Overview
overview
7Static
static
3PrintMQCli...re.dll
windows10-2004-x64
1PrintMQCli...re.dll
windows11-ltsc_2024-x64
1PrintMQCli...ry.dll
windows10-2004-x64
3PrintMQCli...ry.dll
windows11-ltsc_2024-x64
3PrintMQCli...pp.exe
windows10-2004-x64
7PrintMQCli...pp.exe
windows11-ltsc_2024-x64
3PrintMQCli...er.exe
windows10-2004-x64
3PrintMQCli...er.exe
windows11-ltsc_2024-x64
3PrintMQCli...ss.exe
windows10-2004-x64
3PrintMQCli...ss.exe
windows11-ltsc_2024-x64
3PrintMQCli...ce.exe
windows10-2004-x64
3PrintMQCli...ce.exe
windows11-ltsc_2024-x64
3PrintMQCli...on.dll
windows10-2004-x64
1PrintMQCli...on.dll
windows11-ltsc_2024-x64
1PrintMQCli...re.dll
windows10-2004-x64
1PrintMQCli...re.dll
windows11-ltsc_2024-x64
1PrintMQCli...ry.dll
windows10-2004-x64
3PrintMQCli...ry.dll
windows11-ltsc_2024-x64
3PrintMQCli...pp.exe
windows10-2004-x64
7PrintMQCli...pp.exe
windows11-ltsc_2024-x64
3PrintMQCli...er.exe
windows10-2004-x64
3PrintMQCli...er.exe
windows11-ltsc_2024-x64
3PrintMQCli...ss.exe
windows10-2004-x64
3PrintMQCli...ss.exe
windows11-ltsc_2024-x64
3PrintMQCli...ce.exe
windows10-2004-x64
3PrintMQCli...ce.exe
windows11-ltsc_2024-x64
3PrintMQCli...on.dll
windows10-2004-x64
1PrintMQCli...on.dll
windows11-ltsc_2024-x64
1PrintMQCli...nt.dll
windows10-2004-x64
1PrintMQCli...nt.dll
windows11-ltsc_2024-x64
1PrintMQCli...se.dll
windows10-2004-x64
1PrintMQCli...se.dll
windows11-ltsc_2024-x64
1General
- Target c80e6dc9568e889ac758d782179f60d2f33c2f963a7ec170cb0165ce82aeca84
- Size 8.1MB
- Sample260729-mcap2sdr7w
- SHA256 c80e6dc9568e889ac758d782179f60d2f33c2f963a7ec170cb0165ce82aeca84
- MD5 b8f390bec13890ed46899f87fab1af80
- SHA1 8b4913f207af6571a1e8fe31b6bf8f28e3bb319d
- SHA512 5ac70053523a317a0ca11a710ddf4ac59eca37fd2cfd3fb26b1f9cb47de71c17f728d41916e0faab8d5e759de4a925127d96cc48a9b3bed90ed5a54afb634b1c
- SSDEEP 196608:WX2mLiIUdfnxV+j1T6P08JAYOBrjvChxN0t1oE:vmERnxV+ZsAtrIxDE
- TLSH T1048633CE0AC2842DD215433514C16DD7347E286A954AE5A9FE335C3B874EAA6E13E0FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
PrintMQClient(202106)/Beflam.Core.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
PrintMQClient(202106)/Beflam.Core.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
PrintMQClient(202106)/Interop.IWshRuntimeLibrary.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
PrintMQClient(202106)/Interop.IWshRuntimeLibrary.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
PrintMQClient(202106)/MQPrintClientApp.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
PrintMQClient(202106)/MQPrintClientApp.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
PrintMQClient(202106)/MQPrintClientManager.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
PrintMQClient(202106)/MQPrintClientManager.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
PrintMQClient(202106)/MQPrintClientProcess.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
PrintMQClient(202106)/MQPrintClientProcess.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
PrintMQClient(202106)/MQPrintClientService.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
PrintMQClient(202106)/MQPrintClientService.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
PrintMQClient(202106)/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
PrintMQClient(202106)/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
PrintMQClient(202106)/Beflam.Core.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
PrintMQClient(202106)/Beflam.Core.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
PrintMQClient(202106)/Interop.IWshRuntimeLibrary.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
PrintMQClient(202106)/Interop.IWshRuntimeLibrary.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
PrintMQClient(202106)/MQPrintClientApp.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
PrintMQClient(202106)/MQPrintClientApp.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
PrintMQClient(202106)/MQPrintClientManager.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
PrintMQClient(202106)/MQPrintClientManager.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
PrintMQClient(202106)/MQPrintClientProcess.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
PrintMQClient(202106)/MQPrintClientProcess.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
PrintMQClient(202106)/MQPrintClientService.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
PrintMQClient(202106)/MQPrintClientService.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
PrintMQClient(202106)/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
PrintMQClient(202106)/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
PrintMQClient(202106)/RabbitMQ.Client.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
PrintMQClient(202106)/RabbitMQ.Client.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
PrintMQClient(202106)/Stimulsoft.Base.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
PrintMQClient(202106)/Stimulsoft.Base.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target PrintMQClient(202106)/Beflam.Core.dll
- Size 2.9MB
- SHA256 e3255a861d2d76f28e63af12a91073c9ebc9af3de1cf9271c9d19004a22150f1
- MD5 4bdb098cb1901ee9b38f9cc596501fc9
- SHA1 80d937c6c4e1f53afd77d7b6804eec105b73fd32
- SHA512 0533222e05b071f7fd3703f401b87adb604623c9e238a6d91482c5eba3d61d73aaa123138f12a5ac6b455ea4f728ef532ccd847a06065a37108b8eda2bb75b00
- SSDEEP 49152:U6iIXKotrFHZsF7yLnA39a0w7g1QCx6wGNZiPj+k0a243aQ4VkOX2q:f3fhF+w7g1xNg4LKl4KNkO
- TLSH T1CCE56C41A291CF2AC7C42E352163462F4A21DC1BF6F3B34B5BED216BB95A3750E143DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target PrintMQClient(202106)/Interop.IWshRuntimeLibrary.dll
- Size 36KB
- SHA256 b801de06f65557c0c82e9f6bdd444e1e09cfd9b46184e224dbc482228e5d027c
- MD5 98038435b01e5e118d8a8e5a8e7f1845
- SHA1 b8bc6a6aed5efa083d0e584f6cbffc034d5bda7b
- SHA512 bdda7e604d524c92e14938a656dd90a5108fa81893912becc0a3373efe0879c12ae78911b6302e837d5d1050d4586cfaedee16c002042d16369eb11eb3664ff4
- SSDEEP 768:gDZfmTXoKYfUkPnBkZlBQQ/SMfzdztuo2z9IkCB1ptcNa:gYHYfvStbfBko2z9ID1oa
- TLSH T109F2A673B774A265DC6227B544B32FA02371D60287A3EFDB847C936A5F072848D91736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PrintMQClient(202106)/MQPrintClientApp.exe
- Size 1.4MB
- SHA256 67e3619843384f1b69f0c9af9f8a212fe19d71be3d3bc2e116d429f866b273c3
- MD5 53f3758e3a20ab278820f36a00036059
- SHA1 ce68851a0d98470b72f77682d131829cbc35fedf
- SHA512 5fb7e5a1c626c1c1c133ca912bd0d8022172646408af82a42cecee44d81bf71cebe23cfa5828d07ba9c00fcf2a2cb03a5b259b1148e02c11d47833c60ddcaeb0
- SSDEEP 6144:1+5yZL5yZLKsVs7oCaxJax0ttrSlONKNANKNZN:+aO27oCaxJax0ttrpM6Mn
- TLSH T165657494B9409486D89A7E33C01785FC1B1B3C56D25160CB7B463BEA3FB8F43693668E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target PrintMQClient(202106)/MQPrintClientManager.exe
- Size 524KB
- SHA256 d0f9b377a0b693598c231d9174cda32226cce0afb4995811a7259302d52eabef
- MD5 b8e8354e94e350addab88f92444dd512
- SHA1 eb202f9c383b7eff66f864e67845bb7a7dce9adc
- SHA512 1837ed7d73e50b0866f4ccdb2e83ba7c087410173ddf469d89d98c2b7baa290c37ab1e43492bbdd18c3d37db5e5f2e8285f70f8c2afe8815155aea73715d3f95
- SSDEEP 12288:w2fhGSGlpFEpppppppdEpppppppDGQJEppppppp:w2fhH2p6pppppppipppppppD3epppppL
- TLSH T101B4F910360A8ED9E828EB799DD6743F06E4BCC96462986F7E913F6E13351D4463F08E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PrintMQClient(202106)/MQPrintClientProcess.exe
- Size 43KB
- SHA256 dfbdfb97da2fd50a30cb71359bdf6c459eaa2f8206c2cf4f07b8072027e80ce6
- MD5 dec4a6d033c8e5ea5e4de0ab13147010
- SHA1 c7dd85a05bb1ccb0b2781f4e5179cfb8786c5505
- SHA512 9a09abb5653b104792d635234e7ac8b530f6a885f4832ef4c43755f06eefb06d1d6c7915ad89917ac5ce7943c31168d447fbaaa60ae6ddad97acf7316e47cf41
- SSDEEP 768:MGgMTkXasHpwo5qzxLP8aK/KRmDXW66gYDhAJcnNiVZo4VgfZwV9K:hgMTkXaskLP8aK/YmDXW66gmIc2tgfZd
- TLSH T104133943B3D88A5AE2EE2BF1197052A043B2F7469A32F71D4DC4A0ED1AB77C04901B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PrintMQClient(202106)/MQPrintClientService.exe
- Size 11KB
- SHA256 bd368f4363b9aebe53eceec550cd6433469df92a1e38b37b6afbf25f869bfefe
- MD5 6c577d1cab26dd412ce8909c3054306d
- SHA1 ad0a318045dba091d6f42f83b9967b36db7c1a28
- SHA512 1fc11dfb30662a511b4bfdad14cc69ec1627078b462e8429dc2ba9eefcbe827eaf067b95bd549938a5fe4f59b2d47850f95f1e6962fe32c66c5b43496cc7ccff
- SSDEEP 192:Tbr6EmqnP2ODuWE+4iIIW1H6kOXPR8nHBLf8ii9WfVVPYrVx:uDqvo+4i3kOPIfVO
- TLSH T19C32FA5253C84376E9E60B73EC3352800BB2EA05456ABF3E75C9A34A4A777450BD2B35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PrintMQClient(202106)/Newtonsoft.Json.dll
- Size 683KB
- SHA256 7f912b28a07c226e0be3acfb2f57f050538aba0100fa1f0bf2c39f1a1f1da814
- MD5 6815034209687816d8cf401877ec8133
- SHA1 1248142eb45eed3beb0d9a2d3b8bed5fe2569b10
- SHA512 3398094ce429ab5dcdecf2ad04803230669bb4accaef7083992e9b87afac55841ba8def2a5168358bd17e60799e55d076b0e5ca44c86b9e6c91150d3dc37c721
- SSDEEP 12288:Lf9WGsSVSM2mxL2nRiOr8gUckc6V/g2GhBzj05cH:7XNL2PVh6B+Bzjmc
- TLSH T138E44A41A7F88F27D19E6379B430890A47F6F80BA2B5EF4F5908E9A91C937508D40B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target PrintMQClient(202106)/Beflam.Core.dll
- Size 2.9MB
- SHA256 e3255a861d2d76f28e63af12a91073c9ebc9af3de1cf9271c9d19004a22150f1
- MD5 4bdb098cb1901ee9b38f9cc596501fc9
- SHA1 80d937c6c4e1f53afd77d7b6804eec105b73fd32
- SHA512 0533222e05b071f7fd3703f401b87adb604623c9e238a6d91482c5eba3d61d73aaa123138f12a5ac6b455ea4f728ef532ccd847a06065a37108b8eda2bb75b00
- SSDEEP 49152:U6iIXKotrFHZsF7yLnA39a0w7g1QCx6wGNZiPj+k0a243aQ4VkOX2q:f3fhF+w7g1xNg4LKl4KNkO
- TLSH T1CCE56C41A291CF2AC7C42E352163462F4A21DC1BF6F3B34B5BED216BB95A3750E143DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target PrintMQClient(202106)/Interop.IWshRuntimeLibrary.dll
- Size 36KB
- SHA256 b801de06f65557c0c82e9f6bdd444e1e09cfd9b46184e224dbc482228e5d027c
- MD5 98038435b01e5e118d8a8e5a8e7f1845
- SHA1 b8bc6a6aed5efa083d0e584f6cbffc034d5bda7b
- SHA512 bdda7e604d524c92e14938a656dd90a5108fa81893912becc0a3373efe0879c12ae78911b6302e837d5d1050d4586cfaedee16c002042d16369eb11eb3664ff4
- SSDEEP 768:gDZfmTXoKYfUkPnBkZlBQQ/SMfzdztuo2z9IkCB1ptcNa:gYHYfvStbfBko2z9ID1oa
- TLSH T109F2A673B774A265DC6227B544B32FA02371D60287A3EFDB847C936A5F072848D91736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PrintMQClient(202106)/MQPrintClientApp.exe
- Size 1.4MB
- SHA256 67e3619843384f1b69f0c9af9f8a212fe19d71be3d3bc2e116d429f866b273c3
- MD5 53f3758e3a20ab278820f36a00036059
- SHA1 ce68851a0d98470b72f77682d131829cbc35fedf
- SHA512 5fb7e5a1c626c1c1c133ca912bd0d8022172646408af82a42cecee44d81bf71cebe23cfa5828d07ba9c00fcf2a2cb03a5b259b1148e02c11d47833c60ddcaeb0
- SSDEEP 6144:1+5yZL5yZLKsVs7oCaxJax0ttrSlONKNANKNZN:+aO27oCaxJax0ttrpM6Mn
- TLSH T165657494B9409486D89A7E33C01785FC1B1B3C56D25160CB7B463BEA3FB8F43693668E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target PrintMQClient(202106)/MQPrintClientManager.exe
- Size 524KB
- SHA256 d0f9b377a0b693598c231d9174cda32226cce0afb4995811a7259302d52eabef
- MD5 b8e8354e94e350addab88f92444dd512
- SHA1 eb202f9c383b7eff66f864e67845bb7a7dce9adc
- SHA512 1837ed7d73e50b0866f4ccdb2e83ba7c087410173ddf469d89d98c2b7baa290c37ab1e43492bbdd18c3d37db5e5f2e8285f70f8c2afe8815155aea73715d3f95
- SSDEEP 12288:w2fhGSGlpFEpppppppdEpppppppDGQJEppppppp:w2fhH2p6pppppppipppppppD3epppppL
- TLSH T101B4F910360A8ED9E828EB799DD6743F06E4BCC96462986F7E913F6E13351D4463F08E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PrintMQClient(202106)/MQPrintClientProcess.exe
