Overview
overview
5Static
static
3Rbin/Keydo...ed.exe
windows10-2004-x64
5Rbin/Keydo...ed.exe
windows11-ltsc_2024-x64
5Rbin/Reade...ce.dll
windows10-2004-x64
3Rbin/Reade...ce.dll
windows11-ltsc_2024-x64
3Rbin/SkinMagic.dll
windows10-2004-x64
3Rbin/SkinMagic.dll
windows11-ltsc_2024-x64
3Rbin/authLib.dll
windows10-2004-x64
3Rbin/authLib.dll
windows11-ltsc_2024-x64
3Rbin/calaLib.dll
windows10-2004-x64
3Rbin/calaLib.dll
windows11-ltsc_2024-x64
3Rbin/encLib.dll
windows10-2004-x64
3Rbin/encLib.dll
windows11-ltsc_2024-x64
3Rbin/libeay32.dll
windows10-2004-x64
3Rbin/libeay32.dll
windows11-ltsc_2024-x64
3Rbin/msvcirt.dll
windows10-2004-x64
1Rbin/msvcp60.dll
windows10-2004-x64
1Rbin/msvcrt.dll
windows10-2004-x64
3Rbin/smAlg.dll
windows10-2004-x64
3Rbin/smAlg.dll
windows11-ltsc_2024-x64
3General
- Target e5992cc76f896b95b6f6c05b0052ec68c0d91e68c877ba791e8e6849217fa16e
- Size 2.9MB
- Sample260805-d4879axekg
- SHA256 e5992cc76f896b95b6f6c05b0052ec68c0d91e68c877ba791e8e6849217fa16e
- MD5 130bd5eddbaf29435d03098a0a9d825d
- SHA1 5bf3053fae232d0423e1687af442e78172aa1486
- SHA512 e29f2cb6f87dfdee760cee2c76309f8ced2bf22dcfb82930bd5e579f5106ce81e09ba9b04b61872db6df4617fcd3f0d6ffe8930b4ad09f168976e32c113a095a
- SSDEEP 49152:H427yQ6KhkudcMto/aUp/P9fBy6EzjZw+toTSj6XE5NgSs6qzKlrkguuv6FpWDG:H427y6+ui//p3xs6EzjZw5TSNn/qzwrG
- TLSH T150D533B2F026604AD0A29E71E78EEE131188EF25A0CF6F44D573694EC09A9547FDDF18
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Rbin/Keydom_Personalized.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Rbin/Keydom_Personalized.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Rbin/ReaderInterface.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Rbin/ReaderInterface.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Rbin/SkinMagic.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Rbin/SkinMagic.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Rbin/authLib.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Rbin/authLib.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Rbin/calaLib.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Rbin/calaLib.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Rbin/encLib.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Rbin/encLib.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Rbin/libeay32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Rbin/libeay32.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Rbin/msvcirt.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Rbin/msvcp60.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
Rbin/msvcrt.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Rbin/smAlg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
Rbin/smAlg.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Rbin/Keydom_Personalized.exe
- Size 2.1MB
- SHA256 2168001e94294dcce6bb353603df8cc99c07ec4c64785cefaac18ee2ea7c970f
- MD5 474290e44b455042a772e5616dcda2d7
- SHA1 c57b6ee34b87e96372db83f0b8a5c9e55018e710
- SHA512 0073f4bfd2cea44d580ad0e1dcfea8d2f98ef9ba499d4fafe98b363ea1bafdf96baa746038012c1577251593edaeaf0b2f3bbd8ba136fb59b754451c1544857b
- SSDEEP 49152:cphWMULwWbJ6XMXNia6IL027ZyAVOmmkrIaBfMKU:cphpYwWbB/Y27ZyAVOmFca5MKU
- TLSH T1F7A54B20D6025C2BF67708B2696EAB2D56687F7017506483F3C87D2E25F61E37631E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Drops file in System32 directory
-
- Target Rbin/ReaderInterface.dll
- Size 196KB
- SHA256 c57ce798964bdda6befe16d96dbbd75778e15f045fbf96177be7826a8038a46c
- MD5 24cfe08eefb800e12d05a62c07b9a0d2
- SHA1 424d8b7875c4d989edc578286f5cd2e0c536e8a4
- SHA512 26bbbaeb0b111b25f074102ad6433818ed1bb102d5c8f5ee7bbbf2daadac6980407dca769c17a24af7d7fa5a9c06e1b2b4327b24e4f88ed13787a38030ef8f08
- SSDEEP 3072:dYVE5I6sWhfm3p1/hubnmofeC4QN2k1z3L2oMYWeG5Z+:dYVu9Dfm5pZofP4zkgY87+
- TLSH T147146C219101E83EE76795319453CE1E99AC687C87888383F3E43E9757A36E7A237D07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Rbin/SkinMagic.dll
- Size 412KB
- SHA256 f18d4311b25af73f10a91c3e888706c34309e00e64cf6172241a5f869bc1112c
- MD5 1a44b12baee88f3f4a601b52cf657421
- SHA1 6d816b4548445be9f534fbd7f857271957e8c65f
- SHA512 61f218e32eb0bb8efbd0ecdf9f98d13865530996e6acaf6e288ce7ce346ef9403fa0193f9d4270e16935ee982eb9ebdad8dfb06901b0cdfdbe1f08a67e4f63a9
- SSDEEP 6144:YVwnAqoEWr8o4+L4s88oMcZmVzBkNXR24hg/iikhMkT9P8xQs/Hwhz:M4AqzOL58R4kNXY4hg/iiGJqtwhz
- TLSH T12E949E01F4E14173C3970530365D7BBEA3FCD715097DA9472B9C8A4CAE75A928A32B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Rbin/authLib.dll
- Size 140KB
- SHA256 c2c00cf9f76b755217ffadb7334b46401f92fefe22b1395b3769cf7ea4ec7ade
- MD5 36d92ee350c569cfe7f41d7a72328d3d
- SHA1 945e54999507116c69909dfd82ba35631fc1634c
- SHA512 f004a31e6055dbb9756d9500fee6c32348c6cec39f1e380c4ef50cd01c9ce2eaf5426d52bdd0a0d03d409925b4b4f62c74f69d424305bd91c7e52496c49659a7
- SSDEEP 768:AoStu8piP7pwAYrzdz1pb4ITfLGm/wsUvshTrj8WHsI62oY8GXHfwm39G9mhcQFE:AokiPqlT9/WNm3I9mhcQIHCO4IYpC
- TLSH T1B8E3D830C221D179E5E6407635FEE62FC65CA8B6130981E773D46A0E25D07F1EB3226B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Rbin/calaLib.dll
- Size 48KB
- SHA256 175eb9cb438c6df0d7d2583cb17bb3d8e3e79fc5b8128f350080e00c6d9076a4
- MD5 59911666397d7a8a3154c41cb50e1f28
- SHA1 8fa0fd763c6e584276cbef4d03b4c95ea3114c6c
- SHA512 86cd180c653a9a88b3a9702f2764e7885cf950963209586f6c4ced80e775c3d94976f50589a5c27a35d61d7d43e7101437570c0d3ae629b84ad3a7719218e7c8
- SSDEEP 768:E5fDT+DGBnhKC7Mntp/PiUK0pOQtgwn/VyGDs:E2ntJPiUK0pmsyGDs
- TLSH T1AB230920E5478138F1BE4F34383D5ABE94066A9167F065EB6BCC2C1A29BE6C3D53161F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Rbin/encLib.dll
- Size 1.3MB
- SHA256 bcf675467f4dc8726cbd4cd5c3bea4243155d3dcacf6da2d4ddafc31a582f514
- MD5 2f9488435de8ee4a82929e13b0285ff2
- SHA1 6c20ef1537899510b294504cd20f75af639cdf37
- SHA512 ed6d5442af7f5cb599b39f77900d6a8c2a30605a58e508fba0917908572bd95d32266062d30ec5449268fdfd571bc20def5bc4414f120d1205c0871669b1f1a1
- SSDEEP 24576:Q/UXe6Gop3q0LR6khI7DoXZ14/+G9Z9j0AGBrGSsj5SdrWmgSo5Jg3vmvvIt64GO:ukkE/m3IttL0VwsQ
- TLSH T136552722F287E9E0CD8E71B454B8EBBD15ACEDC657259FD3638DDA6490834D1633A00B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Rbin/libeay32.dll
- Size 1.1MB
- SHA256 30bbf696708ca533375a0b5af9a47445333cfe368af4fdc079f0f0f48e6bdc3e
- MD5 b103e5b2882821d7e4c98c052888395f
- SHA1 b488172e5c269d6283653ac11bc96e701a8d6e76
- SHA512 de3ba5443309d7ccdb6a1badd6bc5d7a115b4a57adfc091ceba5edf9d3aa871fe4fc715de36a67a9efb2920f61e264c56a3ceefca9120616edc54fafce609e2d
- SSDEEP 24576:d91y3U+idPVcdxxtj4i/8MROt2q7Ilp9ASU4u25p1ijbV+/6Yp:d9puBSofOt2KIlp9ASFu25p1gV+/6Yp
- TLSH T14045AE07EB91D9B2E88E527D6AB7567F4A379611432AC6C38FA039818C311D1A73F3C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Rbin/msvcirt.dll
- Size 82KB
- SHA256 12ca4e224145ace98028cc85e776cffa24af8bd6a26f20b47573f2acfe62adda
- MD5 224149eea3977b97136bff4faf489bbe
- SHA1 71d8d7bbc0bd4a0155f89695b39afda35705374b
- SHA512 4783461d8393e7a39cf7b05cfb18c1c827a5da79bce00f8ffbc51b9dbf1b7fb8f0a0ab6ff287147e0ec8d930df50f0a8ca0a0176b653bfdfdd69e452262d987d
- SSDEEP 1536:9oAXjYnV2KI2jZo5xpuP6UICAE9CRVhHUVwUmr:qATYnrjZo5xplUhERVhHUVfM
- TLSH T1E583082677969465C1B8937CDCC6470AEAF3B0198B539BCF4266835E0F1B7E46C3E260
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Rbin/msvcp60.dll
- Size 597KB
- SHA256 2daeb4cd63bb1fecc420a46f3ba019797a3a14893d5c2ed4edff2b34dba4e6f7
- MD5 140504ca78880413dcd994f7076c160e
- SHA1 7a7376a53936c8a7933d1dd70a14d9e0286a402d
- SHA512 3046ce4a8f3446fcc7596c71181101e90313cc47b449fae9bf29e47e8c12542dba9e00cf78b646cc311bc9663adce491f2b2e2af69ba4d80bd9a2108f954f54b
- SSDEEP 12288:ZotDY7KJOxMgpPSxR0HCbdm7q4Ec1BKWzvgxY6eyZWWiH1EV4K+GEKZBWodEq:OtDY7KJOxMgpPSxR0mdb4Ec1BKWzvgxD
- TLSH T15DD4E812BB0A46D2E162A3BCA5C68302E7B17C488B25F7C741DBD35D2F177C8A57B660
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Rbin/msvcrt.dll
- Size 758KB
- SHA256 c1be919e7de267ed2fcfbb4da52aad912cb468069b58b6a00198ff3c525373a0
- MD5 c7815c121632e8ce3ad8019f2c1ff910
- SHA1 cf42ad5ff616c5d38e48779f4192f2cec30da7d4
- SHA512 f46b919559689e35fd2459ee78d99758d5066bd92a0be492585319a3b56a03db9b111530e95e2fc38ef45e6abaec0b77f482e23b7574fe343f89543e70266fcf
- SSDEEP 12288:nFzYysvCqtqFc/Zvs7tmqb0Ax2vNfcVFrFCieH6/0KhN90ZKESx1n0V50jCxmdyV:ktoovykc/x2vNfc4ieH6/0K790JS7yxp
- TLSH T1B3F48D51FA92C0B2C4B11074065CEB72593FA9B14724A8F3B7D59BEE8D603D0DA3B71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Rbin/smAlg.dll
- Size 496KB
- SHA256 7892109d24317ca5c5a93fd86b97c5cb519ab243d3038eae27870e0a53bcde7f
- MD5 6815914487b33f1ca81ad141bdbfee92
- SHA1 935167fed0409f58d9efaa63a3df4f3c761b1ee6
- SHA512 72629f4e204665754987bfbd1cc35133dd01bcbe858b2bf57b1d9a89f6670756f0616331b10a2052aacd94265d68917d56e2824f25b958aff0f389ea25e43825
- SSDEEP 12288:08CS2Fk+t568NRw4L35DcC1OBwXo9MYtqvM35JSg19anK:jxkk+t5dtO9MY2M33Sg19anK
- TLSH T134B4D811B112CC37E12E447C512D87BCEDAA7A7221C62843E3D4BC6915FF5A2AB11E9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10