467648540ab4bcf83641cb22b3359669bf1b9130b87d4be0aa438221ef3eb06b

Resubmissions

26/06/2026, 17:15

260626-vsy2ksc15z7

26/06/2026, 17:14

260626-vsggjac15x8

Sharing

Copy URL Twitter E-mail

General

Target
antimicrox-3.6.1-Windows-AMD64.exe
Size 15.3MB
Sample260626-vsggjac15x
SHA256 467648540ab4bcf83641cb22b3359669bf1b9130b87d4be0aa438221ef3eb06b
MD5 86812697451c2171f5b71cddc57ad08b
SHA1 d79a4507e5835a32dc42f5525692b5b408dbd1b3
SHA512 6db8208b6f702d8c9029e0ad64f5a5a072eb2c6d0157e7f3ef58bf4448d6e5786eafb6fb9cc7bfd89db246f460e521d506543de787973dbb5ec879627fecfcc1
SSDEEP 393216:NCmKhqcXR9gSJ3dVHQ/wYiFHz/ggtxmmvK2u+7UQyQSwK5K:NhKRrDZdVw2FHzVewDypR5K
TLSH
T1EFF633944E9F66E9F1C7C573ADB1987F0BF824A0B222EF77662D761D786044E03211B2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  antimicrox-3.6.1-Windows-AMD64.exe
- Size 15.3MB
- SHA256 467648540ab4bcf83641cb22b3359669bf1b9130b87d4be0aa438221ef3eb06b
- MD5 86812697451c2171f5b71cddc57ad08b
- SHA1 d79a4507e5835a32dc42f5525692b5b408dbd1b3
- SHA512 6db8208b6f702d8c9029e0ad64f5a5a072eb2c6d0157e7f3ef58bf4448d6e5786eafb6fb9cc7bfd89db246f460e521d506543de787973dbb5ec879627fecfcc1
- SSDEEP 393216:NCmKhqcXR9gSJ3dVHQ/wYiFHz/ggtxmmvK2u+7UQyQSwK5K:NhKRrDZdVw2FHzVewDypR5K
- TLSH
  T1EFF633944E9F66E9F1C7C573ADB1987F0BF824A0B222EF77662D761D786044E03211B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 30KB
- SHA256 a9415ec35ca005da286219bae73d4d0574efa6f0cd24bfefa6ceea5a973d3f5b
- MD5 45b3bb72a15d0f7f1b44877d27239150
- SHA1 d8d51cb42606d29ad3954524e8ceb9fce991d4ac
- SHA512 7f7a0133b4d2cbf38f44112ec05bb261cc99efa6d94d3e09234b665e53fff83b9eaaf02c168e24717ee8562a6c5cb2998b427be556d34c7ded6e80a4cafd504c
- SSDEEP 768:56NAiHShOHsh6AVVUX8yG+CQV+llEknRJ:kNAiHShH62VAGhnR
- TLSH
  T1CCE2F81FF7E190BDE952D27885FA8A72F971FC0600357A2E0920D27F2E34D609A3D566
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 11KB
- SHA256 59bdb5856ac000e657c5ee33b4ee380c215f0fab371c6e9146fb11f76563f08e
- MD5 b7ea54d029e579e800d6520cf991b4f0
- SHA1 ad836bf9330532398a29e6e6e60e59b80fbb3113
- SHA512 b61511fc94e124e5d086e252b7186effb626c018ea30f0d6e93d4678a9f8948dd1c33ce9d60fbd56f5288e45b04102cb28a33ade87dd140744cad042d028ad15
- SSDEEP 192:ow4rRSW46dSDDqtHhGQplRuKNzvuUzlRH0jVwBo5BoYbK:C9w6dADOHhPp6K5vtzluho
- TLSH
  T16B32C86F7ED041D9DC7AE338E0FE4A3565B2B405192A770F021882CBBE75BA15878B41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3
- Target
  $PLUGINSDIR/System.dll
- Size 25KB
- SHA256 3d24b3050546f53b9703079cb1645ba31edcb4ff5c4599223f9621ac4889269b
- MD5 c5183af5481975b70110074a7f1a0001
- SHA1 c2539b313dcebba9c612dd41611277532a55cb21
- SHA512 cbd9f8f264b748921b9f6f310708047df45aae61815e9f27d3c014f1d96129c7aafa950db0eaf50226cb71a51e5a39d52f9fe8d46988c52acd6aff810e0fec8d
