Overview
overview
7Static
static
3Everything...ng.exe
windows10-2004-x64
6Everything...ng.exe
windows11-ltsc_2024-x64
6Everything...ll.exe
windows10-2004-x64
7Everything...ll.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3General
- Target Everything.zip
- Size 3.3MB
- Sample260728-akbk4agl2s
- SHA256 78882f0e58cff367587329218848975851820986657a5288c558d1872cd2af26
- MD5 9a5919ff010f744e84d340b66fabcd90
- SHA1 6f1cb314e5025464f39c937e57d7901476dde10e
- SHA512 f54d7cc8d6d0c9e580fa7f240d65ff3c1d68aab6ed11948504f90c2b59685acaeb96b9c9d0daf32b38ddd9cbc479afe7c968d2fedd47277021ac6e27567cdf96
- SSDEEP 49152:XQdoNDZW77glh0iABCIN2ZTEBV2h3iIf4jKrStkSIOKlxSAxRtZuNUQXD16Ezymr:XQf7mwNZ8UKeFIOKlAg6UPEzy4
- TLSH T158F5B043933540E9E9ABC03689569523D7B1F4144722A7EF16A0EFB12F237F19A7E312
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Everything/Everything.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Everything/Everything.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Everything/Uninstall.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Everything/Uninstall.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Everything/Everything.exe
- Size 2.2MB
- SHA256 c194acec8a66c7c73438098e673328bbab594ab489401823038bc3a97ec70a72
- MD5 59872dc7c88df7d0b01f9e93e5a4489d
- SHA1 b0458bfc15492416e15f3a8f77f9fbbac856f261
- SHA512 c5a6cf1ebd4bb7572cb5fa2d3f7c07abfad869c80b7eb8346f1b9b02f908ad8d60bc2d66e2c643ed162abf1ad844cc994a5151b8dd7771b12efb0e395a6fe01a
- SSDEEP 49152:wQdoNDZW77glh0iABCIN2ZTEBV2h3iIf4jKr:wQf7mwNZ8UK
- TLSH T1C4A57E43937540E9E9ABC03A89569523D7B1F4044722A7EF1690EFB12F237F19A7E312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Everything/Uninstall.exe
- Size 137KB
- SHA256 2d2ef89159efc42b104f13ea771d9d50922f2f8193ff865cf4f982eb13cf45e3
- MD5 5bc130224a4bb1ccf8765bbb70244b4f
- SHA1 dcb135c1598be3161a5d5c52315122f18d89f3a9
- SHA512 4bbcc058c89f420a9150e9c5539a894d56bd9b35e8498bfe8bbb581869310cb972edcd76a65665a172bed3af0c1f311ef354833a952b2c48ec4e152d29da7f27
- SSDEEP 3072:hfY/TU9fE9PEtuSWKBAkae31mgjrzElgFegEsmy/3RQmzTkgPOaGyFjTNE:NYa6IZCpe31mgjr4CFegMe3ymzw21e
- TLSH T1F4D3AD09A794C673D4660530DAEE8BA767B3BC3128185BC77B413F6FB922647ED19302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 c7fef6457989d97fecc0616a69947927da9d8c493f7905dc8475c748f044f3cf
- MD5 ece25721125d55aa26cdfe019c871476
- SHA1 b87685ae482553823bf95e73e790de48dc0c11ba
- SHA512 4e384735d03c943f5eb3396bb3a9cb42c9d8a5479fe2871de5b8bc18db4bbd6e2c5f8fd71b6840512a7249e12a1c63e0e760417e4baa3dc30f51375588410480
- SSDEEP 384:EXsC43tPegZ3eBaRwCPOYY7nNYXC06/Yosa:EXJTgZ3eBTCmrnNA5p
- TLSH T1E1624D1137C558B3E2D62A797EE3B7138FA5F722A4438E0BC7332E06281A5956E7C311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 18e8b40ba22c7a1687bd16e8d585380bc2773fff5002d7d67e9485fcc0c51026
- MD5 68b287f4067ba013e34a1339afdb1ea8
- SHA1 45ad585b3cc8e5a6af7b68f5d8269c97992130b3
- SHA512 06c38bbb07fb55256f3cdc24e77b3c8f3214f25bfd140b521a39d167113bf307a7e8d24e445d510bc5e4e41d33c9173bb14e3f2a38bc29a0e3d08c1f0dca4bdb
- SSDEEP 48:S46+/nTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mFofjLl:zFuPbOBtWZBV8jAWiAJCdv2Cm0L
- TLSH T16BC19474B3C248B9C491513768AB33D36612EE746784500F9F6711AA38209F7AD3EBC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10