Overview
overview
8Static
static
8AgentSetup...a2.exe
windows10-2004-x64
8AgentSetup...a2.exe
windows11-21h2-x64
8$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-21h2-x64
3$PLUGINSDI...FC.dll
windows10-2004-x64
3$PLUGINSDI...FC.dll
windows11-21h2-x64
3$PLUGINSDI...SC.dll
windows10-2004-x64
3$PLUGINSDI...SC.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows11-21h2-x64
3$PLUGINSDIR/nsSCM.dll
windows10-2004-x64
3$PLUGINSDIR/nsSCM.dll
windows11-21h2-x64
3$PLUGINSDI...ML.dll
windows10-2004-x64
3$PLUGINSDI...ML.dll
windows11-21h2-x64
3AxInterop....ib.dll
windows10-2004-x64
1AxInterop....ib.dll
windows11-21h2-x64
1AxInterop.ViewerX.dll
windows10-2004-x64
1AxInterop.ViewerX.dll
windows11-21h2-x64
1CagService.exe
windows10-2004-x64
1CagService.exe
windows11-21h2-x64
1Common.dll
windows10-2004-x64
1Common.dll
windows11-21h2-x64
1Core.XmlSe...rs.dll
windows10-2004-x64
1Core.XmlSe...rs.dll
windows11-21h2-x64
1Core.dll
windows10-2004-x64
1Core.dll
windows11-21h2-x64
1CsExec.Service.exe
windows10-2004-x64
1CsExec.Service.exe
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
04/05/2026, 18:28
Behavioral task
behavioral1
Sample
AgentSetup_Document1214a2.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
AgentSetup_Document1214a2.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/SimpleFC.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/SimpleFC.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsSCM.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsSCM.dll
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsisXML.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsisXML.dll
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
AxInterop.MSTSCLib.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
AxInterop.MSTSCLib.dll
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
AxInterop.ViewerX.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
AxInterop.ViewerX.dll
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
CagService.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
CagService.exe
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
Common.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
Common.dll
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
Core.XmlSerializers.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
Core.XmlSerializers.dll
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
Core.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
Core.dll
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
CsExec.Service.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
CsExec.Service.exe
Resource
win11-20260130-en
General
- Target CagService.exe
- Size 19KB
- Sample260504-w4psqaex4l
- SHA256 06d34513b05a11e0c7d353035d441d4a28d1682ecb6d3cc43816bd378ab14fe5
- MD5 74cc65ba2ca9a228472ea232ced0d26d
- SHA1 75fa8c8d678e971e40e78dc136fe685bbfa70c4f
- SHA512 a3e2438f2fbf908bb528ccbc634ad96da5acff7c4b961800fc3d103bfd14b0c7c8a6b59227c929fd5386a356bcf748492631939b5e783a96c2ae8de3a131a13d
- SSDEEP 384:RYMQoLIU+94X9nmhJUJkJ7fHUQTJosEyZKm2j:6oLIi8nLUEmsfZKm
- TLSH T16292C701A3E88B2AF6F76F71597206050E72FE5BA871D75C36A4004E1AB3B80CD71776
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\cagerrors.dat
- Size 7KB
- SHA256 39c644863f8cd14f5893495c935798957e557bcdfd48e711ea68af8990410747
- MD5 2ae96aa3bf19ce24b0166140879cefc2
- SHA1 74f1b3b6d3f2587959d24d0f3cb49537a51774d3
- SHA512 04824bb0c7a8cae7960989df83b9b32749d9367d2fdbb2c597647a1fdce2aeb4e81c0f0af08fe02c83017d656f71fb8dbd5575053fa3d6c8415c77af9fbaec79
- SSDEEP 192:E4/M04/Mc4/Mk4/MD4/MF4/Mp4/My4/MX4/MI:EP0PcPkPDPFPpPyPXPI
- TLSH T118F1AF21C1D55BF35A4106E4BE13C8B95DF43A88500E3A1AABFCA55BF7CDCEC65D2284
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\log.txt
- Size 6KB
- SHA256 d8a0693cbbabdd47a8bd88affe55cc67ffd67014fbc722ea59bf52a5a5b6b2fa
- MD5 d02e9fa9c7151c2655555fc3a1e41fcd
- SHA1 8e280012c73fe261722b6824dc569dc67fcabbbf
- SHA512 d223b6c4b201dcfc0592dee05cd8ef1608c6c5d74c5f50891175c600dc7f831d3c54d05a2d02137bd975f66c79c9b56c221bf1ab2215f9e60f5af94cb54edea8
- SSDEEP 96:vbQ+cGoNQ34/cGoNQ3cUSacGoNQ34g/zcGoNQ3GAcGoNQ3EacGoNQ3AucGoNQv:vbQwMs4BMs35Ms//FMsGqMsEcMsAAMI
- TLSH T179D1E030C1D01BF14A424AA8BE1398794DF07A49500F3E15A7FC6967F7C8CED5AB7289
- MD5 SHA1 SHA512 SSDEEP TLSH