Overview
overview
1Static
static
1dotnet.exe
windows10-2004-x64
1dotnet.exe
windows11-ltsc_2024-x64
1host/fxr/8...xr.dll
windows10-2004-x64
1host/fxr/8...xr.dll
windows11-ltsc_2024-x64
1shared/Mic...rp.dll
windows10-2004-x64
1shared/Mic...rp.dll
windows11-ltsc_2024-x64
1shared/Mic...64.dll
windows10-2004-x64
1shared/Mic...64.dll
windows11-ltsc_2024-x64
1shared/Mic...re.dll
windows10-2004-x64
1shared/Mic...re.dll
windows11-ltsc_2024-x64
1shared/Mic...ic.dll
windows10-2004-x64
1shared/Mic...ic.dll
windows11-ltsc_2024-x64
1shared/Mic...es.dll
windows10-2004-x64
1shared/Mic...es.dll
windows11-ltsc_2024-x64
1shared/Mic...ry.dll
windows10-2004-x64
1shared/Mic...ry.dll
windows11-ltsc_2024-x64
1shared/Mic...xt.dll
windows10-2004-x64
1shared/Mic...xt.dll
windows11-ltsc_2024-x64
1shared/Mic...rs.dll
windows10-2004-x64
1shared/Mic...rs.dll
windows11-ltsc_2024-x64
1shared/Mic...nt.dll
windows10-2004-x64
1shared/Mic...nt.dll
windows11-ltsc_2024-x64
1shared/Mic...le.dll
windows10-2004-x64
1shared/Mic...le.dll
windows11-ltsc_2024-x64
1shared/Mic...ic.dll
windows10-2004-x64
1shared/Mic...ic.dll
windows11-ltsc_2024-x64
1shared/Mic...ed.dll
windows10-2004-x64
1shared/Mic...ed.dll
windows11-ltsc_2024-x64
1shared/Mic...ns.dll
windows10-2004-x64
1shared/Mic...ns.dll
windows11-ltsc_2024-x64
1shared/Mic...ns.dll
windows10-2004-x64
1shared/Mic...ns.dll
windows11-ltsc_2024-x64
1General
- Target dotnet8-win-x64.zip
- Size 31.8MB
- Sample260713-w42saagt3v
- SHA256 922d11b01e922b8f9971bdf71ed3bda754399f5e78ddd30f99593e7aa9a8b6cb
- MD5 e9ae1316122d877beb66163fc5789804
- SHA1 4c8a80b6498c63c407b1c1f243be90f2142ad09c
- SHA512 096632e933c94413316c7f7d54541cfbec76d0d77776bfdeda1cb155567a6eaefb33bcdd1e36d9add3bb0f276418b3615782489be3e1cb9e628138c8b91c23e2
- SSDEEP 786432:2TAnXZQ56C8fV5rjmy0V7wWqJR5TfumvJgbR7G7Tik2gXEXFA3u5:2gpQ56VdUy0VOrgR7wJ2geFA+5
- TLSH T10C7733BCD788A3B3F27645B32571AFA1217D4F6EE30D8B21BA9501CB1BC7E0116AD215
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
dotnet.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
dotnet.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
host/fxr/8.0.16/hostfxr.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
host/fxr/8.0.16/hostfxr.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
shared/Microsoft.NETCore.App/8.0.16/Microsoft.CSharp.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
shared/Microsoft.NETCore.App/8.0.16/Microsoft.CSharp.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
shared/Microsoft.NETCore.App/8.0.16/Microsoft.DiaSymReader.Native.amd64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
shared/Microsoft.NETCore.App/8.0.16/Microsoft.DiaSymReader.Native.amd64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
shared/Microsoft.NETCore.App/8.0.16/Microsoft.VisualBasic.Core.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
shared/Microsoft.NETCore.App/8.0.16/Microsoft.VisualBasic.Core.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
