behavioral27
Sample
Library/Microsoft.VisualStudio.CppSvc.Internal.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral28
Sample
Library/Microsoft.VisualStudio.CppSvc.Internal.dll
Resource
win11-20251015-en
Behavioral task
behavioral29
Sample
Library/PPI-NVIDIA.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral30
Sample
Library/Qt5RemoteObjects.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral31
Sample
Library/Qt5RemoteObjects.dll
Resource
win11-20251015-en
Behavioral task
behavioral32
Sample
Library/System.Core.dll
Resource
win10v2004-20251016-en
Malware Config
Extracted
-
hijackloader
-
directory
%APPDATA%\nt_net_amd64
-
inject_dll
%windir%\SysWOW64\rasapi32.dll
Targets
-
- Target AudioRender.dll
- Size 155KB
- SHA256 8c669212975494d3cbcedd48ebd3f4cb6275a6eed2a0ff9e3cdac7d03d666eb6
- MD5 b275fd8f428566b423597182cdb7c282
- SHA1 0fbd289c04165137c7d9364c2f14ca81efccae62
- SHA512 c1b9385b8b353d04ef553f2661e181d2e521d3a651ee655896b525d924eede6945835a414ca1ecac4cd3abaef19db1785184e79f97795861e4f30ee577cbc1c3
- SSDEEP 3072:u3CDt2apIyF60M9/8u1eK6L3/IbYaGwuhzh6SNsfvsru0:+Vap/ZMB8u1ePL3/raGxnJO1
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target FileAnalyzer.dll
- Size 254KB
- SHA256 03607630a992c96d1d17bcf3c327619c27ee24d054a0946831f1e3708f5613c6
- MD5 08b1ce3ef9cdd0829f1599e0d793a8f0
- SHA1 9998ffc6d6ad23b83005b16a63df19dadd3b14f4
- SHA512 a746c54f2a075ecf7d61af32f6981ba8a58db7350a4690c6f222dc13b3cded6f0d527b0d7bad0b37f396178eaa137e85c1962ee8dab8d631762034d8c769f8f1
- SSDEEP 3072:4u87LIsND5X/iqyq8zuf3rdNIAUCZw6NdSdt9Ndzpbgn1krBdeHP0ZiLPOl8:4dLIsNDNiqyqmuPrMAUCZep10LPOl
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/AudioRenderer.dll
- Size 798KB
- SHA256 63055ae72febd0b1a1fe9e9adc21e0201e1888b10da552690de14928374ab658
- MD5 93ee9ae6c6d823afb04cbe08ef1a1392
- SHA1 733fdf559ffedffa1194dce1bc0e9a20d8fe1cd0
- SHA512 e5cdae4b1f084c4a69dc4157038b3075fdc8a4ea2e9566bbcb29fd362c149bb26e87cf09815514ed597320a8ec8df7c522334312c97dbec260997fc82dd50b8d
- SSDEEP 6144:LmY+ze2VmiZEwH1ZaAE1f51mdXvI08TyT11xBjgycKmsrCFUGuXRzVB5O/PhrO9p:L36mxjAEd51U/X1rJgrj8BznPqrxQ
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/CloudMeService.dll
- Size 374KB
- SHA256 740a4f09437f8dbced80ee926b2ae2b32011b9c83d491b938e543b57f2f1f174
- MD5 297080371e5fb9eab1b6ad1c231b90ad
- SHA1 fd2df330b2e4591df1c9ab4766df4b8b17c1475f
- SHA512 8e20167f0245d95dc542bcf9df83b90be1c39426bd337a1c2f233fa749f7d7213a5a8daa537d6e8ffbc8c716120ffef5472ea0f8116f1043b41e901ec6cf9066
- SSDEEP 3072:Wjx47YO6bmH7OHsvPdcTPALa0gVvxuaHOWI14XKU9BABSg9D:WK7r0mg6wPALa0glEnEXKU9BAL
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/ContactPicker.dll
- Size 217KB
- SHA256 ea3f179042fd9a989d534de224cbcb702661511205d89b97fac740752391ca7d
- MD5 6ec535cdded7fce5feba28669b6b2923
- SHA1 135edaa98f7f2aead0513a36b97dc2eaf29f2486
- SHA512 2104ff33be1feea93d2d9d2ce5e7d590732a855f4a52e4aaec320eebd5e0686b56221ec55d9eb1d9b1fe1a28ec662f3769f80454751e1218714a84b587233328
- SSDEEP 3072:9A5hITqlG/eVKh0vhW1WUri1D077/dEyfP9k9Je1FKOX6GRTvgFP6y9cD955:9/eFo13rbdSEKOKuTvgFP4D
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/FSharp.LanguageService.dll
- Size 233KB
- SHA256 25251adae4b71c694944b7072d6f654c690bdd0ff2ca0883212eed54a81ae3e7
- MD5 e0e708b23810c2e6204ddeab34c8e50c
- SHA1 5d52cefcafccf3259fe4f84be5bc4949b727e7cf
- SHA512 2ed309b015e16eb4f0141491dcdaa73caee50fc6f1d164540d530911fb5c4beb785b26c8b02d1cdcdca0ef05169ea62e15e5434ef6fa554d9b5e707f9b1be3ae
- SSDEEP 3072:SYGU0j4WCzKyNsi02w4PKPs1649+WLD45PhhPvAj/CUXR8C8BBFhP:Slj7Cze4Pb+DvAjjR8C8BT5
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/LibGit2Sharp.dll
- Size 503KB
- SHA256 08de53332aec103874f84e5bf19a8e582ff3374372963b29525ee6be13eb5680
- MD5 b541d09adbe17a2a6aa23204b0c62fb8
- SHA1 c65604d68ba84a6e7727cbcba1ceb2c40343bd40
- SHA512 3d237a2786df05c283fbf00aede6a138a74885f7c964bb0633ff41ce310b7d92bf7ad1dc897a5ef47fc65528bce3cac25517320ac49d6e218ca6c86ab3adff2c
- SSDEEP 12288:CmnmbhNiyzAeFH84uYMaL4rlpiZgazNHFkWcDlccfzSmlO5lntNgp:ZGj84uYMaL4rlpiZgazNHFkWcGcq5lt+
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/MCppEE.dll
- Size 321KB
- SHA256 e0af44dd9edc68a7e073cd884d8708ac1327df9d86a79bdc16910eed113c262b
- MD5 637ab55c7c967f2b849f6d2c593c750c
- SHA1 9c5e539e7e3212d5ad091e14e15b7d50c8325c2f
- SHA512 bd7d71994779f97b9efcf9a44cb6fc72478f9c40f32435d22f8f2083649befc75a2e89db7ceb5362974e4f301ceb82ed5a683ddec8477ebfab64f230f55f7b82
- SSDEEP 6144:yxLYame6LZgtPAln6kFbR8vrL+2uMbY8dEhefq1Isp:C0FOPAlJKv/qudEhGl
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/MSOCFU.DLL
- Size 425KB
- SHA256 105a9c40f47d068b9cfca3d95969375ddac1dd83d88f33b961bc5d829e09f7ca
- MD5 8654f849af331fd5a2e272416aefef6a
- SHA1 a9cadff4cbf178df130f769cfa58209920d27746
- SHA512 d691a4c23f38fff599b86d6852b30cc42d6cc043d5f77f3921db7f50a1e2924e9bbb782c17328029af159116c491a913ffcfae118a8908ffd77b7987a5626cc7
- SSDEEP 6144:UETInv3v1cqU/9bzFCi8/TFOsFrr4Kdyj7XKUTa8m23d7KJKKWMJ8jo+eCSmAtON:UWInv3v1cqU6DTRI7XHgZwKhJAeCG8V
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/Microsoft.CodeAnalysis.VisualBasic.resources.dll
- Size 399KB
- SHA256 83747a13a175a4ea6b6e056fbeb375f61552b8f0ff9a95b187474282c73b1a28
- MD5 12acdd939dd0f1756b95289511861a5b
- SHA1 cbb1bd3b1c7e955d252373e1d8ac473bde05be4c
- SHA512 08cceb2a92f7a3e87ea1a1bbd9b968749de0392d07512a7af17b25793ddf121ede873f0cab05adbdeccd6e29cb49bed51c8991f7e75a12a8d50d57d9d1dab4e3
- SSDEEP 12288:LC3rw7wxGul6pQqiC77MWBwAwoPjzUrYo+71iZVFwaKoTzNvDto8Q+rGcIEypTAO:LC3kTj
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/Microsoft.ProgramSynthesis.Extraction.Text.Deprecated.dll
- Size 368KB
- SHA256 4c40d92ea7f785795b7df75ff5226833a9d8d6735f7963c3b44b4f3f16be88bb
- MD5 ac02e3b8b1b614ea82295c31b1e812d7
- SHA1 cdf52e7395750a64ed74f7443d74728563dc8c43
- SHA512 096d4c593c64a8ae5da77a5f3048fc7e4b655c6a583b78cc6fd9d3833d277b46cbf366fe5621c3bcee0d4eeca43b061005dd237ab00bcc910963ff949ed4fc08
- SSDEEP 6144:Ms/J8gqW9WfT4LSJ9BW3fdcI6NtsDf9NAkc2dcfuibWiCDxKy8CCSmoC:Ms/zPj1cI3A2yfkFJkoC
