Overview
overview
4Static
static
3About/IA2Marshal.dll
windows10-2004-x64
1About/IA2Marshal.dll
windows11-ltsc_2024-x64
1About/KeyF...on.svg
windows10-2004-x64
3About/KeyF...on.svg
windows11-ltsc_2024-x64
4About/KeyF...es.svg
windows10-2004-x64
3About/KeyF...es.svg
windows11-ltsc_2024-x64
4About/KeyF...32.dll
windows10-2004-x64
3About/KeyF...32.dll
windows11-ltsc_2024-x64
3DAC/Shared...es.dll
windows10-2004-x64
1DAC/Shared...es.dll
windows11-ltsc_2024-x64
1DAC/Shared...70.dll
windows10-2004-x64
1DAC/Shared...70.dll
windows11-ltsc_2024-x64
1DAC/Shared...70.dll
windows10-2004-x64
1DAC/Shared...70.dll
windows11-ltsc_2024-x64
1DAC/Shared...10.dll
windows10-2004-x64
3DAC/Shared...10.dll
windows11-ltsc_2024-x64
3DAC/Shared/sqldk.dll
windows10-2004-x64
3DAC/Shared/sqldk.dll
windows11-ltsc_2024-x64
3DAC/Shared...ng.dll
windows10-2004-x64
3DAC/Shared...ng.dll
windows11-ltsc_2024-x64
3DAC/Shared...vc.dll
windows10-2004-x64
3DAC/Shared...vc.dll
windows11-ltsc_2024-x64
3DAC/Shared/sqlos.dll
windows10-2004-x64
3DAC/Shared/sqlos.dll
windows11-ltsc_2024-x64
3DAC/Shared...es.dll
windows10-2004-x64
3DAC/Shared...es.dll
windows11-ltsc_2024-x64
3DAC/Shared/xe.dll
windows10-2004-x64
3DAC/Shared/xe.dll
windows11-ltsc_2024-x64
3DAC/bin/10...ck.dll
windows10-2004-x64
1DAC/bin/10...ck.dll
windows11-ltsc_2024-x64
1DAC/bin/10...ck.dll
windows10-2004-x64
1DAC/bin/10...ck.dll
windows11-ltsc_2024-x64
1General
- Target Setup.rar
- Size 64.9MB
- Sample260728-dftgwsef43
- SHA256 7b8ba53849aa1d84a3ea92917bb91b7c143d542c686eeabc51c2970e57051321
- MD5 c143715641118fb8f567585fd4a89888
- SHA1 7f5ce48fec9ac991ca9cd905cf00d772054363ae
- SHA512 2de29d61676b1857e4a53a5b86286f7ccf4f9658fa97fbd0dd9d37aab2ff5f4aa4080beea49a5c3550193f4199a84bd03a4edda8b05ddec9631cb8139ad04af7
- SSDEEP 1572864:/iGrZAR2aYnCTjOmDEwV8yXO5LH/rvX6vwHeyZkxf6/g:0AUTiQEwV8j5T/+vwBaxSo
- TLSH T178E733263C9AE4F4AC8EED4BECB875393F142253BB0D93E1878224D1559527FB8504EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
About/IA2Marshal.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
About/IA2Marshal.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
About/KeyFile/1033/resources/CreativeCloud_icon.svg
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
About/KeyFile/1033/resources/CreativeCloud_icon.svg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
About/KeyFile/1033/resources/DropGraphicFiles.svg
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
About/KeyFile/1033/resources/DropGraphicFiles.svg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
About/KeyFile/1033/resources/Engine_x32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
About/KeyFile/1033/resources/Engine_x32.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
DAC/Shared/Microsoft.SqlServer.Types.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
DAC/Shared/Microsoft.SqlServer.Types.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
DAC/Shared/Resources/1033/sqlevn70.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
DAC/Shared/Resources/1033/sqlevn70.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
DAC/Shared/Resources/1049/sqlevn70.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
DAC/Shared/Resources/1049/sqlevn70.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
DAC/Shared/instapi110.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
DAC/Shared/instapi110.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
DAC/Shared/sqldk.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
DAC/Shared/sqldk.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
DAC/Shared/sqllang.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
DAC/Shared/sqllang.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
DAC/Shared/sqllangsvc.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
DAC/Shared/sqllangsvc.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
DAC/Shared/sqlos.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
DAC/Shared/sqlos.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
DAC/Shared/sqltses.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
DAC/Shared/sqltses.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
DAC/Shared/xe.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
DAC/Shared/xe.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
DAC/bin/1028/DacUnpack.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
DAC/bin/1028/DacUnpack.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
DAC/bin/1031/1028/DacUnpack.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
DAC/bin/1031/1028/DacUnpack.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target About/IA2Marshal.dll
- Size 77KB
- SHA256 70db8976911089b12d584faa1bc48cbbccffa8e79afc70273cc4a8352a0dc615
- MD5 31fcd15b9a06ac591b130921b0b006c8
- SHA1 81a485e90a33ced93033ae9a4e079639bb283a31
- SHA512 1125e34a0270af7135040e2ab44a5ca749a230ad34bc23b60f3ac529579a21b4d72bf0cf574352469b97c66515cf2d2792e43ab29d9888131053be34d3a37249
- SSDEEP 768:67afxi7heDjJNhM1cUPKRK8MJL6cgNkBewiLW3WwKWeV:yw5DFNhMGUPKRK8MJGhG/iLay
- TLSH T1A5735346BB50D4A2C41C853944574F996FB1EE99AFC253D32394322E2FB33C06F396A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target About/KeyFile/1033/resources/CreativeCloud_icon.svg
- Size 1KB
- SHA256 e6ea0ed1b3b944efaec9db8a460c80b17f3a9615d62e480abe27f11f193f4970
- MD5 6a64e1497b1b02f66585f92cb447214a
- SHA1 3a885e6376d2e09e6307243ab64b8095cbb2fe2a
- SHA512 454dd6771ea2b886ae4aeafe582c8b3db6f0e94694538706c64929cf526685f480645cdded8505c16a5320ce34d12bebd33b23beb65e135a24a288a79eb7d593
- TLSH T1B6219817839286B9EE8EC0396605298571D0CDD3E1B4E1D4ABAF1402C56CCD0A69D3EB
- MD5 SHA1 SHA512 TLSH
-
- Target About/KeyFile/1033/resources/DropGraphicFiles.svg
- Size 4KB
- SHA256 eef63f34e5d56f9b0cd56aa7e79e5b43ca51405e6fa332ffd3bb4dbb81d605b9
- MD5 d75b221927d956d8bc1e740dd3ad68f4
- SHA1 e33a92f7373f7ce03d8f3f2ba195f436c5fe11d9
- SHA512 1b57da36511b3f3a0b30bfbf8530ff256a89704e823026b3465be73cbaa347665ef561c6c16227bec885e6f23507f30aee50110df7862e03236da4e1a9610d4c
- SSDEEP 48:eUA9aJK+5nIz7jqtOy5KNzs7gAU7LEWW/U3DPvufQANL3nXRweJ8ZABvcqAhOIOb:IaJrVMs7cPEBMaVchSrZm4t6hEpdOwOm
- TLSH T1BFA13FFF1391CAEFB24963842E191A1D33B164EAB25441B48BD72EE25F64CC79A34870
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target About/KeyFile/1033/resources/Engine_x32.dll
- Size 108KB
- SHA256 bb77efde7a4596b880cb995f863f371ae212736a9cc694ea093dff5bcf6a6c67
- MD5 4f2712e0d78459a1e9d9940015505b52
- SHA1 1d3cde855b59567a52e5fd60b2671a363b65f706
- SHA512 8c96da16c32cfa6f3e0e940952079abfc716d9900c4b0b8f01ec7f163bf2b10cfd3341b25c39caabbf8c34b7ac0a6b460a65af912f4bde8488ed82af70625512
- SSDEEP 3072:JAcPlem5+yyDJhZcmy3sRi0+ba2VWndROdw9um:Jgm5+yoxy3s2baE2dRX9n
- TLSH T166B34B12B6A0CD76CA121236DE6C6F58D2E9E5241FF05E83235C0FAC5E3EF679113A16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target DAC/Shared/Microsoft.SqlServer.Types.dll
