Overview
overview
8Static
static
8AgentSetup...a2.exe
windows10-2004-x64
8AgentSetup...a2.exe
windows11-21h2-x64
8$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-21h2-x64
3$PLUGINSDI...FC.dll
windows10-2004-x64
3$PLUGINSDI...FC.dll
windows11-21h2-x64
3$PLUGINSDI...SC.dll
windows10-2004-x64
3$PLUGINSDI...SC.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows11-21h2-x64
3$PLUGINSDIR/nsSCM.dll
windows10-2004-x64
3$PLUGINSDIR/nsSCM.dll
windows11-21h2-x64
3$PLUGINSDI...ML.dll
windows10-2004-x64
3$PLUGINSDI...ML.dll
windows11-21h2-x64
3AxInterop....ib.dll
windows10-2004-x64
1AxInterop....ib.dll
windows11-21h2-x64
1AxInterop.ViewerX.dll
windows10-2004-x64
1AxInterop.ViewerX.dll
windows11-21h2-x64
1CagService.exe
windows10-2004-x64
1CagService.exe
windows11-21h2-x64
1Common.dll
windows10-2004-x64
1Common.dll
windows11-21h2-x64
1Core.XmlSe...rs.dll
windows10-2004-x64
1Core.XmlSe...rs.dll
windows11-21h2-x64
1Core.dll
windows10-2004-x64
1Core.dll
windows11-21h2-x64
1CsExec.Service.exe
windows10-2004-x64
1CsExec.Service.exe
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
04/05/2026, 18:28
Behavioral task
behavioral1
Sample
AgentSetup_Document1214a2.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
AgentSetup_Document1214a2.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/SimpleFC.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/SimpleFC.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/SimpleSC.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsSCM.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsSCM.dll
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsisXML.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsisXML.dll
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
AxInterop.MSTSCLib.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
AxInterop.MSTSCLib.dll
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
AxInterop.ViewerX.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
AxInterop.ViewerX.dll
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
CagService.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
CagService.exe
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
Common.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
Common.dll
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
Core.XmlSerializers.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
Core.XmlSerializers.dll
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
Core.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
Core.dll
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
CsExec.Service.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
CsExec.Service.exe
Resource
win11-20260130-en
General
- Target CagService.exe
- Size 19KB
- Sample260504-w4psqaex4l
- SHA256 06d34513b05a11e0c7d353035d441d4a28d1682ecb6d3cc43816bd378ab14fe5
- MD5 74cc65ba2ca9a228472ea232ced0d26d
- SHA1 75fa8c8d678e971e40e78dc136fe685bbfa70c4f
- SHA512 a3e2438f2fbf908bb528ccbc634ad96da5acff7c4b961800fc3d103bfd14b0c7c8a6b59227c929fd5386a356bcf748492631939b5e783a96c2ae8de3a131a13d
- SSDEEP 384:RYMQoLIU+94X9nmhJUJkJ7fHUQTJosEyZKm2j:6oLIi8nLUEmsfZKm
- TLSH T16292C701A3E88B2AF6F76F71597206050E72FE5BA871D75C36A4004E1AB3B80CD71776
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\cagerrors.dat
- Size 7KB
- SHA256 dd1e2282beb4278c5444f0a2d06c52a7cf82771f746aca4d49ee52147b392990
- MD5 f0ee02185c11b40d9c5b44566f1dc7f0
- SHA1 f9e41d68826e4d00e20191993351d1c770c11fd3
- SHA512 c93ab842af45b106a617f0462e2b66586b5e7045bccbd96b38f53ed202c22fa134a5839782b1ec0f31db538dd033789dcfc58d16c7c4a03515bc7905fd6b51b5
- SSDEEP 192:54/Mq4/M64/Mk4/M04/M54/MD4/M54/MR4/MI:5PqP6PkP0P5PDP5PRPI
- TLSH T18DF1AF61C2D55BF31A4106E47E13C8B95EF03688500E3A1AABFCA55BF7CDCEC65D2284
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\log.txt
- Size 6KB
- SHA256 4d54cdca5c376cb1ae507841c206c9f85bff9c36942e30eed9744a500215641a
- MD5 21e5fe8f69f2b2b5450540ae53a090fd
- SHA1 63bb7a1d494179e48cbcd298ca174bea01fab6df
- SHA512 4783e4fd957ae4ea7ded4222fcc4b4375244d60d34eaa464b66bf5de1213e44dfb898847fbc3963edda309bcc8d7ef870fe846535dc6bb5ce157fc6af53cdee0
- SSDEEP 96:v0QTcGoNQ3xBcGoNQ3CU9cGoNQ33/bcGoNQ3bvcGoNQ3eheBcGoNQ36gcGoNQv:v0QlMsxjMs1/Ms3/dMsbRMsMkMs6KMI
- TLSH T194D1F030C1E45BF249420AE8BE1384794DF07A49900F3E15A7FC6967F7C8CED5AB6289
- MD5 SHA1 SHA512 SSDEEP TLSH