shared/Microsoft.NETCore.App/8.0.16/Microsoft.VisualBasic.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
shared/Microsoft.NETCore.App/8.0.16/Microsoft.VisualBasic.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
shared/Microsoft.NETCore.App/8.0.16/Microsoft.Win32.Primitives.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
shared/Microsoft.NETCore.App/8.0.16/Microsoft.Win32.Primitives.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
shared/Microsoft.NETCore.App/8.0.16/Microsoft.Win32.Registry.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
shared/Microsoft.NETCore.App/8.0.16/Microsoft.Win32.Registry.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
shared/Microsoft.NETCore.App/8.0.16/System.AppContext.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
shared/Microsoft.NETCore.App/8.0.16/System.AppContext.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
shared/Microsoft.NETCore.App/8.0.16/System.Buffers.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
shared/Microsoft.NETCore.App/8.0.16/System.Buffers.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
shared/Microsoft.NETCore.App/8.0.16/System.Collections.Concurrent.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
shared/Microsoft.NETCore.App/8.0.16/System.Collections.Concurrent.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
shared/Microsoft.NETCore.App/8.0.16/System.Collections.Immutable.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
shared/Microsoft.NETCore.App/8.0.16/System.Collections.Immutable.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
shared/Microsoft.NETCore.App/8.0.16/System.Collections.NonGeneric.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
shared/Microsoft.NETCore.App/8.0.16/System.Collections.NonGeneric.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral27
Sample
shared/Microsoft.NETCore.App/8.0.16/System.Collections.Specialized.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
shared/Microsoft.NETCore.App/8.0.16/System.Collections.Specialized.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
shared/Microsoft.NETCore.App/8.0.16/System.Collections.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
shared/Microsoft.NETCore.App/8.0.16/System.Collections.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
shared/Microsoft.NETCore.App/8.0.16/System.ComponentModel.Annotations.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
shared/Microsoft.NETCore.App/8.0.16/System.ComponentModel.Annotations.dll
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target dotnet.exe
- Size 143KB
- SHA256 244b00f49442bf6263efb91ef7d976d08f983ef2fda35bf2c71bf7a8c3a9d862
- MD5 728364e67d9c54944a89c8129cb4b6ad
- SHA1 641373f986615178be96317ff88d7727f5a1dbbd
- SHA512 2edabf58d4ce377adc9841b7301de1b4f0c533ac580ea4160e841f58eac3d793a38d8d2e88ee7c9627075f387632508289f524f25aa9c01026773c7794974c4d
- SSDEEP 1536:HvJ9psmemUoXVpuoM+/7BUNs9OFVJqp+oIBQepE4XAdEkQcrfezP:HvJ9psmeIBcV8pCFq4XAdEkQqWT
