Overview
overview
4Static
static
1WebPatchSe...17.exe
windows10-2004-x64
4WebPatchSe...17.exe
windows11-ltsc_2024-x64
4GNESLLicenseTools.exe
windows10-2004-x64
3GNESLLicenseTools.exe
windows11-ltsc_2024-x64
3PatchFile/...te.dll
windows10-2004-x64
3PatchFile/...te.dll
windows11-ltsc_2024-x64
3PatchFile/...te.dll
windows10-2004-x64
3PatchFile/...te.dll
windows11-ltsc_2024-x64
3PatchFile/...te.dll
windows10-2004-x64
3PatchFile/...te.dll
windows11-ltsc_2024-x64
3PatchFile/...te.dll
windows10-2004-x64
3PatchFile/...te.dll
windows11-ltsc_2024-x64
3PatchFile/...te.dll
windows10-2004-x64
3PatchFile/...te.dll
windows11-ltsc_2024-x64
3PatchFile/...te.dll
windows10-2004-x64
3PatchFile/...te.dll
windows11-ltsc_2024-x64
3PatchFile/...te.dll
windows10-2004-x64
3PatchFile/...te.dll
windows11-ltsc_2024-x64
3PatchFile/...te.dll
windows10-2004-x64
3PatchFile/...te.dll
windows11-ltsc_2024-x64
3PatchFile/...te.dll
windows10-2004-x64
3PatchFile/...te.dll
windows11-ltsc_2024-x64
3PatchFile/...te.dll
windows10-2004-x64
3PatchFile/...te.dll
windows11-ltsc_2024-x64
3PatchFile/...te.dll
windows10-2004-x64
3PatchFile/...te.dll
windows11-ltsc_2024-x64
3PatchFile/...te.dll
windows10-2004-x64
3PatchFile/...te.dll
windows11-ltsc_2024-x64
3PatchFile/...te.dll
windows10-2004-x64
3PatchFile/...te.dll
windows11-ltsc_2024-x64
3PatchFile/...te.dll
windows10-2004-x64
3PatchFile/...te.dll
windows11-ltsc_2024-x64
3General
- Target 143e2b037eb776a96a82514d88aeb9025e77713a3c2e27c4ffa3d597518f37ea
- Size 3.1MB
- Sample260710-na42jsbs3v
- SHA256 143e2b037eb776a96a82514d88aeb9025e77713a3c2e27c4ffa3d597518f37ea
- MD5 dc9a3c854c546bd3dcaba114c2a24b03
- SHA1 abdcf32c720db5fbc44a292ac6be52be3fc1b43c
- SHA512 13effc1f246f94c54dfa0cc93e9823ca651cb99c863b6e74b109652d7de106382cd1e5fe0969ff5a8b8326d921024e1278fed9ea93e5cc3c707a96b3ee2ffa3d
- SSDEEP 98304:naMKOGFodaLKNxJwWnWzPQnbZI5KF59Dw5Zs:na1fFodaLGw+WCbcKFzAm
- TLSH T1FDE533E6786008D564140CE1A761D0599F9CB4ECB8EDF789F81F8678BBF6E046E71C82
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
WebPatchSetup_V1.0_20260617.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
WebPatchSetup_V1.0_20260617.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
GNESLLicenseTools.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
GNESLLicenseTools.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
PatchFile/appcloud/7000/Web/GNRemote.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
PatchFile/appcloud/7000/Web/GNRemote.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
PatchFile/appcloud/7020/Web/GNRemote.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
PatchFile/appcloud/7020/Web/GNRemote.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
PatchFile/appcloud/7050/Web/GNRemote.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
PatchFile/appcloud/7050/Web/GNRemote.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
PatchFile/appcloud/7060/Web/GNRemote.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
PatchFile/appcloud/7060/Web/GNRemote.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
PatchFile/appcloud/8600/Web/GNRemote.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
PatchFile/appcloud/8600/Web/GNRemote.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
PatchFile/esl/7000/Web/GNRemote.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
PatchFile/esl/7000/Web/GNRemote.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
PatchFile/esl/7020/Web/GNRemote.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
PatchFile/esl/7020/Web/GNRemote.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
PatchFile/esl/7070/Web/GNRemote.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
PatchFile/esl/7070/Web/GNRemote.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
PatchFile/esl/7100/Web/GNRemote.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
PatchFile/esl/7100/Web/GNRemote.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
PatchFile/pcloud/6450/Web/GNRemote.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
PatchFile/pcloud/6450/Web/GNRemote.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
PatchFile/pcloud/7020/Web/GNRemote.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
PatchFile/pcloud/7020/Web/GNRemote.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
PatchFile/pcloud/7050/Web/GNRemote.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
PatchFile/pcloud/7050/Web/GNRemote.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
PatchFile/tkpro/7000/Web/GNRemote.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
PatchFile/tkpro/7000/Web/GNRemote.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
PatchFile/tkpro/7020/Web/GNRemote.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
PatchFile/tkpro/7020/Web/GNRemote.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target WebPatchSetup_V1.0_20260617.exe
- Size 3.1MB
- SHA256 1d5ca7dfe81c6c50cbaaca4fc251a2628a862afbe0e04d95b8bd3c174027cfcc
- MD5 b6a8660e7ab8f4d4223ecdb4c461064e
- SHA1 32b2eae5be4689c8ccfa5ce4ebefcfb030e35f65
- SHA512 e765d20f9f41a19f035b81748c734082908ffec0f1568eda9fd07f0e7bd0a285d6d3dcbe81366db51b9757cb0d4e5ce5fb97683ad22165965ca37398687af505
- SSDEEP 98304:5Ty0wOwF+XyLK1ZJCUn+ZPyND7mboFd9DE9D3:5TyRFF+XyLICc+iDkoFjQb
- TLSH T1A0E533D278A048D6E8240CF19B34D159DF9CB1D464E8F749BA1E86387FE3F057A26D82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target GNESLLicenseTools.exe
- Size 1.8MB
- SHA256 ea47b84dd89c45f87b6368892a67574a8cfd38a7a68f8484236fddc754421a0b
- MD5 32b2b44f2245c799230436cec9f5f638
- SHA1 f2b51855ca2346bbed94c89b4d12a98d7a01da1f
- SHA512 24eed9d4e308a2480ec9c33942517cc5a4eb39762c225f4e0abbd4011981f735d7b0a5c80576be19298839abc8fa423982f5531798d8adaf0b021f0a4a64aeaa
- SSDEEP 49152:qdckp068saV+fc64k/eRPs/D9XdZGSyeMEFjfY:qdphaV+064k/eRU/BNnnc
- TLSH T1D4959E323A91D477C23335718A0AA3B9B3E9FA711F75128766811E392E355D3892C72F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PatchFile/appcloud/7000/Web/GNRemote.dll
- Size 1.9MB
- SHA256 0de5646adaa506642000b262947c8fbe5f2b8af8dc65a115501342a85bfd536e
- MD5 c1701186ae137a76c583b93b173e4a4f
- SHA1 0261a6ef4c5b739292add568ab9fa01f5a515dd1
- SHA512 2833ea5dea2121a6770e12ad45cb603bc3604b6fb4db7378e07c415e6b2a4fb945b8de9826ec521986ed48ca265ea6d6c7a8471c8d9799f51e3f721c72a04ab2
- SSDEEP 49152:aSNcI/IeGfUawGoPmqQij3M4gW1kbdUnVIwjv3723Vn9wdt5:kI/IeGfUawG8jf1kgIwj3tR
- TLSH T1E5957D13D741C82AF4AE00B6866C676EB554BA70132440C3F3C85E5EAAF59E37A36F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PatchFile/appcloud/7020/Web/GNRemote.dll
- Size 2.0MB
- SHA256 455fae741237fc3bedad083d274b6934b5d899bed3dd49265f2054da5ade77a3
- MD5 3c8218d93e5c5ac51a9f6f8e1630a708
- SHA1 c68a5e2ab88746640db9e8c7d72ed0913aa14f95
- SHA512 c46df576a7c8545bd64fea882dad4340103e437a966745554bb7d46dd00d5f676310f354497c946030895e89bd9f837393ae95d2715baaf9354d63ca400e2cf5
- SSDEEP 49152:qP/zq0oYjG3QJNP+vw8nUwlgpu6juNiKepuE3aEdjVIh:G/eFyG3QT+Iegp/uNH3
- TLSH T1BAA57D23E741C82AE4AE0476966C636FA524B9B0132440C3F3C45D5E9AF9DE37A36F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PatchFile/appcloud/7050/Web/GNRemote.dll
- Size 1.9MB
- SHA256 0de5646adaa506642000b262947c8fbe5f2b8af8dc65a115501342a85bfd536e
- MD5 c1701186ae137a76c583b93b173e4a4f
- SHA1 0261a6ef4c5b739292add568ab9fa01f5a515dd1
- SHA512 2833ea5dea2121a6770e12ad45cb603bc3604b6fb4db7378e07c415e6b2a4fb945b8de9826ec521986ed48ca265ea6d6c7a8471c8d9799f51e3f721c72a04ab2
- SSDEEP 49152:aSNcI/IeGfUawGoPmqQij3M4gW1kbdUnVIwjv3723Vn9wdt5:kI/IeGfUawG8jf1kgIwj3tR
- TLSH T1E5957D13D741C82AF4AE00B6866C676EB554BA70132440C3F3C85E5EAAF59E37A36F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PatchFile/appcloud/7060/Web/GNRemote.dll
- Size 2.0MB
- SHA256 bc02134c95ccd48b75b93247e09eb44a29254f485ee2e75a63912d3218e1c888
- MD5 b5a4888e83e8a8a51630e27d435363a9
- SHA1 3ebb7e22a7054bcf98470b6e31ade59560e90ea9
- SHA512 26f581f9775ffc5e1ecb114fead9614f8abebb83a7e39183b9eac37bb092e0bf4596410ff6e373a9f9741caa07169b1f11739000ee270964c50e8586d24fbfb4
- SSDEEP 49152:MnkDE5kKlRVuikpwvKGmraP0KZaLK9Md67C1Fc1Xcg:MkDSk+RVopwAaPXaKYFG
- TLSH T19FA57C22D745C826F1AE0479966C536FA524FA70136040C3F3C85E9EAAF99D37A32F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PatchFile/appcloud/8600/Web/GNRemote.dll
- Size 2.8MB
- SHA256 40a02729b42c0afe8e89353b69a2c0bb3ad582ebedd77e1290c750f1600a50da
- MD5 f21c15deec79cf632742f2a7acb6c2fb
- SHA1 a02c46d2b14933077999082c14fc3da5149ec6ee
- SHA512 b8b318935f1f0d88515316f2d6bdedfce125c2aace25fa012a4eab3356f83cb2744f2de2266dec7f0d0be7faab66bf54ef59f3e28361960f0315ca732907e6de
- SSDEEP 49152:i9PCfftOcTqznYVAP+4yWM8L8OZ8N29pu1PnApn3zZWyHVgWyHaRZXRxzjPphkqB:isf+YOPnyWJ4OZy29pu1PQlWy1gfHaRN
- TLSH T19FD59E16EB41882AF0AE0474926D537FB524BB30032581C3F3C55E5AAAF59D27B36F4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PatchFile/esl/7000/Web/GNRemote.dll
- Size 1.9MB
- SHA256 0de5646adaa506642000b262947c8fbe5f2b8af8dc65a115501342a85bfd536e
- MD5 c1701186ae137a76c583b93b173e4a4f
- SHA1 0261a6ef4c5b739292add568ab9fa01f5a515dd1
- SHA512 2833ea5dea2121a6770e12ad45cb603bc3604b6fb4db7378e07c415e6b2a4fb945b8de9826ec521986ed48ca265ea6d6c7a8471c8d9799f51e3f721c72a04ab2
- SSDEEP 49152:aSNcI/IeGfUawGoPmqQij3M4gW1kbdUnVIwjv3723Vn9wdt5:kI/IeGfUawG8jf1kgIwj3tR
- TLSH T1E5957D13D741C82AF4AE00B6866C676EB554BA70132440C3F3C85E5EAAF59E37A36F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PatchFile/esl/7020/Web/GNRemote.dll
- Size 2.0MB
- SHA256 455fae741237fc3bedad083d274b6934b5d899bed3dd49265f2054da5ade77a3
- MD5 3c8218d93e5c5ac51a9f6f8e1630a708
- SHA1 c68a5e2ab88746640db9e8c7d72ed0913aa14f95
- SHA512 c46df576a7c8545bd64fea882dad4340103e437a966745554bb7d46dd00d5f676310f354497c946030895e89bd9f837393ae95d2715baaf9354d63ca400e2cf5
- SSDEEP 49152:qP/zq0oYjG3QJNP+vw8nUwlgpu6juNiKepuE3aEdjVIh:G/eFyG3QT+Iegp/uNH3
- TLSH T1BAA57D23E741C82AE4AE0476966C636FA524B9B0132440C3F3C45D5E9AF9DE37A36F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PatchFile/esl/7070/Web/GNRemote.dll
- Size 2.0MB
- SHA256 bc02134c95ccd48b75b93247e09eb44a29254f485ee2e75a63912d3218e1c888
- MD5 b5a4888e83e8a8a51630e27d435363a9
- SHA1 3ebb7e22a7054bcf98470b6e31ade59560e90ea9
- SHA512 26f581f9775ffc5e1ecb114fead9614f8abebb83a7e39183b9eac37bb092e0bf4596410ff6e373a9f9741caa07169b1f11739000ee270964c50e8586d24fbfb4
- SSDEEP 49152:MnkDE5kKlRVuikpwvKGmraP0KZaLK9Md67C1Fc1Xcg:MkDSk+RVopwAaPXaKYFG
- TLSH T19FA57C22D745C826F1AE0479966C536FA524FA70136040C3F3C85E9EAAF99D37A32F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PatchFile/esl/7100/Web/GNRemote.dll
- Size 1.8MB
- SHA256 f8f432493c70c2ef1e9a36480d49325309ad71934e1b8b15a9414339e3c85762
- MD5 edc80bedfa91d432353d0a9086a5ffe5
- SHA1 33753364e8bf0e43cd64d2d1132f769c2cc8ae77
- SHA512 29423edbfd41b4b753709f802e4387385ee5a33c2eb244397f3cfc78b974bf89459f7809f96aedb69f88b8515804c3d7558505ca975c9401269cbaef0eb74044
- SSDEEP 49152:TKXrhgc4Kkr8qqL5RCKw5OnhkLPNNuTScl:+Xrhgc4KkrA5RI5e
- TLSH T1F7956C12D741C83AE4AF05B6866C536EA514F630136480C3F3C85D6EAAF5AE37E36E17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PatchFile/pcloud/6450/Web/GNRemote.dll
- Size 1.9MB
- SHA256 0de5646adaa506642000b262947c8fbe5f2b8af8dc65a115501342a85bfd536e
- MD5 c1701186ae137a76c583b93b173e4a4f
- SHA1 0261a6ef4c5b739292add568ab9fa01f5a515dd1
- SHA512 2833ea5dea2121a6770e12ad45cb603bc3604b6fb4db7378e07c415e6b2a4fb945b8de9826ec521986ed48ca265ea6d6c7a8471c8d9799f51e3f721c72a04ab2
- SSDEEP 49152:aSNcI/IeGfUawGoPmqQij3M4gW1kbdUnVIwjv3723Vn9wdt5:kI/IeGfUawG8jf1kgIwj3tR
- TLSH T1E5957D13D741C82AF4AE00B6866C676EB554BA70132440C3F3C85E5EAAF59E37A36F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PatchFile/pcloud/7020/Web/GNRemote.dll
- Size 2.0MB
- SHA256 455fae741237fc3bedad083d274b6934b5d899bed3dd49265f2054da5ade77a3
- MD5 3c8218d93e5c5ac51a9f6f8e1630a708
- SHA1 c68a5e2ab88746640db9e8c7d72ed0913aa14f95
- SHA512 c46df576a7c8545bd64fea882dad4340103e437a966745554bb7d46dd00d5f676310f354497c946030895e89bd9f837393ae95d2715baaf9354d63ca400e2cf5
- SSDEEP 49152:qP/zq0oYjG3QJNP+vw8nUwlgpu6juNiKepuE3aEdjVIh:G/eFyG3QT+Iegp/uNH3
- TLSH T1BAA57D23E741C82AE4AE0476966C636FA524B9B0132440C3F3C45D5E9AF9DE37A36F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PatchFile/pcloud/7050/Web/GNRemote.dll
- Size 1.9MB
- SHA256 0de5646adaa506642000b262947c8fbe5f2b8af8dc65a115501342a85bfd536e
- MD5 c1701186ae137a76c583b93b173e4a4f
- SHA1 0261a6ef4c5b739292add568ab9fa01f5a515dd1
- SHA512 2833ea5dea2121a6770e12ad45cb603bc3604b6fb4db7378e07c415e6b2a4fb945b8de9826ec521986ed48ca265ea6d6c7a8471c8d9799f51e3f721c72a04ab2
- SSDEEP 49152:aSNcI/IeGfUawGoPmqQij3M4gW1kbdUnVIwjv3723Vn9wdt5:kI/IeGfUawG8jf1kgIwj3tR
- TLSH T1E5957D13D741C82AF4AE00B6866C676EB554BA70132440C3F3C85E5EAAF59E37A36F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PatchFile/tkpro/7000/Web/GNRemote.dll
- Size 1.9MB
- SHA256 0de5646adaa506642000b262947c8fbe5f2b8af8dc65a115501342a85bfd536e
- MD5 c1701186ae137a76c583b93b173e4a4f
- SHA1 0261a6ef4c5b739292add568ab9fa01f5a515dd1
- SHA512 2833ea5dea2121a6770e12ad45cb603bc3604b6fb4db7378e07c415e6b2a4fb945b8de9826ec521986ed48ca265ea6d6c7a8471c8d9799f51e3f721c72a04ab2
- SSDEEP 49152:aSNcI/IeGfUawGoPmqQij3M4gW1kbdUnVIwjv3723Vn9wdt5:kI/IeGfUawG8jf1kgIwj3tR
- TLSH T1E5957D13D741C82AF4AE00B6866C676EB554BA70132440C3F3C85E5EAAF59E37A36F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PatchFile/tkpro/7020/Web/GNRemote.dll
- Size 2.0MB
- SHA256 455fae741237fc3bedad083d274b6934b5d899bed3dd49265f2054da5ade77a3
- MD5 3c8218d93e5c5ac51a9f6f8e1630a708
- SHA1 c68a5e2ab88746640db9e8c7d72ed0913aa14f95
- SHA512 c46df576a7c8545bd64fea882dad4340103e437a966745554bb7d46dd00d5f676310f354497c946030895e89bd9f837393ae95d2715baaf9354d63ca400e2cf5
- SSDEEP 49152:qP/zq0oYjG3QJNP+vw8nUwlgpu6juNiKepuE3aEdjVIh:G/eFyG3QT+Iegp/uNH3
- TLSH T1BAA57D23E741C82AE4AE0476966C636FA524B9B0132440C3F3C45D5E9AF9DE37A36F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10