Overview
overview
10Static
static
3mtstррr�...ng.dll
windows10-2004-x64
1mtstррr�...ng.dll
windows11-21h2-x64
1mtstррr�...ng.dll
windows10-2004-x64
1mtstррr�...ng.dll
windows11-21h2-x64
1mtstррr�...ng.dll
windows10-2004-x64
1mtstррr�...ng.dll
windows11-21h2-x64
1mtstррr�...64.exe
windows10-2004-x64
10mtstррr�...64.exe
windows11-21h2-x64
5Analysis
- max time kernel
149s - max time network
98s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
29/05/2026, 11:50
Static task
static1
Behavioral task
behavioral1
Sample
mtstррrх/locales/resources/app.asar.unpacked/node_modules/btime/binding.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
mtstррrх/locales/resources/app.asar.unpacked/node_modules/btime/binding.dll
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
mtstррrх/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
mtstррrх/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.dll
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
mtstррrх/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
mtstррrх/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.dll
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
mtstррrх/mеtаstарреrх64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
mtstррrх/mеtаstарреrх64.exe
Resource
win11-20260513-en
General
- Target mtstррrх/mеtаstарреrх64.exe
- Size 2.4MB
- Sample260529-nzj3nsax21
- SHA256 b778caa4f2a8996dc78d6411b6210c9dbde2a24fb11496b0d97c41484d801684
- MD5 780e7da647caea6e73fc0536dbc063c9
- SHA1 44f387ec3a2e7026fd34e1f8a080f49a21372a25
- SHA512 873e34d05390e2005653a2c7198ec04874c958efd38663b3be330687243a4e216d49671293353a4b7bfb278de763fca5c34b69ef725d87a25004e3d1c83479af
- SSDEEP 49152:ZRJY1T8LVk5B6iZkzlrYOhIxo4R4rf86fJXEF:ZUcu6iKzlsOeRRV8U
- TLSH T117C59E1B7CE148EAC05A633289B661A17B74BC090F3253DB2E90B37C2F726E55D75B48
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 4812 mеtаstарреrх64.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4812 mеtаstарреrх64.exe 4812 mеtаstарреrх64.exe 4812 mеtаstарреrх64.exe 4812 mеtаstарреrх64.exe 4812 mеtаstарреrх64.exe 4812 mеtаstарреrх64.exe