Overview
overview
4Static
static
3vortex-set....2.exe
windows10-2004-x64
4vortex-set....2.exe
windows11-21h2-x64
4$PLUGINSDI...ol.dll
windows10-2004-x64
3$PLUGINSDI...ol.dll
windows11-21h2-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows11-21h2-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-21h2-x64
3$PLUGINSDIR/app-64.7z
windows10-2004-x64
1$PLUGINSDIR/app-64.7z
windows11-21h2-x64
1resources/...til.js
windows10-2004-x64
3resources/...til.js
windows11-21h2-x64
3resources/...dex.js
windows10-2004-x64
3resources/...dex.js
windows11-21h2-x64
3resources/...cjs.js
windows10-2004-x64
3resources/...cjs.js
windows11-21h2-x64
3resources/...dex.js
windows10-2004-x64
3resources/...dex.js
windows11-21h2-x64
3resources/...dex.js
windows10-2004-x64
3resources/...dex.js
windows11-21h2-x64
3resources/...cjs.js
windows10-2004-x64
3resources/...cjs.js
windows11-21h2-x64
3resources/...dex.js
windows10-2004-x64
3resources/...dex.js
windows11-21h2-x64
3resources/...dex.js
windows10-2004-x64
3resources/...dex.js
windows11-21h2-x64
3resources/...dex.js
windows10-2004-x64
3resources/...dex.js
windows11-21h2-x64
3General
- Target vortex-setup-2.0.2.exe
- Size 346.3MB
- Sample260523-wvx3qsbt8w
- SHA256 f5f36dd3bcf26b0e966523bbc2edc412d55f43efcb93f01c6865c70fe19879eb
- MD5 0cbb3a97c94cd60764573b1f34783187
- SHA1 d3bbcc60b19de8a2b6f3f47f221420bd60e7b94a
- SHA512 3a9cef9455155fc8e746c62fef00182a7985f2c8dac21e3763579892fdba2f52b014ef6fdc52decea344536e7696e835a9ffd475b8524cbf764e3725cbb9ad76
- SSDEEP 6291456:flKkwXTeaVKoEit++h+SMCG/9x8r/+T4ISb5bjznuuRbEdsolB+54o+WwJE6pJ3I:fiXqaUVit++h+SMn9qyURFHtOzz+54on
- TLSH T18E09330B408CC066DFAA057AD145661C4EAFFE2692E80F6FD4DCC9F513639C31ABA9D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
vortex-setup-2.0.2.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
vortex-setup-2.0.2.exe
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/UAC.dll
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/app-64.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/app-64.7z
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
resources/app.asar.unpacked/bundledPlugins/game-bladeandsorcery/util.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
resources/app.asar.unpacked/bundledPlugins/game-bladeandsorcery/util.js
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
resources/app.asar.unpacked/bundledPlugins/game-bloodstainedritualofthenight/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
resources/app.asar.unpacked/bundledPlugins/game-bloodstainedritualofthenight/index.js
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
resources/app.asar.unpacked/bundledPlugins/game-bloodstainedritualofthenight/index.cjs.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
resources/app.asar.unpacked/bundledPlugins/game-bloodstainedritualofthenight/index.cjs.js
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
resources/app.asar.unpacked/bundledPlugins/game-breakingwheel/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
resources/app.asar.unpacked/bundledPlugins/game-breakingwheel/index.js
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
resources/app.asar.unpacked/bundledPlugins/game-codevein/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
resources/app.asar.unpacked/bundledPlugins/game-codevein/index.js
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
resources/app.asar.unpacked/bundledPlugins/game-codevein/index.cjs.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
resources/app.asar.unpacked/bundledPlugins/game-codevein/index.cjs.js
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
resources/app.asar.unpacked/bundledPlugins/game-conanexiles/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
resources/app.asar.unpacked/bundledPlugins/game-conanexiles/index.js
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
resources/app.asar.unpacked/bundledPlugins/game-cyberpunk2077/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
resources/app.asar.unpacked/bundledPlugins/game-cyberpunk2077/index.js
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
resources/app.asar.unpacked/bundledPlugins/game-daggerfallunity/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
resources/app.asar.unpacked/bundledPlugins/game-daggerfallunity/index.js
Resource
win11-20260513-en
Malware Config
Targets
-
- Target vortex-setup-2.0.2.exe
- Size 346.3MB
- SHA256 f5f36dd3bcf26b0e966523bbc2edc412d55f43efcb93f01c6865c70fe19879eb
- MD5 0cbb3a97c94cd60764573b1f34783187
- SHA1 d3bbcc60b19de8a2b6f3f47f221420bd60e7b94a
- SHA512 3a9cef9455155fc8e746c62fef00182a7985f2c8dac21e3763579892fdba2f52b014ef6fdc52decea344536e7696e835a9ffd475b8524cbf764e3725cbb9ad76
- SSDEEP 6291456:flKkwXTeaVKoEit++h+SMCG/9x8r/+T4ISb5bjznuuRbEdsolB+54o+WwJE6pJ3I:fiXqaUVit++h+SMn9qyURFHtOzz+54on
- TLSH T18E09330B408CC066DFAA057AD145661C4EAFFE2692E80F6FD4DCC9F513639C31ABA9D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target $PLUGINSDIR/AccessControl.dll
- Size 15KB
- SHA256 5fd5d8aec97cffaad9b7df6371b348d436cf1401e86fab614dc4cb8575428e52
- MD5 d74bb4447af48da081c7d9b499f3a023
- SHA1 dadf6e140e6fd8e49a1851cc144bb022e0adb185
- SHA512 9a15de5c6b08914f5e5bbc1c318fb0e84da28a316cf51ccddca8dfb64cd67b7ad06acac307b41d5086a0740055d327007ff890807d6853bb2e767179a3b3d758
- SSDEEP 192:0hdGZ2E0hm+Gc7ROMzCPvXWROt086dXHGrEKcDDi0b5ZsgMgiCXyo1Fp01eLLuIt:0hdGZ2E0YWV2908oj21ILud8
- TLSH T1B362A6124FF90BFEF1F16B352AB5553303A2B50124B1C21D5B91CE9A2831B9B5D74327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app-64.7z
- Size 263.6MB
- SHA256 b41d749fa48fc88b1613a895e04b8b909a0de3e9ebcca42db8d647f2007993d1
- MD5 c27ce5f28b3396b2ea584d2ef133db3c
- SHA1 1e4d0d58f57b56a2e127aaccf473ab3dc7f9592f
- SHA512 c53be9840f4154516194a4987d007edc07b2d909d75d68de8549e996ae1db4249c3a4bdffe4cf39e69db3ddf61b35e701dc5d0bd6c0583491f8693e97df822ef
- SSDEEP 6291456:2lKkwXTeaVKoEit++h+SMCG/9x8r/+T4ISb5bjznuuRbEdsolB+H:2iXqaUVit++h+SMn9qyURFHtOzz+H
- TLSH T14BD8330B4089D097EFAB083AE205563C5E6EFD2667CC0F5F80EC95F62373A9615B61E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target resources/app.asar.unpacked/bundledPlugins/game-bladeandsorcery/util.js
- Size 8KB
- SHA256 6a3dcae6883b7ae9039e984712c3903df932377c8ca449dd77e02708ca7a6604
- MD5 49db8c55fbf78bb3d119d922ec6ad593
- SHA1 3e815cadccd651cc8ee4fa59c3ad050679d58cdb
- SHA512 d4973f3624d24a3b7db31cdc13e7a23f38365e5aea7b1ee7407c872be1ca3498dda2315fb8bde7300fb632a9a06c278dfa86f6f19499213ad7b0248642c43ad4
- SSDEEP 192:shawSxH+n7/9FjiELg5nOBpRXzySzz5YYRKujek0YOJT:shax+BMEQGp0waT
- TLSH T18F02944639F796330A562765520FB402B769CB877208DE047A9CA2943F2F95CB2F76F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/bundledPlugins/game-bloodstainedritualofthenight/index.cjs
- Size 12KB
- SHA256 b67a1e92170b2354d1a3b683f7066c80b802522fd5fc8cc9ec4ce6781d8b25b1
- MD5 89a0596743731ef6a4ab24050a07b041
- SHA1 3a6b4fd3de0e341647d8c3a50123ae3a33c8891b
- SHA512 ce62393b303962e91c3aa2b58bdf0f2abecf2f9ba51fefc66131b254788d3f8dd56f8514f3c3f8e23b201c57fcbdd0be5cc108cfacbbf3f4ff700468f1c7728f
- SSDEEP 384:9s6FEnXMqM/5XszbvNuCEm2iIFfG8I4S2CPYaz/03MuyXBNHk:9s6FsXMVuv8C52iA04SwDMuSBNE
- TLSH T11942E8B6F3BEB71747F03684E80E844B871CE9A67D019F75B08C64B024E799691D0AF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/bundledPlugins/game-bloodstainedritualofthenight/index.cjs.map
