daa6b445250f0530e197eb9b0de4c8a3542534bd2b9696fe56c11c6f8a9c7661

Resubmissions

15/07/2026, 19:49

260715-yj4r9agx3v

15/07/2026, 18:40

260715-xbebysfv4v7

Sharing

Copy URL Twitter E-mail

General

Target
DLS5-INT.exe
Size 170.9MB
Sample260715-xbebysfv4v
SHA256 daa6b445250f0530e197eb9b0de4c8a3542534bd2b9696fe56c11c6f8a9c7661
MD5 a534630373fa10de15338f583b05b65c
SHA1 1c2a03dfcc2d17dfaf3f3fa418b9c22df26c8eff
SHA512 f3018b983da16b8a47c6451c7bab85a878802c8a7f4c2fb60050b07e0bafc18e0d5114ea00af77b246b37cdee9bf947f50986e47c3ad6904f4fd8f276db8ab83
SSDEEP 3145728:CPUhv9oBxe3Je22ijqbXJmZsJ8q2TIlJYoTkEl9O/SbUvUzm:CPs9GeoMKXJfW3IlOo97bUKm
TLSH
T13B883354A345FC2BCF2346B7AB1C0ED4663C0838D656D691F51B3F283EE8369606A35E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  DLS5-INT.exe
- Size 170.9MB
- SHA256 daa6b445250f0530e197eb9b0de4c8a3542534bd2b9696fe56c11c6f8a9c7661
- MD5 a534630373fa10de15338f583b05b65c
- SHA1 1c2a03dfcc2d17dfaf3f3fa418b9c22df26c8eff
- SHA512 f3018b983da16b8a47c6451c7bab85a878802c8a7f4c2fb60050b07e0bafc18e0d5114ea00af77b246b37cdee9bf947f50986e47c3ad6904f4fd8f276db8ab83
- SSDEEP 3145728:CPUhv9oBxe3Je22ijqbXJmZsJ8q2TIlJYoTkEl9O/SbUvUzm:CPs9GeoMKXJfW3IlOo97bUKm
- TLSH
  T13B883354A345FC2BCF2346B7AB1C0ED4663C0838D656D691F51B3F283EE8369606A35E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  Client/HiQPdf.dll
- Size 2.1MB
- SHA256 17f36da062002d0b4222498ca7ff51d8dad069955fb0d87d4fc240932f1fb21d
- MD5 11f179be6d836abbf954d3276b8b9350
- SHA1 630e531d4426b77b52190731c2fcfbf7edfb0f94
- SHA512 eadbdc1fb0cb3a0d58a4064b3e0444e54b69ea7f045dd3a32495324d3d37962af763be9937f25da59779f8fa72eeba462cc0a27b61431bc1246cd220ff1e6ad7
- SSDEEP 24576:W2YTESs89mK8AXwGSq2TVF0IzVjeQfiZaWEU3qV0k:l89mK8AXw571VjeQzWE4m5
- TLSH
  T131A57343B69CC601D8F9777E4FEE2821A7AA8141BF53D75A3C5927EA99723032C4131E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Client/IdentityModel.OidcClient.IdentityTokenValidator.dll
- Size 26KB
- SHA256 da987dfe0417c5e8477505efed905172bbdabf5e9fdc5c0b62fcf3f410f9348b
- MD5 f540a1dca823b2c0f56cf3b7a5991665
- SHA1 b1d619eae3a83047698dc89916e3330b56c9800f
- SHA512 92982c159cedea6532e07c1db60613833b6fc2f64ac133726d6750e1c5b1b15f8af5a63af810e1d44ab39d7e29e1a9fdb1422a78b3c9fe8d91e75700bbf85bf7
- SSDEEP 384:X/VxXAuh/5RgESv1EP3f3A5EXP2TibOSVT+lC2Qoewm4CaE3W4J89GndPClHZSZ1:NxXSj5ev4CaZ4J1PClb3FmEDUthz
- TLSH
  T131C26B5A97D49911ECBB9B30F4F08911ACF9FB40AA21C9AB1D98C08D4D417C167B637E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Client/IdentityModel.OidcClient.dll
