galaxyrat | d82d3b3f4871ea31c971135b4480bd0cc0329c72210296eec0ae5caed18e2c62

Resubmissions

03/08/2026, 16:57

260803-vgajvawtcx10

03/08/2026, 16:56

260803-vf35rscd96

03/08/2026, 01:42

260803-b4y16szzbt10

03/08/2026, 01:18

260803-bpcjmawaph10

Sharing

Copy URL Twitter E-mail

General

Target
Elgato.WaveLink_3.2.9.4002_x64.msix
Size 182.5MB
Sample260803-bpcjmawaph
SHA256 d82d3b3f4871ea31c971135b4480bd0cc0329c72210296eec0ae5caed18e2c62
MD5 c0de496069210ddb9f9ed622a06a9a3a
SHA1 606ff63246f583b618ce4700d4bb76e00dcdc9d0
SHA512 c90c2cffc30c277ddd3ca84c9ea287cc83c353ff9832784dc15bbf8085e2723aa03c77386b9142a01f4f0e001da959a85341f5c0499425e50716da8e708498d5
SSDEEP 3145728:nqXx1Ysv02cO3ILfWJPf7A8PDmjHAAKunljvLli74RsePvL36tJfraDbu6B1Y8SN:Hs1cOquJH7A8PDQbKunxvLlW4RB36Brn
TLSH
T1A99833B0F023D5CAE1E84A331D470BBD733622D9D4115F1EABBA174D5DBABC10E6A186
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

