7251ba126b4a8dde03ee466a27966b7d07a2dacbfc654a6e6c1585463c6596da

Resubmissions

20/06/2026, 23:42

260620-3p99faat5r

20/06/2026, 23:23

260620-3dgsraa16v4

Sharing

Copy URL Twitter E-mail

General

Target
PhotonConnect-V1.zip
Size 460KB
Sample260620-3dgsraa16v
SHA256 7251ba126b4a8dde03ee466a27966b7d07a2dacbfc654a6e6c1585463c6596da
MD5 b0ccf90458e39e22ef4d666960bc1c97
SHA1 54117542b115f38ee35d165f1ea606404bba3c97
SHA512 9f46fe3c5d37b079bf9fde26864c344153f18151385570764f43637b0ff58362307a50b067c52c455cf0681378e079868fd7aa05cec1d67227338cddea9aca67
SSDEEP 12288:Keyz0xcVh8+q9IA77aGjrWUlqeyz0xFVM8+q9IA778/jrWUlK:0HVq9Z77aGjJSVq9Z778/jW
TLSH
T1C8A42374BA9521E1FF0700704EA2FB92E4C9676144E26E5A1459E2E0357ECFEEC12ECD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Targets

- Target
  PhotonConnect-V1/PhotonClient.dll
- Size 185KB
- SHA256 4591062e25ab7d0f64a2de55267105be22fb19a1edcb954b20596abd24668f5d
- MD5 52fc4ae9c7c29bf786fad5847e2a4724
- SHA1 0a5d7faca0f9cc56610897ab77bd317497064800
- SHA512 653b724fa5311ce69f832a1d63bb96ec1c7486c4649b06e5697f97e5248d0df891f0e1ab665c5f8c4ca0cec4427d03ce701e4680a58944db88f891062fe804df
- SSDEEP 3072:3w8NMF06wuKdnXT+4ldKxO1b4fdtSudUTIGZv5REzhg:3PMF0XTLkO1SMt5R8
- TLSH
  T1D7045B1C13FC8A0AE3FF2B79E47201564BB1B9277A76DB6E184068FE5C427829C91357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  PhotonConnect-V1/PhotonConnect.dll
- Size 48KB
- SHA256 8839f572990b62e92c3a2683c6eb34bbc2981bab14f220bce2a08be1325ec556
- MD5 2b3edfcbbe22a5d0eb29a1ff55f1c61a
- SHA1 be92f8db63573cd795fbc93f1f8e79efc5fbe15d
- SHA512 7e8b79983016ee87e7b35b95f1df3ae5d039d59bcf1f1c700817edce078ac9d6ecde30e7f8c85090bffb3cd87c30d4bc17f3b55c9e122a5ec320d5b2b045153b
- SSDEEP 768:lAtK+4sJOvb8DI6TynDFmA1HSBh0apxoBJ5QS9:lAor6TyDFmA1yxoX
- TLSH
  T1CD23EA0033F88623E6FF5B79297050400B797D63AD31E39C5D9B60DE45A2780B9A6BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  PhotonConnect-V1/PhotonConnect.exe
- Size 151KB
- SHA256 6b25e484e5b3496e930f1f31f68edbd73ed6a765bd127a149798581d0f0e4f1c
- MD5 bebf48173faba31d514c90d57c36d6c8
- SHA1 b71e81a00aad97b7ae48af6b01e4408738af81f7
- SHA512 55aaf4d7132abf84ff2fd391aedb59071685c33233982b5ef51d7c856a6bcfd11efd4acf36c1bcc668be4ccdf8e81ae8f3d6dd1d84aea53e971303da66510957
- SSDEEP 3072:kcr3yCS8dVF4Zj6w+6O9J+yeQLZ5eMd1lZewqKgtg/aaZD2:pVF4ZuJReQV5HDgG
- TLSH
  T161E31906A6AD50FEE2BBA67889520902F7727C564771A6CF03504DBA0F76BD0AF3D311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral3
- Target
  PhotonConnect-V1/PhotonRealtime.dll
- Size 134KB
- SHA256 6961f8ac9ac7d9bc400a593978c95678fde970d1a0e81b48f86a73f26d39adb8
- MD5 383028a06f2f560d6ea1edfc9c04d162
- SHA1 33dea68c1ee9a5227653994b5378f94086b69ccc
- SHA512 febd2256c242d235b58a4828713a87a5463289a26bd3d4a350ab94d38fceebd32065870ca1a1833420c4e0424b5659464ee9a00e2f5ad31df97df619225bb7b7
- SSDEEP 3072:lmfUPKSvFJ1x/P7/PTqb+DifgEdAcb541mDFLF/uZSoKtUnms:esTr/P7/PTOtQcD//uQ9
- TLSH
  T19AD3287C53FC0E99F6EF1778E4B802118BF2B901752EE72E9E44A8DE48A27848511777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  PhotonConnect-V1/net9.0-windows/PhotonClient.dll
- Size 185KB
- SHA256 4591062e25ab7d0f64a2de55267105be22fb19a1edcb954b20596abd24668f5d
- MD5 52fc4ae9c7c29bf786fad5847e2a4724
- SHA1 0a5d7faca0f9cc56610897ab77bd317497064800
- SHA512 653b724fa5311ce69f832a1d63bb96ec1c7486c4649b06e5697f97e5248d0df891f0e1ab665c5f8c4ca0cec4427d03ce701e4680a58944db88f891062fe804df
- SSDEEP 3072:3w8NMF06wuKdnXT+4ldKxO1b4fdtSudUTIGZv5REzhg:3PMF0XTLkO1SMt5R8
- TLSH
  T1D7045B1C13FC8A0AE3FF2B79E47201564BB1B9277A76DB6E184068FE5C427829C91357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  PhotonConnect-V1/net9.0-windows/PhotonConnect.dll
- Size 48KB
- SHA256 8839f572990b62e92c3a2683c6eb34bbc2981bab14f220bce2a08be1325ec556
- MD5 2b3edfcbbe22a5d0eb29a1ff55f1c61a
- SHA1 be92f8db63573cd795fbc93f1f8e79efc5fbe15d
- SHA512 7e8b79983016ee87e7b35b95f1df3ae5d039d59bcf1f1c700817edce078ac9d6ecde30e7f8c85090bffb3cd87c30d4bc17f3b55c9e122a5ec320d5b2b045153b
- SSDEEP 768:lAtK+4sJOvb8DI6TynDFmA1HSBh0apxoBJ5QS9:lAor6TyDFmA1yxoX
- TLSH
  T1CD23EA0033F88623E6FF5B79297050400B797D63AD31E39C5D9B60DE45A2780B9A6BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  PhotonConnect-V1/net9.0-windows/PhotonConnect.exe
- Size 151KB
- SHA256 6b25e484e5b3496e930f1f31f68edbd73ed6a765bd127a149798581d0f0e4f1c
- MD5 bebf48173faba31d514c90d57c36d6c8
- SHA1 b71e81a00aad97b7ae48af6b01e4408738af81f7
- SHA512 55aaf4d7132abf84ff2fd391aedb59071685c33233982b5ef51d7c856a6bcfd11efd4acf36c1bcc668be4ccdf8e81ae8f3d6dd1d84aea53e971303da66510957
- SSDEEP 3072:kcr3yCS8dVF4Zj6w+6O9J+yeQLZ5eMd1lZewqKgtg/aaZD2:pVF4ZuJReQV5HDgG
- TLSH
  T161E31906A6AD50FEE2BBA67889520902F7727C564771A6CF03504DBA0F76BD0AF3D311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral7
- Target
  PhotonConnect-V1/net9.0-windows/PhotonRealtime.dll
- Size 134KB
- SHA256 6961f8ac9ac7d9bc400a593978c95678fde970d1a0e81b48f86a73f26d39adb8
- MD5 383028a06f2f560d6ea1edfc9c04d162
- SHA1 33dea68c1ee9a5227653994b5378f94086b69ccc
- SHA512 febd2256c242d235b58a4828713a87a5463289a26bd3d4a350ab94d38fceebd32065870ca1a1833420c4e0424b5659464ee9a00e2f5ad31df97df619225bb7b7
- SSDEEP 3072:lmfUPKSvFJ1x/P7/PTqb+DifgEdAcb541mDFLF/uZSoKtUnms:esTr/P7/PTOtQcD//uQ9
- TLSH
  T19AD3287C53FC0E99F6EF1778E4B802118BF2B901752EE72E9E44A8DE48A27848511777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8