Overview
overview
7Static
static
7$PLUGINSDI...xe.xml
windows10-2004-x64
3$PLUGINSDI...xe.xml
windows11-ltsc_2024-x64
1$PLUGINSDI...s.json
windows10-2004-x64
3$PLUGINSDI...s.json
windows11-ltsc_2024-x64
3$PLUGINSDI...s.json
windows10-2004-x64
3$PLUGINSDI...s.json
windows11-ltsc_2024-x64
3$PLUGINSDI...s.json
windows10-2004-x64
3$PLUGINSDI...s.json
windows11-ltsc_2024-x64
3$PLUGINSDI...s.json
windows10-2004-x64
3$PLUGINSDI...s.json
windows11-ltsc_2024-x64
3$PLUGINSDI...s.json
windows10-2004-x64
3$PLUGINSDI...s.json
windows11-ltsc_2024-x64
3$PLUGINSDI...s.json
windows10-2004-x64
3$PLUGINSDI...s.json
windows11-ltsc_2024-x64
3$PLUGINSDI...s.json
windows10-2004-x64
3$PLUGINSDI...s.json
windows11-ltsc_2024-x64
3$PLUGINSDI...s.json
windows10-2004-x64
3$PLUGINSDI...s.json
windows11-ltsc_2024-x64
3$PLUGINSDI...s.json
windows10-2004-x64
3$PLUGINSDI...s.json
windows11-ltsc_2024-x64
3$PLUGINSDI...s.json
windows10-2004-x64
3$PLUGINSDI...s.json
windows11-ltsc_2024-x64
3$PLUGINSDI...s.json
windows10-2004-x64
3$PLUGINSDI...s.json
windows11-ltsc_2024-x64
3$PLUGINSDI...s.json
windows10-2004-x64
3$PLUGINSDI...s.json
windows11-ltsc_2024-x64
3$PLUGINSDI...s.json
windows10-2004-x64
3$PLUGINSDI...s.json
windows11-ltsc_2024-x64
3$PLUGINSDI...s.json
windows10-2004-x64
3$PLUGINSDI...s.json
windows11-ltsc_2024-x64
3$PLUGINSDI...ar.eot
windows10-2004-x64
3$PLUGINSDI...ar.eot
windows11-ltsc_2024-x64
3General
- Target CurseForge - Installer.exe
- Size 2.9MB
- Sample260728-x63m2abe23
- SHA256 b7d4d8d6cb4cea3f040c18707726a785e574ead294da5225c553879449ea9193
- MD5 6f7325dd02cfb884b054263c0dc0e1c2
- SHA1 4c4bd1e4c6fbc916bacd9c96eead844e9a09d062
- SHA512 da76d76977d426fe4e17a4274dcc066717cbee58593b1862502074744bc0a03788a4fb2ed69c3a6307f562901e271968f23f8f36a1a2931367126da7222e083a
- SSDEEP 49152:PecxE87vxpsrFpIvQ4kvoHch90kbsheYxXbGIw3UhsooAFhR8MEYHzcYq3V:PvPN+TIvrWccY8KFxbGrkhsbc8MEYT+
- TLSH T192D53332C27F916EDB13C57139B485AAD1A6CF1622374FAEF398AC502465E83B34C439
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
$PLUGINSDIR/OWInstaller.exe.xml
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/OWInstaller.exe.xml
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/app/_locales/de/messages.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/app/_locales/de/messages.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/app/_locales/en/messages.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/app/_locales/en/messages.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/app/_locales/es/messages.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/app/_locales/es/messages.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/app/_locales/fr/messages.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/app/_locales/fr/messages.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/app/_locales/it/messages.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/app/_locales/it/messages.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/app/_locales/ja/messages.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/app/_locales/ja/messages.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/app/_locales/ko/messages.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/app/_locales/ko/messages.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/app/_locales/pl/messages.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/app/_locales/pl/messages.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/app/_locales/pt/messages.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/app/_locales/pt/messages.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/app/_locales/ru/messages.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/app/_locales/ru/messages.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/app/_locales/tr/messages.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/app/_locales/tr/messages.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/app/_locales/vi/messages.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/app/_locales/vi/messages.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/app/_locales/zh-tw/messages.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/app/_locales/zh-tw/messages.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/app/_locales/zh/messages.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/app/_locales/zh/messages.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/app/assets/fonts/lato/LatoLatin-Regular.eot
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/app/assets/fonts/lato/LatoLatin-Regular.eot
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target $PLUGINSDIR/OWInstaller.exe.config
- Size 632B
- SHA256 272e4c5364193e73633caa3793e07509a349b79314ea01808b24fdb12c51b827
- MD5 82d22e4e19e27e306317513b9bfa70ff
- SHA1 ff3c7dd06b7fff9c12b1beaf0ca32517710ac161
- SHA512 b0fb708f6bcab923f5b381b7f03b3220793eff69559e895d7cf0e33781358ec2159f9c8276bf8ba81302feda8721327d43607868de5caaa9015d7bb82060a0b9
- TLSH T1F9F0E11048C4FF268F3185A33B774814EF3883B7108C091C705E39AB0B271964317233
- MD5 SHA1 SHA512 TLSH
-
- Target $PLUGINSDIR/app/_locales/de/messages.json
- Size 12KB
- SHA256 2fadb00ad366f03c039e9b4f3943a268aa08b52da301817d977cae9a3b1db337
- MD5 01d6d6ffec6df04d9aa20db38f8fff37
- SHA1 bbcc61624b83278fd51dfd1efe2dab4848cc5c4a
- SHA512 41bd55e34c95b00a762a60c5931c3cfbfd462a9082fced376327cbfc0a7182290a10b33b158732a9a4a3db28dd20a9af9a834fe8aa8112b2f5efedf094169c8b
- SSDEEP 192:RAJZco4VLBeZo9NizhochYRl173tFUWIh239gdzu:bRSYd7V6a
- TLSH T13B427D01DCF1AE3B01BA43293C67A605B362576F1060681F7AF9504D0B62DF3D9EBB99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/_locales/en/messages.json
- Size 11KB
- SHA256 5c2fba2311105df5c8509ce61968e5f8fd8de607f52221e45c291d2de8411b3d
- MD5 51a8fce92482f5024a70822d00ccda1c
- SHA1 60d0e57bec8dd7c2778cb9ea0738aac7cf0f3452
- SHA512 99890d40e615239029dd461bea44db583bcf8bfc7597de70fedb46bec6762ad166bc96e415183041dc3867a085588b282a22fdb752b72387cddbcd872436ba18
- SSDEEP 192:+ANFsiqgFAy3IpCGtkb9yBj6j/pPPaqpMPy:2gFACIpCY29U0PSPy
- TLSH T17D424A09DDA1AE3B06B643293CA77615B362176F11505C1F3AF9104C0BA2EB3D9F7B89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/_locales/es/messages.json
- Size 12KB
- SHA256 4af1ad22fdb9c4ca3b2e5d7ad0152fe1133501408b75a22e4540de91b8c8066c
- MD5 b8e35320edf365e901070e7f128f3846
- SHA1 a91976704b4cc6d699a2e3019ce9aa63f6080290
- SHA512 5556069bc1a9aaaef6720299b1146f9ea0068ae888e290248a1485768912864f4e36816eb6a37249f502e5d5a3250dcc0835625e03c7c2d1d6ee8cb23c616e16
- SSDEEP 96:TSmHNbp4V9NzWuWGswh6VJJt9AS2xzwO/enB80IKsw8Ao6bdgOMC+lSzJZreOz2:dHN25z9u/d2T/eBAKsibP+8zJZFz2
- TLSH T1E9426901CDE56E2B16B743693CA7A216F3A1075F2010980F7AF9154C0BA2DE7D8F7B99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/_locales/fr/messages.json
