Overview
overview
7Static
static
5DotNetZip.dll
windows10-2004-x64
1DotNetZip.dll
windows11-21h2-x64
1LESLIE NOTE.exe
windows10-2004-x64
7LESLIE NOTE.exe
windows11-21h2-x64
5LNEditorManager.exe
windows10-2004-x64
5LNEditorManager.exe
windows11-21h2-x64
5LNInterface.dll
windows10-2004-x64
1LNInterface.dll
windows11-21h2-x64
1LNLoading.exe
windows10-2004-x64
5LNLoading.exe
windows11-21h2-x64
5LNMemoStart.exe
windows10-2004-x64
7LNMemoStart.exe
windows11-21h2-x64
7LNSafe.exe
windows10-2004-x64
1LNSafe.exe
windows11-21h2-x64
1LNUpdate.exe
windows10-2004-x64
5LNUpdate.exe
windows11-21h2-x64
5LumiSoft.Net.dll
windows10-2004-x64
1LumiSoft.Net.dll
windows11-21h2-x64
1Microsoft....re.dll
windows10-2004-x64
1Microsoft....re.dll
windows11-21h2-x64
1Microsoft....ms.dll
windows10-2004-x64
1Microsoft....ms.dll
windows11-21h2-x64
1Microsoft....rs.dll
windows10-2004-x64
1Microsoft....rs.dll
windows11-21h2-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows11-21h2-x64
1System.Dat...te.dll
windows10-2004-x64
1System.Dat...te.dll
windows11-21h2-x64
1WeifenLuo....15.dll
windows10-2004-x64
1WeifenLuo....15.dll
windows11-21h2-x64
1WeifenLuo....ng.dll
windows10-2004-x64
1WeifenLuo....ng.dll
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
21/04/2026, 03:44
Static task
static1
Behavioral task
behavioral1
Sample
DotNetZip.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
DotNetZip.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
LESLIE NOTE.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
LESLIE NOTE.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral5
Sample
LNEditorManager.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
LNEditorManager.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral7
Sample
LNInterface.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
LNInterface.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral9
Sample
LNLoading.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
LNLoading.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral11
Sample
LNMemoStart.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
LNMemoStart.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral13
Sample
LNSafe.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
LNSafe.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral15
Sample
LNUpdate.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
LNUpdate.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral17
Sample
LumiSoft.Net.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
LumiSoft.Net.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral19
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral21
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral23
Sample
Microsoft.Xaml.Behaviors.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
Microsoft.Xaml.Behaviors.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral25
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
Newtonsoft.Json.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral27
Sample
System.Data.SQLite.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
System.Data.SQLite.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral29
Sample
WeifenLuo.WinFormsUI.Docking.ThemeVS2015.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
WeifenLuo.WinFormsUI.Docking.ThemeVS2015.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral31
Sample
WeifenLuo.WinFormsUI.Docking.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
WeifenLuo.WinFormsUI.Docking.dll
Resource
win11-20260130-en
windows11-21h2-x64
General
- Target LNLoading.exe
- Size 1.2MB
- Sample260421-eahc4sbs6v
- SHA256 6dbed1ac49416c74c3f73bd4da5ec9d78c0120a27136c92095c09d0307620222
- MD5 50a98beb3f9e7a34558982832628f159
- SHA1 3b38b4ba01ffe6dafacb84cdbe811871ce59f614
- SHA512 cb4efbe0f921baede83f01291c91a40236f8ac3540b429648074705b326ed27c2b1c8d4e20d4cdfcf1d5d52f8b1a7f75d95691867f0424313d21331d89e1792e
- SSDEEP 24576:Qp9R4eMkacjAK7Vlz9gfJzFGuDiMCBvkF0tmkKAa:uR4eMop7V9sX7skgTKA
- TLSH T17E55EF84770C16AAC95F833F4A0AD99C4883FE5631337A469D433B292F47EF14A295F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- ConfuserEx .NET packer 1 IoCs
Detects ConfuserEx .NET packer.
resource yara_rule behavioral9/memory/4516-1-0x00000207A77D0000-0x00000207A785A000-memory.dmp ConfuserEx