Overview
overview
5Static
static
5Setup.exe
windows10-2004-x64
5Setup.exe
windows10-ltsc_2021-x64
5Setup.exe
windows11-21h2-x64
5dfrqwqxjx.dll
windows10-2004-x64
3dfrqwqxjx.dll
windows10-ltsc_2021-x64
3dfrqwqxjx.dll
windows11-21h2-x64
3libvlc.dll
windows10-2004-x64
3libvlc.dll
windows10-ltsc_2021-x64
3libvlc.dll
windows11-21h2-x64
3libvlccore.dll
windows10-2004-x64
5libvlccore.dll
windows10-ltsc_2021-x64
5libvlccore.dll
windows11-21h2-x64
5vcruntime140.dll
windows10-2004-x64
3vcruntime140.dll
windows10-ltsc_2021-x64
3vcruntime140.dll
windows11-21h2-x64
3General
- Target Main Setup.zip
- Size 36.7MB
- Sample260511-vpp99say4m
- SHA256 0a9228a6220d19642e38d82923ac3cc03954a68852e82225e69d251e580ee944
- MD5 2425035740a5a291202d77f43d0d16c8
- SHA1 71fe24bfdd9c8d888926ad0bbde5eb832ace9e9c
- SHA512 ef9558eace04bc311043106da72c06bc4200a00c07936dddb4581089fe0a97ddf4373ebc7c47bb33adfe53f1fed2ba37a1b3c2c77b181e1a3d5fcc934576173a
- SSDEEP 786432:feEH5yF9fa1yS8jUMgW5mvUgbs9cz4YxHftFtC817YlQhS:f5ca165mvvs9czN5tm8h+QhS
- TLSH T100873385EA8B55F1ED0748708157F77F4B31EE01D960CDB6EA28F989ED33B62100E629
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20250619-es
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10ltsc2021-20260130-es
Behavioral task
behavioral3
Sample
Setup.exe
Resource
win11-20260130-es
Behavioral task
behavioral4
Sample
dfrqwqxjx.dll
Resource
win10v2004-20260130-es
Behavioral task
behavioral5
Sample
dfrqwqxjx.dll
Resource
win10ltsc2021-20260130-es
Behavioral task
behavioral6
Sample
dfrqwqxjx.dll
Resource
win11-20260130-es
Behavioral task
behavioral7
Sample
libvlc.dll
Resource
win10v2004-20260130-es
Behavioral task
behavioral8
Sample
libvlc.dll
Resource
win10ltsc2021-20260130-es
Behavioral task
behavioral9
Sample
libvlc.dll
Resource
win11-20260130-es
Behavioral task
behavioral10
Sample
libvlccore.dll
Resource
win10v2004-20250619-es
Behavioral task
behavioral11
Sample
libvlccore.dll
Resource
win10ltsc2021-20260126-es
Behavioral task
behavioral12
Sample
libvlccore.dll
Resource
win11-20250610-es
Behavioral task
behavioral13
Sample
vcruntime140.dll
Resource
win10v2004-20260130-es
Behavioral task
behavioral14
Sample
vcruntime140.dll
Resource
win10ltsc2021-20260130-es
Behavioral task
behavioral15
Sample
vcruntime140.dll
Resource
win11-20260130-es
Malware Config
Targets
-
- Target Setup.exe
- Size 1009KB
- SHA256 a0706de5c6c1b2845c0730135628e05bfcf536fea5f7c64d3681ce289cfa410f
- MD5 d697bdacaffcb2a4a7414869a99bd7fd
- SHA1 df10ae3b2808f790e9ec9603023cb36865f43053
