cc862dcfeca21c664c623b9d47dd8a1e7f38da00ee8f00fd7037fa4434030228

Resubmissions

02/06/2026, 02:16

260602-cqb5xscz4k10

02/06/2026, 02:13

260602-cnpcgacy9m7

Sharing

Copy URL Twitter E-mail

General

Target
net8.0.zip
Size 3.8MB
Sample260602-cnpcgacy9m
SHA256 cc862dcfeca21c664c623b9d47dd8a1e7f38da00ee8f00fd7037fa4434030228
MD5 ff7314f439e044a5baf275eeb1f451dc
SHA1 af66e687609138fea97fe517ef983161c90ebf0e
SHA512 314d0d72456cacc3d734b3dd2c4eb4eb38da43d421a56a9929543213d6a3ac799085a7cb31b6129abb91694fd8147e89a06a0ea476475e056255f722a9b5704e
SSDEEP 98304:yqXCUyL2hg1vyMGAu8N6KPhphRVt6CimY+7PA:yqMCOvyKudK3Xix+7PA
TLSH
T15E0633FE23F116CAD12638FF59C87D1650FC3F28F225E062D91D9901764A051AEABF86
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  net8.0/AForge.Video.DirectShow.dll
- Size 60KB
- SHA256 666d44798d94eafa1ed21af79e9bc0293ffd96f863ab5d87f78bcee9ef9ffd6b
- MD5 17ed442e8485ac3f7dc5b3c089654a61
- SHA1 d3a17c1fdd6d54951141053f88bf8238dea0b937
- SHA512 9118bf11760354e9971ae8b27f7f6a405e46145b39ca6e6b413cb2e729e51304b895965e9140f66c9e3ef7caa4f344762bf059688b23dd32e4c2df271394fea2
- SSDEEP 1536:XwumrikcyTpOKVi+Dqp6viPUCcvKWz3NTpAK+7KI4v8U:6dOKViKa6pOWbhpAKyKIVU
- TLSH
  T156535BA273B8C633C4AE17F6A4331F4017B1A7495223D79E1F9A519D7CB7B804A50B93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Drops startup file
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2
- Target
  net8.0/AForge.Video.dll
- Size 20KB
- SHA256 bafa6ed04ca2782270074127a0498dde022c2a9f4096c6bb2b8e3c08bb3d404d
- MD5 0bd34aa29c7ea4181900797395a6da78
- SHA1 ddffdcef29daddc36ca7d8ae2c8e01c1c8bb23a8
- SHA512 a3734660c0aba1c2b27ab55f9e578371b56c82754a3b7cfd01e68c88967c8dada8d202260220831f1d1039a5a35bd1a67624398e689702481ac056d1c1ddcdb0
- SSDEEP 384:Wu9f/hWFwLX+WJ7gfZLTswhHDlOdKaCxkyf0l:HfpZL9uxE9Cxd8l
- TLSH
  T135924C0AD31CC23FCB6E077EA472026287B0C3626643E7EA5CA951B9BC6736549437D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  net8.0/AForge.dll
- Size 17KB
- SHA256 966a474060a8aca70c73ba09d0b6fe2353035961c7107b9003ef879c010ff8da
- MD5 02c63f568e598aad85dd401d7b26e82a
- SHA1 2da9ec7612835e1f69d4a93aa2d49ec9bdff7f7c
- SHA512 da9bff86be8fa890dda80a35ee6c851aa655f087f81804a23c73f8c586b7e13ac5a643e0a516a35787cd97b392aec16bfb95210080e4e53e6144fec9316acdb1
- SSDEEP 384:aJtTjIFgPn1Q11umcaOxIapDtoTFC6dmoU:KRcFKoumc9ICDyxmoU
- TLSH
  T18582B50DEF9CC267CE6F5A7460DB13598335C70AA653DB6784EC04A4AC47389ADA3293
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  net8.0/Discord.Net.Commands.dll
