Overview
overview
3Static
static
3Helios.exe
windows10-2004-x64
1Helios.exe
windows11-ltsc_2024-x64
1versions/1...eg.dll
windows10-2004-x64
1versions/1...eg.dll
windows11-ltsc_2024-x64
1versions/1...40.dll
windows10-2004-x64
1versions/1...40.dll
windows11-ltsc_2024-x64
1versions/1..._1.dll
windows10-2004-x64
1versions/1..._1.dll
windows11-ltsc_2024-x64
1versions/1.../z.dll
windows10-2004-x64
1versions/1.../z.dll
windows11-ltsc_2024-x64
1versions/1...td.dll
windows10-2004-x64
1versions/1...td.dll
windows11-ltsc_2024-x64
1versions/1...pp.dll
windows10-2004-x64
1versions/1...pp.dll
windows11-ltsc_2024-x64
1versions/1...on.dll
windows10-2004-x64
1versions/1...on.dll
windows11-ltsc_2024-x64
1versions/1...ut.dll
windows10-2004-x64
1versions/1...ut.dll
windows11-ltsc_2024-x64
1versions/1...ut.dll
windows10-2004-x64
1versions/1...ut.dll
windows11-ltsc_2024-x64
1versions/1...re.dll
windows10-2004-x64
1versions/1...re.dll
windows11-ltsc_2024-x64
1versions/1...or.dll
windows10-2004-x64
1versions/1...or.dll
windows11-ltsc_2024-x64
1versions/1...er.dll
windows10-2004-x64
1versions/1...er.dll
windows11-ltsc_2024-x64
1versions/1...C3.dll
windows10-2004-x64
1versions/1...C3.dll
windows11-ltsc_2024-x64
1versions/1...or.dll
windows10-2004-x64
1versions/1...or.dll
windows11-ltsc_2024-x64
1versions/1...ut.dll
windows10-2004-x64
1versions/1...ut.dll
windows11-ltsc_2024-x64
1General
- Target Helios.zip
- Size 124.8MB
- Sample260719-mlp64abz51
- SHA256 4278ae5915dc577152394a1eeb4be7bf8e85aead3659434c8dc05ea388589c6e
- MD5 5616fdfca145cde51fdaab445c89e790
- SHA1 63f14fe442b688edf4b31a58b429d83227f26af0
- SHA512 7ab624c5a79a26003013aa70f817395c5f20d9675e63ae0a3a6819605ec795eeabb8f1edeaa711ff767f5c6046026bceb0c86c17b56aa07e4db33e6516cf3959
- SSDEEP 3145728:UPlc+ER5YZlC0we5OPKLCgx3qzMhUuOv1Rr4lZdAEE2Dv6Z21:UNcvRSOe5NeDMhULQJAE5GO
- TLSH T1BD58339ACCBA5AD7E85FFF3AF321FE46E19C105E0A038428B30453D0549A6C9EE4D657
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Helios.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Helios.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
versions/1.2.0.2/lib/turbojpeg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
versions/1.2.0.2/lib/turbojpeg.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
versions/1.2.0.2/lib/vcruntime140.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
versions/1.2.0.2/lib/vcruntime140.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
versions/1.2.0.2/lib/vcruntime140_1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
versions/1.2.0.2/lib/vcruntime140_1.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
versions/1.2.0.2/lib/z.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
versions/1.2.0.2/lib/z.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
versions/1.2.0.2/lib/zstd.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
versions/1.2.0.2/lib/zstd.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
versions/1.2.0.2/plugins/CvCpp.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
versions/1.2.0.2/plugins/CvCpp.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
versions/1.2.0.2/plugins/CvPython.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
versions/1.2.0.2/plugins/CvPython.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
versions/1.2.0.2/plugins/DS4Input.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
versions/1.2.0.2/plugins/DS4Input.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
versions/1.2.0.2/plugins/DS5Input.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
versions/1.2.0.2/plugins/DS5Input.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
versions/1.2.0.2/plugins/DSCapture.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
versions/1.2.0.2/plugins/DSCapture.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
versions/1.2.0.2/plugins/DeviceMonitor.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
versions/1.2.0.2/plugins/DeviceMonitor.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral25
Sample
versions/1.2.0.2/plugins/FileExplorer.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
versions/1.2.0.2/plugins/FileExplorer.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
versions/1.2.0.2/plugins/GPC3.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
versions/1.2.0.2/plugins/GPC3.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
versions/1.2.0.2/plugins/InputTranslator.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
versions/1.2.0.2/plugins/InputTranslator.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
versions/1.2.0.2/plugins/KBMInput.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
versions/1.2.0.2/plugins/KBMInput.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Helios.exe
- Size 412KB
- SHA256 cc2deba04748c9b8ea63c538825b7e09dc35599106ef04be533c967ba33ade7a
- MD5 db377b7e739f6d2e286f55a80f5d0087
- SHA1 f4a43c8bed5a3a45e9cc610e33698d4c00de9aca
- SHA512 226ab8d688864f686e4f9036ca8b062c05fd0117dd337569f628deaec81ac2db6cf7636620b66293e8b8f395b7d4feaae2bf2be3f87a81f719429563eaf1ed5d
- SSDEEP 6144:tIOxB7owloEwLjlXemqxUv4p/NrYaDmdoDI4i9ELf34wcOLD+J7d9zSvr/MzCbAo:WW3GjluhUVBdv5AMvzSvgzCbUrDt
- TLSH T151948D2B6B6824EAD2D1ACFC44B41109ABE7F97B97A5C7C717108FA91E6A1C50F73340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target versions/1.2.0.2/lib/turbojpeg.dll
- Size 982KB
- SHA256 0aa55321f16a0f594c86513aa029d27b5b8960940bde6922d558365310de6166
- MD5 ba0b90748b7275b40d2f2f5fca7cff13
- SHA1 0dff99408b2f456bc38dda388fb50030a2c0d024
- SHA512 0d96d97025d7b5f46aae5975b4f33fe8621c1f8ec813cb15fa1e93fe6f5910860c9e176c13dab5d57252b0a2c91c58c7da25615d54767a202213e38dbda0aeb0