- Size 374KB
- SHA256 36c3e5efd0731ccf5ac9a341c488b4fd14c69747f5a3f6e4cd976a7c1288b3b0
- MD5 25656a196ed967bcd4b152a4073b8b44
- SHA1 a9b64b8a42c9da3243378f2a17a9ff8057154116
- SHA512 3903556d2130a219e9795856a14eb28926e3b798eabfe96353300ccc1c11925aff2f417c9ca588f2ddd0df47d6a64517980a39752edade9ad725f6ee4aa16383
- SSDEEP 6144:OVcpT4frcU6MM6Hymh8qME8h2x1mobeug:vMFRx105
- TLSH T1AA84E81CEFDC123AEABAE374C6F04475A366BA62663DC7CF44410E8D05276C186A177B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target DAC/Shared/Resources/1033/sqlevn70.rll
- Size 2.5MB
- SHA256 4790c4c828d21865b556b48bdbb0dc84fec7e49e8fbccfd5e75c9dcfb86cae5a
- MD5 27d0d43f7ee9daefc96eef48620bdb4c
- SHA1 83c84ce3c517871dec311500001db5c501d25be3
- SHA512 fd651fb3cb9335db0a26fd58bc0831a0e91c437ca1a65355b968cf0900fecab1289b6660e64220c330b00c456e1a40e6536e8ad0a3df3f58021f6c1a47861530
- SSDEEP 12288:GgNYGl0T5TJ4IkbB84tgpciKgYLtXU558:GgNcTQtgVKS8
- TLSH T126C5694267F99208F6F73F6069B816A00E767C9AFC79C25C2280945E1DB1E41DEB4B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target DAC/Shared/Resources/1049/sqlevn70.rll
- Size 2.8MB
- SHA256 09c875779139587ede45c49cf14173d7ce1b68246471a4f5b67dad021e5085ff
- MD5 35e743c24d8eda76966acf60ed8b337f
- SHA1 9eacb67db44b21d2091a50f2d7a7ba7cfa7bfbea
- SHA512 a25e279baca808528e8d9c0d824ca008a3666eb62f483dc3c9f81c503c97d22689c4ef8e525bf45844f865200f85a3b0a9b1911535fc427e51269043f5983a5e
- SSDEEP 12288:Y2LLINEgCKk8WfQV8vdjH6m9csYVkTzwx/1:Y2pgn8vK1
- TLSH T187D59B0FF97C9254B964E2600F7685E311AA7340632895CAD68F7DB970AC63677383CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target DAC/Shared/instapi110.dll
- Size 47KB
- SHA256 fc988b3fad95fd8ad36d829c9bfa2f36dcd517de674705a3928ad3384354f34f
- MD5 f9ee4c23a7bdbbb94bbfff3da087b431
- SHA1 b8dad015dcd170bc84e8ae333c66e40c7e4090c3
- SHA512 9ba5b2865854929f6ce41139c0a2db61ff49291b0a4e8a0ba653ed622406c0cd9eaeaa4df44fccddc03f0ad621ae75db071d93b76454d4be468334069d8bf5dd
- SSDEEP 768:6YNhRVG+vZ0Q3V0qOflcSpvxxqGdhO2zUGA1el:Nt48Z0hcexKEUJel
- TLSH T1C4231A02DB90928FD49594B0227C917A7C3C9AB2134060DF5B67F6DA38F53DA7B3075A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target DAC/Shared/sqldk.dll
- Size 1.6MB
- SHA256 5ab3dfd1f5c303688593e8779dca3fdeb3075647cc675df4d3a23a0a3f90f84d
- MD5 9284cdf83b7b75720344b616864e8766
- SHA1 0ff8fe5eed78440044f1b6afe117e91d2453744a
- SHA512 6b9fbcbafe732720e3bc7b4ff15a1349b55d46fc760ab2961193c4103439aeaa1313a950436de80fa6d2c78e9e4334a1d64c157046ec4ce41c2ce32c6df2665c
- SSDEEP 49152:aBTO/KEiThdwXGn736mpSLa2CWtvhpW6xaf+MBAm7PdQJDdwczf4jW:ZyDThKmWtvhpW6xaf+MBAm7PdQJDp
- TLSH T1BC754A21ABD78039DA2235701EBDF37DA13EFD85022AD71FC164C5661EB1D02A606E7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target DAC/Shared/sqllang.dll
- Size 24.8MB
- SHA256 f51cf85cfe31f0b447ad5d6000d176b64de50b5e7a09a0af9f59c0a23cbc729c
- MD5 29f692b545d0493d4d2257439c6969e7
- SHA1 fccfcd17acf600abafe4671be0a1e0d9c06ce3f6
- SHA512 dccdd19aba438f40fd944988f4431a905633cd29048de3b45c924350db67ad481bb221546c41145de93bc1f210c5c9e830a6dcb95127c04f8c80924647f027b0
- SSDEEP 786432:bNCDpdcZRUQeXCcIOwpjfUwLMusl6xVxKwDu5ZKj0YPmSRVYUzFLSm9GPW22hlcB:bNSWaQeycIOwpjfUwLMusl6xVxxu5ZKu
- TLSH T15D477D327B97C02AD57226B0167DF27EB03DBD6A163CB60B9184FD251D73902AB05E1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target DAC/Shared/sqllangsvc.dll
- Size 51KB
- SHA256 b5108ecfc1dd73e8023d609d5edd8e6dbc5279991a0ae1628f0ca2932b61010b
- MD5 fe645bdecf22601e9fdc293aed23ba0c
- SHA1 a665dd12847f2f19a18e68329c98ec543e295027
- SHA512 43ac5d53d58c18c0983cbee628ff31dd3ad643b6b9e2ae1bae6d604885538a6733eb05551984dd7cbbb2ae00904e43ba3755ee007c83f874d0627d891e4162b8
- SSDEEP 384:3xZhtomhKV3lOIEPiswqIWqmxD/lmXruk76OeyO4tepvgizbPVHMgBqPWbdWEWr3:DhteQ/RxlcrP9evjbdH1nlWhMGAedt
- TLSH T16A333D523E28D042DC926DB01AA9EAD22A3CAF851F1051DF3259F3DE2C717C29F7056B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target DAC/Shared/sqlos.dll
- Size 23KB
- SHA256 c8fe018e57adbb1a5328192e8e9be4a5eb15829ff5ab2713b00c6be7dca98e1e
- MD5 d5678b23d062bd0acdc4b6d9e88c9585
- SHA1 0f9ea289f11eec5b5bc8a00f70d36b84b33f8455
- SHA512 353669e3d65153425f45fcf0c63b603de96a1213aee9db824865c2a80955c465b2e382f01dc91baf8505ff8b970555cccafacc88f4fb4eb20d32bb1f75703d90
- SSDEEP 384:XkA5+yhXPVGfPPWY7W/hPapBjTeajCCcwvZQlHMv:RhXdyL+GAISm
- TLSH T15FB21982EEBCA043EC825E7012A8E9C37C3CABC32B6550EB1559F1D928927D1973457E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target DAC/Shared/sqltses.dll
- Size 7.8MB
- SHA256 ab859a1d945cb99e2e52e218ef442234d1436f9aa9a81b76ebf85068ccdebc05
- MD5 344479af61cacc9c64bca055297afec1
- SHA1 cc5e66e6dffa8a243193a8d25424dd81c8d85eac
- SHA512 cf76823c207ccbdc298a863b123c9a84e28e3e41c796ceb55d77fdebaa0ed9f7eb5262efd39bd393cc86319d98275a485e791d3d28b2f92a8d9d69866ba946e7
- SSDEEP 98304:Pcd0ZA68mlyCINfopv58AROqst91tJ/maN6oOv58ALBU10BV:ksZOGJROqshtJ/FiJLH
- TLSH T195869E62E34BF189D4972831625FA3392034BF3FF419B5A563C6BD35DB10A23B81C95A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target DAC/Shared/xe.dll
- Size 399KB
- SHA256 0ec09cd7d58aeb260fe82ca79ad16c353d7053a665d98f4deb26eba5e2b6e9d3
- MD5 063ca314262d277a92189028a9e094fd
- SHA1 3f8fb62d6b38ae258dbffda4d9470c78753c3814
- SHA512 0ef025c85545377d67562bef8744c0966262fd5ffe7fded4a9958ad01cab19e319b7f29fb45d4187a4930611d6b0dea0be32097cb78ae8423934080f7038193f
- SSDEEP 6144:w92cdRECvTmwWWx3t7893HQPRe/3maKQM:wYVCbm7m3F893HQsfmaKL
- TLSH T16F9409716A89C23BEDF22AB90D7C756E102DBAD61B3080CB93585BFE9A741C11E34717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target DAC/bin/1028/DacUnpack.rll
- Size 132KB
- SHA256 9b10d6038bfbfd7c4e734acf48b152a16cd8d3ff69f06b1b8aca008842dba34c
- MD5 9adaa0c7942bfcb41bd036f6e695099a
- SHA1 58309e42ba125a518bc7e02bda0f235d15be8360
- SHA512 87b98c099c5ce6d07b7630cf8e3bdac1d9dc8dd004684d48aa4503c2a073bf313006d53445036f95f55a64701691795985990db26e51a5aa220c4dabf9df65b0
- SSDEEP 768:gzb8oJYg8Hf48aWen+TVP7CUB8h8CgG/yHGpGBIV1SbMcFpypHgkatQi9GfYbcWg:8ooFyAJWnPhC+I2McFkpHgTqmAArZzQT
- TLSH T170D344D0F199A8D6F81B54F6497AD471158B9FA8D47C961E2086B32809F338320BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target DAC/bin/1031/1028/DacUnpack.rll
- Size 132KB
- SHA256 9b10d6038bfbfd7c4e734acf48b152a16cd8d3ff69f06b1b8aca008842dba34c
- MD5 9adaa0c7942bfcb41bd036f6e695099a
- SHA1 58309e42ba125a518bc7e02bda0f235d15be8360
- SHA512 87b98c099c5ce6d07b7630cf8e3bdac1d9dc8dd004684d48aa4503c2a073bf313006d53445036f95f55a64701691795985990db26e51a5aa220c4dabf9df65b0
- SSDEEP 768:gzb8oJYg8Hf48aWen+TVP7CUB8h8CgG/yHGpGBIV1SbMcFpypHgkatQi9GfYbcWg:8ooFyAJWnPhC+I2McFkpHgTqmAArZzQT
- TLSH T170D344D0F199A8D6F81B54F6497AD471158B9FA8D47C961E2086B32809F338320BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10