Analysis

  • max time kernel
    46s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    03/05/2026, 12:18

General

  • Target
    UniHackerV4.5.exe
  • Size 58.0MB
  • Sample260503-pgzwvahs21
  • SHA256 5d41ee8ba306120dcde08b993655e366f53a3696f0cfe780f095b948adde6b3a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 57 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\UniHackerV4.5.exe
    "C:\Users\Admin\AppData\Local\Temp\UniHackerV4.5.exe"
    1⤵
    • Loads dropped DLL
    PID:4480

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Microsoft.Win32.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\Microsoft.Win32.Primitives.dll
        • Size 8KB
        • SHA256 fb8fc2119bd91822b2677e0ada5fa412ad440e416ffbbfba33a50d28463869a0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.Concurrent.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Collections.Concurrent.dll
        • Size 74KB
        • SHA256 0c9cd9cbab687529fa7af324b612993a00388570c29f53c1f329e7a21ec45103
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.Immutable.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Collections.Immutable.dll
        • Size 176KB
        • SHA256 ee4dda13629a942f67a6bd3e7b784881d23ef345cfb85f0670368b3f8461743f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Collections.dll
        • Size 90KB
        • SHA256 66404695728bffef29075e842d34844b14fd9a36f42e9098d93f78f19803e74b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.Annotations.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.ComponentModel.Annotations.dll
        • Size 81KB
        • SHA256 280c6f366fc53c1ea4a55d49f5e82a91829b840f8e1503ba8bc56a078736f073
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.ComponentModel.Primitives.dll
        • Size 30KB
        • SHA256 2a95e85a6d3bec9ebb94cbf389d0db26d26385bff818fd3049e727ecba7464d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.TypeConverter.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.ComponentModel.TypeConverter.dll
        • Size 276KB
        • SHA256 2c7fe051e42989e4728105e3fdb47eeee60453d9df863f5fd4765083d76e3b1c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.ComponentModel.dll
        • Size 5KB
        • SHA256 524ffd7aedf61ecda8cef062c953e083ab5a6bd6c9b9b616140ccc5644fefd61
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.FileVersionInfo.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Diagnostics.FileVersionInfo.dll
        • Size 14KB
        • SHA256 6cb0248ee7833fccb5694448cc21398d958825b27aad6e6ea00c253c6f6eff27
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.StackTrace.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Diagnostics.StackTrace.dll
        • Size 15KB
        • SHA256 1460d5ef7104fca96a44d57bcdb88f802d668f12ce02a57a16903b0b284824ba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.TraceSource.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Diagnostics.TraceSource.dll
        • Size 43KB
        • SHA256 b6eb1b20ee9d9e0283630e8840533aad0aaeac0bf2fb287c20a5b9aab0454e91
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Drawing.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Drawing.Primitives.dll
        • Size 50KB
        • SHA256 165caf85e9a7aa954228ae5ed59d8776c123557bff7d9fd6b73d70446aad946b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.IO.Compression.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.IO.Compression.dll
        • Size 94KB
        • SHA256 14bad337185f08585b0f8ec6750a0604459e7ce6529c9b1690e063c7ddbed821
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Linq.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Linq.dll
        • Size 140KB
        • SHA256 e70a610f18f815c41f93a786054014cb6605cf1de1edaa2f1195dda45d048058
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Memory.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Memory.dll
        • Size 51KB
        • SHA256 5c47548d7bc4e8524d16c7532b7980ae9d97148de3500aa57df63cbd4e20db63
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ObjectModel.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.ObjectModel.dll
        • Size 37KB
        • SHA256 bfe209deb0be65826ae793da6a26ca4a6c2243d8dfed4907cae3f5124bea5f71
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.CoreLib.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Private.CoreLib.dll
        • Size 10.1MB
        • SHA256 d8504e9a8a203c6df1377ca1debe8899a2d2abfbf48385b476f26d7aa9b3b331
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.Uri.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Private.Uri.dll
        • Size 87KB
        • SHA256 6bb366cbe8b3be73889849baf054923615df8263511e1e59fa9781356e42b8dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.Xml.Linq.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Private.Xml.Linq.dll
        • Size 140KB
        • SHA256 71c1cf4be14908a22b3d12c5de9edc7d2492d7b39cd0633473ec84421a95be27
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.Xml.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Private.Xml.dll
        • Size 2.9MB
        • SHA256 56d5142488a225a740636cb90d14f759f46ed69b38f78c8c48caeb53ce74b359
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Reflection.Metadata.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Reflection.Metadata.dll
        • Size 432KB
        • SHA256 9ecb92688ad177cfb768cc06e222c5953024a4178bd8a4fd01cdd665bbb915ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.CompilerServices.Unsafe.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Runtime.CompilerServices.Unsafe.dll
        • Size 7KB
        • SHA256 9e28f320af5f60fd946b6f30f3c3b9f2ef55ef0932d1f425f96367bab1847e64
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.InteropServices.RuntimeInformation.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Runtime.InteropServices.RuntimeInformation.dll
        • Size 12KB
        • SHA256 23933564ce96e7d57089f19e27ce29b6fde1ba3ddffd2127032723ec984854e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.InteropServices.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Runtime.InteropServices.dll
        • Size 24KB
        • SHA256 ff0dbac9dbac4fa90be13de2df70db8e40a9de763f61fc89c13e77ee77afd9bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Security.Claims.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Security.Claims.dll
        • Size 40KB
        • SHA256 7db773e89426e9756584082b2c66f45a5b3e223f86c29b26b0b29f5f3f5bd845
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Security.Principal.Windows.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Security.Principal.Windows.dll
        • Size 60KB
        • SHA256 5b68958525248ac4a4c3592099f32db5ebbf40851a72849fda3903469f5d5bb0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Threading.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\System.Threading.dll
        • Size 33KB
        • SHA256 3868cb427840f1961c101555f194f27d6c931b45d14703ea6ef514f660864ad5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UniHacker.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\UniHacker.dll
        • Size 391KB
        • SHA256 97da531e40beebd077724b2c7cd714fef8275d9355f88b5e59eb735e55097ae6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libHarfBuzzSharp.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\libHarfBuzzSharp.dll
        • Size 892KB
        • SHA256 3a32e4c372e26b245bb0012938d9a4c33b62a528e4eaf99a7388775f139f3e93
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libSkiaSharp.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\UniHackerV4.5\REv9L75OgzgUPrfl1fN3clZOHcDeorc=\libSkiaSharp.dll
        • Size 8.5MB
        • SHA256 b9880918418e96e979a5cac811700241af4fc24f4861475df0858840eb9ff130
        • MD5 SHA1 SHA512 SSDEEP TLSH