Overview
overview
3Static
static
3fun.zip
windows10-2004-x64
1fun.zip
windows11-ltsc_2024-x64
1fun/fun swaps.ahk
windows10-2004-x64
3fun/fun swaps.ahk
windows11-ltsc_2024-x64
3fun/sw.zip
windows10-2004-x64
1fun/sw.zip
windows11-ltsc_2024-x64
3sw/Composa...re.dll
windows10-2004-x64
1sw/Composa...re.dll
windows11-ltsc_2024-x64
1sw/CoreLibNet.dll
windows10-2004-x64
1sw/CoreLibNet.dll
windows11-ltsc_2024-x64
1sw/DnsClient.dll
windows10-2004-x64
1sw/DnsClient.dll
windows11-ltsc_2024-x64
1sw/DotNetB...ls.dll
windows10-2004-x64
1sw/DotNetB...ls.dll
windows11-ltsc_2024-x64
1sw/DotNetB...ns.dll
windows10-2004-x64
1sw/DotNetB...ns.dll
windows11-ltsc_2024-x64
1sw/DotNetB...PI.dll
windows10-2004-x64
1sw/DotNetB...PI.dll
windows11-ltsc_2024-x64
1sw/Hardcod...pf.dll
windows10-2004-x64
1sw/Hardcod...pf.dll
windows11-ltsc_2024-x64
1sw/MathConverter.dll
windows10-2004-x64
1sw/MathConverter.dll
windows11-ltsc_2024-x64
1sw/Microso...es.dll
windows10-2004-x64
1sw/Microso...es.dll
windows11-ltsc_2024-x64
1sw/Microso...te.dll
windows10-2004-x64
1sw/Microso...te.dll
windows11-ltsc_2024-x64
1sw/Microso...ns.dll
windows10-2004-x64
1sw/Microso...ns.dll
windows11-ltsc_2024-x64
1sw/Microso...al.dll
windows10-2004-x64
1sw/Microso...al.dll
windows11-ltsc_2024-x64
1sw/Microso...te.dll
windows10-2004-x64
1sw/Microso...te.dll
windows11-ltsc_2024-x64
1General
- Target fun.zip
- Size 39.3MB
- Sample260806-xvbeeabg89
- SHA256 58d581be6b613ec21084ceeedeff7e2f0b010080bb080e34d6cf97220aefd1d5
- MD5 4f1961e02632bf67b144e76868dd89b0
- SHA1 442b5d6e0296a3595a775dd8f1e048c2544e74b2
- SHA512 f60817616bf1fe1244f560e1e00b85917825995836556306423216e921df8c1ee980db2774896208468bea8dc4355bd42d882b04d058112d1dcdd21dc67fa299
- SSDEEP 786432:iCOQCidkjQ+kG2Oaksn+J50wc7kVA+DK4OokER+THksK5SY/+uG2ZWZiV0:i5idk03bLkIQu57kai5jkYGE15lW1eKt
- TLSH T1AA973304DC121E6CDD2273BB9F5618F8843025E4B19CEC62F67B7866FA5A029DE12737
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
fun.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
fun.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
fun/fun swaps.ahk
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
fun/fun swaps.ahk
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
fun/sw.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
fun/sw.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
sw/ComposableAsync.Core.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
sw/ComposableAsync.Core.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
sw/CoreLibNet.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
sw/CoreLibNet.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
sw/DnsClient.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
sw/DnsClient.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
sw/DotNetBungieAPI.Models.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
sw/DotNetBungieAPI.Models.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
sw/DotNetBungieAPI.Service.Abstractions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
sw/DotNetBungieAPI.Service.Abstractions.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
sw/DotNetBungieAPI.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
sw/DotNetBungieAPI.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
sw/Hardcodet.NotifyIcon.Wpf.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
