af89bdcd0cfded591f9ac57ce7e6e5641144ad2c2d853f793aa0752e831bf4a7

Resubmissions

04/08/2026, 19:20

260804-x14yxaff777

23/07/2026, 14:06

260723-ree5rsdr217

Sharing

Copy URL Twitter E-mail

General

Target
nouveauxconcepts-OnlineBackup_o_backup_v8.7.0.224_oid20bff54a-6808-465b-a3d6-c9f1e6532237_bidnhR8OaZBA0yWdfWi1gv!qg.exe
Size 25.0MB
Sample260723-ree5rsdr21
SHA256 af89bdcd0cfded591f9ac57ce7e6e5641144ad2c2d853f793aa0752e831bf4a7
MD5 85e2c3ad0004658fe445c24efb8683aa
SHA1 18ddb40a4643e18e04a966fe0d2e3b797230b614
SHA512 29ad0075b133781052b33688d44ddcaa6a71b634554e776dc6fdb219957422c180361ce41ba048e0c65a8bbef11b6796e24156663ec7cda723e3a81fd46c3c1f
SSDEEP 786432:irjDdeSUFlmpzKNkbofZP2eq6vVLkGkPYM6znBF0pa:ir/dxUFlmp83QeoZYvznBFt
TLSH
T183472373D85A00FAE47D17F624DC9FB2088C9C1F6CC209C546EC6291C287ABA67D3679
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  nouveauxconcepts-OnlineBackup_o_backup_v8.7.0.224_oid20bff54a-6808-465b-a3d6-c9f1e6532237_bidnhR8OaZBA0yWdfWi1gv!qg.exe
- Size 25.0MB
- SHA256 af89bdcd0cfded591f9ac57ce7e6e5641144ad2c2d853f793aa0752e831bf4a7
- MD5 85e2c3ad0004658fe445c24efb8683aa
- SHA1 18ddb40a4643e18e04a966fe0d2e3b797230b614
- SHA512 29ad0075b133781052b33688d44ddcaa6a71b634554e776dc6fdb219957422c180361ce41ba048e0c65a8bbef11b6796e24156663ec7cda723e3a81fd46c3c1f
- SSDEEP 786432:irjDdeSUFlmpzKNkbofZP2eq6vVLkGkPYM6znBF0pa:ir/dxUFlmp83QeoZYvznBFt
- TLSH
  T183472373D85A00FAE47D17F624DC9FB2088C9C1F6CC209C546EC6291C287ABA67D3679
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution spyware trojan
- Modifies file permissions
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/INetC.dll
- Size 21KB
- SHA256 5520208a33e6409c129b4ea1270771f741d95afe5b048c2a1e6a2cc2ad829934
- MD5 92ec4dd8c0ddd8c4305ae1684ab65fb0
- SHA1 d850013d582a62e502942f0dd282cc0c29c4310e
- SHA512 581351aef694f2489e1a0977ebca55c4d7268ca167127cefb217ed0d2098136c7eb433058469449f75be82b8e5d484c9e7b6cf0b32535063709272d7810ec651
- SSDEEP 384:VpOSdCjDyyvBwRlX+ODbswYM2s74NS0v0Ac9khYLMkIX0+Gzyekx:rdCjW/lX1PfYM2X1
- TLSH
  T123A23B5253605FFEE3D71938B8B7773745EAE76464178A8F06732E8918B2352B930382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 8f24c6cf0b06d18f3c07e7bfca4e92afce71834663746cfaa9ddf52a25d5c586
- MD5 d753362649aecd60ff434adf171a4e7f
- SHA1 3b752ad064e06e21822c8958ae22e9a6bb8cf3d0
- SHA512 41bf41add275867553fa3bd8835cd7e2a2a362a2d5670ccbfad23700448bad9fe0f577fb6ee9d4eb81dfc10d463b325b8a873fe5912eb580936d4ad96587aa6d
- SSDEEP 192:3Gs+dH4+oQOTgDbzuNfrigyULWsXXZF/01JJijnK72dwF7dBEnbok:3GvdH4qMebzPY2Vijn+BEnbo
- TLSH
  T1F0623B51638888F3DBD6013EB4523707AB595126B4925DE2CB271FCA6D3B18E3EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
- MD5 56a321bd011112ec5d8a32b2f6fd3231
- SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
- SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
- SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
- TLSH
  T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/UAC.dll
- Size 17KB
- SHA256 e58884695378cf02715373928bb8ade270baf03144369463f505c3b3808cbc42
- MD5 88ad3fd90fc52ac3ee0441a38400a384
- SHA1 08bc9e1f5951b54126b5c3c769e3eaed42f3d10b
- SHA512 359496f571e6fa2ec4c5ab5bd1d35d1330586f624228713ae55c65a69e07d8623022ef54337c22c3aab558a9b74d9977c8436f5fea4194899d9ef3ffd74e7dbb
- SSDEEP 384:59TzaeW+WyB8c7LX+OGkrwWvVrkUiEMAWm5nskAvXkq:5ZaB+W62Mr5vGUiEum5sk
- TLSH
  T16F724B25ABA083FFC5500571A6E1672217FA98301979586F8E73EEC62FB59436C3E703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/nsArray.dll
- Size 12KB
- SHA256 81745087f193b6fa131189f4b3ee9caa93e9692e408d3955fbcb9a4ec8516e2f
- MD5 0917ee492308b691326e6581e8c793c9
- SHA1 ff689c8051ffca7657461ac828bc46e303ab8e59
- SHA512 2a4ae4b93b0eac113a0e65f459798466120f1af4605a82a11f9022d790fe0b4f7d368b312f8a073b1dcfe8760e529ea56a5b5d4289321dc9f2fc8a22691b42b5
- SSDEEP 192:L+QMtjhIz23Tv7QpAXXcxwtXexpnGOO81h2xXP:SQ6nDv70AXXcWtXexpnGIhW
- TLSH
  T1C642090A1F6082F5F8F201BA557A2B355A1D7E19971E1EEB07A314142E209C73F39BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 3b15c6e4ca42036d7424f93ea0806a2d35220d65faaf2bd2479a54258f631b55
- MD5 428c3a07fba184367a5085e46e4a790b
- SHA1 f2de6cd4ec99ab784d18914a21de9d919a450089
- SHA512 b34e1266e949d7cc5cdb7a809c3ca42652a1bb1ec72d83218604cb01b3118bbb42bfcaebc6134c4e6eb43fb566539414a49c1a0cd23a6c84da7c1c4b56ba2ab6
- SSDEEP 96:L7GUeYNrwgcrEzyKwZxW4JxNABWweYkZleOe4I9d0qqyVgNr32E:XGgrwgcrEzylQBHkZwd0qJVgNy
- TLSH
  T1E1D1E93D76C33DB3C54ACA753C65292F0FB8D8261B540211AB5716C279D5AE3FE29382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $PLUGINSDIR/nsJSON.dll
- Size 21KB
- SHA256 15b527ac5d224b2b684ef07fecd6d71d61f05955e3a2bd3dd1de6378e927b3f8
- MD5 b7878c46c342f851d35fb2dbc898a593
- SHA1 dd0ebd231edcfdc0a561cbda733c58e22ce3156f
- SHA512 d7f179d33695b62da5fc0643fac461129975e78a8694c02e8c8d74471d0ee4061b92f1010401209605146861b259d34079583b2080c8ba69382c2122d9b969c2
- SSDEEP 384:QYUEEoUMA9RoB+cq4OJTv/ldPWUn2kaVC+DEbXG989qX6rMIZy9RrT:PeRoBXHoTXld3n2XubXf9+EMNvrT
- TLSH
  T152A25B566170A8F1F92618FAB9D26E237F7DF90834745897CB23056D2A91863BF3C312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/processwork.dll
- Size 231KB
- SHA256 27329ea7002d9ce81c8e28e97a5c761922097b33cedeada4db30d2b9d505007c
- MD5 0a4fa7a9ba969a805eb0603c7cfe3378
- SHA1 0f018a8d5b42c6ce8bf34b4a6422861c327af88c
- SHA512 e13e29712457d5e6351bfd69cba6320795d8b2fd1a047923814f8699f7188ec730ec7f0d946fdff66c8b430fef011415ed045b6ea56e4cc0b1d010171ab88178
- SSDEEP 3072:n/93Fm9hfGIGjk1qc55CDoGowH6Fb/CcXwuCoty1IKYOlIa+zUk9sfqQAPfujRzS:/94yj9c55CDorNqot43ndqQpzjIKW
- TLSH
  T1F2343B36E1C0CC76D5672B7CDC49E3D8556EBA302E2898866BE91E8C9B3D391351C287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $TEMP/$R0
- Size 47KB
- SHA256 b3076560d5321b9d8d99221194376241e5277957c8eb4b0eba689b616e803ac7
- MD5 4a545dc7605e6bdf8e107173e5eba69c
- SHA1 cf45cf7594e9970b4ffeda48ac728556e3d232cc
- SHA512 3be7af94fd0b20ddfeedf3001991280e2da7a4c48763e6dc55ac8f3461ed4a200773cdb6f3b6cee47abd49680acd9377ddb6d539e2fa604da0b9df390de11fa5
- SSDEEP 768:/T8ZI9YIHMfndz2dgKCsUoEBLhpX8Mmg2EIEMmk2Es:/TEeYIHMFydgKCsSLhpX8Mmg3Mmk+
- TLSH
  T1DA238D0277E84546DEEE4FB974F449390A71FB836D61C5CE16ACC0894E62BC16B603BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  $TEMP/$_65_
- Size 47KB
- SHA256 b3076560d5321b9d8d99221194376241e5277957c8eb4b0eba689b616e803ac7
- MD5 4a545dc7605e6bdf8e107173e5eba69c
- SHA1 cf45cf7594e9970b4ffeda48ac728556e3d232cc
- SHA512 3be7af94fd0b20ddfeedf3001991280e2da7a4c48763e6dc55ac8f3461ed4a200773cdb6f3b6cee47abd49680acd9377ddb6d539e2fa604da0b9df390de11fa5
- SSDEEP 768:/T8ZI9YIHMfndz2dgKCsUoEBLhpX8Mmg2EIEMmk2Es:/TEeYIHMFydgKCsSLhpX8Mmg3Mmk+
- TLSH
  T1DA238D0277E84546DEEE4FB974F449390A71FB836D61C5CE16ACC0894E62BC16B603BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  $_34_
- Size 2.6MB
- SHA256 8a59f5b20108c400bc0016b4f06c961d97d5cf84d9a190e0cfdf74fa72ed7a7e
- MD5 98545603be42e1e31bef5f85b394cee6
- SHA1 aacb2066322581a4efc48db1c3bc8ac1af4fb147
- SHA512 2e66c937023bc46898d8db12fddb095a9b70ce96659a25357f985e6852191fd368a95e5b9f85346231f703d106daf3d8cff55ed98b22afa26ea734e3383fd0bc
- SSDEEP 49152:byq5jMan3urQLgwxjwwH+wiQYp+hPqlpZwTiqSOM0:WWjMa+2gWKt9CPyZfROM0
- TLSH
  T18CC5BE973F41D13DF4B7E5712A88619027933C6A9767641826E2FC8E85F1BC20ECF626
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  CBBackupPlan.exe
- Size 1.1MB
- SHA256 807bcec21064817a394e129940c2d575c388465aae8fbe305e178b9c65c51625
- MD5 a5396dc11cfc972c450f781078611f12
- SHA1 f71ffa5970cc6bb03220f8cfdb0301ae370a476f
- SHA512 1c47d647adac99b0601ba26fbe83181a965072c15f218a2882c1b2a0c1c570b199eeae2628ad2a803972430de8a0e6ad7786fa027259a8d722ae3438f7649112
- SSDEEP 12288:TAwe9g5Oeljrts9c3Fmg1QkPxa5LF9kgHCwfB4MLREdAq3+WQjAcKMU:TAIl3tFkg1QNkg0IqwjAPMU
- TLSH
  T1A4356B5B7F248929D4BF98706112500017F67C6E42EA725BA6E1FED906F23C21E9F2D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  CBFS6Net.dll
- Size 336KB
- SHA256 2ad750b27fdb15dd5ccd5a08d2e13d7ed844089f00482850cc6edfaf4c2726bb
- MD5 1fc9aee5d9e43546fb263d0aea020822
- SHA1 8cd4383cd578fbeda464166c14e36bc597d58081
- SHA512 402953480a999b73c4763f4b9f1ee745ab57c03ad1cf41ccf893da4dc67399f067d51ee6c2088702b59bd8846811bc8a1a3b0868e9b646814e3fd40c2d31f107
- SSDEEP 6144:OnO5KGJCY2iOEwuCeHPOLQDACVw7l8dWZNTDBVA0G8kpCe:OOQU2i8uCsWLRewxRZNTTA0GFC
- TLSH
  T1B4745B59AB200199EAAFC27C9473D603A673B1D9635B53CF4138CAA41F277C9B1793C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Cloud.AzureClient.dll
- Size 352KB
- SHA256 270423bbd4749f70b5dc7cb34d9b0844954b4fa429dada7c20e53741c090364c
- MD5 e3b53b7dce433ce512ec6db0ce28a337
- SHA1 6a162429db6a101ea6b743e24a31a747ca9090fa
- SHA512 75505b10e61c0be5810fc5daa6d8d0f41bf2cf5b10ee32b583872398b579c80ed3b61cd59d21b316263fca961a09c7f4df6efec48bec1f328edbfef03cbf8cba
- SSDEEP 6144:/KnRLGA76xxoDJ5zsJr2tOMLSVrv0OKTn/c8FbrEN13Wr2xarFZX:/cQToD/0a+Bv0OMHb6pxM
- TLSH
  T170745A015F70861ED7AFCAF89122055C62F04D0B676AF79A6AC17CE6DC8B7C6AC051E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Cloud.Backup.DiskImage.BootImage.dll
- Size 282KB
- SHA256 f5964d521c6a708380befdee268d4f0c397bea07b45b32ee58496f1c3ffbed29
- MD5 356a42ae50e3a0f61cbf2eced9659bf6
- SHA1 5b41d68cbb359dd6701e6eb602b35a45ca1a34f8
- SHA512 225eb802cd972cb5f3f13faf4691014ca6506faf33c594a64a616ddece92d5bc469a81f41bd416a4ccb6f2695218b93021f642404cca0c9214cacf0f22539da9
- SSDEEP 3072:Bmzyy3bnmkeVhaUweWzjxqgIpSF5MKbnw506cxVTGxmB1KddJDAebh1bV3zw11Ih:Bpy3bnr57YyhihLKsu6P7V
- TLSH
  T15954549E472CCAB6C6B67471EB197CA4E21B878BA0C2EE08F1F86416D1B3DDD4314725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Modifies file permissions

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32