Overview
overview
4Static
static
3797e781963...d4.exe
windows10-2004-x64
3797e781963...d4.exe
windows11-ltsc_2024-x64
3$APPDATA/2...86.dll
windows10-2004-x64
3$APPDATA/2...86.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...in.dll
windows10-2004-x64
3$PLUGINSDI...in.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...86.dll
windows10-2004-x64
3$PLUGINSDI...86.dll
windows11-ltsc_2024-x64
3$PROGRAMFI...86.dll
windows10-2004-x64
3$PROGRAMFI...86.dll
windows11-ltsc_2024-x64
3$_49_/2345...er.exe
windows10-2004-x64
3$_49_/2345...er.exe
windows11-ltsc_2024-x64
3$_49_/2345...er.exe
windows10-2004-x64
3$_49_/2345...er.exe
windows11-ltsc_2024-x64
3$_49_/2345...er.exe
windows10-2004-x64
3$_49_/2345...er.exe
windows11-ltsc_2024-x64
3$_49_/2345PicTool.exe
windows10-2004-x64
3$_49_/2345PicTool.exe
windows11-ltsc_2024-x64
3$_49_/2345...te.exe
windows10-2004-x64
3$_49_/2345...te.exe
windows11-ltsc_2024-x64
3$_49_/2345...er.exe
windows10-2004-x64
3$_49_/2345...er.exe
windows11-ltsc_2024-x64
3$_49_/libcurl_x86.dll
windows10-2004-x64
3$_49_/libcurl_x86.dll
windows11-ltsc_2024-x64
32345Login.exe
windows10-2004-x64
2345Login.exe
windows11-ltsc_2024-x64
2345PdfEditor.exe
windows10-2004-x64
42345PdfEditor.exe
windows11-ltsc_2024-x64
4General
- Target 797e781963270f627cf5ab5818a00c424bd09828a6aca5127a39f293f501b4d4
- Size 9.4MB
- Sample260728-g4vlmscp2v
- SHA256 797e781963270f627cf5ab5818a00c424bd09828a6aca5127a39f293f501b4d4
- MD5 5d4719260fbc839d01a164a318759bee
- SHA1 d844e4825e254c23888d68c6e59463623bd24ca6
- SHA512 8f1171fd0779d845074aee718612c0e31ba1169d6e79c22394041cb172e60c38a3affc1e354cfbe78c02ad9abdb8ea19ea6917b53c1da9bb09e08000f86374e4
- SSDEEP 196608:kRlkiaAdotajXtWp+rtt2Ewlv0j4FjE0rsq:iqoWpGttKRFjLH
- TLSH T1C9A633A9A0F44BE6E9B34FFF4465912A1B37DC952903C81917D8E1CC7A21B09F17329B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
797e781963270f627cf5ab5818a00c424bd09828a6aca5127a39f293f501b4d4.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
797e781963270f627cf5ab5818a00c424bd09828a6aca5127a39f293f501b4d4.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$APPDATA/2345Pic/PicExt/libcurl_x86.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$APPDATA/2345Pic/PicExt/libcurl_x86.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/FileInfo.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/FileInfo.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/RCWidgetPlugin.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/RCWidgetPlugin.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/libcurl_x86.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/libcurl_x86.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
$PROGRAMFILES64/2345Soft/2345Preview/Application/$R1/libcurl_x86.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
$PROGRAMFILES64/2345Soft/2345Preview/Application/$R1/libcurl_x86.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
$_49_/2345PicDumper.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
$_49_/2345PicDumper.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
$_49_/2345PicHelper.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
$_49_/2345PicHelper.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
$_49_/2345PicLoader.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
$_49_/2345PicLoader.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
$_49_/2345PicTool.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
$_49_/2345PicTool.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
$_49_/2345PicUpdate.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
$_49_/2345PicUpdate.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
$_49_/2345PicWorker.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
$_49_/2345PicWorker.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
$_49_/libcurl_x86.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
$_49_/libcurl_x86.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
2345Login.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
2345Login.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
2345PdfEditor.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
2345PdfEditor.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 797e781963270f627cf5ab5818a00c424bd09828a6aca5127a39f293f501b4d4
- Size 9.4MB
- SHA256 797e781963270f627cf5ab5818a00c424bd09828a6aca5127a39f293f501b4d4
- MD5 5d4719260fbc839d01a164a318759bee
- SHA1 d844e4825e254c23888d68c6e59463623bd24ca6
- SHA512 8f1171fd0779d845074aee718612c0e31ba1169d6e79c22394041cb172e60c38a3affc1e354cfbe78c02ad9abdb8ea19ea6917b53c1da9bb09e08000f86374e4
- SSDEEP 196608:kRlkiaAdotajXtWp+rtt2Ewlv0j4FjE0rsq:iqoWpGttKRFjLH
- TLSH T1C9A633A9A0F44BE6E9B34FFF4465912A1B37DC952903C81917D8E1CC7A21B09F17329B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $APPDATA/2345Pic/PicExt/libcurl_x86.dll
- Size 2.1MB
- SHA256 635f988beb849c6510f54f681387bf810c2266bd27834c5a9c160cbfe6df44d4
- MD5 a26e75c0407c87786eea42febdb32532
- SHA1 27e52fdca023cb8f031cd55ac37965d93f7f7da7
- SHA512 fdd9760442579ad2a3df4f31464f9e66bc19a4390fa1c81afb516cce817097b5324024f712d9c1bf1a11ad30324f5a8aa83c72a732e1197e8804ab806d3859e6
- SSDEEP 49152:nGUR9r6hl8IXBPZ68L20v/SU8Y7NriOPquwgtJIpT:nGUR9r6b8IbBLjv/SUp7NriSg
- TLSH T1F0A5AE02FB8185B2E6DB427862FA677F8E3A55205328C9D3C79138749D201D2773E79E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/FileInfo.dll
- Size 624KB
- SHA256 238800fe81614c53bba40189a6446cb663f3729710820dc0410dcdf88888b4f4
- MD5 ca1099a7fc72caac3f1d69e815cf8217
- SHA1 09f5db04908e5df05c3521ce151870b70c4c73e5
- SHA512 5013250d93097e94e3376114556d6c8d3a49cff8e31b7f0d0bb29092e9cb78098337172c929ad53766b804c60d010095df52ead2b65196428c2a1bd5ead47c64
- SSDEEP 12288:MjU7TCD4hCVpgDi9DjHzjD76Wiepz1lnXtaw0R3Av2iHtNTkZ1IrYTnODTE:RNvm9Dr3PiyaLR3+tzTk/IrYTnODg
- TLSH T116D48D2171C286B7E27E01701A6C9E7E047D35700B708CD7F7C86E3E99B49D29635AAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/RCWidgetPlugin.dll
- Size 2.4MB
- SHA256 779fd21a8bbb421300f680261be23bbdf61e9312ec186057d1815b7956a5a69c
- MD5 9014b1461ffd3da9a80d186febd644c2
- SHA1 0d411526b1778cd1a8a3ab8f03f4de9245c44d0e
- SHA512 5a8185b811ae7c40192d591f1d695bda4286e4b57366662ff73bdf37399ec4d5303012119a31688f0529b38b7945b1a72bfe4d2076df856df739b4b6b8c2257e
- SSDEEP 49152:dA3J5T7jes9IEQ1W0cx8xaTu5TslsWv1ucXG/4VFgSR1D4uJXG289:dQ37aREQ1W0vkskJen
- TLSH T113C58D217746CA37D95D01B06A2DAE6F545CB5E50BA04CC3F3D82F6E69B08C31A32E5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 e4e216b61f8c6b73e9c49024fc0a41b75edca4da59021c0fdcb2a3a3ba609540
- MD5 1637d6d2b88b6dc86f26810ad4bbe99c
