2c89cac176efda873ed44278ae63da08cf928eaf3498c8a05785847ce8731fd7 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

HFor1.2+/b...ny.dll

windows10-2004-x64

3

HFor1.2+/b...ny.dll

windows11-21h2-x64

3

HFor1.2+/b...ls.dll

windows10-2004-x64

3

HFor1.2+/b...ls.dll

windows11-21h2-x64

3

HFor1.2+/b...om.dll

windows10-2004-x64

3

HFor1.2+/b...om.dll

windows11-21h2-x64

3

HFor1.2+/b...ck.dll

windows10-2004-x64

3

HFor1.2+/b...ck.dll

windows11-21h2-x64

3

HFor1.2+/b...ny.dll

windows10-2004-x64

3

HFor1.2+/b...ny.dll

windows11-21h2-x64

3

HFor1.2+/b...ls.dll

windows10-2004-x64

3

HFor1.2+/b...ls.dll

windows11-21h2-x64

3

HFor1.2+/b...om.dll

windows10-2004-x64

3

HFor1.2+/b...om.dll

windows11-21h2-x64

3

HFor1.2+/b...ck.dll

windows10-2004-x64

3

HFor1.2+/b...ck.dll

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
2c89cac176efda873ed44278ae63da08cf928eaf3498c8a05785847ce8731fd7
Size 8.1MB
Sample260527-yqdjmsg19j
SHA256 2c89cac176efda873ed44278ae63da08cf928eaf3498c8a05785847ce8731fd7
MD5 ce1fe000dc7980e0cf8661eed97ecd43
SHA1 04887676bf2ed1211aca2b0386579ed2e1af2f16
SHA512 e49133dd5e9259493ea11a6b8750df785d02606d4d05c7eca05f6516b095f5b3a487275ebd378a30b257caaaa782175e70b3f1498a13867d69078cb3ba0b2b82
SSDEEP 196608:ddJSsDOLhwFT9xQnasJ3N7R7SsDOLhwFT9xQnasJ3NdmEpjwNXQ5fXD:ddJ7mhgBxH297R77mhgBxH29dmEiNgfT
TLSH
T1C886330C88F276A5F0F99DF07DE8405AB4C936346592C25C8A392C78FE8967C591FB72
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

HFor1.2+/bin/Win64_Shipping_Client/0Harmony.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

HFor1.2+/bin/Win64_Shipping_Client/0Harmony.dll

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

HFor1.2+/bin/Win64_Shipping_Client/HighHeels.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

HFor1.2+/bin/Win64_Shipping_Client/HighHeels.dll

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

HFor1.2+/bin/Win64_Shipping_Client/Hom.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

HFor1.2+/bin/Win64_Shipping_Client/Hom.dll

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

HFor1.2+/bin/Win64_Shipping_Client/MixAndMatchWeaponPack.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

HFor1.2+/bin/Win64_Shipping_Client/MixAndMatchWeaponPack.dll

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

HFor1.2+/bin/Win64_Shipping_wEditor/0Harmony.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

HFor1.2+/bin/Win64_Shipping_wEditor/0Harmony.dll

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

HFor1.2+/bin/Win64_Shipping_wEditor/HighHeels.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

HFor1.2+/bin/Win64_Shipping_wEditor/HighHeels.dll

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

HFor1.2+/bin/Win64_Shipping_wEditor/Hom.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

HFor1.2+/bin/Win64_Shipping_wEditor/Hom.dll

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

HFor1.2+/bin/Win64_Shipping_wEditor/MixAndMatchWeaponPack.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

