Overview
overview
4Static
static
1ksyncengin...ne.dll
windows10-2004-x64
1ksyncengin...ne.dll
windows11-21h2-x64
1mui/defaul...n.html
windows10-2004-x64
4mui/defaul...n.html
windows11-21h2-x64
4mui/defaul...ion.js
windows10-2004-x64
3mui/defaul...ion.js
windows11-21h2-x64
3mui/defaul...y.html
windows10-2004-x64
4mui/defaul...y.html
windows11-21h2-x64
4mui/defaul...x.html
windows10-2004-x64
4mui/defaul...x.html
windows11-21h2-x64
4mui/defaul...r.html
windows10-2004-x64
4mui/defaul...r.html
windows11-21h2-x64
4mui/defaul...app.js
windows10-2004-x64
3mui/defaul...app.js
windows11-21h2-x64
3mui/defaul...ory.js
windows10-2004-x64
3mui/defaul...ory.js
windows11-21h2-x64
3mui/defaul...bar.js
windows10-2004-x64
3mui/defaul...bar.js
windows11-21h2-x64
3mui/defaul...x.html
windows10-2004-x64
4mui/defaul...x.html
windows11-21h2-x64
4mui/defaul...ors.js
windows10-2004-x64
3mui/defaul...ors.js
windows11-21h2-x64
3mui/defaul...isk.js
windows10-2004-x64
3mui/defaul...isk.js
windows11-21h2-x64
3mui/defaul...x.html
windows10-2004-x64
4mui/defaul...x.html
windows11-21h2-x64
4mui/defaul...app.js
windows10-2004-x64
3mui/defaul...app.js
windows11-21h2-x64
3mui/defaul...ors.js
windows10-2004-x64
3mui/defaul...ors.js
windows11-21h2-x64
3mui/defaul...ors.js
windows10-2004-x64
3mui/defaul...ors.js
windows11-21h2-x64
3General
- Target qing_3.1.0.1671.7z
- Size 24.1MB
- Sample260604-pg389ses9t
- SHA256 a015b52504669d26cda92caca29e08e5f0407f513e47809625e2cb8cd189e686
- MD5 8a655a0f77323cb51e333696514bea3a
- SHA1 21ae9aac3d6eb6f345945fccc1e8f428e95099b6
- SHA512 0db00c59149e4e4b8ecb6854329962c58c64079fc9addfa06057bff3c296ddc62d5cc54dc316e16314cc44fa8881b220093d236c6243f17fa3eccfa3bc043fec
- SSDEEP 786432:ejGsUJErHxreiVetx9heSFbV5M/jZdWNZ/sEv:ejGsQ2AH2SdVKjfWNZf
- TLSH T1114733027ADF5F07F270EE3B1A5A0403130F793A244D8B6E8E7A92B77118EA959D54D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ksyncengine/ksyncengine.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ksyncengine/ksyncengine.dll
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
mui/default/res/airightsidepanel/doc-classification.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
mui/default/res/airightsidepanel/doc-classification.html
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
mui/default/res/airightsidepanel/static/js/doc-classification.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
mui/default/res/airightsidepanel/static/js/doc-classification.js
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
mui/default/res/clouddiskhomepage/history.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
mui/default/res/clouddiskhomepage/history.html
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
mui/default/res/clouddiskhomepage/index.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
mui/default/res/clouddiskhomepage/index.html
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
mui/default/res/clouddiskhomepage/sidebar.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
mui/default/res/clouddiskhomepage/sidebar.html
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
mui/default/res/clouddiskhomepage/static/js/app.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
mui/default/res/clouddiskhomepage/static/js/app.js
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
mui/default/res/clouddiskhomepage/static/js/history.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
mui/default/res/clouddiskhomepage/static/js/history.js
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
mui/default/res/clouddiskhomepage/static/js/sidebar.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
mui/default/res/clouddiskhomepage/static/js/sidebar.js
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
mui/default/res/clouddiskpopup/index.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
mui/default/res/clouddiskpopup/index.html
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
mui/default/res/clouddiskpopup/static/js/chunk-vendors.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
mui/default/res/clouddiskpopup/static/js/chunk-vendors.js
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
mui/default/res/clouddiskpopup/static/js/clouddisk.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
mui/default/res/clouddiskpopup/static/js/clouddisk.js
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
mui/default/res/cloudfolderpage/index.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
mui/default/res/cloudfolderpage/index.html
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
mui/default/res/cloudfolderpage/static/js/app.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
mui/default/res/cloudfolderpage/static/js/app.js
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
mui/default/res/cloudfolderpage/static/js/chunk-vendors.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
mui/default/res/cloudfolderpage/static/js/chunk-vendors.js
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
mui/default/res/cloudfolderpage/wps-i18n/chunk-vendors.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
mui/default/res/cloudfolderpage/wps-i18n/chunk-vendors.js
Resource
win11-20260513-en
Malware Config
Targets
-
- Target ksyncengine/ksyncengine.dll
- Size 1.2MB
- SHA256 f870f3ac9788384c58ebe4982707c5caa1e174690f446e6c05065c82a53428bf
- MD5 221e303b0ed7558956f91539c69ec952
- SHA1 d71a265885b447281e27a8e3c0a201a36f07118c
- SHA512 2f1b7aa58664779c89198e446330a015c2b19db85ad422ac7807b01a7faef23e09f978542480ea915676c13a277e9da6d56906c4ed90fcc4a41b3c6ae3267490
- SSDEEP 24576:Uhxi7E76/EVucGQ+7PxdYnKILy59F1YG0zS:UhYg76/EVhGQ+7PUKZ9LYv+
- TLSH T1AD457D6A7A6983B4E0BAC07CCA5B894BD67134135330A7CF17865B2B2F777E1197E240
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target mui/default/res/airightsidepanel/doc-classification.html
- Size 1KB
- SHA256 aa7437653b32a6c0c84f57151f988504fcad5bb81ff761dfbfcb0b6eaf3ffa0d
- MD5 8c42ac32cb8bf42e45a6dadeac5cc066
- SHA1 c2f6a98b46f6542064112487e9f6cf8b3e6c3624
- SHA512 8df8cad60bb4890f627265911b37bbf13177819e3df35584f97a444c22c19240d5e5e6b5c4e5df54cb21bd794c99b442f797ddd556777df03419e32c34637415
- TLSH T17D21F08FADF1F03D522335B8566BB10CA138C83F5106ACA0788C97E00FF951D4B26A5D
- MD5 SHA1 SHA512 TLSH
Score4/10 -
- Target mui/default/res/airightsidepanel/static/js/doc-classification.js
- Size 189KB
- SHA256 18df7015ba29bac9a3cc0459a2749352d99a0787c1f589a1ad1aac36e670cd87
- MD5 366613432f7cc34fba6138f62f754f1d
- SHA1 7c77107082bda09b02e45e3f93b898dfdedb2298
- SHA512 fafdc73ed33aac1c4453916da556eba296e25951622a89eb35ab779744fea9980a1251d8186b21c5f304e93568af958fca9370f7204946e6014edd6663062c10
- SSDEEP 3072:RxerHDsgvk0dXsKqx9X3wYfjchG1UU1RfUxOqcVEVXn:RxQHYg7XsKqxNwYfjJTdUxBV3
- TLSH T1C514089DB2D5B07107E720B5416F500BF276A969B80E85E0F236E8D57CB888D906BF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target mui/default/res/clouddiskhomepage/history.html
- Size 1KB
- SHA256 7a259af2a783eafbffdd8ef41eaba0eb6655a4a3a5c1b2e39a6005d2cadc06d9
- MD5 59654a7a4c8d17d0d9f63c45ca3e4fb9
