Overview
overview
6Static
static
6PulsePlay.exe
windows10-2004-x64
1PulsePlay.exe
windows11-ltsc_2024-x64
1_internal\...gin.py
windows10-2004-x64
3_internal\...gin.py
windows11-ltsc_2024-x64
3_internal\...ile.py
windows10-2004-x64
3_internal\...ile.py
windows11-ltsc_2024-x64
3_internal\...gin.py
windows10-2004-x64
3_internal\...gin.py
windows11-ltsc_2024-x64
3_internal\...gin.py
windows10-2004-x64
3_internal\...gin.py
windows11-ltsc_2024-x64
3_internal\...gin.py
windows10-2004-x64
3_internal\...gin.py
windows11-ltsc_2024-x64
3_internal\...rIO.py
windows10-2004-x64
3_internal\...rIO.py
windows11-ltsc_2024-x64
3_internal\...gin.py
windows10-2004-x64
3_internal\...gin.py
windows11-ltsc_2024-x64
3_internal\...gin.py
windows10-2004-x64
3_internal\...gin.py
windows11-ltsc_2024-x64
3_internal\...gin.py
windows10-2004-x64
3_internal\...gin.py
windows11-ltsc_2024-x64
3_internal\...gin.py
windows10-2004-x64
3_internal\...gin.py
windows11-ltsc_2024-x64
3_internal\...ags.py
windows10-2004-x64
3_internal\...ags.py
windows11-ltsc_2024-x64
3_internal\...gin.py
windows10-2004-x64
3_internal\...gin.py
windows11-ltsc_2024-x64
3_internal\...gin.py
windows10-2004-x64
3_internal\...gin.py
windows11-ltsc_2024-x64
3_internal\...ile.py
windows10-2004-x64
3_internal\...ile.py
windows11-ltsc_2024-x64
3_internal\...gin.py
windows10-2004-x64
3_internal\...gin.py
windows11-ltsc_2024-x64
3General
- Target PulsePlay-v0.4.0-alpha.4-windows-portable.zip
- Size 24.4MB
- Sample260730-k9wmnseh68
- SHA256 2d61a08dd389d10aebf5ec4417c0ada62b13f61ae24b9b159989959ae6a7e9ce
- MD5 2c44fa7fff433d3908127fa00f51ab09
- SHA1 863d1e2f95e36c0946c77494261c7929da15e311
- SHA512 07ab827cb926a14d9e50ad490ec7448d6b946f8e6e36e50de07db66efb32981cf04aeb2383028831c8a353a6c92f396ee71ef0720a3168d301079f7ff81988ce
- SSDEEP 393216:68fg7F9ZLfCYGEZS0z4Kz8FBwUXFtJKYNekpdzSHaQYwnQllVb8yU5SuXOUGKjKa:68f691CYTEo47AYoVitXbsUueEea
- TLSH T175473366BA8F4415C616B3BC30851E8B9293B13600DEF63D19565FB894D30D8FB4BB8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
PulsePlay.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
PulsePlay.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
_internal\PIL\AvifImagePlugin.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
_internal\PIL\AvifImagePlugin.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
_internal\PIL\BdfFontFile.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
_internal\PIL\BdfFontFile.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
_internal\PIL\BlpImagePlugin.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
_internal\PIL\BlpImagePlugin.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
_internal\PIL\BmpImagePlugin.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
_internal\PIL\BmpImagePlugin.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
_internal\PIL\BufrStubImagePlugin.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
_internal\PIL\BufrStubImagePlugin.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
_internal\PIL\ContainerIO.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
_internal\PIL\ContainerIO.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
_internal\PIL\CurImagePlugin.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
_internal\PIL\CurImagePlugin.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
_internal\PIL\DcxImagePlugin.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
_internal\PIL\DcxImagePlugin.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
_internal\PIL\DdsImagePlugin.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
_internal\PIL\DdsImagePlugin.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
_internal\PIL\EpsImagePlugin.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
_internal\PIL\EpsImagePlugin.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
_internal\PIL\ExifTags.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
_internal\PIL\ExifTags.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
_internal\PIL\FitsImagePlugin.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
_internal\PIL\FitsImagePlugin.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
_internal\PIL\FliImagePlugin.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
_internal\PIL\FliImagePlugin.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
_internal\PIL\FontFile.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
_internal\PIL\FontFile.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
_internal\PIL\FpxImagePlugin.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
_internal\PIL\FpxImagePlugin.py
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target PulsePlay.exe
- Size 4.2MB
- SHA256 ebe5bae1ecd49bc8ad2da836353d4b423e21d6d42a1e88d4d65607d8fe7c3b8b
- MD5 ffcc22bbc353e085d6ddae263de259f9
- SHA1 d2d5305c0a5e9e1bcbd75fca4863cd29011840df
- SHA512 d2e10c88e37531f8e5b09cf62f59790edda4350440261574ae7f84c1f30203ec727e6b6f8e310b8602591182c16754d38173c5f8a0ec02f20f35d884dcea1cbb
- SSDEEP 98304:cGIM9m/id3HlfB+rhZ+bVeHyY4oPgG1Md3jn:9IM9madXFB+Z+heHR4WgG1M
- TLSH T117162358A39118F6F8F3423E85A78454E67678DA0374C5EF0794DB396F332E02A357A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target _internal\PIL\AvifImagePlugin.py
- Size 9KB
- SHA256 80733b71d411630ea63c782333de241a12bd83f0f1cafcd8ccde4516bed4b5a1
- MD5 343de67a1b95e951fb012e5b343176c6
- SHA1 25bdc20c2315e23ab6e7b596fb27ce4ccd317d5d
- SHA512 c60d54030282114532fd14847be1a347b5fcd076115549b196e4d5566a410817aa648fbe02e40f02ce91ef12fa2d6d58d4421f5a3b9dd332f9555fef57ea31ed
- SSDEEP 192:xeMJJ8ibzrX/ywo1ytyR2YkTZuvyz+h/Y6CevEshCj5snHM8o:xjJ8ilkbxCbiCjb
- TLSH T1D41250A78C2B546F4472850D6DEA8892E32D7313AB255B167CBC82143F34595D3F1BAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target _internal\PIL\BdfFontFile.py
- Size 3KB
- SHA256 2c54f5932a79e45789cd0b1fbd64694f2f53009f5485e3fe7bd95e2ddf77cf35
- MD5 927aa89bb34a1b28322117c3478d22ea
- SHA1 656a07210b6be95e729356e200926dc49f1e2935
- SHA512 9bea083b8e82fe4256a813da2504bc5faa19a7fd0e06de6e46775b070a4ea2a553d1a5ea53e515ad9a9e72ed50abf83df2a839763b4e8ef8c38f75d1014f7ebd
- TLSH T148618712DE5B1428CA77458F4B4F8001FB09E6131B6206163EBDD1586F38961C3B1F5C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target _internal\PIL\BlpImagePlugin.py
- Size 16KB
- SHA256 522b1467bdc20f8edfd8b19346573e4df6f10dda93915b72a3b8efe6f6104c17
- MD5 046de73495d0ff0678800b892efda18b
- SHA1 cb7a5c7aa01c0b12bc6c93c20b883b327e546f05
- SHA512 3e5de952391cc9cad2b5f6a86aa316c62bc7199bd46d604eaf201db486c354e14954c974be1cefaa6f8d03d347b8b9454b1be9bc628b18b24fda23498ef1c115
- SSDEEP 192:rxUKYN+C9+r/sND4ci/TYaIFGRWOYZCa9F4NIoCLrerWhjQ3Pa:RYUrkNz+aBeO
- TLSH T1C27297789E369A310676D84D5CADDC0BD3AE2313691C1687383D93382F78264D6B0EED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target _internal\PIL\BmpImagePlugin.py
- Size 19KB
- SHA256 e23760527cf54ebb06b6e56d73be70ff896666c04f55fdd1047bf99434f9da63
- MD5 1131eedbab37fde882a26550f9c462c8
- SHA1 8f9953655bc5b019dc454cdafc68d79f30843ef5
- SHA512 12060e0f13c1b924c3fcfb150b74df27b7375c120c7bfe815f2ae6b0a3abf3e68078a8ba6e2ead6250b85249a9a61a9087316a393ecb67fa4dfbd432ad118249
- SSDEEP 192:Jl7WrE3Slv39l5TACZLLDKWog6QY/MeIa/HYsNI0zZkL/tFt/RsPK9rUGAXax71a:JIr1/Fd4KtUGAXSMlkul
- TLSH T1E89230114E1E285F0177D28F6A9F6802E74A521F16A58707397CE0083F34B96EBADE7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target _internal\PIL\BufrStubImagePlugin.py
- Size 1KB
- SHA256 3b2a82334b9422e153315099108f4fda20377a83785d540f7c57cdb835bfc9e4
- MD5 14d622d1e027fdee005bb566439af140
- SHA1 d5a1e855682cb4c958610362292cbadcb3b897dd
- SHA512 d1e4f1195585632017d43e40466f8cc0f0198fe472aff20f71c806682c31a38e7ea7d833601e86bfc117f2cd9b74a3fdfbbf59b0da0fbf2f516cbfad6975488a
- TLSH T1DD31EDCECE6FE8AA47F1C40A6A9AD414E71643436E2507B0B55D32102F32752D0DD7AD
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target _internal\PIL\ContainerIO.py
- Size 4KB
- SHA256 23ac8efd814412a30a035724804133176aff224e69fc68ccf91ad63896234a56
- MD5 f3e6f7367e3cff511ab42f67a675e5b1
- SHA1 d2e27aca2c043933f0343c7ab9970d88d20dbed3
- SHA512 bdc71a4398aa21f437bf37bf65f1481887d5cea8f48ee93685f1cf5dcb7bdd1ef0a8206a4902cf9b0987c6a0cf9612658014df38b84320b67409ed6d2f20c5ec
- SSDEEP 96:RjRRW/STB4R5DQNEICNQIjkIb8ulvkSNP4dBI:TEiNYN56ulvzNym
- TLSH T1AFA11E47DE6B9A678336C02F5A62F017F31856572A4D9012B8BCA0743F7A82AD1F0DDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target _internal\PIL\CurImagePlugin.py
- Size 2KB
- SHA256 3aab7fa3ba3b1d758a01e368073544be1c4a14cbf75b751cf390a73a842e8612
- MD5 19350dc722cd7e9e16a0ff9416e491f5
- SHA1 e48d561cc064d23146bf95367bf2934000754ea1
- SHA512 9e80c97db63c7d1c438cb1056ea855645890a0d2b6797104698f00ff10ba4063a99644675ce91e6baa44abc65c3c92d2bd2f4b89d485932a44b09313c5ab912e
- TLSH T12B51DDB24E362D1643B7CC0F6AD9A42BF70B96435B6D0B12357C12012F3468286ADFF9
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target _internal\PIL\DcxImagePlugin.py
- Size 2KB
- SHA256 2f6d5cde0557e883e6938cee7ff96db779807917dcb8209c5e1902569b9e7765
- MD5 7a5eda22a6ae6fd537d54f5f6aabb5f8
- SHA1 2c093763dfc03abc714ee689fceb71c88ffe63fc
- SHA512 dd07a1eb321acf9fa27d7bc6e1b015425008c10bf63a11d66c5d9cabad647aeba032ebc105533759d0df980bf73d4fcd15e600f7fb4f3d7c58ea92e04ed652ef
- TLSH T1654132D38F6B231255B3C00E169AF11BF66B92076B29630675BC51553F30A91C980FDD
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target _internal\PIL\DdsImagePlugin.py
- Size 19KB
- SHA256 eae2016bb3476be917ff549086c18b89d8e911d0f6d3f0900486a90fe2808cac
- MD5 eb42b6c25afac76795b909ba51d4dd75
- SHA1 7a5cfbac6d5556abb0c28f4631d636d800792ca5
- SHA512 94280a481f9ffc8080c4ae9fbc9ebaf560b976cb42295f210c464d6df1bccb845078bd7780edcdc30ecea709e80f01fcfe8745d841c12c5536adc626cce7c99d
- SSDEEP 192:zx9tWTjdHgtdU1V+Dhzh7A+Ev197i5zI69vS17JX/eZOgoh3LQn6VB5BoBKyCJkk:jtAz417AA5j9OJX/eUx+i7OvCJVwq
- TLSH T19E9273204E013DC5047DCB1E3AD6BAC4FB9A135706680F13B4AE44897F32D96EAA2D7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target _internal\PIL\EpsImagePlugin.py
- Size 16KB
- SHA256 3582af51b5623fc766008fa1e3df028a918aaf7073f4f6435fc5d1607f3deb2c
- MD5 d73adc3f7c665743182489a93194dcc9
- SHA1 dc04fa23c284e2a4f5e01a3ae1efade6271d981b
- SHA512 dcbd7f3c2eda341f659a57929f98ada8af26a3f2cbdb8652ed702ae7b406e9466d1af603f1c6db8c6fb20722582fedd2b46d68a2ba69bf2abed71d2af03e3603
- SSDEEP 192:xj9O4QSwW80Wq5EY8UA9MbBboQi/QhgL2/jF1RlZNsM6+p/s/Fj/0mqDmi2:xZO4xRKY8UA9UbHemtlZNs4pEv
- TLSH T15F72A7638D76951B42B2C41D6BC7E046F34683031661CA6E79ACD0043F74EA6D6FC6EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target _internal\PIL\ExifTags.py
- Size 10KB
- SHA256 362cafb665044fbf41322a248a3313a7fabc75e596ce9c9db5371305f272f0a1
- MD5 2a4dc53a1d1db885feb1e653cf6b5e57
- SHA1 f23daa94420e9b1276c619a0852703eea0c9ae29
- SHA512 45bb7c35909640caa072566559a2e33889061d3de3755f87401414d1bd8812c1a61e09ca130f5748567aad7febcec617b9cc61e574af7078f26bafa13b35d37a
- SSDEEP 192:CGzjx/tAKWVRMCuSLunfnU1WYCmoDRg5h:tx/tAKmRMCuSWnU1WQ
- TLSH T1F32276280AC13324093BA117F6D44D58DC933B278751CD8EF26D63091FB692AE6D626F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target _internal\PIL\FitsImagePlugin.py
- Size 4KB
- SHA256 2ff9142b7f02394b95f65a13e64f4366a12df74a3600245d64f63696fb1ed0bd
- MD5 79546187a23fbb87e71053e4d05afbf2
- SHA1 fcd586dd2dc05c497b71dd2cf2ff4fa505760539
- SHA512 e4bd779d6ef5138c4d4bb25dc7a92ecc6a53adae266ec2d249ebf6205409aa77918c8a9d5b4cd124683e72c3ffb8eed86b6eeb41fb81df231e6608659bbaae42
- SSDEEP 96:RxXX4QLzvJdL/Nj02WqKWqxV8EMitBcInyCk/8axkV17+wMRCwRweA:jB7L/7dTYyHkj7DqGb
- TLSH T12EA110668D277D46027AC40DADDDDC43E35B81071435120AB93D0199BFB2EA9D2FEEAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target _internal\PIL\FliImagePlugin.py
- Size 4KB
- SHA256 2f5bdfe108ec68c57479141399fcb5c27a89f65f61195e65bd320b5bbce7cc3f
- MD5 214af59b6a7ddb5432f484ffc848b3d6
- SHA1 5478dd76cc8ccb2a483d49fdf836ab72a4d564e6
- SHA512 174282b2eeabf5e5b538ec73ea4ef5c66380689382038b791597465bca1ad1de52db6e3993d33af510ae9633a13525bc42e6c8fd307e71eb26ba2e96b0e579dc
- SSDEEP 96:RjDLfr3ECFe6UzLlRJrpWwW16Eci9LUuOZlPfP3ls7F55wtBCpwH/:hUlww4slP1ULuZf
- TLSH T1BBB112A38E1B262D513BCD9E08FE7547E72B224729390706787C81502F39565CBA1FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target _internal\PIL\FontFile.py
- Size 4KB
- SHA256 a424a370fdf10adc8e780110f3e12f9366e0e479ec49c560400e715108ff0554
- MD5 a2078f0ecc953b8d088564633b0014da
- SHA1 b81ff42186b64ffedf41f7da774e66c15cbee80d
- SHA512 73119bfa958801aa6bb737ed9ea5d3ec42ac7da707ce0851cbf9c248cfd276731e16e2b73e550bb6a37c447d29499bc55efad41ced39a743efaa3054eb3c69a8
- SSDEEP 96:RxFtBHelMSDTcG27qvUzwCnKrGGoTmiCSQa0IyDZ:xSMwCnKrGWiOz
- TLSH T17391626A8C0BA1129937868E794AC449F74B92631EA987167C7C20385F72798C6B1F2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target _internal\PIL\FpxImagePlugin.py
- Size 7KB
- SHA256 b3610e701e56459102379804abd517a576a44e2dfc905322133d8ccd1029c7f5
- MD5 5ffd69b466a82001ca30e60c792f1c4e
- SHA1 0afdc650c570d46a262ac6ba3510e919159fa6b4
- SHA512 e163a0f8a308520eea9dbd4e76c016cc056b9b357753c364051ebe3a10124f2966aed4f702d32e122f46cb83e818213f0ae1aa83d8e38422e0634a5e7d3856eb
- SSDEEP 96:wj33otdgHD8LjRp3cRu7oY1Szer4xuaNHwJNVVkmyqkbUwaNpwDt:JgHDGj73cU7oeJEuaKzpMTZ
- TLSH T1B0F161A28E6726165473C0196E89FC4AE34B335705A50B1A3E7C82446F31991DAFCEAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10