Overview
overview
4Static
static
3v2.4.zip
windows10-2004-x64
1v2.4.zip
windows11-21h2-x64
1ALI213.ini
windows10-2004-x64
1ALI213.ini
windows11-21h2-x64
3README.txt
windows10-2004-x64
1README.txt
windows11-21h2-x64
3Serilg.dll
windows10-2004-x64
1Serilg.dll
windows11-21h2-x64
1Setup.exe
windows10-2004-x64
4Setup.exe
windows11-21h2-x64
4SystemEx.dll
windows10-2004-x64
1SystemEx.dll
windows11-21h2-x64
1Updater/Ma...ts.xml
windows10-2004-x64
3Updater/Ma...ts.xml
windows11-21h2-x64
4Updater/Vk...ze.dll
windows10-2004-x64
3Updater/Vk...ze.dll
windows11-21h2-x64
3Updater/Vk...64.dll
windows10-2004-x64
1Updater/Vk...64.dll
windows11-21h2-x64
1Updater/aom.dll
windows10-2004-x64
1Updater/aom.dll
windows11-21h2-x64
1Updater/d3...46.dll
windows10-2004-x64
3Updater/d3...46.dll
windows11-21h2-x64
3Updater/d3...64.dll
windows10-2004-x64
1Updater/d3...64.dll
windows11-21h2-x64
1Updater/updater.log
windows10-2004-x64
1Updater/updater.log
windows11-21h2-x64
3Updater/video.dll
windows10-2004-x64
3Updater/video.dll
windows11-21h2-x64
3Updater/video64.dll
windows10-2004-x64
1Updater/video64.dll
windows11-21h2-x64
1Updater/vstdlib_s.dll
windows10-2004-x64
3Updater/vstdlib_s.dll
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
11/05/2026, 22:24
Static task
static1
Behavioral task
behavioral1
Sample
v2.4.zip
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
v2.4.zip
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
ALI213.ini
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
ALI213.ini
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
README.txt
Resource
win10v2004-20250619-en
Behavioral task
behavioral6
Sample
README.txt
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
Serilg.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
Serilg.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
Setup.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
Setup.exe
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
SystemEx.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
SystemEx.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
Updater/MachineProducts.xml
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
Updater/MachineProducts.xml
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
Updater/VkLayer_steam_fossilize.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
Updater/VkLayer_steam_fossilize.dll
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
Updater/VkLayer_steam_fossilize64.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
Updater/VkLayer_steam_fossilize64.dll
Resource
win11-20250610-en
Behavioral task
behavioral19
Sample
Updater/aom.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
Updater/aom.dll
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
Updater/d3dcompiler_46.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
Updater/d3dcompiler_46.dll
Resource
win11-20250502-en
Behavioral task
behavioral23
Sample
Updater/d3dcompiler_46_64.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
Updater/d3dcompiler_46_64.dll
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
Updater/updater.log
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
Updater/updater.log
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
Updater/video.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
Updater/video.dll
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
Updater/video64.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
Updater/video64.dll
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
Updater/vstdlib_s.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
Updater/vstdlib_s.dll
Resource
win11-20260130-en
General
- Target ALI213.ini
- Size 2KB
- Sample260511-2bmqjsbs4s
- SHA256 bbd3bfc1f61c8eec3bd404478226e9b2e509082f1a68341095a7cab6eb9a9383
- MD5 c2a1e48fc987e950cb2f447027a3af72
- SHA1 b10d6503095805d0a4ff725bd5014ff5c97b49e6
- SHA512 ac79b7d1ca93cd7784288b5d595a356a2192aa761457465fb3fb4b089c70a8c394f26e4c700307a4ec4bcd126a6580fb80ad34e6c6e62cb1c0a58fe288f2e4c2
- TLSH T18051508FF7CE104F2306608B69A70C91B1E3B1482C230996FC6DBB00AE05E1EE44247F
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1383858298-2057492509-1726743289-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1383858298-2057492509-1726743289-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 996 OpenWith.exe