5861bfe3fe17cac44241715d2b9c383cef3bea165de2cf2ebac6ec69f51dce6c | Triage™

Login
Reports

Overview

overview

7

Static

static

3

SlickPDFRe...86.exe

windows10-2004-x64

7

SlickPDFRe...86.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ml.dll

windows10-2004-x64

3

$PLUGINSDI...ml.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...rl.dll

windows10-2004-x64

3

$PLUGINSDI...rl.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/eula.html

windows10-2004-x64

3

$PLUGINSDIR/eula.html

windows11-ltsc_2024-x64

3

$PLUGINSDI...rd.bmp

windows10-2004-x64

1

$PLUGINSDI...rd.bmp

windows11-ltsc_2024-x64

1

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows11-ltsc_2024-x64

3

icudtl.dat

windows10-2004-x64

3

icudtl.dat

windows11-ltsc_2024-x64

3

resources.pak

windows10-2004-x64

3

resources.pak

windows11-ltsc_2024-x64

3

uninstall.exe.nsis

windows10-2004-x64

3

uninstall.exe.nsis

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
SlickPDFReader_81686.exe
Size 16.1MB
Sample260716-mcjb7aat6m
SHA256 5861bfe3fe17cac44241715d2b9c383cef3bea165de2cf2ebac6ec69f51dce6c
MD5 08adabc0f480616c30d13db2ad4cd558
SHA1 35a99c986461c79b5407bc2c14d3fdb05a3f393a
SHA512 4cda2a7beb9c53eeb24ff0925f7da30a5e65d63b70c1369d506ce8504bac5861728037914e56838276660fdb341a94d6cffa57a3fd261b502fe570caa5053f6e
SSDEEP 393216:Q0cHWFEL/FMGnvi6mIuhnzVkRU51a67oi2FHfifqSBI4kUM:Q0xw/OGnviXNpmRU51Wi2Uqz43M
TLSH
T11707330AFE2A6442F9DD1BB60103A35BFD0007566B6E48EACA59E31D507A1B7BF1C50F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware discovery spyware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

SlickPDFReader_81686.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral2

Sample

SlickPDFReader_81686.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral3

Sample

$PLUGINSDIR/Banner.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/Banner.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/EmbedHtml.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/EmbedHtml.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/NScurl.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/NScurl.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/eula.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/eula.html

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral13

Sample

$PLUGINSDIR/modern-wizard.bmp

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

$PLUGINSDIR/modern-wizard.bmp

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/nsis7z.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/nsis7z.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

