Overview
overview
7Static
static
3DLS5-INT.exe
windows10-2004-x64
7DLS5-INT.exe
windows11-ltsc_2024-x64
7Client/HiQPdf.dll
windows10-2004-x64
1Client/HiQPdf.dll
windows11-ltsc_2024-x64
1Client/Ide...or.dll
windows10-2004-x64
1Client/Ide...or.dll
windows11-ltsc_2024-x64
1Client/Ide...nt.dll
windows10-2004-x64
1Client/Ide...nt.dll
windows11-ltsc_2024-x64
1Client/Ide...el.dll
windows10-2004-x64
1Client/Ide...el.dll
windows11-ltsc_2024-x64
1Client/Int...nt.dll
windows10-2004-x64
1Client/Int...nt.dll
windows11-ltsc_2024-x64
1Client/Ionic.Zip.dll
windows10-2004-x64
1Client/Ionic.Zip.dll
windows11-ltsc_2024-x64
1Client/Mic...es.dll
windows10-2004-x64
1Client/Mic...es.dll
windows11-ltsc_2024-x64
1Client/Mic...ng.dll
windows10-2004-x64
1Client/Mic...ng.dll
windows11-ltsc_2024-x64
1Client/Mic...ns.dll
windows10-2004-x64
1Client/Mic...ns.dll
windows11-ltsc_2024-x64
1Client/Mic...on.dll
windows10-2004-x64
1Client/Mic...on.dll
windows11-ltsc_2024-x64
1Client/Mic...ns.dll
windows10-2004-x64
1Client/Mic...ns.dll
windows11-ltsc_2024-x64
1Client/Mic...ng.dll
windows10-2004-x64
1Client/Mic...ng.dll
windows11-ltsc_2024-x64
1Client/Mic...ns.dll
windows10-2004-x64
1Client/Mic...ns.dll
windows11-ltsc_2024-x64
1Client/Mic...es.dll
windows10-2004-x64
1Client/Mic...es.dll
windows11-ltsc_2024-x64
1Client/Mic...ns.dll
windows10-2004-x64
1Client/Mic...ns.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
899s - max time network
453s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-es - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows - submitted
15/07/2026, 18:40
Static task
static1
Behavioral task
behavioral1
Sample
DLS5-INT.exe
Resource
win10v2004-20260513-es
Behavioral task
behavioral2
Sample
DLS5-INT.exe
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral3
Sample
Client/HiQPdf.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral4
Sample
Client/HiQPdf.dll
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral5
Sample
Client/IdentityModel.OidcClient.IdentityTokenValidator.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral6
Sample
Client/IdentityModel.OidcClient.IdentityTokenValidator.dll
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral7
Sample
Client/IdentityModel.OidcClient.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral8
Sample
Client/IdentityModel.OidcClient.dll
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral9
Sample
Client/IdentityModel.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral10
Sample
Client/IdentityModel.dll
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral11
Sample
Client/Int.JC2.SiteManagement.Client.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral12
Sample
Client/Int.JC2.SiteManagement.Client.dll
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral13
Sample
Client/Ionic.Zip.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral14
Sample
Client/Ionic.Zip.dll
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral15
Sample
Client/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral16
Sample
Client/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral17
Sample
Client/Microsoft.Expression.Drawing.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral18
Sample
Client/Microsoft.Expression.Drawing.dll
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral19
Sample
Client/Microsoft.Extensions.DependencyInjection.Abstractions.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral20
Sample
Client/Microsoft.Extensions.DependencyInjection.Abstractions.dll
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral21
Sample
Client/Microsoft.Extensions.DependencyInjection.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral22
Sample
Client/Microsoft.Extensions.DependencyInjection.dll
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral23
Sample
Client/Microsoft.Extensions.Logging.Abstractions.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral24
Sample
Client/Microsoft.Extensions.Logging.Abstractions.dll
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral25
Sample
Client/Microsoft.Extensions.Logging.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral26
Sample
Client/Microsoft.Extensions.Logging.dll
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral27
Sample
Client/Microsoft.Extensions.Options.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral28
Sample
Client/Microsoft.Extensions.Options.dll
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral29
Sample
Client/Microsoft.Extensions.Primitives.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral30
Sample
Client/Microsoft.Extensions.Primitives.dll
Resource
win11ltsc2024-20260709-es
Behavioral task
behavioral31
Sample
Client/Microsoft.IdentityModel.JsonWebTokens.dll
Resource
win10v2004-20260513-es
Behavioral task
behavioral32
Sample
Client/Microsoft.IdentityModel.JsonWebTokens.dll
Resource
win11ltsc2024-20260709-es
General
- Target Client/Ionic.Zip.dll
- Size 451KB
- Sample260715-xbebysfv4v
- SHA256 4f128f477b22e89095dc60389ae3c51481394443356298145c9490d8d17a3afc
- MD5 a9c03af0d4ce8be84550af055fc8c34d
- SHA1 3345753f7ff2b4da192c56a05a3470d6a27947e8
- SHA512 bb9c8f1a7a59ca7bb99d57d1ef1aa0e36c47765b6bf2f650297d5f7844877aa7035c836591bd7583452084dc7a7550cc82a0d90f4c306c84733cbe78ac6340df
- SSDEEP 6144:eb0iFwGeaDwSc2da+Lzi4aUMle6ZjxLV/yJDsTDDdGtSV412vXZQl9O:ebiDAaUCe65fAscS4EvXE
- TLSH T1D5A4AE0433DD4A6AE2EE1B79D0B3926183B1F921793EDB4F5D4424EF2D2B79089107A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Client\Ionic.Zip.dll,#11⤵PID:1840
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5288
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:2812