- Size 135KB
- SHA256 b8d1d3bb79eee6452f863accb592f7cad9e964704b50b62b27888cf781962b3d
- MD5 5d2bef40b97275a55629cf23652f4e58
- SHA1 df018f2ee20edbd78701c6982cfd6af7af31a209
- SHA512 f0e63e9de0b05c45e942c55b3bf740487de6b534115bd54e66e88796638372c71e7fd80d80b6d3ce927617fe0b9839d656d481aefe1ed2f186c3d85ad231e770
- SSDEEP 3072:BzXUFNgQCzd/TxclBOZT0BYVb+9zrOwz:4KVzd/1OB6TE9zrOw
- TLSH
  T1D4D37E35A3EC8B22DEAF3BB9F46041250BFB9506E4AAF78DAD5C98ED194530059503F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  net8.0/Discord.Net.Core.dll
- Size 927KB
- SHA256 06a25d229d47bbb88056b832c53f52fdb8882510d4cfdf8e9b7132577a858033
- MD5 cf286bb560aea937735162558f6dac06
- SHA1 7fe32c88514b60a3a1c5e6989b3702b0b0032d61
- SHA512 aeda984cba0a4d4ed175dff6d8404eabe1c3e577f48e50fbe0a7ffe8822f9d1e6a41850f535afaa8a9a395e78480e39d33b62d0485f883a32f7c51c020d88bdc
- SSDEEP 12288:1R12gQeiE0PuXy60mZcp58aO0cscwiYyAvgvu1znGOWWi4iYyJ6hsTwh6Fsfopi4:1RQJg0PIy60
- TLSH
  T1BC15664022F4593DF9F7DF735ABAA451267ABEFA1850E61E1844354D08BEB8288D0F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  net8.0/Discord.Net.Dave.dll
- Size 30KB
- SHA256 5a936554d259a16e566fe11a3316ce0f87f8ca1001b74c63068c39125f4a690e
- MD5 8539f1191024f1b292e303f71e029774
- SHA1 3cb931d0f78a196f5d5b1b8a784fd0b6cfd29bf1
- SHA512 a8d422c5382ea4e56f9388c1559eacb64c9d31d060006842a2cca43b1a41f50ebaf8a3548e4c6f2baad54947153829525f58bc8118bbaae055da1943e58213f0
- SSDEEP 768:HOdvb3SbfdHlQ8+qHbC9k+ILrx/yM9RePtP7xqAXZn:HoSbfhlNlLeP1xrXZn
- TLSH
  T1B2E21815D646873BEF8D86F6D87143914B7AC28C7893EB2A439DB9611B2B3C01A513A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  net8.0/Discord.Net.Interactions.dll
- Size 282KB
- SHA256 72c34d4ede80f6e05d0333697b822949d62e4f9a23472fc1aa03d7b736ea70f6
- MD5 232bebb601ba18492798ba958aa0b89f
- SHA1 e1aa84dfdfd70897898b28b8eb770b14fcbd512f
- SHA512 0a8de55a9d56fa64b3fbbb8c05314c9792081c83c30968f6c38297d5e37c28170b5741c1ae0d4fba7b82384f9ef13538cb768212682533c1c59b8bb18293450c
- SSDEEP 6144:0+Pz3n9F743jPiJ6zMrPq1DxLHtFHyVVyX99QUF:0CAiJ6zMrPqjHtFHyVY/QU
- TLSH
  T181546A0573FC4722DEEF173ABA3043094BFAE906E4AFE35D595CE8E81A667584910363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  net8.0/Discord.Net.Rest.dll
- Size 1.5MB
- SHA256 ab25e522499c6ad145ddb3a36a519f3363e08f2778e04be8d6177e077321d286
- MD5 e8de0f28d784a67ce048231976c81b2f
- SHA1 04374c834998a94496cee04f88a9dc9d8a9f7c20
- SHA512 d22edb479291754752b33838e1331a5e066492192eed1c186e3b9f95d8373989f8933ee911a8d6d710c217164ade4651d916e1801627160ef2c45154fa66fe89
- SSDEEP 24576:o/GIoYpcPoVunBxn+n5GQq78ykapsU3BR:o/aYqspO8W
- TLSH
  T1AF65F752AB94DF3CF39F113A976416399371E584B346E79A4E38A7BE2D42748CC042B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  net8.0/Discord.Net.WebSocket.dll
- Size 959KB
- SHA256 7042ad20fd0a99561c4a389f4f29abd0c0d93ef05c7213a9a39a9beeeafac70d
- MD5 2ad795087cdf7b90a2cf60cf17c11361
- SHA1 c05dfc532cc43d38569dff6efa40089a1163f408
- SHA512 94101a12beda9d58f99259c242fc9186f17ac62f2a3aaf93b932fda0d40e99f7300e6b41dca5aceb00ff61c2b529d4d5b66d6464b5da72933224125bea59e535
- SSDEEP 12288:PuQKXXNSyKIj12p/sHwwKK6aCBglPO9ZV6WGMEwFUuQpr+Rko7rU23XEXKqA:PuQEN4/sHzYaCVEn+7rUGUXKqA
- TLSH
  T1D4253B0773E4CE31C19F61F9B570872943A2C506966FE3891F0CEDD4AD9278A6E047AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  net8.0/Discord.Net.Webhook.dll
- Size 31KB
- SHA256 d4c8b72f3647bca6e79056d9909a7a4101fbf10cea042b90aa06ecba0be55b77
- MD5 2e7e1a056e814dc732bc2df33459a746
- SHA1 33f7c34e09571484e4aeb8e5359990b2c6cd97fc
- SHA512 c13213c9411103686928adec871038e2dd77aaa710316749c80cdf187f23996b256605a13ebaa55a6a9a3f9d7cdf6fd9c62838fef093138527c69a0e6176aa1d
- SSDEEP 768:RwURE2ig0US4qfhkuqXT7g+pUJX5qX1LZx:mURN0US4GkNZpOGLZx
- TLSH
  T1FBE2181853ACC72ADAEF6BF9F870121917B2EE016413FB451D4DA6ED1953BC22A047E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  net8.0/Interop.IWshRuntimeLibrary.dll
- Size 36KB
- SHA256 3884afc4d3e1af4d1fbe8e1859b41ed69560db8fe4141501ccc4d16c8e254275
- MD5 185ddb43581c3467c7196452c09938de
- SHA1 a02b618902701b6c0fbaafccefeb8c193e06c772
- SHA512 de3d73d0712e37acc4d8217900d9eeff09a9f8d8352e584b795a8ed907ecd691cd98ef3b4a011fd4a7e42ee0382aecea510462c4b3dba01a722d2139ae5896b9
- SSDEEP 768:/DZfmTXoKYfUkPnBkZlBQQ/SMfzdztuo2z9IkCBiptcNa:/YHYfvStbfBko2z9IDioa
- TLSH
  T1BDF2A673B774A265DC5227B544B32FA02371D60287A3EFDB847C936A5F072848D91736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  net8.0/Microsoft.Extensions.DependencyInjection.Abstractions.dll
- Size 63KB
- SHA256 afdcd6be4baf7c48e67b469d77560203e6660cff0e18f290da36c949d3a47acb
- MD5 9cb2db7e80220d5b5596d45d0a8d2f36
- SHA1 67b9f1b08c447802fdfd09adb51f0e3afaa50d20
- SHA512 bae9c46b2e134dfae5073f117bc10d90b92dc92c1e50fb284e9034cbca554416e0518b39acb369c47469227c05d9c1ecb13cb735bee8d881b6280442d36ecf0c
- SSDEEP 768:E0dv145TiKK8sfK8wUcrioAm34e2KjpYzRabPBtDj/49z4Z/:E0P45TiK3sfK81c5AeHjpYzcbZh4z4Z/
