Overview
overview
7Static
static
7pcvisit_15...ul.exe
windows10-2004-x64
7pcvisit_15...ul.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ol.dll
windows10-2004-x64
5$PLUGINSDI...ol.dll
windows11-ltsc_2024-x64
5$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...7z.dll
windows10-2004-x64
3$PLUGINSDI...7z.dll
windows11-ltsc_2024-x64
3qgif.dll
windows10-2004-x64
3qgif.dll
windows11-ltsc_2024-x64
3qico.dll
windows10-2004-x64
3qico.dll
windows11-ltsc_2024-x64
3qjpeg.dll
windows10-2004-x64
3qjpeg.dll
windows11-ltsc_2024-x64
3qsvg.dll
windows10-2004-x64
3qsvg.dll
windows11-ltsc_2024-x64
3Qt5Core.dll
windows10-2004-x64
3Qt5Core.dll
windows11-ltsc_2024-x64
3Qt5Gui.dll
windows10-2004-x64
3Qt5Gui.dll
windows11-ltsc_2024-x64
3Qt5Network.dll
windows10-2004-x64
3Qt5Network.dll
windows11-ltsc_2024-x64
3Qt5Svg.dll
windows10-2004-x64
3Qt5Svg.dll
windows11-ltsc_2024-x64
3Qt5Widgets.dll
windows10-2004-x64
3Qt5Widgets.dll
windows11-ltsc_2024-x64
3client.exe
windows10-2004-x64
7client.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3General
- Target pcvisit_15_SiT_K-Modul.zip
- Size 7.9MB
- Sample260728-dndfmsak5z
- SHA256 b4fef017ff01c2c86e42972d161eceefeed6000d8e1f62114ca2616d2608bbfa
- MD5 6a1e7e38c31574bc43f1ce2c93a8bb17
- SHA1 01751a650315ab827a9fb73237421e134a203b9c
- SHA512 1bdf540026dda25013b9d5075981ec10a6b4eae241012c257b6ea7bc810c32cd55bd95d3274ee2d2ff7461e48379a86297a464adb4c88ca651d9f4a5751545e3
- SSDEEP 196608:rDRk8LWtZqXsCqRPKcaBWmQFnKRH/s/rK7ttgWpoH4:rDRk8aKXERPKdLQFni0/rCgWb
- TLSH T1AA8633B599FC2DD09568EFC98C313D2DE17C261234E915CBE97C1D2861DC0A327AE39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
pcvisit_15_SiT_K-Modul.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
pcvisit_15_SiT_K-Modul.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/UAC.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
qgif.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
qgif.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
qico.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
qico.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
qjpeg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
qjpeg.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
qsvg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
qsvg.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Qt5Core.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Qt5Core.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Qt5Gui.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Qt5Gui.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
Qt5Network.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Qt5Network.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Qt5Svg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Qt5Svg.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Qt5Widgets.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Qt5Widgets.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral29
