Overview
overview
5Static
static
3modengine2...ua.dll
windows10-2004-x64
1modengine2...ua.dll
windows11-ltsc_2024-x64
1modengine2...e2.dll
windows10-2004-x64
1modengine2...e2.dll
windows11-ltsc_2024-x64
1modengine2...er.exe
windows10-2004-x64
1modengine2...er.exe
windows11-ltsc_2024-x64
1modengine2...b1.dll
windows10-2004-x64
1modengine2...b1.dll
windows11-ltsc_2024-x64
1modengine2...re.bat
windows10-2004-x64
3modengine2...re.bat
windows11-ltsc_2024-x64
3modengine2...ode.js
windows10-2004-x64
3modengine2...ode.js
windows11-ltsc_2024-x64
3modengine2...ion.js
windows10-2004-x64
3modengine2...ion.js
windows11-ltsc_2024-x64
3modengine2...ing.js
windows10-2004-x64
3modengine2...ing.js
windows11-ltsc_2024-x64
3modengine2...ine.js
windows10-2004-x64
3modengine2...ine.js
windows11-ltsc_2024-x64
3modengine2...ge.vbs
windows10-2004-x64
5modengine2...ge.vbs
windows11-ltsc_2024-x64
5modengine2...on.bat
windows10-2004-x64
3modengine2...on.bat
windows11-ltsc_2024-x64
3modengine2...nl.bat
windows10-2004-x64
3modengine2...nl.bat
windows11-ltsc_2024-x64
3modengine2...ink.js
windows10-2004-x64
3modengine2...ink.js
windows11-ltsc_2024-x64
3modengine2...ink.js
windows10-2004-x64
3modengine2...ink.js
windows11-ltsc_2024-x64
3modengine2...nl.vbs
windows10-2004-x64
5modengine2...nl.vbs
windows11-ltsc_2024-x64
5modengine2...ser.js
windows10-2004-x64
3modengine2...ser.js
windows11-ltsc_2024-x64
3General
- Target 6db3212ff23513b7cf92f42aadd907af063e74e0f1a68e2b1dd1a6eb9f533a78
- Size 5.5MB
- Sample260806-sg741atfre
- SHA256 6db3212ff23513b7cf92f42aadd907af063e74e0f1a68e2b1dd1a6eb9f533a78
- MD5 afe49b5257bdf9fd77644d4bfd064e5c
- SHA1 ca427aa7eac4c44e16bba0c9590c6cc903b63165
- SHA512 4e24605430e9e9e7689457ff979cf4465c6197c78669569820454c3f9928dfe40a2df0f5a63dac8a5b9c4e1a244073b253ba665df4e7b962196496cb392feb1b
- SSDEEP 98304:69s9dz8rwLtzSZ6qj2bpSGoQxwLumxdTrAop8F1VJA5ftHLexZ/qnd8SUbRQ+MAF:+sHow5cSlSGoQ61vTrAo+Fz2HHqxdqnE
- TLSH T1B6463375C43E6C9AD52F9F78ABAA9B2885BC2007D62095038C7E34D8FD475DB37036A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
modengine2/bin/lua.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
modengine2/bin/lua.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
modengine2/bin/modengine2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
modengine2/bin/modengine2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
modengine2/crashpad/crashpad_handler.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
modengine2/crashpad/crashpad_handler.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
modengine2/crashpad/zlib1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
modengine2/crashpad/zlib1.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
modengine2/include/fmt/core.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
modengine2/include/fmt/core.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
modengine2/include/sol/bytecode.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
modengine2/include/sol/bytecode.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
modengine2/include/sol/protected_function.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
modengine2/include/sol/protected_function.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
modengine2/include/sol/state_handling.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
modengine2/include/sol/state_handling.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
modengine2/include/sol/trampoline.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
