f84d509407226efe6fb63e77746f74404a527e12aa977453cb39878c7daa1ef7 | Triage™

Login
Reports

Overview

overview

6

Static

static

3

wink-ai_se...er.exe

windows10-2004-x64

6

wink-ai_se...er.exe

windows11-ltsc_2024-x64

6

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...rt.exe

windows10-2004-x64

1

$PLUGINSDI...rt.exe

windows11-ltsc_2024-x64

1

$PLUGINSDI...64.dll

windows10-2004-x64

1

$PLUGINSDI...64.dll

windows11-ltsc_2024-x64

1

$PLUGINSDI...rl.dll

windows10-2004-x64

1

$PLUGINSDI...rl.dll

windows11-ltsc_2024-x64

1

$PLUGINSDI...rt.dll

windows10-2004-x64

1

$PLUGINSDI...rt.dll

windows11-ltsc_2024-x64

1

$PLUGINSDI...64.dll

windows10-2004-x64

1

$PLUGINSDI...64.dll

windows11-ltsc_2024-x64

1

$PLUGINSDI...40.dll

windows10-2004-x64

1

$PLUGINSDI...40.dll

windows11-ltsc_2024-x64

1

$PLUGINSDI...00.dll

windows10-2004-x64

1

$PLUGINSDI...00.dll

windows11-ltsc_2024-x64

1

$PLUGINSDI...b1.dll

windows10-2004-x64

1

$PLUGINSDI...b1.dll

windows11-ltsc_2024-x64

1

$PLUGINSDI...ne.dll

windows10-2004-x64

3

$PLUGINSDI...ne.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...pm.dll

windows10-2004-x64

3

$PLUGINSDI...pm.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI..._1.dll

windows10-2004-x64

3

$PLUGINSDI..._1.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...rl.dll

windows10-2004-x64

3

$PLUGINSDI...rl.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI..._1.dll

windows10-2004-x64

3

$PLUGINSDI..._1.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
wink-ai_setup_installer.exe
Size 9.7MB
Sample260620-bbk9lsdy4s
SHA256 f84d509407226efe6fb63e77746f74404a527e12aa977453cb39878c7daa1ef7
MD5 0dd26020d88798dfd901f4038665d7e9
SHA1 9fa72245229cbfe883e491c299d446ef88f26dd2
SHA512 242b33f04654197b6fda8d8c1c0840e64b15a433c0dfc10bb40f5df5e84a2c31981750177805960746f59692c488071685170ba61f0695fc34a382b222e27238
SSDEEP 196608:30IBuux9WbkhceY1KoyYD8h/dhpRdA0NGZn+uWj5hFgxVfoKO:NBlx9WbCcefwM13AwGZSF21o3
TLSH
T1BCA63302A6D52C21F49693BC8F62CA366313BCC92E35C25E66D0BE677A7F2531D50873
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

bootkit discovery execution persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

wink-ai_setup_installer.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

17 signatures

150 seconds

bootkit discovery execution persistence

Behavioral task

behavioral2

Sample

wink-ai_setup_installer.exe

Resource

win11ltsc2024-20260618-en

windows11-ltsc_2024-x64

16 signatures

150 seconds

bootkit discovery execution persistence

Behavioral task

behavioral3

Sample

$PLUGINSDIR/BgWorker.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/BgWorker.dll

Resource

win11ltsc2024-20260618-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/DataReport/MTDataReport.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/DataReport/MTDataReport.exe

Resource

win11ltsc2024-20260618-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/DataReport/libcrypto-1_1-x64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/DataReport/libcrypto-1_1-x64.dll

Resource

win11ltsc2024-20260617-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/DataReport/libcurl.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/DataReport/libcurl.dll

Resource

win11ltsc2024-20260617-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/DataReport/libdataReport.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/DataReport/libdataReport.dll

Resource

win11ltsc2024-20260617-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

$PLUGINSDIR/DataReport/libssl-1_1-x64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

$PLUGINSDIR/DataReport/libssl-1_1-x64.dll

Resource

win11ltsc2024-20260617-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/DataReport/mfc140.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/DataReport/mfc140.dll

Resource

win11ltsc2024-20260618-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/DataReport/msvcr100.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/DataReport/msvcr100.dll

Resource

win11ltsc2024-20260618-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

$PLUGINSDIR/DataReport/zlib1.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

$PLUGINSDIR/DataReport/zlib1.dll

Resource

win11ltsc2024-20260617-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

$PLUGINSDIR/SkinEngine.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

$PLUGINSDIR/SkinEngine.dll

Resource

win11ltsc2024-20260618-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260617-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