- TLSH
  T1C7534DED37FCD367FBAD1B722A7290C09B34BA531501D70E698590E60893BC48951EBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  net8.0/Microsoft.Win32.SystemEvents.dll
- Size 25KB
- SHA256 8a5afa02244e76f4e7f8b597f8e3ac6fe635bdee8288d98f7893c2aebe656aaf
- MD5 66e06dd57c8bce8081d0ea836c9e722c
- SHA1 13f6fcdae1955d5f7c234e8fceb2f2afc5749061
- SHA512 71d68d81c309357c47bdfc2c2aedd23eb2ee3f67b71c3af79d2aa98f5611e67a6e95728d8a73902f95116e3c93dfa9170fe0b3bb78c2571988d83e08d3f40857
- SSDEEP 384:vdqUq7+XwadOx1Y1Ln5UZWrvGJWKZlNIV2QR9z89F:vdqUqKLdyY1FUbAV2s9zwF
- TLSH
  T198C23A62CB58C576DCF70D3159A1D6426E38E3E6A802E78B254EE00C0FB7BE487F1694
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  net8.0/NAudio.Asio.dll
- Size 33KB
- SHA256 504dd507c34817a8a8be1965e82dd091ff0f5a85ba444ea784783f196677bfd1
- MD5 01a76191d31b3d6042484e452bd66ce0
- SHA1 c84ecf4875c17d9cc91c911feabca640c7ffc661
- SHA512 09fa738e43b1a4272a9e16045bcc0fd00858f4367d41b1f9fe3cf97589379b5fcd1fcbd1a24bca74a08187f080941cb575332d3725f620f93fd0b414dea0a9bd
- SSDEEP 768:EehRrWpB5henH0HTYdpVCYKo9coe6ttHjBR/:EehRr68U47QGtHFx
- TLSH
  T10BF22B71EBD84A27C92E2779A0F2040407B5F191F623EB4F9A4C94A96FE73594790373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  net8.0/NAudio.Core.dll
- Size 183KB
- SHA256 4f8d8c4140146674b103c8a3c46fbc4c768a86c0012a167168e3f7da2b3e5c09
- MD5 4e4302ce791e48f985a3a221a19a272b
- SHA1 d2b0fd622daf57a012c3cf5bdf4b187f27d5d080
- SHA512 1685a17be6d64c222ec606488e3f8e9707a8b7709054e9e99cb53c7b438f5b993820e2e9773e02455525ee06e18aa65ae150420224311f6c69d795c3d129e312
- SSDEEP 3072:6lnWpdQWUY6GwfIGsnlLieRT0TWsPtt3RBntgqK2QlVEOPkk6uSYsM+S70I:FpdQJY6GwfIGOLi7tt3RBntgn2QlVEEO
- TLSH
  T151045B2563E48266E66F9BB5F0F204178BF0F4463437DB4E5E806AE92A07B01C592F77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  net8.0/NAudio.Lame.dll
- Size 90KB
- SHA256 9bcae325bf8a5b3a57bd9352d879e6093ac4fb8e2369b3f8150449038e78a267
- MD5 01771b4054c9d929df390c506f23c772
- SHA1 af89cc9a506b70a06411fae7285962394b01d11a
- SHA512 d2e24c6deb36145e82e8ac312a6260986b3c70cb3e033749a4ca532c0ea9fae1065cf9e41ac0277f45f4a8abba4c223e5405f7455633352bb808bcdc14a4f541
- SSDEEP 1536:Ng7qlz3dJlHWpAR9NWijYtgKVnj39ZBaDSm1NW/jYUgVdQZYS/I+bSD+I0x:D1lHWiTMiIndk91M/cQqSQ+bSex
- TLSH
  T15B93F81C9BBDC51EDACD0B3CE0628F28173CD6D23517D7498F9599AC6D23B844A226A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Drops startup file

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32