- SSDEEP 12288:L5lqWH8yynQe1NS0zaxS/U5NrcpUXQkysQbO5zx/x8:L5lqWH8RQe1N/z05NrcpUAtbO59/i
- TLSH T1C9255B06B2A21985C7E28078CE6AD126E3657C1D07F209F77695BFDD7A329E03E37241
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target versions/1.2.0.2/lib/vcruntime140.dll
- Size 174KB
- SHA256 d1f4225df2cd877dbf130d5668a021dce3f94118455ff5ec952061c30afc9ce7
- MD5 07bc2f9c4c1b07e1cc013ca0079b31ac
- SHA1 1098f2a834146995df7a91c78f72f210d8d2d12d
- SHA512 8fd063d61d1c57bfae5ef105b1796c141ef2752dbad17ae79f974c417542c075bc8b4ac12163629a74e43004fd9cf170a76de9d11841b6e5c236f5b47fbbb09b
- SSDEEP 3072:aoq3aLPst/GrhA4gBSnSQ37QwZyeBB0ecbavp7D:aofLPsmBnSQ3VyeBB0ecbaV
- TLSH T1C6048D51B2CC00B2E92B9674CCD69553D6B1B0057B30AADF47A846782F33FF2A63DA15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target versions/1.2.0.2/lib/vcruntime140_1.dll
- Size 48KB
- SHA256 a7146c08f89fe5b04541ab507cdb59ff7b44534d4ba3c668a426c6450a03434e
- MD5 bbfa92d8173376c972fd58dcf5ca6aaa
- SHA1 b7b4b6e7045caccc0f790e3395e1f514d01f6b2f
- SHA512 f5856e7cb7bc8f40efc276f8e7024db9176052ebd47cd02e799aacde650293992a84a6a4856dd974077e94e688bb4ed67f18c1dfd8357afa8698dd0dfead68d3
- SSDEEP 768:bmiyc1PGhsryS/TAiblJce9z4Snqdlfe9z1Y:2cF8srygDlSaz4Ez1Y
- TLSH T1DA235E8193BC8086E8B798B480EBDF13BD3DB661976192CF1BA1E15C1D537C0D73926A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target versions/1.2.0.2/lib/z.dll
- Size 87KB
- SHA256 b6af897a2aab05cdec720e90206bb5de362fe3a4c7e6480d7ae762dd746fffbb
- MD5 09b6e152c62fcfb4c39d4193970cdc7e
- SHA1 ffc252f1ccf751da4716da1c3f37618c99d4e703
- SHA512 5254ae903ec0d5b970844a7bc69d2eec05f9b14722d9f1788fc99a8bb8cf3ddc31c28c59cca270c6184830056597bdd698e09bf9923cc33ec583c94bcf400d67
- SSDEEP 1536:6TQIeayS+/Z8F69HQHWp/nnMghQnkF2L+OmOF/IOxGMPdkz8G:6TQIBF+/ZmkwHinMghQn88rxxRkIG
- TLSH T18C938D55AAB422B1D6B741B4D8D347ADC771B00413681BDF9248A7692F23FE02F363E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target versions/1.2.0.2/lib/zstd.dll
- Size 639KB
- SHA256 15a2c4c4963e593489fb3f105d95b37bd51985cac5ae812738b3d67d2b91a034
- MD5 787343a1ec9c01a57f0556a6692932d6
- SHA1 cff64080c7dc603b8b6c16144264d9838f116c65
- SHA512 acbff14fe7e8725866e7fa09b14df492718a7776537be20198bf7284d58200dba4873db1e391dd998617b066a27a4927727498c36c9251c740f6679394420caa
- SSDEEP 12288:/wQgldrZYak5VtEy7/ZKO2N5ZKXpwlAiHnlRXWk6QR:IVG7tEy7/ZKOUnKXpwltHnFN
- TLSH T1B3D48D83F29951ECD02BD179C6965323EBB67C4513006AEB83A0EF653F13AE55B34386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target versions/1.2.0.2/plugins/CvCpp.dll
- Size 115KB
- SHA256 966d0a45aa9d2b42cba073e4a7246f638ccd2a2539b65c26bec09c31d8364cf3
- MD5 163e0bc7df6be9f6512aeb0fbaac17c5
- SHA1 04754e93c11005829a7e113d076f5dba49f1e1e0
- SHA512 deb5336e9f139b886756b7889ce7fa2a7d001ed600b9b88b65afe3f16733c9fd790d68bf2a988ab6b5e43353832369631d40e95d6aacb837238406478b1c43de
- SSDEEP 3072:fu8mOwSWFHiHhGOR2VXexM7p0xgJ8bKxtfOTWIoVbkZT:3mT9i4OR2VXexLeJ8bKxtfOTWIoV
- TLSH T1D8B3171F722602A2E065D27DC68B0E52D776F892832357FF0116DE2D1E237E16DBCA49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target versions/1.2.0.2/plugins/CvPython.dll
- Size 192KB
- SHA256 a1e314ff6f7cd09bfcbf86171ac947a25edc70204c10345cbd9e5d89bd103bfa
- MD5 f1871b7b0491225b15cce0cefd4e5f7d
- SHA1 09e6e2e5c231aa30c6af5b2b0c3972ae29bf7475
- SHA512 55c6039291dc7c1b65429e74a207d1d6b0a87945dd382ab0a22e3ab227b4e32e78860d3c1ee5c12eeffa5f46b468c7291daa21d9e32eb57f9b010a35aeaf6a40
- SSDEEP 6144:gE234XfGS4JP9+/aRNa4lk4KU1K8bxkmHBtfOTCI+oDtQ:58k4KUOtQ
- TLSH T15514F71F72A512A2F062D279C7670522F673B0510322A6EF1115DE3A1E373E5FE7CA4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target versions/1.2.0.2/plugins/DS4Input.dll
- Size 188KB
- SHA256 9ee88d532f2c4f4151e1bec1a2b7b2925c6b351cc5fd3aacfc9090904215c6d7
- MD5 d21e141dbd6750834f86470bc8688ccb
- SHA1 d39f163cb99ba5cb02e72ffb3c1fa8a65f782b46
- SHA512 da2f99a8915e2f1e6ce680d9fa1e8286dde97f6cf62024e92a4a5ff766037f70ec546de3f990115938fa20a345c126de0527ab3b67cb2148f5fefe9e69270721
- SSDEEP 3072:Y6OfhwNA9BNRyUw8qU2yqvScwpq8phYsNt1Hrh3W27u9woQCC4dK0GsuIHhzqdGe:YXaK2yqvEpqINtxh3W27u9dQCC4dK0GK
- TLSH T111146C0ABA1100A3CA9AC238C2174EA7F933E0C597126AD39715EDBD1D733E53E7D985
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target versions/1.2.0.2/plugins/DS5Input.dll
- Size 82KB
- SHA256 d4b11973a423cf8b0461e001aaeabed9f99b80557a9f3fd5b1d587b853020984
- MD5 7d0d7f8fe9f4c313090da4b7e56638d3
- SHA1 1a87e0fe61ff85fb4769a6bb674dcca0f22a182c
- SHA512 b8762cf09c13a3d78abe67276d88214f988fe9ea387637787e5f86de7f339d0f2c48cda70362047ba03ca67aba901f908d3c43771a21172e47ffbe53d5348005
- SSDEEP 1536:Djwel4XDdu5/GlkzijQPhQNo851CDXZ/g1N8bjcCLxIhn8TGfL9C1OrylogpWb0R:AXD+/G+z5hQIXo8bjcCLxIhn8TGfL3g3
- TLSH T108831A1A62231292D1A9C378C38F0F75D763F4A243635BEF8166691D1D673E03DBC98A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target versions/1.2.0.2/plugins/DSCapture.dll
- Size 127KB
- SHA256 0afbf4d48d8a0e7faab49c61cfc921ca67908cde53aaffd8dd1eb4d6f2e6deb7
- MD5 3cb2e8dec7c93157fb0b88de6550f27d
- SHA1 e4b568908966214fb30b56ed36489902e6f4907f
- SHA512 4adc2501a7974f556cc0605608908249ef4cdc63a2f84a48ab32142a92b313562f26660fb95d1b4d39594b83e0196d33fe5f3b590ea4dc8d53cd9e3d2324cea8
- SSDEEP 3072:7JGHoPWxcsNlh9JfKhfzNx4hVWcy4ek6AmsCIu01Y+Zy4eksmsCIu0wY+Kag1s++:SoPWxcsNJJfKVzO69R8b+L3jqHIEfGTI
- TLSH T1B8D3F65F72A202E6D121C278C7574D25DBB2F46247236BFF424A982E2E373D12DBC964
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target versions/1.2.0.2/plugins/DeviceMonitor.dll
- Size 137KB
- SHA256 d6de6188c2c75646be5dd928e1dcd62ae33bd515aed2f4fdcd36f679006ed4fb
- MD5 055353e549b1597877785d6e0d4f08c7
- SHA1 bcc9ce8bb20baf805ee62b140adf06c1f7d68fb1
- SHA512 7e83d0703dee50c4ae0c517578ccecc7605303e6b10f0f6d7877482d9db86de0c5f7b3d5cc14ffee84cae116c0c80146ce8f6381fcb8f91e4c532cbbae7c44b4
- SSDEEP 3072:vpJXm0u+GuK6gvM+hZMRbvMXx8bsvLM7SufTIopBddNdJ5:xUgGuK6isRrWx8bsvLM7SufTI4df
- TLSH T10DD3E51FB29601A2D126F17CC68B0E26E372F056575A4BDF420E9E6E1F373D02DB8958
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target versions/1.2.0.2/plugins/FileExplorer.dll
- Size 100KB
- SHA256 d56f1a92c0f2f7687a43a9dbc881d6b04c35b4d9bd4f59e932203ba95c42cfca
- MD5 7946da41a7e5001461c620ae1402fe40
- SHA1 3d4ed8e08631e349cb075effe597420946973436
- SHA512 204f0f05e5a6a0e054357986dffdd59ab7ffe9fa64afaa4a3ac31bbc47dbcfc1c3ae6aa18a8348c31fac300cbec3d4c761dd04c053940b91e76826ea53a1c82a
- SSDEEP 3072:U4xCQGU21M8p/bhX9KY0PVnPrp9iS8bZV0cxLKbf4I1UlXh:I5U2q8hKbVnriS8bZV0cxLKbf4I1U
- TLSH T18CA3181F365622E2D065C239C65B0E92D362F0521B27ABEF911A9E1D1E773D17CBC88C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target versions/1.2.0.2/plugins/GPC3.dll
- Size 138KB
- SHA256 be49f2835db8f7fd756a2a74c5455393114e42ae8e978fefc831a60d7df25402
- MD5 db6892961a7c7006b4271ea46084804c
- SHA1 2775d777351f53a60d80b42917357cb30357b9cc
- SHA512 adb97277ee2f218eaf7b6389646a5e1460c5871b2409fafdd3b312f27f2cc9dc935986186e5a13e6317903f59b0210e437f5922ad57670e6a68cd1abfc2a25e8
- SSDEEP 3072:T26olLpL0zRnC3JWb5gSR7vu7kwhwJH4NLpnVTZNLpnVTHNLpnVTDZXqNFpnVT50:T2dgCQgV7kR2p48bVVSLW7KosflTWI2v
- TLSH T1BAD3275FB66512A7E024C279C68B0B12E7B6B0524722A7EF4216DD3E2E373C13DBC558
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target versions/1.2.0.2/plugins/InputTranslator.dll
- Size 263KB
- SHA256 edca0de875d6ff5ae6fa8bed109a67f9d2aaa6962b8cb092fc8b8cc98a65d688
- MD5 cc858098af0e75599ab25e57a2d544ef
- SHA1 ebc23b86263d6cdc709861721c907eeb410a4a3b
- SHA512 3cb777c13846f1bcb091128ed8546dbcbb9b80f02cf6a39744fd6e700afcb222d8d5b71103c776b46c2dbe1cfdef8f9d2da5a89d579aaaef5b830bc16d4992db
- SSDEEP 6144:QPZUkxLcJedtuTMYomt+BdBKdintIQs448b/Qbkce7PoF7SM3UnhtOjHunwTVL:QBUUdYTrj5sJ
- TLSH T14644395BA7B60DA3ED22C53DCA4B8511E97374428352EADB6305CE6A8D3B3C0BD3D644
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target versions/1.2.0.2/plugins/KBMInput.dll
- Size 65KB
- SHA256 df32e0e8ff959624ab720a09e6913a96dda7a05c5b68913c30a0144bc2b2d199
- MD5 54ad65a94351e423cc12d6c49501d85b
- SHA1 cf7a4974372ebca27523a2c04694c34dcbbb9437
- SHA512 5fca056ffe8fef965c7ce4add28a27e61107c54d2667f15101f7970fc8454aba642563c4607cf731a89396f7efe70798936d09ce5cf3976bea3e8340bca0ffbf
- SSDEEP 1536:cEQDvYHfkw86qjewEhR8Wy8Kvn5QIlqJHOWSG4hPuDAg1N8bZhnSfnIuCZrylo+k:cVUfg6LhGvhlqJHOWSG4hPuDx8bZhnSE
- TLSH T1E553199EB66601D6E136D238C2470E75EA27F02107234BEFC21EAA2D1F533D16D7C999
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10