Overview
overview
7Static
static
3Join Telegram.url
windows10-2004-x64
1Join Telegram.url
windows11-ltsc_2024-x64
1VueScan Ke....1.exe
windows10-2004-x64
3VueScan Ke....1.exe
windows11-ltsc_2024-x64
3VueScan x3....0.exe
windows10-2004-x64
7VueScan x3....0.exe
windows11-ltsc_2024-x64
7VueScan x6....0.exe
windows10-2004-x64
7VueScan x6....0.exe
windows11-ltsc_2024-x64
7General
- Target VueScan.v9.7.93.Patcher.v1.0.zip
- Size 155KB
- Sample260731-1hjf2aha99
- SHA256 8b95059113b571fcc2a8be9184e775d038434aadc88f2f9257d63fe4b4ea76aa
- MD5 56f53292b2d95e1151234b0b515dc93f
- SHA1 d0045eb7f0c93a29bf9e93326cc3d3826aff00c4
- SHA512 139823a42c97749503e3bdd27294be88e89741cca463b0a11c1ab9ef7149c227375117fcd89d46de64a2f06b6cbd9c1ca2ddcebc9eb081119ee4a4632b3fe209
- SSDEEP 3072:7la23OM7kR88Tua47Gyt8HgEM+MtZPLzD610ICN5WBwsoDUKB:7023kRN7K9SXgZPLz0I5Wms+H
- TLSH T180F323B598208B35F4C157F2FA8D7D35D0AAE6E82A217A16FDE334D3E8130354F1994A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Join Telegram.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Join Telegram.url
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
VueScan KeyGen v1.1.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
VueScan KeyGen v1.1.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
VueScan x32 v9.7.93 Patcher v1.0.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
VueScan x32 v9.7.93 Patcher v1.0.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
VueScan x64 v9.7.93 Patcher v1.0.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
VueScan x64 v9.7.93 Patcher v1.0.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Join Telegram.url
- Size 128B
- SHA256 771846ab3f8c33f137024e6a13e5a41ac30a212a8076ca80d8cb96093a77da69
- MD5 8e69ef0723269ec6a3f88b38f3d87cb6
- SHA1 98e410c6fca03ab37d2e82bc103f499019d8d5b4
- SHA512 63d3e6f00d44a243119624a09a4e3261fc114775a6fbf4d561e849905383a391dceb558f8606cad4f03682b78119c8b26e5c23141f22420aeb15b7e9f4e231d1
- TLSH T1B9B092AF4246828BD352D50A60B0F908985EBAB498E6D05C6648EEDA0C980D2C658A36
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target VueScan KeyGen v1.1.exe
- Size 20KB
- SHA256 61196bc0fa83764e1faded3f63a5f36f4caf8d721695980f8f8057ba82a9437c
- MD5 6f043ad3e167edb6ac261374e1b8bfa8
- SHA1 8dccdbe627d70b3a56974dd3bbae58278f07b024
- SHA512 91dda6b0e2248c9c54ed9e55f36a736ea60c99b9333627a05c24c962543b1832fcd714394b13fc0ea84cb6511cc3b9e3171a1cd02cbdc21c200774f949d60934
- SSDEEP 384:uwTMhz9Mh8JmwYVwnrGcdz+xlnJaMWqGfPTO1eU5Bg:uxN9Mhmm0rbd6xbahht
- TLSH T1F7925B82ABE824D5E6B40537247BC1764D22BD654B35879F35CC3E0F3FB12D28A72A25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target VueScan x32 v9.7.93 Patcher v1.0.exe
- Size 79KB
- SHA256 042fdea9e225f23747e3580218fdbe22e3e5f51e5de9db90d677a9d0077e7180
- MD5 d1b13806b34c9f4aa016ed9a17e246a3
- SHA1 3f60d60e0361da17432e9e09b8ee4a93d773ac6a
- SHA512 a136a33005622d01c61d93b28c471a0f91fa270ca72245c8abe26adac7a4126e57384d2f3af8a3241577f07804a94d0149088a9c0ba9957d76411c9ae829c285
- SSDEEP 1536:OhN0rbd6+wnxBXe4Ema8hEnfbXnlOq1AqJoypf8HJuHztH:Oho6JnxB9ET7Gyt8HgTt
- TLSH T14283F183A94455A5E12148739D8FC0F48B3EAC4F2412A92FFAC97E5F7AF11430867969
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target VueScan x64 v9.7.93 Patcher v1.0.exe
- Size 79KB
- SHA256 1f6babb561bd34844e7ff420469b84c0f248cef65eaf28f65291b3c011abe9e3
- MD5 b8ebf088dc7dfdbe8f4a02dd880d092c
- SHA1 a56c5d316b76232dd012ef019378758feb8a1ced
- SHA512 c1188d37f830ffd0f62d175d9df0e9b408e023e7a7e321cfe15c75ee877dfdd592050b260de14d9cbce06fee6cab647e19ce9a612867d339ed7620ea6cd55884
- SSDEEP 1536:OhN0rbd6+wnj+CsMyNPdAEIFMfHCiqL5Zw610ICuu5WBkeUNjgoD9OKxs6g:Oho6JjYdAEIFMfHCiqL5O610ICN5WBw5
- TLSH T1AB83F1827C4669E6E0944971649BC5F78D7F4E1217B6322F73C83F0B7E223E38612969
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL