Overview
overview
10Static
static
5SoftHub/LICENSE
windows10-2004-x64
3SoftHub/LICENSE
windows11-ltsc_2024-x64
3SoftHub/SoftHub.exe
windows10-2004-x64
7SoftHub/SoftHub.exe
windows11-ltsc_2024-x64
6SoftHub/da...ect.js
windows10-2004-x64
3SoftHub/da...ect.js
windows11-ltsc_2024-x64
3SoftHub/da...gs.ini
windows10-2004-x64
1SoftHub/da...gs.ini
windows11-ltsc_2024-x64
1SoftHub/libGLESV2.dll
windows10-2004-x64
3SoftHub/libGLESV2.dll
windows11-ltsc_2024-x64
3SoftHub/msvcp120.dll
windows10-2004-x64
3SoftHub/msvcp120.dll
windows11-ltsc_2024-x64
3SoftHub/msvcr120.dll
windows10-2004-x64
3SoftHub/msvcr120.dll
windows11-ltsc_2024-x64
3SoftHub/op...sw.dll
windows10-2004-x64
3SoftHub/op...sw.dll
windows11-ltsc_2024-x64
3SoftHub/sd...64.dll
windows10-2004-x64
10SoftHub/sd...64.dll
windows11-ltsc_2024-x64
10General
- Target SoftHub.zip
- Size 43.8MB
- Sample260721-ntldjset6k
- SHA256 383c829e2265c1edb540d78d47d700774dcf6fe260e4ba719d96832d559a37c2
- MD5 c3160e07030d58de6afe56af68f9addd
- SHA1 578c9b9a9d4ef1915b8b95674f5252b53d0b28d2
- SHA512 b9833d879996cf96aff55b00bf5606abd92c543fe58c05239fed1662eb5e05eb688f00b996d97d8ea6bb03ddbd36945bcfe3a0d0e3ffa04bf784ff2a38403b90
- SSDEEP 786432:S876JV7lWEadkG0zpa+eI0MGy7luKxfPxqt6EExivPfQw0SheAkHtbCuH2N:Spf7LaKYy7bfPxqtTEMvPfQwDextboN
- TLSH T128A7331CAE2405D4720BB70AE828C93529FD3154EB1CBA57FEC9721CE3682E75EE0675
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
SoftHub/LICENSE
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
SoftHub/LICENSE
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
SoftHub/SoftHub.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
SoftHub/SoftHub.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
SoftHub/data/project.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
SoftHub/data/project.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
SoftHub/data/remote_settings.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
SoftHub/data/remote_settings.ini
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
SoftHub/libGLESV2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
SoftHub/libGLESV2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
SoftHub/msvcp120.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
SoftHub/msvcp120.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
SoftHub/msvcr120.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
SoftHub/msvcr120.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
SoftHub/opengl32sw.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
SoftHub/opengl32sw.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
SoftHub/sdHookpp.64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
SoftHub/sdHookpp.64.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target SoftHub/LICENSE
- Size 33KB
- SHA256 76a97c878c9c7a8321bb395c2b44d3fe2f8d81314d219b20138ed0e2dddd5182
- MD5 3e00ca6129dc8358315015204ab9fe15
- SHA1 5835213bd72873e87ee97e546d023ca970bf8c08
- SHA512 3a02a6ec14e9d076b79aea8301eab31053c6600b68dcfa6261e10edaa7296a87c8767e35f2411d234b90111fcaf6b4a55c49aa2790a1a0d015213218bb7549fc
- SSDEEP 384:ZuvgUu2qVTfofITuM2Vs6aHGUa1lufWkGVBmnLRfCiR1XAnLuaa9f/d5zgUaGhqU:Zqk3LTB2VsrHG/OfvMmnBCtLmJYR74
- TLSH T1F2F2845FB74413B2028206626A8B68DEE31DD03A776640A5785DC15C27B3E3583BFBED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SoftHub/SoftHub.exe
- Size 93.3MB
- SHA256 430b7b1a40143e04e84378b7d14936c6ae6dedd33fac2cad461d9b98b42ca2e7
- MD5 fecb9f83da1c1521e675616efb40c3c3
- SHA1 3acd9c389f86eee9564ecac32f72375e0923e600
- SHA512 4640332097ad2a72c2a543be5fa67b6ba2555fa63d2992a62c7189df8dd16e542a215fe32323436c6ceef0073b892805afeb998f4ce23942c8ccf744c17b37ff
- SSDEEP 1572864:WZa7hmguP2nG0/Vyv7UhgxIabc/x7Awby:WZa7hmguP2nUOnAwby
- TLSH T113286C43A2E751D8F0BBD17497E65323E932BC490B3469EF12944B312F72AE0A779B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
- Target SoftHub/data/project.xml
- Size 220KB
- SHA256 8913b73cf7aa15f23df46cfca50783c9bbb41cf87377e7269d4f3e61ce97124b
- MD5 c9de4ac412b22c68c419dfbbe1a8be1b
- SHA1 1323abffa01b2ea7da18ffbad141525f130404c6
- SHA512 06ae733160b20b8b393b766ec90814e9c5d961e4b614798b55c74b0807ea1d2ba2911c737ef6e727cf5d850f1e5a4464f28e7720f5a42483d7e26f2dfdc9d925
- SSDEEP 1536:lxYg2YQNENJstLoKN9Y+8XLDLlcHbJ8rU5MvB+hS4oB:lx5c+wGKa3LliKrB
- TLSH T1E524F97358416F9CF333C8076CB95A591F7A00E321904ADA7AFC0C983F67A5F919A279
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SoftHub/data/remote_settings.ini
- Size 20B
- SHA256 78efb7d5f66cce1c0de86a764bc48450b929df61849280b861fb0db2128b2a37
- MD5 6c8b0641d4d019da8f99339de19da7ca
- SHA1 7f658008a0d49d2bfbbeefe09115e71e27938ed2
- SHA512 8dce46f0c961e12950c7a6e0adc7136b9837575d6c20c917425d3fa2ebc6f4b64b77c9300009714007cd47ddb852bc0ae9cbe143ab094c912d3611737342fccf
- MD5 SHA1 SHA512
Score1/10 -
- Target SoftHub/libGLESV2.dll
- Size 1.5MB
- SHA256 9ad0710c53a7da8dd856a8b6a2e0a1830fd0b58d6dd3ff7e0c17dad6c25d62b0
- MD5 af97be94855e1d05efd70a1d7e364e14
- SHA1 5eb9830053285b55d96419bf1dbf5107f4969e4c
- SHA512 fbe398c16491877e43758a4673c52c2d6c400c312cd2920f8531df2d578ee8dd3b95267a03180027cbf638e198d0654b3010a74a1afb6eefc7000d939cb1c5e5
- SSDEEP 24576:9GyEmXb3NBT+BZDQnVjDuBy8aTnilzT8QreNdJU8GAeZRyRWIM:98mr3OaDVXnilcQreNdJU8GOWL
- TLSH T1E5756B21BA49C17ADDAA12F29D3C6F5F510C8AA807B950C7E3C81E6D2D715D32B31B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SoftHub/msvcp120.dll
- Size 437KB
- SHA256 f622711bb30102655d34b5a26eb082e77906648a8af26e64f3a9b8a272ff61a2
- MD5 7394296e0f0c29d01f889be448d21a64
- SHA1 5089c7878d7e62189008dd67f0b0368de45981be
- SHA512 b8677fa1b8cc848ec2336589dc42ccb16f949cc3677243bc165cb90e8b47e45f0fe02b6b921f5c03858c245307974be05ab4758d29911e21d6fc8cf185e06bfe
- SSDEEP 12288:sZ/8wcqw2oe+Z3VrfwfNOOoWhUgiW6QR7t5ss3Ooc8DHkC2e77qEf:E/8wVwHZFTwFOOos3Ooc8DHkC2e77Tf
- TLSH T18B944B237B864CF2D19E53B231C9532557FAFC2541B1F343ABEEE1692FA5282E123611
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SoftHub/msvcr120.dll
- Size 941KB
- SHA256 8e183b2ab71e73c485cda6c21c489f3e0efba4b0a2226961e28f3f7bc276a463
- MD5 1d31b1ebdeec4e021a49e502b54d943a
- SHA1 6bc73c93ed22e3b6cdb4c390b45277d74ebc09dc
- SHA512 f349d1060fd7af8bd1728bcff83df649172637c0a866dcc5c22044862d9c3dfe094dcc39d8ca34854e7017ba4ac9bfcd342e5d587bd79d1b29f34a7c1665032b
- SSDEEP 12288:BBmFyjLAOQaYkxGXPfY7eiWWcpOKnpTVOIxhK765qlRRb6x4pI23IbJTE2:vmFyjLF847eiWWcoGZVOIxh/WxIAIbG2
- TLSH T1C925BE12BA82C0B2C57202B5152DA77219BFB971443588B7BBD98F0E1DB45C0FB67B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SoftHub/opengl32sw.dll
- Size 14.5MB
- SHA256 deda544ec525a575d1197c4c66323d5f65a0250ed3140a40904c91214816f832
- MD5 2855dbe8e0ffac0a4653cf3f7cad0454
- SHA1 00161a16672335b282b44e67fa6487294e745733
- SHA512 bab5820de3c8f7a5b1252410fabb34b21f5dbbfea1672111c449293144c713f8df46fbd7fd87b8f5633212b1b7407a710ad5e330d1ddd62441c3f11e6211d47c
- SSDEEP 393216:G0Rly5ZnSHLe1tvwDTtwJuefdrX780dNYbg4A358TjGNrS1aKbBICZBSJLGWIGCE:LRlyP71tvwDTtwJuefdrX780dNYbg4At
- TLSH T15CE66D21FD418271FEC500B7E5FD7F6A596C8A28032F52E3A39C1C95AE606D32B75287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SoftHub/sdHookpp.64.dll
- Size 3.1MB
- SHA256 ecc31fb4371a842caad6cf1fca700af6f3c6a3fd72a56258a7fd5f46da114519
- MD5 12c366c0719a878dd070c201518ba733
- SHA1 c1c96ca62ad5cfda19f8a07c13986a8e98c0480f
- SHA512 51f62af90a9293ec7cc7535533e6d1db9e8f5c84f58fab67819694c2146d5e78eab2849fab16e0a06a9421012add16f20f84f4c0f050e7a4bc482c7cac12d42a
- SSDEEP 49152:j9+eNy9CB0ExIp5/Go2um+9EbAbMNYGxR:j97HO5/Go2GaffxR
- TLSH T169E50606A9900865D45972B948B6165E3639BCC51B22E3C32AF272373EB26DFDF7530C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess