54680d0325b38fb057f82984b320bc9666f3b3073c3db0a9629a841d608c8751 | Triage™

Login
Reports

Overview

overview

4

Static

static

3

v2.4.zip

windows10-2004-x64

1

v2.4.zip

windows11-21h2-x64

1

ALI213.ini

windows10-2004-x64

1

ALI213.ini

windows11-21h2-x64

3

README.txt

windows10-2004-x64

1

README.txt

windows11-21h2-x64

3

Serilg.dll

windows10-2004-x64

1

Serilg.dll

windows11-21h2-x64

1

Setup.exe

windows10-2004-x64

4

Setup.exe

windows11-21h2-x64

4

SystemEx.dll

windows10-2004-x64

1

SystemEx.dll

windows11-21h2-x64

1

Updater/Ma...ts.xml

windows10-2004-x64

3

Updater/Ma...ts.xml

windows11-21h2-x64

4

Updater/Vk...ze.dll

windows10-2004-x64

3

Updater/Vk...ze.dll

windows11-21h2-x64

3

Updater/Vk...64.dll

windows10-2004-x64

1

Updater/Vk...64.dll

windows11-21h2-x64

1

Updater/aom.dll

windows10-2004-x64

1

Updater/aom.dll

windows11-21h2-x64

1

Updater/d3...46.dll

windows10-2004-x64

3

Updater/d3...46.dll

windows11-21h2-x64

3

Updater/d3...64.dll

windows10-2004-x64

1

Updater/d3...64.dll

windows11-21h2-x64

1

Updater/updater.log

windows10-2004-x64

1

Updater/updater.log

windows11-21h2-x64

3

Updater/video.dll

windows10-2004-x64

3

Updater/video.dll

windows11-21h2-x64

3

Updater/video64.dll

windows10-2004-x64

1

Updater/video64.dll

windows11-21h2-x64

1

Updater/vstdlib_s.dll

windows10-2004-x64

3

Updater/vstdlib_s.dll

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
v2.4.zip
Size 22.0MB
Sample260511-2bmqjsbs4s
SHA256 54680d0325b38fb057f82984b320bc9666f3b3073c3db0a9629a841d608c8751
MD5 b7d02c3d42012ecc928c45bc92fd225d
SHA1 ff6bf5d253c7254305a0d7d4b8129227fa64c3cf
SHA512 7073318ba137a4ab2b7c9eee3b42143de381aaabc2fa24be7d5c573631381470c9cbdd5ef74445c5d5e1ad41a102ab50a16204542206b26eece410a721748235
SSDEEP 393216:IJpGCnPf326C5/prYS5kBU66lHF2WI04pZ1OQWAybM74+nAsmhhmMVbDGCcy:IJpGCnPfIcktiWI/srAUM74+Qv
TLSH
T10137337A545CAD24CFC94BF83C75BADA5B7726CB78E493A782840009871B4D24ABD4FC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

adware discovery ransomware spyware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

v2.4.zip

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

v2.4.zip

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

ALI213.ini

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

ALI213.ini

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

README.txt

Resource

win10v2004-20250619-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

README.txt

Resource

win11-20260130-en

windows11-21h2-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

Serilg.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Serilg.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Setup.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

Setup.exe

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

SystemEx.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

SystemEx.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Updater/MachineProducts.xml

Resource

win10v2004-20260130-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral14

Sample

Updater/MachineProducts.xml

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral15

Sample

Updater/VkLayer_steam_fossilize.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

Updater/VkLayer_steam_fossilize.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

Updater/VkLayer_steam_fossilize64.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Updater/VkLayer_steam_fossilize64.dll

Resource

win11-20250610-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Updater/aom.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Updater/aom.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Updater/d3dcompiler_46.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

Updater/d3dcompiler_46.dll

Resource

win11-20250502-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

Updater/d3dcompiler_46_64.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Updater/d3dcompiler_46_64.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Updater/updater.log

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

Updater/updater.log

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

Updater/video.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

Updater/video.dll

Resource

win11-20260130-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

Updater/video64.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Updater/video64.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Updater/vstdlib_s.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

