3741f7ea3d4c2dacddb514c668b043b2ce217eac3ef0e15bfcf81ebf1244342e

Resubmissions

07/08/2026, 09:32

260807-lhp69afa75

07/08/2026, 09:29

260807-lfzmxa1gqc

07/08/2026, 09:22

260807-lb81savte17

Sharing

Copy URL Twitter E-mail

General

Target
BloodlinesHelper.zip
Size 95.8MB
Sample260807-lb81savte1
SHA256 3741f7ea3d4c2dacddb514c668b043b2ce217eac3ef0e15bfcf81ebf1244342e
MD5 dd1acfcf336688e36f8fd5fda34094d4
SHA1 4a6495ca7e61d4d1fcb64c6970774d5a8d8da0a4
SHA512 6fcafcf53c69022e8fff47f7d381ec6fc44a0634508f1f6f57596bd8f1fa4da50c0fae2b3b1077b39a9bfefc3290e5048b7f2fb91ed8643a5de313a01c257428
SSDEEP 1572864:DgqObqG9yRNaogjOwI51MFfackn3HNbqDqea1dg+bf/hKLO9xY2rTkB/DVk0qD6m:DI9yKolnQZkndbVe0dgcfEY2q4A6tTjc
TLSH
T1A62833EA947F7184A816EA7B50B4E23F00740897A7E44F9A10284BC639CFF93795875F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  BloodlinesHelper.exe
- Size 799KB
- SHA256 b66f3b28079dbafeb2d745ac16db1d91c8f3a8d7ba24ca311fec88e8b8bf45e9
- MD5 4da075f1912f79e81344da654eebaf7c
- SHA1 de55a6517f9b8243fa9102b0d0085ab5a8c902df
- SHA512 66a50c69d0f8d194c2c4a524ffe8832091e799b5dbc8fcae01a40183cf009eae00c6aae4f338fae6db1cd9765ece927a35c180bf06b3821e5b9ba7461729196c
- SSDEEP 12288:pk9zuZnsZc77M0VIBXDrwpA8pJ1IJt9oX/TNAP8U34:296JsZilVIBXYpAIJ1Yt+vT
- TLSH
  T1EF053A3AF1710DB2D031C479C686C552E2B1B7868F661AFBBF09DA254F2D1A97B38740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1 behavioral2
- Target
  Qt6Core.dll
- Size 9.6MB
- SHA256 0b0474bfb1d3465a597a51cd383d9c7d502f4b5e15f66b09956390c33ac406ff
- MD5 237218056dfc81d9d83d1207fe849470
- SHA1 a33f520d9e3a08a8d2d4ba386a14e1100409ed84
- SHA512 a0100297e77ae1b6cc0bb15cea78972467cd9a624d3ee914f60bb86b54365faeb540f49eda1072e7cd6ddcc14646a02b0cdaf2d0c0e7842a78be5b0cb919591d
- SSDEEP 98304:Z0eaVw+0w46Zumz1KFdu9CwJsv6tfPzo1cs5Am0hX/37c:ZmVwY9l1KFdu9CwJsv6tfyk/37c
- TLSH
  T1B7A6290766FA0111FAFBDA34DABB4142DBB27C466B3496DF025821185D737F09E3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Qt6Gui.dll
- Size 9.0MB
- SHA256 25d6b5e9ccb63ab225a02e5da54902229350de5188e8352c918ec25bd3130da2
- MD5 fcb09bea31d75e82b866c1237343cf88
- SHA1 059f87dd64e8a516c55e29305f6d5b593147f6e2
- SHA512 b972c3ab531c5a800cb35fa534a7c46ffbc3755c847ec8b0b7946ddc75dd9e6483bbcd4555b7082b366e60289086730ac9aab84fc38a4249b94f835b53f42af4
- SSDEEP 49152:1KrhiziiCFwEaOZf5cO1NHFQlobpLL3PKjOl6/rgVbMk774lt3hdkzbHnZFitWCI:3iiCFVP35UhkBBxIHaOefqobtQnVA
- TLSH
  T1D0A69D57B2A911D8D57BD13C8B9B9517EBB2301503629BDB01A4CA162F33BF12ABF311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Qt6Network.dll
- Size 1.7MB
- SHA256 62ef2efe845089dc24ac78160899ad7c0b667a5f50deca832e88cf23e26a47cc
- MD5 dfa1f5cc85fb5df63310ffa7ee4400f2
- SHA1 f97f733f84b71dd9513d0c1a1fbb1173f6ec9528
- SHA512 dea930aac2d578481fc2fd62933265ec8b5c59de2ac467f108ac581d7e9ce51cc220595bf2cbcb982f14b5deea7b6741561982b96b5b1aaa066a564474bd4e8b
- SSDEEP 24576:IaOXA0KJVhnW6QOflzjXu1u2MraXhgD4Z0vepM3V:p4LIY6fflzjiMeOD4ZM
- TLSH
  T170857D57A3B50196D86ED13CCB4B8A07F772700493669BDF06648A162F63BF22B7E350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Qt6Svg.dll
- Size 593KB
- SHA256 96bc78c3038d26ad07d8da09e25750b22a7e4eef3a25e55fc9cf32adb3ba069d
- MD5 a2cff0a7e0a542bc187002163c45ae7f
- SHA1 e910ef8e23f84fa0e568ab00099c834620c82cdb
- SHA512 27f5b2752e1f66545aab18943f51210fba389e193cea596c951d88852ac7423257cf8ee080b2728c391babe3a5161359dc1ed6d9fdfae6fb6ac67cc401ce8dec
- SSDEEP 6144:uzQGZ2beAQR+iNIHTCvHXUgFNPrEXTg6/jUbgrcAar9s+nviy7q4o/rahujWTker:IQGMbeAmlkA79KTbIKcAkatzQ
- TLSH
  T1DCD45C67B3A60386D4AAD13CCB5B4826EB73700413A1D7DF41A58A652F23BE16F7D360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Qt6Widgets.dll
- Size 6.2MB
- SHA256 dbaffac274d96c4adadb170287ad46791e3ca34a546e4f7ee6b306fd6b921465
- MD5 3b5c56b5f3db8c7f0f4da9a0de8fe049
- SHA1 6939cbf2a1c24f38b9e0e2c15211ee5d2769cf67
- SHA512 ee7972146d8825efbeff65b73f35c24de0f1b8582ce84b591d77da3f6224251153645509c361f45f6d195f8d5089d31add70029045f916c2f4fff5a8e80896c5
- SSDEEP 98304:V+a4hM/dVKVKFWVQzqdDqTWS030/1of7DRM:8a4hM/dVKVCWVaqdDqTWSa0dCXu
- TLSH
  T1B5668C47B3AA0189C9AFD13DCB1B8A17EAB2700443229BCB1165CE162F737E15E7E355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  d3dcompiler_47.dll
- Size 4.5MB
- SHA256 e407b9ffadef47e87994dc488214f75405cf04ee99589f2315fc7ab99fd1dfe2
- MD5 554f4a30bc6ee8acf2c92b42716968ec
- SHA1 034bc655a89bf11790514aef3685b4aba6175ae7
- SHA512 1c3f990d1d7365aeac1ebc5d942ef7b58aba368b0c10f23a0e87d726f7d49995eafed44567bd29358949634d21f671a333ada0c4733e609618c008f80966ec19
- SSDEEP 49152:QDT8jmrXS1IK/p7U8SvQymezCW2Fk3bfIPlmYH7Ia66ZaCoAsZlWxMnx2/y:QimrX07lJ/4bAwMq
- TLSH
  T139268D56A7E840E9D1BBD138DA87821BE7F1B80413349BDF015086599F73BE26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  dxcompiler.dll
- Size 13.7MB
- SHA256 a5aa1d9a95bf9ea68eff4502eb687161464bb5a505e817782b7a770a2a312044
- MD5 da5300bf1cf2a8ddd7e5d84e8a3f853e
- SHA1 e8a308e6ebbe29a27256dc44954d6d45be21705d
- SHA512 567ca1d47aa28d9b1373d32b625d5c87186053939fc26393c79d404b63dce6ca07c1b916bd05e13c506afba4e501584c9bc7542b4b4fbb104b689e1e452b2f94
- SSDEEP 196608:E1qA9hLWHX4eSSgewvFmEGdNdKjcjftN9CVexNcpLQM:EYA9hLWHXJS7ewvFmEGdNccHAkxNOLQM
- TLSH