- SHA1 6e175dea88d613e27a6d0b7f4987f0f814c64373
- SHA512 1c6353247346060f42c88c6e648d9a05b800acdc4964660ea95c610fd45503132595c953984f02d3e8b4cb5a7a332821399c55caa0370747b5a24b7729ccaf5c
- SSDEEP 192:r8lcBiSt3+u6sDbDoEVhF4ZZOLnvUkZR8epSPv0ygMzT8A:XiUmsf8ahF4Inv7ZR8qsAE8A
- TLSH T11A423A427B619EF2FA65463215677F174B3CEE0807E846AB8FD79880E4A11D7103ABD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/libcurl_x86.dll
- Size 2.1MB
- SHA256 635f988beb849c6510f54f681387bf810c2266bd27834c5a9c160cbfe6df44d4
- MD5 a26e75c0407c87786eea42febdb32532
- SHA1 27e52fdca023cb8f031cd55ac37965d93f7f7da7
- SHA512 fdd9760442579ad2a3df4f31464f9e66bc19a4390fa1c81afb516cce817097b5324024f712d9c1bf1a11ad30324f5a8aa83c72a732e1197e8804ab806d3859e6
- SSDEEP 49152:nGUR9r6hl8IXBPZ68L20v/SU8Y7NriOPquwgtJIpT:nGUR9r6b8IbBLjv/SUp7NriSg
- TLSH T1F0A5AE02FB8185B2E6DB427862FA677F8E3A55205328C9D3C79138749D201D2773E79E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PROGRAMFILES64/2345Soft/2345Preview/Application/$R1/libcurl_x86.dll
- Size 2.1MB
- SHA256 635f988beb849c6510f54f681387bf810c2266bd27834c5a9c160cbfe6df44d4
- MD5 a26e75c0407c87786eea42febdb32532
- SHA1 27e52fdca023cb8f031cd55ac37965d93f7f7da7
- SHA512 fdd9760442579ad2a3df4f31464f9e66bc19a4390fa1c81afb516cce817097b5324024f712d9c1bf1a11ad30324f5a8aa83c72a732e1197e8804ab806d3859e6
- SSDEEP 49152:nGUR9r6hl8IXBPZ68L20v/SU8Y7NriOPquwgtJIpT:nGUR9r6b8IbBLjv/SUp7NriSg
- TLSH T1F0A5AE02FB8185B2E6DB427862FA677F8E3A55205328C9D3C79138749D201D2773E79E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $_49_/2345PicDumper.exe
- Size 704KB
- SHA256 2abc36a0e106c82e7215ccf3f65c63bbb0e80212877ad4a81f93b865c41b4076
- MD5 1a4f9607943e0ef94f4eda86373dd995
- SHA1 67a475d1218e60ab8c0f41733225aa04bf511e20
- SHA512 ab43b55d0b44ca631c9332eb39a59bfac96d170bedb2dc26377883f3071d96a927f9fee0187c25c9498175d652451f831e7892fff45c0c6a85e6b3ec847d75d5
- SSDEEP 12288:hv1Eu+ggYIqBlmSthHEJfOBYz7xGRDW8nlFKp/6sSTCN6jG0eT4whvm6:hKuCBOlrhHEyRD1+STCNdjT4wM6
- TLSH T180E47C207592C17BD6B201B119BCCA6B406BBA250F6548DBB3C81B3E5A742D25F32F77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $_49_/2345PicHelper.exe
- Size 606KB
- SHA256 716b7d7cc05ec788a8ede36a3e9fe4fba86cb41c5993153e9a26a3a30017257e
- MD5 4127a06ac686e8b0e19a27ffd04bf220
- SHA1 7bd447ee05fc13bd863913dd868bb63a7e52506e
- SHA512 4d51471fcb2ac0fea1c0b5da694c458ac6de0da1b67a4ba0470b7b27d43d5cd40a362b1a8b5696cc74db50860172f4a729c4b8b214b5a1677f37cf86c5069ffa
- SSDEEP 12288:9znxncwgC2hxziDJK9eG9HXzsa/TR8J1in1:kwgDhxzv9H/TR8J1in1
- TLSH T115D40720759AC23AD67195F00A7E8E9A906EBD2C5F710DCB97C00F3A5474ED31A36E72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $_49_/2345PicLoader.exe
- Size 1.9MB
- SHA256 9ba26ac4eddb40f764630a50a2c8d60074c1b162c95bdb348364358770526a9d
- MD5 8df6f9dce55f5f881a64afa7908191db
- SHA1 8e7371dae9edb6f70018510f322391d6d746d7bb
- SHA512 a7a29fd2a8fb1a672167d4159b8f5c6632b895d335fb74b4cd0204bc4ff775696f0cfae9b7dea676e61e103fafe50442d78c6acfd23057f2a1e4a0842f0c25f2
- SSDEEP 24576:lGMmzNTieKx5dLcdOGfMiz34XJiTG9WuvxKPdeurQPqj0CrmI5caucmTEUVOtE95:lizZnKx5cUXFvxSdeRPVCzEfTlVL95
- TLSH T129955C20B346C337E59201B0166D8E6F8059B9311BA5E4C7F3C95F2E69E0DD39A36E27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $_49_/2345PicTool.exe
