Overview
overview
8Static
static
8f58cb609fb...ab.exe
windows10-2004-x64
8f58cb609fb...ab.exe
windows11-21h2-x64
8$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-21h2-x64
3$PLUGINSDI...FC.dll
windows10-2004-x64
3$PLUGINSDI...FC.dll
windows11-21h2-x64
3$PLUGINSDI...SC.dll
windows10-2004-x64
3$PLUGINSDI...SC.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows11-21h2-x64
3$PLUGINSDIR/nsSCM.dll
windows10-2004-x64
3$PLUGINSDIR/nsSCM.dll
windows11-21h2-x64
3$PLUGINSDI...ML.dll
windows10-2004-x64
3$PLUGINSDI...ML.dll
windows11-21h2-x64
3AxInterop....ib.dll
windows10-2004-x64
1AxInterop....ib.dll
windows11-21h2-x64
1AxInterop.ViewerX.dll
windows10-2004-x64
1AxInterop.ViewerX.dll
windows11-21h2-x64
1CagService.exe
windows10-2004-x64
1CagService.exe
windows11-21h2-x64
1Common.dll
windows10-2004-x64
1Common.dll
windows11-21h2-x64
1Core.XmlSe...rs.dll
windows10-2004-x64
1Core.XmlSe...rs.dll
windows11-21h2-x64
1Core.dll
windows10-2004-x64
1Core.dll
windows11-21h2-x64
1CsExec.Service.exe
windows10-2004-x64
1CsExec.Service.exe
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
120s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
15/04/2026, 18:45
Behavioral task
behavioral1
Sample
f58cb609fb798117ad61bcfbcea69a7284d43468b61f1274cbf58759c3e366ab.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
f58cb609fb798117ad61bcfbcea69a7284d43468b61f1274cbf58759c3e366ab.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/SimpleFC.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/SimpleFC.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsSCM.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsSCM.dll
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsisXML.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsisXML.dll
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
AxInterop.MSTSCLib.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
AxInterop.MSTSCLib.dll
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
AxInterop.ViewerX.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
AxInterop.ViewerX.dll
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
CagService.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
CagService.exe
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
Common.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
Common.dll
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
Core.XmlSerializers.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
Core.XmlSerializers.dll
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
Core.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
Core.dll
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
CsExec.Service.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
CsExec.Service.exe
Resource
win11-20260130-en
General
- Target CagService.exe
- Size 19KB
- Sample260415-xecbrsgw5m
- SHA256 eb209f6eccdebca405183de5f24ef34ee8c850615e6ab9f086f5a4fb6851e071
- MD5 975354d0a22c4a77e27624bfcb05777e
- SHA1 d4e71d00d95dede191e1347dd4bf284908705cd2
- SHA512 ee2def7352f16f71c15c863e0f1722ba69e8a3a7eabd49e7bf4d03c369a462f2a403b8ee00ea018aa2cdf4f3a689d2a2fadce2b10ce51353e6737bb77097be22
- SSDEEP 384:KYMQoDoU+94X9nmhJUqkpf5ZTJ4yIE1m2Jo:loDoi8at1F1m
- TLSH T17B92D611A3E84B66F6F76F7559720A050E32FE5BA871D34C26A4004F2AB3B81C971777
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\cagerrors.dat
- Size 7KB
- SHA256 d6e090981a847e87e93aa50b084f4228a654fbece9a3b5d010ecf6d1c8341750
- MD5 756efb6444c30dc5a75e0dcf33243f42
- SHA1 85fdfff27af1e105ed62076bc85c3327545668d4
- SHA512 e0d47ad33e4701e00dde8c3bd5a1b458657f9147357b4e2f9fb8b59a9321e779b3327ba52353966e555b87b397b63ffdda20e9fca1ab786b78ea16194efee740
- SSDEEP 192:r4/MI4/Md4/Mh4/M34/MZ4/M44/MB4/Ma4/MI:rPIPdPhP3PZP4PBPaPI
- TLSH T109F1BF25C1D54BF35A8116E47E03C8B95EF03944500E3A2AABFCA46BF7CDCEC65D2285
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\log.txt
- Size 6KB
- SHA256 5deef254cdf90bcd960906431a7e878cf7d348c113badef85528707a19a0ae78
- MD5 228daf9182db6d391c4e86d116ee3d12
- SHA1 d67656b8b0a3c261dd273502abf1b2bd8c36dd1f
- SHA512 879290223894cfa7c70107d29d214adc102f807dd354f3abbbc09a58839fb4300325254c1715fbcf23d1657789c8c760a2b154d0f98fabdde12d2ffd718fd16f
- SSDEEP 96:cKcGoNQncGoNQHRcGoNQA6cGoNQBcGoNQnVcGoNQHcGoNQv:csMQMCMp8MGMWMwMI
- TLSH T107D1BC21C1E00FF146C216A8BD4395B94EF03945901E3A16ABFC686BF7C8CDD56B6286
- MD5 SHA1 SHA512 SSDEEP TLSH