- SHA1 8707ba995944b33facb6b0bc3ad6e19d81b28ebe
- SHA512 440cc7356527a201d7a9bcb189794fcb92d93a6ca66f4559ca174e5eca3472454776d95a79f5481ee11878c3004831bca7e8b73bdec60de97bbb7e28ba4c7908
- TLSH T13A31768EBDA2B07A513273705A2BB00CE7758C3F510244A078CC89B80FF74194759E5D
- MD5 SHA1 SHA512 TLSH
Score4/10 -
- Target mui/default/res/clouddiskhomepage/index.html
- Size 1KB
- SHA256 78b2c10364bc863c4f28ab980cbcc3093b4206865d7578dce35baa1f935093ed
- MD5 503ac391e9357ba4586c3357fd6596e2
- SHA1 a3914b5c78e47885824812521622065b36698e23
- SHA512 91d7d3e1f68a6192d0e13c9a79d119bcf76a8b538c2973e4d2adc79e16d6aed2d3b0216016c1acdb54aea88266255ef7f9800f64cb213577de3a5ed43036bc50
- TLSH T11531768EBEE1A13A8563327C12BBB10DB538C43B5042E9A0744C82D40FEA5294A19A1E
- MD5 SHA1 SHA512 TLSH
Score4/10 -
- Target mui/default/res/clouddiskhomepage/sidebar.html
- Size 1KB
- SHA256 cd9260ff7d407ab872831e62336bce76baa79cdf41d3f865028aeb0c246ebd50
- MD5 9033fdbb7bb3177ccee93e4002c4aa1d
- SHA1 bdbd9852c5a373ee0d4e942cccef772189c8a440
- SHA512 330ac32a6484d611d15050b7a94764215d83964c2d9f8341bdeb2cca36c77812122d6f6362d639808ba2469240f6f31f297ebe1c5979e3f5a23f07b2be267e1a
- TLSH T1D731864EBEF2B02D2323316C566FB00DA27CC87B51029C60744C57E40FE961D4B59B6D
- MD5 SHA1 SHA512 TLSH
Score4/10 -
- Target mui/default/res/clouddiskhomepage/static/js/app.js
- Size 216KB
- SHA256 11a2919f3fce69df78771dac6b83081561b34fbfcbac8ac40679565faeae3fb2
- MD5 9e84052bc8828f0f8670ddc417529a44
- SHA1 3d5338e955d3efee406d110a89acd30bc429aeaf
- SHA512 da40ee95da60f39908892e94beaa12e00f8bbd5b5684cb2084262147493098ea923cc8095b260c028c7f2ca0b7347bd4de5b89b79fdfac96ed1cb9435b234cbb
- SSDEEP 3072:jKvhyaKeJL6Hki0aKcxKCZYp9zXmc3nfHYBMj/PHBvPPzqDC:jKjBJuKcxtgwKRj/PHhP
- TLSH T1562406CD3185B07107E771B6402F200FB2766968AC4E8094B236E8D9BDB994D527BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target mui/default/res/clouddiskhomepage/static/js/history.js
- Size 210KB
- SHA256 9044b92f23752c7d4bc28260ee090e96b7fb0e5bcf675e4b34914990c74f9717
- MD5 f69de770876312e9972a06edbea3cf8b
- SHA1 e72e93e4dd4dc5ab478e728c15ee1cd76cb62098
- SHA512 2af154b844a7e46d23432aa19c9224f561887876f4e3078f0d4185a43b139e7d8074112ce351a4ef0b0ad9947b37aca06b12d2d565936dbae93843d32ace3504
- SSDEEP 3072:8iPb06Is1WzIWAYtz0b1XxRHoPnQXCZEXqaA9ug1o:8iPAU1WEZYtz0TaB+QA9
- TLSH T18E24F78DB182B47107EB20B5813F050BF23A6965A80F86D0F236E9D96D7884D917BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target mui/default/res/clouddiskhomepage/static/js/sidebar.js
- Size 172KB
- SHA256 504ebb90b49dc8fe05ef26f9949208f46c54775f15c86820723fab35849a0114
- MD5 f9ab86728f7c8b0f5215eee70cd70ebf
- SHA1 1e51050f603a53addc7c14657507ddd4d2e27eef
- SHA512 958fdd82620f3de97b61e5879a9a9e00d6ed7e06da31aa910eca870584902136f3f4b30e99f6138e471a2e28eb69347fd104e287588290ece6eca6381be7049f
- SSDEEP 3072:qXZLaEGB8MFMKcxQYPl3nFVe3TGm4NMBffqnR:qXZLLGOKcx9lH5WBffqnR
- TLSH T13704E78D32D5B0B243E721B2403F600BB37A6D69980DC054F126E8E97DB995D926BF3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target mui/default/res/clouddiskpopup/index.html
- Size 1KB
- SHA256 053386f883f96e43afb27948ca5aa242713c7bd12a047452fe3646d4e73b16e4
- MD5 92e382532aeed2a8a111634e955fdaf6
- SHA1 43554a3b58884dff198160fe3853bf469c7cb961
- SHA512 dfb16c53677d02daebd058689c4958c3fb8678bdeabb23fe01cb93f03de13f71a3adc99de9bcf76386587489ba3c49d7dc3f158f244476b572c84310e5c98212
- TLSH T13D1142127901D14D2A70DE82A638B62CD580F5A47A61C460F2E84A8DB9C83DC5B39145
- MD5 SHA1 SHA512 TLSH
Score4/10 -
- Target mui/default/res/clouddiskpopup/static/js/chunk-vendors.js
- Size 133KB
- SHA256 f5d715ae25afe47c9360bfa1700afb678c739cbdb63567a2038021536048d269
- MD5 61cccf098cb86920632c9be01c5769af
- SHA1 a3f08813ca5a8c206950e3c90341ddd09fe529f0
- SHA512 5a424163bd063ab3e7866f78ff1e88e464f28e91f038bf70c77d63cd29c490776f8dab25db69d7e02558e9976de1744f8a9d136c5dd2fc82450bbae11a24a55b
- SSDEEP 1536:9FwgeEUUXNGB2iqurxJMQz++nnHVsufqL5bJyeTpMuTc:9/XN1iquVKT+nHVsufqL5bJyvd
- TLSH T1DCD3B38DF2C6B0A123E731B5416F660BF277A954B84AC5D0E226E4D4BC7894E512BF3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target mui/default/res/clouddiskpopup/static/js/clouddisk.js
- Size 13KB
- SHA256 c41cd4c63c7c45069e7ecd874c253b4948c78c84db89bf1bc40fbf983f795ff1
- MD5 55d008ff955d816996752fd1a76760b5
- SHA1 c734d7ed5698fd5afccea68b96e44d4d94c3522a
- SHA512 73332f9e46914a9a04d4a07c3fc5e0b0f24f058fca183971652fe028fefb19f95d3832589418d93a00377e768ccbaccf73ba6948c55379bed7652d20d67040bc
- SSDEEP 384:fDuX5HicC82vZKlZeH2xj5vaFt6k5BvzBB+:W0cC82vZKlZeH2xj5vYL5dzf+
- TLSH T16B52D68CB8CBF9681B527039143F6955F2A22C84DCC5D981FA34C1E29E74D69363AB7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target mui/default/res/cloudfolderpage/index.html
- Size 6KB
- SHA256 49ef8d6ab803c6c6af800d0982d2dbd30ebd4b413db6b80430aac8858ca1af74
- MD5 5e45f99f17baecdcc36b6e28e4dfee1e
- SHA1 b11222aa0c5b11c5e6daacb11a001e1d8775aef5
- SHA512 c78929927c6c5904096cb8bd9227f257727ba803cb44e763ce0e722635caf9b2e89c73ce66d98fdf8805423fe4152566a4f6a9b3361d73efc29cf0d55c46abb7
- SSDEEP 192:g6L6M+SV3debHJZJgXK8a+86AyKDLo72ADpSdVl:FmJ2N3Z6
- TLSH T118D18636F810D15F7A274F8F6774AD78D0012EFA01B8999060B29C9F86D96894CBD87F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target mui/default/res/cloudfolderpage/static/js/app.js
- Size 380KB
- SHA256 31b1912573cb7546c0fd89b5f1c12d295d6ef25c56dbf68bd6604eab34f2a3cd
- MD5 bb9df3e601adeb0a7987bef31928f92c
- SHA1 61e273513a1a60a36bdef24c87ce0b37da8d605b
- SHA512 6ab20eabc4cbb712a9abeea8d12fd3bcef89401eed225b50cf049dd19187d4f86fdea10c43cf1bc6c7272582beb3918e443032b5a06a035288e59bce5564374b
- SSDEEP 6144:5pK457wXrka10TbOXsEYpHBBs6Ve5NtXoqIpgznl87A6v0eX4AiDuViQbgQgILTR:64G0WtYpmiLlTD8QmIqUbNBqq
- TLSH T1BD846C4B758BBB5A1F35B66340DF3C88D01C6EC09812A5C9FABDD9D09144B9A32D63BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target mui/default/res/cloudfolderpage/static/js/chunk-vendors.js
- Size 249KB
- SHA256 7d05683d8cb8055b00f58e8261786536ba7e59cc05d1afa0fbb032a4f6e657e0
- MD5 6351ea268f992f52e0f4418a7028b91d
- SHA1 5bb3cb88465c550a1fd033a079a8b2eba5e071b8
- SHA512 44940d07abfdee6403e9400e596ac5e5eb234ba77a1c90c2fe4086878c12f4805c709eb84538071f21d5710d3569d342e7caea10061e2ab2661c5117c5966297
- SSDEEP 3072:p+Xy2rHhkiTtcsuaIwK3zqDLW/ix3Iu7doNFBWgz/bwUzxqcG7gLEOhA:phKHhklsi3zpCdoNFBHz/bwAfG7cW
- TLSH T10A44F8CDB2D1B0A517EB61B4813F610BF27B6499B44E80D0E226E5D4BC7998E9127F3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target mui/default/res/cloudfolderpage/wps-i18n/chunk-vendors.js
- Size 424KB
- SHA256 35657b23ae75c5808c921aaa9bcb5b4a31096b344fa792a14c0b4f7817fb2d1d
- MD5 cf29fba214e7f43f2ca1b629109d126b
- SHA1 d0dda9486528586af6943abe7a3afa319c790f25
- SHA512 2ad7e4711f5917b8d13f861d4fb2688e6ce3951da43a89263a2d9743199e173429398ec1a9537b1df25593d3999dd34fb590e2d2a6e7a632ccc44265d93c3bca
- SSDEEP 6144:z8KzCOcC0CXWsJvRekr0dgei/zJbBoCF7az2bzNM:zbzCODTWsJvRbw6zJbBfaz2bC
- TLSH T13694198DB2C1B0A517EB60B4913F610BF23B6469B44E80D4F266E5E57C7898E9127F3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10