Overview
overview
7Static
static
3SecureServ...up.exe
windows10-2004-x64
7SecureServ...up.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3secureserve.exe
windows10-2004-x64
1secureserve.exe
windows11-ltsc_2024-x64
1General
- Target SecureServe-0.1.1-notarized-windows-amd64-setup.exe
- Size 3.3MB
- Sample260807-pe75favemf
- SHA256 330735df65e4e642fe9e8834c293608c2f9ab2751c6df4934df47c325f83ad90
- MD5 38260d591cce7e7f231e35679d4578c5
- SHA1 282b6b392119b05ed3025c19c9d1e5ad84ea51b9
- SHA512 27978dec84c463999f2d64c1f85c6d28bcc1dff1f17a48055f07c79b4f7916193b2df14dc1b07ffb7fb84788cfbaae415975b309aa9bca6dd6595ea54a0dde4a
- SSDEEP 98304:bT4CALuZG3d9mq357ANOgtpg7FR9PpWO6xTxWUA9Vgp:bYus0bM7FRJpWO6Wb0
- TLSH T1FCF533A223A1DAB2FB472A30C92AA73B4789F707C044AD9113DC717BD6E1E125E37D15
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
SecureServe-0.1.1-notarized-windows-amd64-setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
SecureServe-0.1.1-notarized-windows-amd64-setup.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
secureserve.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
secureserve.exe
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target SecureServe-0.1.1-notarized-windows-amd64-setup.exe
- Size 3.3MB
- SHA256 330735df65e4e642fe9e8834c293608c2f9ab2751c6df4934df47c325f83ad90
- MD5 38260d591cce7e7f231e35679d4578c5
- SHA1 282b6b392119b05ed3025c19c9d1e5ad84ea51b9
- SHA512 27978dec84c463999f2d64c1f85c6d28bcc1dff1f17a48055f07c79b4f7916193b2df14dc1b07ffb7fb84788cfbaae415975b309aa9bca6dd6595ea54a0dde4a
- SSDEEP 98304:bT4CALuZG3d9mq357ANOgtpg7FR9PpWO6xTxWUA9Vgp:bYus0bM7FRJpWO6Wb0
- TLSH T1FCF533A223A1DAB2FB472A30C92AA73B4789F707C044AD9113DC717BD6E1E125E37D15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
- MD5 cf0351a2ab9128838be6b54cea8238d3
- SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
- SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
- SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
- TLSH T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target secureserve.exe
- Size 10.3MB
- SHA256 552d43d78fb457f784374e932da0666c1530bf386e144ce8ba4f5631cb0ad0d9
- MD5 06014fb9c3522720f13dbc951e4dfd97
- SHA1 10597566013c9098c4f5fe60b58a8dd609524766
- SHA512 582f25efb6ec620738c147d684804d6ce498fb94c6acbba56f381ce3a9638b2017ddbf6d2ae39ee05f533e19457cec09c897f1841d54d0e507bb6276ea258a3d
- SSDEEP 98304:1PO7n7Li6vUTb1JH8RH8OAsoDy4Y3Z+E:Javi6vzRH8BlDs7
- TLSH T154B63807EDA554E8C5AEC13489729523BB717C492B3123D32BA0F6242F77BD0ADB9394
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10