Overview
overview
8Static
static
8playit.exe
windows10-2004-x64
7playit.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3D3Dcompiler_47.dll
windows10-2004-x64
3D3Dcompiler_47.dll
windows11-ltsc_2024-x64
3PLAYit.exe
windows10-2004-x64
3PLAYit.exe
windows11-ltsc_2024-x64
3Qt5Core.dll
windows10-2004-x64
3Qt5Core.dll
windows11-ltsc_2024-x64
3Qt5Gui.dll
windows10-2004-x64
3Qt5Gui.dll
windows11-ltsc_2024-x64
3Qt5Network.dll
windows10-2004-x64
3Qt5Network.dll
windows11-ltsc_2024-x64
3Qt5Svg.dll
windows10-2004-x64
3Qt5Svg.dll
windows11-ltsc_2024-x64
3Qt5Widgets.dll
windows10-2004-x64
3Qt5Widgets.dll
windows11-ltsc_2024-x64
3Uninstall.exe
windows10-2004-x64
7Uninstall.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3avcodec-57.dll
windows10-2004-x64
3avcodec-57.dll
windows11-ltsc_2024-x64
3avdevice-57.dll
windows10-2004-x64
3avdevice-57.dll
windows11-ltsc_2024-x64
3avfilter-6.dll
windows10-2004-x64
3avfilter-6.dll
windows11-ltsc_2024-x64
3General
- Target playit.exe
- Size 31.5MB
- Sample260711-gymnvae141
- SHA256 2d660eedac61814dfbae5f95c2d0a200a58e9769d6386ccc0e80a59f7d8c9470
- MD5 2b3c8dd5f06378e78ad6fbe7afdfbe96
- SHA1 ae35be0bec900a79816e56999faa6d35bb65b9a3
- SHA512 46ce1f31e017afda7bf1e6f60a2ed6732b41c752a02904b339b3ca8dbe6f40509f02a5afeee0a03e3bd2bfce05cd9649e1eea3a2a8a208f0202e9ccb6bd378c5
- SSDEEP 786432:zO7aBu2jiJusex/3dt0BYoOzL9VFyx6V7WpFHzv408kMTvvMRW:zuXXJunxfNoQRVFQ6lWpFHzv4XkSiW
- TLSH T1437733C4FECCC88EE77AB53DB1E9D508CA67D91C1007145ADA1EFA9A427874A34EA017
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
playit.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
playit.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
D3Dcompiler_47.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
D3Dcompiler_47.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
PLAYit.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
PLAYit.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Qt5Core.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Qt5Core.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Qt5Gui.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Qt5Gui.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
Qt5Network.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Qt5Network.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral17
Sample
Qt5Svg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Qt5Svg.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Qt5Widgets.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Qt5Widgets.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Uninstall.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Uninstall.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
avcodec-57.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
avcodec-57.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