Updater/vstdlib_s.dll

Resource

win11-20260130-en

windows11-21h2-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  v2.4.zip
- Size 22.0MB
- SHA256 54680d0325b38fb057f82984b320bc9666f3b3073c3db0a9629a841d608c8751
- MD5 b7d02c3d42012ecc928c45bc92fd225d
- SHA1 ff6bf5d253c7254305a0d7d4b8129227fa64c3cf
- SHA512 7073318ba137a4ab2b7c9eee3b42143de381aaabc2fa24be7d5c573631381470c9cbdd5ef74445c5d5e1ad41a102ab50a16204542206b26eece410a721748235
- SSDEEP 393216:IJpGCnPf326C5/prYS5kBU66lHF2WI04pZ1OQWAybM74+nAsmhhmMVbDGCcy:IJpGCnPfIcktiWI/srAUM74+Qv
- TLSH
  T10137337A545CAD24CFC94BF83C75BADA5B7726CB78E493A782840009871B4D24ABD4FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  ALI213.ini
- Size 2KB
- SHA256 bbd3bfc1f61c8eec3bd404478226e9b2e509082f1a68341095a7cab6eb9a9383
- MD5 c2a1e48fc987e950cb2f447027a3af72
- SHA1 b10d6503095805d0a4ff725bd5014ff5c97b49e6
- SHA512 ac79b7d1ca93cd7784288b5d595a356a2192aa761457465fb3fb4b089c70a8c394f26e4c700307a4ec4bcd126a6580fb80ad34e6c6e62cb1c0a58fe288f2e4c2
- TLSH
  T18051508FF7CE104F2306608B69A70C91B1E3B1482C230996FC6DBB00AE05E1EE44247F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

ransomware
behavioral3 behavioral4
- Target
  README.txt
- Size 15B
- SHA256 91ea3561d4416cbdfea35e91755b56a4b765cf7295ac9507222c95afd230d0b1
- MD5 00d11091b318ee6c2554cf005ede7e69
- SHA1 161d49490cfe9b8afa7c1be8ab92b09a16fe7dab
- SHA512 e0230eaa7a7a74888c3a6a10dbc713140499f51193581d271470e73a74a3729ee739a4172b4d957c15095a8cedf2d51bc7a685121c7a5ffb93d261d06072206d
- MD5 SHA1 SHA512
Score

