1d1dde41001a504f63520ca492ade5d3ad9464a0297d72ffbd3b1e36fea0740f

Resubmissions

24/07/2026, 22:52

260724-2ttltagn7v7

24/07/2026, 22:47

260724-2qjx7sef267

Sharing

Copy URL Twitter E-mail

General

Target
Marin-Kitagawa_415265.exe
Size 2.0MB
Sample260724-2ttltagn7v
SHA256 1d1dde41001a504f63520ca492ade5d3ad9464a0297d72ffbd3b1e36fea0740f
MD5 3666056b4face17e1d594163ba31b958
SHA1 1834d9dea2c4955eb787223a0990e51537d08cdc
SHA512 11c69b4517c03f5d45723b6f3f4a49d3c90f8cd287554822499c4e1b6a1d47910b0859a84f85a33e4f832c7413df657ecf4862c33fc47afe67e4768fea8c497b
SSDEEP 49152:OPWmjC10OuA1+QVFyP9Ih6uqE1NBOPSD6fxHDas31R/Gqgfn5:OPWmOqa+QSVeHabHDxsf5
TLSH
T140A53382A730E221CD76A0F4326F049DFEEDA2676138852762AF1FED0ADCB04D16D575
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  Marin-Kitagawa_415265.exe
- Size 2.0MB
- SHA256 1d1dde41001a504f63520ca492ade5d3ad9464a0297d72ffbd3b1e36fea0740f
- MD5 3666056b4face17e1d594163ba31b958
- SHA1 1834d9dea2c4955eb787223a0990e51537d08cdc
- SHA512 11c69b4517c03f5d45723b6f3f4a49d3c90f8cd287554822499c4e1b6a1d47910b0859a84f85a33e4f832c7413df657ecf4862c33fc47afe67e4768fea8c497b
- SSDEEP 49152:OPWmjC10OuA1+QVFyP9Ih6uqE1NBOPSD6fxHDas31R/Gqgfn5:OPWmOqa+QSVeHabHDxsf5
- TLSH
  T140A53382A730E221CD76A0F4326F049DFEEDA2676138852762AF1FED0ADCB04D16D575
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/INetC.dll
- Size 108KB
- SHA256 2470766193502c264031647c100531f63160d593edd42e744ef31d58e73143a2
- MD5 75571af456105cad59eaba4675ced150
- SHA1 558e82810fa3f9c202494de1a194192a1269e16e
- SHA512 24d05b29ec27c507b18332094d8edabfa3b3b0fce88ab2a4bb966712e0e546775422b815fe2238186bfcbaf28aa3c93657fcf12f312a692551fb1db5d874f898
- SSDEEP 3072:7ylMn+AFkronaA3yv2CiQE1yV11geHMrTHEt8mwqTDWRxD:7yiZna082CiQG81KODch
- TLSH
  T112B3494072D4C471EAFE5A3D183497A18B3F7950DFA09DEB234416AE5E346C0EE35B2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 84KB
- SHA256 082fbdf8aac39ab6070d916e1d6e48ab6e0da99533c4efd7833b01210b725dac
- MD5 343e7d523cc2b994f43ae9f19b4e74b6
- SHA1 5bff3940a4cf4d06d2129bb698d68ed1a8fc3f55
- SHA512 e5dd04b96383d15126e428381c90addc62b5786d7199786c06579b1ee8ae598050f9a1d6b8f74521dbc35a4260c9bff3c995d441dd4e8159365765d08e97d80e
- SSDEEP 1536:Ejk0Xjm3YCD08sL3Vz//r1cOsUNg8QOPCbw58go+b3sW7fcdwm5bA2ZQMINM:cXC3A8c3F1cy3QOPCRv+YwMbA2ZQMINM
- TLSH
  T13B834A00B5D1C079D9BE19361864DA719B3DBD10DFE0DDEB3B9906AA0E342D1EE31A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH
  T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/nsisunz.dll
- Size 131KB
- SHA256 7081f3109e1ff77ac37775d576024d76db5ad8f6c1d321d08980946630971f54
- MD5 5b7bc3d98b0748f5af7acad1794f4dd0
- SHA1 f6cd4f314fbaa0c6c94fec52908f5c049e62313a
- SHA512 aa5933d9602a3d91b899df5a09260e9118f8baf21a03e422933ebb466edbef879e4da4e662ab59ab36479f7a56347072952f72b9f4cb2368f32df3deb7ed8567
- SSDEEP 3072:5j+fr/c1c73RLAHZ9GKOjj2OhPxzt6Z2q2RxLyfdFAlzwguxnKT5dvaH:5j+fr/R7h6ZtEPxztY2qk1CQd8nKTTvu
- TLSH
  T14DD37D4175C081B1D9BE157C58749B754B3FB890CFA0AEEB93A805BA8E705C0DF35B2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  Addins/ClipVaultUtil.dll
- Size 51KB
- SHA256 6103ccafcb342534bc21a5c5d02c466571114ecd904b779ebfc8b204a5c61016
- MD5 c043b1499766f722f5a05c7bfc19f055
- SHA1 5f8ea0a6cee2a3f056f81ada1a8040c0c9fdc13f
- SHA512 076c9e28992174c07a5ab6fce08b10ff63067bbb14e797035bf0ae2713d1bd1876e607cd70c6ace53afb464bbaa38670feed5e24717095af1633b377e7bc9ef4
- SSDEEP 1536:NkTC38PKIVOsrSQkUb53dsf6Ms3kIl+1Am:d38PKIV3SQ/53W6l3kIl+1Am
- TLSH
  T1B033F89EF6A90494E1B7C179CD6B5F41D672F0A2872183DF07B48B2D1E23BE06A34B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  ClipVault.exe
- Size 4.8MB
- SHA256 4f9987fb674599a338ff43807628d1f37c7d55196e5697e4e88db5fc38e9ef35
- MD5 57e74bf641ea6e16d3ebfc619d7279be
- SHA1 39b8ecf40b942bfe4ead8d0ef31ad4235f6cb2df
- SHA512 0cdce76ea0d26b1cb59bcff75acc0f3691b41722e31883be5aa68cbb9cedeba1332975b15d5bc3faba8be6709cff34a0ab3f1a5290e00c85e6b10b51d81ba3a5
- SSDEEP 49152:sYT4uFtvxVbQQK8dyBUbBNIAe4oBYe0TFYXkHpSOkOi7BHx/yrT835m+dYzT0YZ/:RXdyeHLg+T83k+G0d8EreWCX
- TLSH
  T153367D56769901E8E07FC17DCBA78907D6B27C105320DBFF0294A69A0F37AD24D3AB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  ICU_Loader.dll
- Size 21KB
- SHA256 d2e75ce5999b3dce34d8baee75b6407aa63eb13eaa9e093a03e95543b81a2db8
- MD5 9c84b200cb30b6817946ba7c8e98b22d
- SHA1 fbf1bb560354ac327e8d87f64dde526361818a33
- SHA512 83732422407e0b2d78964ab91b96cdfa0e3803d953cd6acf849364493aa4c419800e16cccdcc7e9a4908192da5e067a449b2742f9e44ff239d7ff5781475c1b2
- SSDEEP 384:kV3dMvtKIae5DM3fG1+Fh5mvlkT+FHV9OxytqoRx1U:W3dPNvIWSGq9O8QoRx1
- TLSH
  T1DAA23A48F3A818A9E06BD538C8A75F1AD6B1F4144B60CFCF53710BAE0E227D0AE35752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  focus.dll
- Size 15KB
- SHA256 f867ba42ce138feb8678b77dabfd718f5a5242fe72040258d277c3e50d3fe1b6
- MD5 8647d611fd928a10e74cc1cbad73539b
- SHA1 b7d10d6aafb9463fc54e15488bc3fd807bf90fec
- SHA512 a1d08910d4a361a0697cf2c8883a4a236b16b9c1088e45489f6e6169af06309749ad80ded813a64900471fcfd63d606371df3521fcc2867bbcfb702ae203398c
- SSDEEP 192:cokZSRnf3G4rKkRUNOFEfzAFten7yRgNun+4lrvMo:cRZSlPgNjAqXun+4lrvMo
- TLSH
  T1E9621786F78805AAE9B78179C8775F05A63AB520177093DF077153590CF23C4BA3ABAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  libpng16.dll
- Size 232KB
- SHA256 a332a02345a8c43b918f4087f61a62ddbec5028e2f272871d8d3e6f6f95f257e
- MD5 cfb2e8cf07facb23cf825f1b0949f0b3
- SHA1 fbe37a7a81865d10c21a8a250e4cd334bdc2ff77
- SHA512 dca762da0299fff7836d73aa0635e30c080fd99797fa45204195b49fb5d309f1f443f43e545d03c1a04cbf8e7a8df954d5df05dc8c61c7714ea9b82557e33e1a
- SSDEEP 6144:9Zu2UqmCuONI4qisqYFm8woqiAx98I9TBpcedsYXW:/Snvdm8wvjjh9TDc
- TLSH
  T1B5348C8BB2A40D75D9E7C0798587911BD3B17C2403A0CBEF47D09A792703AE47E363A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22