Overview
overview
3Static
static
3Cd2Roland.exe
windows10-2004-x64
3Cd2Roland.exe
windows11-ltsc_2024-x64
3ExeStub.exe
windows10-2004-x64
3ExeStub.exe
windows11-ltsc_2024-x64
3RDAC.dll
windows10-2004-x64
3RDAC.dll
windows11-ltsc_2024-x64
3Recover.doc
windows10-2004-x64
1Recover.doc
windows11-ltsc_2024-x64
1VS Wave Export.exe
windows10-2004-x64
3VS Wave Export.exe
windows11-ltsc_2024-x64
3General
- Target VSWE1.24a
- Size 665KB
- Sample260730-g92l5sscpf
- SHA256 c173c447cab5f863445877ed99b69ccfc330fe02c1350c77f8f4bcaa9cec28cd
- MD5 aa81cf18c82736f3ad6344fe87fb3862
- SHA1 c8647aeba979a4efdc3372eb9913006efdd177b6
- SHA512 d8617a7a8d58a7426e8e661070b5e7762ab768dbce97fef2ede873385fa5b6362a7f70c03fe6a3c4d59157593ed69a0e5ff94b52a23b29f107da508cce2eaaf7
- SSDEEP 12288:ov5ydzrQQqn509YIfBqD6QMAVw7A+QtJ75HV00g+buLtNwvuezUKYQkx5dyws:Iuz8QqkYWS+cV6lte8qkjk
- TLSH T15AE42391CCEB7944B618DB98D139DAE11F4731E8008BFA87ED1C86932E0D5D627D2B6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Cd2Roland.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Cd2Roland.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
ExeStub.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
ExeStub.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
RDAC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
RDAC.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Recover.doc
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Recover.doc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
VS Wave Export.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
VS Wave Export.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Cd2Roland.exe
- Size 1.3MB
- SHA256 3acbc210e391a20e7f1bf91a758f2b4dca41f51f58adcbb1da8cae5a4efe9710
- MD5 b6b214e6c90a34824cebfdeeca903b2d
- SHA1 ab9d7532098bcd439d185149793a8c0030a99ad4
- SHA512 b8a0ada700a4ec54674005adad8107e407fc223bfbbc67d198acd369e93c4694f80d9f55b6b0b52a38ed57f02942d50c948cd14d1f524a872b9ae650eb8886dd
- SSDEEP 24576:WZmcMrDyYkfgaud46vUR6W5bGVTZLqh6Q/2:QZud46vClGVTdqh0
- TLSH T1FF5528123BCC1EE5E1B626BA608F20DD63B5BD12475A6F4EEB58EC2A4CC31817275743
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ExeStub.exe
- Size 116KB
- SHA256 5f2ed3d8a2090dcc6f3e35403a0b41fb7405ad1f566a9b468095955d163a66e3
- MD5 84c63ad0553dada18d48c30c509c46f2
- SHA1 6c5813c88592b35b1f86757b22c1a1387463609c
- SHA512 bfcd2c12932acb0915a4f90b513ba618fa914f5a7f9cef44bea42810c15de6e99ddd566e133594bd7093f4d29c352be8fc5b3c18a277156b1451c010e455b238
- SSDEEP 3072:HU0v3mhedAQsRCtDB0SN2zB+RkRepDkgck5:3dAlRCtyRN10
- TLSH T1A2C31A37A2D4A636E24786F90A229798807BB8712CD4D907F7C55D0977B3FC3AA1131B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RDAC.dll
- Size 96KB
- SHA256 f96fda6fb61e46797354cd8e11321713af0eeb09d120c192522040bf4bbca5e9
- MD5 3e7ff8a6f5aaa35e86dac19afdcb7afc
- SHA1 88fbed08e8761941a4680694005c5089f0f62ec9
- SHA512 4ef06b6e876d2dfda8e65bb429edc22fd350e6a054bbe43a9584e2f755c66c563cfff3e5f57be340bd2ca2b389c53ef8a7965bf98559d7c501dab1c6b5a60e47
- SSDEEP 1536:S3/XzYNipEPNS/arbL7a0KZcrHTnn7w2ocI:S3/XzYbsHtZcnJoj
- TLSH T1D4A3211A238A8C2BF950B3774DACEB533A20D7E949B18DCF16916DB4FBDA015905B703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Recover.doc
- Size 1.3MB
- SHA256 ba511df16bd64fc2379188071ca982bddcd43928114808accd2d4da807484666
- MD5 38ede67a9a22062bc08b4da4030d2cf0
- SHA1 7f50df437f2552d85b1e532580df172bb33fd508
- SHA512 407b1fb1cbb75b9e4f1db3a2cbb61e6049f9ac3a1582f1032c6185c283359690e785091976419264022585d081309a4eaa98a045b083d3f9d1f4d6749f9768d2
- SSDEEP 6144:YkZWkX3kKlUJiHMAGdQ0H/aR4u9vRK90oezj2uwz:1tnkKlUJiHMAGdQ0H/aRb9vw9I32uw
- TLSH T1AE55A866EC8D8495C8D02C3CCD4EB39D1C3C6E457825C687AA923F1BF9F1B51D9A2D0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target VS Wave Export.exe
- Size 476KB
- SHA256 fe454b000c46716d7f77bf6364bafda3fd90a9bcdf9d69a4ba9b6299cd553306
- MD5 ad63c553ddd344f30c4aa36033be42e1
- SHA1 e315cd3d35854e34a5cb8be23c7332a49dc7ade6
- SHA512 1a2311590beefe00f5f1051fe8997a249c91af9ed33ee4a1b6f28e9ace56c4af16a4e6942fdab84c542cdb90a9d70818f2d59ab87deffb7cf036ed5f4787f03e
- SSDEEP 12288:1FRX+LhzZTTOkZpwHiyTn5G7H6K/NH16DA3per:LRX+CkZpqiyo7H6KDkAZO
- TLSH T16DA4D533EE5EA8E9E51281706AB1637A20346C353844D947F3819E0DE5727E3E9E472F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10