Overview
overview
7Static
static
5DotNetZip.dll
windows10-2004-x64
1DotNetZip.dll
windows11-21h2-x64
1LESLIE NOTE.exe
windows10-2004-x64
7LESLIE NOTE.exe
windows11-21h2-x64
5LNEditorManager.exe
windows10-2004-x64
5LNEditorManager.exe
windows11-21h2-x64
5LNInterface.dll
windows10-2004-x64
1LNInterface.dll
windows11-21h2-x64
1LNLoading.exe
windows10-2004-x64
5LNLoading.exe
windows11-21h2-x64
5LNMemoStart.exe
windows10-2004-x64
7LNMemoStart.exe
windows11-21h2-x64
7LNSafe.exe
windows10-2004-x64
1LNSafe.exe
windows11-21h2-x64
1LNUpdate.exe
windows10-2004-x64
5LNUpdate.exe
windows11-21h2-x64
5LumiSoft.Net.dll
windows10-2004-x64
1LumiSoft.Net.dll
windows11-21h2-x64
1Microsoft....re.dll
windows10-2004-x64
1Microsoft....re.dll
windows11-21h2-x64
1Microsoft....ms.dll
windows10-2004-x64
1Microsoft....ms.dll
windows11-21h2-x64
1Microsoft....rs.dll
windows10-2004-x64
1Microsoft....rs.dll
windows11-21h2-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows11-21h2-x64
1System.Dat...te.dll
windows10-2004-x64
1System.Dat...te.dll
windows11-21h2-x64
1WeifenLuo....15.dll
windows10-2004-x64
1WeifenLuo....15.dll
windows11-21h2-x64
1WeifenLuo....ng.dll
windows10-2004-x64
1WeifenLuo....ng.dll
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
21/04/2026, 03:44
Static task
static1
Behavioral task
behavioral1
Sample
DotNetZip.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
DotNetZip.dll
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
LESLIE NOTE.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
LESLIE NOTE.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
LNEditorManager.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
LNEditorManager.exe
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
LNInterface.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
LNInterface.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
LNLoading.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
LNLoading.exe
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
LNMemoStart.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
LNMemoStart.exe
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
LNSafe.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
LNSafe.exe
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
LNUpdate.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
LNUpdate.exe
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
LumiSoft.Net.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
LumiSoft.Net.dll
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
Microsoft.Xaml.Behaviors.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
Microsoft.Xaml.Behaviors.dll
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
Newtonsoft.Json.dll
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
System.Data.SQLite.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
System.Data.SQLite.dll
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
WeifenLuo.WinFormsUI.Docking.ThemeVS2015.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
WeifenLuo.WinFormsUI.Docking.ThemeVS2015.dll
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
WeifenLuo.WinFormsUI.Docking.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
WeifenLuo.WinFormsUI.Docking.dll
Resource
win11-20260130-en
General
- Target LNUpdate.exe
- Size 1.3MB
- Sample260421-eahc4sbs6v
- SHA256 b9dc33eb01af82328376773eec977e5817a4c560de9aee822175f7e13feb65f5
- MD5 dc4d9f44b582f65c87b6b785676edb3e
- SHA1 44f02a7e19e8890e5e338afc4dd46cc1e3d4d0c9
- SHA512 599521e3ec886abafce5660fafcc1a3a320ee7fe51cb6198f34615359e3ebd6d331fc47f36a1d05033501457411ec0fd012a02018804e59a546000fa61fecea0
- SSDEEP 24576:0TD4bMUVUZivWOtf2gz4YUtApGNHhjxhowtb26KAa:iDlUFvW2f2gz4YUtAUNHFxhBb26KA
- TLSH T1A055EF80B70C05AAD84F833F864AD99C5A47FD6235737A695E077B291F43EF006216FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- ConfuserEx .NET packer 2 IoCs
Detects ConfuserEx .NET packer.
resource yara_rule behavioral15/memory/3420-1-0x0000025D261A0000-0x0000025D26236000-memory.dmp ConfuserEx behavioral15/memory/3420-4-0x0000025D26230000-0x0000025D263D8000-memory.dmp ConfuserEx