Overview
overview
3Static
static
3ICSharpCod...it.dll
windows10-2004-x64
1ICSharpCod...it.dll
windows11-ltsc_2024-x64
1ICSharpCod...ib.dll
windows10-2004-x64
1ICSharpCod...ib.dll
windows11-ltsc_2024-x64
1Magick.NET...PU.dll
windows10-2004-x64
1Magick.NET...PU.dll
windows11-ltsc_2024-x64
1Magick.NET.Core.dll
windows10-2004-x64
1Magick.NET.Core.dll
windows11-ltsc_2024-x64
1Magick.Nat...64.dll
windows10-2004-x64
1Magick.Nat...64.dll
windows11-ltsc_2024-x64
1Microsoft.CSharp.dll
windows10-2004-x64
1Microsoft.CSharp.dll
windows11-ltsc_2024-x64
1Microsoft....ng.dll
windows10-2004-x64
1Microsoft....ng.dll
windows11-ltsc_2024-x64
1Microsoft....rp.dll
windows10-2004-x64
1Microsoft....rp.dll
windows11-ltsc_2024-x64
1Microsoft....ng.dll
windows10-2004-x64
1Microsoft....ng.dll
windows11-ltsc_2024-x64
1Microsoft....is.dll
windows10-2004-x64
1Microsoft....is.dll
windows11-ltsc_2024-x64
1Microsoft....64.dll
windows10-2004-x64
1Microsoft....64.dll
windows11-ltsc_2024-x64
1Microsoft....ol.dll
windows10-2004-x64
1Microsoft....ol.dll
windows11-ltsc_2024-x64
1Microsoft....re.dll
windows10-2004-x64
1Microsoft....re.dll
windows11-ltsc_2024-x64
1Microsoft....ms.dll
windows10-2004-x64
1Microsoft....ms.dll
windows11-ltsc_2024-x64
Microsoft....ic.dll
windows10-2004-x64
1Microsoft....ic.dll
windows11-ltsc_2024-x64
1Microsoft....es.dll
windows10-2004-x64
1Microsoft....es.dll
windows11-ltsc_2024-x64
1General
- Target UndertaleModTool_v0.9.1.2-Windows.zip
- Size 92.3MB
- Sample260715-w18fnae13v
- SHA256 0f9ad0b81c8b3074537100544a6a9e5bb7092fa923459e6ba3bb22b8c7cc08b3
- MD5 be39a3912e3503a93dd7730f2abfb672
- SHA1 3dc15cbb24cfac06ebbe6c7fe41e9b2a00dcba10
- SHA512 0ba0b906e6509815f1ab31be181060a3687e5fab2762c3abb79faecad296d1a5383d8c44e1da62230e2ed14a0a46b26f72180c4bcc69bb867e3f1ac6b5bae690
- SSDEEP 1572864:joGuMDM3bsx57I1CaRe8ufLzbg8rrJ9/9Q4wHTvZnK9qZDkAtHbWPD1S5A2:0R6RIQKe8oLzbgerKDTBuqRhbWL1S5F
- TLSH T17C2833C15F28F8EFEB2EF73F09454988A0B5651D4B4DCB12967804780AF67DE49BA213
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ICSharpCode.AvalonEdit.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ICSharpCode.AvalonEdit.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
ICSharpCode.SharpZipLib.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
ICSharpCode.SharpZipLib.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Magick.NET-Q8-AnyCPU.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Magick.NET-Q8-AnyCPU.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Magick.NET.Core.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Magick.NET.Core.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Magick.Native-Q8-x64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Magick.Native-Q8-x64.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
Microsoft.CSharp.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Microsoft.CSharp.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Microsoft.CodeAnalysis.CSharp.Scripting.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Microsoft.CodeAnalysis.CSharp.Scripting.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Microsoft.CodeAnalysis.CSharp.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Microsoft.CodeAnalysis.CSharp.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral17
Sample
Microsoft.CodeAnalysis.Scripting.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Microsoft.CodeAnalysis.Scripting.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Microsoft.CodeAnalysis.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Microsoft.CodeAnalysis.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Microsoft.DiaSymReader.Native.amd64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Microsoft.DiaSymReader.Native.amd64.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
Microsoft.Extensions.ObjectPool.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Microsoft.Extensions.ObjectPool.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Microsoft.VisualBasic.Core.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Microsoft.VisualBasic.Core.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Microsoft.VisualBasic.Forms.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Microsoft.VisualBasic.Forms.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
Microsoft.VisualBasic.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Microsoft.VisualBasic.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
Microsoft.Win32.Primitives.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Microsoft.Win32.Primitives.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target ICSharpCode.AvalonEdit.dll
- Size 608KB
- SHA256 0fe9ac94aa22e60b32d670a3d35c58fef628d1b3352d56f32f2986bf5f96f844
- MD5 5b5bae107f9007dc699a29899171df43
- SHA1 34f7a876b5cf0c9ddf46c7e46cd3b9920db0b8ce
- SHA512 8a6262271d3e43bce9f64e119c1a36c338b77bb94ccad4dd25b007879b8c721bd5cd32e651f838e4fc4d8ab0b8b69d7b773c13b497c37c9b0e0e82ab70977410
- SSDEEP 6144:SZnm+2rRLUWzCplOmoG+HRksdH7Dn9JYD//T+jvD+cXXjaoUsCfqMZsCQIJjBZjl:SZf6UWkOH5H7JSLy3JCl
- TLSH T1ABD42A2933AC592AC27E1777F5720144A3FFFD87B269DB8F244461BA7D427224C41AA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target ICSharpCode.SharpZipLib.dll
- Size 252KB
- SHA256 32ea2d0ce3512e74f1c7ad82591fe67e6b8939d76a8a4ff9c93ead030131e71c
- MD5 900bf2b7812788efb97eb6b1b63814a0
- SHA1 f77f5a3f19f1ea332384517400684e5c2365e14a
- SHA512 35d93d9281ad8eb191217dc78b84418a4a4d862c4ba43f27eb5e89a1f9273f008cbea08c87c72b3439eb7d9b51dbc8106a361b53d94ee7a877267cbb69678ad5
- SSDEEP 6144:lA/WW316O2rkD3xTxVmLiJyTve+ewWotaDEimWkfzRVtyu5u:dW3ND3xT+LiJy7rewWZDtkfzR+A
- TLSH T1DA442A1477EC4E16F6EF9BB9D472528583F6B996252FE7CE5C4890EE2C027A18C00363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Magick.NET-Q8-AnyCPU.dll
- Size 1.1MB
- SHA256 249f97e0d81020086cda6a964958d242a0ab2f19ddafc46185f246e024c885c4
- MD5 46b7cc79491344b174e79aa0e616cac5
- SHA1 4f05cae13b9c68707d56aca804103bf128b39504
- SHA512 4e9e3e8a1116437876b1b1db806339d1f10fd4c5622e5398d642fbaced394e22d288e726ad5af8b97efeea1d2fee166174201d5217a79927ac1211b63815c023
- SSDEEP 24576:+JzpO1yqI8SyE4J/rPdJKZnMEoNMZnFTDUONy0d:+ppO1yqI8SKhrdQnMtNMgEyQ
- TLSH T1CB353A205BF08C16C49E5336A6A285409FB1E3AB875BEF4772DDA6753F03B824D57382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Magick.NET.Core.dll
- Size 1.5MB
- SHA256 173825ed01d3d8f90ac776d11560d044c1af67e09e5b487dc30b0de7d0382e74
- MD5 f776f37b55d5df1d57cce1f92bc10240
- SHA1 15cc38b916800274e85154b9b60a3e4bffc2e3fd
- SHA512 9851edf19995d8f66986445c4c1193a0547e12c262895d577e432d13e5cb2a5a9e4a3fe5f02d94f3d742c426c7bbd6d85d17c921f5d9628dabe7dcd85adf7caa
- SSDEEP 24576:GEdsQinsyeazknKKKKKKn/1SD2OuaACajAyCE7ykral6b/T:GOsQinFzw1i2yAC+AjENraIb/T
- TLSH T128650156E7EAC49ACE52A7753CB0DE3D81B8DE097402A34775E83DAD31B77884E03162
