7bee4e33d89e5a4f2b3bc74d632f7c773ae9a399b6b2ba6d29b1192e25695a8b | Triage™

Login
Reports

Overview

overview

8

Static

static

3

photon.exe

windows11-21h2-x64

8

$PLUGINSDI...er.dll

windows11-21h2-x64

3

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

LICENSES.c...m.html

windows11-21h2-x64

4

d3dcompiler_47.dll

windows11-21h2-x64

1

ffmpeg.dll

windows11-21h2-x64

1

libEGL.dll

windows11-21h2-x64

1

libGLESv2.dll

windows11-21h2-x64

1

photon.exe

windows11-21h2-x64

8

resources/...42.dll

windows11-21h2-x64

1

resources/....3.dll

windows11-21h2-x64

1

resources/...64.dll

windows11-21h2-x64

1

resources/elevate.exe

windows11-21h2-x64

3

vk_swiftshader.dll

windows11-21h2-x64

1

vulkan-1.dll

windows11-21h2-x64

1

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

$PLUGINSDI...ss.dll

windows11-21h2-x64

3

$PLUGINSDI...7z.dll

windows11-21h2-x64

3

$R0/Uninst...on.exe

windows11-21h2-x64

7

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDIR/UAC.dll

windows11-21h2-x64

3

$PLUGINSDI...ll.dll

windows11-21h2-x64

3

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

$PLUGINSDI...ss.dll

windows11-21h2-x64

3

Resubmissions

31/05/2026, 08:21

260531-j82xmaez5p

31/05/2026, 08:20

260531-j8qjlacz6y

31/05/2026, 08:16

260531-j6gtnsez2r

28/05/2026, 15:35

260528-s1qn3aew4x

28/05/2026, 11:37

260528-nrbrbsfv2x8

Analysis

max time kernel
149s
max time network
93s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 11:37

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

photon.exe

Resource

win11-20260513-en

windows11-21h2-x64

30 signatures

150 seconds

defense_evasion discovery execution persistence ransomware spyware stealer

Behavioral task

behavioral2

Sample

$PLUGINSDIR/SpiderBanner.dll

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/System.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

LICENSES.chromium.html

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

150 seconds

Behavioral task

behavioral6

Sample

d3dcompiler_47.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

ffmpeg.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

libEGL.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

libGLESv2.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

photon.exe

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

150 seconds

defense_evasion execution spyware stealer

Behavioral task

behavioral11

Sample

resources/app.asar.unpacked/node_modules/@img/sharp-win32-x64/lib/libvips-42.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

resources/app.asar.unpacked/node_modules/@img/sharp-win32-x64/lib/libvips-cpp-8.17.3.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

resources/app.asar.unpacked/node_modules/@img/sharp-win32-x64/lib/sharp-win32-x64.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

resources/elevate.exe

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

vk_swiftshader.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

vulkan-1.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/nsProcess.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

$PLUGINSDIR/nsis7z.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

$R0/Uninstall photon.exe

Resource

win11-20260513-en

windows11-21h2-x64

6 signatures

150 seconds

Behavioral task

behavioral21

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

$PLUGINSDIR/System.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

$PLUGINSDIR/UAC.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

$PLUGINSDIR/WinShell.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

$PLUGINSDIR/nsProcess.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target
libEGL.dll
Size 467KB
Sample260528-nrbrbsfv2x
SHA256 7bee4e33d89e5a4f2b3bc74d632f7c773ae9a399b6b2ba6d29b1192e25695a8b
MD5 5db499ae909083620e47eeea1623b2af
SHA1 bc23303d6885b8f5c3fb84b3fecdf1a678e94a25
SHA512 d656bfa6d59c495d85eee872b372f7fba24f89101c38de1de904ece0d9ffa6eb93de81fdf674efa5ef724ea73188b908b8ad32cfee03c656accb835683929311
SSDEEP 6144:ZuF2Dw0NiKxN6YTfDVTCanVJhPadWQo+gehJp/Ej4:w0iKbbTfDVJ2dWQo+genp/EU
TLSH
T1A2A48D15779444A9E06BC174CA534642EE72B8960F25FBDF03A492392F7BBF85B39320
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libEGL.dll,#1
1⤵
PID:3244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy