Overview
overview
7Static
static
5radtools.exe
windows10-2004-x64
7radtools.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3binkplay.exe
windows10-2004-x64
3binkplay.exe
windows11-ltsc_2024-x64
3radvideo32.exe
windows10-2004-x64
3radvideo32.exe
windows11-ltsc_2024-x64
3radvideo64.exe
windows10-2004-x64
3radvideo64.exe
windows11-ltsc_2024-x64
3smackplw.exe
windows10-2004-x64
5smackplw.exe
windows11-ltsc_2024-x64
5uninstall.exe
windows10-2004-x64
7uninstall.exe
windows11-ltsc_2024-x64
7General
- Target radtools.exe
- Size 1.1MB
- Sample260721-3mfl2swanf
- SHA256 d46cc8c9fdfef652b4b9501d163fa3d4c662dbdb3ca4b0d19f6245e0d5344283
- MD5 573cb29be2758657ff04921cd5c774d0
- SHA1 39ef97fd062d8f392752ec82b3b5f607c971a3e5
- SHA512 0a154f947df4585e1bb396bdf1bd03db929d7f0206cac77ed8393cfc1be51ae13064d8603927af3aa277cc480de0152b647ca418ae9b82e344008947849ca395
- SSDEEP 24576:bpQccpkuPJjHGY/t+ry0WLHAoWoZIYMPhhz/3CLXlaZyhRPJQ:bKpnRrGO+2NLDWoZjM5hzqLXdRP6
- TLSH T1F43533056694D879CE92197101EABE67F2B83C128D501B573B9FBABFA7335402638CE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
radtools.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
radtools.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
binkplay.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
binkplay.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
radvideo32.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
radvideo32.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
radvideo64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
radvideo64.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
smackplw.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
smackplw.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
uninstall.exe
Resource
win10v2004-20260513-en
Malware Config
Targets
-
- Target radtools.exe
- Size 1.1MB
- SHA256 d46cc8c9fdfef652b4b9501d163fa3d4c662dbdb3ca4b0d19f6245e0d5344283
- MD5 573cb29be2758657ff04921cd5c774d0
- SHA1 39ef97fd062d8f392752ec82b3b5f607c971a3e5
- SHA512 0a154f947df4585e1bb396bdf1bd03db929d7f0206cac77ed8393cfc1be51ae13064d8603927af3aa277cc480de0152b647ca418ae9b82e344008947849ca395
- SSDEEP 24576:bpQccpkuPJjHGY/t+ry0WLHAoWoZIYMPhhz/3CLXlaZyhRPJQ:bKpnRrGO+2NLDWoZjM5hzqLXdRP6
- TLSH T1F43533056694D879CE92197101EABE67F2B83C128D501B573B9FBABFA7335402638CE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 abf56fe9b605c8cd716a2cc59b6ef052428753d5c716aaf857c3349d74fae66c
- MD5 e98edd029f7f9f62ebb75992841817b8
- SHA1 8a7054283e4386689a29c63f4e65f3ef1ea7c43f
- SHA512 d6f3b151715a843a795f5a79931867031b2cc0c6406050f6af665fd07ba9d3b69557a09c720f88328b277fde0f47fffbb36a895196b7eb28d3c15ad0becc063a
- SSDEEP 96:Z+dBC0x22epxPEvC4FkWE+in1/FMvsCGRfRFqCB5tlGhEl5VN:Z+/epxPE1r8/FtmCDtUg5v
- TLSH T115E1F87AF7C044F3D68B43702863BB17EB669A2117257163992716CAB5C24E3DC24722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target binkplay.exe
- Size 331KB
- SHA256 80839a41fb241addc5e2f31ec001458fcd07f395feebcd5054a3348f655be39d
- MD5 ca06ce4151a471c41c0e29c721d63c6d
- SHA1 b3cdd47822a1d29a74a3693c0f2302f7e52b3cfb
- SHA512 798453220435563a2111fe29cbf297865d9e816d52dd7565d7c0b36a3cb129bd832ff4efe8020b7c971bf029ebc4168495ef4d82dc83d8b6796e285cf3871c55
- SSDEEP 3072:Fs9G208tAhFZ7mKvjbN1phTF9S03LzmfkkFOcTUmPoPojhlzce04Ue2JcotSf/mY:ln8t6wKtThfHmHFUzODx5HwemGJ+RW
- TLSH T1E3748D02E50094B2E449023003AF67BB653DBD32276D42D3B7D5BA39EDB07D56A35BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target radvideo32.exe
- Size 269KB
- SHA256 684f9afe243e5dc86b45c1f50978cde7bf51aa0297bfa99dc327e7e4add2d9aa
- MD5 7665da11e9199b5adc9d8e9ef0dd44f9
- SHA1 43eb5117b25a4e4e1c746e88c4007b967a9ba791
- SHA512 5f977afac799b637a8100da07ae82010367983b3910bdff587c42b19d414a4704798037fc0fa8f5827b46f0355431fe94bec0aa541da9f2e43970cb94ca50906
- SSDEEP 3072:DDBLR/RmKBjR8vZCF2UOfDQaCTTxQO6zmjYVvW6XaSWmieL/V+s2dsW3szpaXzyc:DDBnmKovZLxfVkOO6zcYV+Oeygs+W3qj
- TLSH T1F4448D117280C834C9F1427A99E4DBB46A3D3C304B25A9DBB3607D3BFEB41D256367A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target radvideo64.exe
- Size 2.3MB
- SHA256 783c15fd5b355457203fa760fc3d768b1354fc78a2c086ef82c3d3b6a9ebf810
- MD5 21be87b073cbffb9c48853c405eba8b1
- SHA1 1a50f86b9605ef96954b6c26b43349215bf668b2
- SHA512 09102c9b6eea8cb71329e514e3401d1c16e6f2de1ad2b7241dd2882f44386dd9ec34930a5814eea6d87614905a5025a9bf72379dc45feed693727a1e5c48dc7c
- SSDEEP 24576:K7bZS6FVVbrwNQmi2uAZWmUS2+vRZyR/VXJATrXUifLbwmuWRrwkrm/nDHtoyMiF:Kpz/RNEz3RC/poy8L0rao
- TLSH T114B56C49F6954F91E0178B3458F7633BB23C34094B268ED72684A6847E536F327B2BC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target smackplw.exe
- Size 114KB
- SHA256 43fd622e0cd6f6bf7248c741064d0331821c721dd5329dbbd906a8e4fdbdf1ad
- MD5 4e78e21fd9828d16234ece165bf2e1ce
- SHA1 48406a69d056661e034164929865b3a8973abcae
- SHA512 a312ae3429eef7072d6c93420e17821ec2756ccadc06e6d5cc29c8ac76d39877207d90cd251cf677025aa0d405aa02730850295f87a4ddfef4c6814f39963a7b
- SSDEEP 1536:NBSQV45fVbBx8i8RkqW4ODDdoBCw3lsjT/cED426ST038hiMtkoMxOXSrj6ITW9N:/SQVYfVwGqXkdoBj3mto3rpjhf6IiMda
- TLSH T11EB30262C9388CD4F8E2487E50DD4C2D58697C53E3C1B3DB72C1BE268A32BC97A5912D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target uninstall.exe
- Size 53KB
- SHA256 f9f317e0eafac10a265bcc5bd6791bfaf3ddbfd0763bf9b4fd9ba76ada140d0f
- MD5 ebd2e0c892c9f6aff10ae04aa16238b7
- SHA1 1263008a52343e9a4fb53909e1e84c223fe1258e
- SHA512 af8632efff94decf91f87466abd09985b52072c8bf9622e8e6fd6a6a294bb4a410a33ada12553871f9a01aa82c186c24b514f5d99233487ea0bcb7131003538d
- SSDEEP 1536:Yu4EQalMK/ewGnh0mJGgrCn5hLeAyNxeq:YNyah0mJGeKReAC
- TLSH T1DC33AF0672C0C8BBD9AA067009B7977BE7F5FE001D1446E75B930F6F6521342AA36AD3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Executes dropped EXE