General
- Target plugincore2.04.6.zip
- Size 2.4MB
- Sample260728-ap826aeb57
- SHA256 b580491c1b39afab167d3ac73c72c74e2a8dcb0fd062ef34e64df6642c9f0aea
- MD5 4aba23b61a780cccfab841d90927be7c
- SHA1 99d9f9201386a8620f9d8c9da2c6023cf10e4718
- SHA512 6ca29827462fb7a17afca2019bf7ac20f43aca57b312c0bd7ad8a0117f9380fc76293f7fb0e4d325c4ed85833cee233bd350482ef1d2518014e44b8220d6a3d3
- SSDEEP 49152:XQeFRPpJ/MJHgVxPtJmX1PnAulG/upybhTQ+GasYtl:XQeFRuWVIlP3A/uWB9G/Ytl
- TLSH T121C533E1D64DC5891F3F74A8DFC047B628488EB626EB452EF90B50673EB538A061CC87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
plugincore2.04.6/msimg32.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
plugincore2.04.6/msimg32.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
plugincore2.04.6/plugincore2.04.6.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
plugincore2.04.6/plugincore2.04.6.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target plugincore2.04.6/msimg32.dll
- Size 228KB
- SHA256 5590c7cae0bf1c9c2a1571de0ed0ae09bb4c8ce5588f35204939430321cf7309
- MD5 fc5f46a120fd08933a9f4c5923d8477a
- SHA1 fb6b279cb6e6456dbd53ba52c44461d57bf4513e
- SHA512 e74f3b114836e705e04bc99f86c83ece7dac118ba47727122e18c262b5e7db25e1b109fbd30797f98e89af15053e4344d536a8824d40c3767fb05aa3518f0de9
- SSDEEP 3072:ZKOrn6UxtkwxXi4ifmmxDOizbQECeStfLx6mwDcFWVcfrpib87JjW3q4rt5pJG4e:EiamptYWsb87JsRFB4d
- TLSH T194346D85FF85AC9AC6255235899F83393338F6D00F775B27493472341E23AD0EE916A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target plugincore2.04.6/plugincore2.04.6.exe
- Size 5.8MB
- SHA256 1618b0270398824725f0449703a59f68ce25941d73003130abf584f759b8d4af
- MD5 eb3c2c0fc411764b281c8b45c94a7ec6
- SHA1 dcec68639a726c2ec209293a262d5b0ebf994dc9
- SHA512 a829c0cbad9feefe924bf3b211640ef6e7d5284faf07c186c1e5159f62ff52f88fddcb1463b0a22934bd90227e8071fb21333258819b0c1188f259c940954939
- SSDEEP 49152:x4EY/auow7FBLiN7GG3TRV3xcif/+oDtN1678QM1CAdRM5878CF7zAS3/yiGSYIy:RP1KG3vxMoDRE8HjkCKdS/mo8
- TLSH T1335618826269C09DD0EB9734D95A5EFBD6B2BC11C7304A8F01523D5D3EB62A45B3F322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.