icudtl.dat

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

icudtl.dat

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

resources.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

resources.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

uninstall.exe.nsis

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

uninstall.exe.nsis

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  SlickPDFReader_81686.exe
- Size 16.1MB
- SHA256 5861bfe3fe17cac44241715d2b9c383cef3bea165de2cf2ebac6ec69f51dce6c
- MD5 08adabc0f480616c30d13db2ad4cd558
- SHA1 35a99c986461c79b5407bc2c14d3fdb05a3f393a
- SHA512 4cda2a7beb9c53eeb24ff0925f7da30a5e65d63b70c1369d506ce8504bac5861728037914e56838276660fdb341a94d6cffa57a3fd261b502fe570caa5053f6e
- SSDEEP 393216:Q0cHWFEL/FMGnvi6mIuhnzVkRU51a67oi2FHfifqSBI4kUM:Q0xw/OGnviXNpmRU51Wi2Uqz43M
- TLSH
  T11707330AFE2A6442F9DD1BB60103A35BFD0007566B6E48EACA59E31D507A1B7BF1C50F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/Banner.dll
- Size 4KB
- SHA256 189a30bd5802d2f43256c9f8958a7ec7fdf794a6a681731c85af01796d13582a
- MD5 4e50e372bed7882789360c37b1369e0d
- SHA1 24aa9ddf67ebae447313082d12b358029cc0070c
- SHA512 c05db65d19621132cc91ab09ce8ae7edc0906c1b9eff80b20921147de451138921b384345f98e88ee9fec8328a130a9d2bcb0e68cef794e81da3d26325a87500
- TLSH
  T1B781633BB2F04EF7E563023300830BD3259BA954A728471A4D67A1ED764A9D7D53DB02
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/EmbedHtml.dll
- Size 767KB
- SHA256 888fd9e1baf6e78c41c87ddc203b84d754ae5f73167876e3bf83a5253c375d8e
- MD5 d1d5fc1d51cbac6171601d3f990e0cc8
- SHA1 fc3b32f7ad1e717a7f31590dd6c02b8417d7c75d
- SHA512 571e2b767608bf502f3cf7a320ce5d93571168510a37e6aefd37c43ce3319feb8211bebcca1274f13deaac0c444366ea2091a9e4a744344874a22f9294370a54
- SSDEEP 12288:39nfbYbyicF595btShv/NMAPjhxBDcoBJHD/Yd1QPN+N7Eq:39nfbYbyi4595btShv/NMArhvcoBJiQ4
- TLSH
  T1B8F4C4C2E2A5F656E3A700719C0962D50A612E303394ED67BFC632858D3A1E7E5E1F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/NScurl.dll
- Size 7.2MB
- SHA256 f41c74c3024c8640e82e924db0af73b2fb04dd65e8f239af745926b2761a8162
- MD5 578986617b7a4e3c93adfd9172705a53
- SHA1 162efb4fc94797726f7d360643b45011a3280cda
- SHA512 19d7e0cb8a3eb957c0cc611d51db64d01242b8e5454a8fe03c269f7d964b73f28e3e6b48cf4218402a88ffd1fb8ce26f7c865c4cbfe6fcd29031d6bb563c7a9f
- SSDEEP 196608:zXr8P3PrSYc4SThnIhr8vOKnbDR8ncC9NRlrn9PGYAY0iT6V:UnEkTT2
- TLSH
  T1FF763A94FECB04F1E55384B0D8DBB37F8B349B018125E6BAEE4C5E56F933701252A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
- MD5 4add245d4ba34b04f213409bfe504c07
- SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
- SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
- SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
- TLSH
  T188426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DBA879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/eula.html
- Size 2KB
- SHA256 9c0c0ad6ad8378551421514f046b945074f678b105e2640c9794a483b76e59ed
- MD5 cb19589828799d5f33cfe69a03f244ac
- SHA1 780629a1637ef5e6cc397e401946f4acd98b3b67
- SHA512 18dda77e19bfef79735f3ecf47cf13b2737b2d6aa2d78cc910e6a016b39b944ec22a02196dc188e0d3a5e1dbbede655eabd5aa6584b823d69424d2e304b86abf
- TLSH
  T1B541FE6C739337224AB006141F4683E8EB169A77636A2191F5CD800B3FB291086F37DE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/modern-wizard.bmp
- Size 25KB
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH
  T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed
- MD5 1d8f01a83ddd259bc339902c1d33c8f1
- SHA1 9f7806af462c94c39e2ec6cc9c7ad05c44eba04e
- SHA512 28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567
- SSDEEP 96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc
- TLSH
  T12A120992E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  icudtl.dat
- Size 10.0MB
- SHA256 51edd31f6c5d298c662af320424b632172a31e3348cdbb201380636c95ded794
- MD5 516f6b90d1539bd1eaeaa2fc32dadb92
- SHA1 8017789bef98902cdc95c18e67b84378ddd293c0
- SHA512 db4b5fd7f8a0e0a331ffa7c574d011b059df8654cdc6ee4970f84fda20b88a3b8706f2605d91d19a6dd86d2702cc9542e026a054d28f85c51b676daa8d3f3bb0
- SSDEEP 196608:zTzwSv9AAyM0agliXUxCGZHa93Whlw6ZEtZ2:zoKlyMqliXUxCGZHa93Whlw6ZEt4
- TLSH
  T1B6B62907A2FB4EC2F9F7AF30D9F152679467BD496E31805A11442F3B1C337A08661BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  resources.pak
- Size 5.1MB
- SHA256 d1c062104f136edf33ad4d89460b2e4d9c1e463e792834ab91ef7d2a11953794
- MD5 915f50ee09363c2e946fa60c3080d97b
- SHA1 38038c4bee8780aaa89936534e5559fbc6aec953
- SHA512 c59543522ae69753996a9912a2dec751f16dab7175c2073864253f77087654d895d12191815b257408b7442d027b0717c6a0d4e5e0b8948a3e60543197c1f10f
- SSDEEP 98304:YhFdIHa+WSTCCDw/xcljwglh1eZML3Arwr/NGKwkT+E59zqaPqPXSF7yOzy2oeUn:S+WSG+lUGhkMLQkrVWk6q9+nPXsq2oek
- TLSH
  T144463311F3A01D37E2D6933AD4A840372D35D18759A2BC2CF4CE211E8F5CA9B16B976E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  uninstall.exe.nsis
- Size 1KB
- SHA256 ccf0aaf08adde0d2732a422bfe45f92cb5a26442c53a265802f6237f9dabb3e4
- MD5 02d63a98d7bd88a4a4cc9289e35c35fd
- SHA1 25a994f5a0e898af94493bad061ef9c987bf1468
- SHA512 107f86dd8509f5aa9a97a8abf59e5991d3d8d5074c50e6674d26f25a4887612e6861f41baaaf7156af6444bf9487448eb5d3d8f76a1d547bfddfa4128d9049cb
- TLSH
  T11F31E74F5C4B3770C83412B619E47D796E0059BF36865D429541B4AD62C74D1EC2A23E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryspyware

behavioral2

adwarediscoveryspyware

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

© 2018-2026

Terms | Privacy