Overview
overview
3Static
static
3malware/D3...r3.dll
windows10-2004-x64
1malware/Pe...r3.dll
windows10-2004-x64
1malware/Pe...r3.dll
windows11-21h2-x64
1malware/Pr...r3.dll
windows10-2004-x64
1malware/Pr...r3.dll
windows11-21h2-x64
1malware/mal.exe
windows10-2004-x64
1malware/mal.exe
windows11-21h2-x64
1malware/vc...r3.dll
windows10-2004-x64
1malware/vc...r3.dll
windows11-21h2-x64
1malware/wp...r3.dll
windows10-2004-x64
1malware/wp...r3.dll
windows11-21h2-x64
1General
- Target malware.zip
- Size 62.5MB
- Sample260602-w15prscw5y
- SHA256 303bc0ef481f5d6fe4170edef30d5d1d8031247e7c6521aeb5b376ffae723d04
- MD5 edef34e4078cd1f9f2a93d1d805e1ef1
- SHA1 08f6c11a0167df8926e156605a7c1cfda4f8d70d
- SHA512 be18b3f6a85723c42ba11fad3d898835e344b2a606ca4967d2d2ad33352e878f00167e6501f0389c70544585a488d773bf6964d48622efb7866d444783e2e531
- SSDEEP 1572864:HcBW0YGS3a3vS8FRpcOlyNUVY2Xcl+TbMW2jf5qhY0k5m:10YZ3hIcOQNU22sQ03cVWm
- TLSH T1CDE73383F4F105DBAAFC6466C1EDE0E5E7266D84E6C2049264F124438DF7DAB8B601DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
malware/D3DCompiler_47_cor3.dll
Resource
win10v2004-20260513-de
Behavioral task
behavioral2
Sample
malware/PenImc_cor3.dll
Resource
win10v2004-20260513-de
Behavioral task
behavioral3
Sample
malware/PenImc_cor3.dll
Resource
win11-20260513-de
Behavioral task
behavioral4
Sample
malware/PresentationNative_cor3.dll
Resource
win10v2004-20260513-de
Behavioral task
behavioral5
Sample
malware/PresentationNative_cor3.dll
Resource
win11-20260513-de
Behavioral task
behavioral6
Sample
malware/mal.exe
Resource
win10v2004-20260513-de
Behavioral task
behavioral7
Sample
malware/mal.exe
Resource
win11-20260513-de
Behavioral task
behavioral8
Sample
malware/vcruntime140_cor3.dll
Resource
win10v2004-20260513-de
Behavioral task
behavioral9
Sample
malware/vcruntime140_cor3.dll
Resource
win11-20260513-de
Behavioral task
behavioral10
Sample
malware/wpfgfx_cor3.dll
Resource
win10v2004-20260513-de
Behavioral task
behavioral11
Sample
malware/wpfgfx_cor3.dll
Resource
win11-20260513-de
Malware Config
Targets
-
- Target malware/D3DCompiler_47_cor3.dll
- Size 4.5MB
- SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
- MD5 19e527a35241c171d37dc1e6c530053c
- SHA1 b1567bada7a27ab78e65da440f21809f50b9d34c
- SHA512 23d38b55f5b17bf0228b16a85787d384da0a700190fc289281190272a0d2dd374be0f7f64d8b642836ccbe2351b72e9ef5c7e2b12d0a7495317e986fd5e3c886
- SSDEEP 49152:c6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/V:cUdeqt737jFm5wd
- TLSH T143268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target malware/PenImc_cor3.dll
- Size 154KB
- SHA256 b3f162467eff13386079491068bf0b7f9edc61880ea9e14791fd5b426b8508dd
- MD5 a30b1e219e299b610e7e3f423925f28a
- SHA1 2ebf92bcfb0cbe19c72c0e828276549c6f67c27e
- SHA512 4ade74e3e5667b02b43aee45a6d044ca9b75a1902d5a2a8f99589156bfa2e29e5c74af5933a12b37f2618364f7002e54844d1385209e5c20aa7000b9620f1026
- SSDEEP 3072:xrndTvsZTCHO0A3I62EpLoUGhFoD5GqTuE9ZTTml7OMTjk9XdCgfzsvADiCAMvY5:ZndDsoe3D2yLtD57uEdcCHAMiV
- TLSH T174F33913B69C40ABC429D27E85D70605F772BC111B229BDF2260932E1F7B7D4AE3A395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target malware/PresentationNative_cor3.dll
- Size 1.2MB
- SHA256 ef0a7f5c104cb073cd6124f218216d3e1e58345012c95030f7d34ad4cca7c01d
- MD5 b1775a79788a615ebdb3c851e2fe728f
- SHA1 5c8c9f836d1dfb8c38a06b317076282955bade9e
- SHA512 23a92ffa2d9a0f6d397e0d0d4fdf0b832cb0551ef5ddf971b59d49f05dd1fd159aa9e901c033a0b58aa81324380aeba6d368ac35ff71044ea363ad60c1aba833
- SSDEEP 24576:KhNpKcF6kPHmTw+MLYpX7T3hjnHFOcJqCPoG5MupGJvaCbztQcfRYQXLFGvHLPa9:KxKcdPHmMLYpX7T35/fPoGPpGFjztQc1
- TLSH T198453A22E2E642E5C47FC1B8C646972BFBB07449131C66CB87608B552F67FE0963E364
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target malware/mal.exe
- Size 146.3MB
- SHA256 0f2cc4494dac8fc8ceabf366a6b26d5946b587611f6d8ad94c7fcc64d1a1ac31
- MD5 78719c6941afd16f8150b4bed494e7b2
- SHA1 e20a41efbb29e06d30889b374d224906345baf65
- SHA512 e3389ce7e37bc4d6c797a44581f9606bf6633194bef7cd7883328ad4b9454796ed72e73240bf66eb775696f7173567355c8454fb88145baad772815589046d94
- SSDEEP 786432:Gp/UOl49x71HCUV5OtsFdtaCs4TmsCfTDk8fOm41gT0G0Da:4/UU4P7EU7DfC7DLfOlqh
- TLSH T140787D1163E81A05E27B8678977382A1E6B1BC535711C1CF0494FE4A2F77BC2BA36376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target malware/vcruntime140_cor3.dll
- Size 121KB
- SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
- MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
- SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
- SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
- SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
- TLSH T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target malware/wpfgfx_cor3.dll
- Size 1.9MB
- SHA256 3f0b680f3716d90ea7ae0e077778c64fd5bc45a962697b6fc573fe035e7868f6
- MD5 b749772632c11524b4bcebedd3d0c17a
- SHA1 91fb73f5a77165c06835589083ab61a89d783c19
- SHA512 a0b61bdaf74fcaf964ea3e5eb2d9abdc81a62dc9252d3cb8449da00de3654211138a77ac3da580363705df3327f20933af5e7d05526460ddf4c918245740407b
- SSDEEP 49152:cqmevSOcLdX7gUawnCyM7h4KcmA01IMPBv:c6kLiwpMt4KcmACIKB
- TLSH T1C8954946B6AC40E9C47AD33CEAD7461BF27274152B61A7CF23A0479D6F27BD0097A360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10