c81b02a7ae2e1eec2219a1caf883e249c529c9dfea0f015729b15d28c902f55c | Triage™

Login
Reports

Overview

overview

7

Static

static

3

TF_Card_Ba...ha.exe

windows10-2004-x64

7

TF_Card_Ba...ha.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

LICENSES.c...m.html

windows10-2004-x64

3

LICENSES.c...m.html

windows11-ltsc_2024-x64

3

TF Card Battle.exe

windows10-2004-x64

7

TF Card Battle.exe

windows11-ltsc_2024-x64

1

d3dcompiler_47.dll

windows10-2004-x64

1

ffmpeg.dll

windows10-2004-x64

1

ffmpeg.dll

windows11-ltsc_2024-x64

1

libEGL.dll

windows10-2004-x64

1

libEGL.dll

windows11-ltsc_2024-x64

1

libGLESv2.dll

windows10-2004-x64

1

libGLESv2.dll

windows11-ltsc_2024-x64

1

resources/...1e.ps1

windows10-2004-x64

3

resources/...1e.ps1

windows11-ltsc_2024-x64

3

resources/...5e.ps1

windows10-2004-x64

3

resources/...5e.ps1

windows11-ltsc_2024-x64

3

resources/...7b.ps1

windows10-2004-x64

3

resources/...7b.ps1

windows11-ltsc_2024-x64

3

resources/...2d.ps1

windows10-2004-x64

3

resources/...2d.ps1

windows11-ltsc_2024-x64

3

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-ltsc_2024-x64

3

vk_swiftshader.dll

windows10-2004-x64

1

vk_swiftshader.dll

windows11-ltsc_2024-x64

1

vulkan-1.dll

windows10-2004-x64

1

vulkan-1.dll

windows11-ltsc_2024-x64

1

$PLUGINSDI...7z.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
TF_Card_Battle_0.1.0-alpha.exe
Size 497.8MB
Sample260806-d23bxsfe94
SHA256 c81b02a7ae2e1eec2219a1caf883e249c529c9dfea0f015729b15d28c902f55c
MD5 70b4747c8bb77cb9c88e11f5b27d9b04
SHA1 119a315f49a4b720b5eaf48dfc615f35447f97dc
SHA512 129f323e0f87a9e42fcb9e7029c20bf24eccb214e086806bd3065fa4a2de1c8c0dc4158876ee7c59baf44ea20c073f113bedb81b79c9ebc1b92d30bce9426c1e
SSDEEP 6291456:YN8pMxwI5OXQ+GqygLuj3pjke34O5m5kMVyeK3GmajW2qgHPfMw5croCGHN5k+zc:Yq9IcgFqyKcZ3xAJciq2VMwakCklCec7
TLSH
T1C34933E95072F42EC85D18BC9E60BB7091161972D60D9E3FEB5B287A39ED4A07C50FC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

TF_Card_Battle_0.1.0-alpha.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

TF_Card_Battle_0.1.0-alpha.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

LICENSES.chromium.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral8

Sample

LICENSES.chromium.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral9

Sample

TF Card Battle.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

TF Card Battle.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

d3dcompiler_47.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

ffmpeg.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

ffmpeg.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

libEGL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

libEGL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

libGLESv2.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

libGLESv2.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

resources/app.asar.unpacked/web-build/img/sidebar/151e.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

resources/app.asar.unpacked/web-build/img/sidebar/151e.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

resources/app.asar.unpacked/web-build/img/sidebar/165e.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

resources/app.asar.unpacked/web-build/img/sidebar/165e.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

resources/app.asar.unpacked/web-build/img/sidebar/287b.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

resources/app.asar.unpacked/web-build/img/sidebar/287b.ps1

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

resources/app.asar.unpacked/web-build/img/sidebar/62d.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

resources/app.asar.unpacked/web-build/img/sidebar/62d.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

resources/elevate.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

resources/elevate.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

vk_swiftshader.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

vk_swiftshader.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

vulkan-1.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

vulkan-1.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

$PLUGINSDIR/nsis7z.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  TF_Card_Battle_0.1.0-alpha.exe
- Size 497.8MB
- SHA256 c81b02a7ae2e1eec2219a1caf883e249c529c9dfea0f015729b15d28c902f55c
- MD5 70b4747c8bb77cb9c88e11f5b27d9b04
- SHA1 119a315f49a4b720b5eaf48dfc615f35447f97dc
- SHA512 129f323e0f87a9e42fcb9e7029c20bf24eccb214e086806bd3065fa4a2de1c8c0dc4158876ee7c59baf44ea20c073f113bedb81b79c9ebc1b92d30bce9426c1e
- SSDEEP 6291456:YN8pMxwI5OXQ+GqygLuj3pjke34O5m5kMVyeK3GmajW2qgHPfMw5croCGHN5k+zc:Yq9IcgFqyKcZ3xAJciq2VMwakCklCec7
- TLSH
  T1C34933E95072F42EC85D18BC9E60BB7091161972D60D9E3FEB5B287A39ED4A07C50FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  LICENSES.chromium.html
- Size 8.7MB
- SHA256 000ae5775ffa701d57afe7ac3831b76799e8250a2d0c328d1785cba935aab38d
- MD5 1ca87d8ee3ce9e9682547c4d9c9cb581
- SHA1 d25b5b82c0b225719cc4ee318f776169b7f9af7a
- SHA512 ec07b958b4122f0776a6bded741df43f87ba0503b6a3b9cc9cbe6188756dcde740122314e0578175123aaa61381809b382e7e676815c20c3e671a098f0f39810
- SSDEEP 24576:ZQQa6Ne6P5d2WSmwRFXe1vmfpV6k626D6b62vSuSpZ:ZMfTVQ
- TLSH
  T1D296A52F7F48037306C642627B8B65CAF21E903F3B561A54345CD1681F6BA2983FF699
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  TF Card Battle.exe
- Size 168.6MB
- SHA256 d5f10ff2239234ccb7e322bb20162272c786f292c9f7d93d17f1c3256cad53dd
- MD5 b477b2877861c95667e0959839671b34
- SHA1 c332020fbc96db8abb1e67aee37cdf480808ae98
- SHA512 a21d7270e6ff727fb83ca57771f62d5043c01d7c0587d8536c3732bb942cbf8c2ef124cd58fc5025e69efc26b6a1268ded907d375e3e7797baf88b49ffc31ebb
- SSDEEP 1572864:EOhiqBPiJU33xaD1gWcdcMPEDCNCgDX0Bf+NNvTPQYhl49RIuKj53fHcTLNKJF96:2gmeNxNNZxqV
- TLSH
  T1DE887B13F29651D8F09DD1B18B578236EA72B8460738A6DF2754172A2F77FE02B39B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral10 behavioral9
- Target
  d3dcompiler_47.dll
- Size 4.7MB
- SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
- MD5 2191e768cc2e19009dad20dc999135a3
- SHA1 f49a46ba0e954e657aaed1c9019a53d194272b6a
- SHA512 5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970
- SSDEEP 49152:KCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvhiD0N+YEzI4og/RfzHLeHTRhFRNc:xG2QCwmHPnog/pzHAo/A6l
- TLSH
  T1AA367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  ffmpeg.dll
- Size 2.7MB
