Overview
overview
5Static
static
3BEClient.dll
windows10-2004-x64
5BEClient.dll
windows11-ltsc_2024-x64
5Client_86.dll
windows10-2004-x64
3Client_86.dll
windows11-ltsc_2024-x64
3amd_ags_x86.dll
windows10-2004-x64
3amd_ags_x86.dll
windows11-ltsc_2024-x64
3avutil-55.dll
windows10-2004-x64
3avutil-55.dll
windows11-ltsc_2024-x64
3bpreport.exe
windows10-2004-x64
3bpreport.exe
windows11-ltsc_2024-x64
3controller.dll
windows10-2004-x64
3controller.dll
windows11-ltsc_2024-x64
3easyHook32.dll
windows10-2004-x64
3easyHook32.dll
windows11-ltsc_2024-x64
3fmod.dll
windows10-2004-x64
3fmod.dll
windows11-ltsc_2024-x64
3fmodstudio.dll
windows10-2004-x64
3fmodstudio.dll
windows11-ltsc_2024-x64
3gameHook.dll
windows10-2004-x64
3gameHook.dll
windows11-ltsc_2024-x64
3gfesdk.dll
windows10-2004-x64
3gfesdk.dll
windows11-ltsc_2024-x64
3msvcp140.dll
windows10-2004-x64
3msvcp140.dll
windows11-ltsc_2024-x64
3nvcamerasdk32.dll
windows10-2004-x64
3nvcamerasdk32.dll
windows11-ltsc_2024-x64
3openxr_loader.dll
windows10-2004-x64
3openxr_loader.dll
windows11-ltsc_2024-x64
3steam_api.dll
windows10-2004-x64
3steam_api.dll
windows11-ltsc_2024-x64
3swresample-2.dll
windows10-2004-x64
3swresample-2.dll
windows11-ltsc_2024-x64
3General
- Target tools.zip
- Size 10.4MB
- Sample260731-bk51da1cqf
- SHA256 f49b04e5ad1d51489bd4a312b52c607701ec0347b01c6f1d7076b0a041a9087f
- MD5 f18edbaa2bb8a4a9e79992ab024ccb99
- SHA1 3e19eda0023fe478be43059226f0904357008142
- SHA512 8d49b7ce41dfdc23e065a01d991f3ade866e17dab6993f04c806491613906ed54879411a5e99028ef818eff3fbe80aa907fcfe42f8f17618fb7d638db10095a6
- SSDEEP 196608:v04yEyc3RV6KLgsWnJTEDNV3TwyRX8IQpUyOdPbWnk7WmvNqGKT5WiIP/S6VKJU:v0REy+mKcs2EzjwyRMGyOdPbWkBvw7Iz
- TLSH T10EB633319BF95289053FFF884D0778C0F5E8CAEF5424A8371E1285E66F523AA8C549E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
BEClient.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
BEClient.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Client_86.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Client_86.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
amd_ags_x86.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
amd_ags_x86.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
avutil-55.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
avutil-55.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
bpreport.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
bpreport.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
controller.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
controller.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
easyHook32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
easyHook32.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
fmod.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
fmod.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
fmodstudio.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
fmodstudio.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
gameHook.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
gameHook.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
gfesdk.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
gfesdk.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
msvcp140.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
msvcp140.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
nvcamerasdk32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
nvcamerasdk32.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
openxr_loader.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
openxr_loader.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
steam_api.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
steam_api.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
swresample-2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
swresample-2.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target BEClient.dll
- Size 4.6MB
- SHA256 bbe68203c7935c96fd87249eee934120c04e3c7da827276545704cb693be8a93
- MD5 dc70330c785545f777c9750ecdb664b7
- SHA1 a3a6bf7076afc9dbd878603f4cebc4f396f0c9d3
- SHA512 6a4e224ce74de898ac9180f9cf82b4c05d4352b564d838b29fbaa20b7a5fb13df0557a809066fa31bb6d8d89d6a1d7bf4ff599eb57e4a0f8da71f6a13cd367d4
- SSDEEP 98304:iqTVy5rkxPzkhA+bvLKLbZQ9id8z9CpOvDmhGIr5o536LHkD5jrR:/TsJkRwGHbAiKzeOS0IryN6LHkNjrR
- TLSH T1FD2623B353750045E0E6DC3999277EE831F703A7CB82B8B81D6FA9D02932765F622953
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target Client_86.dll
- Size 677KB
- SHA256 149a7e03cb2ee0484e8127b3cbbed0844dff35524e152d51e78535624db9cc1e
- MD5 f9827447e055d571a11f72717c205068
- SHA1 ae254f2abdedb8a38004fe2f4c25912005df1a85
- SHA512 53f708245a8ced5c02d8b07c7827720e07a3adf60fbd7518fb6811a4a951b77c008a8a2c0d27fcc5b8177db9ea1b8a104e50645cfbea97c8a9f599d9dbbdadf6
- SSDEEP 12288:976oQ1wq1iDXBGZgiREkzakg1umSlGCBfw5p460eOVkpfCK:9WoQ1MDXggPzOZw5p8eiAfCK
- TLSH T132E46CD23A4D72DFC74B347DA45BCF87AC2D06BA0A2C4D45B94DB92E6D2F84126C6834
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target amd_ags_x86.dll
- Size 130KB
- SHA256 b1ebd8d671b56c8fe95f73fd82b38ce97e1c93f3f96bb21eaa90d4ab046c907a
- MD5 63312844e626b1260f8c40644c36e458
- SHA1 8955b8357091a8b98aac0d75e66689eb1311f9a9
- SHA512 3d3737996c880eb0a3faf959dfe6fe46ca5b2c0228a2ef839ca47c91bfb72ab540cc953a063a757be392210a6bd9a2cda5d833369bd5b26c5ac4d057ef75d753
- SSDEEP 3072:ey6oMjkItiHUcoNztiJm2h5KUI3TQUwM96Qh39euUdyOkUISTh:Yo6kIt7bAz89196QZSZd
- TLSH T127D37C01BA80C032E5FF153D0135D7A19B7EBA30EFA95DDB33841A699E306D19E39617
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target avutil-55.dll
- Size 652KB
- SHA256 80c08426338c66ef57e26671395c653778db489c8ab2108ed6da7e51f4514fe1
- MD5 5ede1aded66eb982f42e5dabd6337e49
- SHA1 bddaed1f8cafcc24ff828e321bd5d86c380489d8
- SHA512 5f9ed93f5c6375520749f96c5a62b75495c1caf52f5dbbec5e4e69733ea885afb7b2cb321528c985106855ec62c517102f4ae36590d5936661cef6e3fd8b6fba
- SSDEEP 12288:0MompmhMoP6QuHCr7yJZzB4fvFhacfuOwUDS7BZHnUGab8rREYSiKtK:0BMoPVuM78zruYBZHnUMeY2
- TLSH T1DAE47C84E7C740F6F91B09726057EB7FA7305A114034DFA6E790EE8AFD33B51642A229
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bpreport.exe
- Size 3.3MB
- SHA256 460a2a655850e0c4fc47c0d9e60d50d896582e81343fa4f02f007a618b1a727d
- MD5 7389c63c5230062bbd5eb5d390c641ac
- SHA1 9162c82c509b1d81ceecaa7363ed6ae47507fa35
- SHA512 854163a16b8b34a950e182a2092e886f102ee57ccdd3c11726f204cf48d9aeb730d9928a7608045ab80be71de3d730322c03d57618ffa0e6d483fb047616c8ad
- SSDEEP 49152:Na2eyvPGtFBxmamQtDzcaJGcd/dcIKYmR5i+R6+1U93I4wT/4+kz2XP9ngdYR9v0:FTGtwHIDPJGMcIKY6i+R6ynw+7lO
- TLSH T11CF59D22B941C422ECE200B6D6FE5FBA5D3D9A34173C90E35BD528E859305E2773E35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target controller.dll
- Size 458KB
- SHA256 09427f4624611d53ea520128457dd19848fafee3e1c687e14ae0e1c4df2fe91f
- MD5 245e592b8749ac135dd1022d0038619f
- SHA1 ac5f60f584eefd10743044a9a9198b450248b4ff
- SHA512 dd5fc23ac3f245d755b90dd0d0440d055e131d29941779cf63e42024cdcd22609663669ddda80684bd5bc04bf9bb2240eafa11a990f3ead414ff51cd9e97ab58
- SSDEEP 6144:BCv6b6d/2DhfT6HAqAkL/9fLBrdKczACHQ1af4UbqEU/EVKM1hYsKZIdh40A9:r6A0LfdKc0I4VUuEcDKYslbA9
- TLSH T1EEA45C207A0EC579D99D12B099399A5F485CAAE507BD04D7E3CC6B3FB9A04C31B32E53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target easyHook32.dll
- Size 277KB
- SHA256 7bb971618873836ac941a1a7b327947f2b8b8b1e419f5142c5337f2fa5567a60
- MD5 3fe9102a435423266d4c825b8341e09c
- SHA1 3687694cbd554ef88ae727990e7e0e67763e94de
- SHA512 b5007037bd00568c752afdd024ca41bce59d15be05b61ab47761db81519846bd5a8a3e4065d0fff091fac50b960f84bd669ab106371c54017ac2893948aeca3a
- SSDEEP 3072:nIqxqIvoSxXdq3sG1coH6mjtK4dzRToEdybvdFfCsy5xhj8fYL7F4yWUBH:nIqxqyXU3lWofKSRxdU8157
- TLSH T1B2542A02D6C04177F1BB163918B75EA21D3EBC706776DA8F02B0C9692E713C12B76B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target fmod.dll
- Size 1.5MB
- SHA256 48228d033bade88c582b4474093ca5fc8dde25fb116c8c44f0f0fc126e886bac
- MD5 ed119e8e1789df226a7b8266a582cafd
- SHA1 676fc2cbe7e579ca98d4fdd891452bd5e76f7a26
- SHA512 59ce7914fd467208c07c0d85475ae36130a6e5c9c23c7928dabdc1dcd9719ef92ef09d78d741f6a644d32469d17220153a64f99b7283fdc5ca6fd967a0b70057
- SSDEEP 24576:fN0Twh4P9POb6lvoAN4wuv+Xh7ooZ1Pxukwt1ODxVrUKa:fNMQb6lvlpuv+XRAJP
- TLSH T11D659D50BAA0C1B0E8961173A6BD3B6B693D7EB5032811C3A3E40995CDF01E36BF57D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target fmodstudio.dll
- Size 1.1MB
- SHA256 8d3ab8bef96bb5bd36d6b1ded544ad0584a923a8dd5e0dcd66e6745c6386f655
- MD5 0c9d1d9a69650a1797cdfa593b79b206
- SHA1 a10d694626a28c7525a4e57fb38f3d094c2b2157
- SHA512 a758641ab5b5e5fabeafa508f002a91406151a85c0ed98632e09b7d119c48ccebcc160eb2e32a58d22fc50ade51e5b5b885904ca9fbd24e5e8415dda966c5c9c
- SSDEEP 12288:2i2KOAwdI9t+qxA04dxVvHyo5N5SmiIbQJX2fgH9QV7m:5QAsI9t+qxAjVvHyo5N5SabQJmfgN
- TLSH T14A354931A840C1B1E8E151B3DFBC3A6E256CDA11032C16D7A3AC4DA65DB56D37B3A2D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target gameHook.dll
- Size 557KB
- SHA256 8eec2e82c76761d4842a92aca2b6a45e1ff9bdce8bad807a64d6fa5feb7c1713
- MD5 8b9b1851eb84d42266b9d4e39de6353f
- SHA1 d969247098ab4f62c7354ddc7225f12a0a6a3962
- SHA512 407af1c744e0a64a6220e5a2e3d143db959fc1d4122761fcbd0f3c40818fa60a1fd6147b76ed37bef2131d8d9f665d4fbff1aaddae8e7e7e14071269a5bc36b7
- SSDEEP 12288:PujDT4qu1S3HVpbs1vozgvjF9hh62hyo:PujDTOMXVpbsl+gvjF9b7
- TLSH T149C49D217740C172E59A0171E6ED7BBF693C6632073461E3E3C846A9ADB81C3AB72717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target gfesdk.dll
- Size 3.1MB
- SHA256 5db40ef5601bfa615b4b54ed86a3288b1e7097391a8601b1befca0143a3915e9
- MD5 33dcd2e8894e9a89a1b214119af32bce
- SHA1 286c1f71dd769441266675696f9e1bd4cb29e1c7
- SHA512 0c905b5551fead2a6a8420c4f3f6350634841e12c825bdba0e04f25173a0b3faf97253aa3a7d53675573e40c505fd40cf3cc13cdadf8a9d84d76fe8ff2b51b29
- SSDEEP 49152:NjOlJIEdRaybpVJKI00FC55gL5tj1XUNgASK4CTfVf1WZ62stMfv/zAVjCVx5jzr:NjOlDcyY0MftMfv/zB
- TLSH T171E57D303757CA3ADACE11BA58EDBA2F028DA2940B2505C7955C17DFE6782D22F325D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target msvcp140.dll
- Size 429KB
- SHA256 9c1dc36d319382e1501cdeaae36bad5b820ea84393ef6149e377d2fb2fc361a5
- MD5 d25c3ff7a4cbbffc7c9fff4f659051ce
- SHA1 02fe8d84d7f74c2721ff47d72a6916028c8f2e8a
- SHA512 945fe55b43326c95f1eee643d46a53b69a463a88bd149f90e9e193d71b84f4875455d37fd4f06c1307bb2cdbe99c1f6e18cb33c0b8679cd11fea820d7e728065
- SSDEEP 12288:vTLNQjAM80l7Vpm8j2NoSpmanEhUgiW6QR7t5s03Ooc8dHkC2esuDPG:vTLNQcMmYpET03Ooc8dHkC2enDO
- TLSH T124944922BB460EF2E58E13B531C643225BF9FC254760B3C393DBE0696F556C26633A91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target nvcamerasdk32.dll
- Size 98KB
- SHA256 8b3e78e6a5114317784c9d12ef4a95dd1b83f8c767d980766b43b6790946c9d4
- MD5 2b281a72f899de54dd3fb292ab314a0a
- SHA1 58632fd8c21a2d95f8775f1d0767b443d8141a0f
- SHA512 b2c4679497d11deb3866cf486836f41c6c5ea87fb09b49c5f520d932444e1308189a114247542343f62efb9e0a1ea8e1724270ba5235487d41e978cfa553deb7
- SSDEEP 1536:0LtZkSMoaleEt0jEfqx+0cwsWjcdaAeV5Jvdg4KxM:StmShaln6+daHV5JvdBh
- TLSH T104A36B1175E08175E4EF463968A98A054B7DBEA2DFF09D877BC8024D5E702C0AF36B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target openxr_loader.dll
- Size 1.5MB
- SHA256 5a607e87b562b15fc91f0dfdafc28bc4b49928f9179f70be369ff8cf007fc094
- MD5 d7f29716445fa35080c48e7922701a04
- SHA1 72b5273896d5b9e807cb7b3ccee94542fbfb5705
- SHA512 fea49620e53efce904e6c69a694e7c58469c0979a9c542772d9fa32d611b0ddae500376c9e574250cee207772f862b24a6c04cf41328e045f787f14540351b8e
- SSDEEP 24576:I9l8bjCX4h0pkL2AUIeI3q05IH3BkTqrlH7GMiL:Ql8bWCL2AUIRBU7GMiL
- TLSH T153656B213885C031ED9A22F2466CFE7983AC99714BB505DB16D81FFFD6605C33B32A5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target steam_api.dll
- Size 260KB
- SHA256 c24262d150d2f4f4b3aee70c66115254e77a9af5ae3152a4c7897e75714cebac
- MD5 73936ae087c69b15be9ca10f12e10c53
- SHA1 e21843f594c0d82a66faf052b315f32780a07dab
- SHA512 7023b88c9be3efdad16a318c501f1c1055f80e05739eb64f57f0df6e7fe2d24ed37b97599fe2d2d6d4db7476e759b603fbbe3cd2b82d50d6630d2cdc0b33b6bf
- SSDEEP 6144:3s5mTtKdoVxWmV6tVJxGQx+SV6ylO2CXRLkxoL:c5mTtKdoVxWmAVeQOys2CtkxoL
- TLSH T1CA44493538A049B1E5B580358AA4DE2B7EEC216B37342CFF734806B5C9272C35A3759B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target swresample-2.dll
- Size 286KB
- SHA256 2b6c0f57c66fb1af4a80147915730eaaec613c5fddc40f42172dfe0afe279334
- MD5 116ae83415fd54639ec32ebad5a3aad1
- SHA1 08211aef2d5eef7357ff93ad552cc6cb86f75363
- SHA512 a957031fa54c0887f27ac86b5bca63a2b588789c42266fcfcaa686f0392815a39c0f13f4b8bf1feabbeb65926b86024f81bbc4d4e45c44844b07a0cf7412def4
- SSDEEP 6144:E1kpTSTjVu+UPQESNOGrjY/NyGymwEPZGQX1RwbYEIrk7RGl1WpgoKt3Hwu7D:E1kp+TjVhUPQESNOGrjYFyGyEhGQX1VB
- TLSH T17A547DC1EADB51F1E94B1470526BB6FFAE34AB310434C835FBD88949EE23F12646A254
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10