9e0195dec94830bfd076488395ffbaab96dbbf97cb46e1bb024a8c2d7ff3c4eb | Triage™

Login
Reports

Overview

overview

7

Static

static

3

msd.exe

windows10-2004-x64

4

msd.exe

windows11-ltsc_2024-x64

4

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI....0.exe

windows10-2004-x64

7

$PLUGINSDI....0.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ML.dll

windows10-2004-x64

3

$PLUGINSDI...ML.dll

windows11-ltsc_2024-x64

3

IEBrowser.exe

windows10-2004-x64

3

IEBrowser.exe

windows11-ltsc_2024-x64

3

Launcher.exe

windows10-2004-x64

3

Launcher.exe

windows11-ltsc_2024-x64

3

WhetherICafe.dll

windows10-2004-x64

3

WhetherICafe.dll

windows11-ltsc_2024-x64

3

eyoo4qqxw.dll

windows10-2004-x64

3

eyoo4qqxw.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
msd.exe
Size 3.6MB
Sample260730-pq159sam9t
SHA256 9e0195dec94830bfd076488395ffbaab96dbbf97cb46e1bb024a8c2d7ff3c4eb
MD5 fff9c122d161797eefe496a1c41e5f17
SHA1 5ec601bc9af30c66543e9e3d7d2d947b760cc621
SHA512 ba7e8ff0b65534d183b5710a3249fe55b68ea198c5cf97b5f4646386c0ce56ef29ea01642927490c480183f4da6ccd4d257d87a4f42dfe72f243599721a4e1f9
SSDEEP 98304:WjkZVfTRQJBB1HYGzQfx3XupIstNzzigH:bdCBTEJXwCgH
TLSH
T19A06337795D43C66EE377EB432DD885A42B6AAB412E0CACFD7301905EF61E0542ED388
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware discovery installer spyware

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

msd.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

msd.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/FindProcDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/FindProcDLL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/KillProcDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/KillProcDLL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/gameboxV1.0.0.0.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/gameboxV1.0.0.0.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/nsisXML.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/nsisXML.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

IEBrowser.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

IEBrowser.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

Launcher.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral20

Sample

Launcher.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral21

Sample

WhetherICafe.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

WhetherICafe.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

eyoo4qqxw.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

eyoo4qqxw.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  msd.exe
- Size 3.6MB
- SHA256 9e0195dec94830bfd076488395ffbaab96dbbf97cb46e1bb024a8c2d7ff3c4eb
- MD5 fff9c122d161797eefe496a1c41e5f17
- SHA1 5ec601bc9af30c66543e9e3d7d2d947b760cc621
- SHA512 ba7e8ff0b65534d183b5710a3249fe55b68ea198c5cf97b5f4646386c0ce56ef29ea01642927490c480183f4da6ccd4d257d87a4f42dfe72f243599721a4e1f9
- SSDEEP 98304:WjkZVfTRQJBB1HYGzQfx3XupIstNzzigH:bdCBTEJXwCgH
- TLSH
  T19A06337795D43C66EE377EB432DD885A42B6AAB412E0CACFD7301905EF61E0542ED388
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/FindProcDLL.dll
- Size 3KB
- SHA256 0fa04f06a6de18d316832086891e9c23ae606d7784d5d5676385839b21ca2758
- MD5 8614c450637267afacad1645e23ba24a
- SHA1 e7b7b09b5bbc13e910aa36316d9cc5fc5d4dcdc2
- SHA512 af46cd679097584ff9a1d894a729b6397f4b3af17dff3e6f07bef257bc7e48ffa341d82daf298616cd5df1450fc5ab7435cacb70f27302b6db193f01a9f8391b
- TLSH
  T1AE717387378506B7D08006303089BCAA3B9E9A350F5B59BFD6DBA99F7C641F4E134706
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/KillProcDLL.dll
- Size 4KB
- SHA256 c2689ba1f66066afce85ca6457ecd36370be0fe351c58422e45efd0948655c93
- MD5 99f345cf51b6c3c317d20a81acb11012
- SHA1 b3d0355f527c536ea14a8ff51741c8739d66f727
- SHA512 937aa75be84a74f2be3b54dc80fac02c17dad1915d924ef82ab354d2a49bc773ee6d801203c52686113783a7c7ea0e8ed8e673ba696d6d3212f7006e291ed2ef
- TLSH
  T10881C5436B102FBBC0880630358E7D1E64FA49A8536E00BFD786A98E3DD62D4F170367
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 94KB
- SHA256 2aaef1ed8a25097b3a807568daeffd3320fa29d6de66df90a57beaa8df8949cf
- MD5 0061a96c8ff17ad0927aae65b5dfe06b
- SHA1 9d1bd69d930ccda683e6b7c2c0d1dbe3b54861fe
- SHA512 c6b887a4e1682ba1e126c93bc4d886c7f1ce392f97866e631c5b8a945824cbefc9af2429a14c2dac3b16d97bd33195d4378a7e92ae53fdeb47197452d4d90fc4
- SSDEEP 1536:0yy+i55jAPWrI5qXgcAZ5c4DB5G7NXE9eOO2xwN:3y+i5i+kEQcAZXGx0cr2xw
- TLSH
  T194931A93707430EEE599067C171F33B3947A032CAB6C68D747A14ADAD3762E670B9D09
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
- MD5 56a321bd011112ec5d8a32b2f6fd3231
- SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
- SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
- SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
- TLSH
  T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/gameboxV1.0.0.0.exe
- Size 1.4MB
- SHA256 5697f441397e2f4d0753540a234937513f37776e6dfd3a2a639a4d437fd27ee7
- MD5 32ef83d90ff67c64ccb51e59def926a7
- SHA1 4415caa0143d637a17f05fb41afb6b58cb67cf15
- SHA512 2d54249039b352a3adcdd893acd418e0112261332a04d208371363a442dcee0a3e314283d84a66f72085f8ad9635b1936e93d09f66a8153f7e80e5acb5c78258
- SSDEEP 24576:wMQumdeAfUjQkhEefFOOUdF5h7S7+/ux6mgIjNnuXAKO2qMdYQzI0H1dM5iMB:t7mdZcXhEeUOUHS7xxNNnuXAnCJzI0HM
- TLSH
  T159652302CE953213DDD39CF0E6DE667BC471C1B72AEA218C8BE89729091A1C36F97157
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral11 behavioral12
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 4cd17f660560934a001fc8e6fdcea50383b78ca129fb236623a9666fcbd13061
- MD5 f832e4279c8ff9029b94027803e10e1b
- SHA1 134ff09f9c70999da35e73f57b70522dc817e681
- SHA512 bf92b61aa267e3935f0ea7f47d8d96f09f016e648c2a7e7dcd5ecc47da864e824c592098c1e39526b643bd126c5c99d68a7040411a4cf68857df629f24d4107d
- SSDEEP 96:ytJ6tC4jcY5rKhkfL9SYdKkcxM2DjDf3GEfKvBKav+Yx4yndY7ndS27gA:yyj6QS8HREf+BYYxbdqn420
- TLSH
  T19212F9675A0011B3E9A3223D306A2E3F977C9325D0527C03C677AE562BF031A7D3A355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $PLUGINSDIR/nsisXML.dll
- Size 11KB
- SHA256 c40ef0b41c035b6d29656616ddc113a717bfd1bb78c9fcac75d7b6eefdc7bf83
- MD5 13deb9a0f4e4286df01abc85e1895e09
- SHA1 3174853b32407fd85220de844b390a18a8a76c97
- SHA512 604aa82a9c4818d2f63fb11bbde561afc137a77e9f3108dfd7f4596524e46ce71b6dc31606bce534b600b250c3b4092a311fd1eced83da01156d5bcfaad7aade
- SSDEEP 192:GRTSl/ex70OJp3U5WtRqRLnOyhb6hz801Sux3ulXhDQR:GRTSl/kfzWIRqRLnOy3mxaX1E
- TLSH
  T11E32B50737B699B7C9460679AF976B4BD6F4A30265800C07A7470F0BAB3098DFD3D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  IEBrowser.exe
- Size 171KB
- SHA256 a7cb693ead2f0b09f0b2e8bce42a57a87e251f5c12a35d231d0714c321038e45
- MD5 7462e2fc9dba7fa6141e6a0b61f9f71b
- SHA1 a532ac49ae050303d646c196442f5cc80590a2f5
- SHA512 44631ff137c0a0f941a46148de77f32ca66b2d01ed844415d801e1f1be4120e777dc446e5c968b008f8c10a3f6c7ffad6de4f810c577e17269d87c682037400a
- SSDEEP 3072:3ZAWa3miXpjboNYxak2GwtpHlY4esCO2f9IjLQjODc3UV1xF5sYlqNXp:3ZnHiXpOEak2hRazLN3Ufr5scqNZ
- TLSH
  T1A7046B2276E1D0B3C273023649E4F76596BDF9724F714B1B77880B4E1BB41D06A2DAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  Launcher.exe
- Size 4.6MB
- SHA256 8e8fd65b20de7de6d8f658f010df37c90166921f7da4c54104033fe3bda7e38a
- MD5 1a00013b564317cb4f1e0331baa6f994
- SHA1 cffcf683db526e518f5a10c8122f9a1656356c47
- SHA512 dd9bd8caa1836e5d67deda3a7ea681b03703f3617dbcc230a91e01d2f0c481846083ca9a9a5888ecfa0c62b37a92eb2d4f91ac5f94d37556715e7dd506af6014
- SSDEEP 98304:kvvQL29xMm5HGl9V0HP5v7Az4Ni5RHWlw5FzEtm+oDQAvHqX4OiZrq1DfPHNADt4:kvvd92yHGlHg7IWLlw5FzEtm+oDQAvHw
- TLSH
  T1AC26BF327EE94C76D05702318E6FF63D656EBC7427290DC712943A2E6A307E11A3B1A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  WhetherICafe.dll
- Size 269KB
- SHA256 1033bdeda69bc07e7f537d3b1eaf9bb0f29be1d1cc3afe01957a6b6e1be1ff70
- MD5 6769e3c48e5e6d84dfd54a921a0eb177
- SHA1 a404d9ad845147d2591112add0ccdef7ee4c55b3
- SHA512 289dd91ea96743f5abd17e35d066ae947e1d53ff14ddef221696a9db71e5125f39c86682a914986705c5119b70abf3120fec24e00ea12a2400ba921e3bc58265
- SSDEEP 6144:jBRiNVE5biYpI0xj3nyGVxNG8U1DU9YzS:jqfE5biCTxVfGnDU9YW
- TLSH
  T128447D10B241D433E9EF057585BE86AE96B8B5701798D0C7E7C84D6E4F722E2BE3124B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  eyoo4qqxw.dll
- Size 121KB
- SHA256 cab5003f3b2668a60708a8c836ce27d278201925bbd3c23142c3bbff45f36799
- MD5 e8006211fac57a9f2f14ba45a1f2db86
- SHA1 835ae55c9445c9dc4b072e18039337b1aa493aba
- SHA512 60d7aa9f07448c6fa3bd3c64c8674ddb1779c0ceed8f8f5ebe4cf3bea32d5316c0b3530698c0ee1169a86a9ba0d471af91f0f27216c00a56f3328c4138a6485d
- SSDEEP 1536:Lpd7GVOpXjhyq/OGt33U3bJ1IrEdlTkwtL3+eaUzCKnPXISsNVGZf1v1J9fI:Vdnpr5w8EdlTpx+e9RI7NVGZf1v1JNI
- TLSH
  T1E2C38D223350C031D5DA263DA9A9C77A5A7E68726BB880CBF7580B7E5F603E05D3435B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

adwarediscoveryspyware

behavioral20

adwarediscoveryspyware

behavioral21

behavioral22

behavioral23

behavioral24

© 2018-2026

Terms | Privacy