0a961bdc3f78c9efaf7a4392ace83cb9bae6264021adba421e1198b27de6aff7 | Triage™

Login
Reports

Overview

overview

5

Static

static

1

fonthost.dll

windows10-2004-x64

3

fonthost.dll

windows11-ltsc_2024-x64

3

fonthost64.dll

windows10-2004-x64

1

fonthost64.dll

windows11-ltsc_2024-x64

1

om.exe

windows10-2004-x64

3

om.exe

windows11-ltsc_2024-x64

3

omutil.dll

windows10-2004-x64

3

omutil.dll

windows11-ltsc_2024-x64

3

perf.exe

windows10-2004-x64

3

perf.exe

windows11-ltsc_2024-x64

3

perf64.exe

windows10-2004-x64

1

perf64.exe

windows11-ltsc_2024-x64

1

sysfixed.exe

windows10-2004-x64

5

sysfixed.exe

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
0a961bdc3f78c9efaf7a4392ace83cb9bae6264021adba421e1198b27de6aff7
Size 2.6MB
Sample260714-mvwegadv5t
SHA256 0a961bdc3f78c9efaf7a4392ace83cb9bae6264021adba421e1198b27de6aff7
MD5 184f938bc5b64c87f64b3443d8605d7f
SHA1 4f83b8d3153a81486408c139254f515e2cb7bd1f
SHA512 7d850c4a80057aaba0282834fcaa4809de928e2843ea6efb0c002741495f316b252f9cc84406821d6834b4692319b18604195d09733e887e50439833a6e25613
SSDEEP 49152:f/Gx8ZZbTb1Z7dDgeL2wk2nJzevdsyL8jRBPNtYqxX6+H9WjuICLKCzH:2x8ZVTbPdDZLzkYuTL8jDPHjrdWrSD
TLSH
T125C5338E94549D4D30BB9CEEC08168F3220ABDF52DDE0267D072297FA0976E1BF954D2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery

Static task

static1

Behavioral task

behavioral1

Sample

fonthost.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

fonthost.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

fonthost64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

fonthost64.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

om.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

om.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

omutil.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

omutil.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

perf.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

perf.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

perf64.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

perf64.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

sysfixed.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

sysfixed.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  fonthost.dll
- Size 792KB
- SHA256 18af79ca78c968651218e6c73a4751a4d23facec8dee050ac98a10539afc2237
- MD5 c7d819584051c3f1f0303b0265dc63ba
- SHA1 339ef23bb81bfb4f9d9c85b2ab96c3497289b158
- SHA512 c8ee0c66b086d45b0d988dc117afffa9cf471506ce62148a1f624dd46d7cd9bca59725e3be0477dfe96934b5031d73a268112ed052ca88bffb3d03519d7f9b43
- SSDEEP 24576:gSCvoZ2HkCg3LUUvWNm6sZMg2+qi3VTpud0Q:koZ2HkCg3LUUvWeZMD+JVTpud0Q
- TLSH
  T1C5059E127B81C0B3E57E033694297B392AFDF9211F2246DB5BD80A2E5E707C25E35A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  fonthost64.dll
- Size 1011KB
- SHA256 9999237303d9856d88b08be8b92a61fb288af28ef48ed43ae5309f058652ac78
- MD5 fe7ce250db2fd191bfeb8c3b976fdc17
- SHA1 839a61f232ba4d092a5f856957918f0a2bb0688e
- SHA512 ad75d96c4baf5a69508065babb88f114b1e99bb9f4a149b98cfe4e220e1b93da0fc89fa345b4c6fdf8cafcda0e9556be7c954a263320f4e54c2b4d0ae42a1c52
- SSDEEP 24576:1ev70zoeAkGyBhLASjlunMVk3GXIoFaOMrTP:gv7ooZkGyBhLASyGXFkVP
- TLSH
  T134256D5ABB5841B5E077D23AC5974647FBF1B8165B2297DB03A4432E2F237E04B3A321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  om.exe
- Size 712KB
- SHA256 7a259398482685d7d154ae40379b59a543a08204cb46b2535f075d6d4046cb14
- MD5 7455d375b51c9d26d32ab2be995a0733
- SHA1 8e80942c493ec4599e5153cbedcde960d1d83a64
- SHA512 1416befb581e6806c82216850558588e1174f1f1ecb4f3e1cd6589d00bc36ae6eee05c2c218535476229346b387e2bfd81522e8c45e3f72d4875ca99cd78ad2f
- SSDEEP 12288:1EPsRobZwnmL0Ii8pwi3+q8TR77vmjJ12xhE+P/5iK2zfaEliE7gc4a0u:1EPsRGZwmL0Ii8pwi3+q8977vmP2diK8
- TLSH
  T1E2F49D303AC6C13BC972117249BDAAAA142EF9650FA508CBD3D8572E5F3C6D22F33556
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  omutil.dll
- Size 2.6MB
- SHA256 d01bc559600eb44f7c6cd416a223f46ea26df0d5b57aa26365fa90a89ffaebf4
- MD5 366b5c13b7191876b581b3c015d2fb7f
- SHA1 ee8974a713aade50b4424f4b759a5de14642113c
- SHA512 9671e28fd8ea975465f090c77d711a9917af7fc4148ee2ecc12458dfd0a03e5ef675aff7df23653106d2f07f165d08dd22ba8e593119b4dbccf1f3a1d7e3d5d7
- SSDEEP 49152:YJuvWjeAJ5NLMobbjKXJRXFmShuvqROxfjo68d74zAlMAmTl0JWLRxNuE:EJ5RjKPdkzyExx
- TLSH
  T1B3C59F31BA42C177EA9E42B19D7FAB5F401C9A540B6444D7E2EC6E5F7A340C32B32687
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  perf.exe
- Size 457KB
- SHA256 84ff4d3fd8ddb5c6c2496cd418043b715c33277cb7d2a71604e108f6ae4caa54
- MD5 502154cd7e244e3dda7db060a87d8397
- SHA1 48e4dd61a0684dab1b9c47d7f04d270019b7f24f
- SHA512 6736b43ef6ff37eefbdd0af3688ab2c81cd28a8db94d656da7da740a207232c98a69bee064b99648193b8e780b40cf5750c12825ac8f3a974ece3fde19887b6f
- SSDEEP 12288:eHA1ZxWRQvWrNjlBUobRxg73X1rJE36eCb3/Khqnqmhl2ei:OC+rNjlBUobRxg7HQ36e+3H8L
- TLSH
  T136A48D203EB2C037C57342354D79EB69296DB8B00F6145DBF3E8172E9E746C26B36662
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  perf64.exe
- Size 594KB
- SHA256 7917a176ca0de09f14207f6dc4002728da1fa42f4beef3df0795a8d5d4a6297a
- MD5 c0786f50ff3cbb7ed4cc4cc702cb4514
- SHA1 f109350c83f8d6a4203368e603c795aa54882b20
- SHA512 ee577bcb8da78f4b081b67beace7793879576013f5f4d3a26747968379079a60059ffc52d6e1f199f03f312599ade61529274e0e18b3190f5bc272afcb535201
- SSDEEP 12288:Hma9MX7kL+tpLIKOFbOU7HyR7SaFvB0HUx+BomL4kDvLzrLZv9v9Ie9AQo/y:Hmx7kL+tpLIKOFbOU7HyR7SaFvB0HnHX
- TLSH
  T17DD47D59B79886F5E037C079C9928A46F6B178065F219BDF13A5426F1F332D28F3A321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  sysfixed.exe
- Size 90KB
- SHA256 45756eb3501b09fbc0b2a1cf7eb5fe1ed18bb97b267650640879fb8c0fa43e31
- MD5 31809875b1ccd19e1e0cc09a217743ee
- SHA1 1780dc4eecdf6575942c6df11eeb760c47c8fc2d
- SHA512 230976c64a138fb65eb28d889a2460aaa57998e6b20514a3edc8a9941849791162ae403389be04c87dc9e20de4b757734f87c6f2666f251271a90047b1aafb06
- SSDEEP 1536:aykLkDxkz/Z5QUQgNx6q+J0+XP8rINe9kRg1G7F6yPIsWX9cdWCUPwpn/0EwjL:ih5QliGJ0e8ruu8g66IWC0wF/zwf
- TLSH
  T181935903B5C19032E9B20D3A58B0D9615D3EF9514FB5CDEB2749027D4F682D1AE3AE2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- Drops file in System32 directory
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

© 2018-2026

Terms | Privacy