Overview
overview
7Static
static
732-Bit/BTCR_x86.dll
windows10-2004-x64
332-Bit/BTCR_x86.dll
windows10-ltsc_2021-x64
332-Bit/BTCR_x86.dll
windows11-21h2-x64
332-Bit/Blake3.dll
windows10-2004-x64
332-Bit/Blake3.dll
windows10-ltsc_2021-x64
332-Bit/Blake3.dll
windows11-21h2-x64
3BTCR.dll
windows10-2004-x64
1BTCR.dll
windows10-ltsc_2021-x64
1BTCR.dll
windows11-21h2-x64
1Blake3.dll
windows10-2004-x64
1Blake3.dll
windows10-ltsc_2021-x64
1Blake3.dll
windows11-21h2-x64
1TeraCopy P...py.exe
windows10-2004-x64
6TeraCopy P...py.exe
windows10-ltsc_2021-x64
6TeraCopy P...py.exe
windows11-21h2-x64
6General
- Target TeraCopy Pro 3.17 Multilingual_Pass[KakáBadi].rar
- Size 9.5MB
- Sample260503-x89jcsf191
- SHA256 2b8b1c03efe4760f00db809fbc1909db38ce13ea6f08601ed4a31bb57e3f08ed
- MD5 a48a758cdd437969bfa5b2d449e9f8a3
- SHA1 7583b3ab5c0117567720690eccb8621c44f029b2
- SHA512 c8fcc44c6cabc848f024b69af659aeae7e0096eff7bb4925e83fa98e36776abd33796df1e6a3bd8fa070538a5cdd5f97ed60fd7bbd5f94cc651b5e1058c827f7
- SSDEEP 196608:O/RTx+ai2c/3PjG8n3DOQuvdpXos/zdmVWdwsL04fOB5qicaIPKCgmj:O/RTxW/S8Ts1pXpoAw3eOzqicPKC9
- TLSH T1D9A6335A2D0F9AB28B0F88D5E551304A3ADDC34F0FE4A7287A1147CE448E91BDE6D17B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
32-Bit/BTCR_x86.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
32-Bit/BTCR_x86.dll
Resource
win10ltsc2021-20260126-en
Behavioral task
behavioral3
Sample
32-Bit/BTCR_x86.dll
Resource
win11-20260130-en
Behavioral task
behavioral4
Sample
32-Bit/Blake3.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral5
Sample
32-Bit/Blake3.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral6
Sample
32-Bit/Blake3.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
BTCR.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
BTCR.dll
Resource
win10ltsc2021-20260126-en
Behavioral task
behavioral9
Sample
BTCR.dll
Resource
win11-20260130-en
Behavioral task
behavioral10
Sample
Blake3.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral11
Sample
Blake3.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral12
Sample
Blake3.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
TeraCopy Pro 3.17 Multilingual_Pass[KakáBadi]/teracopy.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
TeraCopy Pro 3.17 Multilingual_Pass[KakáBadi]/teracopy.exe
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral15
Sample
TeraCopy Pro 3.17 Multilingual_Pass[KakáBadi]/teracopy.exe
Resource
win11-20260130-en
Malware Config
Targets
-
- Target 32-Bit/BTCR_x86.dll
- Size 41KB
- SHA256 67c9b9fe65a873bd54609d8529715d2ddd45acb36ab7732973c553f5ee140291
- MD5 d176724937394d379320e18eddc4d13c
- SHA1 e6789d0bdb61a24b7eb1f33f198a4d0df8848443