galaxyrat rat

Malware Config

Targets

- Target
  Elgato.WaveLink_3.2.9.4002_x64.msix
- Size 182.5MB
- SHA256 d82d3b3f4871ea31c971135b4480bd0cc0329c72210296eec0ae5caed18e2c62
- MD5 c0de496069210ddb9f9ed622a06a9a3a
- SHA1 606ff63246f583b618ce4700d4bb76e00dcdc9d0
- SHA512 c90c2cffc30c277ddd3ca84c9ea287cc83c353ff9832784dc15bbf8085e2723aa03c77386b9142a01f4f0e001da959a85341f5c0499425e50716da8e708498d5
- SSDEEP 3145728:nqXx1Ysv02cO3ILfWJPf7A8PDmjHAAKunljvLli74RsePvL36tJfraDbu6B1Y8SN:Hs1cOquJH7A8PDQbKunxvLlW4RB36Brn
- TLSH
  T1A99833B0F023D5CAE1E84A331D470BBD733622D9D4115F1EABBA174D5DBABC10E6A186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  clrjit.dll
- Size 2.1MB
- SHA256 b8868b84474f8976d2e8864a7b6ff88ad3d96d18992a4d3d4de1093214520875
- MD5 029ac14b627bb72f05d6811378cd4cad
- SHA1 7d673b548cc7f907a57e7d2fa0e1123dc0c73c99
- SHA512 c8bc0f5bab4df05d60b48d97bae516a9b0583569e6e66e9bffa5f79005534e30d2f4ce7b66ae7e6bec58fec2ad6d56909b15a4cae51462215d0f3cadfed37a8b
- SSDEEP 49152:8WRNvfAhs1dLSf64pJ20xFuEvTaStjrTxueOBaCHndQgIdKW0Dhdo1EiJgn88Lmb:REhs1F66wJuEvTa0TUeOoCHdPSKW4dor
- TLSH
  T141A5AE86A2A801FCD06B9174C5174A57EBB2B8162371AFCF53F04BD66F333A2262D715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  coreclr.dll
- Size 4.5MB
- SHA256 1501951ac1e4141967c6d8f2ffbf59919953ec3a636046dc363b78facb64c77f
- MD5 22f58dd442d83b71a7592e9444a28829
- SHA1 fb66006ef5c73bcfcec5dea9a3114ab5a52c75aa
- SHA512 f37c30e7d04b95e9b563e0eebaf63b18e515df6040c9f44f95e99f92943df1d761ec8c999d99b1095315dcce562bca7fa63dbd389e2fd04a0e243907e95b14b4
- SSDEEP 49152:6WeWIlC4zqwBpRLZCRkab7b7b7b7bY7b7b7b7b7QmZprvC2InMZoyf/LkvjdKTHy:0RzquVRa2rd/F+oQ/1
- TLSH
  T18D268D5AB2BD009CC4BAD1B8C6D74A17FAB238591338DFEB066046651F237E26B3D351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  createdump.exe
- Size 70KB
- SHA256 2b8158fd57cf15398f6489df84523fc1497d2a24908236fe9e890cd0c14e3e2a
- MD5 f3354fbfdd880bea453cc07976667aa7
- SHA1 242147d9b6119bb3b3e72c5c44bb2f4c8ba3dfec
- SHA512 7cc61a18717a2a8ed25b6e4026b23a4d330f47866b698898d99f5e30ac77d58bb102f2049e49637b7e7e56002f9dc43df7482e66b4f7d490cf2ffa6049d24aa4
- SSDEEP 768:Zzc/aw1lkK5GNunVAmBfnXE8SlwlBwC3T/zYTlDj/tU9zVVC:q/avK5l/U8DBw6/0T5iz2
- TLSH
  T1B3634B16CA2A50EBD25E8C78C5534906EE72BC878BE0B6CB6B514DD60D62FD09F3E305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  cs/System.CommandLine.resources.dll
- Size 18KB
- SHA256 0436a660f530558f172940ccc3ab0ba23014dfecf8ebc9c3bb3d1432f7f9a4e0
- MD5 4fa722465afbcacc0d617efada02ec91
- SHA1 351e8d5a5d3910b06e29811a0042b3950859bc28
- SHA512 3984d031d4c9df8675cabf4d8ddd7400fc3e777050561d61debaddaa9ef5b8b5fcb517a65567513410c975b75ce59e4f8a0f43d091be8d7655bfb59501deed17
- SSDEEP 384:FZiLLrnqcTo+K5NWSZf/1+aHRN7HprUwleR9z7Kc8:8qcs+wft+2J4z9zk
- TLSH
  T1F382E69693FC1146F9F31E7067B9E5026D3DBF962E11D42F0595A20D0972B80DE3273A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  de/System.CommandLine.resources.dll
- Size 18KB