- Size 12KB
- SHA256 cda2fdf66408fcc0572086dbd1d4ad849a0f1fc8d106b7dd321f4e0ffeb715d5
- MD5 ae00b07fb78dd6c0a0288dee9889c51b
- SHA1 7e7ae729c2695cdc0cbebed7961fd8b572e846ee
- SHA512 eeb78c7d3c8a497bb4812fd4f6410bf71820fc5d997ce635fad31dab557935f8141e804c6980ee892f704f43ff72db1bfd2e4c59f1793531f8c113836b36ed5e
- SSDEEP 192:9euPfuQtnqnfmdIkT3KpGvzjjX6+R/QBOOWmW:yYufmdIkT3qGvzjPQBOOQ
- TLSH T13E42BC4BFDE1AA9F06CB43273E33F26A5571439CE104983D7E99280C02C9DF6A997791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/_locales/it/messages.json
- Size 12KB
- SHA256 43b4dbf9eadbfd67f15a4274eb879263fc0ee33b2373c0e494cc51f5f535e15e
- MD5 fb7fb01a3394f202856ee3bfb517cb85
- SHA1 dbbf1c3154c05c6b621141974f80406724c0961c
- SHA512 f67d4271c5a4678c064dec4433259dfa55e7aa55f58b3c60a75da549a7c1a4e89112ee72e1fceb14eb64505f6c476efda6dad0d343e9934c0d937fe784bc361f
- SSDEEP 192:jp7a5KqWPVRImAOoaODwcambEbpuFOratb3KJ:5qWPVVSDuMEV4Oob6J
- TLSH T162424915DCF16D3B15B643693C677609F3721B6F2010681B3AFA114C1BA2DA3E8E7B89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/_locales/ja/messages.json
- Size 13KB
- SHA256 6eef2f8eeb3162fa9c84aad624f84fb49560a03831beb2a452351e43f09290f4
- MD5 e67d80fd6575f9baa639f30b02c5e381
- SHA1 05b5362e86c278050b4e3f71e129b4bd501fed85
- SHA512 1d87edfa2462faf28ec539e16c3df3cd0cd7b5e4d07ae8a0b6309452bb1914a457e58790fc528673bed51d47727eac94bd547bbd98d01490f8c8b1c450a4cac1
- SSDEEP 96:vbt9L0Fvmq0cn9alw2Vx5AkA0h31GYzPxs0q0yVeMyHIf3X24fvcWd7GxQpLCZNZ:bqElwOuEQq/Dc124f0GjIlITc
- TLSH T13752790CDDE16D2B05B642363C5A7345B2624F5FE460282B36BD904C1B61DEFD8E6BB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/_locales/ko/messages.json
- Size 12KB
- SHA256 1c3d772dffd9f5aee2caf1f4cc41eaa047718a1e3b1a001eea682c6b2d671f62
- MD5 1d0c0d1d0e0db8d11d9638fcadf40eda
- SHA1 1cfb61812066014a667f93adad4da97753fa6cf9
- SHA512 2f76efdd17ed44e99dbfe7c848c383629466f6135fc707440be72adc902c5d9211129364f72863ea04adbef22930ee2042854ecc17c7d4dc04b879ec55454b6b
- SSDEEP 96:20Lnmlou+29abFqYDrhg8Ude48y4gVHWS9wLBKgi2ikhoglwQxDj/b5d:206aPz34fwI2ikhnjTb5d
- TLSH T14842AE41DCE26E6B02B682153DF6B204B3A1576F2211181F7EF9594C0B619F3CCE6FA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/_locales/pl/messages.json
- Size 12KB
- SHA256 5a72ea2093b78802d0086606174afa66ed574ac6c8ea888f851a0797a5c1179d
- MD5 727f8ef308ab15eb134a50f12796bebc
- SHA1 fd51735305ace46fec9b2f2b13e46f63735af7bc
- SHA512 77063242f996d4171be1cea00a256031e2bbfad1f2b0da45e750a931cfe3f2e9dee3469e307da64deb6586c3b60f2e59eb623eadb0be8ebfd830e16bf6f39149
- SSDEEP 192:JkokRd0l5MtqydKTFabPUhyj9194AI/5x+KunXuU1X:OzdKpaLUhyFtI/5AKmuUZ
- TLSH T112424B05DCE16D2B06BA82293CA77605F3A6076F50505C1F3AFA154C0BA29F3DDF6B89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/_locales/pt/messages.json
- Size 12KB
- SHA256 5091f122e60714f35dbcbb37f983af2fafbd52fe404c77aa78e69abdce1a0c45
- MD5 00df432fac4927e42d6d094d7cfb8ae0
- SHA1 a9fbc71223134270033bb24d3454229af9b497b1
- SHA512 4e17f63d6d5a416eda8a53c5e90e45b657edf5ebc8d4aed37e3b3ffcf4beb26568ad6a45af703fb56229afc5918785e301196be55a54cdf8e2e9738e5a4b6039
- SSDEEP 192:PdZpgbn/T9l7vEd1ltT0j8fbt+DBFIdfY:Pdc/T9lLwXtT0QZ+NFI2
- TLSH T10A425815DCE16E2B167A43693DA76706F361075F20109C1F3AFA164C0BA2DE3D8E7B89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/_locales/ru/messages.json