- Size 900KB
- SHA256 081ac4253e3eab5689bd78971339d3924891b2369996408f428e26b5bc70b8b7
- MD5 e038d4274dcc1e412609edae4002b078
- SHA1 308e08c663436e3a6071366bf954208e22e5f8d9
- SHA512 a0544a89d5ded39565b2b71e7b7667a570447f85a8dec3d2db2bbf392a81874f6383d7a220ac26634ee7a2adc410c0dac7285604b3bd9dc0405aeeca2ace80d1
- SSDEEP 12288:TVykioewjSXae4a37TYItcHn83s/9KeKKG/JcP4XDsacBT1guOkJS:TVKDQc3caszG/JJTcT1gOS
- TLSH T111155C217656C537D56205B01A2CCABA506DBE380FB18CDBA3C81F3E55B09D36A36E37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $_49_/2345PicUpdate.exe
- Size 1.6MB
- SHA256 3a6a8d31b542c3895552332522fcd599bd7ffbf1b29bfb2d510925a3f1eefa44
- MD5 6f94cc2170c96d1d378deb8589480c63
- SHA1 2e9e4d31cc5dd1fcf7941d05192dc3c84d490bd1
- SHA512 e29790ec0fe5dec2505e6e20a8e3ce229e53b8fdea6f7753b56f912573edc095e833f4e7b3d768dec54f025878ef5e36a52da46d75a925f280dc25615945ac7c
- SSDEEP 24576:IR+rDvrYfmBpbpCoUx+8J1iRxqaQkN9aCzI6EIwms+VIvZyTAziuBOXofr:rvlRUx+8J1iRxVSCM6nxIvQTSiDXoT
- TLSH T13F851821B586C337D56111F05A6D9E6B90987D286FB058CBF3C40F3AA4B0ED36936E27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $_49_/2345PicWorker.exe
- Size 1.5MB
- SHA256 dd067d6287897e51fd25662ca07e04df0f91b9d0b4c80b258363f68ad89556cd
- MD5 a9774885aa09becc47e519611095f160
- SHA1 ec17f9cb43dc5afcd75ee670c751238934acef2e
- SHA512 d4aac0fa6654d5dfda75e807fc251c9695c493bf6a72746e0a52661e6a6cab4bb63bbd1038a535f9d5df0e212b58a80cb4699f5d68f876771a6c739167938166
- SSDEEP 24576:9zlDdouZ4ONT70t/bMRFe5n/JMLVYZiRdYycq50TO0UY2n:/douZ38b1LIYHU0TlUB
- TLSH T12A755D217645CB2BE65205B0576C8EAF911879311BA15CC7F3C80F2A24F4DD3AA36F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $_49_/libcurl_x86.dll
- Size 2.1MB
- SHA256 635f988beb849c6510f54f681387bf810c2266bd27834c5a9c160cbfe6df44d4
- MD5 a26e75c0407c87786eea42febdb32532
- SHA1 27e52fdca023cb8f031cd55ac37965d93f7f7da7
- SHA512 fdd9760442579ad2a3df4f31464f9e66bc19a4390fa1c81afb516cce817097b5324024f712d9c1bf1a11ad30324f5a8aa83c72a732e1197e8804ab806d3859e6
- SSDEEP 49152:nGUR9r6hl8IXBPZ68L20v/SU8Y7NriOPquwgtJIpT:nGUR9r6b8IbBLjv/SUp7NriSg
- TLSH T1F0A5AE02FB8185B2E6DB427862FA677F8E3A55205328C9D3C79138749D201D2773E79E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 2345Login.exe
- Size 7.6MB
- SHA256 9ebce1e69ef4a56bebd24730d306dec8a84fa6505d82245007e351fb3dad1f2a
- MD5 dae1845955b281d109e3efed1167ab56
- SHA1 982d003df0816a1e01f54d5ca92df54c76befe91
- SHA512 be6c5e2997e1ec663cb250d77f9d921b5765b49a47d4793a92b59b0eaba9468752007a482d1baa6d5f21c336a25994568f10314b5083a6e0af36059c632b2e58
- SSDEEP 196608:FTH7qbgWPOEoqbtmGDooe913QGytmQ5jy:dkPyakGDooe913Qna
- TLSH T13586F110EA41C237E56240B0567E5E6A90297E352B6498C7B3C43F2E66B1FE37D32E17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target 2345PdfEditor.exe
- Size 697KB
- SHA256 7e4c2e27c676c704f1d9da904a8c1beff02bbd7fdb1a7c2ee226217283c7108f
- MD5 16cf022158101395462a8af9f0ddf91b
- SHA1 c9b75a072bfe4f049d890f48778e1c0c30fb0f8a
- SHA512 e5cceadf7a7bc126a1380bd950ba89871e76463d6f8110c43d924cd0c41bf8b4b7d4180d98847bfe3087251e8ea845bb7b7b39f1e6fd0532112e0ea0984e8c06
- SSDEEP 12288:TbBW3KsKSR/RlBJpM7uq1cdNgPAS5ixTCI6i:nBWgSR/vBJqubg4iUH6i
- TLSH T17AE4AE21B891A3B1C9A94931E56ADFB1492B2C2B477007C767D5BF223FF05E35A36831
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10