Overview
overview
7Static
static
3AllService....1.exe
windows10-2004-x64
5AllService....1.exe
windows11-ltsc_2024-x64
5Emulator.exe
windows10-2004-x64
7Emulator.exe
windows11-ltsc_2024-x64
7launcher.exe
windows10-2004-x64
5launcher.exe
windows11-ltsc_2024-x64
5mkcert.exe
windows10-2004-x64
1mkcert.exe
windows11-ltsc_2024-x64
1payload.dll
windows10-2004-x64
1payload.dll
windows11-ltsc_2024-x64
1General
- Target nextwew.zip
- Size 78.4MB
- Sample260629-ep5rysdz5q
- SHA256 186d58757ef0a630fc11c3a8cf1172a28c447a97973d32463732a761fb8daa3c
- MD5 9e05fa669c35c1fc82ef7a432e6a8407
- SHA1 980073ed7ccd1cf681d9792338a5e20697480ed2
- SHA512 7f12f197b450647288042c2a37a970e0f2b5e0726cbfaebdc7fe59b3dbf5024e02378f7b8c20a8b6a0b0eb46958722f46173b996b1ebd88349a76e296321e327
- SSDEEP 1572864:J+25A+OZQCN9kIC/w6cijZerg9VyukGrZDeLiEszVz5UAjpxkmJvz/W0jD:o25AbiCN9c/wUjZerg9nDYXWz5UGRJvp
- TLSH T1A1083334BD500D7F6A9B8DFD59C8381584866F3A7B0A13412FA8A363D28F5316193DBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
AllServices_module_v2.0.1.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
AllServices_module_v2.0.1.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
Emulator.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Emulator.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
launcher.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
launcher.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral7
Sample
mkcert.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
mkcert.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral9
Sample
payload.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
payload.dll
Resource
win11ltsc2024-20260617-en
Malware Config
Targets
-
- Target AllServices_module_v2.0.1.exe
- Size 34.1MB
- SHA256 1d2fb3885e22a2852b8e18a9337bb1f7de986c19f6f2c5b5067c4ce5023fb041
- MD5 87ed2118ce7591847c9fe270ad690add
- SHA1 3ee345ee8230170aecd66861d44d34344b336f72
- SHA512 0a19f6284142f250dc17d623c01c68598cb0a2800aeeddce9f1a7ef96de9aafbcd20e956411e29ec733ffb1cd588d76920e9c278b6fc798e66b0d235a5495d7d
- SSDEEP 786432:pFqyuMARGZWEGSwRHrSpMbxsRqE4y6fSUxGqB:3qyDAgWvSwRHeCE6fSUxG
- TLSH T10D77239364D453E8C6C34900928E13DA52D1A57E8DDF591D2BC73C026A31EF39A89FBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target Emulator.exe
- Size 46.6MB
- SHA256 25683710fa3175f64835cf8628bb02e76fcf96bdb75285616719e3351d58a867
- MD5 505f0c437c0fb1f591b4a50c5b249789
- SHA1 99a2b5ad77d4cda2454c367262e6fc624d4dc196
- SHA512 dfd7e296d54510d2d78b1c928af7a2830aa3bcdb4952bbebc808489d2a415b9487361829c19da6c05e8aeaeefaaeb74f6f9916e6633a5cd7edb12f86f833b6ab
- SSDEEP 786432:rzpMW8RwF1ZdlqsnFyVmdh1Ec9ar7SzvC2j6+s7LWB75zuOOowQAJOd9PRghx5wV:36WawFbqsnFyVQX1+mm2qHWB75i2w5hI
- TLSH T1DEB733787240086BF5EABE79D8D4FA31A2A77510377291875FA91131588FCDBAFB2310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target launcher.exe
- Size 237KB
- SHA256 14663e375d5e067e9ec18643926d9c9a38c4e9ec7abc7bde651c0d2a269cbbc4
- MD5 7b6dc47609df02c44422f05f5b0879ad
- SHA1 2454c8034c9ea6b0d8845e5ce71acdb91d610c8d
- SHA512 c7520512c7be7216f8db1f6a03c9496bfa48cf347affe3739af6d0cb8daf60799d0d9ce8c202aca93d273765dc2aed493638307d0ec1a9b720415b6e515bbaeb
- SSDEEP 3072:YiW9fG/DPZaWbtwEoKoEH5JmSKKxph0LR/hSMXlk4ZqKFya5XB67TTtz7RMFyLnu:hW9MsK/730Szph0lhSMXlBXBWnx7RMU
- TLSH T14A34AF12F7A6DCF9E60886B588570B44EB337C808382E7CF175499925F679D25F3BA02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target mkcert.exe
- Size 4.7MB
- SHA256 d2660b50a9ed59eada480750561c96abc2ed4c9a38c6a24d93e30e0977631398
- MD5 8ae03fb0741d036801add750b5528acd
- SHA1 4333e9a5b314f2395074ad16d76c30921902c60e
- SHA512 e7e17f3fd77daa704f88ff4dc6a22795ce0dc18b5db980bb2e5dbe823ca84f54ee8bd81e5e3d816668e4a841e53cb2bd487939e6ad805f5866926d6ddfdff086
- SSDEEP 49152:TGzxo43OrdQqXrb/TRvO90dL3BmAFd4A64nsfJnTTx5hFBL+bwmUZ5EygKZlbjIs:A3OO/JLxEclEk3nTsFk+Mm/MN
- TLSH T1DB368D03FC9590E4C5EAE1308A75D292BA717C884B3137D32B14BBBA2E76BD45E78354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target payload.dll
- Size 166KB
- SHA256 3623c9f52b5915747e31f3bae7b3480e764bd57cc26f42d4fbaf0f3b8b7b0a8f
- MD5 08217e9e638bc77f0c31dd231022f195
- SHA1 e7139169b21a6f6e3bfde97d20b38dd6aa71abbb
- SHA512 da3e4f78b45409b95a494e468d7dccb8ed2aa4addd7fe0b678b88eb4c8c2e92fdaeb85a6bf105c9cf0d71f72fcbc26e4a84cf68515de7d06c69bf499cd0a350a
- SSDEEP 3072:UR7C6goA5oF1fTh3Fg0gIGZuVtFPLKSCgcDea:CCb5onr000aFj3a
- TLSH T164F37D16F6BA407FE9678534C9530905EB727C835790AAEF53900AF65F2B7D08A3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10