sw/Hardcodet.NotifyIcon.Wpf.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
sw/MathConverter.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
sw/MathConverter.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
sw/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
sw/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral25
Sample
sw/Microsoft.Data.Sqlite.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
sw/Microsoft.Data.Sqlite.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral27
Sample
sw/Microsoft.EntityFrameworkCore.Abstractions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
sw/Microsoft.EntityFrameworkCore.Abstractions.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
sw/Microsoft.EntityFrameworkCore.Relational.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
sw/Microsoft.EntityFrameworkCore.Relational.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
sw/Microsoft.EntityFrameworkCore.Sqlite.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
sw/Microsoft.EntityFrameworkCore.Sqlite.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target fun.zip
- Size 39.3MB
- SHA256 58d581be6b613ec21084ceeedeff7e2f0b010080bb080e34d6cf97220aefd1d5
- MD5 4f1961e02632bf67b144e76868dd89b0
- SHA1 442b5d6e0296a3595a775dd8f1e048c2544e74b2
- SHA512 f60817616bf1fe1244f560e1e00b85917825995836556306423216e921df8c1ee980db2774896208468bea8dc4355bd42d882b04d058112d1dcdd21dc67fa299
- SSDEEP 786432:iCOQCidkjQ+kG2Oaksn+J50wc7kVA+DK4OokER+THksK5SY/+uG2ZWZiV0:i5idk03bLkIQu57kai5jkYGE15lW1eKt
- TLSH T1AA973304DC121E6CDD2273BB9F5618F8843025E4B19CEC62F67B7866FA5A029DE12737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target fun/fun swaps.ahk
- Size 691B
- SHA256 7071eff5fbc78972246a2c0b7d2c356f94f861cdc93f4efc499ddfc402479639
- MD5 a73a393592801d9d5b8284ba909ed162
- SHA1 76af9b30ce911f1f8d3851b001f20ee419396185
- SHA512 ada995b370469c61b74067358b6b32df29826a69bbb6ac78efacfe7dcabf783593fcb25258c948b721dd30a6e175ae5bad4809c2f6507e3b94e065631fdbe0cc
- TLSH T1FE01D33655C115324E1185B4F7116CBBEB06006C2F2A68203E504D4827F0164D7F6FFD
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target fun/sw.zip
- Size 39.3MB
- SHA256 f786e15d98f74a0a1faaa9a63f91fa7d3948d59a5ed45a02c5ca8afc516ceb9e
- MD5 20779c52eefc1a2adc1d51b3f2cd23ef
- SHA1 55a82f49bb70cdc883a1b0a1015879c72e35eb78
- SHA512 67a9cdde9acaeb32e1c7f539456106b54f1008073b73c999ef17edeb998e24917d06eb254758e07a569d0129c07cf93762e06c7e8f63c8dafa60930732d6a736
- SSDEEP 786432:eCOQCidkjQ+kG2Oaksn+J50wc7kVA+DK4OokER+THksK5SY/+uG2ZWZiVc:e5idk03bLkIQu57kai5jkYGE15lW1eK/
- TLSH T187973304DC121E6CDD2273BB9F5618F8843025E4B19CEC62F67B7866FA5A029DE12737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target sw/ComposableAsync.Core.dll
- Size 19KB
- SHA256 d428f7a0729f47c171b5373e8ede4b5646f094b32d4b5bd9e0b9f26a5e3a9d64
- MD5 85aeef93648cc608d72ff8fd6366d201
- SHA1 24c482d27b62b21d741aa7afaeec8c78bdb5f658
- SHA512 dfe32ce450981c65bbccc13592c7d331dbacc131a2547dd7968e59bca4cabe5b4ac8365abbe3b51eeda0dc91eb831083a9f9442f8bc9d71212922052486c44cc
- SSDEEP 384:MX6aeNXZcJs1L9BKQrZxCAGrS64Eu5KHcT:MX6aWXZis15BK2ZxCAGWT
- TLSH T1A4920829939C8633CF6F577E77A606018B36D701A812F31E45DDC2E0265B39D2E2629F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target sw/CoreLibNet.dll
- Size 120KB
- SHA256 a7462fcf65b489aa5c229aacaf5599b52718967f9e62d77f07f725db770ee5b8
- MD5 d123a056c8468365ea72d2419b6c2b71
- SHA1 f4005bf8b6a4fe8f937dee724ff66a8bebe84356
- SHA512 0ac5dc19117be261e1f4b27417f05e74ce9aa73b0400ea7669541f5d19a62036ec36d4c1440cd0988f478ac3395186e3851a13ccc3b2ca20f54bd83181f62d25
- SSDEEP 3072:qRw5dpzHvImdh3JbYPBXBB3jEQ39JYcuYwVjmhRQyx:/j6J7AQtJZuIRfx
- TLSH T1F8C37E0923AC4F2AD6DF4BBDF4B0512287B0E513F913EB868D95D0ED59127A246227F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target sw/DnsClient.dll
- Size 163KB
- SHA256 5c468b671a0036ff68782f30c282e8dc9248a42eb7297089a745b4d9997590f6
- MD5 d32e5a3bd259f1fd354d34dd730aed74
- SHA1 b06baaf2f01f5e3890984357c6e82dc67be5bd6a
- SHA512 5a62f20dbd83b9176c21704e5e4dc0764287e0d6e4221659a416524947d731d3ab9c5b97a10c98c4ba2457cedc1ee5ea51ce96815e99198418fa0c0254fe7972
- SSDEEP 3072:1RHwo/6+HKb8Coyrc7AjIFD/z1O8gAjQDsdw3FI3:vyVTcH/ZO8isSq3
- TLSH T120F36B2453FC0767E6AE5B72F870A205CBB2F9467979F75E1E0964FA2453B40BA00363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target sw/DotNetBungieAPI.Models.dll
- Size 1.7MB
- SHA256 fce8cef0e3a44618a6fe82b2330e4d5c695ade8ebef5a1a2f31b205535406c4a
- MD5 2975a10f1c9d1636adac7e006da3d3f7
- SHA1 fbea8e57573f528181bf85cc1f3b9badc8be7be4
- SHA512 c547d835caa56dab7ce9768f068ce10bba452008057eb4f6d9de535884b3d0e4cf9ae4b48ca95c6aef0cba16b3172fdb9b376c9c9950a1aeee94d80a41dbff27
- SSDEEP 12288:RsH6ASIvWI4wCFi+p/7tFjiFDC19k/o0Sl/0VCkGTrqbRYuHc5fXN5fucO4zd3O:Rx/wCvuDC19k/o9wO3tNoO3O
- TLSH T12785D89137690F96D28E063C903B026517B5E08EA352E7EF4F10A8792DD67D4CC6E6B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target sw/DotNetBungieAPI.Service.Abstractions.dll
- Size 31KB
- SHA256 3d35a742575effeb26d6a400bc0bca85cc1f9f1638d6d6c266d7c09b8c55f281
- MD5 23713d949d37eec3b26cde218ee191e0
- SHA1 d66eebb1477a401e6636eb6254e412447700e440
- SHA512 9f1e47b18590c67b0d91d7a29049ebcadb1a1bcdbfa3fcb1406a6e29c9ee7b4c26135b2d2bc5b9860c81b55ce5829331b9924c60d6a19bd5bc43585d9930a674
- SSDEEP 384:NChUko+kxaqvQ9213daFc76FPPOLaexebelXu4S98xoDg3dM1jUGlPkME7:s5NqvkG3d76F3qQepSeoEG1jlW
- TLSH T10AE2D821538EC12AED66433FFEA35E023532C6CA911BBF55464D8C5A3D0BF2B6216772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target sw/DotNetBungieAPI.dll
- Size 251KB
- SHA256 fb1952f62bf4b166a1e536cf2356080a458518cadb55badaeaf6eaea310ed5b8
- MD5 37587c7882a6d5d12dc46cc3e4e1af3c
- SHA1 ab5e2732c0ea950558609511963eb50fd3156fa6
- SHA512 73ba403e32472914cc8eb0fc5165aaebacd98b4df9a50fef228a6395bde090b344182d39d8e5f07b2b0cfcb8270dd57cb564d75ec638b9d3a17b178f5a263ecd
- SSDEEP 3072:TBtm4Ck52zzKyvpBVps4+U9lhhh192H2Gkyf+YLp6LOJXY5fGCaRIjcF2g:Vz5mBVpselhX19sbPDFue2
- TLSH T121444C41A3AC8B12E29FCBBEE634461987B7E347894AE7CD1C8CD5E4349B370A854717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target sw/Hardcodet.NotifyIcon.Wpf.dll
- Size 101KB
- SHA256 2059222c4ae5d0291fce13bd296adcc448d79b6fae27746aedf347608ed3090c
- MD5 2cfde828cdbfbb545be5aa61fe1e62a1
- SHA1 d376bde7322118787f6f08131ab34a17eb711789
- SHA512 2a1215dde4bfc4626cc4fe9696b6465a0893a8787ce4ff41ca0c08908bb8aa52a992a156c3320deb0fefb225acb4c3132286d8c04a0caed93282b86adc011cda
- SSDEEP 3072:5oy+75OQW4pg9xXsGQTckaX4kGsdO5UInM34:5+75ON4pg9xX7kzsTInM
- TLSH T1B1A3CF8523FC405AC1FEA73478B532148771FD837A61CF2A498262B849B77D91AD07EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target sw/MathConverter.dll
- Size 68KB
