e660f354264ffa6ce039a49e30c3d6c5efa4cc6c399004885eaafafca08947f8 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

DILib.dll

windows10-2004-x64

3

DILib.dll

windows11-21h2-x64

3

DriverHub.exe

windows10-2004-x64

3

DriverHub.exe

windows11-21h2-x64

3

DriverHubU...er.exe

windows10-2004-x64

3

DriverHubU...er.exe

windows11-21h2-x64

3

DriverInstaller32.exe

windows10-2004-x64

3

DriverInstaller32.exe

windows11-21h2-x64

3

Microsoft....er.dll

windows10-2004-x64

1

Microsoft....er.dll

windows11-21h2-x64

1

PDClient.exe

windows10-2004-x64

3

PDClient.exe

windows11-21h2-x64

3

PDInterface.dll

windows10-2004-x64

1

PDInterface.dll

windows11-21h2-x64

1

msvcp140.dll

windows10-2004-x64

3

msvcp140.dll

windows11-21h2-x64

3

vcruntime140.dll

windows10-2004-x64

3

vcruntime140.dll

windows11-21h2-x64

3

x64/Driver...er.exe

windows10-2004-x64

1

x64/Driver...er.exe

windows11-21h2-x64

1

x64/msvcp140.dll

windows10-2004-x64

1

x64/msvcp140.dll

windows11-21h2-x64

1

x64/vcruntime140.dll

windows10-2004-x64

1

x64/vcruntime140.dll

windows11-21h2-x64

1

x64/vcrunt..._1.dll

windows10-2004-x64

1

x64/vcrunt..._1.dll

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
14e48bfc-ec4c-470e-b656-0cb48729e5e7.zip
Size 1.9MB
Sample260422-w4e9aaas6x
SHA256 e660f354264ffa6ce039a49e30c3d6c5efa4cc6c399004885eaafafca08947f8
MD5 13352d003c1d393a5ca5a5f180f6b6fa
SHA1 b70685e96d9ec049443dba9104c70568feeb7919
SHA512 a312c4554b21cceaa2fc044ffa3b26fcb901565dd4841c7b53692aa8a1dda22fdb3886e47409c3eb3ca3bd255aafa1024e3106ee8b997c40ba4132a46944aa6e
SSDEEP 49152:8oAOLwwkHh5P0ec0iasPsL4V6qLXHHhvfC:8RNh5yzasPs66uX5K
TLSH
T1BE9533B2E538452E5CA1DD7FC4B22D9D209EA80473AD4B924CADC7DE2D9C5AC0F63325
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

DILib.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

DILib.dll

Resource

win11-20260130-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

DriverHub.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

DriverHub.exe

Resource

win11-20260130-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

DriverHubUninstaller.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

DriverHubUninstaller.exe

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

DriverInstaller32.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

DriverInstaller32.exe

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

Microsoft.Win32.TaskScheduler.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Microsoft.Win32.TaskScheduler.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

PDClient.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

PDClient.exe

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

PDInterface.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

PDInterface.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

msvcp140.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

msvcp140.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

vcruntime140.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

vcruntime140.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

x64/DriverInstaller.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

x64/DriverInstaller.exe

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

x64/msvcp140.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

x64/msvcp140.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

x64/vcruntime140.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

x64/vcruntime140.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

x64/vcruntime140_1.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

x64/vcruntime140_1.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  DILib.dll
- Size 209KB
- SHA256 38fe70e5775d5422951a4187958cde07cca28825c662078352392ad6a25f031f
- MD5 1b46ddde584cb25af4a893927fd0dbc9
- SHA1 a2b25f8332a565b12e15c7d959a097dad1db3259
- SHA512 e3ea7d869fb4871e5664eabaf220f98ff24442a116fc73cd9bf212a48f4409af22712a031376760f71178be168f4b5d5b74c486af0beef64eaefdb6f9e5fc6b0
- SSDEEP 6144:RouImlYtmsD7xcFbQcXShE98IZpU2iu2tKJSxVHX:WylY/xuQc998IZpU2iuwqk
- TLSH
  T108247E931ADEBDE2E57A42713B7387D1D32CDE008BA2E68F62C14599987C28735317C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  DriverHub.exe
- Size 1.4MB
- SHA256 e7f65bf3a5280d12d80fe0c33d6f5a4da6c1db4f5da4393488d6232b4bc06873
- MD5 b306741d1e8855c538b84c227f2e10a7
- SHA1 cfd3c11796883c8407fad1b0530ab8433ca3ea6c
- SHA512 b903e41218b5c446e83140201ad628f5d070bbbc4fe705b6741f31465722800ab2b230ff3fd2b521891a4c9459b160545976cc170b4252e5d9673e715601f430
- SSDEEP 24576:vfKu35pttYPo0McIzIGuo0VPcrU1sX8xOjdxme3il6:v335ptiMLzIGZ7VXfb53D
- TLSH
  T15A65BF4563A8642AC0DF1776A112392467F5CE263B67FBC7109CB0EE6CF278D8D21267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  DriverHubUninstaller.exe
- Size 723KB
- SHA256 79295ca6859efc1b5cbc822a93067f61a3b8364fcb0dadb31c04102ec4e9ab07
- MD5 04d1eaf7d303b838836cb79fe2c0b65f
- SHA1 b569b5994f387db3cfc9956e7796c21c3412c718
- SHA512 4db1f0d8d91660d73ea52b554fc83e5402aee5457f3b7eebf47fa4c486fdf7f17b4ef370b6aa1f0b0affb5d255089ba5d4f3f6853273a2f8efe705e072baca42
- SSDEEP 12288:CmAD/1pfrfCj3Tj/YOlUuC0tyCNTeZsK8BpUUWYeA2WpDW7:WN5CLTMj5CNTeZsjBpU1ipa7
- TLSH
  T113F4AE9057A8992BC4EF9739E070581853B5EC27AA87DB4F35ADB0F86F733098D01267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  DriverInstaller32.exe
- Size 140KB
- SHA256 32e35bf1ae587b0d0100d339cc2b9e45d3a4ddeb0d82099291f21be5fea2fe4b
- MD5 914ded5e145527f6fa37ee8d38b7ded8
- SHA1 2ca3de7d91232e722388d4cfabe36ef18e27ab7e
- SHA512 932485950bf19876312da6546308128967f7e021e5f4d35a3d8aab72c0bfa03d9e6d5a9ac77e4b3235fff88da9ed9e9eeecbd0132f295cbac344e0ea533357e8
- SSDEEP 3072:4PuzJsTzBKHfXivPZiwwBW4csLGSGlerHpDFUhsV4xFEu9Sn:4PiJ+K6JiwwBW4NLlGlerHpDFUW6en
- TLSH
  T1C1E3AE73B64F843AF09013B159646FE692BAFC351F2503D323A8B36E4A391D61E32656
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Microsoft.Win32.TaskScheduler.dll
- Size 325KB
- SHA256 ea27c65491119eee5c8e87ce3d470783580db8fc5bd141c496768d7d0cce779a
- MD5 0616ea42b68a8f5f2f01bcd985bdcbc7
- SHA1 88d6aae1f17b00f4391e0e7b17e98c494be73ba1
- SHA512 ce4657908615c4837084c75d806c083b8f7e63965a2e7866b8c96de7c0278a0857235b74cd9443769968165db250eba042a5b05927febff5bb70bebb7dcbd814
- SSDEEP 3072:QJA5RylsHmDFin8nhWvGzOJ1mYAFeYXxCJIrkp9TD6qaXn69aKCax8weCycJ5Dfa:ZHmDxnhWvGSJYRFeYXEee9TWqa369An
- TLSH
  T10A645B6117EC862EDAEF1F79F074121186B9F816B97ADB0D9A80E5DD4C23781D922333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  PDClient.exe
- Size 119KB
- SHA256 88dcf73b6a45ae2d5063f50848753ffe0778e25dee78bde2f1c8bf591a6f75c7
- MD5 a4addd46176c129480236017d7d0a1a2
- SHA1 8a45e33058aff927e4ba0a24ed319d3660e078ea
- SHA512 b2cfbc233ec746d1cf81d0304a6a0bd911fdfd13e5ce3f5b6bb898ce7301da34c266496c41025bc6ac0d7cda252b13e120910b686f892f46000db574e1379cec