3^/10

ransomware
behavioral5 behavioral6
- Target
  Serilg.dll
- Size 125KB
- SHA256 db0a4c4a21a1ba0937d1c22095c2b0702422efd4c7a41aaa577608288a2e69fc
- MD5 181f3e3d0c509566283156816eb317ca
- SHA1 400debdd4fb9ae24719157132a87c4bfeff7fa6c
- SHA512 039d5a0013d6f0e916a86baa95452d79d4524f5c83b913170daa73e1333b2d424c0d9a74193e71ede3a0866b778781c57993806baa08833d11df825626e6d667
- SSDEEP 3072:6obKO7RaoWuUeZk/f0Sh1HlWZm1ZZTdyGFkNUMT+P65jDt:bbKKz1UeZk/Phv8lDuPa
- TLSH
  T18EC34C2863FC9EA1CBEE75B5A0B081810B74FC9F6077EF8E695C25F91D123094A60B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Setup.exe
- Size 7.2MB
- SHA256 a9df8dd4504a5c6cb743170a19ee289755fa5d443d39c8b16339f17036548dfb
- MD5 90cdfbb92359f82f8d730eb0929be068
- SHA1 b3da3d9d31397b5d591cd93fb274894856654ff3
- SHA512 b3ce50d4fff5592747c01fea3c41a7d735e3e465ae6f22664193ca23b11bc3a0ac43b61d0cc069bc70b94995993dee535fb012b4523697e342c0cdf0bc337c32
- SSDEEP 196608:7creTsywo2UqQmf6bPoR7zSPjpzWklKMNH1QfV:4sbqPCbARfGRof
- TLSH
  T1DC762344B5CDD6F4C48B9BA02B0151CE74CE754B89FD1A693ECB8C22AAB0D7D447D3A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10
behavioral10 behavioral9
- Target
  SystemEx.dll
- Size 23KB
- SHA256 a78c4d08c6726e1e560c3a47436c631847423cab95032d02ccd4e10f92e6d937
- MD5 fba0fc7ec66d149d2096ab7032f751c5
- SHA1 e2d9f46a045235548ae4d648de1d317b71531b5a
- SHA512 124966ca2827b1d11d8e49dada8e5a708047e6819fac6031d5f83150dcbad0b2935bb630304e4589845b22ce22665796c9987bd343668345875143b44f80d342
- SSDEEP 384:TZucmhNHUrP0p/gN9ro7zjLIYiVTAM+o/8E9VF0NyJWQI:8LN0IgLE7X0YipAMxkELI
- TLSH
  T117B26E0A9F489803CA5F5A7070D5532AC230F69A6BC2D7E7369CC1359F4338639E63E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Updater/MachineProducts.xml
- Size 373B
- SHA256 27bf875e572455aaade46c5bc19ca253bd651efd7bcb4a48a0054d2ea6a55def
- MD5 c09cc520f19df1bb59ac85ee57cd24ea
- SHA1 fd5f46677bf1786a54f153201581728e96957609
- SHA512 249380175ccad2ec4e76cc7f3b11acfaf48f170f40ea0cba900d6efc430d69da4fb203b89e1bdddcf58fb5ec4233915621054d63b6af246541683dbb7ef69bd6
- TLSH
  T1BBE068CCE830E3B316A24AD88893A5D1AF7AD01000A07200C0E82B5A6792059063B2CE
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  Updater/VkLayer_steam_fossilize.dll
- Size 505KB
- SHA256 a228900b0ad8d1d33b0346dcac58fc742ee9316fc4e05912a4aee3db6fa8f592
- MD5 0d4129135587858163a93b60c1a5e15a
- SHA1 d1997d721ba30846c6d803e0118d2c7fd52946ec
- SHA512 4e1c5af6f01676935c86f646049dd509ce53a1c90b5525b5d799be709d5d9d79288d16ef22d11a120c45308283c3e5b2719196389b95b4af486fe1bef6cff121
- SSDEEP 12288:AYFDxvgKTRhifRx/0rfcYun7ibcV/SfP+T6qkTLQ8BV4u3U:jFDxIBxsrfc9ucV/Sf2T6qkTLdV4F
- TLSH
  T1BAB49E32F040C171D19E02B1297AAB712B7EA670077828CB778459FDA9B19D39B35B4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  Updater/VkLayer_steam_fossilize64.dll
- Size 609KB
- SHA256 e00b5c1f75113a3dc6d559e6efe67c53406044c68d62858f38bf916e3b4e3874
- MD5 dc12c14ae5bcc3f609bea6b09c6106f2
- SHA1 9d67821cad686b28a558b85fc8b28728ca945ce5
- SHA512 27b20e0297c23fe26562213ad931eca8946956258b07e26e0817bc1c6880443008f2855724fea80b632b4820f0e70f41590232420d331c054646298e792a856b
- SSDEEP 6144:jGd+6tNoUbf7Vlgtw6n+HqXMcQLdpZDknxSxRPqy/U9aQ7o0ciQuOd0VvQ8STBWJ:qX8Ubf7Po+H2nIHvU3hciVOWZQdBgzNx
- TLSH
  T150D47D2A729441F8E47681748A578557E7B3B8060360AACF13F097AA2F37BE0177FB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Updater/aom.dll
- Size 9.2MB
- SHA256 78f66ef0fcba2aca68e50edcbff3c50491fbc174e8ecce2a52132d945f4dd200
- MD5 5fffa7be56cf1df4360e254eef45a876
- SHA1 5c47ace003215969517c5678862f5e12c710bfd3
- SHA512 492552581bd834eaa7ee1f9a61a16f290d90bc3fa9fc0e3e167526d88df1184d4a7defa7a5e68c80bde57f00db358641030c2570fe20389dba4df1dd6c65bfde
- SSDEEP 196608:jzFN53SqsP4GXsr+jxmvYU8KVZIQMp45R0zic3XZrifZednDRhXAGmtfij4yl+Bf:jPaPNXsr+jxmvYU8KVZIQMp45R0zic3U
- TLSH
  T116A68D85E3A202F8D53BCD78867F6646A628305E832153FF26E845352B72BD55B3EF01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Updater/d3dcompiler_46.dll
- Size 3.1MB
- SHA256 996e5b57c06b5614ee7b26936b29bace62218fb3cad3a28dba9e72bcc66d2698
- MD5 c18caa9ba4f06a5d226a892df6dc1d72
- SHA1 ed5d55e13cbe6912f3230ad1914777023bc7e188
- SHA512 5e2ff504b285c7d48ac97f997a49ee668f407317fdc4d8b73587414e5830a43146c965b2c7d452422576530ac925293f5bdfafd9bfc507ce1a1a4ba824e915bf
- SSDEEP 49152:SAKNP99RYiigTKsuI12CzOtXPINjoTl7et+vXLHEpAO:SmgH/1BaFPINjoTl78+vL0AO
- TLSH
  T1E5E59F25FB01D077D8CA01B066AEBBA6643C9F30033455C7A2446DA9ED706E36F3EB56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  Updater/d3dcompiler_46_64.dll
- Size 3.7MB
- SHA256 9614de7bac24091e2abaf70b3c852ddf9b92a48157c557c3c63d81d88d4d5ceb
- MD5 52a41f0e49b2208df75609699fc7254c
- SHA1 767a92ffbfd726ab4d09c17981caf448c6adedbf
- SHA512 5b8ce62d69b9057e11091b48170dd805a913b87b25fc4fc343f9002e88c2331e040621c490e09f1eb9e1db61b08c3ee99c8598f78e033775a3e94b2d431505f7
- SSDEEP 49152:yBz3aHgfo/CoXC3SO06vwD/Sv/i9xq2nh2I+ZLm2n0vgF0S2yptTn4:sYXicQiW2pmm02yptT4
- TLSH
  T1B6067D46B7A540F9C1BBC138C6979717EBB0781423249BDB01909665AF73FE22E3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Updater/updater.log
- Size 3B
- SHA256 f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5
- MD5 ecaa88f7fa0bf610a5a26cf545dcd3aa
- SHA1 57218c316b6921e2cd61027a2387edc31a2d9471
- SHA512 37c783b80b1d458b89e712c2dfe2777050eff0aefc9f6d8beedee77807d9aeb2e27d14815cf4f0229b1d36c186bb5f2b5ef55e632b108cc41e9fb964c39b42a5
- MD5 SHA1 SHA512
Score