- SHA256 44001a639732a9bf9d16e88e6f56ec1af87bd75746401ba69f7ead82db9b6b6e
- MD5 3e36a7b6541655b01a74c16212167699
- SHA1 1790a4040a57038f155d082eb602f7aa59519be7
- SHA512 90f689b1de28d94b088c02f61cb0417ce46588149a8773338ad50bef026fd5f2d8f8873e6c379d852906ed8eb0e8ee0402c33b412a3f89e3bbaea5400c597e33
- SSDEEP 384:BZvKefXG0tKSkWSZfx1+aHRN7aqxR9zeut:zXG0Yfb+2n79ztt
- TLSH
  T183820791A7FC4206F9F30F70A6B9D9026D39BED22E10C52F1694E11D0A72BC0DB6173A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  es/System.CommandLine.resources.dll
- Size 18KB
- SHA256 a540f29165dac8f9bf0d32a7e6afbe72e4f8603826f19ab96be1e9d44c334942
- MD5 cf06680ccc2385ca548801c08a56dec6
- SHA1 eaf7e8f2c70eeaf50cb23dabf68753f16d573549
- SHA512 fb46f69fef97d37690aa2d4142f757d1459018b72106441789b065b401c7f2232dc2353161dc80ad8c5b9a7ca6a1a26b89bf42e39f5217b53273530c8d114c6c
- SSDEEP 384:wZidK+luU/oZxcSWSZfh1+aHRN7yKW9R9zIYR:zluUWxcWfr+2e/9zf
- TLSH
  T13482E7A297FC0206F9F31FB066BAD9526D3DBED22D10D42E0595F21D0963B80DA3173A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  fr/System.CommandLine.resources.dll
- Size 18KB
- SHA256 c77b9da3d45015356a006cde51cdd3e10b386e3fc2402a7f04e0fe417d94ce4f
- MD5 11635246ab843a910c1c680ce9b8e363
- SHA1 d271223d359e7ac36ab5b3476d55dd7ebcac1a9d
- SHA512 40bc3b11bb259756e12d30839f7c606c2e728c50b2b8dec1a0838ff114571bf6202899bb293c5112b866969799c12478dea97b678ea4d2cd5e80b778317d62b3
- SSDEEP 384:qtiuhCFxoEkHWSZfB1+aHRN7Y3MW9R9zIq:3FxNmfL+2s/9z
- TLSH
  T1D982085693FC4206F9F30EB066B9E5026D3DBF961E21D12F05A5F10D0963B80DA31B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  hostfxr.dll
- Size 371KB
- SHA256 41cc9b89cf89684a277c50fbdb71c9894a499668f9564e8c9380272e4644e23a
- MD5 baf74ec465a366932417d6cf24bdc1af
- SHA1 87a8e363a59902a5a3b79b087ff91640a3bf6aca
- SHA512 5ea4783b745843e268e883e94f6005de72b0c272259c6cbdc7f47692f346af09bca4149b3a65c9d4dde02be2dfdc0da888a897b9842bb1fe794eb4baa21e5716
- SSDEEP 6144:Bnl7fjNj8mbX+7KEEfFn+GoYEC7MiycfhJAmU+FCK5ZoDNsLHew4/UZ2AU8sunx3:B/+mEzafzASH8E1xpt
- TLSH
  T110841916D3E8057CF0B79678DAB69902EB727C494B70E5DF139088661E73BD08A39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  hostpolicy.dll
- Size 370KB
- SHA256 05e0542923271a909b3cfceea3d800ef96923a8b75ac39f3b99e87fe38024d00
- MD5 fa43ee6f34959fc9f55bfa7ff56293b8
- SHA1 d03fc203f32025833f2df265f2441c5ebe6bc197
- SHA512 236c8556a98a5ead182b7a2d5486b2f6792534b416d026024dd8c2f9af6c2c521d5a7282889587a039cef980c848f24a1ba7c9cb4af8cb95d9bf6818ce1a37db
- SSDEEP 6144:w9y9EvPeP4w9JVcc0HUsBCSwHa15DVOLikGAQaNa785wbZAnHvuSnMVKIAH5F9uP:wgEePnqdRsSwgfguhlfIv16
- TLSH
  T136842A16E6EC007CF0B7D679CAB28901EB727C4947B196DF139099A61E73BD09E39312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  it/System.CommandLine.resources.dll
- Size 18KB
- SHA256 1a8d870dcd187529d3c4320e90fd1b2351ec6161433e08035114ae84f5ed053d
- MD5 e70d5b4b38495eef01b23e4dce14ff9f
- SHA1 81db6a3957973861e707d82dff3682d2ca23cf6e
- SHA512 e0f3226eb0bf21ddf7287d1aa577a05ff536feca6bc53fce02ea9730635d94de82a6d9c0a9574b8e1f6baf0c9ff03509711889ebaf84b040a87dc64b1e7da5de
