Overview
overview
4Static
static
3Ozone_Wind...64.exe
windows10-2004-x64
4Ozone_Wind...64.exe
windows11-ltsc_2024-x64
4$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3JLink_x64.dll
windows10-2004-x64
1JLink_x64.dll
windows11-ltsc_2024-x64
1Ozone.exe
windows10-2004-x64
1Ozone.exe
windows11-ltsc_2024-x64
1Plugins/Co...RM.dll
windows10-2004-x64
1Plugins/Co...RM.dll
windows11-ltsc_2024-x64
1Plugins/Co...CV.dll
windows10-2004-x64
1Plugins/Co...CV.dll
windows11-ltsc_2024-x64
1Plugins/Di...ULP.js
windows10-2004-x64
3Plugins/Di...ULP.js
windows11-ltsc_2024-x64
3Plugins/Di...U3x.js
windows10-2004-x64
3Plugins/Di...U3x.js
windows11-ltsc_2024-x64
3Plugins/OS...gin.js
windows10-2004-x64
3Plugins/OS...gin.js
windows11-ltsc_2024-x64
3Plugins/OS...ARM.js
windows10-2004-x64
3Plugins/OS...ARM.js
windows11-ltsc_2024-x64
3Plugins/OS...CA9.js
windows10-2004-x64
3Plugins/OS...CA9.js
windows11-ltsc_2024-x64
3Plugins/OS...CM0.js
windows10-2004-x64
3Plugins/OS...CM0.js
windows11-ltsc_2024-x64
3General
- Target Ozone_Windows_V334a_x64.exe
- Size 16.5MB
- Sample260721-hlwxesay3s
- SHA256 a6df0419e50ce92ef9f94f3005e62156ccaa0f06259db968620b37722d590380
- MD5 3bc291a4a9aeffe1c9cda135605a7832
- SHA1 6ab19257cff8fa4507309425668e7b86d3893868
- SHA512 5fd213009fc6e4b10831cbb7b1c0bea7e0967670204c77e1d82db69bf411c1d45ae6ab7d7c55dddfd224b8c49c6c2df35b41df0838284287f08dc7fe6de5a44e
- SSDEEP 393216:+YEvkTReiaVv8WOIgnlc8ZR/OFygKoEBPW33IAzPg91s0:P3SvIlPNtgZEBPWnI+Ifs0
- TLSH T10507334CA7E470B0E42429BE4186DF1E56100F1D9DBAD6AA977FF7A313D811E4CF06A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Ozone_Windows_V334a_x64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Ozone_Windows_V334a_x64.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/Linker.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/Linker.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
JLink_x64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
JLink_x64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Ozone.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Ozone.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Plugins/Core/CorePluginARM.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Plugins/Core/CorePluginARM.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Plugins/Core/CorePluginRISCV.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Plugins/Core/CorePluginRISCV.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Plugins/Disassembly/DasmPlugin_PULP.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Plugins/Disassembly/DasmPlugin_PULP.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
Plugins/Disassembly/Disassembly_AU3x.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Plugins/Disassembly/Disassembly_AU3x.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral25
Sample
Plugins/OS/ChibiOSPlugin.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Plugins/OS/ChibiOSPlugin.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral27
Sample
Plugins/OS/FreeRTOSPlugin_ARM.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Plugins/OS/FreeRTOSPlugin_ARM.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
Plugins/OS/FreeRTOSPlugin_CA9.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Plugins/OS/FreeRTOSPlugin_CA9.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
Plugins/OS/FreeRTOSPlugin_CM0.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Plugins/OS/FreeRTOSPlugin_CM0.js
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Ozone_Windows_V334a_x64.exe
- Size 16.5MB
- SHA256 a6df0419e50ce92ef9f94f3005e62156ccaa0f06259db968620b37722d590380
- MD5 3bc291a4a9aeffe1c9cda135605a7832
- SHA1 6ab19257cff8fa4507309425668e7b86d3893868
- SHA512 5fd213009fc6e4b10831cbb7b1c0bea7e0967670204c77e1d82db69bf411c1d45ae6ab7d7c55dddfd224b8c49c6c2df35b41df0838284287f08dc7fe6de5a44e
- SSDEEP 393216:+YEvkTReiaVv8WOIgnlc8ZR/OFygKoEBPW33IAzPg91s0:P3SvIlPNtgZEBPWnI+Ifs0
- TLSH T10507334CA7E470B0E42429BE4186DF1E56100F1D9DBAD6AA977FF7A313D811E4CF06A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 e560384c5298ee2123e8340e716b2c4680f51b4d0347995ba3290dbd1130c6c0
- MD5 eee2912bd1ee421cf1f1dfb1cc327d97
- SHA1 c5d3741ddb195718c9b17923eb6abfb7a732bdc1
- SHA512 1808a068386c790d8ad5096d9fededcfa6e5688e3a68f2499418456c9cafd7b837c811298e6570212155b4a3d6038c1749cfcd9d1b86f090f66d1a5301adecb2
- SSDEEP 192:qcOqh13v5z+dHeMR2QwHu5S9i/yULWWBZYJCSJyejPK72dwF7dBKEw:qcD13v5SdHeMRRKkwsejP+BV
- TLSH T1A8622A51738488F3DBE6013EB85637076B9E5166B4925E93CE271ECA6D3708D7EB2302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/Linker.dll
- Size 6KB
- SHA256 ed58d0eea00503c73321188111a89d6c256ba1169c75ea6f8e655b2a9df8fa95
- MD5 a0df50278c70fbeb423b0a06ae75c15a
- SHA1 75f3039ae96777047d1d5267024645e9849a2c82
- SHA512 15c448b47856c25f2bbc79746843d4390545b23cdf016d770c0ac467eab9461f991efadc7db685b1517b54a8ba9ae80c0dea828f99b6f0b49f1a5c27acf1846c
- SSDEEP 48:aV64rxEzc0iZbZL9UMHDm0Pxw9flrT9d4SST+6EeHMWkl1+zhIzjC:zQyc0i199UqKmWflnhSTtHbk3gv
- TLSH T16CC16172B3E495EAE0F30736697357A659B9BC259729C08D0243350B7A31A47DA3CB23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 44e5dfd551b38e886214bd6b9c8ee913c4c4d1f085a6575d97c3e892b925da82
- MD5 883eff06ac96966270731e4e22817e11
- SHA1 523c87c98236cbc04430e87ec19b977595092ac8
- SHA512 60333253342476911c84bbc1d9bf8a29f811207787fdd6107dce8d2b6e031669303f28133ffc811971ed7792087fe90fb1faabc0af4e91c298ba51e28109a390
- SSDEEP 96:UPDYcJ+nx4vVp76JX7zBlkCg21Fxz4THxtrqw1at0JgwLEjo+OB3yUVCdl/wNj+l:UPtkuWJX7zB3kGwfy0nyUVsxCjOMb1u
- TLSH T1B8324B15035046F3E196853C542B3AAB6BB879118AF04E43CFF36892FE386C79D7A352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 401f1a02000ff7cf9853d964dcba77e6f0fa8e57256b11ed3c01171d7a97388a
- MD5 d9a3fc12d56726dde60c1ead1df366f7
- SHA1 f531768159c14f07ac896437445652b33750a237
- SHA512 6b06e3446df419151dd20cdb1d9c595fe9fb0972e7dfc50dadeea9f868d8ef0cd4cefcb18c7ebfc0d2a3e9171f8aa1f9fe762f54c374667f6060e8ce7e845f51
- TLSH T1B88151BB62A40CF3C0951BBB41D71CA71376DD702792411E98474E9A34C4A6FED6F705
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 c5bf321a3a2aace7b42014cf78a3d0fb3eec03b2c8ff00ad72445f56657377af
- MD5 36bdf3e282ee81ea2f9a400604a55ff6
- SHA1 032c7337754bd9bddb71db20feaddad7837e0a29
- SHA512 58a99987fb63e392632f855f97f945bfd9de941788905636807a925b711db290370965875f1074478ce40ec4cd6f9e671a661e14c14a17ddceb08df692fe9c5d
- SSDEEP 96:3ip41CMj95rKhkfL5RkEdKkcxM2DjDf3GEEE9v5E9av+Yx4FndY7ndS27gA:3iujesS4HREEK5MYxwdqn420
- TLSH T19B1208675A0010B3E9A36239316A2D3F8B7C9325D0A37C03C677AE562BF031A7D3A354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target JLink_x64.dll
- Size 21.9MB
- SHA256 0996a07dcafb7fc92a2610af5ad5a1ba9bf5bca7018985436c2aa4e7fc1e28e0
- MD5 f602db6d3fd514b48a96f19d1b37a182
- SHA1 498abdbb5d91a824999e891cec292fa7b0f8029c
- SHA512 137088ca777f8f0cefd89b1c24cdf12dc445e97429736bf404547efb1482e6a7b47a7fc3401f5dc46fae15ded645a7e30d80e8b720a5f0528ff4acd49e59bb27
- SSDEEP 196608:69C6tqTXL99USmYo7rPtfguwKmNcKKcZ4nrnPO9pHsQ0rpryo:69C6tw7H0tPwKmcv5mzMQ0rpryo
- TLSH T13937C065BA005863C04822399963572093F79C5E87E3679B71DCB02CEE773F18E7B686
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Ozone.exe
- Size 6.6MB
- SHA256 b725bdfee9be0c22159382115a998ef10326d2adfcde1229bcbd0a948ed23c4e
- MD5 69ce4be1dabc0820025e98d1ef1a8733
- SHA1 a13695bd63d2fcb036e1f3309ceda80647214900
- SHA512 3bf3c32377c97b7ae3afe56dc62647c985b30866ac2b630816e8e23a93cad63e9f02d369be8470848a230f6f8e1aaf24a903f9c81aa44cc177a4392e3511a7cf
- SSDEEP 196608:EBzWTcCWLlG0R+8N2ZJBLJfR3L6xp8xS7y:EBzWTcCW00RfUBLJfBL0T7
- TLSH T198668D5F776923F4D162C0BDCA875907EAB23009132159FF0469CE699F3BDE05E3AA60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Plugins/Core/CorePluginARM.dll
- Size 737KB
- SHA256 06ea298811d9475797d26ffdf5c59f9735abb33262673995f5b1084edfb2f3b1
- MD5 a8b1de9cb2c1a5b1b2aa746ede2c4c45
- SHA1 f72d86e5716fba8620e0bbf1b2d255f9e98b35d5
- SHA512 24f8a1e15a866097379cb0ec9180815c17fb6c04c0049be1c9ecb2d6fe3a3965ccb2507529758a8de07723600f90d4cecf2da49be796c798879f9a452c4e9db6
- SSDEEP 12288:AKdDCAlWvddmcsCgWQhN9f2DzgRdyPd/UvvOtBNARHcOHzzBMymKhLzcx8/mLWSE:j9CAlWvddmcsCgWQhN9f2DzgRdyPd8v1
- TLSH T169F47D56F3B42ED9C9A7807A89931137F3B5744D0B64E6DB4601A132AF7BBF4A43A304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Plugins/Core/CorePluginRISCV.dll
- Size 299KB
- SHA256 3380b88e244aa2abbe5a4306bcd58758b33d016ce6be9bf136401bf3c7523ce1
- MD5 77e94c4c76b89515b00896c7125058e8
- SHA1 dfde20858539e360c4d374226c78b3437fc9ab94
- SHA512 538be8057dc6f141c2049c2ea9f45f01333389b916c212bbcf232c92f6db2ffa144570b5ca5996e71fe46269b9ed394d0caf9b5e74c5856efcc50bed994e929c
- SSDEEP 3072:iHZQkW5NHrmpBMYzyAOrTutrtvENYlKGzS8hjDYM5IKLUCqKNTWmvo:iHa5NLCBAWrJESxloMFc
- TLSH T13064084467BC15B6C2C6A4BAC42F9011BEB1F6D80763D16F4619083EEEB7FB015BB621
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Plugins/Disassembly/DasmPlugin_PULP.js
- Size 21KB
- SHA256 b233df41b24b1b52228267e7982c0f40558f730da43eacb4f20a2572ed164454
- MD5 1c67027c91511ab91102ee0182bb3493
- SHA1 c96843a8e5519ea49c6e6a376d2b357c180d42a4
- SHA512 13571479a5abd8fd670ab053ebae9f4bbb8a41bf9d539eb4403d4ee8e7e79ee17eec20ee3e9e87f72dbf68c5817aaf28c7366b26090a754694aba2710e6848d0
- SSDEEP 384:mFqQGGitktM64PfzKU5lfgHBcAKmkagKXiaQ8X21Y:mgQKPrKkoxPQo21Y
- TLSH T154A2EB489D521D010531E3B59B6B60D4DB29494BC2182C9E7C6EF3E89F3D8D681FAEF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Plugins/Disassembly/Disassembly_AU3x.js
- Size 17KB
- SHA256 11f9a463a512e6130cf150ce696fb13e0246c9012262b11fb227a831ca12b2ee
- MD5 ce54854e99de1b6700559995023b9c38
- SHA1 f80d2bea166f6f76129348bcea6e41ef461b97a7
- SHA512 97a13937009589010b185b41e9ff8b9eea109ef01d6b9af65ddbfd70f33f96417675b9db8806b3db2a758b5002da685355ebc16ef8adb7c0b83ae09e62c73fd3
- SSDEEP 384:4qro1UbGq8eRkmQIhOFB9u/xlkQiCBlQpidvgLBcAKmkagKXis+ni1Y:4H1UacQ1B9mlkQ9lQmY9b+ni1Y
- TLSH T179821F58AE03AE591F768729972F90C4D3B9E8130718D9E5B81DB4702F3D52043BDEEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Plugins/OS/ChibiOSPlugin.js
- Size 11KB
- SHA256 1e0ded9b59eef26d0f1febecb417a30a4fc9c04530d36eb6681f1d59bbc6895b
- MD5 05a10ae0ff09734538db8a4d85960cb0
- SHA1 7f115d9817d781555c56510386622ed1bf371690
- SHA512 5b787911c01e2fc8595234ae9f8ab80115b630d0140bf06659cdc48586ac88e56e91fa222f734a6278db8148115671a70bc1304dd5e0df839204042f21304403
- SSDEEP 192:GoJ+eQJSPABsYV37Lk0tesI+S2a/2ggm+LIeIv+Rxp5iBjgQBRjg83nebqem0WUt:GoJ+XJOABagbIeIVjgQBRjg8OWezWUTZ
- TLSH T1ED321E080C047E56F1715339870AA4E8FA7352336318A4B2B5ADF2406FBD8D597BDEE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Plugins/OS/FreeRTOSPlugin_ARM.js
- Size 13KB
- SHA256 abf280da223669e5c47d4ef6ebbcdf13f5d0a853110f711ed5653eb0ccadbd6e
- MD5 73f59178a02500a919bfe9f05e592593
- SHA1 a571182fc0ffdb0e6cc3c35140651438fac876b6
- SHA512 a77f3de4258b9896bed67dbaff2ec647b5d700931874a0c13bfca99c758dc93eecf31afa0adfc5d94e6d0a95bd0f9f3a81ff6fb6c5d18c43529275344280ddb5
- SSDEEP 384:JwcUyzF4wO5ohTq9jg84+lS305AFBjgsGD8P7C/ZcKV:JRUyzFsokVuNRPmZcKV
- TLSH T15E5273482D816E10B271D331AB5FE4D1DAB642232A64D275B08DF0D42F3EDB6837DAE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Plugins/OS/FreeRTOSPlugin_CA9.js
- Size 13KB
- SHA256 75865055ac7acbc4b75c854ac3669eb6a0c31ab1526ea453fcc8fdf4b4f291df
- MD5 19b0077285fa017a5995b9e4f974fc7a
- SHA1 bba639067db9b945f0e690d57cbce560d089d7aa
- SHA512 c753e242f5f559643e9d03e788c97827dda5f0badf1efc2da43495bbeb5a347ec9bc09b4258667391c94d6848961f3ef08fb4cab3f51ad45b1a06c8a3e58bd71
- SSDEEP 384:+VcUyzF4wO5ohTq9jg84+lS305AFBjgsGD8P7CYcKj7:+KUyzFsokVuNRP7cKj7
- TLSH T1A15263482D816E10B271D331AB5FE4D1DAB642232A14D279B09DF0D42F3EDB6837DAE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Plugins/OS/FreeRTOSPlugin_CM0.js
- Size 14KB
- SHA256 6159a3c6ee7bcd532bc89646f6dc541495d4e561ae12cd4fee694bed147f6895
- MD5 0b98382121b0926fc8f7692db13f111c
- SHA1 95c744b2509d1fcba20293c1e683ccd27b858c9b
- SHA512 3f7fb624cf1a01c013643badf8b56b8f7b6b6962ebc6ea8112c9b1e5541ec3956c9f14bb50bf20d14012a1e4d28b9b41aee9430c6b0cf662a2e986a9e5ef32d2
- SSDEEP 384:bCcUyzF4wO5ohTq9jg84+lS305AFBjgsGD8P7CXQ3m9Gba3P6Q:bjUyzFsokVuNRPMQ3m9Gba3CQ
- TLSH T1D35274482D816D10B171D3316B1FE8D1DAB642232624D279B48CF0D42F3EDB6837DAE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10