- SSDEEP 3072:pNyEb1djddbxFLFocAe3iLYkxHMByoQQaYvrfcgpMFlG+Fet:pNfb1djddbxFLFoc33WYUeaKrpMFlNFe
- TLSH
  T14EC35D821398995AC16E127DB430F3D159F3A27D6792DBCDDCC878AA2EC13C78628353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  PDInterface.dll
- Size 10KB
- SHA256 3b6410e49d39f0a8bb87b9de50775adf61704defab8505ac47aed87a8807f408
- MD5 a494c22140b8f20669eb8ccae69492df
- SHA1 500f989524fa08acdb75fecc9d95cd81464d0edd
- SHA512 3313662f109535e31a548de2f0c49de169c5afb194e918434339ae54566e976866e483850ee65db806726014220965889e3f3060829eb648a9b51a581e77f779
- SSDEEP 96:gmbBNDTJXURMcnmgCnI1ch519LAGWPV7jtkwOReWV+YcXGPDxAKEZPh/O7AsAt8y:BblnDnd9LAGWd7jCnz1cXGPlAAMsAS0
- TLSH
  T12322D905A7D88621DD7E2ABADCB143411377FB40A823DF8E18CCB15F1C627590DE3A66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  msvcp140.dll
- Size 439KB
- SHA256 2c0a3e328419b3b50b0430f38c6b5882e302177f4b003aba6a0e7e035807043d
- MD5 c53b950681b9f07a8d56f2ff272cbf5c
- SHA1 0ec5c6084b6ce4e9a0ed3cca02ba464450f19d36
- SHA512 a48c886ff9dd34344094c00c8ff18ee91a359f06dac4cd42c2e054857cd0a12121ba4baf8e85d158fad5a62dfe4c694e5d80c4682564fe07205ca69139a364f5
- SSDEEP 12288:n82bIggWBCs9B+zJT8N/oaTvlbJLsRXhUgiW6QR7t5s03Ooc8dHkC2esjeX8:nbTgWBCs9B+zJT8yaTvlbJLsR003Ooce
- TLSH
  T1E1A418227B064DF1E58923B572C6431293F9FC654361E3C3A7DEF0692F662C6A633291
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  vcruntime140.dll
- Size 88KB
- SHA256 bf33857f46e56ea7930c1eea25c5f7175a6aaa3df36bf8301a785e6ca726a0b9
- MD5 c33386a6e67be415a24d9c431ffd42ac
- SHA1 f2f23860916471bdc332b3bd3e88deef64d4432b
- SHA512 bc6d5e908bfaa7a35a8f2e01912412b9460604ea19fd27ee5c6f1a05eb0180a07bf7bc26d430326afc9b81d7f19fb1899e6245196a37710c3e5346d0bc2b4c98
- SSDEEP 1536:EbiyVUrqIQsn1xtg6RxkkBGCGHDWbWXaecbGasQLvBrzU6LzNa:eiyLyt/xcRjWaXaecbGzurJBa
- TLSH
  T100937E5235E482B2DDAF04F0D97AEB076A3DA6900FF129F76B949949DE617C0D73020B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  x64/DriverInstaller.exe
- Size 149KB
- SHA256 a10b380501ca6dc55ecc20e0a6da5a85eedf1d8508442941eb5184d5c4e6e47f
- MD5 37dad55ed6487d7f5a5383441bc3a732
- SHA1 928a2d5aa01829889dbb0dc35302e8eecb0d7af9
- SHA512 e831a29a0f6a06b6af60a7a065fc899c415ff2b8d07cb1ae811516f7ac3ef29de0abfc12afba6df3f55521231fa6c77bfacfe5ba516d1878ef8aae97a5f0d3c0
- SSDEEP 3072:2J0bQsD9Gg+mugQLKFEZGwBW4csLGSGlerHpDFUhsV4xFEDo:M0d9Gg+/6EUwBW4NLlGlerHpDFUW6So
- TLSH
  T16FE3AE6B669E00FDF0A6A37C51930A81E3F2BC560B2297DB0371722A0F7B7E45D76650
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  x64/msvcp140.dll
- Size 559KB
- SHA256 1e57a6df9e3742e31a1c6d9bff81ebeeae8a7de3b45a26e5079d5e1cce54cd98
- MD5 c3d497b0afef4bd7e09c7559e1c75b05
- SHA1 295998a6455cc230da9517408f59569ea4ed7b02
- SHA512 d5c62fdac7c5ee6b2f84b9bc446d5b10ad1a019e29c653cfdea4d13d01072fdf8da6005ad4817044a86bc664d1644b98a86f31c151a3418be53eb47c1cfae386
- SSDEEP 12288:mPeu+VwM4PRpJOc8hdGE0bphVSvefIJQEKZm+jWodEEVwDaM:sqwpzSFJQEKZm+jWodEEq9
- TLSH
  T1BBC40923B75906A0E195E3B8A1834316D7F0BC4A8322A3C752FBD69D2F673D5673B250
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  x64/vcruntime140.dll
- Size 116KB
- SHA256 a06c9ea4f815dac75d2c99684d433fbfc782010fae887837a03f085a29a217e8
- MD5 e9b690fbe5c4b96871214379659dd928
- SHA1 c199a4beac341abc218257080b741ada0fadecaf
- SHA512 00cf9b22af6ebbc20d1b9c22fc4261394b7d98ccad4823abc5ca6fdac537b43a00db5b3829c304a85738be5107927c0761c8276d6cb7f80e90f0a2c991dbcd8c
- SSDEEP 1536:BqvQFDdwFBHKaPX8YKpWgeQqbekRG7MP4ddbHecbWcmpCGtodMzDZ92zfa:BqvQFDUXqWn7CkRG7jecbWb9toaera
- TLSH
  T1E1C37C4573A402B7D62AC274C1E35A46EB71B5458770ABCF03B689AA0F13BE1AF3D345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  x64/vcruntime140_1.dll
- Size 48KB
- SHA256 6d3a6cde6fc4d3c79aabf785c04d2736a3e2fd9b0366c9b741f054a13ecd939e
- MD5 eb49c1d33b41eb49dfed58aafa9b9a8f
- SHA1 61786eb9f3f996d85a5f5eea4c555093dd0daab6
- SHA512 d15905a3d7203b00181609f47ce6e4b9591a629f2bf26ff33bf964f320371e06d535912fda13987610b76a85c65c659adac62f6b3176dbca91a01374178cd5c6
- SSDEEP 768:oPIyGVrxmKqOnA4j3z6S2X7pudLAivD9zigElY7ivD9zG:XBr87uWFLpudBvpziZ1vpzG
- TLSH
  T176236CD057784082E9AB89B0C5E6EE577D7CF6A20B50968B07A1D1981F637C0FB3D21E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

© 2018-2026

Terms | Privacy