- TLSH T164E3D41AD29802E8C06E6175C7968A41B7377C6583E1D3CB53D0F53E1F76690AEEAB03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target host/fxr/8.0.16/hostfxr.dll
- Size 341KB
- SHA256 80cab4e0c3b24934682f9735d4fa025f000465d6a8a746f6154a8e9b1f7b2b73
- MD5 cfe0b17b669aab74881c8a5d8eb0b32d
- SHA1 916d167bd01d80dda237471527a07f894ce16136
- SHA512 85c7073f02fb23593e56a4f28579bd6eace91926670153b10f082036ac896b95e339e130c5fff9d706981dfbd7043289a4dd19ec32a6d4762706862855694df3
- SSDEEP 6144:PN8271DL9cajUOMbCgCa6JZxHk7SRxo9aQP:VFpQOMbpkRR69a6
- TLSH T1D3741916A2F801ACF1F7A3789AA79901E77B78450770D6CF0390856A2F63BD0DE79721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target shared/Microsoft.NETCore.App/8.0.16/Microsoft.CSharp.dll
- Size 982KB
- SHA256 f2eb90db565c779f3342a2b8c97092f7a7735265278c5483950b4ad01c9511b4
- MD5 707215604758afc239455f343138f5e5
- SHA1 897851d1f548e765508eaafd01cb7c33cd373424
- SHA512 a4b1bf2483ad923ab83bd31cac121960a91f691c0ae90be75ae6309f6969b31de49d9d792e68299ead8aeafb2a53d2cac0a7d6010361ea4748837c24785bd190
- SSDEEP 24576:56vJq30vVE6z8LpeNY+9whtbShFtHVu9yHBsC9DUD3IO:gQ34VEYKaY++tbiHVu9yHlgrr
- TLSH T1D7257B14A3C44E06C2AA87BCC1679602D6F5F453D33786EF0484EE752F837C29A77A66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target shared/Microsoft.NETCore.App/8.0.16/Microsoft.DiaSymReader.Native.amd64.dll
- Size 2.1MB
- SHA256 315a61c47c41b8d4c815f4274bb6584c1d24b4640c7eedc354ed5b03a9a1361e
- MD5 e4dc9335fb0065d4b3066fcb8a878a9a
- SHA1 0d66f04b77a0726f1bc2077675d485700848d9af
- SHA512 929eb77e8b843e484ee74b408edfefffa15d0ee75d70d3b47a808fe380eeaaa9dc40bb29ef549e47e89dbeab159f806b4f823e8d3dc85e657f7bb32485a1c947
- SSDEEP 49152:8oJlAZFbi/H3LzED3pattTg4nm1OPriyQ:gZFbiPcEHg4mUPQ
- TLSH T1BBA58D97A3AC41E4C47AD178D66B460BE7F238050321A7DF02A0863E7F67BE15A7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target shared/Microsoft.NETCore.App/8.0.16/Microsoft.VisualBasic.Core.dll
- Size 1.2MB
- SHA256 6a8d1c202c446cdce4c9fdf7f7fa052a1a7224370a57b42f9f592a73192fe2dd
- MD5 42483a12545590e8555bc5a839ba1005
- SHA1 a5b4deca4cdba74d1cbdb1bb2e3b3915c558a695
- SHA512 558b5316bb4f3f1543703ea24c9e0b81105b2b4f7d00039bb0a6ee50e18e29c6539c47e80ac2384453fd3e641e74911bd1deb3e8419dd158a7945809694bd2b8
- SSDEEP 24576:isv1zOPj/l89Sk2f+/eOUCxRepC3/Rk3iQbFqUY:isv1zOP7ymf+/TZq3iX
- TLSH T16D458E08ABD4CE06C32F93BE825B8201E1F1E5165769D6CB0458CD561F837D367B2BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target shared/Microsoft.NETCore.App/8.0.16/Microsoft.VisualBasic.dll
- Size 17KB
- SHA256 3c965402ae761304f1853e9d9162b00b56fd14606e290b6b3109bdbf1336ef6f
- MD5 1be0ea7a0cca9d7b46e2b54f6dfee9e6
- SHA1 96f65ebc271c970ae744384c85235036122557f8
- SHA512 a73b3b4a9da5bba7df104dd447565dcce8ad869e4f5fce0e93892548f381c183062290714e7f665b5629d41abbc46f8e907f9b6702f586cf314e7c8ea66c8e12
- SSDEEP 384:Yku3cZ5OxWmH6F9QdWw2fLXmztvGHRN7Nwo7R9zT1HwgS:duMZ5rk2jQtaNZ9zZwj
- TLSH T10C82199596348A23ECF76E706E93D5433FB967C34A349B370489E6051853384EB3932D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target shared/Microsoft.NETCore.App/8.0.16/Microsoft.Win32.Primitives.dll
- Size 15KB
- SHA256 2b838d9a33dae53f6913265b85f66c2e29bf6dfc0274f3f137cb76452204df54
- MD5 41dfc295530155730b809329e3b706cd
- SHA1 7f873b246b5096a09b07a78ed5b6f7ce4ca6bcfa
- SHA512 7345f1b72d01d7e5e941d36032d5e02305dd5355a53fb3d210b59f315ea1250d3f7a84ec1e81b241e03a343de03ea4f301c6562dd08c18d0bece8731a1e430a8
- SSDEEP 384:XiLJNFWhPypWmfLXmztvGHRN75TpOE/R9zFdq:XsfHjQtarOa9zTq
- TLSH T1FC625C96877C0203EDA79EB096E6DA873D39A3C75D00A66A0685F6541CA37C4DF3073E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target shared/Microsoft.NETCore.App/8.0.16/Microsoft.Win32.Registry.dll
- Size 118KB
- SHA256 391a8a8d848ce08c63dcecfefead1ff802be39665490ce7790c7e89dae5fef4c
- MD5 daeaeb0eee84e03b22d92001a72da72b
- SHA1 8b114292ec360e2360210cd73359dcd53bf19995
- SHA512 0301000f1b79464668c2710d28ccd8ee7d17d24ce71ce7ec76428b579d71e8a2364125ce0b2f6329629c5f7950eca7c509e2b6c03bed6a7547bd39ca167e8799
- SSDEEP 3072:bY1wNXwrxO7wECisvqzJSvEVcULViEriw1dmQlR:3NICFC6zJSvEVzDDIQL
- TLSH T181C32A1177C4030FFAABCA7988638985E672E1871701EECF9685C16E3F5BBC6E671601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target shared/Microsoft.NETCore.App/8.0.16/System.AppContext.dll
- Size 15KB
- SHA256 91f2c26de61b6feb64bc7616c8497549c6a9d6288ef2991c1f9fb092c67086c6
- MD5 260dbd981b2483ac4e8c893fea5b9120
- SHA1 1b25e0ac8783d7ae18d8406280f7ae8307b503eb
- SHA512 c3234f5c6263f7ff82585ee90e45f95341b8641b92501184bb4e53461c7e8db107300014194ad90a472a560548cd09f1cfa4a32878bc48f945fbb766522dafb1
- SSDEEP 192:tYjlxA5eaW+3c7WhjWaLlVmchOIEvYFHnhWgN7acWWME/FqX01k9z3ApXl:tkPdaW+M7WhfLXmztvGHRN76R9zS1
- TLSH T1CD625B969B684303EEA74CB0A2E8DC873D3DABC28940957B05C6F6841CA7385CF3472C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target shared/Microsoft.NETCore.App/8.0.16/System.Buffers.dll
- Size 15KB
- SHA256 b0f87e433ee740ca1955508575c105b99d428c0b1b37bd6f6077a63ba1b77639
- MD5 74a4e1db102b25264e8f85574e0e7925
- SHA1 fd5f963f3659d9365c4e42b1d20ba53c96f06b78
- SHA512 078e551d39f519e89b2374e3c07c13e5a0efecb148446c44da36fd9cb775733ab66e85626871a753b2de8956b66adc01ec2f0c3be8e58a78943252c138da27b3
- SSDEEP 384:CRCWYz2WJfLXmztvGHRN7Rtl8BR9z4eaaO+c:xhjQta+9zE7b
- TLSH T170624B968B6C4203EEA76DB092F4DA973E39A3D79D12956B0995FA4409633C0DF3023C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target shared/Microsoft.NETCore.App/8.0.16/System.Collections.Concurrent.dll
- Size 270KB
- SHA256 950f188af613e59008ddda6f39ce7f7b1f245d503c8fa215b39c226c051454d5
- MD5 b7e03b58ee26402ddb1b4a7a8df261c3
- SHA1 b18b29ccb95f7d41142680fff57200a875af7b19
- SHA512 c2fa3283201f41b136286149df9735ee31e107467c7f525d8be83809ed16ccbdf893c069d8e1c71c330541806ff9597f2703156cf7127bcd97fb03c466379f92
- SSDEEP 6144:iPA2Hlj4tByYOTblcFe4khyO2rIykwXLHQp:iI2lj4tBypHfhD2rIrEb0
- TLSH T1F9445B2173884B12FC6F497D9693D514E2B6A8530322C2DF0274A9849FDFFD2AB77522
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target shared/Microsoft.NETCore.App/8.0.16/System.Collections.Immutable.dll
- Size 818KB
- SHA256 cac9da05473943c8801b5ae4c17bce9bab5fa0af6567bbcc97e43c722711284c
- MD5 3bbd2fc9f780298c5f2579d160560224
- SHA1 e2709153eb9646b43a92d15654ed5b7bb8bcb0ce
- SHA512 94d57956b0125cb086e882fe6d92bf042dd4ce0e4053a56d5f988c8123fb394d7fa75b3d0d1455d5d0e918940352ffff6975ba6d8a6e89fe38aa405423022dee
- SSDEEP 12288:prJR+uRoPwK2eN8/98vTU4dQEE3k0T9YLVgHr4iuIvogllggic:R+uc8abw+CMiNnllp
- TLSH T14F055B96E38C0B52C62FC5BFD6534AB9D6A1C45253E291CB00DAF6B03F93BC1E57A424
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target shared/Microsoft.NETCore.App/8.0.16/System.Collections.NonGeneric.dll
- Size 102KB
- SHA256 0656f30e3b23b2225c9bd3112d79af15393d89acbf649e5c5206b018b585a8b9
- MD5 15edd2a2e13e9e4727f556348caa2195
- SHA1 6a7dd0a55db4e67f6390c01f2fb5835745640371
- SHA512 1cbf7db66bc36b11a0d1d64f8b636c8844a87299dfa48dde82cbefed6ce3e2715dd91b5176cb0c63fcdd0111a1f74f734a671dfd7993f10a129f6c2f996584aa
- SSDEEP 1536:P850tJVDX9LEIbwNC5IQ7XVrMZqz9AGWXUd7Qcpz6d:Pu0dzNEIc+IQLGZqzKGdQk2d
- TLSH T18CA3182633D80322C6AA5BFC91938A01E675F4D26713E1DF1618A9CD1F9BBC2C6B2157
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target shared/Microsoft.NETCore.App/8.0.16/System.Collections.Specialized.dll
- Size 102KB
- SHA256 47637538915b936e5960a1b21577034a1e1113fba424ef8d65ae239058f426e3
- MD5 84c98b7bef2215140f1c039bc54ed199
- SHA1 dcb350e6e634b6f959de0d7a18607f910d086793
- SHA512 8f0e40192aa39850a00c040721c893278b213c6af5da13c1920ddf7a07c35023dc76ebd3a1b4301cc224ff602dd3e07076c10c42e205ac69b7ac73e6bcc81ca3
- SSDEEP 1536:lpWdRfASP9WSJLeI620hCYCARk4YIAO8xocgA50ud0VIOSQc3zUiz:lpWfA4peJDPAOSocgAauOBSQiUi
- TLSH T1B1A35B2433D84B22CB3E92FC95978941D731F1E32362D2CF1559D9890E9BBC28B7612B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target shared/Microsoft.NETCore.App/8.0.16/System.Collections.dll
- Size 254KB
- SHA256 455e8d5b50cee9d2f7581aa68b057625a59f222e07ebf32661069953d9dcb223
- MD5 9a3c1f43114d16eaa40580853633aa7e
- SHA1 71af991e47e6c29365545d7fcf2b0eeff5cd4f64
- SHA512 bf0172636db428ce1f498a46ea5e48a99f1ab264e68b3dcc7cd3930a9e170f2d62deeec53093cb1f1243fb7131a2baa0ff519c807e1c73789ea7cc334fde6382
- SSDEEP 6144:8nxoXLGDXDiKNYX8qTKfAyryS1rIgM36YQ:kxCGDXDiQ+jTURrhFY6Y
- TLSH T1A3445A2A778C4E12F56F457EE693C012D7B390A30712D2CB06BEE5840E97BC2BEB6155
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target shared/Microsoft.NETCore.App/8.0.16/System.ComponentModel.Annotations.dll
- Size 198KB
- SHA256 d73964a685986a345b441061b06ccb6e53078bd2c3a57a475de534f89ae0e83a
- MD5 83b44129590ba4946acb46c1968ba5ed
- SHA1 5abdadb251703a0953b779c73959b746bcdc0f7a
- SHA512 4a7b2d3acdffd39b460eacec7ae6b40f32d1c7e09eb01dd412af53c710e573926ad289d15b6042cd694abae4daca41e0a2e469512ec381c7c9871e6fbc0b0ea3
- SSDEEP 3072:Dlzc/yDHdJdq+4dCLLe6Yfn33wmMWQArD5/oE5bF646UV/qQx3q7:5myD9env3wzWQArqUV/qQc
- TLSH T17F144A3763D80516FBBB43B885239911C6B7B8926761C1CFE594818E0FA77C0BE72762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10