Overview
overview
3Static
static
3x64/SigDivort64.sys
windows10-2004-x64
1x64/WinDivert.dll
windows10-2004-x64
1x64/WinDivert.dll
windows11-ltsc_2024-x64
1x64/clumsy.exe
windows10-2004-x64
1x64/clumsy.exe
windows11-ltsc_2024-x64
1x64/iup.dll
windows10-2004-x64
1x64/iup.dll
windows11-ltsc_2024-x64
1x64/smoon.js
windows10-2004-x64
3x64/smoon.js
windows11-ltsc_2024-x64
3General
- Target K63apDX-2.zip
- Size 1.2MB
- Sample260712-ws68mafs2p
- SHA256 ae59951c6bf1b6865ac638ab7910c45f7e313161c6bb0a26614c3aa4577e0578
- MD5 dba03029ed42fb5346114c131acd53ff
- SHA1 2857b501454ef85bc1aa353e8735fc666a1d523e
- SHA512 9ad540ffce8c16eabf8981443e2016d3398ea2d475ba29ac267028d74dd86d36725a5d401d85dd8266ae254e4ee8d6377a6274ea75fef6b9c6d1d134c606b081
- SSDEEP 24576:aiaQM4QLl5On0Lz1aZ0US9q1QG0DiaOzws0wWiJ3th8rYkCxDjJ:aii4GpLzvFHG0DX80wVz8rYlDjJ
- TLSH T1634533966CFC417AA877DB7C66274F9E38C7614BA6516D3C44FCB0A690F0C38B562238
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
x64/SigDivort64.sys
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
x64/WinDivert.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
x64/WinDivert.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral4
Sample
x64/clumsy.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
x64/clumsy.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
x64/iup.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
x64/iup.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
x64/smoon.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
x64/smoon.js
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target x64/SigDivort64.sys
- Size 88KB
- SHA256 5c3e7bbb06ebb134bed7b1231fdf3139a2052cbe5e8c8418e54237933b51bb4e
- MD5 ae66b5b024e79f8b158bbedecd75f71b
- SHA1 72abf8ea3b82eff3c7da99500afc87670bef9c82
- SHA512 cc3657299118b7bb6537bff4ec0389b97d6ef5b351db5fd023787a64ca6b98062c6fe06a9dff8aca82fd0cb4532d517509b2e36247fa0b9de3116203b2e3ab47
- SSDEEP 1536:7ovgCRgYL/h//oJJw5AdPtey2AyWpdsimpxpWXixv6W:74jmJJsKle9A5pdsiypgovl
- TLSH T1DD935C46A2E201C5F9F6C97895B59253EF31FA91AB22C7DF11D0981E4F21BE0BD78321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target x64/WinDivert.dll
- Size 46KB
- SHA256 7d58c8cf67867b100b77f5a2609d3c85974855b010ba0c0d21bfe70b31a28347
- MD5 2d5129d8b6cd12db4cd58ace85541fc2
- SHA1 d0068deec4a88be593cbe6e7b5c4d9462f2f4e5f
- SHA512 7d4991e5cdd2194c35500f7d59beaf2642f88337f4b3bc770acfa42d9c6c0db352e190dd850adadeb5ccfb54b9338a28eb5a81594b0140b92c8334209bb84ff8
- SSDEEP 768:itSVluu2agCfRSB3QEw2VWHxWYuaO6JXtltdUBwhqWB8TicI:bUZWECHxWDABdtyTic
- TLSH T12C23C703F64251BBC568C27083AED3526E22FCC56354FADF829FF7952885F42DB1A509
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target x64/clumsy.exe
- Size 318KB
- SHA256 20e5b56259f59231f8b2e836bdccec09406a7c86283e6cdef5440e629573505e
- MD5 bc9a47b44bf6240fbc86bcf2173ce0b1
- SHA1 eaae20dee06ed1ae7c8e3b21f8593c92335a7451
- SHA512 cb78d2ddca64ccadcaa3f3bb78f032186f312689eacdf144c5700348800b3048d0df2f42ceef32b2900591203f573feba3a01205f07736f97a142ddefaaef248
- SSDEEP 6144:9rLnWN/TYXdj/4g6z5vggMd53XDMV01STBHrpBsiyW:Bn6/Twj/4g6lJMzHYVn5Qi1
- TLSH T138648ED3A44012F4F8298D35E03A18524A637D666F94F9EF7988F1275BB30D2523AE1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target x64/iup.dll
- Size 2.6MB
- SHA256 972275ea2e603f60a168d8090f8e15e4acb59512af03a51490d8c394dc6871b3
- MD5 a758fd567bf45810cb056e09482ec9c6
- SHA1 27883ffba9dfa8a06e935308eb2bb233ead2c836
- SHA512 ed680fe89355ee0ef537a06415f810db040fae0bd2726505eea23faf4927c27f8af391402f65d29cb7db1b034eacd523276e93d0b1dad714345e9b1df75b17f9
- SSDEEP 49152:+oQJPqj3dbslZXcSUdUL275cg3dnR7ShE:bQAjVsZL2Zr
- TLSH T15CC51ACFC66F6469F86950BA8654E966EE72F2412321CFD701208A653F33DED4A3B530
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target x64/smoon.ahk
- Size 3KB
- SHA256 47b0458c688a533d92eb0733a800c8a79d91b2cb7530bac6550f84c3fe72a502
- MD5 6f607aa9aa1c6940919706ccbb0eef85
- SHA1 8a290b933e2337f82cc96fc6e53c0429055038c1
- SHA512 82b826c9378a0e80a444450f12af2ebb02361ccbd18a9fba2ee9a89f8ef6d708656421f919859e67f45ca97cd23ed15acb39718185e9e53caab8b691e35f0e37
- TLSH T1AC512387329BE2589F507E1C4B364809FFEC993C1DD9AC7169839A88E48A463C07DD86
- MD5 SHA1 SHA512 TLSH
Score3/10