- Size 24KB
- SHA256 626588bf88a7cfa4b29cabc0d8d65efb7ba8baaaf26e20b5b2bba0313d11f193
- MD5 1a8607c508f8e328737c84a24dbaef42
- SHA1 06b516fbf0677954550a544911ac9cd7beb6affb
- SHA512 3d63e9056c4bce18840cb8c0da36c734aee5d9b3e60d7e5446fc350cf57d70adf775707b9118c341a4e4bde34b6001e94e04cc290ff21b1f84162bf55070e483
- SSDEEP 384:fSYQrhYtDjXLUCeSET9ypJ39oOcGbDOmJX0AdOCa4ansL919h2/Y:KYPBe6JCQG9sr2/Y
- TLSH T155B2C7122027EA3967A31FEDAADE41525708F8667651D620788CA23B33D3F28F0F55F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/bundledPlugins/game-breakingwheel/index.js
- Size 657B
- SHA256 5c72375cddf242935392dff54eb123c2ee2ae6ad3b662fd4cec8fdcec79da369
- MD5 5422bcbf44d3033f816fe5849eba776b
- SHA1 d88e5c65ac1622a338f93ba67ca7e83393ceff01
- SHA512 ab26bd4e2fd4c4559c93753dc7af8f4bd8ddddc2cbf524b4fe83b7551f6681009d56d3b021f9a0511db7179acd9838e9092f9dce1fb87708490e3969725688a6
- TLSH T1E1019E9503FA307632759110440FB5077285C5131A11F96475DC60A56F8D16D61F72DD
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/app.asar.unpacked/bundledPlugins/game-codevein/index.cjs
- Size 12KB
- SHA256 cf14ac36d4f12d84b5bdfa017a6f1630e17bdf9e062125b5fbf5504748c91930
- MD5 d0eb2631a08ff41e33e06efe52f51703
- SHA1 b1b9c4f826433d6553a22eaab2da2966da2453d4
- SHA512 122e64a7eee0718ddcb771424711e0d3849a0e7a9c33f334444d64dbeb17c7bd643a63dc14768a8e751991ccd043e86d35f523c896cb47585b4f4940bf7fe6b0
- SSDEEP 384:9s6mXeqM/5XszJAaKFVFfG8I4S2CPYAz/03MZ3I7k:9s6mXeVIAaKFr04SwFMZ3Io
- TLSH T16742E7B6E3BEB71357F03688A80F840B832C89A57D05DF65A48C64B410E799A90D1FF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/bundledPlugins/game-codevein/index.cjs.map
- Size 24KB
- SHA256 4b73d53403f69744e77bf9350da9eb76542ae996c806e74f035fa8b703ca6cd0
- MD5 ed5548f7d49164dc14294500b0a3fe2b
- SHA1 52f30fd97a07484c3cd1362a213bf6babbd92685
- SHA512 07553879fdd77db5ab8ae3e8d371aaa6fa9b04e5da41965b4737a7e9299e89d182abc534c3c5603a68255e71118704a11e71c564b4567e3bc7dd701adeaf52d1
- SSDEEP 384:fSDhQrhYtDjIG2H0EXSET9ypJ39oOcGbDOmJX0AdAeakavKsQh919h2gd:KDhPcGk0EX6JCQcxizR2gd
- TLSH T153B2C5122067AB3966A31BDD6A9F41526718F8167651D610388CA23B73C3F3CF0F65FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/bundledPlugins/game-conanexiles/index.js
- Size 2KB
- SHA256 25b8cdb6ad9b8b0af19a23cfc72cbb015f2c2af9eff29e0c37ca074a6b4c3b22
- MD5 a274ed5eeef93b28272c2574f3587c3a
- SHA1 615248abd36bdfdf2b5106530073090bbc547c96
- SHA512 162691464f28c2b77414e528ad3332a52b7c9d0c58ca75ef31a44ae83b9ab45b7804627c6feebcf44ae6f512e31db2500443c8a88fd731151af3091fab4c49fc
- TLSH T12D51651562F7343402F3E365992BE8196256C3A33A01ED64768C42851F4D33C62BF5FC
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/app.asar.unpacked/bundledPlugins/game-cyberpunk2077/index.js
- Size 341B
- SHA256 4fce2e32dd7f1d502793a56e4f82edca9b9743fc58f52df252b42e62d897d4f1
- MD5 d4503395a48968ea81c667b1f1698781
- SHA1 609bd7701cae420ad799c5712535f0e5d241c374
- SHA512 df93bd1f3f8a160955b7678dc79854e6a0b0bd9459e7d47dc52a1124f1de41d6f2b8d4b61f042b9e16013d774f80df1d03fbcab5d8bc413cd0121ff614e74e15
- TLSH T1CDE0869665FC65153995D17854657102634080675918BC28BBAC85DE2FCC81C11F16ED
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/app.asar.unpacked/bundledPlugins/game-daggerfallunity/index.js
- Size 3KB
- SHA256 066bd6ba9fdcf56dc32868ac2377153a12619f0b2f5e91ba85327e201e1e3e4f
- MD5 b104168130180cf6d0f6212c7e521c1a
- SHA1 8be13cdd5c0d7de72939ffd5dd996400c0ba49f8
- SHA512 fcd8b2bd7b329ad5c72265d74f6eca30494be3f26dc6ff1c1ee9610199c87ad7b15cbb03afd9783c06a24d4defd2629ed2f2dc6aae078c7db7422b5c50b63492
- TLSH T12281852C96F4302756B3A2E6790F54077226D5A3310ADA04B6DC66503F93718B1EB2FC
- MD5 SHA1 SHA512 TLSH
Score3/10