44d71f4c058cf8d0e531a1a1d5e9d892bae0784479509be3d921a7c59b85270d | Triage™

Login
Reports

Overview

overview

6

Static

static

3

Tomato-UI ...le.dll

windows11-21h2-x64

6

Tomato-UI ...e3.dll

windows11-21h2-x64

1

Tomato-UI ...64.dll

windows11-21h2-x64

1

Tomato-UI ...64.dll

windows11-21h2-x64

1

Tomato-UI ...z4.dll

windows11-21h2-x64

1

Tomato-UI ...sh.dll

windows11-21h2-x64

1

Tomato-UI ...td.dll

windows11-21h2-x64

1

Tomato-UI ...UI.dll

windows11-21h2-x64

1

Tomato-UI ...PC.dll

windows11-21h2-x64

1

Tomato-UI ...es.dll

windows11-21h2-x64

1

Tomato-UI ...re.dll

windows11-21h2-x64

1

Tomato-UI ...ms.dll

windows11-21h2-x64

1

Tomato-UI ...pf.dll

windows11-21h2-x64

1

Tomato-UI ...on.dll

windows11-21h2-x64

1

Tomato-UI ...es.dll

windows11-21h2-x64

1

Tomato-UI ...eb.dll

windows11-21h2-x64

1

Tomato-UI ...on.dll

windows11-21h2-x64

1

Tomato-UI ...le.dll

windows11-21h2-x64

1

Tomato-UI ...UI.exe

windows11-21h2-x64

6

Tomato-UI ...PI.dll

windows11-21h2-x64

1

Tomato-UI ...er.dll

windows11-21h2-x64

1

Analysis

max time kernel
149s
max time network
154s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/05/2026, 16:16

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Tomato-UI - Copy/Bin/TomatoModule.dll

Resource

win11-20260130-en

windows11-21h2-x64

23 signatures

150 seconds

defense_evasion discovery execution persistence

Behavioral task

behavioral2

Sample

Tomato-UI - Copy/Bin/blake3.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Tomato-UI - Copy/Bin/libcrypto-3-x64.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Tomato-UI - Copy/Bin/libssl-3-x64.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Tomato-UI - Copy/Bin/lz4.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Tomato-UI - Copy/Bin/xxhash.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Tomato-UI - Copy/Bin/zstd.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Tomato-UI - Copy/CuoreUI.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Tomato-UI - Copy/DiscordRPC.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Tomato-UI - Copy/Microsoft.Bcl.AsyncInterfaces.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Tomato-UI - Copy/Microsoft.Web.WebView2.Core.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Tomato-UI - Copy/Microsoft.Web.WebView2.WinForms.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Tomato-UI - Copy/Microsoft.Web.WebView2.Wpf.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Tomato-UI - Copy/Newtonsoft.Json.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Tomato-UI - Copy/System.IO.Pipelines.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Tomato-UI - Copy/System.Text.Encodings.Web.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Tomato-UI - Copy/System.Text.Json.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Tomato-UI - Copy/System.ValueTuple.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Tomato-UI - Copy/Tomato UI.exe

Resource

win11-20260130-en

windows11-21h2-x64

9 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral20

Sample

Tomato-UI - Copy/TomatoAPI.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Tomato-UI - Copy/runtimes/win-x64/native/WebView2Loader.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target
Tomato-UI - Copy/DiscordRPC.dll
Size 90KB
Sample260503-trbdfsds7x
SHA256 44d71f4c058cf8d0e531a1a1d5e9d892bae0784479509be3d921a7c59b85270d
MD5 9f747cc51687d853f92f70a537ff6ca6
SHA1 5efe5fbbe266066572d15a138bbff2bc0c578a46
SHA512 87855c0a47336c9c48c1e5726fa80c631d612c0b024e259376cde324dbb91c15131d7cff60c79f97d7987d234ed5b22ec6f2c4d20d6586b4143c9853cf87511b
SSDEEP 1536:KOBvajHhXD0UroUVBxECc7kGFkgfLM9wUwRDzJO+mHxULSiI:mjBXfroGxECzGbokR4+meI
TLSH
T102933A6597FC4679E2BE2B34E4B052410BFAB989B931D79F4A0810CE1E13BC25D617B3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Tomato-UI - Copy\DiscordRPC.dll",#1
1⤵
PID:1076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1076-0-0x0000018B8F9C0000-0x0000018B8FB5A000-memory.dmp

Download

© 2018-2026

Terms | Privacy