85156b6391d646dfd0a9e8fbfba5bf234e1f629c78f0844034330a862fd77c1c | Triage™

Login
Reports

Overview

overview

5

Static

static

3

046d-uipak_x32.exe

windows10-2004-x64

4

046d-uipak_x32.exe

windows11-ltsc_2024-x64

4

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

html/download.html

windows10-2004-x64

3

html/download.html

windows11-ltsc_2024-x64

3

html/finish.html

windows10-2004-x64

3

html/finish.html

windows11-ltsc_2024-x64

3

html/welcome.html

windows10-2004-x64

3

html/welcome.html

windows11-ltsc_2024-x64

3

js/IE9.js

windows10-2004-x64

3

js/IE9.js

windows11-ltsc_2024-x64

3

js/jquery-...min.js

windows10-2004-x64

3

js/jquery-...min.js

windows11-ltsc_2024-x64

3

js/jquery....min.js

windows10-2004-x64

3

js/jquery....min.js

windows11-ltsc_2024-x64

3

js/logi_helper.js

windows10-2004-x64

3

js/logi_helper.js

windows11-ltsc_2024-x64

3

js/logi_helper.vbs

windows10-2004-x64

5

js/logi_helper.vbs

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
046d-uipak_x32.exe
Size 312KB
Sample260731-gzepmaxsas
SHA256 85156b6391d646dfd0a9e8fbfba5bf234e1f629c78f0844034330a862fd77c1c
MD5 391d2487595ef8e8368b9271abc76799
SHA1 bfa7d96b893ca7fea349ba8d01a4f6ac17fbd968
SHA512 ebc133e44f16bcb40046ded9539c0adb168c37a0e9f4865735bfd38a3a02d853fd6e5a38b59cd45fc48ae31e5cb879142f981d67a07b84591aa74e4cc81bbe2e
SSDEEP 6144:tzZZxgKlrEf08BCxkA6IGfA9TlM432wa7AfNgm2/xqHTi0zY108OiI:tzZz3wf0YWkIGoBMJ5QN3neVO/
TLSH
T1956401017B91CDA7F8A96B3020B697631FF5FC1615A0961B37982F5FFCA1250892EF06
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