$PLUGINSDIR/libapm.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

$PLUGINSDIR/libapm.dll

Resource

win11ltsc2024-20260617-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

$PLUGINSDIR/libcrypto-1_1.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

$PLUGINSDIR/libcrypto-1_1.dll

Resource

win11ltsc2024-20260618-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

$PLUGINSDIR/libcurl.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

$PLUGINSDIR/libcurl.dll

Resource

win11ltsc2024-20260618-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

$PLUGINSDIR/libssl-1_1.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

$PLUGINSDIR/libssl-1_1.dll

Resource

win11ltsc2024-20260618-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  wink-ai_setup_installer.exe
- Size 9.7MB
- SHA256 f84d509407226efe6fb63e77746f74404a527e12aa977453cb39878c7daa1ef7
- MD5 0dd26020d88798dfd901f4038665d7e9
- SHA1 9fa72245229cbfe883e491c299d446ef88f26dd2
- SHA512 242b33f04654197b6fda8d8c1c0840e64b15a433c0dfc10bb40f5df5e84a2c31981750177805960746f59692c488071685170ba61f0695fc34a382b222e27238
- SSDEEP 196608:30IBuux9WbkhceY1KoyYD8h/dhpRdA0NGZn+uWj5hFgxVfoKO:NBlx9WbCcefwM13AwGZSF21o3
- TLSH
  T1BCA63302A6D52C21F49693BC8F62CA366313BCC92E35C25E66D0BE677A7F2531D50873
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

bootkit discovery execution persistence
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  $PLUGINSDIR/BgWorker.dll
- Size 2KB
- SHA256 50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
- MD5 33ec04738007e665059cf40bc0f0c22b
- SHA1 4196759a922e333d9b17bda5369f14c33cd5e3bc
- SHA512 2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef
- TLSH
  T1C351B72E612C0BFFC2963C34BC96795B1B6FC060A39A6328813FC5853C141B4233DB2A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/DataReport/MTDataReport.exe
- Size 36KB
- SHA256 2b27e97dae7527f740a33d426b2c462c6e9a0848012ba62f06b5b686be0b670c
- MD5 cefd22c413b7c363358c26d61471a17d
- SHA1 ff48bf1f591a533019728fb28b678b0bf41bab7d
- SHA512 19c17d7e031c8bd4018d932e5c28da48b2fd3fa39177b6d58513e9712f15b58d72b2f2e9510dadc324b722d3fa5f6e2bb3e703e8fbdf1c18f221279784ab611d
- SSDEEP 384:uwAwu+rldjt6LGErtcqxFp5EpNrQuKrQsLpfEVAWxc1o//M3sfGO3jhBHQIYiig5:2wvguPopLxE61/3JKD5YiiG5AL+
- TLSH
  T16D039D17A38908EAD61FC63AC0966D27EA71759907B1C5CF03A082321FA23D07F7E359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/DataReport/libcrypto-1_1-x64.dll
- Size 3.3MB
- SHA256 c16bd443c9c63dfefa31f594ffdc062d29ae557178b98151e018b662ff3696cf
- MD5 644a530b1e9ff757e5cc23ed3e297738
- SHA1 fbe1836a8156aa4e2513fb40b1213a86edc93e92
- SHA512 9480450d7b5822799ef5126f7b4455533b886a52fb79c0d1d4e353af78c44e887cb9fc27bb1714c747ff50bd2226c77c2cb472fb36c7cfd29b8141f90a2dedc7
- SSDEEP 49152:PVwASOb5IU6igBGtlq6RC4A8AcvZJhTSYJtrp5Mg/kTgByNPi6qsCgN1CPwDv3ut:T++ecMYSsBy46qsd1CPwDv3uFfJh
- TLSH
  T19FF57C5AA3AC0185E5FAC17CC9574737D3B1B41A97B09BCF18A6C1780E23BD72A39B44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  $PLUGINSDIR/DataReport/libcurl.dll
- Size 495KB
- SHA256 b64229ace277bd01dac475ed99418d43b42d6ca25cdf3ded33d818542562f4c1
- MD5 3144ddf5d3d20883f37ac9505a26ffb3
- SHA1 eef3ae0cdb83d1dea1bc6588ab8ee1611aa0c12a
- SHA512 a24275cb60059c59465a8f0f3a78962b922144ec3a79012e2a1b5eaf77fa430a88838a941c9e06c61463601fe4e33db51fd06fa5fa61a5685222b1e41cf40dba
- SSDEEP 6144:+WIhnoY9Y9393wg5F8QHpEiPrxuvIHraxJJ+p0hyNcEHhQt2IIbWqhvLrxE1:+voY9Y9ag38QHmwIaraXJo0hyHDzfxE1
- TLSH
  T197B46C86A7B515ADE667C03CC6038A17E6B2B4551310E3DF07B4CBBA1F23BD9663A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/DataReport/libdataReport.dll
- Size 1.3MB
- SHA256 718267f05fae12d2f2686d83d9b00b46973eff786060b65ebc1a1cca52c93803
- MD5 d68fbca8c84983b975e980e0913b30ba
- SHA1 520675a0ce665324d0cbba56e03a3684c8621c7a
- SHA512 99d9c404fbf7062bd46fd5fc2a8773764ffafe365bcbde1da3376190f73db317d0ae7cb9432ee65b0edc1c08caef899300f126641e6c0af10791a4aae872d3c2
- SSDEEP 24576:KfcqZtOB0+dRAGUHiH3PxYXs76cngC38AcBiULPdANG:Kfcq6BF3vPeXs76cgCMAcBinG
- TLSH
  T1C3659F5BB27800ECD56BC1788A5B4A07E7B1740213609BDF57D4CA692F67FE12A7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  $PLUGINSDIR/DataReport/libssl-1_1-x64.dll
- Size 685KB
- SHA256 8e8cd9173a37dc6ca2171e92ee9e1d43c961bf310741f9c2319e2e165d7e2c94
- MD5 ef7eb4d42f6faf27d84af9daa100aca3
- SHA1 90fbb6793bafb8f13790158e27caf3c900739c05
- SHA512 051daa987d8110d453e3aef6f1888f0dfb174e4ac04db7bb131ba5a0ee96af29676d86e1c870c45dd4dac85de0d77cb11cefa9c0879cae74f76cd7e28a175de9
- SSDEEP 12288:BlRGdmD0Ej9u0kxI80E5edtkGA4YgJDU4syPq7n5yuKrNosOU2lvzR:OwDpOI80E5TYq7fsOU2lvzR
- TLSH
  T1D3E43A95ABB51499D9F2C17C8A534A33E3BAF4141330AFCB1665893E0F177C82B3A758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  $PLUGINSDIR/DataReport/mfc140.dll
- Size 5.4MB
- SHA256 97d6a39de327ccdfeca2bdca784eae72f0e698d022caa7248b2926059b6ffa95
- MD5 5235f67f1c2ce5cbcfd714ed7a391805
- SHA1 8564f447e5fc61eec2262933b06053d2d7548624
- SHA512 c1b8e4f88211fa66774ea55bf096004958e01bdf2167c5ebc7bce9b8aab7b33372c5c2c56d37f558ba24d30befb4b423111d3b5efbb14d20abcece5614bf227d
- SSDEEP 98304:JTq+VwdZ5xIZAhFLOAkGkzdnEVomFHKnPe:J7wdvmZAhFLOyomFHKnPe
- TLSH
  T1CD467C467AAC0094D9A5D03A89578D0FD7B2FC10132293CF013667AEEF377D24A7AA75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  $PLUGINSDIR/DataReport/msvcr100.dll
- Size 815KB
- SHA256 8c47adec5f070119fd21d70d0e68e10e458085c7e2352e381a7543158f59d066
- MD5 e78743e252aa344fdf0a68d07c62a4d2
- SHA1 25bb54b369eaed5c9d8a94c2327d4b93f7a434d8