- SSDEEP 384:yZiW13OCXS/8DkWSZfv1+aHRN71hER9zHkW:QOCi3f9+23o9zN
- TLSH
  T18482F796A7FC0116F9F30F7066B9E5426D3DBED61E10D12E0694A10D0963B80EE71B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  ja/System.CommandLine.resources.dll
- Size 18KB
- SHA256 3ac483c6fe7455ee1f6951a97c13fd8243486e2f7079d54d7d9b462866bde264
- MD5 0c73d47f9103d5e0f1857386643f315f
- SHA1 91f2ad15a53b73d7eb8fafa280ed9849cbaea55d
- SHA512 88e617f90e8338a8349079a328098729e4c184bf2927fd50d5dceec43ced960d5a80aeb5cb4446ca24e3ad543352edcf6a0c97a576dbb52af4a5220998ba9fd8
- SSDEEP 384:oZd1bCrCNAVcWSZfg1+aHRN7HdlKR9znU:trCWOfA+29s9z
- TLSH
  T1DC82065997FC4206FCF31F70AAB9E5426D39BE925E11D12F0598A11C0D73B80DA71B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  ko/System.CommandLine.resources.dll
- Size 18KB
- SHA256 9c61fad303c24f41f7756609e3b44a6f7f504ffca050e470d608559557dcc505
- MD5 af5f7822e732f304bbf95ace6c3774e7
- SHA1 19490a28b52fe376ead18b44bcaa2de1f8515fcf
- SHA512 e3b6f658d54663fdb3be2725d43f8aed7bc1de756ef6042d554f6335d1dcbc1ffdcfa6707a2e456cf7aaa32cead3f29b75ae35628ae083252a268bb5a68f3cd5
- SSDEEP 384:hniii/8dOV9MNBWSZfcHRN7yJnMgYR9zjdl7:ndOWf4yygE9zb
- TLSH
  T13582F89693FC5206F9F75E7066BAD1026E3DBF962E21C52F0594A10D0D72B80DA3273B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  libusb-1.0.dll
- Size 325KB
- SHA256 0cba9920c3420bc57d8ef668bbd5a53f81fd1e10bc471768a985dc2173a89ccc
- MD5 993fcc93da60af6741932ad46000c87b
- SHA1 2cee3a8272ebef22a726add2f7f4a62e331887ee
- SHA512 e8e01c38514f0ee58e216732db8f77f50b272ebc835102396658f418896e6f7548b81fa408310168240882867eeec25a43e37621d8efc20a2d346456ce53c0d0
- SSDEEP 6144:bOc/JhWTo2Xeg/bsAEX8R3e91j0pMdvyy:bOW72ExXAAhzn
- TLSH
  T1B7646D5BA3E954B9E4A3C13D8E978906D7F2B44807A0D7EF03A0825A3F53BD1563EB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  mscordaccore.dll
- Size 1.3MB
- SHA256 f265dfc0b16e1386ed42038d022d3b8f24db4121e7dd8ba5a1c9d324766fe845
- MD5 9e0af68fb74f91d2d5e0a3e70e8d38ab
- SHA1 6e223f12c0615df8bea1c1e81bc1757a9f8b03a0
- SHA512 bfb6126f1327bd2e6f915e855a56ad314c1192f7b16becdc1749afca0eb9f5f02bc98721d55ea17d89771e815970de554c6c275abb4943bf879e1e00bd9b9326
- SSDEEP 24576:Uasz9urVeLx9sLcgq9jhnt1mwUYw7Go4O4MUYn4f3Xmpp:vPrVeLx9s4V1m/7Go4O4MUYn4vXo
- TLSH
  T18B554A56D6BC5499CEA9D0F8C507491FE7B13810037466FF46A48B192F3BBE6ABB8310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  mscordaccore_amd64_amd64_10.0.326.7603.dll
- Size 1.3MB
- SHA256 f265dfc0b16e1386ed42038d022d3b8f24db4121e7dd8ba5a1c9d324766fe845
- MD5 9e0af68fb74f91d2d5e0a3e70e8d38ab
- SHA1 6e223f12c0615df8bea1c1e81bc1757a9f8b03a0
- SHA512 bfb6126f1327bd2e6f915e855a56ad314c1192f7b16becdc1749afca0eb9f5f02bc98721d55ea17d89771e815970de554c6c275abb4943bf879e1e00bd9b9326
- SSDEEP 24576:Uasz9urVeLx9sLcgq9jhnt1mwUYw7Go4O4MUYn4f3Xmpp:vPrVeLx9s4V1m/7Go4O4MUYn4vXo
- TLSH
  T18B554A56D6BC5499CEA9D0F8C507491FE7B13810037466FF46A48B192F3BBE6ABB8310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  mscordbi.dll