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/Microsoft.TemplateEngine.Orchestrator.RunnableProjects.dll
- Size 522KB
- SHA256 90d70d30a7cf0c11d554f027a1525ecb1eb04fd96f9c0a20596d45c7838203c1
- MD5 edaf15de4b4df85ef81ef4279c178e4a
- SHA1 4b9a3c4e88f215f103f57bb2787c3d148b0cc825
- SHA512 403108b802c7e46904b24de3e019f11b7f24d1ad328bd6832a4119de619e5cf154a0d53dec6bc6b485b8e0392b2fb7f2579f55e5bd81174c7d7420369a781aed
- SSDEEP 12288:KGYgr+U6HMzjqFT3bfefDQXwu3RDbaOxgZvlHY6L9vYYXD1XyaTB/fV7C:5YZHMOf/g59v3yaTNVW
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/Microsoft.TestPlatform.Extensions.BlameDataCollector.dll
- Size 206KB
- SHA256 d7d02df75f19e859c368cf8781890ec2cb92a64923d5b542af348b885eb055cb
- MD5 582bbdb094c2f0e22ba4302a2e9e76ee
- SHA1 4b513fbf18d50d4365ce3c0c610247c40a9a0c49
- SHA512 326947a03831caabe69ee794d2b05e8dbf06e8211f7d9c6c8c4592304c2918cc9d27481abc57e2420ebd75915032e54e562263cdb353801ffa6c997921da850f
- SSDEEP 3072:NDAg58G0wSIgBmWR5bhFjSFhPL1OH1gi5nDLYxglkx5dPr0faNTeO0TQ8BA9djA8:tDfqdpjb+FhPL0H1H5nDkaAnjA8
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/Microsoft.VisualStudio.CppSvc.Internal.dll
- Size 201KB
- SHA256 a310a3c03fecfe4933e56ecf8bfbebecebad10898d7c9a784d41654f7f5944d4
- MD5 862869d2c58ce32858142acbf5474973
- SHA1 8a27868bb9767e8891a2212ded3ec744359ba2df
- SHA512 4431ae901a503517c7929f878ed62c3c2de45752bfb1232116ab10eba6b3d9247aad72d80d863552f5ff1664d74b76ca372edaac1e0b47591902e1873571859f
- SSDEEP 6144:guz8bL7lWTDQHCUi+7j+oVrhSlGvPKzkiMk:guz8vO8iUi+7j+gSlGvLk
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/PPI-NVIDIA.dll
- Size 300KB
- SHA256 c0f59470a7613227be04707621e469e2fa55ba3b09c7b23aa6d415e08a0f8d1b
- MD5 21ed61ddde58eac12a7336e14d62e3eb
- SHA1 7dc96c8e20e6e01085cc3f8db36aea2514bdace4
- SHA512 bb172fe1a3adb8449c4eb9955868a1ea3d7de5dfe75d7ac8fc4ed438b1c02f1c0eeb875fb82c7c7007cfdae9ec1f10a7811c96f39fa515dd709725a00b5d2230
- SSDEEP 3072:fRXRKSq97u254NEHUOFKoyqikP/Hy5xaS3JcheTGlpJVM4q7ArFG3QU+5VO4J4xV:Jkn7b54N81KRq0EgoVXdAdUVXi3
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/Qt5RemoteObjects.dll
- Size 466KB
- SHA256 9c7e98537a3be19bf54fc46648e588f4ca113d0968162f319c6e5905113d7c50
- MD5 aef313a53f693ff49543419e6a8c70a1
- SHA1 b76436e3aa97c4bf323b6a3f5d08abb01c222b19
- SHA512 249a48c0ad44665f8d3540efb10fda2bf3a9744c52e61905f14d8364ff319f1e4af17c3b1e2553aa1a32b12c7c64633cdd4217988c6b8a361acad41a5890a21f
- SSDEEP 6144:exLKKiUb6GEk4JYsHPZeP18PtMgG6xsgcWwvKL6eUdlV0CliIFjS7ze/yFbewJTa:eJKKY04J93tMgGFNq65lTiIs7syQn7
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Library/System.Core.dll
- Size 656KB
- SHA256 75f1a8ff24f8330d4a5a719ad9ff4922bb150ef13b08640ed3b823fa8f9b332c
- MD5 87497c78ddd864ac63dbe1c196c89fc4
- SHA1 d3cd261b86381a4de021023d7a927456857372f4
- SHA512 e71257bd041f249dd5f4387f0eacec29def4083dd8e7bc8a9163bc985166fc41595890d19fb4131dbd5f0cac598059d083bd96223c31965a18b372e0576bd7d3
- SSDEEP 6144:k6yMY1YyFX9naAsBdNd72yWgRlED1myuMHg9ZN9QYPVGXO1iD0ksaip2G0cW:k67qFX9naAsBdv7t99JEO9oD
- MD5 SHA1 SHA512 SSDEEP
Score1/10