5977113579fd0c980c6fc11572d716a7f49af97e9733dd5ec788d65d708a7ab0 | Triage™

Login
Reports

Overview

overview

6

Static

static

3

RetainerMe...up.exe

windows10-2004-x64

4

RetainerMe...up.exe

windows11-ltsc_2024-x64

4

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

WebView2Loader.dll

windows10-2004-x64

1

app.exe

windows10-2004-x64

6

app.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
RetainerMeter_1.0.0_x64-setup.exe
Size 12.8MB
Sample260723-phvzaaybqb
SHA256 5977113579fd0c980c6fc11572d716a7f49af97e9733dd5ec788d65d708a7ab0
MD5 f867c6d1546872c78eb829112acdf37f
SHA1 e243b968f21f2a13c0c5f1df3e1b47388a2a1822
SHA512 c7dbff1ce7a29a81755f554a90055cd75ef1efab6aa3d764fff8e0b1ab41cac0d65f1e8282183cd204bf27f17dc9110a99a834aef4ecb7922490afef5f7af42a
SSDEEP 393216:8NQnzIdGK4Ff2VxpXFWUFC7jpIZbVZUEIm:8NQM14FSxRQ9IZbjUEIm
TLSH
T158D63330F6423EFAF973063500C7F1895908AD6C5ACDD66BEB472B985E53A6AD21070F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

RetainerMeter_1.0.0_x64-setup.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

RetainerMeter_1.0.0_x64-setup.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/NSISdl.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/NSISdl.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/nsis_tauri_utils.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/nsis_tauri_utils.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

WebView2Loader.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

app.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

9 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral15

Sample

app.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

defense_evasion discovery trojan

Malware Config

Targets

- Target
  RetainerMeter_1.0.0_x64-setup.exe
- Size 12.8MB
- SHA256 5977113579fd0c980c6fc11572d716a7f49af97e9733dd5ec788d65d708a7ab0
- MD5 f867c6d1546872c78eb829112acdf37f
- SHA1 e243b968f21f2a13c0c5f1df3e1b47388a2a1822
- SHA512 c7dbff1ce7a29a81755f554a90055cd75ef1efab6aa3d764fff8e0b1ab41cac0d65f1e8282183cd204bf27f17dc9110a99a834aef4ecb7922490afef5f7af42a
- SSDEEP 393216:8NQnzIdGK4Ff2VxpXFWUFC7jpIZbVZUEIm:8NQM14FSxRQ9IZbjUEIm
- TLSH
  T158D63330F6423EFAF973063500C7F1895908AD6C5ACDD66BEB472B985E53A6AD21070F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 144KB
- SHA256 cb336504154d74954e816a1ab2786df9005edf2594f249a4ddaf862fc01a7d54
- MD5 1e089276c7c5fc9c4b7516a3af5a105f
- SHA1 ac71682b2451726d88f9ea2d86e02eab5f67c3e3
- SHA512 440b05c6451237c524711f4cb962cba8821302a835290aa032ac6768d2b4899158df3ac6538539861ab577bd8d240bd15e6cbb5ad523186357ab4edd5ac61c06
- SSDEEP 3072:LLs8yHzzmkBP7jJpXNFX0xZKDDDDDDDDzDDzoDDDS5D0Unxzp:LL/y3HBDlpX0KDDDDDDDDzDDzoDDDzUx
- TLSH
  T1C1E35B5CFA0354F1F6EB10F5044EEBFB063835028A26AEF6EF879A42BD72B51181465D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 12KB
- SHA256 e8832ca91b2f909a34fb2d41d9c3c7928c055057c79277eaf5fb0725bcbddaac
- MD5 d5d2c8404b5f616c2a39cf023c0f63f0
- SHA1 4f591c857724898429e215c25005ff38c7837776
- SHA512 de54487f75212be426d12c342b2a5657d08379f2746549b54d3832e8f9ad0bab63b4c8dc91596fc39f313938afc9c1e5b0f0bb735d08c29cb1f41667f99603eb
- SSDEEP 192:8DSmSTusK05zGwXwhJdlX3unYkvQhT38Fb98QJ/a:aqr5zG2wTdhunYkvA38Fb/J/
- TLSH
  T17E42B519FF071576EDB38534409FEBEF456BE920DD2F0E06EF020709BAA66A1581D782
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 29KB
- SHA256 2a7b5d1cab96a5280b0694d0ed54510129626a1ba36a51bd34d546972b7d18b8
- MD5 26c8a92678f1b970ac2a700bb844c309
- SHA1 c821a5980c31b0b35f1505cde836d6769f45e3a3
- SHA512 fba6e371853fd6c27097eb7cce7ffc59d71e4f0a9b5e55de06472d094b70c44a409bd82f39d9a27a814e826ab8468c59e947401a3c3ead1f057cbac236588860
- SSDEEP 384:icchls/EvE2XYBVtQQA+S4n+7g6ZxlU7RfYkvIZMIwwH3Y9pyWediASIo:dmHckOVih+S/Fxq7v4H3YCoASIo
- TLSH
  T10ED22829FB07C8B2D1B655B049DFFB77482A790547225EABEF168D08BC33B139A19107
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 14KB
- SHA256 78f9594721361fd3415b8c5194f9c9b87c580d6a70ddb95f2c4743c61ce68ebe
- MD5 8f45e78d9d02ca8a9f9c274a8bfe2a57
- SHA1 9b3838e1d2d4fbc1c84e1252747e96aa1b223d83
- SHA512 125f1bcf833e0c233ebee552c164d9726769f06e5163467888abea08048fdae60a94b903ef97ba82ca9cf684f3c027d9605d54e9efe794df3e452f9b20e4ca96
- SSDEEP 384:jqWL5JCYXh2OPxv9OIR6oYkvLl5gS+BX9jN:jqXG2cLR9vPgFNjN
- TLSH
  T13C52C50DFB0B54F6D572D934958BFB3F8A9DA415C62B4E06EF160B0CB9922B1680E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/nsis_tauri_utils.dll
- Size 33KB
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
- MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
- SHA1 75197fee3c6a814fe035788d1c34ead39349b860
- SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
- SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
- TLSH
  T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  WebView2Loader.dll
- Size 156KB
- SHA256 8427b1fc58ec707813e5c0a51eb5d69397bb333250a7b891be4d3b123f1e0f1c
- MD5 b7f10b8066ee96c628e09c439b8d0b9b
- SHA1 3a2fe02d9d43100056b7dd1ccd2dfb3f30ad0f55
- SHA512 4ce26a59faadfa0a20e098caf297f3403ac1542706f72879ed7248dee4026a5c7ffc3aa95912d8e3510ac7593082429ce0e83978a5843cfce52fb475cc975333
- SSDEEP 3072:1mJgy7/ph9euiDNQ6A93jJBC9JGv6T/MEtJ6mj4UrqhQ:w/NVZ6A93j//EtJnrX
- TLSH
  T173F35C5BB2E900BBE17BC278C5A34A15E772B8111760AAEF036447791F137D0AE3DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  app.exe
- Size 50.6MB
- SHA256 ae17cc08c7821d4c92c6b43d79949b93ba531464220b37a8fbab3a937a00b30a
- MD5 3d06f6c83b1edaa7fd8b50649a12f565
- SHA1 6c06b0bbccd0fe5cc977c7da94ac9978c892e03e
- SHA512 89f96e7d56670c9013efcc295bcfe1e61ecf9de1469809ee2651089548d45d3e5e6c241f066b477a44bc3d1ad8b717328647d64e9d9ba500acf4834d09e7830c
- SSDEEP 393216:4FpD7rlVSKiaMJLsRg+HhtX0sW9xr8oJv1o4AWIg:4Fl7rlV2aOqUT98M
- TLSH
  T148C78D03F56619ADC99FD63486AF633AF7353C854131AFBB0AB097311E22B919B1D708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral14 behavioral15

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

defense_evasiondiscoverytrojan

behavioral15

defense_evasiondiscoverytrojan

© 2018-2026

Terms | Privacy