- Size 79KB
- SHA256 690065fd4d4c312cf8b97008cd16e397691adff0bfab31e8fd4c572104fc1284
- MD5 b82cab4fb0aa0cba5f581b4c630a777b
- SHA1 569cbdc27018a54063023b47b9dbf59a7a726a42
- SHA512 06671dfc13ded248b0560373d5ecac170f2006443b1526cb61dcd8dd91baa385f0273ebcfc9f866ab18f26d542e2b4c95412444c30cdf1540e331f0e853a4cfa
- SSDEEP 1536:JvrLY/vfW42hLyv+DeofggMbsqY1U+q3t3yMX:JPY/vfW42hyv+DeofggMbsqJ+qkE
- TLSH
  T18D838E4593BC8B26D6EF5FBDB4B0821A4AF1B6017512F66F4E4CA4D92C12B831C543BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Client/IdentityModel.dll
- Size 106KB
- SHA256 a6bd112c28eb013b7df225ad237218c173640fedb8339890d95b6bd0952bcbc5
- MD5 defd229d573888506b8fc248450f72c1
- SHA1 91142efc49a16de66cfb75b4a3a6640a014c5a1f
- SHA512 0820ab0b2ea8f451ece58a253996acb2c52650c5fe6177f266edc68c4cf4cc275d06c52f46ec39752f789b2fcc66b9681d2e68a5daae7364b6229811572d9840
- SSDEEP 3072:txM/QuXbb0d5Pzz6NIWXGw4aOE1geubwtEkOXjnE:tBuXb+5zzrmv1gBj
- TLSH
  T174B3082163F94A29F7FF0B39F8B04121C7B6B9893C15FA4E9A5475AD1822BC08761773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Client/Int.JC2.SiteManagement.Client.dll
- Size 65KB
- SHA256 09d309689e4cc952d4f71e44ca4412df4b73d39b880dc12fcdf0b0cb6fb5c3bf
- MD5 ff67b92015e73fc0c527302fe0b623c4
- SHA1 e1dce2f2a75c7f3431acbb2897d6174195748804
- SHA512 623860d2cad4a4f92bccbbaa034d1cfeb7cc9dd4fe4f38418332a267625eb41241b8c0699b5cbdae49769a27df8875cbe6b4f1141a043f48820e082063886909
- SSDEEP 1536:5K4ektJVDpuu8gwuILRfsgcZeIv1jxIRpOhvZwMpChZXPSk:5K2JVDpuYgIec1jx2avZRpMZj
- TLSH
  T1FB63190437ACC63EE2AFABBEBD3542334572F6566563D79D0A4CA4EE28237424548373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Client/Ionic.Zip.dll
- Size 451KB
- SHA256 4f128f477b22e89095dc60389ae3c51481394443356298145c9490d8d17a3afc
- MD5 a9c03af0d4ce8be84550af055fc8c34d
- SHA1 3345753f7ff2b4da192c56a05a3470d6a27947e8
- SHA512 bb9c8f1a7a59ca7bb99d57d1ef1aa0e36c47765b6bf2f650297d5f7844877aa7035c836591bd7583452084dc7a7550cc82a0d90f4c306c84733cbe78ac6340df
- SSDEEP 6144:eb0iFwGeaDwSc2da+Lzi4aUMle6ZjxLV/yJDsTDDdGtSV412vXZQl9O:ebiDAaUCe65fAscS4EvXE
- TLSH
  T1D5A4AE0433DD4A6AE2EE1B79D0B3926183B1F921793EDB4F5D4424EF2D2B79089107A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Client/Microsoft.Bcl.AsyncInterfaces.dll
- Size 20KB
- SHA256 075ce79e84041137c78885b3738c1b5a03547d0ae2a79916e844196a9d0ec1db
- MD5 1ee251645b8a54a116d6d06c83a2bd85
- SHA1 5dbf1534ffbff016cc45559eb5eff3dc4252a522
- SHA512 9f67fd0566eac2da4253d08697daab427e4e85780615d940f086a88424dcbb0563abae7e4824088e64ef7024c1bb3bbf324f2d07bc7ba55f79e4af3c9ea88e97
- SSDEEP 384:69P2wZOXm7YJVHTe+0VJI0vrdaVemxO/f7vWeq/WIdHRN7bg30uw7lGsV9W+:u2zmYrHCV9cIL6TbtCSW
- TLSH
  T144927C25D76C4213DEBB2AB7E9B5D6036F38E3D64800E22E144CF1691CD33CA5B2262D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Client/Microsoft.Expression.Drawing.dll
- Size 120KB
- SHA256 c4f7b7d98db894d7b19d2dd25b0b1987d195778b35302152ed3d5e4f3e5901a4
- MD5 df234383c91c6f52386ff064f6521618
- SHA1 ad4c43f8cf333f718abed63a159c837148b2fcd8
- SHA512 e7f922f0f22427e9d60175bd3a7458b5581c9501650ed787ff0a345baf9c61bfb208b72041b276a0a47aadf9ff7a4a86d46bdc2addc3a8c81c8ddd1996c9f286
- SSDEEP 3072:VaBPOWg2uLcdk6i/OKPA5Dgh/rM2Plf7sShhX:282ds/OyA5c3VsIh
- TLSH
  T1FCC34A7C1758CF3ACADE1A7AA86022107730C73B7507EB596DC025FB9693B650A872D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Client/Microsoft.Extensions.DependencyInjection.Abstractions.dll
- Size 43KB
- SHA256 200aba7859ecfb045d43a8e2bf9abce4c929507364b7714388f59affe708fb06
- MD5 7a9b8793552ce40160a6d273b22f807e
- SHA1 1c302ea0a44f517b97af19252140ec710d5d3bfb
- SHA512 7d5ea03d5815a6f5705875fe6c2d2179c6ee5468d6b19423f04c8982e64226e656bfd7ccaf7a5756c7046d2e6d2c3504190ba642e02bc197d48dad9320fd6bd5
- SSDEEP 768:gQnUmCQ0dQ8d2TN7uxgoXvM4s8w0woFY9SP8:MmC3dQ88Tk+8vM2fBO9I8
- TLSH
  T198135B55ABFCC357DAFE1AB0693281659E39F6CE3512D70B1988C0A819A3FCCD241772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Client/Microsoft.Extensions.DependencyInjection.dll
- Size 74KB
- SHA256 c85cf85783322abea6532c10f63f7dd6745398ff875486ab869ee542ee731fea
- MD5 43976c7dd59919e767527398d3fd7e01
- SHA1 b7913d30630356b814da0533f126d75e64594849
- SHA512 dd643dff991338dc85a0dcf36b1a14271986f11cd810b64a1924c1752f141c296cd33e932d66aace26a04ff4168710a44507f95f54c96e00eaedce70d42b67b3
- SSDEEP 1536:cNOvcLxIFcvKln7wrSWp+1utn7Q3lFkmidDGwlF0TCOjzrT:cD1Is4mSWp+18Q3lFkm4ETCW
- TLSH
  T1D1734C2167EC4B22CBEF6AFA547051014F79E69A3403F3581D88A4F91DA7BC20B127A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Client/Microsoft.Extensions.Logging.Abstractions.dll
- Size 51KB
- SHA256 ce8a3129430b92e206d59720adff91ebae0af7c8a808ba81b2ecf9ce680260e1
- MD5 1237591a98cea80b03eaa68dbbcb2176
- SHA1 5761dfe8070d1e273c20bf6ce50eb46a8780e065
- SHA512 1446308e87aaf15ac1b3f79d8f4620b2172fb4c5f34059df75fae0ab244015cae6ac46faa86a0ab91b71d51bf91476dc407f473016ed0b71526ff6e446bbda07
- SSDEEP 1536:cpl8B+QlLqS+hEKKKKKsfQ88888foDLPz:cpl8EQl5UL
- TLSH
  T18D333B4563EC5663CBFF49B5A47891029B37C2A67403C75738DCA1382C6BFC84A91A7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Client/Microsoft.Extensions.Logging.dll
- Size 41KB
- SHA256 c4b2b98c21b24b88640bc0be5dcd335d82df129dcaa0dcc778d91a759a037524
- MD5 73eab96c0898a78a61d89782ef6fab83
- SHA1 07541eed457b5977890c13622d4fc4cabebc67fb
- SHA512 90e8b699f451667d18762cbeb0f050f5462e97186b2b495b5de737ae565a7e1667c0ae5d89442ad93c08f2b5db5459b7febb63b1667466e13908f24cf1e3c075
- SSDEEP 768:4h6vD0G7mTf+gzUfLKd5zu3koojbs3a0E:4shm7ALkC0oojA3a0
- TLSH
  T1F0136D118BBC4723DAAE5DB0F9A891450736C746B003EB6A5FCCF4962863BC19A1133F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Client/Microsoft.Extensions.Options.dll
- Size 53KB
- SHA256 c4673c6000602e76844bad63feecbe42d88fc72639b1fd64d2acde48955be970
- MD5 3ddea0033ead23660b51921146dda017
- SHA1 5708c44aa5326da0a69072a9b0e48715112a4bdd
- SHA512 d57e25a2412f2685770e3fd1d6650ee433ed28d337221941841eb9589dbf3868a27efb0d488f960f75785e60357cd2914b0eece1da62aa9ffe77219340c03576
- SSDEEP 768:h/P8hAZUWHrOTqmJj6kdMyDP63GbMnPvbFGOw:h8Lbqmp6kKyr63GbMnJGOw
- TLSH
  T1E9436D01DB988613D9BF4672F92860226E35C3963027FB3F56ECF5981C7B7608A60736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Client/Microsoft.Extensions.Primitives.dll
- Size 41KB
- SHA256 76152e774b2bd9c5a0d301e92e253d8bf55fa90e191d0155dfd86b2b84766ae8
- MD5 d833ddcb52e5c6d6da71bae25395a911
- SHA1 17ce025ad7a0175c467f5a7108ca81a813e4ac21
- SHA512 fd963a9fa5bdd10a1c54ce8fcba862b59786280ca5d668fa041b30b80d7fa2b84230d33b1c0541423534c764e7432213039d5f586d0427d542c0faf703081a79
- SSDEEP 768:JOOIfEU9x6KssdVRRw0OPyWPmD4RuiMvybcfMRJ:JOOgV9xss/RRw0OPysm0RuiMvMkMRJ
- TLSH
  T15B135B8167EC4333DBEF5970B0B1E1511B3DD3AA7022E75BA48CA1751DA37C04A727AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Client/Microsoft.IdentityModel.JsonWebTokens.dll
- Size 62KB
- SHA256 f8d5008a61d9e96b8a9c0241d0d51c7485e8a6c592be707b6a5e2dab687e0fac
- MD5 c14f6f6beb28d17886bf1997974e8431
- SHA1 48ffc21ab250f3b05d4b1df7553d1472b66b3429
- SHA512 0f01942e4b61184df55fd91a6eb86623b4b6179606eae08b3016b56de05fdc34c9d9e88fb4d3f88eed2f8edaed185fd592e711c032406c9a54ea5013bdad488a
- SSDEEP 768:koYBHHINNe/DpELCDspikL5D7Jzy4dPk7nmCDuttJ6g4fQk1m7cNDvQJ:kpHHzEhVDJPPkhDuttJ6gcQkoctvQJ
- TLSH
  T14053F94177FC8358F2FF3B316AB1950549BABD8AA839E74D1D81D29E2C72B408B10776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32