3^/10

ransomware
behavioral25 behavioral26
- Target
  Updater/video.dll
- Size 4.1MB
- SHA256 1cfe47867149391ed250e02eb063dd96070af250e03a97a3241e7caef094f9ac
- MD5 cdb36c63e350c4ddf6d0f50687b2b918
- SHA1 1d3402c51600b997956ff276a97b010b3cba0251
- SHA512 40607e5313fdf8172819f36127a0ba146b3ad8bf35d5f0341653ca67f81c604f4726680123b1ba231c87ce140af10b3e0f064a996a36fd04f5059f8eb12e0091
- SSDEEP 98304:eVfiokBrn74HHVvP+6vH+GV0PEqLGToPWKRN:w6N7ebW08XGeWWN
- TLSH
  T1F916BF12FA42C072E4DE01B564BE9BBA587DAA244338C4D39BD42D69DD304D27B3F396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  Updater/video64.dll
- Size 5.1MB
- SHA256 1e80a2eb972f7a28e3dd6258c3c52001a661b8aacabf113aaf277bc13aedf0e1
- MD5 5da56610b1221a2edbd1cbbf9619c3bc
- SHA1 543c93339b0ded6cfe308c66c83247cba3769f51
- SHA512 82bc42b4126775e7855905537697fefd40d3ae39a2923e8d82bfeaa630a2a6c216faef6bb466a49b7780d459f879f5cee33370fa2280c5619cdfc2f97027075e
- SSDEEP 98304:brii+9aqhyTimdDE+cNgaTokqTP6TQiZym6dG:NGNhGi+D5GgaTokqTP6ciMmCG
- TLSH
  T186369E56B6A440A9D4BBC178CA478627E7F2B41513719BDF02A0877A1F23BE12F3E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Updater/vstdlib_s.dll
- Size 588KB
- SHA256 f01193410f074ca67220d670d652d3e5c1285d0139c7329a9994dbd5aad8309e
- MD5 b0cecf8b24ab2bd713e0b295acd431da
- SHA1 25bcf188788bf23576e6847ac2555b5571edf9af
- SHA512 99895b87bc3d023bd16989d263aa8b579e6a899b1ad04300359b7c2257fe4aa51f2291cf0a8896ed9f5765e025e1a25aea98dd0e0d9027fb778940c7c84e703f
- SSDEEP 6144:TT72F+C9tWpxlnoNE/xQa6IvWKvoUSx4Yh0DmQ5cR3JkaAO2AvOVzr0A:mLYxloS/gIvWJTDLrfYr0A
- TLSH
  T159D4BE07FEA3C072E5B1543448FCFBA5097CAE2407A1D9F7ABC83966AE305C25935726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

adwarediscoveryspyware

behavioral14

adwarediscoveryspyware

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy