Overview
overview
7Static
static
7BCP47mrm.dll
windows10-2004-x64
3Setup.exe
windows10-2004-x64
5Setup.exe
windows11-ltsc_2024-x64
5directx/DSETUP.dll
windows10-2004-x64
4directx/DSETUP.dll
windows11-ltsc_2024-x64
4directx/DXSETUP.exe
windows10-2004-x64
4directx/DXSETUP.exe
windows11-ltsc_2024-x64
4D3DCompiler_43.dll
windows10-2004-x64
3D3DCompiler_43.dll
windows11-ltsc_2024-x64
3d3dx9_43.dll
windows10-2004-x64
3d3dx9_43.dll
windows11-ltsc_2024-x64
3directx/bi...er.dll
windows10-2004-x64
3directx/bi...er.dll
windows11-ltsc_2024-x64
3directx/bin/byond.exe
windows10-2004-x64
3directx/bin/byond.exe
windows11-ltsc_2024-x64
3directx/bi...re.dll
windows10-2004-x64
3directx/bi...re.dll
windows11-ltsc_2024-x64
3directx/bi...xt.dll
windows10-2004-x64
3directx/bi...xt.dll
windows11-ltsc_2024-x64
3directx/bi...in.dll
windows10-2004-x64
3directx/bi...in.dll
windows11-ltsc_2024-x64
3directx/bin/dd.exe
windows10-2004-x64
3directx/bin/dd.exe
windows11-ltsc_2024-x64
3directx/bin/dm.exe
windows10-2004-x64
3directx/bin/dm.exe
windows11-ltsc_2024-x64
3directx/bi...on.exe
windows10-2004-x64
3directx/bi...on.exe
windows11-ltsc_2024-x64
3directx/bi...oy.exe
windows10-2004-x64
3directx/bi...oy.exe
windows11-ltsc_2024-x64
3directx/bi...er.exe
windows10-2004-x64
3directx/bi...er.exe
windows11-ltsc_2024-x64
3directx/bi...er.exe
windows10-2004-x64
3General
- Target SETUP.zip
- Size 34.1MB
- Sample260713-ghv1aact3n
- SHA256 c938353d905fe678c4e8d9e732222eb4b651c096bc69149cf9e49d6b788cc500
- MD5 b7f341ece7cf17d1bddcc297b54c9564
- SHA1 a8d71c39c43db3d91af6803b840dab1bbd973e03
- SHA512 49bff19d6ab7bf9239af4a9011081c4b747d30bae272b1faa5aa8773dcf1bb1561d0c4c4b598e93a653ef8705affd7a10e166b5bd99cc00477af48a32e1a044e
- SSDEEP 786432:tnNcJdJq2oT6cnKkiFfPPLoaf2SlcSLEMLRV3+LJPKO1PWv:V6bqHVWfTRVOPKew
- TLSH T1B47733966A2C304BEDC1CBFD49A639CC1057359C18A13E6E5F6B4471F673728BC2B862
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
BCP47mrm.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
Setup.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral4
Sample
directx/DSETUP.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
directx/DSETUP.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral6
Sample
directx/DXSETUP.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
directx/DXSETUP.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
D3DCompiler_43.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
D3DCompiler_43.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral10
Sample
d3dx9_43.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
d3dx9_43.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral12
Sample
directx/bin/WebView2Loader.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
directx/bin/WebView2Loader.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral14