Sample
client.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
client.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target pcvisit_15_SiT_K-Modul.exe
- Size 8.0MB
- SHA256 e9990afaf1340427b79813dc6db13cbfe81614e4bc9e57855a93b3506f1e1995
- MD5 54cf29ecac4c2207b5e248289cbe6569
- SHA1 f7b85ad3e0ed49a865b9be58882e19e210b1ddf5
- SHA512 8ae75028e334dee663f8e44a6c0108c8fec16a426f934d6d2934779a655a123bf672a2f5e454ddfb4a63ab68fbbadfa5adfa8b53b771aed9cfe607a739e67f54
- SSDEEP 196608:BG2R46Lu3/UBkOuTNacE1Wvtn6xf3CHzEBn/iW9AnQ:1R466sB0TNaBOtnaqHzCiWP
- TLSH T1A486337E95ED1880D06CBEF3C8E13DDA95691F1DF0D203E6D5B8B82D28981A327DE245
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $PLUGINSDIR/AccessControl.dll
- Size 8KB
- SHA256 8a8f5bafc105186c85f14e017ab6da33ae8f88a9635e51756f90b6d95381d80d
- MD5 9f1a88b953fd2a2c23b09703b253186c
- SHA1 29d5a5a24e7f782a07e9f5d2ec1d1a6218fec737
- SHA512 10b3a812c92b7324bddcd23adf923fcaec2532f31bdd9fbf17494fc33f99aa0a0a48b94f1fdd6599fa0189567626a90b324a1d132bf9cb8b00a6afc547e64018
- SSDEEP 192:RmcLe8uWVNz5ZalBK/7rUlYg5q5LcywvX5:RJdNzMKXUlYg5qPq5
- TLSH T1E3029D8643A40179E8730BFC4FAD4C1A1B2EFFB0CBB1569D2158356F6820B1488B6F31
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
- MD5 00a0194c20ee912257df53bfe258ee4a
- SHA1 d7b4e319bc5119024690dc8230b9cc919b1b86b2
- SHA512 3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- TLSH T113325B5993A0C1F3D5A0823C0DA73A7B1379722016B14FA3CFA35841AE196D7AC7D237
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 32dd7269abf5a0e5db888e307d9df313e87cef4f1b597965a9d8e00934658822
- MD5 4814167aa1c7ec892e84907094646faa
- SHA1 a57a5ecbdfa9a8777a3c587f1acb02b783afc5ee
- SHA512 fb1f35e393997ecd2301f371892b59574ee6b666095c3a435336160481f6ef7ed5635c90ce5d2cf88e5ef4a5affb46cb841b7d17e7981bd6e998531193f5d067
- SSDEEP 384:3A7q72y8XYDSDJe7H+KXKKK2KRKuKZrjVo787foI7:3sygyraXjQ7Zl99
- TLSH T13B626D6652988BFFD321113AB6A333235BE591103770715F4AA36F947C34A93A63D326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsis7z.dll
- Size 171KB
- SHA256 ce6fc1b521e64ea89f4532cbd74f06f85d21018ac5196b4f8169627926e40971
- MD5 a26d3887a69ea3e03c1cc4367494e080
- SHA1 e25b63467aadc27b2ee7daa93ea886c01f90025e
- SHA512 97e0343b5c1a478f886132d0a41737e41499485451fe2fa74fa3898ddbb15013ec424a84ecc19426d59e9b9870e283735d29ccba1d73d448e0f3ae320a741a7c
- SSDEEP 3072:vOyXSMpGO+JNP7FyE8R2TX/u5IiNNKdTmTfL5sY03tzZaq5bXi:rXSe76tByH87/aIiWdT6fL56tME
- TLSH T122049D2237D0C23AD30F1675DD56EBA166BDF6204A62D58B3F890E6D4F326848F2D706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target qgif.dll
- Size 24KB
- SHA256 40a5e7f6770181cad19badbda7b7797d3757e64ef933c7acaaecc7f8dc03ee70
- MD5 ba3ce6fcfc283bf6cb39575676524d8f
- SHA1 f7c02e826185b6049609937f9e419e0843469580
- SHA512 ce60cda89e5b0aca0b67ba810e32ac6e28cee0eaab20dd20d215e50d77ef39bab99c736a236fe6dd3f99b095df60b7e4fa6e0a5e935394c4ab3edc6632c87fb4
- SSDEEP 384:It+FIyi2Ib6eCZnOrxJPxuk3IPAVbBNES5IbGbFMI9LQLj3vL1:VFIyi2+OqPxuk3OAVbBNJ5Iy5MwQLDvL
- TLSH T177B25C50B6A581F2E51B17B0B9992F22A63EE3344FD497C3EF43AA251C253E32E71315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target qico.dll
- Size 24KB
- SHA256 4dbd24c240047bd2cb74fa3272eb759d70a49e82928e37fff2e53c8768c3826d
- MD5 e9a6c2bd707fb023586515c4050ab1b7
- SHA1 50bc1e42fbf949eae1ce9712120ac5b20d6433ec
- SHA512 431e25888a90a9c9f08fcb3a998b37013b603c88543fd945fbad37a638c962a5751ee299a09d7e6169030545d04bd55d0a68b307ba4c4d264d97d83d8397f541
- SSDEEP 768:A48YMTq2rtQYPMul+U3hDhB7w41gL6h/Q:nqT13MuoyhDhB7wIgWho
- TLSH T19AB24BA5E21680F2E25B4671395A9F2BE53EB3718BD253C3EF539E1A1C623E25D30305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target qjpeg.dll
- Size 237KB
- SHA256 ec5d133a779df567f678699a650e02db3721d8f3fc5cfa481c56c4562e9669b3
- MD5 8238aec87ba25fa396e50659820005e6
- SHA1 ad29b833e2cfe4f208acb8b70007a2020ceab655
- SHA512 0588c369230bd646c0433c2a8a7465591a3db5827585e93b18cf76b5739a966764bfdd57ad1e878c569aff95930b150f7993ae75825bb5c9c6bb6af560d0719e
- SSDEEP 6144:1ej12LtcTE485XverqOsiaPB9JhjfVcdy10usnhsu4pzR6Fj1L:0j12ionOfaPB9JhjdIML
- TLSH T14B349E80BBAF16E5CC462975409FBA6B1A34572E0715D1F3D2903D12F821BD3AEB92DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target qsvg.dll
- Size 18KB
- SHA256 2a16661719bc01520eee171496be8bc4fe178f114c91787c44bbb712e69894ea
- MD5 97c107797ca94ba6ee07a0c937f8d00a
- SHA1 32d8badc946029dabf1f44214b22deba01e795e6
- SHA512 5894e1e314e4386bd0cc6db59f279eab8e196b9a32e0e55f8dca192e1d2d7b3d13d7db206ff6d3486a4b41c093ddd811536110164908b72185145349e90b817c
- SSDEEP 384:/xmc8kVBGvW2NM3NCKsniy8TwbUKj4I9kgLjJY9JJ:/xmc8kEW2IN95a7j4HgLlY
- TLSH T18F822815B65B90B2D16A93B439584B23E93BF2204BE2D7C39E639E182C793D12E71307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Core.dll
- Size 4.5MB
- SHA256 17ddd791de4ae838dfcec0b5a1e109734a473565ee060ccfca592767baa163cc
- MD5 f863c71ecf4b1c406c16909c9c19c86b
- SHA1 57282b95914c39b5d5c90a6b4b80b2a973dc1b4e
- SHA512 592325ceabacaaaa0612b179ca1ea1b871a326be0bce1ade4d8e5e01d3b1d570762cb0c878a1e5863a766f6520f118000fbc88ecf701522f9e68314b935f7fad
- SSDEEP 98304:AUMSpTccoLf3askYfNzWOJsv6tWKFdu9C7D:A7TfNqOJsv6tWKFdu9C7
- TLSH T1E0267DA3E797C1B2FA92827508ABD72A0536AD1587118AD7F34C360798716F13E3F14B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Gui.dll
- Size 3.1MB
- SHA256 97768839ba01ba5898b7cb9c83bce9986dd7c248f7ff300410319e741fd1cab6
- MD5 5a4444035db5b170fa6728457d2ce037
- SHA1 a9dcd8d6a4f56166d1ef5c36341555ef1d44d855
