328c441f58bf9f46cc9a3d7420b5221e1c42ead0347d322ec2bb2be9bd879348

Resubmissions

27/07/2026, 13:09

260727-qdv9xsshpd6

27/07/2026, 13:02

260727-p98z8afk8s6

27/07/2026, 12:57

260727-p647vsba983

27/07/2026, 12:40

260727-pv75daeq916

Sharing

Copy URL Twitter E-mail

General

Target
MeowClient.zip
Size 78.2MB
Sample260727-pv75daeq91
SHA256 328c441f58bf9f46cc9a3d7420b5221e1c42ead0347d322ec2bb2be9bd879348
MD5 a3f1af16ad5411f3ce9795f9e95f02c4
SHA1 8f7f2f51f06556cfffd3f79e43d5d0ba9b9a0e9e
SHA512 287d13d8db3f56917c1b427df783a965028178309d0c26a1e617775fd2b0a79af10878f56515b8adae91f95332d14f1518db55f21e389c1d487cbf03edf36ae8
SSDEEP 1572864:bGTY6y9aXytGVpz0aQWx2Lsml8OMEdu4ntO55aYDWX+SG1E:bGTYN0i4zAaCqZEg6YiOE
TLSH
T1690833AED7021804ED3F5537C52BE214699EABBC1C2754042E448F5DBC4B7C2AF6E78A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution

Malware Config

Targets

- Target
  MeowClient/alpha/DDNet-Server.exe
- Size 2.2MB
- SHA256 9a73195597d82873c8abc03d795d385d18cd0169ababf5515d83311fc277f107
- MD5 2503cb4aea644ca7de0f1ba339c07846
- SHA1 a6729dbba85e913f779b65d8ba5a0ff1166a482b
- SHA512 dac75e0c6320cd18ad674149da58367479f4d5b0747b5dbabf766ae97aca0061dbda6be52c78433ac44b2dc8791ff6867e8a204a9305ba2539099c4b409156cc
- SSDEEP 49152:e6yKbb+VojGwpd1EM3PjJslzdyx6lLUYN+DuQ9rhE4oOdapcRYv6oDtg:QKbb+Vgd/oDtg
- TLSH
  T19BA57B023BF061ADC93EC078C5839212D3707D6D8324BAF7AD990A571F2B6E6663D356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  MeowClient/alpha/DDNet.exe
- Size 38.4MB
- SHA256 55af9bd144b7b09388822447141bd2522cdd1eb5e7faeda3522c7233a6949717
- MD5 0059c09ab31a409dcf02132dcdd90eb0
- SHA1 3e686f09075b22465aabe9740f0146e19762f71d
- SHA512 15f9e5e378b7731c6c1f0ad33dd0c43347940eb0a9c95b07402ae2ba80997b93995048328be6cad1355a5ac2b4ece4fafa7a8d5cf7214dd3f492b586162806f5
- SSDEEP 786432:qbXLtsxfNw5SO9mYLXoef922iWXz++hYkNu74Jur:qPWw5SO9FP82iGtYv74Jur
- TLSH
  T1FF97E046F2E111EDD57BC07882569A17FBB178BD0320ABEB16D196652F37BD06A3E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral3 behavioral4
- Target
  MeowClient/alpha/SDL2.dll
- Size 2.2MB
- SHA256 d0ac4e209a78ad56d53af2df40a51ae9e4043704efbed5b46bf75a57ec92ab1b
- MD5 9f2509c44faa79c87382855d4a94966b
- SHA1 4474c7d2923dd0a535c01612c6bd2c0e1f1faef3
- SHA512 fb5f407af1020109acdf693f5391cdf7905a99d0d09628bf066f459caa36cd2e296adb623a60950191e4e3395501c332b672ecc219bdc02415013dba42d6ccb3
- SSDEEP 49152:5L6mcGjDqleTVMEGol1sEQf21L1gz6vr//uw0508uLMDpYwvuIBxV:F6QHpQO1L1jvrXuw0S8DpD2IBxV
- TLSH
  T1E3B57E5FF2A365ECC717C031836BE772A93178180254ADBB26949B716E32F904B5AF34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  MeowClient/alpha/data/tclient/builtinscripts/sayemoticon.chai
- Size 188B
- SHA256 cf491568384e78778b21dd882798a84e7556e40b2bf6323c8364242fd97ecc2e
- MD5 350790b867b3fb4fae0ff38408519484
- SHA1 32dbbddf682e9061f0a35a59efc68ceb0ef15bd4
- SHA512 cdec1138ea9c9c943e2b74458e60b7292007d59de1261d85480c9086c421b9adc15b3f44526c33bc41f5a291a1ff133f2d9437c123ca6a7a8bb3931ec99d87ac
- TLSH
  T128C013211A50576C97C0DDC169C95C0FD4B735B63F3D4C6C531DC56065FD2E475640B0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  MeowClient/alpha/data/wordlist.txt
- Size 14KB
- SHA256 bded01753b3137270eaec22800c43a269aa121c5bf254b8f0ae487c8ac4b9cdb
- MD5 c5ca8030f935d6ee878fd41dd6df33f3
- SHA1 78550e86e9eaa25d85fee8e521694f398918fb67
- SHA512 3a1ec234d16254822379afc56a07d08c549b905af07de3b999bee460fe58a3a3ac00651a740bbdae88c0dcc78aa9d616223a20cfd0d9cfe6ffbf6bdd678bf02a
- SSDEEP 384:URFKGC1Mv79nJwX8YqAgKN4kmcDjnZAOflGOF:UO/4FDukcDjn6WMOF
- TLSH
  T1506262986886809258ACF7B0D11B2D9DF12FA76128131D2F8D3ABB5432177BEFF54482
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral10 behavioral9
- Target
  MeowClient/alpha/discord_game_sdk.dll
- Size 3.3MB
- SHA256 a6b6d7df00a58dc50248d91048578d0fe52182286b487ef89a961fd10467dbd1
- MD5 4402cd4891c256ee40046c6092afdcbf
- SHA1 914e01743c7591beb79a61417b262caeb23e2c20
- SHA512 78da4181132a02d7d17ba4b2839018dc43d7d691c8bb01d34e5f7439df9c92951ce687e9487df158c44e764275b45d6800f6629ec2a175cc4ecdf868292291e5
- SSDEEP 24576:Q/NGmO/w02OFM7zWIyjQYS2tBMPfL+8T14rbXojA4F8eEcu2sqhA+cGRlZVIH06R:3oOiaQAtBMPfCn/WDcGRxIU6iIdAk
- TLSH
  T1E8F539217A5A646CC0AAC474838B4A722A3138CB1F35BDFF04D595793F69AF46F3D218
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  MeowClient/alpha/libcurl.dll
- Size 586KB
- SHA256 8d361a28685bdca7f0264f94dca8a8a2d3174465ee1ad5fed69c80120f607035
- MD5 6070f99936087cabff52bafaf04dd3f6
- SHA1 0b7c4d0a425f3d69802abd5d78be984e298d0272
- SHA512 f53809cad876c0a139582f6209d71c886c864208d913b383b6268415196eb1fce0c4d972184787163cdb992a8ad2c7e72ef8452b2aaae7189b8724aed6e2f767
- SSDEEP 12288:tEq4fb+EFEv5dwBSFNsvMt85VIWO7ZIqSE+:tENfb+EFgwKtSSWfK+
- TLSH
  T18AD45B27E2A328FCC16BC27482A79772B972F4251130BD7F6250DB313E51E506B6EB64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  MeowClient/alpha/libfreetype.dll
- Size 665KB
- SHA256 5da185332bcf920ff8f3d649b536e44105b914118b33f90a631350e6e813277b
- MD5 564ab421c4f3ecce01d087d4bc28e8c6
- SHA1 3b4e992448c47267de0201ef6b5db0979f8dc192
- SHA512 8dfe5bf1a846fc14c837520bcfe02cef124f1ef49a694b507bbe7d5213e3ba3175c11be5e7189db9f86e90e0e14cebd1dfa60b657bff2eed843e5028a71eb85b
- SSDEEP 12288:pRvw8ezpMBHwZheKGhogg4ywbx7KujYoo0ASAcglfEWmXWF:pRvwTFE+cKGeh4fx7Dkoo0nJZQ
- TLSH
  T1DAE45C57D3E351FDC66BC2344367D772BA31B4201124AEBF42A8DB312E21E90671DBA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  MeowClient/alpha/libogg.dll
- Size 33KB
- SHA256 5187cbb032ccba2ec40f460572576e964d6e089f0b9ec75d975f4a24c7f45ef9
- MD5 5ea985fe0821b513fb4d002514f0be00
- SHA1 d3ddb70c56546d53224e0e742c13e630a86c6f21
- SHA512 2a7bead202c013981bbc5ec505e36f3ab898d88c971a3a5efd21862470579b20769ebb5241e4854a2ed192fb1e9b7a0c8473bf3669cfefd67ff42c780bd88276
- SSDEEP 384:vhge09sMsINs0b4WwuKVuY82NNv8j9JOoXQ8nR0LRRCppImMAYnQcg6FSsTq6dB8:vhd09sVI20vwjOj9JnnGtUplYXosS
- TLSH
  T1DDF27D0F77A3A8ADC81AE13444AFA332F4B7B831A9625D7A0350D7311D70DE46A3DD69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  MeowClient/alpha/libopus.dll
- Size 544KB
- SHA256 55a25a986ef2bf874503e9800668fc5292a9ebe3b011cb3569706c8629d0dd95
- MD5 d1e88f2125d7bd8b1d375aedcf1fdebc
- SHA1 39f1dd204db03aa2194ff07d29a149377b04b9b8
- SHA512 f538b0b192be0218e22847e79c398a2232aa59dcf4a97827511c1d296b8fc68f3988e63123e28d94018cf55c0ee771cbf56958e345ba3762056ec1ba760d478f
- SSDEEP 12288:RYdxjSKUT0qanhlN5FRYTLHED2KX4FKbgYWzzKyfo:RYjjSKUT0qanhlN5ITLs2eDc5Q
- TLSH
  T19BC4F729C7FB94ADC27BC1B84B0B5B775830BC5D5178A43B4AE445C13B761309BEA3A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  MeowClient/alpha/libopusfile.dll
- Size 49KB
- SHA256 5f25c3fa2feaae3d6e7c129b043b1a5b51ae4db1bdfc2c9d4f77030e24bd8f74
- MD5 f69a5de7fad79e0cbac3909d71e06acf
- SHA1 03342585c470080703b0aeedd28143cbcb37e8ff
- SHA512 315df87137af0befe212e779a8daab0e1857e18422219bc389123ab2d3b50e2e9f074c57c7d13d61e23ff93eec58e31257d2bce4292e25cea025ed0eb278e208
- SSDEEP 768:lQb9+k5Joapi+J15CJ/l7R/LCyC00JuqV5JRttx8WCDx:l2Ik5Jp4K15CJd1XCJJuGJRX/Ox
- TLSH
  T1C233390BF2A325FCC567C07057EB9733BA71B8214630AB6E4794DB382E64D506B2E719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  MeowClient/alpha/libpng16-16.dll
- Size 278KB
- SHA256 d6b01790f7cd91518436fd84d98a43919726cbf7783c5b6314014e4837fbadf0
- MD5 d67636715ff72454be4439dde2af829a
- SHA1 adfa6cc1b2aa436ab12d87524bc7fe87944ba145
- SHA512 c63332a885364baf8e48b9be23f701682ee4e7b028aeff2f70c727a53ac47cae6451a34184a5ca06e058dcb7c458d9d64c6268668f9a9cc6e4b2dacb40a35c44
- SSDEEP 6144:JrXVb288kcpHH98Ry0zI0mscZ6pRERo/as7I4j36R109m7w8EA0WpEj:5zERo/J7IQ3mXw8zO
- TLSH
  T1B854E73BD7B3C86DC5DB81B17F8399D42570BD381335E44F02846A51BB2B9707BAA1A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  MeowClient/alpha/libwinpthread-1.dll
- Size 55KB
- SHA256 b08e275950001e5743c7ceb2dcf74f7026994423f7d5dd786971d58c5be34644
- MD5 328445252bab42fb5a44fccf48e69ae5
- SHA1 3234bbc717fa215e605eecb3c00e27b3501918e1
- SHA512 c9ffc5fcd9a0ac57757261238198253aa1c031164b5250602d2c2e7a97a44cc11d0f8d4ed4e6c3632331cf34a666737772c8cbe87d4f7ce2836e3cf6560cbb6f
- SSDEEP 768:UN/utyFl3DbNnsoG8AxZBwKTDR7ILp1hjxxQGc1icim3Yu///nBacTzZ3T:ahFJFGVxwmg1hjxU1dim3YuHQcXZ3T
- TLSH
  T171431A3E76A648FEC52BC23485FA4332A572B0103236DF1E9734D7752E78D709A2E598
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  MeowClient/alpha/sqlite3.dll
- Size 1.4MB
- SHA256 d88f931e488580a0d5c813a20219a90ca799e5dfe91ec52e38dc5c16a1ac1537
- MD5 df4151441926e2abd3a219765d4beb6a
- SHA1 887bfbaa84d7aac9185b8fa8fcd9adf49af4fd3f
- SHA512 1435243d825ad1045bbf3374ec1740a5358f58516c16cb49ad9955e8473a30c6b0cb1d36a6a3d0a6998f06fd45b09b38a9ae622ad2bfcd9e22d7ba31d5e6c57e
- SSDEEP 24576:KwiQfhH3quxQyWjcG27EFSv6fSpR9ClPDuXoebL/YXBjH9xEwneA0uj:NiyYuxEjcG27Xv6fSp7ClPUoebL/YRjL
- TLSH
  T12D65A376D7A3C86CC1EBD1B03F438AD16479FD690634B09F06851942BB0BD206FAE6E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  MeowClient/alpha/steam_api.dll
- Size 289KB
- SHA256 46688ecd8849a86bf8b807c5de1adbb8b8dddaa48583d68b3518b72c77c15bd0
- MD5 c2e2f3c626b1916dc07b8b08986fad49
- SHA1 b11ad76960564848ec034ccfec5ff2f5eabf6f28
- SHA512 8c0831afabd3a046b9c4a944b7890f02c903aca06c150bae7454395f46c377cb69efcae66f0d914186ed3515543b99e7e7a9c3336910ad4d85134c5727811cc4
- SSDEEP 3072:AjTqkhrGB9mkVi635gRaeaZqk4YJDf32uB+rJFC9R+5d65lhTbCz+hnv218yN+uH:IE9mZOB3Zx4YUuoaR/ylC2CPt9Q
- TLSH
  T1CE545A7AA2710CF4D076C13A88565E0FF6B0744B23619EFF2A6053369E676C21E3B791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  MeowClient/alpha/vulkan-1.dll
- Size 1.4MB
- SHA256 aa269102360057118163c0a53917c3c80cdbb5468c1c494f23f6ecdf21140efc
- MD5 af9b616f8dac435c0b5017b8a87eedd8
- SHA1 47f09d8e12b0cb5559fd583c5eb08936cd3767b9
- SHA512 7a0307f465ae74537bc86e1e74c7032125ba17544c0f7f01af11e8463149911e23e627fbca75110e39922ff238d93ecb4d0cbd72a2630a8901cb4dbbf2241f59
- SSDEEP 12288:tYRPw/UEgmNXQKAb0ff1sBiHMXgZvfWw/eaEXAyrbhneYbZuPdbOxbhVmyx+YbeL:aRI/UEg/j4kSoVl+YKhgM
- TLSH
  T168656C66CF940145D2B7923C8E818B8BD5B3FC40632497CB016D4AE96F13BED59BEB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32