- SHA512 49037c7a92fa7f715b2d339c0eeda71ffec92a3f8a63bd0f58c142f56c9e75fc243126d3e657e5c91da098060fcdb28c9451ca6321399367dda233517676f226
- SSDEEP 12288:JgzGPEett9Mw9HfBCddjMb2NQVmTW75JfmyyKWeHQGokoZ:ezJetPMw9HfBCrMb2Kc6dmyyKWewGzm
- TLSH
  T138059D9536A907F6D137D63DC996D606E2B2741513315BEB01A08BAF1F23BE09A3F312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  $PLUGINSDIR/DataReport/zlib1.dll
- Size 99KB
- SHA256 e4c7609ab7a33db2321d901f795be8ed72298d04255479e1890c5e131854efc3
- MD5 2b2876a78b1d1b92680d8b5a59f1cff4
- SHA1 e918a6fae823f60766f8fbfd45471a18165e6437
- SHA512 0748f71914af59b2cee77cb602eb022650feeca2a6c63c65a862ac4ef836f3d6bde99e7304546c851a74ca8fb870553b42824cd57ce367c0f7bbec59ca16752a
- SSDEEP 1536:3qIrsaZccevSHLfhp9y2nCf6uKIOcIOZ20tpyR7+IC:3frsaZc9Srfhp9wf6uYSZ20t0RqIC
- TLSH
  T164A39D959AB01266CAB78474E8C247AED775B01403E04BDF924C976A1B23BD02F363FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  $PLUGINSDIR/SkinEngine.dll
- Size 3.6MB
- SHA256 eb5ef4810170d5e6dc0eeaac0759a00e0b2a5c8f2ff8c9f0694e3a288068d15d
- MD5 3018eb1a619a80115b666027b19523d8
- SHA1 3bd2e4ff78a204700f5bb7bf651b9dc42680fd1b
- SHA512 4293cd57317451069085eddf4acf688d1fd50d840191a38a897cec1d50162a73862f33053bc0de952a82661e182c6087931c74b25f802e6a329b7742c208be6b
- SSDEEP 98304:nHfN76ARd18m4ea5dlnJDMteXyRvbAa37RLvhYEGb1w9S:n/N7Jr5q5rJGbAa371h2bx
- TLSH
  T1A206AE6A39900036E12B0334D919F3F8F5AD9E690679C98732E4FE1B39358C69D1E16F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af
- MD5 bf712f32249029466fa86756f5546950
- SHA1 75ac4dc4808ac148ddd78f6b89a51afbd4091c2e
- SHA512 13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4
- SSDEEP 192:0N2gQuUwXzioj4KALV2upWzVd7q1QDXEbBZ8KxHdGzyS/Kx:rJoiO8V2upW7vQjS/
- TLSH
  T1DC3229328B60C1F2D561C274496B3A3367B9761420B04D67DFB78446EC16AD66E3E327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  $PLUGINSDIR/libapm.dll
- Size 112KB
- SHA256 830e35fb691d8beb9754e875dcbf35d9cc6a4e5bb6b9deefde2c875fedaa4578
- MD5 635054c4269a1ed1699b219c3315920f
- SHA1 1c8a468d782a4784551fdf173be17dfbe383381e
- SHA512 c749b40957368aa44bd373ccd8b91734234af357f948e0d608853da1ad6b2166d174ecb83da0b35be8b1bd7523fb8e5f84ebc260b6ab446adb357a32edf27971
- SSDEEP 3072:kLcmYUdFU+Jt/JtgTSXUMhyhEnv7FsPG8eWAZ:kLcU/JtghIWPGFbZ
- TLSH
  T143B38E223901C072EBC603B598FD6F7E977A91248F6155C36788AEB54E143C36F31A9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  $PLUGINSDIR/libcrypto-1_1.dll
- Size 2.3MB
- SHA256 53b122b5293956e2d4465ece8a1300ac9846c2e3a43a2a8d93d855636a832838
- MD5 e11cd60ae0c2cd42199c6fb6da3ef91a
- SHA1 0a1ed51e2181475d82840c798e8cdfe5bc2ebcf0
- SHA512 c6374e782c463bbfdfe0dbd8548e4de2a61af0291d4796a47c116e410279cfabc3e8acf6bfc3543701888da8df91432e2549cbb2fa59781c5805076dc00b31c5
- SSDEEP 49152:J1Q1lkJCOMSnvjCDJ8qS1CPwDv3uFfJ23tAW+Fy:TQ1lkgmbCDJ8F1CPwDv3uFfJ2n
- TLSH
  T13EB5AF03FB931591E9CF863C12EA573F8F365B189328DAE3C96168A1D8256C1373E395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  $PLUGINSDIR/libcurl.dll
- Size 450KB
- SHA256 d82bded85e43536ea898cdb76a235c583c08d2dcd9611d563f8b341209ca196d
- MD5 371023b8e11230203e159a773653ba7f
- SHA1 72d7cd69c65811b1e353b2a628eec5b9901244b2
- SHA512 33a98e23c4995ef238621378e5bb1602ff96a8fe295a6d93b685114ef953c2644a10e0859aad8696446a414366ea7e04a2f2fab037004bc1b9c3941a3b6a75aa
- SSDEEP 6144:7yECsUHYb/NvnMnVg/LMne9bpznlZSa22gbVc3kSkOjg1Vb/6ncAOITkGU/TH8u:7yRsUHmVv7EiDSaxWuyb/+nAH
- TLSH
  T17BA44A62F841D073F9D60072B2FE0FB7ADBD5139132DA0C3A39158B56A605E2B63D74A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  $PLUGINSDIR/libssl-1_1.dll
- Size 507KB
- SHA256 92b09d331e0ebc95917370a47d37e2dc2c38e46781421c3b2110a00ca03af014
- MD5 ed21361b4e3df5b152b21e028102184c
- SHA1 154ac550f74b74dcf068ab52ba4df0614e6e690b
- SHA512 7ba28f33a1cdde8ebab35876f8d5888465fb280c5884b72c7c9beae1b817c9a83a5eb82eed4f49ba2d3302395866d4c2b049503edfb78da90786f288a90bcdde
- SSDEEP 12288:6wOl1uJlskb9gUYRHLpJG/A0XOMIMMvWgG2EU2lvzlJJ1N:XOaE0X9IxBEU2lvzlJJ1N
- TLSH
  T155B45D52FF461EA2E8CE85BA51AB17BE5E39A7212314C8D34B911879CD623C1533E3DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitdiscoveryexecutionpersistence

behavioral2

bootkitdiscoveryexecutionpersistence

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy