Overview
overview
8Static
static
5A3DLIBS.dll
windows10-2004-x64
1A3DLIBS.dll
windows11-ltsc_2024-x64
1AIDE.dll
windows10-2004-x64
1AIDE.dll
windows11-ltsc_2024-x64
1AXE8SharedExpat.dll
windows10-2004-x64
1AXE8SharedExpat.dll
windows11-ltsc_2024-x64
6AdobeLinguistic.dll
windows10-2004-x64
1AdobeLinguistic.dll
windows11-ltsc_2024-x64
1Launcher.exe
windows10-2004-x64
1Launcher.exe
windows11-ltsc_2024-x64
6Photoshop.dll
windows10-2004-x64
1Photoshop.dll
windows11-ltsc_2024-x64
1Secant.dll
windows10-2004-x64
1Secant.dll
windows11-ltsc_2024-x64
8ZXPSignLib...al.dll
windows10-2004-x64
1ZXPSignLib...al.dll
windows11-ltsc_2024-x64
1api-ms-win...-0.dll
windows10-2004-x64
1dnssd.dll
windows10-2004-x64
1dnssd.dll
windows11-ltsc_2024-x64
6libvlc.dll
windows10-2004-x64
1libvlc.dll
windows11-ltsc_2024-x64
8shared/Ado...pt.dll
windows10-2004-x64
1shared/Ado...pt.dll
windows11-ltsc_2024-x64
1shared/Plu...ct.dll
windows10-2004-x64
1shared/Plu...ct.dll
windows11-ltsc_2024-x64
1shared/lib...-0.dll
windows10-2004-x64
1shared/lib...-0.dll
windows11-ltsc_2024-x64
1General
- Target Pivotal.zip
- Size 83.4MB
- Sample260704-ldgdjsdw6t
- SHA256 ad54b1d38fbd3ab08810191de0c9fb4211f2d8752cc73e8a9f63c277f89e7f6a
- MD5 5ce2f644d6a7a5fa08b926538b4e4c48
- SHA1 4ad5e7430e3ae4216edd961186938a098e818d40
- SHA512 efb7d7d374fa47d91339f78aa4bae09c97d5b5a59da0b3111671e25e2700fb47d3706858132ae4b41ea7812eaa3fb78c9358f40aea61ad8fc179563ac81099eb
- SSDEEP 1572864:vu8K1VF/W1TEze6Mmb7ZeOY7MK8HR+mFB0NYtDYH:WnTVPe6MmDHx+mANYt+
- TLSH T1961833F479E49A4EB1E5DB02D1FC6FF9757E5E2801D1C8D9B8268A40E74DC80CD28AC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
A3DLIBS.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
A3DLIBS.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral3
Sample
AIDE.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
AIDE.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral5
Sample
AXE8SharedExpat.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
AXE8SharedExpat.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral7
Sample
AdobeLinguistic.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
AdobeLinguistic.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral9
Sample
Launcher.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Launcher.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral11
Sample
Photoshop.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Photoshop.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral13
Sample
Secant.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Secant.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral15
Sample
ZXPSignLib-minimal.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
ZXPSignLib-minimal.dll
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral17
Sample
api-ms-win-crt-process-l1-1-0.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
dnssd.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
dnssd.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral20
Sample
libvlc.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
libvlc.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral22
Sample
shared/AdobeXMPScript.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
shared/AdobeXMPScript.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral24
Sample
shared/PlugPlugExternalObject.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
shared/PlugPlugExternalObject.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral26
Sample
shared/libsqlite3-0.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
shared/libsqlite3-0.dll
Resource
win11ltsc2024-20260629-en
Malware Config
Targets
-
- Target A3DLIBS.dll
- Size 846KB
- SHA256 945ee95d7da31d4184572c33a3eb6cf34cbde403db968fb11719ea32c0d55af1
- MD5 22d6dc952de37b97d5ace5a2aa077ff3
- SHA1 a0ecce2d5db36a75a0069dddd4eb7f869e51bac1
- SHA512 3e6acd9f15b0ccf2689c17e487ba101daac89b02b165281720a3c160f19f8eae5c079949488c3bc59f2578195f8341d7131dcb7c2ca0a920243c323ebcd1ad29
- SSDEEP 12288:yVqXE+FrLBIb+PeZUvXyTOnW4hXvbxysxZ72mAjlq:fE+FLBIb1HTOW4ZDEsxZ72mAjQ
- TLSH T12F054A9AA76453E5C067C03885A78646F2B2B8460F708BDF03B6876D6F37BD0697E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target AIDE.dll
- Size 3.6MB
- SHA256 4875766a587e6dc7f1da6deca5890bd597fb46227e16e7c2036e8cc73ce6c602
- MD5 1cdde8de7dec369bf5876e119c275c29
- SHA1 cc00ffa5285eb40dd1e30774d2288aacc56e099b
- SHA512 a561f33f2f12cbf951fb5c61f9cd61fa096dc3954e5a9571e60a037656130de9a9453159e83e4f6f4fcd7715bf9bacb2b2158c19f19d9f1fc519410ecc9eceb7
- SSDEEP 49152:eU3ChYbfb25OD17Q17Q98thAuF7jrPRiifDud6xiaML2zsan7EG8JsUoZFBQM0Vb:8eE3RiENMLSMx0FS
- TLSH T1C7067C87E5E221DCC17B803482AB9713F671385923109AF797C0EA353A37FD06576BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target AXE8SharedExpat.dll
- Size 144KB
- SHA256 d08f9350d8b19d22c0679ab1a8fa2a32c7f158f15420219c6d0560f693aba0f8
- MD5 106c406fb00d722781a1c4875fa884d1
- SHA1 a38d07714b084aec37c4825e38cecd62517f35ea
- SHA512 4d2ffb94a5d52a0b4cfcf03e59aeddf0cacfdc3d06a5c7dbebcd8fd6f8529c5dc46377cd9edeacf1b377950202b66ba1a77f52ad52034a1fba48f5e1300de0b2
- SSDEEP 3072:4HuFmI1029Q/cFsPXF6ZEy/zPxLZ+Ji7NrOTZ7qAYaMV2fZeWv:dmk9Q/cFsPXE9zCwSZe+
- TLSH T164E36D2BB665C0BBE45B8038D6958607D7B1B8A90B50B38F2390DB7E4F679617D1D330
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target AdobeLinguistic.dll
- Size 5.3MB
- SHA256 71d2e683df924e480e961fea8614890ca2669da6e9d5edc873fe250123ea883c
- MD5 056fad02fa353c41c845e9ec577dd9da
- SHA1 59221855a984a845bc93d4e8dc0d2fdb69916135
- SHA512 e11b33bb46a93fded48cad7462f935397abd7f0837b2560e13e68a95d308af9a5dc355987b9f7c9df9c0e657991008b699cbf4f3080c70802a25618fd75f6d1b
- SSDEEP 49152:M7sRJClDq5UklCHQT9XtG2NpAkI/CV2as4MY3HRuRhCl2c3NDHsm2TTH+86eRV:EWPdpAkmqrMY3xAhQ2c9DM5fHL
- TLSH T153468D07B7634D66E5668579C9A7773BA1113C00476243EFDA89AB193AB37E0B33C780
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Launcher.exe
- Size 969KB
- SHA256 5d695d8a0bb1d919cc77a2aa2488a61797bfa065238160278ee458120630aaf9
- MD5 f9538485432d3ec640f89096ba2d4d00
- SHA1 b050b847b1fe8be78d56b29bd23c25e05c227a92
- SHA512 ea7aeedd15f4d6a6005f8cfb7d404dfb0c302c837e48de7e3ff44d7d5908f8de6c0a81f736d874a491eddc89fdf753976be6f635e7e8512f5abb7f32caa8cfc5
- SSDEEP 24576:oFZAiQHDhht8m7FpUi1L1OXJz5zzz3zzzozzz3zzzNz:CZAiQHlhtz7FpWdwz
- TLSH T168252A1BE7A345EDC56FC13487A3D772AA30B86942247E2E1E95D7222F20D50DF2E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Photoshop.dll
- Size 1.1MB
- SHA256 0a8beb62437807541fb55d5cd5f240711aacb67645c68ef8ead57a820731f43a
- MD5 754f95264b512bbf046bcfd7d6ac1287
- SHA1 2796322357e61275563d2adcf225826d016dda60
- SHA512 7f8ab6ba0749310b056b6114289f4cb0dd8ad28789a03718e682014da891c37a9746fa73f16cc4e5c1b06d0ed9f56c741a39696975a3b7b97c089bf330f39043
- SSDEEP 12288:XGvyAjGOW9RsoGHRCSwVduTdW/+PFdIMAIcy/66+niJi+m3JIw/S5woqvo+Od2pU:XGvyAjGOW9R6HRy4nqITH2S
- TLSH T1CC351F01B3F91704F3F7477AAABA90500B37FD956974CB1D16AA024D4B77A00A863F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Secant.dll
- Size 72.7MB
- SHA256 eba0d04d9c43149771c2ddb63e6f0af212312204e08179f710fb8a9263fddd7b
- MD5 2c072faacc8e4036c4d71c4216483b56
- SHA1 d72c606abc8a86ce94e8c1f996d3cce69c828a12
- SHA512 60f93003909a9fddc88457f83ab118cff73be613c107d7ff0056d4b0a489eabd6afe2a2aed0f439fe8ea7aa062bfea0297af38356d1f349adf0dab12efcb10ce
- SSDEEP 1572864:3tV9r2JVEd4SwutRxIsQrGuajNowrvqtQXHk:3bFv4SwupvZowWtQXE
- TLSH T17AF7337579E4E78E71E49B07A2F827A5B27F4F1011E2C8D5BD6AD948F74DC00CE28A42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ZXPSignLib-minimal.dll
- Size 1.9MB
- SHA256 ed6166d46626ee793dbe5ed4ab73c71fb64c15868236a558aef6b8f3a9cc7e6a
- MD5 8041632cfbebdc1d9a942687f7cfe70c
- SHA1 962761132c98c15bf1cb3b535af4641f1118be1c
- SHA512 ddd8cfbf75beb74dbbd76a9857169039734d6ab586880a98502d60cfd6335f5afb9dfd6bf5df0fd45bae0c2ab40dc6c34c9267fa020ef65746a91b2352d6273b
- SSDEEP 49152:LGtlq1bVwASOP1m0fFV1BrgBJjb2btX3LW0ezI3DgNIU6iI5xgPbcGPEa:7XfWYLW9MX+UgPbEa
- TLSH T190959C1AEB5800F1D6E6C1BC9577863BE3B1B45913B0ABEB5698C1B80F53BD4227E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target api-ms-win-crt-process-l1-1-0.dll
- Size 12KB
- SHA256 3af38920e767bd9ebc08f88eaf2d08c748a267c7ec60eab41c49b3f282a4cf65
- MD5 074b81a625fb68159431bb556d28fab5
- SHA1 20f8ead66d548cfa861bc366bb1250ced165be24
- SHA512 36388c3effa0d94cf626decaa1da427801cc5607a2106abdadf92252c6f6fd2ce5bf0802f5d0a4245a1ffdb4481464c99d60510cf95e83ebaf17bd3d6acbc3dc
- SSDEEP 192:uFdyqjd7NWthWxWf9BvVVWQ4mW+JZD7DiqnajKswzR1:YQsWthWkNfZGlGswzR1
- TLSH T14342F987CBF81557E6A31F3041F9DB83BF3B97D75810916A8866F09D3883391AB2192D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target dnssd.dll
- Size 44KB
- SHA256 4e8665eecbf1bc0c5e2d8114eecac636ac06f9bfb80d4eae5c0f173a95fd32e4
- MD5 3ca22c1bdb086c0efdb0cff2c947e1a5
- SHA1 972933bc8d4c8c16f2c8b58bfeb4ce0eb4013831
- SHA512 56b046321fb327cb1106a8129f8b4ce0868bca4ac9a343b76a37ae14d2342ed0127bee7c7a7b331c11d9f84720abf7738c720ff24a76783b41a2af32a8b4a142
- SSDEEP 768:n/X9ge+H8zAqrWgqg/nRnlg/NLiNttfBtW2v0ZjlmQlxTUf2hx3cg:n/X9gDuHW+PRnlgVkNa2sn3nUfusg
- TLSH T198236C41E75455E8D967C23980A392ABE27071056BA4F7DF1390C46A2FE2FE2727C386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target libvlc.dll
- Size 6.3MB
- SHA256 4609e83ce5d45bae3d39794933e15841b2ca0819200d8907d55fac3232ce7c00
- MD5 31c22870895206dd6c08fe5ebe1e9859
- SHA1 822620e9934b613321e840c4876d3ca92eba9f72
- SHA512 059e5ea39df4ebbd9e549bc3df110ba46de47463ada839ee6832b68aa508d09212529f2bd89703bb9554be69aa17b1ce0e3ee095914953c67339d6a37d00c3b2
- SSDEEP 49152:uolBFqSRcy79jIiDXph6YkjGg90m8f4a24mxJdmO5FI2RFb3SYUOLMCRKyDHXIyr:TBzVrGV9d65/kbSmH
- TLSH T1706619ED2017D9CA82BC5EE046184BD2C4C4CE5E99A85A3875CF281C96FFB8D7494FB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target shared/AdobeXMPScript.dll
- Size 136KB
- SHA256 d3fdfef5bb32e1a0a71f769e53c700042914300f23daf2f9f6086965a8ed85c1
- MD5 8bfa9c4df3fefd35e6841cc0fd927ddc
- SHA1 12609f1cc776b0ea78b07c5c6fc2fad228e3f538
- SHA512 14adb841ac40d2aeba3394517e1143acd0a799adbdaeeb947021b11586ee24508e279e9c1a53a297cb18a19125aac7464f048866b59e3a5a19ac93f5e096571e
- SSDEEP 1536:S1zSDcAWjjtov6CxXvkMri8VPLfjbBsMqZvULzjVxfFEr/52UfB:S1AOCx/kYi8VPLLbBqRSxfFEr/h
- TLSH T130D3190BF3A08176CAA2C8B8D9975F63E371F845C831D75E83A2991E8F27311FD25A51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target shared/PlugPlugExternalObject.dll
- Size 35KB
- SHA256 c660d84e3c2a016be8d5002ac69c80f13dbc809db9660a6fb87d9fee345dcfc4
- MD5 2a14221eb4c0ad0181279d1ab093ed2d
- SHA1 32ff220cf93565b8773dfe5977f9ea22c998d1c2
- SHA512 eea3dc37cf90af6a80d698de965a048c277d467b9ec2f75bce3a26ece2eefe58cae4f33a8f1c05d157fb5c86f6d26de9fd8f027301d8b45ce7a33823dd4984af
- SSDEEP 384:JnJJx3T71CkAdAjEFaDCapHWbHFDGIQsMLFkfyHlQHRgTQDPpAZsHL4KDgf2hF:JJJgdkIblbQrqS4SQlxPUf2hF
- TLSH T154F27D9667680486E5B78378E4D34F0AD772BC215B21D7CF63A6922E0FA37C0787A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target shared/libsqlite3-0.dll
- Size 1.0MB
- SHA256 6e220d30894e6253fa5961ce6161d884998f739bbf1ca89c09d4fb0f9c027edd
- MD5 e1cb912347cd6302e012a4079afb78f1
- SHA1 8377e39f98ff8efbe02b885a59759b82573da7ab
- SHA512 42ff4966d51f22acbdb337dd79ffb79e868da27aa6377e2481f5a67f3be0344d0b7da3de839de00ef59e7314891dea0e16905d2ed4e55cc218ead1dcc8efd5fa
- SSDEEP 24576:bmsokxHNOmmexbosz/qllHgEdywT7HPujJNQFsQLtL0CgmonvTBbhS2:bmLkxHY3IosziDAEAwPHiiFs0qCgXvh/
- TLSH T1F5354B1BE2A360ECC57BC270876BA772B931F4151134BDBF9654CB312E11E509B6EB28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10