- Size 43KB
- SHA256 dfbdfb97da2fd50a30cb71359bdf6c459eaa2f8206c2cf4f07b8072027e80ce6
- MD5 dec4a6d033c8e5ea5e4de0ab13147010
- SHA1 c7dd85a05bb1ccb0b2781f4e5179cfb8786c5505
- SHA512 9a09abb5653b104792d635234e7ac8b530f6a885f4832ef4c43755f06eefb06d1d6c7915ad89917ac5ce7943c31168d447fbaaa60ae6ddad97acf7316e47cf41
- SSDEEP 768:MGgMTkXasHpwo5qzxLP8aK/KRmDXW66gYDhAJcnNiVZo4VgfZwV9K:hgMTkXaskLP8aK/YmDXW66gmIc2tgfZd
- TLSH T104133943B3D88A5AE2EE2BF1197052A043B2F7469A32F71D4DC4A0ED1AB77C04901B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PrintMQClient(202106)/MQPrintClientService.exe
- Size 11KB
- SHA256 bd368f4363b9aebe53eceec550cd6433469df92a1e38b37b6afbf25f869bfefe
- MD5 6c577d1cab26dd412ce8909c3054306d
- SHA1 ad0a318045dba091d6f42f83b9967b36db7c1a28
- SHA512 1fc11dfb30662a511b4bfdad14cc69ec1627078b462e8429dc2ba9eefcbe827eaf067b95bd549938a5fe4f59b2d47850f95f1e6962fe32c66c5b43496cc7ccff
- SSDEEP 192:Tbr6EmqnP2ODuWE+4iIIW1H6kOXPR8nHBLf8ii9WfVVPYrVx:uDqvo+4i3kOPIfVO
- TLSH T19C32FA5253C84376E9E60B73EC3352800BB2EA05456ABF3E75C9A34A4A777450BD2B35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PrintMQClient(202106)/Newtonsoft.Json.dll
- Size 683KB
- SHA256 7f912b28a07c226e0be3acfb2f57f050538aba0100fa1f0bf2c39f1a1f1da814
- MD5 6815034209687816d8cf401877ec8133
- SHA1 1248142eb45eed3beb0d9a2d3b8bed5fe2569b10
- SHA512 3398094ce429ab5dcdecf2ad04803230669bb4accaef7083992e9b87afac55841ba8def2a5168358bd17e60799e55d076b0e5ca44c86b9e6c91150d3dc37c721
- SSDEEP 12288:Lf9WGsSVSM2mxL2nRiOr8gUckc6V/g2GhBzj05cH:7XNL2PVh6B+Bzjmc
- TLSH T138E44A41A7F88F27D19E6379B430890A47F6F80BA2B5EF4F5908E9A91C937508D40B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target PrintMQClient(202106)/RabbitMQ.Client.dll
- Size 275KB
- SHA256 8e7d786ae3a2a8ed01e0ae822e7284121ed792b4600856411146830f059dc169
- MD5 1c26f086db1696ba20eb0ed65a5e8ece
- SHA1 4588fb18963a7da13cb19ce645315d3fd8546057
- SHA512 32ae9f4161459f359b630fd54a988872ea7af13e326a13b8e1da0a4f2b24ee949e70e4b5d58c0d8804e5539ac9efadd8df3313bb461b934928dc6599c7fac17f
- SSDEEP 3072:Olg+x4fv1M25dpjeznj3+bhbpWLu2Ubc7i1j0oKfkmrpT4IC03FCzVMM7Cj/+CC2:OlgH1v2j3+9NpNw+j0zfpkUiXz
- TLSH T105541A4C57E85612F9EE17BEB0A845649778B516940BB71F2F607CE42C33732CC12A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target PrintMQClient(202106)/Stimulsoft.Base.dll
- Size 525KB
- SHA256 34d329238ee2149ee4c31ada124314fd56d91dea078bb81281d16aa42757c461
- MD5 ff05d161ba6dc586ca4d2b9e3e5df2b3
- SHA1 11ffb3e3eb9e1c7a940e8e5900c4cec80076459f
- SHA512 e92cc017adff5a685c7bede319a9606a337918b11ad7ce05dbfad6d9c1ec3c71a185a1b67c30a28df29cfff97259798e42cf188c76de8d03bb68be6f57f450c2
- SSDEEP 12288:HSmOse0L5c5TzMsydiICd65M6gPy9ygaS:HSrsfsTgsydiICd65MjKopS
- TLSH T12DB48C1523C82729C3BF5276F821468AEEB0913793D2976A388581FF1FB274486577E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10