- SHA512 8fc7e6ff836b0a90a74badeeb9eb2951c3798df8914c0d39fc52bed5cb216d36bba5469bb9951cb44ee4f3260fd2e035284deb3297e3979480595afbb51e77da
- SSDEEP 49152:ELIHfye71r6H0jMKfgmpNU5UCyN5oxtOxnZrTsIpYGtU9PgAwhwWPQ:ZPmHqMLmqU9PoxtO5iWP
- TLSH T191E59E93F29310B1C885D2B4795DBB6BC9396119831DC2E3D3F8AD47E5253E22E7B281
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Network.dll
- Size 801KB
- SHA256 3a61ce9aafd766d56a23b476d3dad337fc97c7f1d53aa81bf313091daae92783
- MD5 e5c8371a6dc067233762f73d9a792608
- SHA1 86c9c42788cf2407ec3d9770b155efd4a8ffc435
- SHA512 dd88c27625350bb31fd5660126847207a07b6a27c2d77d9e5a4705200fcf69b54401e11cd12d3f7dd7de0ada0f1c8c5b0075f1062c8ca0ae63b78dc2ea2a4ee3
- SSDEEP 12288:/wdk3fHdAEEGhO6tpQ9RaHyfc9McLYdOgKzMjdekRVjUETxlsa+rR+R176ZHpG60:/wdk3fHdsGhTtpnHyk9BM06+S76h0
- TLSH T194053C92FBAE01B3E95483B5461DAB67C17DF11947721AC7A31CAA1A40633E13D3F1E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Svg.dll
- Size 245KB
- SHA256 dfbb641536b9757002d6b18d18ba09da39cb307e345399e583b485f5226f4211
- MD5 64904587b7ce0af9fd91ef51d1b0d817
- SHA1 0aa7fc0799ad26bec05445fe62214f8ec70a5711
- SHA512 1ca17c423d62a66433d349eb0fa69e584785ad3dc921013ceed5fb5b470a12b3d37e842232e68dab17fd7cb6581a0e0c006986a7c72179dba8cd42c2c0dd4c0b
- SSDEEP 6144:QZpwdWMQEkSinMoh2ItSQx+RGcy8DvcnxNxdtFkMEW/cUwnLD0uxP0n:QZpwwMQrSiM22It9Q29
- TLSH T1A5343B52B2924D71F48BD3785C1F5A17993EA00A037E83EB97E89C21D4683F76DBA341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Widgets.dll
- Size 4.3MB
- SHA256 fa116d542571d9cf1362eca4e212c672f31209420f136c71a86593a1a20113a0
- MD5 31e6b7b43738bf2f302225591ee19f84
- SHA1 1615b1863eab3108122da3795794304974ddf0f7
- SHA512 f587efd7fb33407254abd0e33afb02f7d75f13aceb5ae3d1cbf5bf0ff18e1eeb9f0a92a1885dbc28413723e6fdcbf416fc666a627755a3b163b5f98d1100a068
- SSDEEP 49152:r43/1LOCMOsG2JvZfNSMHX8j5nqg5mSXkRCZYQELHrH+xw1e:Mv1BsGCvmDj7mSH6LHt1e
- TLSH T10C269E92B2C341F5C887D1B40C1EDB53C5B9B1084B5B63D7E39CAE8668E92F11D7A389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target client.exe
- Size 112KB
- SHA256 8c7e690f6743daf4889b5939da2cd08ca694fa6f5267673b3bd89fea42c63e58
- MD5 a44f6d5d895077c93c67e318c321fc02
- SHA1 9bdc9fe7a0193e951d4b1f727adc02eee9aa72a9
- SHA512 0a616dc66895728bbab3f4ac972d986d0c11282c9543b701367706d8bd2562d85a2f5172dd6c3145b8871f2dec7629374533d22899d38709d6f60f6d8396fcbe
- SSDEEP 3072:E+8uyHOQXJo2AzymN+QVN0BKdX+ECMkVILa:E8+M+CmKdXPkVILa
- TLSH T11AB3A26EA1CE8445E01D7DF3C8E66DD259625F4DC2C347F6D290F9BE2C182A366CEA01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
- MD5 00a0194c20ee912257df53bfe258ee4a
- SHA1 d7b4e319bc5119024690dc8230b9cc919b1b86b2
- SHA512 3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- TLSH T113325B5993A0C1F3D5A0823C0DA73A7B1379722016B14FA3CFA35841AE196D7AC7D237
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10