modengine2/include/sol/trampoline.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
modengine2/include/sol/usertype_storage.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
modengine2/include/sol/usertype_storage.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
modengine2/include/spdlog/common.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
modengine2/include/spdlog/common.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
modengine2/include/spdlog/details/os-inl.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
modengine2/include/spdlog/details/os-inl.bat
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral25
Sample
modengine2/include/spdlog/sinks/mongo_sink.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
modengine2/include/spdlog/sinks/mongo_sink.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
modengine2/include/spdlog/sinks/win_eventlog_sink.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
modengine2/include/spdlog/sinks/win_eventlog_sink.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral29
Sample
modengine2/include/spdlog/sinks/wincolor_sink-inl.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
modengine2/include/spdlog/sinks/wincolor_sink-inl.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
modengine2/include/toml++/impl/parser.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
modengine2/include/toml++/impl/parser.js
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target modengine2/bin/lua.dll
- Size 231KB
- SHA256 f1559f6db79887717e7568257f7a65ad86bc5ecfef948cd05b5ee77de41e14d5
- MD5 d09a0781ca512ec1c5dcaf14e57fecc3
- SHA1 cabfaaf360f4147e23c8c2f32e85728a032a5e7e
- SHA512 bf6cc126a2e28101209f9326261811c2b58c6ee227d8fdb4219c5065dad8f3ac87af4a35328636897dda849c4be5846513c638fd831aebd92efb0ba1ebd25f88
- SSDEEP 3072:VkD0Te4r/Jvp3+o2X+JvFyo9+M12CUkA9Sng6e5Ye79LVGKD4KHKCzOK0:VGsVvpzH+q2CUkAYg6eieTDaCzH0
- TLSH T1ED343A5932780CB8DABB913D8992520BC3F2786407B1DAEF16E147971F13BE52A3B711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target modengine2/bin/modengine2.dll
- Size 958KB
- SHA256 0e6105840422a7828faf137efb1c5823c8c8e6cfb044b12a360307bda745175e
- MD5 49300436bdde6519c90fc9b58b59df13
- SHA1 7539c6cd3f967dc0fdd3d6bbf787c696d517692e
- SHA512 403befd2cc9d3de4e793bd41d9b5b734769d9ed18fbfbee0b48849f7b427ff20cb376b6c44c9249acc1cceb09c004f6244356d03048090b73ab2232ad1fe21e6
- SSDEEP 24576:iJilCmXl3EnES67jYqURwlijqH06wr68NnFaoXvkFfac:1lC8l3EnlMURwlNHfwr6qnFaoXv
- TLSH T187256C4F72A800B9C4ABC179DA679907F7B2388B4760938F13E506963F577A19E7E301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target modengine2/crashpad/crashpad_handler.exe
- Size 568KB
- SHA256 cec2d84b9b4ca06eca60756dc2ba89ca76ab473ad50a163ddf7d4e32e70f4edb
- MD5 902349b3bf4ca8ac61e774acfbc87b25
- SHA1 9979916438294ebeecbaaeb816ef9c63ceb7bdc4
- SHA512 859b145849a2efac256078a6f968e84f29a0ce9cedb73d2ffba34ffdf1d03ab3ca1b6ef58c0946acf103d71e0d330d7502accc1e10ad9b64f79683aea92e5c70
- SSDEEP 12288:v8kkirQmD/vvxqp2qUlkfwOEdxWQuKn6dVaH5gQpedL:v8kk4x02qUqfwOEdxWQuKn6dVaH5gQpU
- TLSH T1E0C44C6A727C13F9D1ABC17CD6438A03E6B5340A43B19EDB139147A61F176C89F3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target modengine2/crashpad/zlib1.dll
- Size 87KB
- SHA256 32918b3ef2064626b0961c6a0ca7be77003857e83e8838e0981403195dc8d28d
- MD5 62e4ddf3afd168bb068d63dc49726c1a
- SHA1 3ecdeaaaa044f1a6f5502399b3aaa68a69547a3f
- SHA512 8c62fdd08149a85492a0461c00c091ae0894b70a76329b43b27422100f7593eab6cdcd919157f51797c274abf1a95bf6ad0737c3ea0b6845b835a2560fd0ba2a
- SSDEEP 1536:1n432wDR3MZfAFppqZUImxR6lfGiIOcIOyL6mYg:162wt3Of+pq+R65GASyL6mYg
- TLSH T1FD937D996AB412B6C6F64074D8D3479DD731701403A45BDF868CA76A1B23AE02F363FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target modengine2/include/fmt/core.h
- Size 111KB
- SHA256 9ca82e9edd459d696f874194a99c95e03b7f57d7ab0d101c038488f6c1f8ef57
- MD5 94ea67dc4e6d9eb6498335e811fe053d
- SHA1 6730568d33e5408f8052aed1a1ce66dd678cffb2
- SHA512 aae141d6f9c19edb47a31a895316ef0069384b3f8a16cb93e0bbc84c1e27c063ad04479840cfd2685ea1a30e7c6bd78971bc0753648379ed7caf1fd228cfcd73
- SSDEEP 1536:+1JocACJ9ihVPshoCbKCW9H5zgfytqnav/ZKfPC4019PFEkKVVSC:+IxzbQeFEkKV8C
- TLSH T19FB3E87069AAB9511BB223B4DA43D412EF15A1171B148BE2B4EC51346FF1C23A37BFE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modengine2/include/sol/bytecode.hpp
- Size 3KB
- SHA256 9fa4925df4890e620184c16785dab78da9626bff86b5fc20c0dc492766654a68
- MD5 77cf569c859271a18a0d7ea2d6f039c8
- SHA1 6ed8773b1369f5babf5c2818f218c0e1b67be0f3
- SHA512 65e75f82def816ddfbf1c208f41220796184a1ecd37cfbf2756c5565aed89314692ae5ad86365fdbc89deb22b2458b6978a8f7a7ab570a688da4a1c09b793ae6
- TLSH T13271C9CC7097FBE1994623FAA63890A0EB397286A71107C32E9D8B54914301D7B77ED9
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target modengine2/include/sol/protected_function.hpp
- Size 16KB
- SHA256 719f62b78e9fe5456cba63a618f23f6bdc7683da1a4cffeae3040c98bfcb1f3b
- MD5 b10b2953bf5139862620fb3cdf929fbb
- SHA1 26a3a49043aa16fbea34d436454b0c1c700d5f4e
- SHA512 0365db76e0122d59b895ad9f36b4414935aaa50ba7ebebba18c43775b435ba8c64f7143a6d4638697e7aedfd13a94643ca384ed35aa5f0250907b8db19524c52
- SSDEEP 384:idS3bGZOYTggigFxy+fLwvmEHOyrpy+hNNmswgyOhl3E1e:afZfLwvmEHOyrs+hNNmswgyOk0
- TLSH T1AD72634CF79CF18B07E122D6815FCD44E8BE6E673B560EE658C4AB2019700BD957FA22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modengine2/include/sol/state_handling.hpp
- Size 6KB
- SHA256 88d90c0aad97f07f18c3d3e5306cb50beae324880094c66b6abb5d8abace8ce0
- MD5 a938211376a1d9a03bda5fa81dec2e22
- SHA1 352d46ba33ad34081a56421c327e4a6b2c010f7d
- SHA512 7c53d6214a4eb59a68db1874edd330717ef145cb94d8935096b1ebdf159ae647e4794088b5b38078b2a7dcd63fb0d3d63049f6b7c04e5e9ba22c5e33e9bfbfb7
- SSDEEP 192:c7QH7/Mcp668xAFBb1M+SDi1/9F081ajf4GWiZ:iwJ0Bi7BNrF0JjfnVZ
- TLSH T178D1B55DFBECF6D7A8A611A9E0259082D46D350B23356FB6CCCEF51821600BFD93E942
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modengine2/include/sol/trampoline.hpp
- Size 7KB
- SHA256 0710e129d4ab379e4095572fac4b923f7ed8e4ad09b7d26a90b3c8b3cad8193e
- MD5 edc92d4937af5f43fdc54342a490a8a0
- SHA1 4866580614cde60b3bdbf383a28f2f5646a439ff
- SHA512 737e69eeb6e6f3bfb1aa64292fe066cae732df83a61e0cdb785630cc731452d2060d76d552b2b1c660bff0435d4ceee37cf0e6a721cf1b66692a773039461838
- SSDEEP 192:c7QHF3OPVghZTdcACzoTbhkvD+evhkuZpaAtWW1Rq:iS3OqzRCzoTGJ65AtWW1E
- TLSH T1E9E1442EF39DB6A747935179906800C2EC6D7213BBA09AE3DDC5FB1425E513DC23B682
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modengine2/include/sol/usertype_storage.hpp
- Size 44KB
- SHA256 d4842d092042ff05ee9592a5b53bae66cd0067cc014bbf124de4f2b6d4267135
- MD5 13e53db8b67a9a071e22d73c5ca57391
- SHA1 b9e71411d885c8441c4b78054f9f3c72f7bdec81
- SHA512 4c3fbfd976f17011903a60e8cb6b77de002f44444118f7e7b5b530b556a6ef38b94e5cf596c53f992ae389a00482a9eb89cf355276f71dd229a592830049ecea
- SSDEEP 768:BGPF/swceFRRBXG69bgBWTsKTOCTtne5NVT5JWb0:BGtFvc67Uz
- TLSH T1882373F4B31CF4901E616068D48D7DD05AFE603A665A8CB3AE59853C1CB413A736FF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target modengine2/include/spdlog/common.h
- Size 11KB
- SHA256 7da36771ba4778f73947b716ee72ed632deff007d3a4622ab33a75fe688f9123
- MD5 b9ce449448db2db51977a3a81d1043e3
- SHA1 bb3aa6dba048f5c17b33505ba46d3966d398be8b
- SHA512 b64e4720d54e56994eb3b6a04d77b49c7ddd7d97bf9d9259dbff7e604ad1ff10ed0a9c7c8ceb6f4c091eb324e0bc2b957a18d2697510c6fcd24595bacedde76e
- SSDEEP 192:h/8MZAsBrk5Iw8pr8vT4w4eft1CggYLj7gx3dhBgsi7guP5LfKrf/osgk0uFjmFn:bWsO578pr8vkwyWL5FEEGy
- TLSH T1E842413C6EAB1E39970367A1908D0C434303EC77AB9199F5B88E1AAC1FA0C14B4FD5D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modengine2/include/spdlog/details/os-inl.h
- Size 16KB
- SHA256 bbf700d5c5f4c80536207cc9c2cb0eda2ea3fea1d58bdfe2225a32623b524bb1
- MD5 b02168f750412fbd52db82e6ccf8e550
- SHA1 32a9c423e148d6e985227a89e2f3588b27c7d07c
- SHA512 911e0442a35e3a34498eeb05f325a5a0b96d548c9ce2e551b29be3c755bde02776cda67ca837dd7b6ca2f4a91d4fe13fdebcb0e1e645d8a8643c9816f0e0cd41
- SSDEEP 384:evfmHzE/VmVl9mWph4wZVj5pn2jnAAHze5etHj0wIO1Hm/u7LavSFwRMdDYPgt6H:ejkphCrLed5
- TLSH T1147294296CBF2432A7338575474EA49FA20ACE639389C970BD0F91A83F1541DB1F67D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modengine2/include/spdlog/sinks/mongo_sink.h
- Size 3KB
- SHA256 b65db467656675307c6b78560d279286379f599ae939da2a8a6f900ff77072b3
- MD5 76ffc13ad97eb2b13a727f85890f57d0
- SHA1 e0901c8c07156a5e49d8c500e072b8c9431ca173
- SHA512 4200a95abee7edb5160470a9cfbf2fff8f2e0d7795a72c27419a3168544b34ca43d74dce15302158a4536f21a47d8988d481cf2b2985c8d27259c07e9b75e221
- TLSH T170714220AEBE7A1E0B0B5841EEDB5103A8166903FF905B20FFDEB1144F12525F1B7695
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target modengine2/include/spdlog/sinks/win_eventlog_sink.h
- Size 8KB
- SHA256 ce10298279cb71f35048784b67aa79a03d32eade33bc86d5f716c95ea7ea26a6
- MD5 4fd98e78a5329b060b874cea0de0d55e
- SHA1 7ade757dc90f4f2810a7cbc9b01dc78a776f3178
- SHA512 001488101b44e7ffe812bd28019a9575d0d7bb823aa07fca7201a301a54724466d1090986c40db3660f783f6f4fa6a0e65faa44f0f9c2f2265cd0ad1e985e1a4
- SSDEEP 192:Ozr8onlWQ0TnOsGu8jgyrFUXukiaw/y/8dhOvbswm3:c8ol/CVegCmumzSr
- TLSH T1ED02B6014CFEA57A914BC62DB74B7052C629E1A7930C8F6EBC7E8DA46F40509AD7F381
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target modengine2/include/spdlog/sinks/wincolor_sink-inl.h
- Size 6KB
- SHA256 4808b91f2cdeb157cab14ab352f4e559712d20c6c3bb44127599eb04de76ce36
- MD5 12f5a1408385b0dfdcc73019e7de7747
- SHA1 7ff1ec37374d729c26984dfedc35c3e648af21b5
- SHA512 b8182f812b04c386612d0c9f2cfa13d98a09db048d0ad3563ed491dd00afdd2d3a3f0d7af90928c956b0bc35e0e7a147a10923325e0f9b643766c4c62c42e516
- SSDEEP 96:jT1ErPmZyxoy7GOy8yXyGH8aWkuX7O8IlAn:jSDmxwaQLOjl0
- TLSH T1EBD1FD06CCF95A2B2627117C9F8BB89AC11C24F6994EFF1B7A5EC3044F50933A4A8757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target modengine2/include/toml++/impl/parser.inl
- Size 112KB
- SHA256 b0d042848914d78bf5057c8fa962e805b899cdfd6b17b1b047523bd299dc0099
- MD5 a9a0fc33734340729ac144d401e96eca
- SHA1 28bf30a2bffac6564211de01223e2e364a5457bd
- SHA512 686fb551d3d2bddd13d2ae63de111f5adc5e2f9fd1f164d3d63753deb73de960da937dcfaebedaa9acab3daa1d708a154b22f22940e93a4d0f6b0fa17f7926b7
- SSDEEP 1536:GKcazPMNf8w23eZUGtaU+Crn7n6Y1bv2lwyc2dK69lz:pkNf8yZVtaU+Cj3D2K69lz
- TLSH T176B3A5A4DFADB15E263052A81419A4F2E62C8472656C5CF2FE8C513873C489FCE7FD61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10