- SSDEEP 384:aP6bw0YTnWLboowbqPH3avHK5vO44OIxZ3cxxxxmx6L1llllEkMZI+ma:W6bnYzOPH3ag4OITQ1llllEk7
- TLSH
  T112B22A0BB3D294BAC567C034D5EB8BF2F672BD1225347A2E2621F1756D71E90CB2D40A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 7KB
- SHA256 b2fb11e4b46745a94490c7124f447fc2f1b3fa03d5182e61c2605f1cb8fd2433
- MD5 6a6fb2c7b927e14fa5eb6e75c0d28f68
- SHA1 df4ba1d6ae9efa43025d14aff4ac1a7cfcf6c95c
- SHA512 e60f8e4571fc37e0872a83558d3ec15ce11be1395cdd57099940199026c247071a0c2cc17c88b770aa450acb88ec00b4765610985bd8da06b1c4e31597fe7e92
- SSDEEP 96:4yubewoiLOeI/ZhuQKzM6dKNzv+ku8KjxjPS2gwmlXCGdxqrdbbtKbdj:zuC/h+l9KNzvWTylXR9
- TLSH
  T162E1858FB3A12696C456F278C1FA5E32BCF7BC345627621D480161263D34AA1F339B46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  bin/Qt6Concurrent.dll
- Size 36KB
- SHA256 0aa49810239ba05a7ee8a9582b23cf6aed898e2c00656b1d2dd0204eaf54b60e
- MD5 28af513931a5add3d53cc3ec337a9ed5
- SHA1 dfd67397124a6a165fe1d02672bbb9421d474352
- SHA512 fa925bd5a3fdf5e0c5859aa0ac911cb96f79010ced1cdc54e561e2c93ff5ff1446fe43ddbd56f49b00195e82c4ef4f36523d8d601f58cb59765791ed14e8bf05
- SSDEEP 384:hhyY/o5MaOiSU6izGfIGNfQwWY4xZDI2USUGHH82gHQIYiu9cR6vy8RbmL4nNyzV:hHXGGNfQFY4xZDbUGHH8J5YiuiI5ALb
- TLSH
  T1D4F27C6B6A940898C887D97070FA8376BDF378511660C7BE1248C3356FB1F50BB3E615
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  bin/Qt6Core.dll
- Size 10.6MB
- SHA256 96e502f8245cd32b0360017a78f766193b4600db2fc9f8d2e98906f52f517692
- MD5 8e11da0c662282aad590877070c3492c
- SHA1 a9802894103266af5a9b688606c4e7b8a677e934
- SHA512 4dc2d75327ec171e8986ab48fa7661e747a12f57896f904bb98607ea6d5bd21f7e4d9b7bf770dc64675a2f98c80925674889b5f10e4a7608ad6cf1810779ea06
- SSDEEP 196608:IVFGpZQS+V31ONlhjHcfi8VxypFE2dxwuhWCAV+2wFYWEo8Qae7cM8P2F55m1Ij7:IVFGpZQS+V31OXhjHcfi8VxypFE2dxwy
- TLSH
  T145B65D03E6F71059F5FFD63086B762726B327C4A56346A2F0244B6341E72F60AB36726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  bin/Qt6Gui.dll
- Size 10.9MB
- SHA256 f538e4db3790070f14ac473a8142c9780e923333e52efb84a0cc5a2634d7898b
- MD5 7318d5367aeb18251cfec3d8a78ee002
- SHA1 187a7affe6266b4330613798faa3a9c78b3cdd58
- SHA512 16a6372a430bf9501fd27a0270ae14e505e48f247a5c1c5e0a3841b0016e1f008d9075405bbd8d34d05d1f8f2b0d40d88d6b7da1fcded93fb8d93a851be047d6
- SSDEEP 196608:Ypc8ZJ8EqYWzIzesSpAc+NcAQK8T+5jhQABjCXzc72hDKTVJqeJFOUc45SM/TL/o:YpckJ8EqpzIzeD8NcAQK8T+5jhQABjCv
- TLSH
  T13DB65B57E26260ECC02FC135476BA633B931785912387E6F5290DB392FA2F50637EB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  bin/Qt6Network.dll
- Size 1.9MB
- SHA256 a6a8d347584f7f01c733ff7b97396754aa29d166b11007eef68053c3926f338b
- MD5 5c781757ad83dfd9d2dadf4a78c155fa
- SHA1 c4c7cf03d409a5888cfdc6ab29f71240b6278746
- SHA512 f20eac327175250d0ff337dc5eeb472af56f140f2a85b4fc69de8f3622d5738c876e382f6919bb2033f4ddb9e787e02cf851e8c5b6f1b2c9784df0693b711b9e
- SSDEEP 49152:2/gviaBB8npXRXqnrxVho+bYgSohwvhaaUEJEV6YUPHhPSEq/JxmDwbmfKDIAFLX:kPaB/nrxVho+bYlohwvhaaUEJEV6YUPe
- TLSH
  T182951863F26224ECC46BC1398657A233F831785912787E6F1654CB362FA1E6063BE75C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  bin/Qt6Widgets.dll
- Size 6.8MB
- SHA256 d2fc4c60c55612d34c0b563bdffa89f4cd59ef98e7f326103406d568bfb53d18
- MD5 311450b93f3739ff27fcd708bca13848
- SHA1 fe89b90a57ade28950963f59579dccf9dfe52b17
- SHA512 1a7a4eda590bd75fa0f0617df4c6f9099017c4fe2a6e4f3d4cb3ede022d33029a90b8a6030313f7dd3b6d391faad41895fb04427483d00dc59c25dae1547b3d4
- SSDEEP 196608:E73axGarqbOXZ2sBvHbVfRAcSIisk4IvLABHBBkI+SMHz/fA4eDSVVlIf98HicLi:1xGarq6XZ2sBvHbVfRAcSIisk4IvLABL
- TLSH
  T12E763953E2E224ECC06FC538475BE273B931785912347E2F5694CE362FA1EA0227E759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  bin/SDL2.dll
- Size 2.3MB
- SHA256 47a3b27654832d9f7e5719c88078210a3dbfd6407b559c5a3c4eb8ab7d0ebdb6
- MD5 4e1049d07476ccbb0b4ea38a4b7aff29
- SHA1 81ef0cebd14744e0c48295ce211d4dea395479bf
- SHA512 e582c8b253bad2959a98cba40b4280e7b51706f79876ddb1fc633d892a836b2b2c64d2ce561641f9487cc3f34e49641625158523156d3c490bbab9292e9d9ca5
- SSDEEP 49152:mPvZQ3FhUECtYSw6wsFp60k3IJrujvH6LBVo0VsDZCu92+edBMSevj1l:m3cycv6wj0k3IJrujvH6LBK0Vs9fsdBY
- TLSH
  T163B56D6EF2A365ECCB17C031825ABB72BE3178581194ADBB16D4CB301E72E50566FE34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  bin/antimicrox.exe
- Size 5.3MB
- SHA256 0607f3d3df50b2a9b06517d36b7c5657f200acd135edd7d0e8ec9f61b8ef66a5
- MD5 9be0a85a51724ea80e83f308bce841c4
- SHA1 13ebf6066cbe8c401ce8759fb876ed816d7c0e25
- SHA512 ec7b0fe50c573f2318bf35fc0802d63960ff3dc1b6bbe6c23fd7b7581719f2554fbb36e0a3af7da58d0f31b7cc4298ff76730a354726db12ef0ac65886abd998
- SSDEEP 49152:wLcXMS/V0o0wXqpRD7z4Lbc0kbx2t/Tmfnvkh9eW566+OQFbDkYEZVUlxj7p7Io6:PMS/V0nP4LQ06Wp5DQFkYEt4iS4X
- TLSH
  T1C1463B92F55F64EED927D23E86979332FA707C994231FF278200EA322E51BC4664D718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  bin/libcrypto-3-x64.dll
- Size 5.2MB
- SHA256 78bf87578451bcf83cd4d8dc681001f5b7f3ce231c05a6454dd56a8075a195dd
- MD5 de2400ce341698f6e8953fbec8333223
- SHA1 cbf23f6b1893324f77abe0da07b8d50b49dee3e9
- SHA512 24b5fd13bca3846bb452f66141331f8fd9f8793040ab1c1317f4490942ecb2f99f2bcb30d04201569bc1f0793fa328e93bec1cb50a1f527032474506f07dd091
- SSDEEP 98304:dSJ3EQPauFA45tXSpQ8htOpjlIbm5GY+gXI1CPwDvt3uFOxCNbs+W+:WnXLrY1CPwDvt3uFOxCd
- TLSH
  T1D1464A6BE07B209DD96BC1B0C2576F73BA30B82407746D3F6A54DBF02E61E5017AAB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  bin/libgcc_s_seh-1.dll
- Size 148KB
- SHA256 278f1101f2371c58b6b412a3206718e22343940a5164aceb4fb75f2bf3b38ed4
- MD5 7c898cec516140f6ec8bb085aa2c49d2
- SHA1 d0f9c136cc518b989c34ff7e25d18e4b9db429f7
- SHA512 4d75f719cd99d125bfa9bd0e910f935071be69b051ce5749fc6e40d172d8e253ce1d80c063626dbd9f34b4851b581e0a433754bd9320e880de56eb21dc9b8f5b
- SSDEEP 3072:ow+y6q68B9QwURE3MYjbFBlHAYzvf1P3gJa5pYdF6:owRUHMpDT/2tdF6
- TLSH
  T12CE31852F59360B8C697E2709A839FB1EC33BC740320A8771799FA346CA2F819A5D751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  bin/libssl-3-x64.dll
- Size 957KB
- SHA256 243bf8806c0eea14f6eed36b5dc663c8a946a629466b3107f721d6f191875433
- MD5 1a1df8c55addcf5fe13b8ca5ce30ab6d
- SHA1 5ddd143e4fccd72714b5391bdaa839bd2c1c8f15
- SHA512 9364b756d19b0850c513d115b3bfd5ebe6f2dfa6499ee50bcfce37cabc96afc04255f312f44a88251d4daf507a98829f893f904a4171936d6847fbceac21884b
- SSDEEP 24576:+tM5hp4InPIkWYFaqGabTA/gHGL29pRxsVOEA3q6mvH6S3cRR:+WeIPIpqGabT9HGQRxsVOEA3q6mvH6Su
- TLSH
  T1AD252A67E2A728ACC5A7C174C6579772B932B8142235FD7F1E50CB311F61E60233E6A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  bin/libstdc++-6.dll
- Size 2.5MB
- SHA256 3529d11c422b2aaf0bbad7221bf62ba7b5a39f854e89a015bb58b6b55a677da1
- MD5 897ab3e7965f64f0a8723a7d997fee42
- SHA1 8a5c8d3bc8402a19e59f68a0ff72dadf32e9fb31
- SHA512 ac093900df6f2be09eb00414d6490bf10601ce0ad2129a671f7017847c05a71e3ef955b98c2c267899a050a6c2f433b1f08e6fe9a13414ea09c5b9b9257e8182
- SSDEEP 49152:wRFD7uoUcTdzyfohk0rnDvgoKTdHgAd7SSoAUjJQYPkiFcPrQY:wRVyibKTdHcLQMkiFcPrQY
- TLSH
  T183C56C03E5930CA8C9E7E7B4525B5736EA20BC1989387D7F5E9CC7306B62E40562FB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral16
- Target
  bin/libwinpthread-1.dll
- Size 63KB
- SHA256 f7d57886d46b8065f8a7951c5ec8fe52d97a0f55b165c3d0c733854119b5803f
- MD5 ee90617e9fe6b4d1e4d1bb533f56dd1a
- SHA1 0e5f87fb8dffdc28a36b211673c3ed1339202127
- SHA512 a7c08f561223c98edd02fbc1812f7b3ec802d5f716126764b56b0f97332ddaa98f226f1e22d45382cb64fcd46fae577ac0ff0ccc2e2b32139b30eb89f16365a6
- SSDEEP 768:Goq1vUQRJMT6sIhMsp41S7u1cFsmGTqeqtLJPANpPPQTU6PdLw34:kbk3sRuayhTqtYPPQTU6tw34
- TLSH
  T15753191BB3A614FDC6A7D13885F74B71F533B8111239AF2E9764D2362F38E21892D894
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  bin/platforms/qwindows.dll
- Size 1.2MB
- SHA256 01b9e080285424a3d9f256115e568e5de2960b09eece08ea179cb710506caea3
- MD5 b8bc01cdf4d1a888eb043343d1a2d705
- SHA1 ad1fd12a6899e5bc2aa43cacc71ff05f64966fee
- SHA512 8c0da26a050a51d4aefdeddadf4726ce0da25b417ab66265da5f7ffd8de61937d17f30ac1bb8c1454782edb846d84307177acd39deef0434dabfea1c99c5c979
- SSDEEP 24576:5Ep4wrWCITV/l2dJqlAqizdmtBsKSJ6Ak5EWWFbx39YKZq7BN/d7mC0P9A8:6VrW3pIdJqlAqizdmtBsKSJ6Ak5EWWF9
- TLSH
  T157451937E26260ECC06EC27946979A737931784D02747E1B925CDA367F91FA063BE318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18