- SHA512 731fc076a88202e7e91e3d42e11b48e5c757bdae73b7afb2e20f30cdafcf437f00b74f930eff4365e08e893c2963b83631bc7e1c05c4fc6b6e2d7f05c2581841
- SSDEEP 768:JZVMUvQf6OyV7MKTQSQjKz/5dYZqPMa1mkA3dnCYZYh9oZ0aWlWyoj:nVMUoiOG7MgQKQXrdCQIoZ0NF
- TLSH T19613F18568D720FCF74513BA4E18CAB90B9AC70E3A8CA60ABFEC612D4597CDC7C5B114
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 32-Bit/Blake3.dll
- Size 88KB
- SHA256 3e8381cba2db07ae9a7d298e9a9e56473fda9060ae531cca3352cd7e7d779506
- MD5 26da963db1601f6518c15f7beaf8cd9f
- SHA1 cf6d24e8f3325c92f2c5979e0efdf9a03208d0b2
- SHA512 1751ba1e10890fd094b2b873d9302aee0b9d49f58718cce6c0f0e5f8ebfc380d126573790a7cbd47836258aa370e9d7ae41402ab0ee98661c8436af5c58395aa
- SSDEEP 1536:ycUgkE9y6/HdkU7Js6r3coLIffypddaPAP9DZOoZNdsWgbdbBwfq5S:y/49yadTVPr3pIffydlZobBwfq5S
- TLSH T19A935B04F5C1D030EAFE19394460DA799B2F7978CA605E9B6B4805BA4F247C3DE34E6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target BTCR.dll
- Size 48KB
- SHA256 5dd7b69808ec6dc2341a9056466e30936ea82d56514d2a5dea3cefb8517e67ab
- MD5 b15ee48317737c1dae6ae7895bdaf131
- SHA1 4a69c9b9115ba161554e3f983951301afa53c2a0
- SHA512 9aff1dcc4a9c45e1731213b978f4d355d592b14f72607bf68382039bd89f3f523d7445a1b73597bb1b4e7c56919fbef7023a35f4b09378a203c81d6cd0d6f519
- SSDEEP 1536:lvB0w58dW1kAzI7woLNtY+H8aJQvvHJQ0e:PpwwINtY+H8aEJ
- TLSH T112230216C024E455C4339D398027E9D25E883BA8EFDCAF54377711DC76865B2A8B3F61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Blake3.dll
- Size 159KB
- SHA256 230bd8803629aabe80bf4b4a109787b330ca1c8200b6a04ccd91d5f480c5446e
- MD5 d463cdfb8a433d9f916cf3bc6fd82109
- SHA1 1ee9185142ff8329eb0ac10535e9b2fb963651fe
- SHA512 cfdf683811b7a288ba659b3424128c26c338f66e1e13f520bbf047b6b2c8ac82e852e2b99be1838e1103e5e07a480ab0a962147f8c965643df9948a2f8d1c2a1
- SSDEEP 1536:gmahBzTzZWMhFAF3Wx7cT3lLNa1iM+3SuxwnXL7pFVlYpDJgYUsW8id09dla1Z/T:q3977C3l5awh3rwb7nVl8CVMA1Avc
- TLSH T14EF34A1CB0A684E9CC236279C5774725EF34766C1354DAEE038A43D6AF673E01E39EA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target TeraCopy Pro 3.17 Multilingual_Pass[KakáBadi]/teracopy.exe
- Size 11.8MB
- SHA256 ac03db52bb68a013d3a8bf4db703ec11976fa1d0aa557eb988e3f926a26656cf
- MD5 d704e453e065a23ed414927d9b203086
- SHA1 352e4b98faebc35f5c8cfeaebb7bcb36d7c7fbfc
- SHA512 0ec2c8cd14a7f4dfd704b19729239ee78e54fc1fb87ba1a2a80da4b7d595fd573861271ca220c3a7b264209ceed1ca96da12d6bdf2b34c35771790cd6337cf49
- SSDEEP 196608:AAKBx4px+sN23RSEfvYfXf1v3j+FX3/yXg3Kf5T72gFUbUamFbSf4k5EBGUQ:AAK/4px/23bfvYvf1bI/8RfVGwdFbSfD
- TLSH T11CC6F131724AC43FDA6255B0192C8E9A512C7E750BB264CBB7CC2E3E5BB45C21736E27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.