Overview
overview
3Static
static
3Project/ap...per.js
windows11-21h2-x64
3Project/ap...dex.js
windows11-21h2-x64
3Project/ap...ask.js
windows11-21h2-x64
3Project/ap...ode.js
windows11-21h2-x64
3Project/ap...ace.js
windows11-21h2-x64
3Project/ap...ect.js
windows11-21h2-x64
3Project/ap...ode.js
windows11-21h2-x64
3Project/ap...ace.js
windows11-21h2-x64
3Project/ap...ect.js
windows11-21h2-x64
3Project/ic...on.dll
windows11-21h2-x64
3Project/ic...n2.dll
windows11-21h2-x64
3Project/im...ds.dll
windows11-21h2-x64
3Project/im...if.dll
windows11-21h2-x64
3Project/im...ns.dll
windows11-21h2-x64
3Project/im...co.dll
windows11-21h2-x64
3Project/im...pe.dll
windows11-21h2-x64
3Project/im...eg.dll
windows11-21h2-x64
3Project/im...33.dll
windows11-21h2-x64
3Project/im...ee.dll
windows11-21h2-x64
3Project/im...55.dll
windows11-21h2-x64
3Project/im...ee.dll
windows11-21h2-x64
3Project/im...za.dll
windows11-21h2-x64
3Project/im...vg.dll
windows11-21h2-x64
3Project/im...ga.dll
windows11-21h2-x64
3Project/im...ff.dll
windows11-21h2-x64
3Project/im...mp.dll
windows11-21h2-x64
3Project/im...bp.dll
windows11-21h2-x64
3Project/lgpllibs.dll
windows11-21h2-x64
1Project/libsEGL.dll
windows11-21h2-x64
3Project/msvcp120.dll
windows11-21h2-x64
3Project/msvcr120.dll
windows11-21h2-x64
3Project/pl...ws.dll
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
97s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
26/04/2026, 17:10
Static task
static1
Behavioral task
behavioral1
Sample
Project/apps/ClickCaptcha/engine/helpers/coordinatesCaptchaHelper.js
Resource
win11-20260130-en
Behavioral task
behavioral2
Sample
Project/apps/ClickCaptcha/engine/index.js
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
Project/apps/ClickCaptcha/engine/tasks/coordinatesCaptchaTask.js
Resource
win11-20260130-en
Behavioral task
behavioral4
Sample
Project/apps/Clipboard/getclipboard_code.js
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
Project/apps/Clipboard/getclipboard_interface.js
Resource
win11-20260130-en
Behavioral task
behavioral6
Sample
Project/apps/Clipboard/getclipboard_select.js
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
Project/apps/Clipboard/setclipboard_code.js
Resource
win11-20260130-en
Behavioral task
behavioral8
Sample
Project/apps/Clipboard/setclipboard_interface.js
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
Project/apps/Clipboard/setclipboard_select.js
Resource
win11-20260130-en
Behavioral task
behavioral10
Sample
Project/iconengines/qsvgicon.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
Project/iconengines/qsvgicon2.dll
Resource
win11-20260130-en
Behavioral task
behavioral12
Sample
Project/imageformats/qdds.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
Project/imageformats/qgif.dll
Resource
win11-20260130-en
Behavioral task
behavioral14
Sample
Project/imageformats/qicns.dll
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
Project/imageformats/qico.dll
Resource
win11-20260130-en
Behavioral task
behavioral16
Sample
Project/imageformats/qjpe.dll
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
Project/imageformats/qjpeg.dll
Resource
win11-20260130-en
Behavioral task
behavioral18
Sample
Project/imageformats/qjpeg33.dll
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
Project/imageformats/qjpegqee.dll
Resource
win11-20260130-en
Behavioral task
behavioral20
Sample
Project/imageformats/qjpegqq55.dll
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
Project/imageformats/qjpegqqee.dll
Resource
win11-20260130-en
Behavioral task
behavioral22
Sample
Project/imageformats/qjpegqqza.dll
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
Project/imageformats/qsvg.dll
Resource
win11-20260130-en
Behavioral task
behavioral24
Sample
Project/imageformats/qtga.dll
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
Project/imageformats/qtiff.dll
Resource
win11-20260130-en
Behavioral task
behavioral26
Sample
Project/imageformats/qwbmp.dll
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
Project/imageformats/qwebp.dll
Resource
win11-20260130-en
Behavioral task
behavioral28
Sample
Project/lgpllibs.dll
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
Project/libsEGL.dll
Resource
win11-20260130-en
Behavioral task
behavioral30
Sample
Project/msvcp120.dll
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
Project/msvcr120.dll
Resource
win11-20260130-en
Behavioral task
behavioral32
Sample
Project/platform2/qwindows.dll
Resource
win11-20260130-en
General
- Target Project/imageformats/qjpe.dll
- Size 26KB
- Sample260426-vpyxeacv91
- SHA256 6bae9af6a7790fbdee87b7efa53d31d8aff0ab49bdaaefd3fb87a8cc7d4e8a90
- MD5 2831b334b8edf842ce273b3dd0ace1f8
- SHA1 e586bf0172c67e3e42876b9cd6e7f349c09c3435
- SHA512 68dca40e3de5053511fc1772b7a4834538b612724ec2de7fb2e182ba18b9281b5f1ccf47bd58d691024f5bcddfc086e58570ad590dd447f6b0185a91a1ac2422
- SSDEEP 384:Q5JEkajiasWEN7MADKzFk8RPf4BYSJGI9kgLjW/zXE58nupWwOk0GfZRm5g+zCxh:Q5JEkbWEOAODfsZJGHgLszUFTOqYyT
- TLSH T1D9C27E51BF1AA1B2DA5296B425CD8723DD32F2904FE297C76D77CD2818A93D12E3420F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 2960 wrote to memory of 4928 2960 rundll32.exe 80
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Project\imageformats\qjpe.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2960 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Project\imageformats\qjpe.dll,#12⤵
- System Location Discovery: System Language Discovery
PID:4928
-