046d-uipak_x32.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

046d-uipak_x32.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

html/download.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral12

Sample

html/download.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral13

Sample

html/finish.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral14

Sample

html/finish.html

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral15

Sample

html/welcome.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral16

Sample

html/welcome.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral17

Sample

js/IE9.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

js/IE9.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

js/jquery-1.3.2.min.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

js/jquery-1.3.2.min.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

js/jquery.quickflip.min.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

js/jquery.quickflip.min.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

js/logi_helper.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

js/logi_helper.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

js/logi_helper.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

js/logi_helper.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  046d-uipak_x32.exe
- Size 312KB
- SHA256 85156b6391d646dfd0a9e8fbfba5bf234e1f629c78f0844034330a862fd77c1c
- MD5 391d2487595ef8e8368b9271abc76799
- SHA1 bfa7d96b893ca7fea349ba8d01a4f6ac17fbd968
- SHA512 ebc133e44f16bcb40046ded9539c0adb168c37a0e9f4865735bfd38a3a02d853fd6e5a38b59cd45fc48ae31e5cb879142f981d67a07b84591aa74e4cc81bbe2e
- SSDEEP 6144:tzZZxgKlrEf08BCxkA6IGfA9TlM432wa7AfNgm2/xqHTi0zY108OiI:tzZz3wf0YWkIGoBMJ5QN3neVO/
- TLSH
  T1956401017B91CDA7F8A96B3020B697631FF5FC1615A0961B37982F5FFCA1250892EF06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 86a55734b8802051bbbd0e8c9c506d0ca985bc5c99113e99b309469046133937
- MD5 8e806ea2e205dc508a2fb5adda3419db
- SHA1 21beab4e309b139fdcca7dd708df8dbbfd2dd5a3
- SHA512 6b362bdadd6801ceb6106485015a4ae6d227dc04c1397a730ac8fd44b00649876ee7cbd0d7690b41dcaa8451c94e9f5838daa9fbc21f7306740de89667468cc1
- SSDEEP 48:aTT4WeApYxYlxamAWHN+EuWkGWBBWAGr9SdLB8maofYZVSA:bWGSxamjHNDuWRWBBWvm6V
- TLSH
  T162B19734F7C089F5C6924537248337D7AA52B9142708445FCB67219B2610DEBEF3D741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 96ac4ef189260d5d6137c27c9470afbbde382f771fef040e9a6fa3f0ca2e4ecc
- MD5 5ce52c5c52c7ece604cb5b07faf234df
- SHA1 ab244b4a8caa29ecb24477d1cc1dd8484371176b
- SHA512 c42ec0d29350aa59cd783fdad542cd6dfcd983266726c1d45e7bdfcfa9a4302b2119b5081f987d967ec7a99b3b195717da3e839c9c9b8a34aeb38ca0e0d62262
- SSDEEP 96:cXEsZNrFQiAYLvx8RxjjL82Orp2YDDBKIakCT9KNotMQl3gJk:cXEsYYLvxcSDBxan9my3O
- TLSH
  T127F1E975A3F041E2F99B13F434762F0B4A56B9201754D0728693168E3AE52E2FE38B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 b496e81a74ce871236abcd096fb9a6b210b456bebaa7464fa844b3241e51a655
- MD5 b9f430f71c7144d8ff4ab94be2785aa6
- SHA1 c5c1e153caff7ad1d221a9acc8bbb831f05ccb05
- SHA512 c7ce431b6a1493fd7d1fe1b1c823ad22b582c43c8eb2fb6a471c648dd9df9953277c89932c66afd598d43ea36f4a8602e84cd175115266943071cbc8ce204099
- SSDEEP 192:hClej3uzvJwqJMQKN4GbeWZksMI4ETWcEbcBZ8ep2Kra7yOG:hCm2HgN4GbeWmbI4Eybogia7yO
- TLSH
  T1BA324B259BA091F2E4A4827809A63D332B7A650452B50D5BDFF74885FC196D2BE3D323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 ca869d6c6752aa4a8a6c874a694b543442992d7e854d0c48a1b60bca01a8c8c6
- MD5 7823fc560926dcd8741de6f0b900083f
- SHA1 93dc0a704bc0b8f90668548e36daf459be0ae10a
- SHA512 c79509cd306638ea9badec64ed9f7d0690e46fcab7ac77f25134065b628e76d2812f2d874ea2cc4283685c567b613a39d27b9fc4a6de2d4b9d30131f3161c4e9
- SSDEEP 192:SzQhZDqlJcKISw99ioU3MSfwLF/+nhHUVsdz:SzoZDGKYw9goWyFGBU4z
- TLSH
  T126120A626A84D5BBD2D2223636A92701DBF9732CF0266C01C7B34F467DA42C67E39303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  html/download.html
- Size 5KB
- SHA256 5b29978827b527001ede12d08281c36cdcdf7c3d228b91166893285fcf7b4634
- MD5 8b9eb8db472ebe5f0433af26dc7d676f
