Overview
overview
8Static
static
3OpenCvSharpExtern.dll
windows10-2004-x64
1OpenCvSharpExtern.dll
windows11-ltsc_2024-x64
1Spectrum.exe
windows10-2004-x64
1Spectrum.exe
windows11-ltsc_2024-x64
1cimgui.dll
windows10-2004-x64
1cimgui.dll
windows11-ltsc_2024-x64
8opencv_vid...64.dll
windows10-2004-x64
1opencv_vid...64.dll
windows11-ltsc_2024-x64
1General
- Target Spectrum-v2.4.zip
- Size 37.2MB
- Sample260624-sd558scz8x
- SHA256 d3b4c4fdf10ddec2e6c73cee2c1b21e8273aed12555cb0a865b56413bf80157c
- MD5 87c2a5da45b4d8fdb9853d6156c86633
- SHA1 58106b30f611f843ab6a7ea7dc64e270d63dcddf
- SHA512 9e41485e919a3e31eba63cf3dd4365e9145e9636f37d0bcc75dcbdd97d16a5ca64b73e54440cb7d90a15dbbdf8a18d776dd392d8e7a57dfa63667dd75e11d5a5
- SSDEEP 786432:KsVA26vJjHanFYk/uJpBYxuUQGmMvz8gLxoz83OKQblyRVKUElRpyUoVzHC71hNb:KsV3iJyFcNUQGpz8k7OHefEcU8zHAJ
- TLSH T1DB873385F8E9D22EDD98D832D4EB6CDB9DE1A114241708ACE65F631E4E8D79374EB030
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
OpenCvSharpExtern.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
OpenCvSharpExtern.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
Spectrum.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Spectrum.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
cimgui.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
cimgui.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral7
Sample
opencv_videoio_ffmpeg4110_64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
opencv_videoio_ffmpeg4110_64.dll
Resource
win11ltsc2024-20260617-en
Malware Config
Targets
-
- Target OpenCvSharpExtern.dll
- Size 59.2MB
- SHA256 c4aaa6233903b43b305773fb2d779ef23e814ce832e29b96791e3ac03e69f58b
- MD5 e07a751bb39c5923d834c8de2548bc83
- SHA1 97273b1df028026daaf1ffe67a50f308b8c1de08
- SHA512 2589432b8d3d557f05d94a48e34d68a3ace6aaaa185b0af2c0a22bd787123540e4885011d421bd5bbf69fa991939c628f9150f2f7a9ff211e32ec1b5c5f7a496
- SSDEEP 393216:Wp5yDgFV5WSVNf2UTw/4+9RcalEzTluxbZdmIPLiAUfmcdCh9DPQ:WpnTTg4uLJkGx1Q
- TLSH T1C2D79C86F1A6219CC46BD074826BB713FB30381943645AF757D1CAB42E27BD07A7BB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Spectrum.exe
- Size 3.3MB
- SHA256 95d544d8011571bb3ced5787aa02f63ed0ef3e44d1c7945b1d7a28e464d67851
- MD5 062249c9949095aa572d8eec67531705
- SHA1 e648be93b7a61acd12c21a3bee6c2911a4fe7660
- SHA512 6bfc626bbdcbab7757ac6839c37cbfd9ee94aeee4554157a7477aa46d81487f86f386c6cd910b010e786d4017f074d84e76a95ad2f36ae35d3bcb5c08c86563d
- SSDEEP 49152:li+wEbOl1m4Tf8Ul/NAgEhpxl97V0rEI/avPbzbQIR7jB7bjMsIlhgg:9wE41tbxLEhN97qrkPbdjtCCg
- TLSH T1BAF52215A3E8062AE1BF4B7A99710542D731B4979B23E7CF36AC50AD0FA7BC05D24723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target cimgui.dll
- Size 1.4MB
- SHA256 60ec992bcebd354d59f235ed97cdc3b0eea62c2def53c4a71f22937e500fa80b
- MD5 7225d6dafc75934427c75401a2093b1c
- SHA1 2f8dff8ed737b9277ca77f4f155d89b5eb034428
- SHA512 74454f45172df9ad303b86d12e1e2e4c61f0af22e61c78fc552965b28e0ee3a9924ff5525aa1b54cb675644c3ed5fd9a1a78705650233370290245230a0a7f81
- SSDEEP 24576:dxpSt6hFfYauZMAijqVBeF0oC8Rv2YISRCmudelw5K39YPMNi+nZoLKWdZCL:HFQau7AMBeF0xxBSruUr39YPMc+nGKRL
- TLSH T1AF659E8AA3F500A8E0BBA174D566A71FE6B1786017308ADF03D4019D5FB77E052BBB53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target opencv_videoio_ffmpeg4110_64.dll
- Size 26.7MB
- SHA256 f0460320ac08c074bdf6d5a19f5c13d204e585e85030fdd40e20a3c0b3adeb67
- MD5 a8c3560c8f20e1ae465bef81580fa92c
- SHA1 6b93b11cb93b58f23290c365852465cc1627fb4b
- SHA512 8e0cc2243df90a04df6d7627777fafd47b395e70b0110f5e5b32644cd708c277bb8a7c3544ebe083e9c7b840dc5a6bb7d598e263cbcfadd95c8095d7b65dbf7d
- SSDEEP 196608:boHQnFbVj2BJQnGZsSVJEVqrrgk3pM0obuez25pQz4qf4rQX2fexcgfGahX:b6QHqBJQDS1rrgJ0o7zlgrQX2mag+ah
- TLSH T148578D4EE1A351DCC52BD470437EEB73FA30782D4120696AAB94DB706E72F505B1AF28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10