Sample
directx/bin/byond.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
directx/bin/byond.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral16
Sample
directx/bin/byondcore.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
directx/bin/byondcore.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral18
Sample
directx/bin/byondext.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
directx/bin/byondext.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral20
Sample
directx/bin/byondwin.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
directx/bin/byondwin.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral22
Sample
directx/bin/dd.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
directx/bin/dd.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral24
Sample
directx/bin/dm.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
directx/bin/dm.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral26
Sample
directx/bin/dreamdaemon.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
directx/bin/dreamdaemon.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral28
Sample
directx/bin/dreamdeploy.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
directx/bin/dreamdeploy.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral30
Sample
directx/bin/dreammaker.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
directx/bin/dreammaker.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral32
Sample
directx/bin/dreamseeker.exe
Resource
win10v2004-20260513-en
Malware Config
Targets
-
- Target BCP47mrm.dll
- Size 696KB
- SHA256 9bd0c4f849b54b4a94e54817aa32ecc34fd445a0ffc9a79e50e892c4b57649ce
- MD5 6bd7428d65475a2fb0f5055025c19711
- SHA1 f229fe1d186b0160f91f4bd0c966f2eda59067c1
- SHA512 d0769b89a31c1b8a928558308f08623ff2d94e30b118f4d8fb4934f0829749078a78fcab784324ca7dce768586efbd5ff4513d0789fb2011dfdb9e6890170f9c
- SSDEEP 12288:W45NpnZTotEo5ce2Mgf6ly6funKd7l3fjNZ33UtkAvQRnFcoEwLQDjreQKA0lh:NXkWo5Gi2s7Zj73EOjFcfwLQD3eQn0/
- TLSH T19CE41273B84CC132CAAF74B8015EB6BB936E91560B9100D353785BEAA8D53C19F741DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Setup.exe
- Size 94KB
- SHA256 8c1b9b8e72264e27253a7cc14d6f9a560a127ebd9f8bcec81faba94710c19a47
- MD5 eba77a34e9b8aa78fce520d1431fc68b
- SHA1 215105e2640cd6da8adc1ea9ddafeb08c4d50f9b
- SHA512 fa66a42dd71fc862c218777b572f143144a7de0c5d8630061a554e6ebb9ad4557d810e7ca75598254231cb41dec2391c49a362206b8275742b5a5b92ee33417f
- SSDEEP 1536:ZaakYDoIhIxHHWMpdPa5wiE21M8kJIGFvb1Cw3/73sJxy+C:FDpSwMpdCq/IM8uIGfN/73sJTC
- TLSH T1A593D541E62DBDDDE508D4310A75E0F25E24EC3176C0A51EA7F37F0629726A3F90A93A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target directx/DSETUP.dll
- Size 87KB
- SHA256 def6f245762be36cf18b435ba8b7ebc224b9c21d1a1db606a8e8fafdaa97bba0