- SHA1 bc2720bd4ff07615f4811450045d0b3b7403f30e
- SHA512 6d1fe1179743a99581171dc007d754c01ba7f516032d7e828dc6bf56d385538233095c30426175d84b5c1b77a08818afea116912d507e94192ff9b85f56c7c43
- SSDEEP 96:x+ekouWbM2UiWy0ISeyvKJQweV6VgxRSyAjwImpKK+bpdC9Qit4H5vKjDltM4:0TouePn5BXJUV6gxUyAM3SPC9jt4HtKP
- TLSH
  T145B1B446EF0E0D1B85520968BCB5918C135E847B4B178CD1FDAF5625F380BA9183ABF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  html/finish.html
- Size 4KB
- SHA256 b82dea4689e45d9c1861d03ad7719cc17340eac08225206769e3a7fc8817afa6
- MD5 572fd27e56f1a964dd0d44350fbb0572
- SHA1 a29e6849774190f801d17ee45e01d97e9fa7a008
- SHA512 13f5ed7d9404218c0844c9beebeb45e2673087ac53aa00c05e855297258ede15464b38cbea44094beeab910637d74db7e1ee311f4b93f4e018c083d88fdd86cd
- SSDEEP 96:x+eLIFmJZx+fg3bumJsq3KitSyjxjUHnitFZ0aBFVMGCHe735H9Tw6EZGuQwtHFk:0XFgZAg3bum2YKi44hini32aLvCHcpHf
- TLSH
  T13EA1A50564DDADA341721085E8B13B06B06E8C37C712EDC8B6EF526AEFD5D4C6D22289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  html/welcome.html
- Size 2KB
- SHA256 2065bcfa62b410ffa2b79afc102b78a5071301cf16f94d2d42c12be8365ab253
- MD5 cfcb0e546d9a5b527fcbd970d5285bc7
- SHA1 d1e7c0e6d01f283d8c6f34b67b5ed004f2a6d1e4
- SHA512 c9d87c083bca3d1fe33e79431a2cd2178b468d94289415a4bad2141588178824b1984da5c0e58ae084111b5e7b35fd08abe0ecfd3b2045a918eedb86ec721d9d
- TLSH
  T13E51650B6C95DD4590722984D477B60D946ADC22C746FCC8F2EF02BAAFC1ECC5552AA8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  js/IE9.js
- Size 97KB
- SHA256 514b3a05615d18f6ef7a22c2084772a54714f0ef805dc37658bb2a1941471476
- MD5 6bab88f0923e32b6f7af848c600e1f0f
- SHA1 73751e1f8d5c2c4bd1455011d3764a7d6f638679
- SHA512 6f7eef655fe6d2cf507dcef48670554aacfc22f40d3ecf2cf7e74c3563407c4d90417748f3052dfd56b213753b0dcb611b0371f9b2a524397209c59fec39e473
- SSDEEP 3072:4Y0iRYEd9mgZg0gZWglnn8hA6xovcASrhEeSSKQ19xyWvHZ7qyX:4YmE1AnvcASrOeiQ19xJ
- TLSH
  T152A363587DE22075941BF02E9B6F214DF23641476209DA41B89D93A42F71F3812FEFEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  js/jquery-1.3.2.min.js
- Size 64KB
- SHA256 7c59c27ecbacbd14b8d9723dcd2d69685d1a649b32e3eed94f40032ce55abced
- MD5 7c4799b36ef1f5b12df707af1330f8da
- SHA1 094ccf5941c0409f5e9a7311a1cb9ab371d99c6e
- SHA512 3e3b13cd553df513dbee63cfdc83043e0c8ee7fbf84377ad148c2e7a5281f0ec5b0960d577f0af2bc668a5d8df5e8f00311c5c17b50fbccb350008e401eacc11
- SSDEEP 1536:+vnXSI+9Escogo5uW8xbm5sIacSs0DEHUjnqTDUBu6VCdZW:w8gdzIF0oDUstZ
- TLSH
  T15C53D8D972C27532C7EB6039247F930AB2B664AA294D8454F078D8E57DB0E04987BF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  js/jquery.quickflip.min.js
- Size 3KB
- SHA256 a1880c1b1e36d093a365dacdc890d53e0fcb751c2b68755257242e2924a7e682
- MD5 2594198f38d0f62fd22365e167a2c1ae
- SHA1 b7bc0b65352a941b06701a822f69077e801df979
- SHA512 e94eb7b39620b1741ae7024960c5383f71de11eead8202146d445aa50be14d29b31bb214d2aa8c3dd44e9821ea830f45ddc0adfae090300a9697c9e1baef99bb
- TLSH
  T1BC819865B3A0757B80A62279E45F5DB89031D3666ECF582CF400505C5F60A0F6AFFF2A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  js/logi_helper.js
- Size 7KB
- SHA256 02a244757c1030d8176959e37dc336881249778b3347bcb475563b44a080dab2
- MD5 00590a84b1747291236d2cc246f919f1
- SHA1 c82df3d7b0d2c675c8e24f1471fa33a9e8ac2320
- SHA512 ead61ffe3ba0d831fb527a2a38aec557eb55ed8347596568e453b6ff62ba582e6670d08e7a039c8244e7a3122950d82fb11d32836146025c5e1868be6abff50e
- SSDEEP 192:4aa+58imrMw6UDrftSAHEaLUqOPqVdLQ0:4CGZrMw66ldHEaoqOPqVdM0
- TLSH
  T154F183957309D3633A2521A098CF52C9A27840739235B9F1FCCDC594379163DA2BAFE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  js/logi_helper.vbs
- Size 168B
- SHA256 9ed41da52de778d27d79f8d04f110b93dada499735d893098db8d03d567d8fb9
- MD5 e15626f2a2198ec3622d7e1253639bbb
- SHA1 533651bcd9053eb9b8467a73037146a468ae988e
- SHA512 70cbf36ac9bacefecfcc43d13de2a334a6f695257855b76fbeae0dd947d70be983f606859c83699afcd117be61ab0091fc7d6ef26b72281bcbdcd44d8c5dd6e0
- TLSH
  T16DC0804E6914FD415433725A14579C01711D4255F31551BB597B9145898757C860342F
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Visual Basic

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

© 2018-2026

Terms | Privacy