Analysis
- max time kernel
150s - max time network
118s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/07/2026, 00:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ControlG.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ControlG.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target ControlG.exe
- Size 42.0MB
- Sample260728-antabavydy
- SHA256 3b70f117d5c6011212b9786ebfc98ddbc40e748e88d7d9006d91fa17b7669b72
- MD5 b2d684604915d4899cf7d0033451e4d2
- SHA1 568b0d00d554f4a49cdd0b2e432d33bf30e7950f
- SHA512 2b02d242eff1f7403588f79ce21ab701c10ec1b7ca6e8912fe65dc85822a9535b2db3a0bc0b50f4ac572a3447676ff58ca2c7e75aad1f43102bac79378324aca
- SSDEEP 786432:NuMLlCtAeGKvs1V5RhDGqT+WhKecC9+0HMPmokbbwpVy5RhJ11x:N52fAVZ/TjhKC18kYpV4JN
- TLSH T1E3A71256E2FD00E8D97AC0B8C6575617E7B1345913309BEB52A48A692F37FE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 4 IoCs
pid Process 4360 ControlG.exe 4360 ControlG.exe 4360 ControlG.exe 4360 ControlG.exe - Suspicious use of FindShellTrayWindow 5 IoCs
pid Process 4360 ControlG.exe 4360 ControlG.exe 4360 ControlG.exe 4360 ControlG.exe 4360 ControlG.exe - Suspicious use of SendNotifyMessage 4 IoCs
pid Process 4360 ControlG.exe 4360 ControlG.exe 4360 ControlG.exe 4360 ControlG.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\ControlG\w7HnHDyHEDwb\av_libglesv2.dll
- Size 4.2MB
- SHA256 caff1be1faee32f7c5bfba9162ee617c347aad40772caa9a1aff794e3a191420
- MD5 0c6d7ef9f90b40fe51e67a2ff9f38244
- SHA1 d6cbf5d5b9957028d75d2456f1209b2454072367
- SHA512 b4cf85ea6be1c8528bfa6126a81faf44132b6978a07cf01af729f68807c7db6ae16fe71eb74135c9db9fe7696094d89330a94217c953b2ee5cce9be4a4e33373
- SSDEEP 49152:aYV2dj6IAWlax8aR1MCphVaEoJ9yjo2X8cC8P2B+79IP3aW2NcBVKrf+YQ2CsGV:aYVuj8eW43d2
- TLSH T187267D57B6A500ABC8BBC13CC957960BE3F1F85503A087CB21A8576D6F637E05A7B324
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\ControlG\w7HnHDyHEDwb\libHarfBuzzSharp.dll
- Size 1.5MB
- SHA256 ef5923ef4cdc8612c1825b294174b5b8cc8a056ed0f06b58db56aabc56aaae12
- MD5 c22de44419d1a1f1aa059f451fc59016
- SHA1 cff7fc6071b8ccfbaea2ad922071f243d265afea
- SHA512 12f93c7d4548c1c20288d9fd1b2b1b3dd0dec7c1a0c9b12f7f2c1b8045cfbbbd1256e39112f7296c83f93bc6c8fad45390384cc80087edeff46e9d125e3bcbba
- SSDEEP 49152:ABy4VCDmxqVx/1hlcsHI7woyGYdwENua6m4G:jQkPNuw
- TLSH T12675AE4AE26A11E9D8ABD074C656840BD3B274420F14DFFF56E08695EF23EF51A7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\ControlG\w7HnHDyHEDwb\libSkiaSharp.dll
- Size 9.0MB
- SHA256 2ca940b7c4621ecd27d2f07c5f46fafa0375f493692cd4e6e1e66c07fbc8109a
- MD5 26d723bd75b5c6591dfde18b71281920
- SHA1 47c05d42af2968f83877bb9cbf744c938489f466
- SHA512 90bbdd48588616177354402b91a3fac363f8eb7959af570e6cee1174eeab950077b71ed47645262daf0957ced5b90b3aa5a7146a5d04d52b5c7975a5d31c5ef7
- SSDEEP 98304:c7RZOtCNj9xK+pe5fNcVlIpANOxHjsjUQvoZot9D:wZOENCzVknONqVR
- TLSH T1A6964A03B66B64ACC04AC474834B99665E2038CB0B35BCEF52C5A5393FB9BF42F79615
- MD5 SHA1 SHA512 SSDEEP TLSH