Overview
overview
6Static
static
36127385ced...24.exe
windows10-2004-x64
36127385ced...24.exe
windows11-21h2-x64
3$APPDATA/2...86.dll
windows10-2004-x64
3$APPDATA/2...86.dll
windows11-21h2-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-21h2-x64
3$PLUGINSDI...in.dll
windows10-2004-x64
3$PLUGINSDI...in.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...86.dll
windows10-2004-x64
3$PLUGINSDI...86.dll
windows11-21h2-x64
3$PROGRAMFI...86.dll
windows10-2004-x64
3$PROGRAMFI...86.dll
windows11-21h2-x64
3$_49_/2345...er.exe
windows10-2004-x64
3$_49_/2345...er.exe
windows11-21h2-x64
3$_49_/2345...er.exe
windows10-2004-x64
3$_49_/2345...er.exe
windows11-21h2-x64
3$_49_/2345...er.exe
windows10-2004-x64
3$_49_/2345...er.exe
windows11-21h2-x64
3$_49_/2345PicTool.exe
windows10-2004-x64
3$_49_/2345PicTool.exe
windows11-21h2-x64
3$_49_/2345...te.exe
windows10-2004-x64
6$_49_/2345...te.exe
windows11-21h2-x64
6$_49_/2345...er.exe
windows10-2004-x64
3$_49_/2345...er.exe
windows11-21h2-x64
3$_49_/libcurl_x86.dll
windows10-2004-x64
3$_49_/libcurl_x86.dll
windows11-21h2-x64
32345Login.exe
windows10-2004-x64
2345Login.exe
windows11-21h2-x64
2345PdfEditor.exe
windows10-2004-x64
42345PdfEditor.exe
windows11-21h2-x64
4Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
25/04/2026, 09:19
Static task
static1
Behavioral task
behavioral1
Sample
6127385ced83cdbb6ac210d07d2e984b171faf32651f815e6397b066bd05ff24.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
6127385ced83cdbb6ac210d07d2e984b171faf32651f815e6397b066bd05ff24.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
$APPDATA/2345Pic/PicExt/libcurl_x86.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
$APPDATA/2345Pic/PicExt/libcurl_x86.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/FileInfo.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/FileInfo.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/RCWidgetPlugin.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/RCWidgetPlugin.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/libcurl_x86.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/libcurl_x86.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
$PROGRAMFILES64/2345Soft/2345Preview/Application/$R1/libcurl_x86.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
$PROGRAMFILES64/2345Soft/2345Preview/Application/$R1/libcurl_x86.dll
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
$_49_/2345PicDumper.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
$_49_/2345PicDumper.exe
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
$_49_/2345PicHelper.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
$_49_/2345PicHelper.exe
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
$_49_/2345PicLoader.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
$_49_/2345PicLoader.exe
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
$_49_/2345PicTool.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
$_49_/2345PicTool.exe
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
$_49_/2345PicUpdate.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
$_49_/2345PicUpdate.exe
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
$_49_/2345PicWorker.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
$_49_/2345PicWorker.exe
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
$_49_/libcurl_x86.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
$_49_/libcurl_x86.dll
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
2345Login.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
2345Login.exe
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
2345PdfEditor.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
2345PdfEditor.exe
Resource
win11-20260130-en
General
- Target 6127385ced83cdbb6ac210d07d2e984b171faf32651f815e6397b066bd05ff24.exe
- Size 8.1MB
- Sample260425-lack7adv4x
- SHA256 6127385ced83cdbb6ac210d07d2e984b171faf32651f815e6397b066bd05ff24
- MD5 02992155fa3d7a46826c8ce4e685ee99
- SHA1 6472d2f05ab8eedb75ccb036cebca4bb1663bfdc
- SHA512 2ef91135b9fabd22ef358d7d097ff53a56914956ca2154a19ee9a787f3916a3ff261efcff78f57aa1fe87b657e5f9ae7a432a064a4d8bd706df0804b60b4b15b
- SSDEEP 196608:m+fsRTNHxk5Lkb3ipeZwz6UDcxkzAtM1K5HJ7LHHuTz:xgfcLkb3ipe26X4AtMg5HNjOn
- TLSH T1118633D7215D286BCDD875B859F7E75CBBD40C00006D03E6E391398A2C376F7686EA8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 6127385ced83cdbb6ac210d07d2e984b171faf32651f815e6397b066bd05ff24.exe