- SHA512 77bcb0a797bda7978ab88461580dbe479557ff4a0423c5db1c0620e24843529e4a01b25dffecae1a02271b882b7c24cfdd33c5739946afbaffba8737a06e1bc3
- SSDEEP 24576:WPbKyf/5gTIyWbUjJrNfZz9SOPkV2eUmeOKxOM4HGodidl:Wr/5gJIEOM4HO
- TLSH T16C255B6AF64384F1ED1705F1090BFBBB95349B198020CC6FE6CCDE94FBB2D522569226
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target dfrqwqxjx.zip
- Size 2.8MB
- SHA256 1e663406ce56626f169de287f8747cc05813a7c986707ed3b251e017f4ad2c49
- MD5 7530d6b3719795b13cbc45a3f5850f31
- SHA1 4715d1086282ac182e641c701d09df9839fbba5b
- SHA512 11347eb87f5d526b757ec591f957d9c4f209909aa8533343cca7c3da52341cf6b32c1705752b514aa2d20fae4a36cce4ec6b416a95e082dec6439a6214615741
- SSDEEP 49152:SosEjnDJJQ28mX6NZEKrYsu58cq2sXdf0HedWRBAUZLYasUpGaXBuQQ9ur:p9jDQ28mqNSKl0HedWRBAUZLX9
- TLSH T16AD57C45EA8B55F1ED174C708157F77F4B31EE02D920CEB2EE68B989ED33A62100D629
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target libvlc.dll
- Size 179KB
- SHA256 a27fcf98acdaa19cc3363846b6d66a3183fcf1cae778aca1dcc10552f738afb7
- MD5 06f7b41d5cb75a23b74b1783d91953dd
- SHA1 607223e27545d58a6f6554979816d300b9ccdf88
- SHA512 840a01fca1c5ace25d134027cbffc7b67ef29c9195b79f0c1587c4345deeabfb721b08df351c5ca37ce0bb0d46d6667726747a0eb92b1576063fedee52eb10ec
- SSDEEP 3072:rnsSO3fxJT5Xg4sgIxhpcRu9+FmTJA1UMBHx7/JSAyAChd9s6dLEs6d8:jsSO3fxJT5aFpcY++JA1U8HxtSAyrVd1
- TLSH T165045A85EA8794F1ED9709B09293FB7F8A329601CB34DEF1DF18F85CDA63A42244951C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target libvlccore.dll
- Size 38.2MB
- SHA256 4b66745f3fc4e118ae198f6b0152915a72be9c9d9b5a75bf8a2779d041574ff1
- MD5 6aa5b732e60536c82ca60bfc6ccc4014
- SHA1 e64958222a175ea853ea2ddb7db0ff5f2d05e192
- SHA512 0c809c8a8ea3d0fd6484cce4af893bff3c9ca7ef253750c8a6d592990ebe706f790f5311a6765a19b9b02e86465a7ee246a1c2c2830aa327fa0a2f24bbce688d
- SSDEEP 786432:h4l2/eoo0R71ltLE3OW2/u717AEY+7JGjIy0Ua6zQRin8GOE6:h4lt6jE3Uu717fYEGd3aZRg87H
- TLSH T18797121633518131D8AF49FB64A9956B4538BF070131CA4FF35CFE98DB31B01AA97A3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target vcruntime140.dll
- Size 81KB
- SHA256 6823b98c3e922490a2f97f54862d32193900077e49f0360522b19e06e6da24b4
- MD5 a2523ea6950e248cbdf18c9ea1a844f6
- SHA1 549c8c2a96605f90d79a872be73efb5d40965444
- SHA512 2141c041b6bdbee9ec10088b9d47df02bf72143eb3619e8652296d617efd77697f4dc8727d11998695768843b4e94a47b1aed2c6fb9f097ffc8a42ca7aaaf66a
- SSDEEP 1536:tBYGvQ2+Ub54AE6ZkJrIriwx0AKGsu0g1kq1ecbRMKlB66M5iEBiA:tB7vQ2+a54AE0sAKxQ1ecbRMKlQoE0A
- TLSH T17E836C11B4A84072D176597452AAEAB3B63DAA508FC54FCF6FED4CDC0AB82C17336217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10