Overview
overview
3Static
static
3DragonSwor...er.exe
windows10-2004-x64
3DragonSwor...er.exe
windows11-ltsc_2024-x64
3payload\Dr...ar.exe
windows10-2004-x64
1payload\Dr...ar.exe
windows11-ltsc_2024-x64
1payload\Dr...er.dll
windows10-2004-x64
1payload\Dr...er.dll
windows11-ltsc_2024-x64
1tools\ooz.exe
windows10-2004-x64
1tools\ooz.exe
windows11-ltsc_2024-x64
1General
- Target DragonSwordTreasureRadar.zip
- Size 1.2MB
- Sample260729-29bqyahn2s
- SHA256 ea5d4af3e0a5e0b605748f090860e49d2b12512fde1c4606e52a08701753a724
- MD5 2689c9a6b37d0af0f7bc7a2783382988
- SHA1 95a7fd51fe0af540677146904b063d1a40cf854a
- SHA512 9a8fa8b737f2ae1330a4dc4e20e145ac4275101132953bf21425d20a69633461804d90c198dfa3ab8080cd10649f3448b1d35e200d0a1449203052aa618d6049
- SSDEEP 24576:siMp4fSzOeH0hRyupDHnAv+vLl+Og1mxx3FiYrQn9Y:mpRzOeH0Hy6DHAmvL4RO5o9Y
- TLSH T1AD5533A9930F8B1BD89962701F760C8ADF67D92DDD04FE6694A5D5F138B0871B0A2C33
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
DragonSwordTreasureRadarInstaller.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
DragonSwordTreasureRadarInstaller.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
payload\DragonSwordTreasureMap\DragonSwordTreasureRadar.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
payload\DragonSwordTreasureMap\DragonSwordTreasureRadar.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
payload\DragonSwordTreasureMap\e_sqlcipher.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
payload\DragonSwordTreasureMap\e_sqlcipher.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
tools\ooz.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
tools\ooz.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target DragonSwordTreasureRadarInstaller.exe
- Size 29KB
- SHA256 dc305993d2a9252c742d9962b96cab8e928f30e7a9943f35973811089a98022f
- MD5 86603d85de33981f83fa6f6dbaf8a38b
- SHA1 1aec3b434d064e1acc3aa8d96f8cc8922dfdedfa
- SHA512 06b99585895c5d41d77533650ec45c49bc6ffe89844d1f9b99adff20e2266bfc8bc050d0008c5a804e61da6013a72f3081867f868a7871dc235bb80b6c1c02a0
- SSDEEP 384:jceXlVzbiI28R9pr96BubwAB4dDrHO21jDYYD1+vCzGbSYUdCpMWj/UkQSfeTTz6:4eVV52ewBubRBAFFYJn0wv2FAh
- TLSH T17ED2A5466BECB315E1FF7BBCA9B141440273F966AC31D39F198811991E32B5089A3763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target payload\DragonSwordTreasureMap\DragonSwordTreasureRadar.exe
- Size 29KB
- SHA256 1be4b153011eefbd6dc8bfc7b47b297d9b7d5697d2ebea57066cf0234b0ccf1a
- MD5 e7bbd1c17531f28ed6678b91e7f8dac5
- SHA1 bb690abfb450455de459a7c1c221c15e96a9960a
- SHA512 d411e61e89dd991bd0d1b0a1bb9cc4b2c0a56bb2b781d33c6b6e964fb5edb94bbcd00af9a62bd49eb28342e092d21988f88513e721f457a31f4bbf9a63781524
- SSDEEP 384:sEx2PdqMLlbJO1IUuPsAQxo9I6yeOPYpAF2eQhb7KJeTndsHCwGjV5Ouwg:pq0IJTJ0zp3eOPYu0RwIVP5
- TLSH T1EAD22A4227DC4259E2FF1EB998B2024007B1B6D75C23D74D49C9B5AF1EA37908E623E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target payload\DragonSwordTreasureMap\e_sqlcipher.dll
- Size 1.8MB
- SHA256 32aded22e9cbac44ad95fe3d2a1e113be5da4a1a81b65d76ece25762b1bca196
- MD5 3efbad02a708c574e2129f18c583b436
- SHA1 f998d070f3f479e51422a944b80f71f25ae27848
- SHA512 d547c8a96e7a04de0d10aa62af035241e3d8bafbbe6db1ee04cde2be3b00513da1efafda3a21b28ee10e6544c42875c9eebe89dbca2be230fb752eb1baddbd3d
- SSDEEP 24576:+vKRx/vwkwBaPd71Oy+jTr0vsJhXVu6fITQvipJUasZBGoYsXCEwn:+6N+a1O3BJrATci438sfw
- TLSH T158857D0BB3B900ACD9A782B8C517570BDBF1B4151764ABDB15908A652F23FF61E7A330
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target tools\ooz.exe
- Size 622KB
- SHA256 520e3596e50859194e1fcbf9cfda09ea0e33a70e2793be277f0a0070bd22dc8c
- MD5 9ae4b1a243307cf0afaed249162ea180
- SHA1 aeb0998fb4cb9b57ab2d8b7ab9665f237eaed3f5
- SHA512 4a8ad874005535ce667800d870c570f671947bce051827149fb7aa698464891b3e00bdf5cfd4fd4063d3cd636fb0853e48a46407b839269ab998f2c0ff7a3d97
- SSDEEP 6144:tGFga3ivzgJgrD/Xo3v9Q5s9GB3un43xIUVHf0S/ID+FNM7HI27+Q6/XFynEx7Cg:tt2GB3uw4/ZErlMYm7Gks
- TLSH T173D42B46B3A89DEADC22613855CFA30D6635BCF0035396C7A32112226E47BE8DD6FF15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10