- Size 15KB
- SHA256 fd4545ae7c47a6e807bc74bf0e3579811ddf9b14fab4e4743205afa2eaa1682e
- MD5 d4915408dd2f7596a51cfe8b42f28735
- SHA1 c2fed4ca228073de14acc028f4c59730f67870b9
- SHA512 7ef043ef009d836f237f00804d80125a622cf9a0ad2c514ca04abb2e2476ddd5a8c64c2db9a15eae79130d521c03a8697fffec82e3e0fd3e2fa1cde59b55ddfa
- SSDEEP 192:hxopOFKQb8f0mv5sNwLToezIF97/Yz6eOicV7FKe:hMQb81v5O8tzdJ64e
- TLSH T14A62BE11CCE56C7F0176922AEC15BB0976E607BF36205A1B39B03C5D27F29B2C5B6B48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/_locales/tr/messages.json
- Size 12KB
- SHA256 557ad0a237f2a0e65468a00259bdf185540909dd6c21caf4ec01e61679e48e84
- MD5 bf0b3290d7b2589d9c508a17c5244a9b
- SHA1 31f6aac4ac49dcba742621d7111e621004d46ba0
- SHA512 555db28e912f7a1eb0bdc77f2ec120012fde3775c9811cc4be22af0909d25c1f61c9338062f3a84fa208989a7aa108866c92a06962c7a36d42ae1caae857fd47
- SSDEEP 96:/o9oJmTNCu69YKLtuQb34bJthPjSDID6v+iVcMgJVvBP4E0sauEWaxpX5A3XKC:YT5KAQr49SDIuHgJV1KHFXgXKC
- TLSH T1B3425E01DCF56D3F02BA43667DA66605F2A21B5F1120AC0F3EF5155D0BA2AF3D8E6B48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/_locales/vi/messages.json
- Size 13KB
- SHA256 b01e8e59c4590ccaeadfbffcf5b042fa857eff1f8bbdf9858091523122b06638
- MD5 a794a3b13aca25db94a6f53843adb370
- SHA1 bd439ca29d0b3255f00757d4406056c0b40ec3bb
- SHA512 778ddf3a750bf7dae8dc1b371c39a9a73b8536f86b237505556cc52f22941c6138f285e110a5e9050ddb73f7c756f23158e38d0f7a9bb2a4b63c6282b77bc4af
- SSDEEP 192:vDA6IMxCb6kSKrk03+4Q8W8pQfZlraoBMJ2sf55qlQ:vLxCb6kSKrk03c8W8pYLaoxCnuQ
- TLSH T18B528B018CE47D3B01BE43397C6A6609B3E55B5F6190AC1F3AF8155C0BA1DA2DDE2F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/_locales/zh-tw/messages.json
- Size 11KB
- SHA256 477f0b1b154f4bd07cea22b4285167ee5985b3dcc7285341f738c8eae5662138
- MD5 348051345b75fa1f8d49015ca5b5302f
- SHA1 5854388eca2bc878218c8c7e62045c3e19cc9487
- SHA512 facf58a22085ea6cce5fc98d1c2501dc97db52f3d76d610737bba0ddcbdee35ac31bc4d8011f6457bf1d07b55109494e8d25e0b936b6b25a38eaea3597bf8ef4
- SSDEEP 96:IDHmAvreV9Hi0Q/fg1ePhnmU2KckmRbbDHukFDRnk0gsmZ5B2:PAaji0Q4M2Kc1RvbvFNk0gJH2
- TLSH T1D4324805DCB16E3F02BA42693D666205B2711B5F1060AC5F3EF5654C0B62EF3E9E2B89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/_locales/zh/messages.json
- Size 11KB
- SHA256 882d4b1976dd5da8cf82700f0eaabe8a7197358bff20ce5b8f78e6c8454f7d05
- MD5 ada2db2ff9691b5cea7072f674417a8e
- SHA1 32a579feeff4948dd90a79763c9ef22210953200
- SHA512 28bdfb16f22cac5ca226a1d80f9582b3bb6ccd39798fb168613538e3fd0a3543bef2becdf136125b229ca06d73a912bacf08ce2ce2601de9a7b24ece5c6481b5
- SSDEEP 96:Z3mAoD6V9yJxLljPmghdDPfcIfb39bC4toTbYFbLxPf1R0:EAv23JL/fcGTM4toMPb0
- TLSH T145324605DCF1AE3B02BA42293D6A7209B271175F2150AC5F3AB5154C1BA1DF3D9E2B8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/assets/fonts/lato/LatoLatin-Regular.eot
- Size 66KB
- SHA256 c6c970b103b3c3aa83f7a45172619a4451ea5f015f9f3ef4fd08c9a4aa895cbc
- MD5 6cfad5881181ae658a6efdd68889a690
- SHA1 5b54f6ccc20ed3a078fbdf94d7a68ac80002624d
- SHA512 ddd3d43540eb3d4eef48d0834136de1e7bf23a52f286d0a666cf57c7d685aadf1cea6d37c88f9d7ce5ad6143d7c3213f54b16a11f616b7dce154bba50997bbe7
- SSDEEP 1536:Y3UqIyK9PLLUbTiyEl4u9Iau0j6aEPmFm/MsE+Eas7AdCtkUq:EUqIyK9T4bTiF99f2PmFm/PpEL7A8tkr
- TLSH T12263F2C483FAE84D52672BBE88055620D51B34557333E8F9FD76892B8C6AF8066E1337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10