avdevice-57.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
avdevice-57.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
avfilter-6.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
avfilter-6.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target playit.exe
- Size 31.5MB
- SHA256 2d660eedac61814dfbae5f95c2d0a200a58e9769d6386ccc0e80a59f7d8c9470
- MD5 2b3c8dd5f06378e78ad6fbe7afdfbe96
- SHA1 ae35be0bec900a79816e56999faa6d35bb65b9a3
- SHA512 46ce1f31e017afda7bf1e6f60a2ed6732b41c752a02904b339b3ca8dbe6f40509f02a5afeee0a03e3bd2bfce05cd9649e1eea3a2a8a208f0202e9ccb6bd378c5
- SSDEEP 786432:zO7aBu2jiJusex/3dt0BYoOzL9VFyx6V7WpFHzv408kMTvvMRW:zuXXJunxfNoQRVFQ6lWpFHzv4XkSiW
- TLSH T1437733C4FECCC88EE77AB53DB1E9D508CA67D91C1007145ADA1EFA9A427874A34EA017
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
- MD5 56a321bd011112ec5d8a32b2f6fd3231
- SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
- SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
- SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
- TLSH T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 4cd17f660560934a001fc8e6fdcea50383b78ca129fb236623a9666fcbd13061
- MD5 f832e4279c8ff9029b94027803e10e1b
- SHA1 134ff09f9c70999da35e73f57b70522dc817e681
- SHA512 bf92b61aa267e3935f0ea7f47d8d96f09f016e648c2a7e7dcd5ecc47da864e824c592098c1e39526b643bd126c5c99d68a7040411a4cf68857df629f24d4107d
- SSDEEP 96:ytJ6tC4jcY5rKhkfL9SYdKkcxM2DjDf3GEfKvBKav+Yx4yndY7ndS27gA:yyj6QS8HREf+BYYxbdqn420
- TLSH T19212F9675A0011B3E9A3223D306A2E3F977C9325D0527C03C677AE562BF031A7D3A355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target D3Dcompiler_47.dll
- Size 3.3MB
- SHA256 efbdbbcd0d954f8fdc53467de5d89ad525e4e4a9cfff8a15d07c6fdb350c407f
- MD5 c5b362bce86bb0ad3149c4540201331d
- SHA1 91bc4989345a4e26f06c0c781a21a27d4ee9bacd
- SHA512 82fa22f6509334a6a481b0731de1898aa70d2cf3a35f81c4a91fffe0f4c4dd727c8d6a238c778adc7678dfcf1bc81011a9eff2dee912e6b14f93ca3600d62ddd
- SSDEEP 49152:PyZ9lnpmVm/w+EwVOmufvkQS8MH2J9CqS5Sqr88pPWW5KhQYPsXqUiQ6:E9fWAwVBC8MH2JNSF8+YPsXqUT6
- TLSH T1DFF59F21F701C077C8CA01F0666E7BA6257C9B75033945C762947DA9EC702E32F3AA6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PLAYit.exe
- Size 174KB
- SHA256 891f92136eac91dc3501fb6d83f7878b330bf1d511574ca5048f98380bdfa218
- MD5 eed29cdadb14be9ea1dc71f386e7e191
- SHA1 fc4502475c69ccf701f7cbbe831c29890c805578
- SHA512 9f31cbc616208a22bfd59bec073979df09650c741d0c53b6cd12719559629e03bd523717f63a4ec6009683f87fcc21327da16236673bcabd696003a63516663e
- SSDEEP 3072:kL2vr2UU2bY1ZTXtJrv2GcBn8EnxBzfiHAdVnRV:kL2vr2UU2bY1ZTXtJrv2GcBn8y
- TLSH T16F040EA57F85C08AF315E4F9A0E4CA50D96BDE5D1A0B0096CE2FF66A537C78839F2113
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Core.dll
- Size 4.6MB
- SHA256 23fcd971ba4f32e5ffb60e3603bb145f7094fef360392caabc42d95b5d418f8e