- MD5 9e0711bed229b60a853bcc5d10deaafc
- SHA1 2bea53988bd35c5df5c9edcef0bc234c37289477
- SHA512 c0b31872e52c8f4270d991c70d1a1c9ef9a4bbee4807c54c05a449cd1607506ab16ff1e74b378651b36e3276322c86cd843565c8a1aa33a49c47322ef4df0185
- SSDEEP 1536:OtBqvGpPmOEll4RWxiF9G3ZnVdqkFKJuTJbHo0Xm+jN3i97ZTj4FWMD+ZJqsHPCH:OtAvG5mOEll4Roi2pVVFKJuTVtXVpS9a
- TLSH T1CE937E2176A0C176D4D7207875ACA37216BEB5B10BB880CBBB4617E9DC713C1BE3931A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target directx/DXSETUP.exe
- Size 524KB
- SHA256 046041aba6ba77534c36bb0c2496408d23c6a09f930c46b392f1edc70dfd66de
- MD5 ddce338bb173b32024679d61fb4f2ba6
- SHA1 50e51f7c8802559dd9787b0aebc85f192b7e2563
- SHA512 7a63925278332c8e7949555383b410d8848a7834b85f34d659e351ba78cbe4d2ec09caccb2178d801b9b68725c9cbae48a6a1f07f0804a0c41eb51df79b7eca4
- SSDEEP 3072:ti6LKecn5W6VOX6dRJar+GHs6Hl56MA6rKmMH2/5Mjt4zT1mFDYkCIEVNUrlfw0I:3F0JarNX6hWs4VRKs
- TLSH T169B49F5077F8D925F2F32B743AB9E26549BA7E80A934C60D2601525D1BF3B00E968F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target D3DCompiler_43.dll
- Size 2.0MB
- SHA256 2f23182ec6f4889397ac4bf03d62536136c5bdba825c7d2c4ef08c827f3a8a1c
- MD5 1c9b45e87528b8bb8cfa884ea0099a85
- SHA1 98be17e1d324790a5b206e1ea1cc4e64fbe21240
- SHA512 b76d780810e8617b80331b4ad56e9c753652af2e55b66795f7a7d67d6afcec5ef00d120d9b2c64126309076d8169239a721ae8b34784b639b3a3e2bf50d6ee34
- SSDEEP 49152:DpX9JVeE9HP6Zpy9KyhMI50Du8LljslNsHSHFUq9OiapbbO5Akb:H3P9HP6Zpy9KyhMI50Du8LljslNsyHiS
- TLSH T1FBA59E11E705D0B2CCCB00B16A5DB7A6647C9F30432096C7B2947EA95D72AF35F3AB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target d3dx9_43.dll
- Size 1.9MB
- SHA256 0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f
- MD5 86e39e9161c3d930d93822f1563c280d
- SHA1 f5944df4142983714a6d9955e6e393d9876c1e11
- SHA512 0a3e311c4fd5c2194a8807469e47156af35502e10aeb8a3f64a01ff802cd8669c7e668cc87b593b182fd830a126d002b5d5d7b6c77991158bffdb0b5b997f6b3
- SSDEEP 24576:8UtU6OIyl2Wy9M3bJ45fPS0zFZghQ6aOiFaKOE31GrvFXl74YZ29X1MDd6olmrBs:8566l2u45BiNYFrz31Cv3D29kd6kWa
- TLSH T14895AF51C5191075FDE69030110D32B2219C9B316391ABCF665E2ED9FFB8BE1EAB8387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target directx/bin/WebView2Loader.dll
- Size 114KB
- SHA256 93894609e3365b62fbb4d5b4219b4199a271888160669c33dbaadbbaf5aff087
- MD5 b8b62fcf0a2f220660dddb310e7e3e0f
- SHA1 da0d682c7bb82fa6d05ed12f88c8666d5e890dc6
- SHA512 c586751571c633e4cd88ac731011611da8efd3c19185240d9031c7448ba76e8d66d3489e754cffdf234690600d0a72cd18d32b7067697417b16b3e330263a0d3
- SSDEEP 3072:B4zLhblA9t2JqgDyBGFHyklk3QKHS8TX7jQEtpAl+92u6lO:gblct2JFkxkhEtisZ6E
- TLSH T1A7B36B51B6D08471E5BE0A3C0874EA655F3F7D60DFA08DEB27581AA94E313C0DF35A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target directx/bin/byond.exe
- Size 1.5MB
- SHA256 cdebcfd58a269f07782bbb5754ef8a5a258fdf3e681d89d58c5da01283e0f264
- MD5 61444ef1e077fdc040ea12a991e32c8b
- SHA1 175c4597acbed08f0c7d6b8f52264769b030370f
- SHA512 cce243f8fac24cf2e2d860474b3daa179b710079d00673b326cbe718641f76fc1bba17e7e71e503d929890f84efa3daa2fd67aba0779055bff6e70932ddb81db
- SSDEEP 24576:LacqSjaGerkLDG09PCfhqqLn3sT6Q54Dvy365+EwGCwy22XsmqlrUNW9uWB1ODFQ:LzHjaGeUG5qqbS26HTpXGZ
- TLSH T18375AE07A11AF622CE2502F8CC59F7EE1078BD581F5628D362B0BD5DE4B05D2693B63B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target directx/bin/byondcore.dll
- Size 4.3MB
- SHA256 0c4a6bb1084017f7857c6b24aeb29e4beef485fd7ad076b43801ee7761db0f99
- MD5 aca8217f50acc6f05b5e4ed1704311ea
- SHA1 504c431f0895b5c2fd3d806c60e455d548d16930
- SHA512 1244634500ee7d97c304223200ac7803e0f8ffb52f934e599615d075c4968021e7772548d24361461684ff0e5a02d11dba5e6439bfbebed69ba1c2d7f1bb4282
- SSDEEP 49152:WDOUNV5E4jlKvmw96cbLihLbjYOJ4emSdw7f2Zc3Of67naPR3eg3NBF7VrgTvMO5:ZUN5qdbL+FRmmMGgAdDiDM+x+T2nke
- TLSH T1EE26AE31BA02C039E5C911B0667C6FBB642D5635173A58D3E3D868B869706D33F3A72B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target directx/bin/byondext.dll
- Size 1.9MB
- SHA256 d7de5ad8cacf04e770e909494b0d9a8f1c4cebb28178480dbc8f518924901995
- MD5 528e3258e061c0629d495407bf954791
- SHA1 1518bcffa7ece1ec013c5f936b46f062a4d26122
- SHA512 5e27455dad42883da5daf36263bea042c54357117f71a90801608812af94c2ec32428efe71b77c6e40f421bf8e826ca38c101288a600358de16dc18060f6f100
- SSDEEP 12288:jI3JOdKuZVCnHhmGtUTMh0swI71MMz3TBxLycv1yXOvuU/yTFhjWzpl:aJ0KujwhztUTjsPMMzVNycCTnWzp
- TLSH T16B95D80759928731C4BC51B588EB557903362C4DAE840F9E7BCCE67430D35B8BEA2BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target directx/bin/byondwin.dll
- Size 2.6MB
- SHA256 e864ab41c928f0704a25bcd886dab80b0a8493b0d01195a17bb3b8ca825bb309
- MD5 0aad28e8f13b1d8f0e775d1c551c10f8
- SHA1 8180f24b3a7d7b2d41f51192d2e0e52a89b33bad
- SHA512 3a297bf8051ed4ce7ab3b911ec1e4729b5dd40294624e5471c510f5ba83fd55205091e7d406d2e6b754d35d8605361d9dc8e5dbb70592fd3152308517aacec24
- SSDEEP 49152:hOxNGTPStzYmrsI7uI4SADRH7zqx/1US3:hO6zStzjZ4SADRH7zqx/1
- TLSH T193C57D21764DC566D58E01308C38F7AE116CAD672B2CA5D752DC3DE9ED30AD32A32A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target directx/bin/dd.exe
- Size 37KB
- SHA256 3b776046e9cddd068a2271c9f056cbbbf165831debfa5a76350e7157a5c47bc2
- MD5 952adf05eb1b605d120d7908f7896761
- SHA1 b3b73b89c3ab04dcf9a91a832b24a2612312a691
- SHA512 ec802e7a5803a56631297980302ae6ef1a6a396000d26ee43945e9bc63d939ae0987d90e618e1d3524f2975d8672467a06afb4571e6e7f4e133726743b1df519
- SSDEEP 768:s01HB8N0+qh2B61c9PA7tJkSFMHMFg54tQdVQLMOPkoVmm:sIBubB61+PA7D7FMHWtuIkqm
- TLSH T1A5036D377AD94873D400023429392BFB867BE5320B6151EBF7CC0D1817B56D4AEB1AAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target directx/bin/dm.exe
- Size 45KB
- SHA256 ee78a6e064843e4547765a2369b8a0729be2d4b8bf89b04ffe667701843a0d38
- MD5 553f7e41250187e2db732b42aa612fd5
- SHA1 5459b8eec63e1fd8034a68bfe19b7de01aeb6e8e
- SHA512 e916ad87ffcdf902bd9645901f83b9c48b8166b2f3f47858fcd4194b035678cbfe615e5eae9fcf2efe8d0015e35f2d7f0f1297d187f07daa97a04c89c3810b7c
- SSDEEP 768:+2o7KrmE1CZsrKxMpbJDSbLF1KOjnsSr4FX7uU2RQeW4ykeQb:+2o7oDlmct21KOjnsDuCMykP
- TLSH T1C12329377E4A8622D461527015364EEB86BFE2610BE044FBF3484D2927337D29D7B62E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target directx/bin/dreamdaemon.exe
- Size 262KB
- SHA256 239b281b01b256347a94e7b4ed45d38d1c803c630b1b53544d2898aae0b97a0c
- MD5 494259df394fbef3530e8b841652b515
- SHA1 c1085c8e0fe480ccb157689dbd450e95aa278cd0
- SHA512 27139ae3ad67eb3c8ee2f983a664fbb5ec57e35c0981ef410532b02a5bace0445550e90ac8c28d570f980eeefd14722b4bc0965d5e2636d18ff18a8e01f16078
- SSDEEP 3072:xJoms+ZOUjUdRta9Km/rqa+UEBU0IF3YcQCIX6+/HzfNZ2nlrGJaQ2/7f8/ZPjMz:xJor7a9Kmzqa8BU0KFIzc0tJCp
- TLSH T1A6446C3335998473D9620130A4A967FE663DEE140B3649D7A3D41F7E38319C32AB19BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target directx/bin/dreamdeploy.exe
- Size 50KB
- SHA256 1bef06d4a6875e7f4dee2aa8c5785f1a6c234ccdcd1bffe77f3b61258c4d0a57
- MD5 221d6f04985293d0863f9bb37cec6230
- SHA1 6919e5d2d6046a4b76665710c735ca57b99732fd
- SHA512 866109e1ca3a2114aac675740783e8ec4942242f2b642f8f5c254cba73d5fda2bb99636995188c0b6cfe923bb44bf8a1063d2f7439141932a43cfcbdc3d5d8a1
- SSDEEP 1536:Xp4hxAHCFft2FQmulJfons8Vocd2ZzCoP/4em:XpsxMVOC1p2ZzCon4p
- TLSH T189331A03BAE504A2F573AB75A930A6A5867FB9221F509DEF63404D1E19309D2DC30E3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target directx/bin/dreammaker.exe
- Size 2.0MB
- SHA256 f502070400b8a469156f4c17f24b3323a81f989caa2758e66e4baae27316fa7c
- MD5 f1a58c8c3c999cf1896702d8fce55801
- SHA1 b44977aff8237cb68bcc3cef2aba3d887b78bb26
- SHA512 272645fae7b591251f8dea7de030a70362e2842823ac7410de85c917596b0f2b279b1d17e8a1838a52e9ad978f799d03c2ef460f97892abeccbb4c8941c4465f
- SSDEEP 49152:P2WIofEBTaX+tkiaWnZnTfAfuJhp5ovF:P2WIofEBGX+tP55Jhp5
- TLSH T13CA57C32B6018536D9E21130893D67FB062DFEB05B6615D7A1982E7E3C307C2AE3965F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target directx/bin/dreamseeker.exe
- Size 860KB
- SHA256 38df47c3d741df0522cc356e7d2fb211993f89e4b6ce7257fbef278d001754da
- MD5 c674829edaf6992757ec0e65b112f396
- SHA1 71063a72c602d32ffd471794fad2443e28575706
- SHA512 2cc26ea8eb130c6e312bb5808be3f563acfa599e7c6249f553904f8f2e4bfe4ab9f4a23366c1fd1999ccd14039585537e85d7c2ffcd80ae49c8cd6dfe5c1b8c3
- SSDEEP 12288:STjqfWCQZBsWRRWH67ByZ9Js9HkiDniOiTeuj1oaoo+WOX9mU8HPIdX8nkex2KBV:STj8WCk6KYZ2OPlOXSgikYBB
- TLSH T167156C73B64642BAD9F420365A187BAB843DE8704F361CC7D2946AAD18385C36E34D7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10