HFor1.2+/bin/Win64_Shipping_wEditor/MixAndMatchWeaponPack.dll

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  HFor1.2+/bin/Win64_Shipping_Client/0Harmony.dll
- Size 905KB
- SHA256 19ce60ac3280f72ec1751d36a40cb7e2fece2934df8345969dc7feb83bd633e4
- MD5 797308cc18d57c9b06328290394aebfc
- SHA1 aebeb531fd7d7f25f6a10e3e30e386e6fd50e4af
- SHA512 6c7560f813e5bfc612ab77eb3627c6bf7923abbb33683616d82efed4cff04e280a4138eed3fb94033d39c76344fedfe52002839cf8130e16fc0cf4dc54be2a5b
- SSDEEP 12288:Apxoem6gBV5xSqejk2mTSoFy/ukHH7l13iuC8HWenDTrQSTJ:IeeHoSqTauiHju8HT3tT
- TLSH
  T144156B4537EC963AC59E8377E06B043907F0D406A2ABFB9B5948E6F92CC3B564D017A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  HFor1.2+/bin/Win64_Shipping_Client/HighHeels.dll
- Size 61KB
- SHA256 5bce135b5fa89159db139224fe4baa58162194616b9c48ddb2a4d3ab43b007ae
- MD5 e3b94177d72853e38a72c8d2f2f3e406
- SHA1 2de8e1703b5fcca414798cb1110f5ea28ed388c7
- SHA512 581280e15ecb00b9ee4c4e1dab404c854e8706a367753e92adaaac077036584e4e3108671a2ed7ac65c6d5046d1e9b5faf503e6b17fc821ecfdc2a0d6fd02af4
- SSDEEP 1536:Ve7wXUElF5hpQVcRB9cGeFZb1y6JVEi9W4WpX:VeJE/FD+G2b1y6JVEi9W4WpX
- TLSH
  T1F453849D326072DFD857C472DEA82CB4EA60747B831F8607A42315EDAA0D987DF241F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  HFor1.2+/bin/Win64_Shipping_Client/Hom.dll
- Size 2.6MB
- SHA256 17a73c2ddb2a58a6a44368414bd1380123d251574139dd99ad336cfb07255842
- MD5 e69687c9cb6a7c1aeb0eedaf2649ca91
- SHA1 78b5f0b64efdcc84e5542d7704fbe8f762639435
- SHA512 2780d598bc6ec74e90a7ba5dde16996c7d7f85d5abffd9d71c4c20ba7204631c961f9ad5afd6a662323bfd37d04f9ff444dc250e723e1f051e72777dcda36d69
- SSDEEP 49152:ek9ihGSYsNV3te1d5ggPlFPel3A8lyQ++UifkvNezxUWRcoGdVTjxcc+8WZ7X:ek9CY+dter55P2l3A8LaelUldmbZ
- TLSH
  T100D523CC716072EED8ABD4B29EAC1C64B955707A4317D203A42315FCEE4C96ACF295F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  HFor1.2+/bin/Win64_Shipping_Client/MixAndMatchWeaponPack.dll
- Size 10KB
- SHA256 de6b47fa015617cb418fe21de82d1b46fa7535ae456d52571e8dd9d424c59cc2
- MD5 87ac66d0c23b9367e96efa779bd1e194
- SHA1 5efa34bb1074f2677be3d42af7564aae67f43e32
- SHA512 671964c9ec03d11b1973195738df3173df98520e09829848e8f4e2e5504828e1408f9c1800de3bd48027d5ce80ffa671f62dfeeb10ed9b9802ee27424c45b7a3
- SSDEEP 192:zooKBope8ImfYa2WhGxsAwY5mwMyELRXr/1qs4FJAWPb8RCIc4bW:zbKyRtzPAwY5mRyELR7WF5oRCIc4bW
- TLSH
  T1D1222A1D5FD44D3DDCBF8F3768A28D0127F2EA069903E35B1E8D541D282B7600AB27A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  HFor1.2+/bin/Win64_Shipping_wEditor/0Harmony.dll
- Size 905KB
- SHA256 19ce60ac3280f72ec1751d36a40cb7e2fece2934df8345969dc7feb83bd633e4
- MD5 797308cc18d57c9b06328290394aebfc
- SHA1 aebeb531fd7d7f25f6a10e3e30e386e6fd50e4af
- SHA512 6c7560f813e5bfc612ab77eb3627c6bf7923abbb33683616d82efed4cff04e280a4138eed3fb94033d39c76344fedfe52002839cf8130e16fc0cf4dc54be2a5b
- SSDEEP 12288:Apxoem6gBV5xSqejk2mTSoFy/ukHH7l13iuC8HWenDTrQSTJ:IeeHoSqTauiHju8HT3tT
- TLSH
  T144156B4537EC963AC59E8377E06B043907F0D406A2ABFB9B5948E6F92CC3B564D017A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  HFor1.2+/bin/Win64_Shipping_wEditor/HighHeels.dll
- Size 61KB
- SHA256 5bce135b5fa89159db139224fe4baa58162194616b9c48ddb2a4d3ab43b007ae
- MD5 e3b94177d72853e38a72c8d2f2f3e406
- SHA1 2de8e1703b5fcca414798cb1110f5ea28ed388c7
- SHA512 581280e15ecb00b9ee4c4e1dab404c854e8706a367753e92adaaac077036584e4e3108671a2ed7ac65c6d5046d1e9b5faf503e6b17fc821ecfdc2a0d6fd02af4
- SSDEEP 1536:Ve7wXUElF5hpQVcRB9cGeFZb1y6JVEi9W4WpX:VeJE/FD+G2b1y6JVEi9W4WpX
- TLSH
  T1F453849D326072DFD857C472DEA82CB4EA60747B831F8607A42315EDAA0D987DF241F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  HFor1.2+/bin/Win64_Shipping_wEditor/Hom.dll
- Size 2.6MB
- SHA256 17a73c2ddb2a58a6a44368414bd1380123d251574139dd99ad336cfb07255842
- MD5 e69687c9cb6a7c1aeb0eedaf2649ca91
- SHA1 78b5f0b64efdcc84e5542d7704fbe8f762639435
- SHA512 2780d598bc6ec74e90a7ba5dde16996c7d7f85d5abffd9d71c4c20ba7204631c961f9ad5afd6a662323bfd37d04f9ff444dc250e723e1f051e72777dcda36d69
- SSDEEP 49152:ek9ihGSYsNV3te1d5ggPlFPel3A8lyQ++UifkvNezxUWRcoGdVTjxcc+8WZ7X:ek9CY+dter55P2l3A8LaelUldmbZ
- TLSH
  T100D523CC716072EED8ABD4B29EAC1C64B955707A4317D203A42315FCEE4C96ACF295F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  HFor1.2+/bin/Win64_Shipping_wEditor/MixAndMatchWeaponPack.dll
- Size 10KB
- SHA256 de6b47fa015617cb418fe21de82d1b46fa7535ae456d52571e8dd9d424c59cc2
- MD5 87ac66d0c23b9367e96efa779bd1e194
- SHA1 5efa34bb1074f2677be3d42af7564aae67f43e32
- SHA512 671964c9ec03d11b1973195738df3173df98520e09829848e8f4e2e5504828e1408f9c1800de3bd48027d5ce80ffa671f62dfeeb10ed9b9802ee27424c45b7a3
- SSDEEP 192:zooKBope8ImfYa2WhGxsAwY5mwMyELRXr/1qs4FJAWPb8RCIc4bW:zbKyRtzPAwY5mRyELR7WF5oRCIc4bW
- TLSH
  T1D1222A1D5FD44D3DDCBF8F3768A28D0127F2EA069903E35B1E8D541D282B7600AB27A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

© 2018-2026

Terms | Privacy