Overview
overview
7Static
static
3WinPcap_4_1_3.exe
windows10-2004-x64
7WinPcap_4_1_3.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$SYSDIR/Packet.dll
windows10-2004-x64
3$SYSDIR/Packet.dll
windows11-ltsc_2024-x64
3$SYSDIR/pthreadVC.dll
windows10-2004-x64
3$SYSDIR/pthreadVC.dll
windows11-ltsc_2024-x64
3$SYSDIR/wpcap.dll
windows10-2004-x64
3$SYSDIR/wpcap.dll
windows11-ltsc_2024-x64
3WinPcapInstall.dll
windows10-2004-x64
3WinPcapInstall.dll
windows11-ltsc_2024-x64
3rpcapd.exe
windows10-2004-x64
3rpcapd.exe
windows11-ltsc_2024-x64
3General
- Target WinPcap_4_1_3.exe
- Size 893KB
- Sample260730-w3hm1sem2s
- SHA256 fc4623b113a1f603c0d9ad5f83130bd6de1c62b973be9892305132389c8588de
- MD5 a11a2f0cfe6d0b4c50945989db6360cd
- SHA1 e2516fcd1573e70334c8f50bee5241cdfdf48a00
- SHA512 2652d84eb91ca7957b4fb3ff77313e5dae978960492669242df4f246296f1bedaa48c0d33ffb286b2859a1b86ef5460060b551edca597b4ec60ee08676877c70
- SSDEEP 24576:UBOldyR6ORWsaM2QROxa6jsqUENfJjNK/CG6niqiL:2KzqWsayROxa6QDENuaG+ifL
- TLSH T17F15231507A47D77FF274270906FEA60AFFEC2294390362733A464EA2D53AD62B1417B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
WinPcap_4_1_3.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
WinPcap_4_1_3.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$SYSDIR/Packet.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$SYSDIR/Packet.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$SYSDIR/pthreadVC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$SYSDIR/pthreadVC.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$SYSDIR/wpcap.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$SYSDIR/wpcap.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
WinPcapInstall.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
WinPcapInstall.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
rpcapd.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
rpcapd.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target WinPcap_4_1_3.exe
- Size 893KB
- SHA256 fc4623b113a1f603c0d9ad5f83130bd6de1c62b973be9892305132389c8588de
- MD5 a11a2f0cfe6d0b4c50945989db6360cd
- SHA1 e2516fcd1573e70334c8f50bee5241cdfdf48a00
- SHA512 2652d84eb91ca7957b4fb3ff77313e5dae978960492669242df4f246296f1bedaa48c0d33ffb286b2859a1b86ef5460060b551edca597b4ec60ee08676877c70
- SSDEEP 24576:UBOldyR6ORWsaM2QROxa6jsqUENfJjNK/CG6niqiL:2KzqWsayROxa6QDENuaG+ifL
- TLSH T17F15231507A47D77FF274270906FEA60AFFEC2294390362733A464EA2D53AD62B1417B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- MD5 325b008aec81e5aaa57096f05d4212b5
- SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
- TLSH T1ED622A11778888F3DBD2013EB4533707AF9D5126B4929ED2CA271ECA6D2B05D7EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $SYSDIR/Packet.dll
- Size 99KB
- SHA256 cd9f4fb077c25013226e0883f9ae02e9ced9b71f07637081e55ae70fd0788f29
- MD5 2ce150705bbeb30e6c8059cc530043aa
- SHA1 3d8615f9d8f8f7a5d78b3c06bf746948b9ef6ba5
- SHA512 9f7573ca679ef0cc0e1d815f605a399e87f7a046e3e51970d2c7597329b19e118cc2da7240ee854e13e31582f12bab8be506d1612ac81d5b453ef366d4674dcf
- SSDEEP 1536:zbDKMXRC2wKDDuDirGfqs97WcETlsxtl2o+V:PDKMtfuysAcETlsxtco8
- TLSH T1C2A38D02B993C072F4928A7D819587A2AB7F78537FE554DFEF6009890DA03D3277A271
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $SYSDIR/pthreadVC.dll
- Size 52KB
- SHA256 99c61abf41c3aec38cab3ed6270adbca9a247bbf5f9aa9d29ecb0659a5527f48
- MD5 f04a90f917ba10ae2dcbe859870f4dea
- SHA1 6668ebe373ce58c33017697c477557653427e626
- SHA512 aec29301b9ce311b27f1590b0e0c4121acdc183a30b570e087d77b7035684f02a6dfbdee950c37f3023b32e2ea5a075a5fbe6d18a2804da9490d4959733bb516
- SSDEEP 384:hSvfC8Vv0Vy7ojuq7GQcdWTc4zU+GFronD/yD5rBEe0kiH32Jp9AhOW:wt+TGQcdWYdMG59EeJiH3YzW
- TLSH T19A33C8066E28C1FBC5B768F126AA23FB1D370614131568DFE397D460096ADE5E339783
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $SYSDIR/wpcap.dll
- Size 275KB
- SHA256 b967e4dce952f9232592e4c1753516081438702a53424005642700522055dbc9
- MD5 4633b298d57014627831ccac89a2c50b
- SHA1 e5f449766722c5c25fa02b065d22a854b6a32a5b
- SHA512 29590fa5f72e6a36f2b72fc2a2cca35ee41554e13c9995198e740608975621142395d4b2e057db4314edf95520fd32aae8db066444d8d8db0fd06c391111c6d3
- SSDEEP 6144:E4yIm5rC9WNWwKcNBSCiLvK8+jKgZBwIbg2:jyIm59WwpqCuEKIwv2
- TLSH T124549D027F13C07AE51A057941AABB564F3EA51227F194C7FFC06CABAC632C3667216D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target WinPcapInstall.dll
- Size 91KB
- SHA256 d9f4cd9f0e1bc9a138fb4da6f83c92c3e86eb3de4f988d5943d75c9b1dc6bb9d
- MD5 e78291558cb803dfd091ad8fb56feecc
- SHA1 4bde2f87e903fe8d3bd80179c5584cec7a8cbdc4
- SHA512 042b96bc2c0e6d8b6e2730426938eb7400fd833be8a108a4942f559fedefabc35fd5dcb7ea1898d377b4382c0a9af8eeeebd663a4c852c706e3bd168c1f1f62f
- SSDEEP 1536:s7xjrG5m+619YG7L2xo8JfmL4iMtgLZtAeYjFH:s7s27yaL4kVtAeE9
- TLSH T1C6938C113AE3C0B3E4460834D1C687A16FBE7D13FEEA545FEFA3029A5D816C4636B169
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target rpcapd.exe
- Size 115KB
- SHA256 52360f17c9c70c9cea3316560b40c4d89fd705ed7e6b6088c99fc54d4cc35eb5
- MD5 83a6c2cafe236652d1559640594a0ea8
- SHA1 c99aa678f387c00c4470fa3cd7b037d26720960d
- SHA512 4f6981c4e8d64311087795e9639516409bf80ebca5c7f25af1fb436aaccf90f24617ecd3f95b63558981b12bc0e5eeacf120fea7be5e5fa05ecf3afa4f9f799b
- SSDEEP 3072:mL7m5RTfrUna0m2BeIIgJ3155FulLfbt/6:C7m5RTEaseIH515qfA
- TLSH T144C3BF0539C2C0B3F455027141878BF29F7EB8333B6669CBFB9409995E812C29A772DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10