- SHA256 0ebb64f0e7258a22b0456d0ce1ab9816d7ed582dc99c3a0af5e4dc8f017dcae5
- MD5 91380061eed023ef733ae34a3a6fa9c0
- SHA1 ab4a8a9a50113a6dc5eddbd5247b1828cf6b9053
- SHA512 fed2881e2e053f45e9b381b1cd43ac11e7c993fd18785f52538db3c0f537909d8cd9b910f360d64d9421ec6bea836acbe3537572d12219fc809188e040cd34e9
- SSDEEP 1536:wh2grVDdTBeXBHYSsK/+Q0N1hilfwJaTZXwW1m:whjDdMB46/901wTZXwwm
- TLSH T18963193467EC6327EAFEAF79F4B412110B75BD97687AD349498811EC0A237900D61BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target sw/Microsoft.Bcl.AsyncInterfaces.dll
- Size 14KB
- SHA256 00f26117b0a77b562d5c01038d8b52f8d0b9e18b7c532e16dfae1857a19f2271
- MD5 84520ccf3e7f424ce2c291529400a196
- SHA1 1a462715db5f3e32eb88cfb87a7394ed08105093
- SHA512 82c458970d0903933ed3da6c795de616915c7ef531f35b090fed3084429367036bbe00871c9353fb57d4e5f9c906273142eca95655fab6ad7c446ef9427895ba
- SSDEEP 192:1zbtuPEO03EnqWeq/WLgW4GD5dHnhWgN7acWVqrOQophFKqnajKsNQK:x08O03EnqWeq/WvdHRN7JJXlGsNQK
- TLSH T123622A91C7AC4603EDB63BB056B4D9037C3DB3E71C51C16E146AF29A1C53BC29B21A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target sw/Microsoft.Data.Sqlite.dll
- Size 165KB
- SHA256 04d0d2926c6c5d1a7d3a3f368edb2be8d4873c81b06fb1f3f11991664510c694
- MD5 871567c7e224cf72f5e388592e487997
- SHA1 e8e0761d71d2e128d795337405279d6abf7f6094
- SHA512 4dfd4cb188e8f3fbd5d99721abcc9f4c705685c4c8a392123f6b65ef0dce566741b01cde95a001d6ce1ec7320d49d3feba9a93cac53050ee660d5d9210c203c1
- SSDEEP 3072:WngRUDRwceUEEDDGSsK2Dp/CROtt+9IIlFFWbjvIS4dmspbZy7it6ygICa4xyFzn:zU91HGm2BfiIIlFFWbjvIS4dmspbZy7s
- TLSH T16DF3296D0A885023DBEECD3661B99D8507389146D5929B4BAC50ECEC3C637687F843AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target sw/Microsoft.EntityFrameworkCore.Abstractions.dll
- Size 33KB
- SHA256 cfe1f58e224428ed72b27603032a0c59c7051ab947c50031bdad6bc816477a7f
- MD5 d81b62f7a79926ac38a7a690ada3b2e7
- SHA1 3456afd784795e62f7c8e6398aa936e829778244
- SHA512 e8868ea89fd340e648d26d61a63350c2e426fb76a0fab49ff3fddc1aa20529eca385daa61d5fccfa624f0a36670f0b650e73a58c7072111b9c47cb36dedc402c
- SSDEEP 768:tbOu2/CELb/ksbp5gtMLu9+9FwW7t5nG7Yl9zO:1OH/C6d5WMQ+gW7tP3zO
- TLSH T163F26C92B3DC4323CEFE1F71E570E4421836EBCA7411CA6E4A55B14E0D63B849A71B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target sw/Microsoft.EntityFrameworkCore.Relational.dll
- Size 1.7MB
- SHA256 99f31761f7579be9cdb71dc43fbd6867f69631eb79ce4e7eb3315813e686caa3
- MD5 6f075dea584800f4f241bf30fa879f31
- SHA1 68a559d2ad4d01c804e38461f985761f90d69595
- SHA512 25c99c879762d2978dd32057c4125d391097ba719e2a45a39a32b8fac60e2d977c197e10db786ed60186b2902738f1b1949fcd9f02c03044afda622cc7b9d711
- SSDEEP 24576:Ne9+z555N1ietCoWRT9EXSN0Bf7213pJC:NegliuWQAJC
- TLSH T195856E91B3FC7F23D2AF52756131040C62F6D91A9722E75AAD04EAB91C9F3818F4225F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target sw/Microsoft.EntityFrameworkCore.Sqlite.dll
- Size 199KB
- SHA256 4e5d8943fa9183f905be48dee336ae31228524eb1888eec2d38194566801a7c1
- MD5 c861d15852c1ca73305cecce0337734e
- SHA1 4c984fe8a22a5183b6d6e7ca0b81cfa4438a25bd
- SHA512 832b02d7b1463ef11f4f868c81ff7607bffbfdd433f6ce9542b779d7044de20456be0b90e065ea9e0a9a03d4ae71cb0c68cfac53a66d5955f1b2ea362bb7df37
- SSDEEP 3072:iMxLsQupX72oMwMqzIFujF47RGt+l+axHH5l1:iMx9XgsF2BwT5
- TLSH T1E0147C5D23AC532AC6BF9735F0A854404735FA0BE5D6EB9D4C8C64ED2C62B817A083B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10