Overview
overview
8Static
static
3VapeV4.exe
windows11-21h2-x64
8$PLUGINSDI...ls.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDIR/app-64.7z
windows11-21h2-x64
1LICENSE.electron.txt
windows11-21h2-x64
3chrome_100...nt.pak
windows11-21h2-x64
3chrome_200...nt.pak
windows11-21h2-x64
3icudtl.dat
windows11-21h2-x64
3locales/af.pak
windows11-21h2-x64
3locales/am.pak
windows11-21h2-x64
3locales/ar.pak
windows11-21h2-x64
3locales/bg.pak
windows11-21h2-x64
3locales/bn.pak
windows11-21h2-x64
3locales/ca.pak
windows11-21h2-x64
3locales/cs.pak
windows11-21h2-x64
3locales/da.pak
windows11-21h2-x64
3locales/de.pak
windows11-21h2-x64
3locales/el.pak
windows11-21h2-x64
3locales/en-GB.pak
windows11-21h2-x64
3locales/en-US.pak
windows11-21h2-x64
3locales/es-419.pak
windows11-21h2-x64
3locales/es.pak
windows11-21h2-x64
3locales/et.pak
windows11-21h2-x64
3locales/fa.pak
windows11-21h2-x64
3locales/fi.pak
windows11-21h2-x64
3locales/fil.pak
windows11-21h2-x64
3locales/fr.pak
windows11-21h2-x64
3locales/gu.pak
windows11-21h2-x64
3resources/elevate.exe
windows11-21h2-x64
3vk_swiftshader.dll
windows11-21h2-x64
1vulkan-1.dll
windows11-21h2-x64
1$PLUGINSDI...7z.dll
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
159s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
03/05/2026, 22:51
Static task
static1
Behavioral task
behavioral1
Sample
VapeV4.exe
Resource
win11-20260130-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/app-64.7z
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
LICENSE.electron.txt
Resource
win11-20260130-en
Behavioral task
behavioral6
Sample
chrome_100_percent.pak
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
chrome_200_percent.pak
Resource
win11-20260130-en
Behavioral task
behavioral8
Sample
icudtl.dat
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
locales/af.pak
Resource
win11-20260130-en
Behavioral task
behavioral10
Sample
locales/am.pak
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
locales/ar.pak
Resource
win11-20260130-en
Behavioral task
behavioral12
Sample
locales/bg.pak
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
locales/bn.pak
Resource
win11-20260130-en
Behavioral task
behavioral14
Sample
locales/ca.pak
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
locales/cs.pak
Resource
win11-20260130-en
Behavioral task
behavioral16
Sample
locales/da.pak
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
locales/de.pak
Resource
win11-20260130-en
Behavioral task
behavioral18
Sample
locales/el.pak
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
locales/en-GB.pak
Resource
win11-20260130-en
Behavioral task
behavioral20
Sample
locales/en-US.pak
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
locales/es-419.pak
Resource
win11-20260130-en
Behavioral task
behavioral22
Sample
locales/es.pak
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
locales/et.pak
Resource
win11-20260130-en
Behavioral task
behavioral24
Sample
locales/fa.pak
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
locales/fi.pak
Resource
win11-20260130-en
Behavioral task
behavioral26
Sample
locales/fil.pak
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
locales/fr.pak
Resource
win11-20260130-en
Behavioral task
behavioral28
Sample
locales/gu.pak
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
resources/elevate.exe
Resource
win11-20260130-en
Behavioral task
behavioral30
Sample
vk_swiftshader.dll
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
vulkan-1.dll
Resource
win11-20260130-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win11-20260130-en
General
- Target chrome_200_percent.pak
- Size 190KB
- Sample260503-2s34vsds7p
- SHA256 8c1ae81d19fd6323a02eb460e075e2f25aba322bc7d46f2e6edb1c4600e6537a
- MD5 c37bd7a6b677a37313b7ecc4ff01b6f5
- SHA1 79db970c44347bd3566cefb6cabd1995e8e173df
- SHA512 a7b07133fa05593b102a0e5e5788b29488cb74656c5ee25de897c2ba2b2a7b05c0663ade74a003f7d6df2134d0b75f0ad25e15e9c9e0969e9453b7fc40b9f8bb
- SSDEEP 3072:ADQYaE/N6Mrvy/3JP29W2bg3yhPaafR54x5GMR+F44ffbdZnYw9p4AbIVGYoDd+y:ADQYaSN6svyd242k3yxgx5GMRejnbdZR
- TLSH T1ED14E1C7A3B8DD7DC9670AB3662501F1ECB211395AB6525B03DFDC357A56BC888C8283
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4324 OpenWith.exe