Overview
overview
8Static
static
8f58cb609fb...ab.exe
windows10-2004-x64
8f58cb609fb...ab.exe
windows11-21h2-x64
8$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-21h2-x64
3$PLUGINSDI...FC.dll
windows10-2004-x64
3$PLUGINSDI...FC.dll
windows11-21h2-x64
3$PLUGINSDI...SC.dll
windows10-2004-x64
3$PLUGINSDI...SC.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows11-21h2-x64
3$PLUGINSDIR/nsSCM.dll
windows10-2004-x64
3$PLUGINSDIR/nsSCM.dll
windows11-21h2-x64
3$PLUGINSDI...ML.dll
windows10-2004-x64
3$PLUGINSDI...ML.dll
windows11-21h2-x64
3AxInterop....ib.dll
windows10-2004-x64
1AxInterop....ib.dll
windows11-21h2-x64
1AxInterop.ViewerX.dll
windows10-2004-x64
1AxInterop.ViewerX.dll
windows11-21h2-x64
1CagService.exe
windows10-2004-x64
1CagService.exe
windows11-21h2-x64
1Common.dll
windows10-2004-x64
1Common.dll
windows11-21h2-x64
1Core.XmlSe...rs.dll
windows10-2004-x64
1Core.XmlSe...rs.dll
windows11-21h2-x64
1Core.dll
windows10-2004-x64
1Core.dll
windows11-21h2-x64
1CsExec.Service.exe
windows10-2004-x64
1CsExec.Service.exe
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
141s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
15/04/2026, 18:45
Behavioral task
behavioral1
Sample
f58cb609fb798117ad61bcfbcea69a7284d43468b61f1274cbf58759c3e366ab.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
f58cb609fb798117ad61bcfbcea69a7284d43468b61f1274cbf58759c3e366ab.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/SimpleFC.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/SimpleFC.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsSCM.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsSCM.dll
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsisXML.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsisXML.dll
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
AxInterop.MSTSCLib.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
AxInterop.MSTSCLib.dll
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
AxInterop.ViewerX.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
AxInterop.ViewerX.dll
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
CagService.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
CagService.exe
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
Common.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
Common.dll
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
Core.XmlSerializers.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
Core.XmlSerializers.dll
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
Core.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
Core.dll
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
CsExec.Service.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
CsExec.Service.exe
Resource
win11-20260130-en
General
- Target CagService.exe
- Size 19KB
- Sample260415-xecbrsgw5m
- SHA256 eb209f6eccdebca405183de5f24ef34ee8c850615e6ab9f086f5a4fb6851e071
- MD5 975354d0a22c4a77e27624bfcb05777e
- SHA1 d4e71d00d95dede191e1347dd4bf284908705cd2
- SHA512 ee2def7352f16f71c15c863e0f1722ba69e8a3a7eabd49e7bf4d03c369a462f2a403b8ee00ea018aa2cdf4f3a689d2a2fadce2b10ce51353e6737bb77097be22
- SSDEEP 384:KYMQoDoU+94X9nmhJUqkpf5ZTJ4yIE1m2Jo:loDoi8at1F1m
- TLSH T17B92D611A3E84B66F6F76F7559720A050E32FE5BA871D34C26A4004F2AB3B81C971777
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\cagerrors.dat
- Size 7KB
- SHA256 71c173ae37b4f0c081c26b99afb8141f6edc069bde5f0b2a593079811f587f90
- MD5 335437e05b2e30938eac7585cc076e11
- SHA1 8588739211e54473861f828a09ff7317e3cf657f
- SHA512 709de74be2a7c2baa6ec0ebed795330f53d3545118940b8cf7f48773e54721fa63b94b13bcb0f0a4e1619b9932efaf0fbbda0b9547d537db3045ffb6aed9fda1
- SSDEEP 192:54/Mj4/M44/M84/MS4/Mm4/M44/MH4/Mp4/MI:5PjP4P8PSPmP4PHPpPI
- TLSH T154F19D25C1D55BF31A8116E47E03C8B95EF03944500E3A2AABFC946BF7CDCEC65D2285
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\log.txt
- Size 6KB
- SHA256 60f6e7363f1f53a73a2bc92e234c349c4d941987c549bd0e1713d8c65178bcd5
- MD5 38e81da7da41e1fa30e8440b04431e5c
- SHA1 cb91bbffc5b891c3e8b85d4d138442caccb509a2
- SHA512 94966ad9fed4fbd94af56024c7a7dcd703cbe4717c8959b15d3ec019da5bd9b8170afc7dd1ed8f5fc92020b82c9fcb2a109a912f9110576ec5ffb2625c39ea58
- SSDEEP 96:pIcGoNQJcGoNQYHocGoNQfbcGoNQMTScGoNQTcGoNQ/cGoNQv:piMSM4M2dMQM0MAMI
- TLSH T181D1CB31C1E00BF106C216A8BD4399B94EF03945911F3A16ABFC586BF7C9CED56B6286
- MD5 SHA1 SHA512 SSDEEP TLSH