- MD5 7a97bfe411691baecb264c16f4ae24df
- SHA1 648ba0d9abf2ff0dbca37f5615090a7f481268ae
- SHA512 c7501a5049f830ef88e2b46eff59588eb4e8239d1e96ee585513adef1f15506d870960b2667ae816032734bef0d55ce034b601b2e1f7e7181c1f4c18d2622c45
- SSDEEP 49152:BaJECTCYzPvp19cT1uAKdrg+MVP4WJsv6tWKFdu9CQTde4+4QSxHSA0dJxT0IcW5:7rWH9kKUjJsv6tWKFdu9CxGO74fo
- TLSH T158268EA366ABC536F6D282728CAADB2F0025AC150B51C5C7F38C361959716E27F3B14F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Gui.dll
- Size 4.7MB
- SHA256 e6005d3498d0e500b2b666554040309df20a5eebc941909ec3ef3fd1e3ac8f62
- MD5 057e7d316770a407977569461a69f5d9
- SHA1 6babc7d9a428cf2bc977875f4df0d0db303063d6
- SHA512 d8bbb2918cfae5745326295c627f244e47b31bf1f1282dccd8b49ef06dc657cd8cadfdf02de9f5a68be86a797a2182df41fec73db7a141c479d999259e4dfe07
- SSDEEP 49152:q1hjW8IosfO9c+XNSdhng63/NB9+5ZpKzxk3qZKoWTaDY7f4c9c9cJ83q6wRAEui:yWhox9c+Xohng630qKCYPFO6f
- TLSH T1C6363AD161827173CDA3D2BA670F563FA0B7AD56C30482C3C594AA9488B43FA1F7BD16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Network.dll
- Size 944KB
- SHA256 c406b7bc74107fb8419da7e2a8c67e47a331d5a54baca94257bade86ce061e24
- MD5 8a6687a0612280bde7ed3e2b81a69230
- SHA1 203652a125e8b646269befa31fc1905906ca5244
- SHA512 f72b3a1b55c7236a1ef448c4a3e2326a51441b75e699972ae2d614a1c47c7a185419aabb36c8f787b32ed021eee1142bd52e18733a4c4ed2a64c4b76f188baea
- SSDEEP 24576:8m2dQ8X/3YVsSqSoIlWs3+vZAuHBXLVtxRt:83y8X/3YwIT+v771
- TLSH T1A7254BAEF28744F2F84881F5455DBB26D73DB1268706CAC3B31C9E56609E3D22E3D186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Svg.dll
- Size 264KB
- SHA256 d8b65260e9accf0c33ad8b5bbfdbbea0678a00d481e2b0a9ed2c92baa096ec80
- MD5 8144b3e3430d8ac5d42fcfe49e601722
- SHA1 dcac61a2e8a6bacb9c5e7a56e5e6a9b5259e485f
- SHA512 2978b1c12aefe39a07dad59e058733caf29a5f054824430f232e4d852123811267b16dff052600e37bb15d4086fbd73e3286d261e6b8bb1ca34720ce7ac567cb
- SSDEEP 6144:LcVUVhd70Y/gYaY2s1eMBn2+cy8DvMjq7XNNJ2PqLyREcm9Jo1vi6:L3hd4YgYxeuvi6
- TLSH T19E443A62B2420D67D48ED378184F6A27DD3EB106037D97EB97CCB824546B3F25DBA242
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Widgets.dll
- Size 4.3MB
- SHA256 173299de94585b38e872ce40fdaa84b42617b9766812d9772ec954832a197dc7
- MD5 fa4826e180cee08c46990bea2cb430a5
- SHA1 4a43dd9f699a8ec38a5b3104bc7eac8ee4c51da7
- SHA512 685a6e314025804290a0c6cf214eb4f80c93344fc353767e8bc8363df4bf09e8fb91dfb012cfdd93017b34006ca95adb92b762ea511df5a299780550c9bdd2d7
- SSDEEP 49152:kzN3TWQJoZnS0HPPvk1eslELFrcwvZKtWdWgGXSh9JL:qMQJo1/GplEhrcwAfih9Z
- TLSH T1F226AED3B28280F1C489E1B4C85EEB73D57AB1194B1656D7A39CEE42245C2E31D3F2E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Uninstall.exe
- Size 177KB
- SHA256 1d97338d798e0f96849db3f5afaa5ece993732ff282b34fe2a8184653a60b84e
- MD5 0048b89e6ec5b69e6c0d82b9b52a0993
- SHA1 9d8260425554e054e772f48d4a228e195902a5e0