- Size 1.2MB
- SHA256 f560ee5fb668cbda36b802b6a6d48edcc51029e10b7f41ae17f042f8d9857864
- MD5 76765e4dd1d6f771bf302b6b29378051
- SHA1 e9f6b309e11f2402bf84c2b2aab54c3247af8770
- SHA512 54f9377ef40499a37cc3b1379ac886175b6da3e9d409bb9106573fc3b789fbf3c4c301cbc93d231e102b47cb1f7b9d7df6876309c8b34be0428e6ad914ddeb38
- SSDEEP 24576:dDNOL49m3FDLjET38Gz85zNElDhQo3gNHSeK9AIS:dDNwqqS3INYDZgNHSejJ
- TLSH
  T146456C56ABFD5099D8B6C0BEC58B421BFA70384613256BDB5790C21D2F3BBE46E78310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  mscorlib.dll
- Size 58KB
- SHA256 96b2a53b94db2a517121bcf02e84ed4208987bf09c61994b579c3388faa00237
- MD5 03ee65edc7af4bb18efb8be7ec7cb57f
- SHA1 764467f428475cc66bbf120c97b87fa90120a9cc
- SHA512 e5ee31d071b36b2e9ed77dd9496b29d180e52ae0f9b5f8b45e9af6504a1fb525453d2be028d302b4f68bfba97f79e6584fc6e1af4fe235aa733ca0f7a9e0475c
- SSDEEP 768:l9MrIdsnTX4XN2taL8ilzJx96qaMsXYf/4yANGLd6cSnnc+YY5k4ba2yGlG1QeYm:l9MJDlYY5k4bZyGc1A4cYcOOiozQ
- TLSH
  T12543F731FE089733CD8B9BB9DC77A6400BF633C514760939E846D61714CA7A6933279A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  mscorrc.dll
- Size 131KB
- SHA256 e7378dc9b76d1c0f68abf2cc52cdc9215df4ca96af5f60c928344cfe0cf39d51
- MD5 801e322cb484a5dc5d57f46ede9be5fb
- SHA1 0835b443a4217b541f743a5a3e4f9f20e2692cdf
- SHA512 72020bfceab178866d08500a54639cbdfef2c9a47f7ce16a389ef5c88d529308957adcac4b9a424e9e4e0a9e9c42593bb11c43b2a22719fe0f5e018893557112
- SSDEEP 1536:18j91ntuvh7xChdZUutVHSfignwJfcvVMgSIctpoECWFzP:18rnTdZUufSfHnqCSpSkj
- TLSH
  T1D2D38851A7F95218FAF73B74ADB95AA00E7ABC96FDB9C21D0240805E5D71A40CDB0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  msquic.dll
- Size 512KB
- SHA256 6246f5fe726fbf612ca621961fd90a440425d64e9f4e51b7bb7adb80651032fa
- MD5 2480590d88abb773d57c9c983e2a47d8
- SHA1 9fbb3741c722f7e3c08d3346847b16ac5d5f4464
- SHA512 e7f8d735a9a18136a8f0c9baef8e3096f2aa68d8ad0106573a64a35a020fb48791e85226ff3ad55d67b36c86474755661a567219978fad12cea4ad511fc0b08d
- SSDEEP 6144:eKQizqeRb4AzDBBUE2SHxkKl6a1TOAwTrySuOCF83IHL54WstAVic7wIHlt6L6/l:LQk5Rb4AzgUHxr23UF8Wl4ht+7
- TLSH
  T17AB47E1267FC14A8E0B7C378C9278527FAB27C254721C65F6391922D1F63B50AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  native-sentry.dll
- Size 1.2MB
- SHA256 82aff93868b331bea95c491c105c6161ce7e0c7c62ac08ca9a849cb68a84bf33
- MD5 597faaed25f28edd2460639a060ba1ec
- SHA1 5736df7eb28a6e336b09caa0f5c307183e1f5a3a
- SHA512 c081ce902c11e1d3db0cbfdad74a7432e9df65e16db0b64d8d8b552d375b943889d55c07a99d1ad4676d8acc52afb1c2d3013471a572f417eaa27ba5a6364c11
- SSDEEP 24576:HPb+or0U0yKTcfgpQsGsE3xeAGD4iW6piEg2b:HPPoyKTcfaQs7fb
- TLSH
  T19E459DA527A81296D17BD27DC6878F4BDAB27801437097CF01E442E92F13BEA593F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  netstandard.dll
- Size 98KB
- SHA256 9a0296faf333af31a73d1527f4efb82a60e14f7c23a43a3c37477eb258253e53
- MD5 60d3e0639fa663aebac105773383b872
- SHA1 43dd46aa191f72fa7ed3747a63bc8efaad239b59
