Overview
overview
6Static
static
3processlas...64.exe
windows10-2004-x64
4processlas...64.exe
windows11-21h2-x64
4$PLUGINSDIR/INetC.dll
windows10-2004-x64
3$PLUGINSDIR/INetC.dll
windows11-21h2-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3CPUEater.exe
windows10-2004-x64
1CPUEater.exe
windows11-21h2-x64
1Insights.exe
windows10-2004-x64
1Insights.exe
windows11-21h2-x64
1InstallHelper.exe
windows10-2004-x64
1InstallHelper.exe
windows11-21h2-x64
1LogViewer.exe
windows10-2004-x64
1LogViewer.exe
windows11-21h2-x64
1ProcessGovernor.exe
windows10-2004-x64
1ProcessGovernor.exe
windows11-21h2-x64
1ProcessLasso.exe
windows10-2004-x64
1ProcessLasso.exe
windows11-21h2-x64
1ProcessLas...er.exe
windows10-2004-x64
5ProcessLas...er.exe
windows11-21h2-x64
3QuickUpgrade.exe
windows10-2004-x64
6QuickUpgrade.exe
windows11-21h2-x64
4ThreadRacer.exe
windows10-2004-x64
1ThreadRacer.exe
windows11-21h2-x64
1TweakScheduler.exe
windows10-2004-x64
1TweakScheduler.exe
windows11-21h2-x64
1bitsumsess...nt.exe
windows10-2004-x64
1bitsumsess...nt.exe
windows11-21h2-x64
1pl-update.cmd
windows10-2004-x64
1pl-update.cmd
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
155s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
20/04/2026, 17:29
Static task
static1
Behavioral task
behavioral1
Sample
processlassosetup64.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
processlassosetup64.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
$PLUGINSDIR/INetC.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
$PLUGINSDIR/INetC.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral5
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral9
Sample
CPUEater.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
CPUEater.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral11
Sample
Insights.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
Insights.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral13
Sample
InstallHelper.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
InstallHelper.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral15
Sample
LogViewer.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
LogViewer.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral17
Sample
ProcessGovernor.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
ProcessGovernor.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral19
Sample
ProcessLasso.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
ProcessLasso.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral21
Sample
ProcessLassoLauncher.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
ProcessLassoLauncher.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral23
Sample
QuickUpgrade.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
QuickUpgrade.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral25
Sample
ThreadRacer.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
ThreadRacer.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral27
Sample
TweakScheduler.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
TweakScheduler.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral29
Sample
bitsumsessionagent.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
bitsumsessionagent.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral31
Sample
pl-update.cmd
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
pl-update.cmd
Resource
win11-20260130-en
windows11-21h2-x64
General
- Target QuickUpgrade.exe
- Size 487KB
- Sample260420-v2verac13x
- SHA256 52e674c0ebc9c303aea7f77e6f61b5389bc92005bb3450f9e262b4a5b655c087
- MD5 6f782f7c529b12940cc72d66607ac775
- SHA1 29a677f8399ae2f7d7c653cf974bba1bf8adc827
- SHA512 ea9a43082c558a141da1a9a0479c25a79e1b1cdab8efa85cc7943546a0d1116bd850873a0ee08ef7e23f2829c534340b8c27e7b964992311e07b89c201af1273
- SSDEEP 3072:Uwlw46gYUBoWux28XvviXx/S0L4ab+cH6myRmrf/JnQwqdz4VSIxDdWk7HoZ7WKx:Uwlw4NXug8fvk60L4OqXcU6Y7WGya
- TLSH T1B5B47ED11ABA8CACE461CE7C8A91CCC9A5DF6D0C463D76BB0278341C5F7EBDA5864D20
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
pid Process 3212 QuickUpgrade.exe 3212 QuickUpgrade.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\pl_rsrc_temp.dll
- Size 1.9MB
- SHA256 d050dcbc16be8ed00242576cfcb13a9aca1212693da369a895c41d4b6ad92783
- MD5 5f1bcb904eaaf2c11a9c8df643dde78a
- SHA1 dd8d1c141c4da0c45e5e300bcb1a8d42b54f1241
- SHA512 0fcd292d2e0d1da564fe5a477504dcad6c11696c46b66293579874db9a20fefcd33f8d02c92df2353a002808a27f493a5eafd49aee816df833779ba60b65d30d
- SSDEEP 6144:jfFa9MmhuV2FFdq7qFrwnim0gsZEeV3dyqlbWTjFC8fB4adLxp7WGCNE/Jt1icNa:jfcHoQuFzLXKGh4ZJe6cwTqREewWuQhe
- TLSH T1EB9582CE12BADC58F179EE781DA04E5818D73C8DE838B13D3A31711E997C6669828F53
- MD5 SHA1 SHA512 SSDEEP TLSH