  T1BDE69D6921AC01E9D4BFD074CA178D17FBF2B46213B0AB8B06B406A62F677B1563F711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14 behavioral15
- Target
  dxil.dll
- Size 1.4MB
- SHA256 95ac1bb413178c4596f49498e912c270f8f343282b63840f174cbf5154ad1557
- MD5 b11b9184489bf1a6e04cc8d00db3cfe0
- SHA1 ba85b02446a67dfe007ed76f916dbff8273480c3
- SHA512 765308f4950c49db806de682b80ca0e3fbecace6853dd2bb6851612d119e3e372aee87c17b19bbb7e3343e4a4a5f3750f807590011cb4d6d40da230a44d1337e
- SSDEEP 24576:UcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/f:UsHMPzbOxBduHdSCde8ZF1/0Wy4oV6b2
- TLSH
  T14C656D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  generic\qtuiotouchplugin.dll
- Size 100KB
- SHA256 68bbe99565a4f1908d604e0b92104b428d15007a5367faacb0d11a3600fae9d5
- MD5 3076bcfa3ca8d9d1e53073d028a39565
- SHA1 82cc9c9431916b4a07bea73b0839a69167996c69
- SHA512 019d404c9f3a2e5d394d233a9dfe8015b62ea7a7bbb101a15a2486a0ee2e400461ac7233eade16073e9ef428ed297f0d0ccdd5359b7b608b17a4c19d63be856c
- SSDEEP 3072:A0REm27KUarH87uyRpwD/Q7zr7kYRCrzaKR:AYEmYQ8rzbRkvR
- TLSH
  T12BA36D7B12A052D5D96AC27AC79B860BE772B06563329FDF026046550F33BF12E3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  iconengines\qsvgicon.dll
- Size 76KB
- SHA256 a781b11368845776105841cd4d0b3e434cd1210c42a0c47b67573f9afc8657f9
- MD5 3f49c17cd7a37273d671c3bbb28c23ba
- SHA1 c1459e05c2a57e99b8cd18f2acb3256de81da4de
- SHA512 0e5f479aad9340c9e83bbafc322d0ede5af661e1db4cdb80f9af8cfb8256dce11b8298b54c016ca0e9d32bd36ccfa3d028dc0b53e3a8c026d1140810a4c63f51
- SSDEEP 1536:aVL3+aD7ygGnT7ontIMUes8VSXxVsPS9vRXnPTsgKxngOe1gwc:abZDCog8oXxVsPSbXnPTlKavc
- TLSH
  T166734A1327AD2219D8AAC63EC3678607EF76F5107392ABDF125149322E23BC06E75774
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  imageformats\qgif.dll
- Size 46KB
- SHA256 234a37c9ae7ecd0cf81016f2324d58aca20c5b6f4290773bb46de8db3f07e1be
- MD5 b8a46ab111383dd05255288fcc633f16
- SHA1 f6161ec0bd0079b012e0aad62365de5fd36abe94
- SHA512 e48862cb9ee2b07e93e1630b15e11fbb6bd38f5636fc893b04581a0a696b944744b6ae7f555f7db002716ed9da808fadcf8ced4cf55374e08891e80ea25563bc
- SSDEEP 768:DoTYg/qwa4IBpGtEa5DM9CQfoEQc+m9crh1xzDgKxnVbGYJ1qNjg:kTYFwfITLa6sQfoEQc+m9crh19DgKxn5
- TLSH
  T136238D465BA442E1E5E7C234C1878A2BDBB5B670A753CBEF411185BA1E333D13E38729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  imageformats\qico.dll
- Size 45KB
- SHA256 281400c1491ccc3858642bc3d698b0f183c72fe1488896e80709c2a38fa2c0f0
- MD5 cad7e8980b1f01d9075894364ab98ecd
- SHA1 a75ca540be1ded60fd0429c6c495151624400b60
- SHA512 46b88d86eb64726313f4ebf53ec60cf4a574b325d353646a7f9ca353380c8ef2088e26f05641e5840d40689c182eae9bd4295c83e3c9948913995ca9f8711949
- SSDEEP 768:dLwsT0/weModaXZtpuKMjBx3Qgu8nDgpHgKxnVbGYJ1PeNsA:To/weM6a/MKMjBx3Qgu8yHgKxngOP6
- TLSH
  T11A236C97A37902A5F4AAC678D4478A23DEB1F560E753CBDF0122466A1E333E13E38754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  imageformats\qjpeg.dll
- Size 562KB
- SHA256 ed814c0b91466feeb718e6e66cf84e06229e0c56e1257c19def49158bedfd0fd
- MD5 5a0cd3d930baf830805fc608bc9ef0dd
- SHA1 c7bcf1048b0dd0e0dbe987f1e59826df1828f84c
- SHA512 2e643c0a9b633ed30632d43725db91e263590bf2604871f5af485ee58a1960faa6f2094e5ba4ff4ce6311b55d1ad437c9f4e92c37c748654e751a275eacc8fce
- SSDEEP 6144:i39j2soVd6krgn6FyQgDv4vkBt7n8ng0o6OgXcrbd19iRS50bfrcVegrUHVYqFyp:+6FiiRSkTwwI9RpKt1AyS
- TLSH
  T19CC42942F6B51841C7E68838DF5AC956DB91781D03F68AF7B2D1CAE53B1BAE07A35300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  imageformats\qsvg.dll
- Size 38KB
- SHA256 720168af4c0b77792dc4dfcfceb4ac1181d9b249e69ea0d5b6c07cbf68e4ab26
- MD5 cc637cbaaeea13f21f9f1026a5870cc0
- SHA1 d12397969d79d3039e1ff65a82c2a842f173709c
- SHA512 faa04b6d4a859936622b9f6fd82a46a146f77539e4198e7bd43f82bf8caea5e7267a29a4b945b30f4869c153c548ea2b66b856d7fa45040549ee0a67215360f9
- SSDEEP 768:iVgvN1LdgqZcv7n97KE/OxmgKxnVbGYJ1/N2:7l1RfcTn97KE/AmgKxngOE
- TLSH
  T1D4036C079B294AA2F0AEC27894478B27C976F1A0A79397CF1162427D6D733D13D3C35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  networkinformation\qnetworklistmanager.dll
- Size 69KB
- SHA256 2e8dbcabdb4e068e73780faae307280a14900575c08d53b2d1675f905606055f
- MD5 21131b1e9cd49ef324e7f6d7bc20b572
- SHA1 5dca254bd9e98b43a9532ed442223464b13f6eba
- SHA512 7094a8aa33bde87c6a39c771e3a2b51345fa9b25e785ce930665e2d51662c622a0a37765597b8165dd3c6a428ef4fab89f45c6d815629c2746ae84e0893b5e3c
- SSDEEP 1536:KuFz0tGlmyGFoMp+4SWM/PVi+Wx2Xi5+QT4megKxngOm:/Gz9oMp+R3BWxnMmbKK
- TLSH
  T1EF634A5A67A842D5E46AC23D85934F16FA72F46153228BCF1721832E1F333D16A7EB81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  opengl32sw.dll
- Size 19.7MB
- SHA256 b04de4541863bc7d8879040a78889c4849c1b1da2784c4630f734c146c2998ce
- MD5 83bbecf92fb68795a620b395998b131b
- SHA1 026f9e87a5623fe9370c2eedef24c765f7312800
- SHA512 c63ca8863f63c8f415d685eff991a1aa67e3457ac2b1f6524db271c2986f7e79415f98f212e1f7cdd644f41bc48d558661e1136716d63f81675f664e53fdfc70
- SSDEEP 393216:lv6MzbMYyFwRwwQ+/TuZrgAaSHdjli5TXe/38gJy3kU0de2VlkRaVN:0Ci1dfQuN
- TLSH
  T1B5278B5A72A401D8D57BE17CCA536A07FBB178490321ABDB06F44AA62F23BF1163F351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Checks computer location settings

Contacts third-party web service commonly abused for C2

Discovers running processes

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32