Overview
overview
7Static
static
3KOMERSA_0....up.exe
windows10-2004-x64
7KOMERSA_0....up.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3KOMERSA.exe
windows10-2004-x64
6KOMERSA.exe
windows11-ltsc_2024-x64
6binaries/k...oc.exe
windows10-2004-x64
1binaries/k...oc.exe
windows11-ltsc_2024-x64
1uninstall.exe
windows10-2004-x64
7uninstall.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3web-dist/a..._Ag.js
windows10-2004-x64
3web-dist/a..._Ag.js
windows11-ltsc_2024-x64
3web-dist/a...ljo.js
windows10-2004-x64
3web-dist/a...ljo.js
windows11-ltsc_2024-x64
3web-dist/a...uoN.js
windows10-2004-x64
3web-dist/a...uoN.js
windows11-ltsc_2024-x64
3web-dist/a...mVV.js
windows10-2004-x64
3web-dist/a...mVV.js
windows11-ltsc_2024-x64
3General
- Target KOMERSA_0.4.8_x64-setup.exe
- Size 5.7MB
- Sample260722-agy7zsszcs
- SHA256 116937f366d762ddf9155330c67f62b710314b21ad0f6a8f2c6d42b9da8a1947
- MD5 12808a484f147fb5a75abb963c6b9c2f
- SHA1 9c6e99357ace32a6500b974fd771c5954615b289
- SHA512 e2f1c3bfc2675f8b7c57a398f0bde63510022ff1345cb5ab408326263533f262cecc3b8ee206880729290a209478577a7ae6d6d1132c188fbdac47df5497ea8e
- SSDEEP 98304:hVSMHcymu3oxaPBUSayjAajxk9VBJ4FtxDaqFZMvwReXQUiUBjRemd6ub:h5HwL6L19k9vJ+t5LkKefiajReub
- TLSH T10F56336534B28557F320D9B1C2F1AF755E14846BC0EAE6090BAEFCAE7DA10359F08F94
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
KOMERSA_0.4.8_x64-setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
KOMERSA_0.4.8_x64-setup.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
KOMERSA.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
KOMERSA.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
binaries/komersa-server-poc.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
binaries/komersa-server-poc.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
uninstall.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
uninstall.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
web-dist/assets/Achats-Draz8_Ag.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
web-dist/assets/Achats-Draz8_Ag.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
web-dist/assets/AdminConsole-DeDGNljo.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
web-dist/assets/AdminConsole-DeDGNljo.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
web-dist/assets/Alertes-BS8MauoN.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
web-dist/assets/Alertes-BS8MauoN.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
web-dist/assets/Caisse-MGOFBmVV.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
web-dist/assets/Caisse-MGOFBmVV.js
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target KOMERSA_0.4.8_x64-setup.exe
- Size 5.7MB
- SHA256 116937f366d762ddf9155330c67f62b710314b21ad0f6a8f2c6d42b9da8a1947
- MD5 12808a484f147fb5a75abb963c6b9c2f
- SHA1 9c6e99357ace32a6500b974fd771c5954615b289
- SHA512 e2f1c3bfc2675f8b7c57a398f0bde63510022ff1345cb5ab408326263533f262cecc3b8ee206880729290a209478577a7ae6d6d1132c188fbdac47df5497ea8e
- SSDEEP 98304:hVSMHcymu3oxaPBUSayjAajxk9VBJ4FtxDaqFZMvwReXQUiUBjRemd6ub:h5HwL6L19k9vJ+t5LkKefiajReub
- TLSH T10F56336534B28557F320D9B1C2F1AF755E14846BC0EAE6090BAEFCAE7DA10359F08F94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 419485a096bc7d95f872ed1b9b7b5c537231183d710363beee4d235bb79dbe04
- MD5 ee68463fed225c5c98d800bdbd205598
- SHA1 306364af624de3028e2078c4d8c234fa497bd723
- SHA512 b14fb74cb76b8f4e80fdd75b44adac3605883e2dcdb06b870811759d82fa2ec732cd63301f20a2168d7ad74510f62572818f90038f5116fe19c899eba68a5107
- SSDEEP 384:7py18oahashajPmIYInUJggBOZgAHhUKijb:7py18oafmeggBOCAHpij
- TLSH T175622D45AA2084F1DBA2167034D73A7A67F18E752A2449C347F35D4EEE16307B33A986
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 42dd4dda3249a94e32e20f76eaffae784a5475ed00c60ef0197c8a2c1ccd2fb7
- MD5 d070f3275df715bf3708beff2c6c307d
- SHA1 93d3725801e07303e9727c4369e19fd139e69023
- SHA512 fcaf625dac4684dad33d12e3a942b38489ecc90649eee885d823a932e70db63c1edb8614b9fa8904d1710e9b820e82c5a37aeb8403cf21cf1e3692f76438664d
- SSDEEP 96:h8dPIKJhMuhik+CfoEwknt6io8zv+qy5/utta/H3lkCTcaqHCI:yZIKXgk+cx6QYFkAXlncviI
- TLSH T1CCF1C7B6F3D10673F9AB427428232F221B1AF5215765C1AB450316CE7661CE3FD34B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
- MD5 6c3f8c94d0727894d706940a8a980543
- SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
- SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
- SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
- TLSH T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsis_tauri_utils.dll
- Size 29KB
- SHA256 5ef1f010f9a8be4ffe0913616f6c54acf403ee0b83d994821ae4b6716ec1d266
- MD5 c5bd51b72a0de24a183585da36a160c7
- SHA1 f99a50209a345185a84d34d0e5f66d04c75ff52f
- SHA512 1349027b08c7f82e17f572e035f224a46f33f0a410526cf471b22a74b7904b54d1befb5ea7f23c90079605d4663f1207b8c81a45e218801533d48b6602a93dbc
- SSDEEP 768:jnvg/4R1C7063G5I1CabuqcFKpnq0jdhK7W+q:jvu4RM2WCqYMX/
- TLSH T139D23818FDC83EBAD6DF1172281C4A6E559FC8080754CEABD3B15E62D4A63722EE510F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target KOMERSA.exe
- Size 3.5MB
- SHA256 7fb8272bb1f1d0c72fd33c11fd696ca68522b01c7fd63afd6ad39958b3bb4659
- MD5 91dfa198a5d582ccfa6774955f306ccc
- SHA1 ca123c8f77c0bc7aa745ecca0ac6e2de2687dcf6
- SHA512 cae599e4e80ad5b19efe041157336497ebdae500731d5463c5e5d919f358d3b6385ae88450ccdc0023dadc53a7705e5ceb56b73667979f548f98e9ee5f3ad913
- SSDEEP 49152:0QtwKcaUwaaAcIEsjzFBHmjsJtMhCnXzXby+Gb5aaKRcPJcptrPd3Xb:1wKc9RtrBWztPqtDdb
- TLSH T1B30629627B5E95A9C15BC07482478A765A3130CB0F36A9FF408856782FBEEF51F38358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
- Target binaries/komersa-server-poc.exe
- Size 14.6MB
- SHA256 4296308620746bb8c5d30ddc73dc6f95262745646a7724a8364832e0edf2ba14
- MD5 4c4692ea855f1f5846f8984990171d77
- SHA1 e7bc6f1636d4258484897931e919885954c8c8fb
- SHA512 ad48aa8b15557838e27fff8dbc0846f5bd5345edb12fa1cd4a73b4351316f3b77796d22345af3a253ded390f63074b00e204e05d929a7886c31ff282558d6941
- SSDEEP 98304:IAHaC3FxJVHR7ecVdmDKXAbZSI0KVWOakap+Vh0XBePFefUWtdD2OP:IA6eJVHzWZSIhsCkdD3
- TLSH T122F6F7117A5A98ACD19AC8B4834B8A734E3134CF1B35B9FF44D491793F69AF46E38318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target uninstall.exe
- Size 75KB
- SHA256 a6ae6da871d9ea6cd355b9a47b70df7e31d8d364635bd75b9a43651899be178e
- MD5 61e82f2a72ff272f6d04cc3d6e05d249
- SHA1 7946d2acc6775f86a6a971065de5205951c1634e
- SHA512 9460ab2b3aa3bda04f4e9cb5f2d005fb7596b21a3e3aae787789bc21f646c5c4298db5a515d8c9b155778100547564e8ab84024ff3282433db3e43925ad9c31e
- SSDEEP 1536:XmsAYBdTU9fEAIS2PEtuugdLeAyNxmFk4Tpp9VzTjT4Ojr:WfY/TU9fE9PEtuuceAHFk4DPzTn4O
- TLSH T1FD73CF04B7D0C067E9B606314E7A6B6B6FF1E51214A89B172350AF5EFE22341CE1E763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 18e8b40ba22c7a1687bd16e8d585380bc2773fff5002d7d67e9485fcc0c51026
- MD5 68b287f4067ba013e34a1339afdb1ea8
- SHA1 45ad585b3cc8e5a6af7b68f5d8269c97992130b3
- SHA512 06c38bbb07fb55256f3cdc24e77b3c8f3214f25bfd140b521a39d167113bf307a7e8d24e445d510bc5e4e41d33c9173bb14e3f2a38bc29a0e3d08c1f0dca4bdb
- SSDEEP 48:S46+/nTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mFofjLl:zFuPbOBtWZBV8jAWiAJCdv2Cm0L
- TLSH T16BC19474B3C248B9C491513768AB33D36612EE746784500F9F6711AA38209F7AD3EBC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsis_tauri_utils.dll
- Size 29KB
- SHA256 5ef1f010f9a8be4ffe0913616f6c54acf403ee0b83d994821ae4b6716ec1d266
- MD5 c5bd51b72a0de24a183585da36a160c7
- SHA1 f99a50209a345185a84d34d0e5f66d04c75ff52f
- SHA512 1349027b08c7f82e17f572e035f224a46f33f0a410526cf471b22a74b7904b54d1befb5ea7f23c90079605d4663f1207b8c81a45e218801533d48b6602a93dbc
- SSDEEP 768:jnvg/4R1C7063G5I1CabuqcFKpnq0jdhK7W+q:jvu4RM2WCqYMX/
- TLSH T139D23818FDC83EBAD6DF1172281C4A6E559FC8080754CEABD3B15E62D4A63722EE510F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target web-dist/assets/Achats-Draz8_Ag.js
- Size 18KB
- SHA256 5f305b6393d6cffeeabd5dcbd897fe9e812fac53c6169abae9d36205690e5f2b
- MD5 d9279bc3942a68e90d7555131f12f2c2
- SHA1 891db71efef20475aca8ab7acb85d3ff878094cc
- SHA512 843ed85af4c610587c643eca8765927619c1933d0193c355c84b213c5d9379e183e6ee84cf382cd5fd68ab78882615e7c9fdbe0be26cf1c6ba98cd60a3e45d62
- SSDEEP 384:x1t0IV8xceNqZMJsBWTSyc3b0LvYyL3E2cEMEp388/Jiv4id+:x1qG858Zdycr0LvPUYXpTJi/d+
- TLSH T1F2823F04F030EBEFFE7A58956A6FA018700B0F5CD62904B1D27E346647785D67A1BBC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target web-dist/assets/AdminConsole-DeDGNljo.js
- Size 3KB
- SHA256 96247705c876990fd6a921f15f23c19e14597e723a3839eb3362370712040dff
- MD5 ee696a63d5f69a78849bbb24eaf928cc
- SHA1 3eaff1afef66f788ee4e2213a814eab95b9d9803
- SHA512 e4616d514715a22d4d4a0860537bce0aaf91fa95ffdfe3eedd2d08a3f82a1cc1147f19d1ad61a09996f5815127a07d46465a6efdc0fb7254f0d9c4ef31947c76
- TLSH T1E461E156981067D5EE774499BF9AE058B05A0D1CA37D02E1A37E453603B81F37B2B3C6
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target web-dist/assets/Alertes-BS8MauoN.js
- Size 9KB
- SHA256 2f4b9aca3855a80127eca1263c84dc7fe5197739ac56ae091132108535d67904
- MD5 b330acb13315f39de62932ab7fc95466
- SHA1 4ef46de15d055130d1e56e1456eadfad6018e5d1
- SHA512 3a87191bf47efcb3660a42159dc9d283f337ccdfe19c79186b10047c712ba5b778997cd6c1b32de6ff3e75106849029f613deceb9187231d782b4dfb49076dcd
- SSDEEP 192:u09zkf6eOXzsLoGZjkSUB81YqJdivDqte8HSiJGAL:uuzky/DsLowoSUa13JjHSwGY
- TLSH T1EC226112E510B7A9FE3A5AC4BB5FD00CB01B1E5CE71A01B1A37D186406B86E3762F7D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target web-dist/assets/Caisse-MGOFBmVV.js
- Size 24KB
- SHA256 781a716ac40e61d3542708a78aeceda051226cee05e89d5357d8e006b5f21b05
- MD5 2ee144e5bf36ae9ab3fbf3225e2c77cf
- SHA1 db9b6deb491eab9951ed02b217fccc5bef7728c6
- SHA512 88d4f3cc2c6d9550c07a22b08e1eee2f717936a0101bc69c1c4f491bc7a9b63002174b2381b88e9a5fac027e9a77a469bda95feea3af1ee2e386d38ceefbc724
- SSDEEP 384:h7GMP5hPPx86BLVsGn/UxIrJCamIm/JE9z:h7j5hPPx8Ozn/UxeJrmIm/Jm
- TLSH T11BB21215F110EBEEFE365A956BAF900C700B0E58D71D0561A3BE346107B46E63A1BBCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10