- SHA512 e5535e1afc99fa0016569702cce4b4c8a7ffe731380361074205cdf6a7dbdbca6290388d97cea463a6811b133855c0eb655061a760428292f21d620bcaf62a81
- SSDEEP 1536:ALrFLbuCbYdYZ5B4bgDHsPdIpuSE5L3Hkcz96kZXvlzeX:iRaddY54bgDUAgkeNU
- TLSH
  T1CBA3F620AD1897B3CDCF9B79EDB39AC107F6A3C505761FB56488815B92CBB804236397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  onnxruntime.dll
- Size 20.7MB
- SHA256 33d3de39c86de91b4d68ec488aed3f091554ede464a881631ac7387a4caedb06
- MD5 4aaf5bc4afa17b600c3c4af3100a9dcd
- SHA1 159f370358b867e189d3e3969602d46e0d1050c6
- SHA512 4a169d1cebe7fb2784ef723180c8df0dffd6f6fdde137fadb6c81fff5844436159ed2df58d252a81434180d3b2ce8989d6e3b31204000f96398594b2d3b37e05
- SSDEEP 196608:ICO3WJJrPtiRyi4zaNbSmHGOnDfPd3MKaJCE:nrLONbHmefPh9aJD
- TLSH
  T108277D2667C706A9D07AD278CAD78F13F772B419437237EB019000661F9B7E26E3B652
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  pl/System.CommandLine.resources.dll
- Size 18KB
- SHA256 21184c696500f2ee1e58c2958ce2220ff3eaff6dcf5426aff8a82e3a8d116fb9
- MD5 9db61fcac77e44f42fb335ffba304952
- SHA1 6f0d08f3e5a6444af7cd462874906b4d1e95e2e3
- SHA512 59972dd95728b580207a8a2b8c5b334dd7ee11ecba22d78d7429efdc67001703679c3e362c438acf21bdac87a73c36a643cd31e48a81455f60bed88e73ed16dc
- SSDEEP 384:FRiHBOS1ovzx9DWSZfi1+aHRN7rSER9zHbEvJ:ZS1orxbfG+2rSo9z7Eh
- TLSH
  T151820996A7FC4106F9F30FB066B9D5066D3EBFD62E10D52E0694A10D0962B81DB3273A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  pt-BR/System.CommandLine.resources.dll
- Size 18KB
- SHA256 111758ca791a67923dfac6378d4c024240d5e5cd28b4b085392b0ae0bd5421ce
- MD5 02d8d28bd37fd2617b0f7f468af2d9d0
- SHA1 173672281a5d18559bd08f4adabf40667f5b93e7
- SHA512 23fd6526c357bc3be25319d7f3afbc195f1d1f372d11ac5937efecdf2aa8e56b5774194775841a5f13facffd21a3d7c3c5b5b5084cf616ecaadc06a7c30b2a7a
- SSDEEP 384:dkZho7Emar94SWzWSZfO1+aHRN7l62QR9zP3:dYmar2Nhfy+2I2s9z
- TLSH
  T12882F79653FC0246F8F31E70A6B9D5026D3DBF962E10D52F16A4A10D1DB2B81DE3273A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  ru/System.CommandLine.resources.dll
- Size 19KB
- SHA256 b56e93bd5b821805347b5cd5791eec112ff0183ee906571334e3521df8978098
- MD5 39ff11fb757d70f75651d3dac22abbee
- SHA1 8632fd0dff8424278c6e56c4c228fa050d2216e1
- SHA512 cb9c8b2087ef10b72c206c9ebe8f47ed0821a2446f59693bcb353db647626919c7d555b07f9492d062e9311fff88263b36735bf6546b5f2990bb28bcdb35f735
- SSDEEP 384:BZi5/3Q2H5kyIYD9iWSZfzHRN7eoR9zk5Rnr:gI2Hafze09zkr
- TLSH
  T17992079993FC1146FAF75E7066B9D502AD3EBFA62E21C52E0594B10D08B3780DA3173B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  sentry_wer_module.dll
- Size 760KB
- SHA256 961311bbc51c52b010e46d040d5aa87290cd59b63026fb818dc7be5b1b7ef587
- MD5 7063f0f9050fbf6035602ab85a6994ef
- SHA1 d47e626467cca03f16fbdda24235244c3fa1ff72
- SHA512 cd7fbfdbdc2f8c22fd800c8ed7f8dcf63d0457a2d88555c1bd191a3783ec2789046463b46e100802c9a01e46bd23763d028533527db0d069f351541cb30a4d2a
- SSDEEP 6144:faqQ0NpytmS0PP4pyUYugRvvAUHBXFIbGeQGFtYaD9OQu9OYuZFjpyc:b3Lyt/0dUYXRvoUhybPOaDHRYufjpyc
- TLSH
  T195F48E653BE812E6D0B7D17E8A978F56E6B2B814033097C701D442AD2F27BE45A3F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  tlusbdfuapi.dll
- Size 1.1MB
- SHA256 413524f658aaaf362a8621d1bcc9ec9a4a01008ffd7f99bd65b9fc7c3bc3fc15
- MD5 5882521919d920b091f01c91ba1811ff
- SHA1 3c2540913c517eeed14302e2a5f03fa7dea6c60e
- SHA512 2c1200f7ef62ab7a14bc8a353cb95536e48c988572a452f1d3dfa01ae35e98e706ba45b41e6d2051ba4acfe29192b855804b0c837e5d534a9e4f7edbbd8a36f8
- SSDEEP 24576:sna+ikVXTGprkgUSECq5rvYoLv5tbCiWWi1xOw:snpVXTGprkgUS9q5xht1Wp1xOw
- TLSH
  T1AB356E012A587BB4E287E038E5334942F5F4BA36336461FB42FCAF642F57A9109797E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  tr/System.CommandLine.resources.dll
- Size 18KB
- SHA256 65c1290456ecb2ae9a7781f0ac27bdda2b095a46da78083b8ddd6f6763e2ad08
- MD5 a1805ba470bfbdd1b3b296a2c768c599
- SHA1 dd662b9d656d6164b71cb4bacce017fbcb534924
- SHA512 cf8a519e71beb1cb57ea41968f3efbbeaae9301a83cc4a7b84361bb4d95c7b10171b3dd41f9efa7aedd65e2bd38b1f9b960da2e9fd4dd6132b9919dd42f6cf81
- SSDEEP 384:kXLigMSK9LKRWSZfP1+aHRN7jcxR9zeSx4:kzK9mfd+2479z
- TLSH
  T131820895A3FC5206FDF30FB066B9D502AD3ABFD62E10D12F15A4E11D0962B80DA7173A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  waveapi.dll
- Size 14.9MB
- SHA256 93aa55b25d171baf2232eeea57a0e2e64c22b724caa6018ed5483d56b049d660
- MD5 49398c8e7ad5b7b2370a4b9086e7746c
- SHA1 1ec3ea136cc49fb6e892d5c7b1a8f9c0c5c7389f
- SHA512 66dee9e3e72b7f2a2f52770a5ba48795f0576c573e0a7b714053432b05bbd5f716aefa69e7a90119efead6c99efd03d0cc2c151bab0396009eecfa434f7a4e0c
- SSDEEP 98304:lgCBT9m7+rqgiawLAyWsMCKUjo02zk2dWfTasQ/gR94eP4XQAUXCRYyVSXq1hALS:llKOq/aIAyW/Cnjo02zk2SasVPL+2y
- TLSH
  T1D8F6B5097718635DE661DCB9DF830A7BC171B488473965FB1E860E33CC16BD8B83AA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  zh-Hans/System.CommandLine.resources.dll
- Size 18KB
- SHA256 e62a2400ae23fd9627d836fb56fb9539f31b0dec8518aa1277f867b8e72bfa8f
- MD5 5c78bc77e00ce7e14fb160cbcad9396d
- SHA1 0881be5c287712bfa94d0bdc8229f6a0a4e30b89
- SHA512 c1b0b5e15f2cb74a2186929080aff2821b85e480a65f4061b30f0a555e34ea00917a5372d42aefc711ac44006ea234c43e1a4c34661fcee5bafc27accfc9dc85
- SSDEEP 384:4ZiHOKM9NeUJWSZfM1+aHRN7HER9zHHodL:BM9tTfM+2Ho9zot
- TLSH
  T1B182E856A3FC0116F9F75F7067BAD5466D3DBFD22E10D42E0694A10D0962B80EB32B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  zh-Hant/System.CommandLine.resources.dll
- Size 18KB
- SHA256 5d01b46422231712dc52a92297496d320a061a28e78642437d043afa23ea7b23
- MD5 d3ea011ecdfd5d7c3f8f6bd4ca1bd664
- SHA1 169c55db610ac90e12da5aabbac0d6b79a4d4b88
- SHA512 bb8a7da9e93838837104c8e17f4a6e5e87c9bd3df9081db9e7eba2824fa2f113449d284998eb3c69769254f13ce12dc1528e01435971dd858250f7f00ee847a5
- SSDEEP 384:rZieOB7uAWanbWSZfL1+aHRN7IzUwleR9z7d:g7usfJ+2IQz9z
- TLSH
  T1AA82E79293FC0206F9F35E7066BAD9066E3EBF961E10D52F1554F11D0962B80DE32B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Matrix

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32