- SHA256 c8476ee68088d72b9fab25703093df19237d14387016b77f472e10c99c9415ed
- MD5 fa145097e0274da929aacd68c31338ab
- SHA1 a999806ef0c15593100e21bc8632d7b1806bac47
- SHA512 d4898eed2ea09cb9b1810d783558ee7bf284701734437fbd9e1035138216e1ddbddd77d588a0b722adc5c5fd4a245871537bfb9b168910fc2bffbd6cb78c3c9f
- SSDEEP 49152:pPDtyvMYqXiOaeQ3NZ+GEMDbG7m8x7n6mfu/oBLpweNsgMzqvU9n7xN:9SOONYbQG7m8bdazl9n7r
- TLSH
  T1D7D5AE06F6D640D9D01DC074869F9223F631354A8B24A7EF1B909A252FBBFD46E3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  libEGL.dll
- Size 467KB
- SHA256 7bee4e33d89e5a4f2b3bc74d632f7c773ae9a399b6b2ba6d29b1192e25695a8b
- MD5 5db499ae909083620e47eeea1623b2af
- SHA1 bc23303d6885b8f5c3fb84b3fecdf1a678e94a25
- SHA512 d656bfa6d59c495d85eee872b372f7fba24f89101c38de1de904ece0d9ffa6eb93de81fdf674efa5ef724ea73188b908b8ad32cfee03c656accb835683929311
- SSDEEP 6144:ZuF2Dw0NiKxN6YTfDVTCanVJhPadWQo+gehJp/Ej4:w0iKbbTfDVJ2dWQo+genp/EU
- TLSH
  T1A2A48D15779444A9E06BC174CA534642EE72B8960F25FBDF03A492392F7BBF85B39320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14 behavioral15
- Target
  libGLESv2.dll
- Size 7.4MB
- SHA256 ee039e42a4948e9f26ece8515f3c699014fa7803ae597cd3427fa1548962f9af
- MD5 57c23aa2c39f11528e56a48ea1824036
- SHA1 d4fbf180266eb210f8d83360cbbd3804249c60b8
- SHA512 77487060b824cc70b30b30b144b8f174fd08ca6a298fd8c8f45d8417b90b7914a0d135edab39d6a5b2b883d49e9386da382a9ce5c52dc07ecd147f49118efa63
- SSDEEP 98304:Ceo+zGD6g/ZXxUhH2jsS5Tgg+uPGOja21pcwXm3zq:C1u0MhHUmkjFCzq
- TLSH
  T1C6768C03F29641D9C05DD2B98B5B9123FA30B8944B34B6DF2A5847253F77BE06B3AB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  resources/app.asar.unpacked/web-build/img/sidebar/151e.mp4
- Size 81KB
- SHA256 ff9960ed6ce2e3b01b20c740a3ac61a33b4ea185a2e87a786a37bd868cfb1e05
- MD5 1c11ddac9b382130cd79234845eca3c3
- SHA1 f681d5ed1972b251c353878b6793178cb5313f9d
- SHA512 6f3d7a96e4b6c4ca44e7290bfdd181ab21bf923008d2b183e7f4a3fd08505ae578a13236ed40920e069eaf3e3d1ff9d61bbee0b76b4c2723fe361318da516ea5
- SSDEEP 1536:8LnuDACczPYBhka3ipHRSbifw2iiKaM0T21nNcjCv+ymwb4bVNpA:8juDDGPSSHcIw/iKIT290Cv+xwb4blA
- TLSH
  T13D83022019774EA4E466E37A91093BD53E62A9E5BF18B6C52B73E44C2357CFC8CB410E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18 behavioral19
- Target
  resources/app.asar.unpacked/web-build/img/sidebar/165e.mp4
- Size 110KB
- SHA256 94c9274c13ef8d9628b23e8eff22d387c7c948742d1c72b2f11710c7e8bc3ffc
- MD5 15e8f57cd041c0140620380e4145d194
- SHA1 73729a7b244f57cd900b0ee41b986c4b514d37a1
- SHA512 2a876ba0ef4298e6b0bdcd654b4597c7c2d80b9939fedf7c85f8d05ebd40e48998b16466229d09f7f9c9b1b70996cc1b8b92cccf75a332c71a961c784aea9457
- SSDEEP 3072:U2c/PSdNfEo+ZMd5fAEYInAj/5TIG9qrIkghpaO:UzPSjUZOyEYPIG1k6aO
- TLSH
  T1BEB312DD4282CB1ADC93CA331AD31655BB72E77D20CEAA431B6344359E2E48C59C2F96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20 behavioral21
- Target
  resources/app.asar.unpacked/web-build/img/sidebar/287b.mp4
- Size 638KB
- SHA256 bd3db0b64b7ba93f28e5ba7faef1340fe58f7d1f4a5eb19efa2a6bb82d454a81
- MD5 c9f72f01bbacb1b5a3eb5af346d65163
- SHA1 3e99f3f66fef6731f74f45435ee902e31c2217f4
- SHA512 defa433fcbfca2376032bca5108cf7ee76ab1fe041bf533f7b3138152c7c67ddc1e417a43c2d1f86afc2f03d96b4a85a5b2520c85282c5527b4c9a9bd799782f
- SSDEEP 12288:B0Oo7LN+pY1CfXbMa5Wos1oRQtweNhYgmt/f308zewkPTnSyhjDdjqIdiS4Uy:B0x7LN+pCWrMRe/ejYg+/Vzew8TSyhH6
- TLSH
  T167D423629A12E352E0034BB0C17547C4D9FD78227937438B7C9CA679B961DE2BA6C4BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22 behavioral23
- Target
  resources/app.asar.unpacked/web-build/img/sidebar/62d.mp4
- Size 155KB
- SHA256 115f6deae51530ca16691e042d7bc0e8123da3e226cb9fb281648ad470e4f217
- MD5 d68ab819aee907faf065b493c32dcf99
- SHA1 f97fc7638ee48a7d72cee51d040f6098fe7c0d11
- SHA512 90c9378952839023455c4f01d7372c40514b9323e1e9694136d04f763d66dceb07a5ce56fc6b7d09c0d11b7541872278c2f2ddc46ee6a104af277c474cf0b185
- SSDEEP 3072:caKL4c5BVQ+7ZqPLTH6KWiE3EJI70bLAvvFpVW9NCx4uMkSkaU:cnJ5BVbsPLOKpI0bLuKb7lkaU
- TLSH
  T1CBF31249DA85FCDDD2D80DB541D7476F0364CE226F37EB3EE30A2A1127A14B8AD9443A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24 behavioral25
- Target
  resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH
  T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26 behavioral27
- Target
  vk_swiftshader.dll
- Size 5.0MB
- SHA256 680ea3717671c896d516517ff322976ab708f18862135be4216a27ad57353dcc
- MD5 583b1d71cd7b847ba02d734c508cd92f
- SHA1 d63966aeafa951d51967620c606e9b97399699c4
- SHA512 cbb0659ccac9344ed9bb151443a30c106711fa1b15234e6f1225ef28a679c6b3f0a24a6ca1d9baff46155c39ff4e08e3ac96e1da32d665be9a5728956012f193
- SSDEEP 49152:yO6ftECL3Zdon2+a/EgBqB1y91lxfAV7xWV9MzaNZ8m8Lg1d7RXmVEZvMUn0HjyD:yLftMUSogaEm5hZdIOlEbRaB3YI7
- TLSH
  T10E363813B2858199F05DD5794B5BA632F632F8801B72B6DF52A00F192E37FE06B39B05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  vulkan-1.dll
- Size 925KB
- SHA256 d5df2f59cc8b32abd6178250e7d1370a7f37270cc727449e21778080b5e29cd2
- MD5 47af18d68dc7cf271f0a92707f783f64
- SHA1 64594e92a1cd7042cf6367b1843abed210db3d78
- SHA512 2e8fefeccc25e5fcb448fd874f99b8d1466a8148ffe80e1f6ac2105d18bb93e529681ff0ba38e515f52ed4df9ac091fee0782afe5e093fd83c3045a60409fc10
- SSDEEP 24576:Ty+lCO+5ia/1DW6pb9MLtX6Z5WdDYsH26g3P0zAk7o34:TymVqXpbId6Z5WdDYsH26g3P0zAk7oo
- TLSH
  T171156D139A94456AD476D034C8C28607CAB178921726B9CF03685B087F6FFF4777EB2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy