Overview
overview
7Static
static
5DotNetZip.dll
windows10-2004-x64
1DotNetZip.dll
windows11-21h2-x64
1LESLIE NOTE.exe
windows10-2004-x64
7LESLIE NOTE.exe
windows11-21h2-x64
5LNEditorManager.exe
windows10-2004-x64
5LNEditorManager.exe
windows11-21h2-x64
5LNInterface.dll
windows10-2004-x64
1LNInterface.dll
windows11-21h2-x64
1LNLoading.exe
windows10-2004-x64
5LNLoading.exe
windows11-21h2-x64
5LNMemoStart.exe
windows10-2004-x64
7LNMemoStart.exe
windows11-21h2-x64
7LNSafe.exe
windows10-2004-x64
1LNSafe.exe
windows11-21h2-x64
1LNUpdate.exe
windows10-2004-x64
5LNUpdate.exe
windows11-21h2-x64
5LumiSoft.Net.dll
windows10-2004-x64
1LumiSoft.Net.dll
windows11-21h2-x64
1Microsoft....re.dll
windows10-2004-x64
1Microsoft....re.dll
windows11-21h2-x64
1Microsoft....ms.dll
windows10-2004-x64
1Microsoft....ms.dll
windows11-21h2-x64
1Microsoft....rs.dll
windows10-2004-x64
1Microsoft....rs.dll
windows11-21h2-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows11-21h2-x64
1System.Dat...te.dll
windows10-2004-x64
1System.Dat...te.dll
windows11-21h2-x64
1WeifenLuo....15.dll
windows10-2004-x64
1WeifenLuo....15.dll
windows11-21h2-x64
1WeifenLuo....ng.dll
windows10-2004-x64
1WeifenLuo....ng.dll
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
158s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
21/04/2026, 03:44
Static task
static1
Behavioral task
behavioral1
Sample
DotNetZip.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
DotNetZip.dll
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
LESLIE NOTE.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
LESLIE NOTE.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
LNEditorManager.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
LNEditorManager.exe
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
LNInterface.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
LNInterface.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
LNLoading.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
LNLoading.exe
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
LNMemoStart.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
LNMemoStart.exe
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
LNSafe.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
LNSafe.exe
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
LNUpdate.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
LNUpdate.exe
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
LumiSoft.Net.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
LumiSoft.Net.dll
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
Microsoft.Xaml.Behaviors.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
Microsoft.Xaml.Behaviors.dll
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
Newtonsoft.Json.dll
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
System.Data.SQLite.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
System.Data.SQLite.dll
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
WeifenLuo.WinFormsUI.Docking.ThemeVS2015.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
WeifenLuo.WinFormsUI.Docking.ThemeVS2015.dll
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
WeifenLuo.WinFormsUI.Docking.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
WeifenLuo.WinFormsUI.Docking.dll
Resource
win11-20260130-en
General
- Target LNEditorManager.exe
- Size 1.4MB
- Sample260421-eahc4sbs6v
- SHA256 685b8aab21a8ce55abc8b2587a444c68945f37dfe792f96cb6feaf2b5a6eb021
- MD5 651cf478f933d25607c7f61a4836c637
- SHA1 2dc601336a964db7ebd3b5e572306a0ab2098bfa
- SHA512 0146c39fb54160da9970f6745548bf8282ba3964875e4e755ab1c8d2490fceae8c8d1e58d866193ae33715e1f25f5ccd8973668aa2d34692e3a311837c5525ff
- SSDEEP 24576:mn6wj9T2GvNdPElI+pyOdqS1VO4XC4GOhzNyCss62uBFGGbQOPlJKAa:XwRcVdZ3uYNv9MzGUQOjKA
- TLSH T1A665EF81774C819AE19F833F498AC96D0897FD967477761A4D433B281F07EF00A662FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- ConfuserEx .NET packer 2 IoCs
Detects ConfuserEx .NET packer.
resource yara_rule behavioral5/memory/1112-1-0x00000235DACB0000-0x00000235DAD78000-memory.dmp ConfuserEx behavioral5/memory/1112-4-0x00000235F36A0000-0x00000235F3848000-memory.dmp ConfuserEx