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Magick.Native-Q8-x64.dll
- Size 22.9MB
- SHA256 ef53ee775aaecf4554af3a19a5d3008dba33a868418640832b6cfe344a140e28
- MD5 3346e0f282780be321dca0a9fd473ab5
- SHA1 97acd19f3e645093e39b145471b900481b080cda
- SHA512 a8c39b8395e2b15d29e07a4b5caa4af64ed32b1bfd90a2cc1ce96751fff679015b310ff50dcdfd05e285e3f7140e926a5986e4bd87cc6c21ef61d6c4c5e74daf
- SSDEEP 393216:fOT8Sm7pv2uMPnt3oBomQSuxy/7apK3uHcXbBrmcZUrza1xTwbsHxN5:x+Gv2PcNrVdTwb8
- TLSH T14037AF42B1A410E8D577D078CAA7AA1BF771700903715BFB3AD485A62F27BE12A3F750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Microsoft.CSharp.dll
- Size 957KB
- SHA256 c43485d9e96cb000ae0e21d7db370955c4ccb77e9142be76477d6481aa2e72e1
- MD5 3569f3188c73f9ba4cc138d8f059f198
- SHA1 9f4816c14fc10e278447b64e684f2b1c2c4486b1
- SHA512 b59155fa9181411f32c712b1588f1be18d320388bc16531f6f7886e870d93b0944261be41dfec0dbb219862b771f4631ab81662f9694c09ad0bd6073dacd75f6
- SSDEEP 12288:q0Q1linUIuyzr7fvhRzRvhDkVv4+X6MR7Eh3Vu9yHxZVWG9NE9YtdB6l:hQ1lOzrrhRHkVr6Wu3Vu9yHfVWGT46dC
- TLSH T124257E1493D80E16C26E837CC1538A12D5F6A4433367D6CB48ACED742F877CA9A77A63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Microsoft.CodeAnalysis.CSharp.Scripting.dll
- Size 33KB
- SHA256 09dff49ab2e35697cd63414c58e931179e954dcb5db0c53027380db6711dba65
- MD5 9969aeda363bff736deda3dd5b5c0222
- SHA1 405c99f14eb88cb8f5f1b67498cd4c9d2ed192c8
- SHA512 a398fb0aac6f48e2d6ad2b050f547c59cc9288de5fb10e6a32d0a3b0eb86e050ee43134c21bd625e998afe8bc01234dd1689eecc4f8961627da8432049028bdb
- SSDEEP 384:bpOMjFPCEnQYYzIH15hc8oDmczfulm0lTMZBBn/tWkBTfW9ZlN8MgsU9xDE3R9zd:dOMjFPaYBVg8oDmefuIsYpWULi9zvgM
- TLSH T1CBF23B92C3188147F9DB5A3179AEF9A13B3DB38258C1DB25752CB98C0713BE04F16A35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Microsoft.CodeAnalysis.CSharp.dll
- Size 6.7MB
- SHA256 1af1de8a162d2312eb2f6b781f5edbe8cec7d5cd268c7e4de24396225e54260f
- MD5 bd04d2e737193bcfb85da77a72e3baf0
- SHA1 b097c4788b24058714f7fc6e1e1bf24944272e20
- SHA512 7e482e57610fc093abcc6d7b6aac0150036a223b2774109c3bcfd531562661be9aaf928820afe59e5d0dc0d2896b05ee31462f6e0834f072be6df95809233195
- SSDEEP 98304:DZYc7CcPIMqfSBJi/idrXnYHKe+FlV9TgrXDOx:D2c7NPIF64OFlV9TQXDs
- TLSH T19E666C15A3DC8F2AECBF4335A432411E97F5E8585352F32A1488AE7B2C8F75046963B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Microsoft.CodeAnalysis.Scripting.dll
- Size 134KB
- SHA256 ee03ec1fc60de8520c0c75de2d9c2a878ab6871ec92aa7d6d408b16762c90ae9
- MD5 adab53527d4bd41f1ddd63d51c8574ab
- SHA1 56877127055670a6ce9fad28d47c2bea101ed5e2
- SHA512 79306ac46faf836ef7392557e6034356c4ef3e10ce3d59e5ed7533e53176fd0ac07d03b86267aa727f1363a5e60fe19cca854928f2742a03020884229e6b5c3b
- SSDEEP 3072:qWh8FS81Xm+qBykXJQTjCD1J9zan3CpeytnzB:/81XntXCDrdWseG
- TLSH T108D37C65636C875BCACF4E3AF4B8A04147B6F307E582E74E4C48F9EE1803FE14952666
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Microsoft.CodeAnalysis.dll
- Size 2.9MB
- SHA256 42c9ce7891470f430267e2dc02d03571f9d046a7e7e121107754bee58d344613
- MD5 a25892508f953ab3375dd19fa23aec10
- SHA1 3b56ba0cbc6d3db23fec614717c717ae64eac126
- SHA512 e5e87d8df3193cf8d2eff418d23f3399fd7b40b584459321843f28cad79cc749b4ed63e3a6b12db395bcb4c00246af8a917727f1e95bfd7e474e34749f50ba42
- SSDEEP 24576:T3m/jlhqmz2jFiI1rh4aZjdhusMGHKNw7wcM9QOflzrWiAzhRXJZ9x7vsaZaJUwT:TWblhqI2jFiI1imMCFOtPMC/MKQLW7JR
- TLSH T142E56B00EB985F2BC55F573AE433199503BAFC69270AD70B1406E9BD2C737948F626A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Microsoft.DiaSymReader.Native.amd64.dll
- Size 2.1MB
- SHA256 315a61c47c41b8d4c815f4274bb6584c1d24b4640c7eedc354ed5b03a9a1361e
- MD5 e4dc9335fb0065d4b3066fcb8a878a9a
- SHA1 0d66f04b77a0726f1bc2077675d485700848d9af
- SHA512 929eb77e8b843e484ee74b408edfefffa15d0ee75d70d3b47a808fe380eeaaa9dc40bb29ef549e47e89dbeab159f806b4f823e8d3dc85e657f7bb32485a1c947
- SSDEEP 49152:8oJlAZFbi/H3LzED3pattTg4nm1OPriyQ:gZFbiPcEHg4mUPQ
- TLSH T1BBA58D97A3AC41E4C47AD178D66B460BE7F238050321A7DF02A0863E7F67BE15A7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Microsoft.Extensions.ObjectPool.dll
- Size 22KB
- SHA256 dba21041ab0064cf94f3e821df1435d880cec2ce5408144e3ec5199347349bc0
- MD5 1c0b77dd11bc1be6a0805b14a8cf673e
- SHA1 7fb89e986a89b69067d44b7b59d9359e262baddb
- SHA512 7b142db8407aa91a7fb9eca4620755a559ff0a2172e0b2c36b6c50f1909a06cec42f23e9e63827ea7ede09c0ae8e10b38d3ef684de88193495a378024c3b24d5
- SSDEEP 384:P6PV/FuaXSNtPPETMvb0Wc3dQW84X6HRN7aR9zQKhT:iPtficWbKO4WW9zrT
- TLSH T16EA26C5D5B68C227CE7B3A70B9B8E551BD38A7863811E66906CDF58C0D53B809F3072E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Microsoft.VisualBasic.Core.dll
- Size 1.1MB
- SHA256 28a5995189906c15f76e6738cb2c53fa8ff23f0e60d15a412bb06dc298d03aa2
- MD5 d9cf7a08b6882cfab5ca7b7cce2b8bd9
- SHA1 7e7ba18f439cc3e3e77374df4a89a27aff37d08f
- SHA512 1fe83eca9e11019d0b28fcd785793431b9301d2b5313a1ba57a73f92c36ea28868363c10841ac32f1a7c2457cd6b6f9b46004f2efd79a3ca87ad9c7735f81c44
- SSDEEP 24576:SYZKmv15MjbvtN5cao3Qj8q15vV2Xgulf6qd9wA5OmmK:BYmvbMjbvtN5cao3I8q15+d955Om/
- TLSH T10F459C09B7C4CF1BC33BA6B9C7568762D274E5625751A2CB1440CC362B4BBD3B3B12A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Microsoft.VisualBasic.Forms.dll
- Size 241KB
- SHA256 83a7a9eb1fecdc393d9981bd70420b074bc47063fbfa2ebe70facd116d1d856d
- MD5 7b6c77fd7e013cace222cb346da34be7
- SHA1 f5578f6f0e70ca8bb110d7e144bd48c73b1353b3
- SHA512 4e909998b50776ab5ea22eb83b87ad447e5541b8130afbe0aef1e9906c7892356c0f53aa51887b84fb06833d5c4d5bbf9f4d3928db7a4ec6729db3538de70056
- SSDEEP 6144:L5twCE6ZrPnFf1izZ+611E5u5JuWmeAmi7SjMfhAh:FtwCHPnT8+6qhq+s0Ah
- TLSH T1D8344A26678C8E0BF6BE46BCE663C112D372A2574312C6DF0630D5481F977C5AFB9292
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Microsoft.VisualBasic.dll
- Size 18KB
- SHA256 c6e84fc1c8cea3c51f123fecb5ed930fe3d0c3303e39adc34ad237923e7997b5
- MD5 eaaaf3adb6530fbf9b518c0d2b61030c
- SHA1 1955c2423c2e11c600ac4e1bf6836f7e0d4789d6
- SHA512 1e07b2bfa6a66b3272beec0c5d75f85db7a64a4c45d35150d6c54c9a98059c64539f365ff1aae9a50cc2b114139f78bcd3c3c77a6b57ac78a28452e1b2f01b7e
- SSDEEP 384:ctifn6hxL2GUoPxWmH6f9QdWjlNBjLtR9zjZQ:cEnSlZUoeFXP9zK
- TLSH T176822B9286284523DDDB2B715E43C7523EF897CF0DB1DAAB1149F60598877C4DA3032E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Microsoft.Win32.Primitives.dll
- Size 15KB
- SHA256 948107ac6afb355344751a1454bfb9ff8bee5a90909be71e5a4a9856d40e963f
- MD5 6ef774651f3095beeb82b91ed5c3b008
- SHA1 031e6f5f56c96d3b0a4a8fa773cbb3bc2fe5b800
- SHA512 9f9b6e65d1d5ec9abcc401ffcf8bbb94d946e2de7be55fb4e8e0e573f952212eaafb70dcfb407f6697033483e441d8677f0f52b37676c7276be979f5115c0513
- SSDEEP 192:Rp2LL0pFxQbJzjWhPkpWpWF+GBTBWsea8W0MCbAw3WIX7X01k9z3A33w7ga:Rp23Mv6JzjWhPkpWElNvifX7R9zA3w7n
- TLSH T15D624AD1C7784103ECEBAE709AA5DA877D38A3C34D119B2A149AE10D1CA77D49F3162E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10