6b78840bb1b1d04bc9dfd2bd7cff34db1e3ef1c0f34e48dd5daa4c32bf13291f | Triage™

Login
Reports

Overview

overview

7

Static

static

7

GoogleClou...er.exe

windows10-2004-x64

7

GoogleClou...er.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...os.dll

windows10-2004-x64

3

$PLUGINSDI...os.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/INetC.dll

windows10-2004-x64

3

$PLUGINSDIR/INetC.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ze.dll

windows10-2004-x64

7

$PLUGINSDI...ze.dll

windows11-ltsc_2024-x64

7

$PLUGINSDI...nz.dll

windows10-2004-x64

3

$PLUGINSDI...nz.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
GoogleCloudSDKInstaller.exe
Size 260KB
Sample260727-xwcc4azyct
SHA256 6b78840bb1b1d04bc9dfd2bd7cff34db1e3ef1c0f34e48dd5daa4c32bf13291f
MD5 1b67d11e6d0d31259e52ef4dec8c3ad1
SHA1 3e58facc95d757de42088df4158fd704fd346214
SHA512 2fa0d0e6cd74c6da6da93a5a97742f880b375d77ad661accc3aea5e9b2f499a5b1a92e9aa694d2dd0c7e7cdf62ee8f5c4ed250e04699231f5ef5abbdfb45c608
SSDEEP 6144:5lTekwkFbOJRZ6y5oK9JR0VSji0SI4BohdM+:yRuQZTyK/R0VOiBV+
TLSH
T183441272FAC1842BD1D10770B8B3C37DCAF14BA295D6CAC7DB94AF65FA805C3291A191
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer upx

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

GoogleCloudSDKInstaller.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

GoogleCloudSDKInstaller.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/ExecDos.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/ExecDos.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/INetC.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/INetC.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/UAC.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/UAC.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

$PLUGINSDIR/nsResize.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

$PLUGINSDIR/nsResize.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/nsisunz.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/nsisunz.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  GoogleCloudSDKInstaller.exe
- Size 260KB
- SHA256 6b78840bb1b1d04bc9dfd2bd7cff34db1e3ef1c0f34e48dd5daa4c32bf13291f
- MD5 1b67d11e6d0d31259e52ef4dec8c3ad1
- SHA1 3e58facc95d757de42088df4158fd704fd346214
- SHA512 2fa0d0e6cd74c6da6da93a5a97742f880b375d77ad661accc3aea5e9b2f499a5b1a92e9aa694d2dd0c7e7cdf62ee8f5c4ed250e04699231f5ef5abbdfb45c608
- SSDEEP 6144:5lTekwkFbOJRZ6y5oK9JR0VSji0SI4BohdM+:yRuQZTyK/R0VOiBV+
- TLSH
  T183441272FAC1842BD1D10770B8B3C37DCAF14BA295D6CAC7DB94AF65FA805C3291A191
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  $PLUGINSDIR/ExecDos.dll
- Size 5KB
- SHA256 69ac56d2fdf3c71b766d3cc49b33b36f1287cc2503310811017467dfcb455926
- MD5 a7cd6206240484c8436c66afb12bdfbf
- SHA1 0bb3e24a7eb0a9e5a8eae06b1c6e7551a7ec9919
- SHA512 b9ee7803301e50a8ec20ab3f87eb9e509ea24d11a69e90005f30c1666acc4ed0a208bd56e372e2e5c6a6d901d45f04a12427303d74761983593d10b344c79904
- SSDEEP 48:6jOBtU/BXN8kUByyy/Aklkcrkyg7Vg5RibGoTCTo0gqVeeaeQqzM5rv774YRljmB:y/DMy4ncrkyg7tbpQFLUEYRxe
- TLSH
  T192C1C33336D805F3E109027238A6A1F743BBE4282708968B6A53BDD87D94D87FDB8601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/INetC.dll
- Size 235KB
- SHA256 1d8e76baf1de113c119061bea74ef2e8e684c65c2c9675f93970909f0879cdc8
- MD5 8ee31a2916657afde78bf5e33fd4bb15
- SHA1 ef98d0c6dd7ce6b348a91c683ce9175e56c3a522
- SHA512 318f5715956e3aacacfeccce920a8cd48998a5cfa65dd933afbfdef57b1675735312060950a7245e5c3e8784a61bcb3e8f9bb10e85774466504f7a7e3526af2b
- SSDEEP 3072:8tNXMxiQraqoDDfbrH6ZgxkzStPpwGxqeujXj5Bif/Pa0A:8DXMLaqoDfb6mxk2LqHXj3if/Pa
- TLSH
  T11534CF597E54DD0BD75402B87770CFBA2699EC25A8608213FBE1BDCF3D7A746AD02280
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 681382f3134de5c6272a49dd13651c8c201b89c247b471191496e7335702fa59
- MD5 2ae993a2ffec0c137eb51c8832691bcb
- SHA1 98e0b37b7c14890f8a599f35678af5e9435906e1
- SHA512 2501371eb09c01746119305ba080f3b8c41e64535ff09cee4f51322530366d0bd5322ea5290a466356598027e6cda8ab360caef62dcaf560d630742e2dd9bcd9
- SSDEEP 192:vPtkumJX7zB22kGwfy0mtVgkCPOsE1un:k702k5qpdsEQn
- TLSH
  T178325C15135046F3E1D2853C542B3AAB6FB869118AF04E43CFB36852EF386C79D79352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 32dd7269abf5a0e5db888e307d9df313e87cef4f1b597965a9d8e00934658822
- MD5 4814167aa1c7ec892e84907094646faa
- SHA1 a57a5ecbdfa9a8777a3c587f1acb02b783afc5ee
- SHA512 fb1f35e393997ecd2301f371892b59574ee6b666095c3a435336160481f6ef7ed5635c90ce5d2cf88e5ef4a5affb46cb841b7d17e7981bd6e998531193f5d067
- SSDEEP 384:3A7q72y8XYDSDJe7H+KXKKK2KRKuKZrjVo787foI7:3sygyraXjQ7Zl99
- TLSH
  T13B626D6652988BFFD321113AB6A333235BE591103770715F4AA36F947C34A93A63D326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 cb958e21c3935ef7697a2f14d64cae0f9264c91a92d2deeb821ba58852dac911
- MD5 13b6a88cf284d0f45619e76191e2b995
- SHA1 09ebb0eb4b1dca73d354368414906fc5ad667e06
- SHA512 2aeeae709d759e34592d8a06c90e58aa747e14d54be95fb133994fdcebb1bdc8bc5d82782d0c8c3cdfd35c7bea5d7105379d3c3a25377a8c958c7b2555b1209e
- SSDEEP 96:oyqZ4zC5RH3cXX1LlYlRowycxM2DjDf3GEst+Nt+jvDYx4yqndYHnxss:oyq+CP3uKrpyREs06YxKdGn
- TLSH
  T1F7121A635A4055F3D5D7223A21AA2F2FD77C9324A022BC0287779E462BF431A7D3A341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/nsResize.dll
- Size 4KB
- SHA256 29b0e5792679756a79d501e3a9b317971b08e876fac1c2476180d0ae83b77ba5
- MD5 aa849e7407cf349021812f62c001e097
- SHA1 4cbb55b1d1dd95dcb7a36b5a44121ad4934539af
- SHA512 4556baa49e8182d72e29e8d809635312142eb127039f5803ca0bf011b4359f0b584a670a3bd26a9969165a332cfa14a39abeaeae0b4d90519f91fdea755c54de
- SSDEEP 96:Grb+u7Dk2IFEZsO22AxqX4PJ7G17JAgX0:yb+u7Y2IFEKOHA0X8i1NAI
- TLSH
  T1BE91A847BBF4253BF5F60F3656634B15A43ABD608EB692AD451C114B3CB18108A21A7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral13 behavioral14
- Target
  $PLUGINSDIR/nsisunz.dll
- Size 40KB
- SHA256 6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d
- MD5 5f13dbc378792f23e598079fc1e4422b
- SHA1 5813c05802f15930aa860b8363af2b58426c8adf
- SHA512 9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5
- SSDEEP 384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4
- TLSH
  T188038EA392C146FBC5F8843931DA6E1D6A9EFC301BC16103CB2DBDA52D153967A642CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

© 2018-2026

Terms | Privacy