Overview
overview
8Static
static
8GoogleMeet...rk.exe
windows10-2004-x64
7GoogleMeet...rk.exe
windows11-21h2-x64
7$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-21h2-x64
3$PLUGINSDI...FC.dll
windows10-2004-x64
3$PLUGINSDI...FC.dll
windows11-21h2-x64
3$PLUGINSDI...SC.dll
windows10-2004-x64
3$PLUGINSDI...SC.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows11-21h2-x64
3$PLUGINSDIR/nsSCM.dll
windows10-2004-x64
3$PLUGINSDIR/nsSCM.dll
windows11-21h2-x64
3$PLUGINSDI...ML.dll
windows10-2004-x64
3$PLUGINSDI...ML.dll
windows11-21h2-x64
3AxInterop....ib.dll
windows10-2004-x64
1AxInterop....ib.dll
windows11-21h2-x64
1AxInterop.ViewerX.dll
windows10-2004-x64
1AxInterop.ViewerX.dll
windows11-21h2-x64
1CagService.exe
windows10-2004-x64
1CagService.exe
windows11-21h2-x64
1Common.dll
windows10-2004-x64
1Common.dll
windows11-21h2-x64
1Core.XmlSe...rs.dll
windows10-2004-x64
1Core.XmlSe...rs.dll
windows11-21h2-x64
1Core.dll
windows10-2004-x64
1Core.dll
windows11-21h2-x64
1CsExec.Service.exe
windows10-2004-x64
1CsExec.Service.exe
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
17/04/2026, 00:28
Behavioral task
behavioral1
Sample
GoogleMeet_At_work.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
GoogleMeet_At_work.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/SimpleFC.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/SimpleFC.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsSCM.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsSCM.dll
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsisXML.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsisXML.dll
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
AxInterop.MSTSCLib.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
AxInterop.MSTSCLib.dll
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
AxInterop.ViewerX.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
AxInterop.ViewerX.dll
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
CagService.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
CagService.exe
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
Common.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
Common.dll
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
Core.XmlSerializers.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
Core.XmlSerializers.dll
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
Core.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
Core.dll
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
CsExec.Service.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
CsExec.Service.exe
Resource
win11-20260130-en
General
- Target CagService.exe
- Size 19KB
- Sample260417-asvzpsc15k
- SHA256 eb209f6eccdebca405183de5f24ef34ee8c850615e6ab9f086f5a4fb6851e071
- MD5 975354d0a22c4a77e27624bfcb05777e
- SHA1 d4e71d00d95dede191e1347dd4bf284908705cd2
- SHA512 ee2def7352f16f71c15c863e0f1722ba69e8a3a7eabd49e7bf4d03c369a462f2a403b8ee00ea018aa2cdf4f3a689d2a2fadce2b10ce51353e6737bb77097be22
- SSDEEP 384:KYMQoDoU+94X9nmhJUqkpf5ZTJ4yIE1m2Jo:loDoi8at1F1m
- TLSH T17B92D611A3E84B66F6F76F7559720A050E32FE5BA871D34C26A4004F2AB3B81C971777
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\cagerrors.dat
- Size 7KB
- SHA256 865569d5ad6364b3e57b91c4f1b92f37b24f504792296f76a2a08a8fa8285f92
- MD5 5a5ea6d1b9b31ffc4225b15abbb058b5
- SHA1 0109451f68917a6f9508fb3d0fd77feaff62d144
- SHA512 8dd60f609095fe8f3d3b0a13f95f7f6b8809483fd08ba217d2b6c01d7f5524cb2201f0676bc6dbaee07cfd5397911f5ecef1cfdfb8874d3ecc174fedbc5d07e1
- SSDEEP 192:u4/MwW4/Mtm4/Mc4/Mb4/MC4/Mf4/MH4/M64/MI:uPwWPtmPcPbPCPfPHP6PI
- TLSH T149F18B21C1D54BF31A8116E4BE03C8B95EF03A84500E7A2A9BFCA55BF7DDCEC65D2285
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\log.txt
- Size 6KB
- SHA256 6caf800d08d17edb0e6bdfdfea31bd1a5db72bcd20ce889e7ab7b902ae05ec5f
- MD5 dd954fa460dcb28bebaee70fb8672c09
- SHA1 abb7009d24e8be51276dde15b82f817bff96014c
- SHA512 b089c821cb8106eaa7de48c6fe81a5206005d0132ac925f194b71440a0546ca565edc64d8f5247387c2770334e78b93a0031016dba4beb1449bd14c17e27cc6d
- SSDEEP 96:BncGoNQjUMcGoNQwJL8cGoNQLHcGoNQ4OBcGoNQ/cGoNQFcGoNQv:BZM2UmMTp2MG5MGM0MeMI
- TLSH T131D1DD20C1E40FF1468316A8BD4385BA4EF03A45911F3A16ABFC599BF7C8CDC56B6286
- MD5 SHA1 SHA512 SSDEEP TLSH