- SHA512 3827fa5b10d9dce49f5c771da15266c3271501dd3d89fcae00d12f66c8e96517e3a1ed2cc4876ebb15729a29abab44ec57d4c7853e3a94576be76219c23a082e
- SSDEEP 3072:dJ2S2L6KbqDCwcr6fiHAdVdW8EnxBVA3R9X7Hps5Wuu:d8LxBXX8ySvX7HpFF
- TLSH T1250430A47F85C4CAF316E8B960F48A54EA2B9D9D190B005ACE3FF07A537CA5879D3113
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
- MD5 56a321bd011112ec5d8a32b2f6fd3231
- SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
- SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
- SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
- TLSH T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 4cd17f660560934a001fc8e6fdcea50383b78ca129fb236623a9666fcbd13061
- MD5 f832e4279c8ff9029b94027803e10e1b
- SHA1 134ff09f9c70999da35e73f57b70522dc817e681
- SHA512 bf92b61aa267e3935f0ea7f47d8d96f09f016e648c2a7e7dcd5ecc47da864e824c592098c1e39526b643bd126c5c99d68a7040411a4cf68857df629f24d4107d
- SSDEEP 96:ytJ6tC4jcY5rKhkfL9SYdKkcxM2DjDf3GEfKvBKav+Yx4yndY7ndS27gA:yyj6QS8HREf+BYYxbdqn420
- TLSH T19212F9675A0011B3E9A3223D306A2E3F977C9325D0527C03C677AE562BF031A7D3A355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target avcodec-57.dll
- Size 10.0MB
- SHA256 78f4a5e11238fc4cb5f3db7fd14f696bf7f6f6f8f78b10cb3d52b7a8c9a01c41
- MD5 170b11e14dd284e7ca0deb2781a95fd7
- SHA1 14c9bfa8b38be6beb2d7e8e1dc1c5d077f04922d
- SHA512 53b0383ca59bf158781421b736e3979bb57ca4cdec3f41de772275b41d5219c66f668b30f2c2eea52ac3366949645229bb9a304af539e9f4785cd3962d363656
- SSDEEP 196608:4ZvbBa17SHATjO8r8m+mV2wM36M32pQ3bVot0oakH1t/bOUtpPHh9:uAQG/j/bOUtp59
- TLSH T1D5B67C41FA8755F2EA6709B1842FF23F9B346E088021EE72FF897B85F873B115519249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target avdevice-57.dll
- Size 131KB
- SHA256 09e5c1b1d9609727dcd0d5597b4182bd69898a2147df26d7127e35e2b1b932aa
- MD5 7252f0a4765e5785434746d51b99e30d
- SHA1 e1fc50d58bd30e92b46193cf1669cce630c1b675
- SHA512 0cb7b4851368c23b4a446a6407310e24c2d7fc1b3c278d1f60833375ee451d5616c650c4f55be9bf489c74b111895751e91621381b1abf2072a086f7324a2742
- SSDEEP 3072:+/JcC30pgDED8gpeK2MFsPfw5zgEtKBAPcB:SJcCkpgw8pK2nPY5zgEtKePS
- TLSH T126D34B48FB4754F1EA6340B2A24BF73F97209E06C365FFA1EF185395F833A12A61A501
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target avfilter-6.dll
- Size 243KB
- SHA256 8bc3d68546da44e3ddb9aa51dbe4c99bcfa965d94f7ff785ff9731ffcceec68d
- MD5 f41d569c3964877df3fef5b78acab9f0
- SHA1 b8fcc593311d2a6a15e557a7129029c896b4d50a
- SHA512 865ae430dd00500773341d42837ef3580e30760161648967c3006d568f2ad1b06f9e81c191eeaf77660ab36abe990d5a8aafbdbf45ae38b2711e1bb3425043f3
- SSDEEP 3072:aMSKjZUzgH8WdxiHfLSXVTkB3Nq5dlG0CzR5ZGAlUwl:Q5zgMHeX9kB3NqTlG0CzZGAlUI
- TLSH T14F344A95E68B18F0FA6B95B1D17FE33F97505A1AC020EF71EF4D9A06F433A06981E205
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10