64a31b159b8d4905c13681f53a2219f1fcb55977e6108162a47f2ce3c33d8b15 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

bin/advpack.dll

windows10-2004-x64

3

bin/advpack.dll

windows11-21h2-x64

3

bin/cnvcnt.dll

windows10-2004-x64

3

bin/cnvcnt.dll

windows11-21h2-x64

3

bin/cnvtoc.dll

windows10-2004-x64

3

bin/cnvtoc.dll

windows11-21h2-x64

3

bin/flash.exe

windows10-2004-x64

3

bin/flash.exe

windows11-21h2-x64

3

bin/gencnv.dll

windows10-2004-x64

3

bin/gencnv.dll

windows11-21h2-x64

3

bin/hha.dll

windows10-2004-x64

3

bin/hha.dll

windows11-21h2-x64

3

bin/hhc.exe

windows10-2004-x64

3

bin/hhc.exe

windows11-21h2-x64

3

bin/hhcout.dll

windows10-2004-x64

3

bin/hhcout.dll

windows11-21h2-x64

3

bin/hhkout.dll

windows10-2004-x64

3

bin/hhkout.dll

windows11-21h2-x64

3

bin/hhw.exe

windows10-2004-x64

3

bin/hhw.exe

windows11-21h2-x64

3

bin/iconv.dll

windows10-2004-x64

3

bin/iconv.dll

windows11-21h2-x64

3

bin/iconv.exe

windows10-2004-x64

3

bin/iconv.exe

windows11-21h2-x64

3

bin/itcc.dll

windows10-2004-x64

3

bin/itcc.dll

windows11-21h2-x64

3

bin/libexslt.dll

windows10-2004-x64

3

bin/libexslt.dll

windows11-21h2-x64

3

bin/libxml2.dll

windows10-2004-x64

3

bin/libxml2.dll

windows11-21h2-x64

3

bin/libxslt.dll

windows10-2004-x64

3

bin/libxslt.dll

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
winmerge_manual_another_build_tools_v2.zip
Size 7.5MB
Sample260420-pldjeah14l
SHA256 64a31b159b8d4905c13681f53a2219f1fcb55977e6108162a47f2ce3c33d8b15
MD5 09acf7044a959534c0536b01ea1b01c4
SHA1 c6060afc46fe150a82efb34777c024635776a8f1
SHA512 2b630cc62c7a851de4406af351a55041794e8e3bad8a2385a4e5218587cdc5770a1d6390f9abfbd9ad8fc35edfea010f62c2d04bacb2bfa6fa71c876b0f59966
SSDEEP 196608:m/cRnUglmH0kE/sIQKhIheTDoTRenvjZNsNeD+1Lv9c0KYJh:m/cRdlUgupe3WenFy3La0Rh
TLSH
T16B8633F2DE9A1570C58B9EB9C4DC1B09FE9593071231F86F18941894ADD7BFE4B0223A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

bin/advpack.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

bin/advpack.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

bin/cnvcnt.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

bin/cnvcnt.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

bin/cnvtoc.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

bin/cnvtoc.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

bin/flash.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

bin/flash.exe

Resource

win11-20260130-en

windows11-21h2-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

bin/gencnv.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

bin/gencnv.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

bin/hha.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

bin/hha.dll

Resource

win11-20260130-en

windows11-21h2-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

bin/hhc.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

bin/hhc.exe

Resource

win11-20260130-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

bin/hhcout.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

bin/hhcout.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

bin/hhkout.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

bin/hhkout.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

bin/hhw.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral20

Sample

bin/hhw.exe

Resource

win11-20260130-en

windows11-21h2-x64

5 signatures

150 seconds

Behavioral task

behavioral21

Sample

bin/iconv.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

bin/iconv.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

bin/iconv.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

bin/iconv.exe

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

bin/itcc.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

bin/itcc.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

bin/libexslt.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

bin/libexslt.dll

Resource

win11-20260130-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

bin/libxml2.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

bin/libxml2.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

bin/libxslt.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

bin/libxslt.dll

Resource

win11-20260130-en

windows11-21h2-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  bin/advpack.dll
- Size 86KB
- SHA256 53e84096f700c80f217f685548502395f3c6b3ba0842f867fe323930343589fd
- MD5 5889bd69a008fc924b71592f7fb5731d
- SHA1 1dbb4f53d8f9cb9782024709dc72684533417c01
- SHA512 5e23acfd614530f04d8d5476974c029945dfce97d8485912de389b6258bf5cf5c1876fc3bcf331496d90cbee3ebb22c23820d05783534123ff0b48aeb590c343
- SSDEEP 1536:6ouoso1DLedoSKrV1t6BFkiGmz+Z8r0xtk5zIi04NR2Y2xIk0F+htJ64hoKJmygm:lRPFtt6BuiGmS20xUwy2Yl+fA4hoKJm2
- TLSH
  T1AA83171336A04033F2F21A3429B96A2557FD6D356835D67ADB101BCA2870BDEDA3D713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  bin/cnvcnt.dll
- Size 90KB
- SHA256 61efe4d842898126d3a945289313c7fb20a7ab7696ead3606a4133359c74b724
- MD5 e3ad8e51ae1475da90660240f997a87f
- SHA1 b37b68c38cc50ff37604e109ac0bfa206cb92754
- SHA512 397adc1e60ac7769fe6b1ec7f5f3d3c8ca5fa7a937d3f480bdcce2c5e2737cdaf67a1a6a20e7ea31333838e3ea54a8c8a941c918cf69e5509d8cf4bad334bec2
- SSDEEP 1536:3ArEPSff5/BTEHosOMbivmhh848ggXIqv7ITsCPw7dg8LhZhQ:2cKfbsd0Ih84lgH7IFkdg8LhZh
- TLSH
  T1A19316122590D07FE4E79BB5A89E8BF9AB3A87751F04A8C743A41DE17F315C2CD3124A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  bin/cnvtoc.dll
- Size 89KB
- SHA256 2109014d425366152d32b13bcc448cb369d81b3a3ad17b0be0cf7d6f019f49bd
- MD5 d5647d4e32ee37918a77de955978a0df
- SHA1 9a008544b9cd8e18914bd8cafe5adb8df968d350
- SHA512 6adf8dfe1140e95a332a3738b7a3b7c763753ff118328ece31fc2605cbdcb990287bf59e06e19892bbeea630b7482c0ebeeaf3dafaf938774801a9b375ac3e80
- SSDEEP 1536:p5L+sUADux2sAtizgfqGDR2+gr0vN+0L2TDwmd3QmKR/MbB:O/ADBsAmgy+pg+N+9/rd3QmKR/aB
- TLSH
  T186932C1225D0C13FD8D78BB5A85E8BF5A93887750F08B9C797A42CE13B364D2CA3165B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  bin/flash.exe
- Size 748KB
- SHA256 bee39bf6a5b012a3dba2e261cda7e6d9d5ab6a434eb05bace3ef55e8b4323b42
- MD5 00b936fd8ca57bb037c8c6a7fb890a3e
- SHA1 00abd7ca3e7eca94f5fd35071d36a8947e1d7b34
- SHA512 22f3a9606289e8d48069b521baed445b6b0be9ef9d16051e44279aa15a11544f46203baae9c952f107e58912f4bde50b01cfddfbebdbba45a9755091bf8f0753
- SSDEEP 6144:kjDqXwv4rWwEXT5rppART59z8iacSrYnHL5PpqlnWxnFtHS9BdqAqPzIsKE2Fsnr:k/qgvBBzA7mVeqlWtiZfr+8Lo
- TLSH
  T18DF42931EBE9806AE97676301CBA67702632FD806F358BCF2754FA3D49323819D25716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  bin/gencnv.dll
- Size 212KB
- SHA256 0ed37582ff42db391e33e1d283958ad57c5d1bcf8faafdc7f719ba33abc63f3f
- MD5 dd9222e6168d4d9e685ef746083e8c1e
- SHA1 a646ffc8d396e71c25fc95fa20b3e5d936dcb51c
- SHA512 88d4626b3049d31d3940930bef868a76248ad6ff5a980b1778aa9354e2bda15f40ac2200d3297e3be2a6d9e0e08d4dd2eca61fd6bd3cb0440a257f45e60d7f69
- SSDEEP 3072:XSYqEW8PG4/aqMyUoXzSpFObxcNe/esevt0lu1gkncvgYDTND9daScI7usrChy:XSpkPG4/aDynXeFcQFgqAWLlmSy
- TLSH
  T15724392A2DD1C0BAE2975A3824AD77F4663A9B710F2489C793A4DCB53B365C0C93531B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  bin/hha.dll
- Size 818KB
- SHA256 32003df5ecd25fa39a0c410a487c8b8440758f199eb4032b4ec03cd8f1da220c
- MD5 83178b998b55f3b199d21158f307fa4c
- SHA1 cdadee248714c2e2df3a62c8c21222b017086ffe
- SHA512 9675be3ff15b84a5b28e82ef5d5b8d43abf73a05d3b94d8099807ff3021ff20617875ef028f62a4297ff0c18b5a93d02a5a91d3fd5ddb3b495f46bce699efcd2
- SSDEEP 24576:SfZZj36x6TqtCO+nRcfcXcDcXrZ3sK0GmzBDtb:eZZj33YV+nRqe6w3sLv3b
- TLSH
  T10C05BF43B6E1B036D47A07304E6E673C7178BE908B399ACB6794FD2838725A0DA75317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  bin/hhc.exe
- Size 50KB
- SHA256 3e96894609819ae3d595ff6e0fbe9ce6c9ac17bdeda256b994831992f668cb99
- MD5 7a7935b7bde566ac60b5ef995b9daf83
- SHA1 0cd6bdba0b73eb5e26780b3dfc09d32015aac35f
- SHA512 a21dca1af5e7707f431760ed8dbe618d515d19149992e79673850b45ab7b8476591f7c8901129cfb7effe64b6515cbdf5fb11d6bedaa26e29230e2a9237b2590
- SSDEEP 768:Zb6dZtmPN79giyntnMq59ZyTj5s1RaDX07KOxzdbveEK0iL:h61ONKi+tndPhRAuNdidh
- TLSH
  T16533194BFA91C1B1D895827904A2DBBA9133FD3147A356CBD3803D3EAD33AE1593964C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  bin/hhcout.dll
- Size 92KB
- SHA256 c17fb7f8110ab3e6913296f34403d51091c1f1e290f200e0219c93b9544bafbc
- MD5 7e9c9d6d88830f5a719375e26612b15e
- SHA1 1039cd49a870706059a427d2a80a9253d51a56f7
- SHA512 504b51cc45435218150038b79de9877d8e991d16a8ccbfaf8bf2b143a08b4477817dcfa3b1299b8d56528d1de14f597b382d7c83624e8e4a075791d0d8f15243
- SSDEEP 1536:fOhBy+WRa/XsYh1iTuU8i5HyDgoDUulGFtWkPoOdak8D:r+4avsYwEi5HwgWtlG9ddak8D
- TLSH
  T1A4930A2729D0C07FE8E79BB5947A8BF5AE3487710F04A8C75BA45CE17B368C2C931256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  bin/hhkout.dll
- Size 94KB
- SHA256 e54bd4a456e7c3183e3f3fa001d738f7684900282ba8af419da2b0ffcecb4790
- MD5 9dd0c15ecde3aa2e23728ad1b27f492f
- SHA1 88445ed2431a5bcb03577494d728d8529596073c
- SHA512 1b642d6e7a3020d1262e995966ca851932bed6a74e7a1caa2f02b666d0fcf7530d51aa38575780f57c0618b91599ef77695d149a5d59a1edfb29dd97184d68b4
- SSDEEP 1536:5oIUqs+UGq2usmjiRWeeObg2OgWBIPwEcZP4OdarNBFT:5s+Bq3smiW1Obg5gbPw3tdar9T
- TLSH
  T1A393F7122590C07FE4D74BB5A49D8BFEFA3487760B08A8C357A45CE1BF364D2D93129A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  bin/hhw.exe
- Size 428KB
- SHA256 0701cc7eb1af616294e90cbb35c99fa2b29d2aada9fcbdcdaf578b3fcf9b56c7
- MD5 ef01cdd3801b0fc357fc2ab9abe0093a
- SHA1 ca988ac80bc4f0d0cbf5496cae03971a91d055c7
- SHA512 53c3f3a5aa0f8e2b1bcd334bf63017fb18dd294cb9033a524304c0fac0a39b423313e6d5ec4e63a2d4a6b3f5aebf6fa2d9143d0a1802094c6c7a214039acd930
- SSDEEP 6144:3AV70bcVX0T8I1Kw1cZmv6BkjT28uPVfALD2RdLMdpTXyhNW3vC00:35bcJA8I1v1cu/28UVfALD2A7
- TLSH
  T15094082237F98526E5B77F311FB60B606A76BC91AD38C74F6B80561D8C35E40DA20B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  bin/iconv.dll
- Size 868KB
- SHA256 6cd69191469bf13f0cea70837bac9b1e7871c116f5f6f18bef5a6a9575c020c9
- MD5 73af5773bf5627fe771bf6809ec839f9
- SHA1 69d9597991dd0d1c6b478174aaa85b0e8175d0a7
- SHA512 64b631454d1d16709ae96cca95e8e3dd6049841c53ef6c4643b1a5b28a32fe6bfacb86337e93b5f9f2abf43d0233b094646b8065d3c1fafeaab7c3d6e371b864
- SSDEEP 24576:Vf2VfWlcKu6Gavkg3NydIbbbI4IBAUZLY:ZuscKu6GaXUT4IBAUZLY
- TLSH
  T18215CF96F796CF27F537C570893AAB2B9547EC229B064413BB66378E8E373A444C8107
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  bin/iconv.exe
- Size 7KB
- SHA256 e835424914b28d01e984e3c1112be4f2baf920859600e7e6eeb650bb4a9156c4
- MD5 64c0427aa2a2c06b25700c4d9f1faa3a
- SHA1 79b9d916a986741f7fb9e9d5b718939a70707f9b
- SHA512 ad99a9436c38c56c739bff54c6cbe123f5acfcdee72bcf34dce688898b25a39d996469d098ee6d054a5881fb182322c189e6b6c6df8e9e68e921711854fdb68d
- SSDEEP 192:ZD8/XVK/OqJapwwBX/2uOk6DfgBT+xY1IsGdF:huVK2lpqi1p8
- TLSH
  T10DF1F647AA5859F6FBA6067013B40F5C9B73B0701BA125D94B73D350AD34F2ABE6320D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  bin/itcc.dll
- Size 150KB
- SHA256 ef0f7aca8978b64f82aa55dbc7452c7a363f6d1dcd558f634b7249302520c09b
- MD5 120274c1c6fd1d784f53c6badda8583c
- SHA1 0cd8884ee9d00cfc45fecfff49ce2c3347914cfd
- SHA512 bd497ff82ec5641c956931ade6acd39d7ce16815f0567b3868b3a8e602982c89ceec8d8d464bed99bfebb131586d9756dfdd397eb6a40265b83432e15189901f
- SSDEEP 3072:Kc+bMQ97e6E9SUpRnRzfb4Iqslcv78QaLSZtj9NyF3wGo:EbMyqbSUpRnpEIqslcv78zSywGo
- TLSH
  T109E37E11F3C18176E1B3177B49BB3B75A779EA211526874F4310C9AA3D32B41AE3A327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  bin/libexslt.dll
- Size 52KB
- SHA256 32297e01fde38d4f50846d3dc99d09b5a99d97588fe66e92aed9af06e0cd6599
- MD5 928f0fa4dbe39919d9dd766877f1168f
- SHA1 da9563e274277a27f96c73fe05e95b5646be6acd
- SHA512 fde53144925a60aed98d94a0ed0e6cd7d89796817cc36b294fa3f422dce8de4b4f281cf0e471888b4883f814b21f9ee21e662aff8b59fb317bcfc2211545552a
- SSDEEP 1536:y6QXQozdTYZvapr8rPVXkaKKNcLegDZLDK:ylzwRrPVUaP/01m
- TLSH
  T17C3328466D4159F1F2E70ABD72B61BBB1431AE20132262C7E75616B46E532F7033B70E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  bin/libxml2.dll
- Size 944KB
- SHA256 afda893ad12614d60b4625982319cf03eec5daae3073e44cf65373cf6650bcb6
- MD5 7a06c1f1e69d3579c1840728c1e04022
- SHA1 db13b4ccb2cfff0e3c6e72c38cf1d7378a75d76e
- SHA512 943c1fc774c1807cb32cbb927e9929363507de1ae2961e3439ebc32cae97aca55e149b1a7062d04253e91bc0afc7c84d82e81af16ddd19143b1ab99a3e9d109e
- SSDEEP 24576:tGcsKaR1h25F871Sk4aQPVWawzNOWY8o:AhUFYokzNnYt
- TLSH
  T1C2258DADB79480B8D65D12F913EB97F55E3B83225325B5C3D6A02C40AD912F2633E34E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  bin/libxslt.dll
- Size 158KB
- SHA256 eaeb045fb484e31310297b7358d149fe2b6e42c32dbac60a2d1b7dd404d6388b
- MD5 3f12b73d3026697e992929a94a34401b
- SHA1 c00464539facd58753db9421318f8cae93f1bc46
- SHA512 c294570919c3dd9b5d531da40bd656b3e73fdec5f699c838c2d3b7f2cb0ad1f746044ef82c445938ff5ae7515ef34dd12d38f729220546079409a3d7b5299811
- SSDEEP 3072:9tgBMC+MHWgfTv/OA0B956n8Z9yf5usX4QA6R5J:9tgiCNxfTOj9+Zog
- TLSH
  T10EF36B5E558545BEE6A341BD636B17FB8E36A202632551D3DBB01CE00D2B2D9033E3BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy