Overview

overview

4

Static

static

3

oneclient_...up.exe

windows10-2004-x64

4

oneclient_...up.exe

windows11-ltsc_2024-x64

4

$PLUGINSDI...ID.dll

windows10-2004-x64

3

$PLUGINSDI...ID.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...rd.bmp

windows10-2004-x64

1

$PLUGINSDI...rd.bmp

windows11-ltsc_2024-x64

1

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

oneclient_app.exe

windows10-2004-x64

1

oneclient_app.exe

windows11-ltsc_2024-x64

1

uninstall.exe.nsis

windows10-2004-x64

3

uninstall.exe.nsis

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    oneclient_app_2.2.0_x64-setup.exe
  • Size 17.5MB
  • Sample260808-b4le3sxfpc
  • SHA256 5a94ad11df387590ba31b80ee2368632715520446ad4dd32de99c536e0970772
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
discoveryexecution

Malware Config

Targets

    • Target
      oneclient_app_2.2.0_x64-setup.exe
    • Size 17.5MB
    • SHA256 5a94ad11df387590ba31b80ee2368632715520446ad4dd32de99c536e0970772
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    discovery
    behavioral1behavioral2
    • Target
      $PLUGINSDIR/ApplicationID.dll
    • Size 198KB
    • SHA256 f6851dcbf0a39edecd8a46564bc455e5273736c3dbcb02b954c201c79ccdf117
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/StartMenu.dll
    • Size 7KB
    • SHA256 110545415a59402635e1c9439acba15b44bab268ed02ad2a262ce12604a47855
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral7behavioral8
    • Target
      $PLUGINSDIR/modern-wizard.bmp
    • Size 25KB
    • SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      $PLUGINSDIR/nsDialogs.dll
    • Size 9KB
    • SHA256 4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral11behavioral12
    • Target
      $PLUGINSDIR/nsis_tauri_utils.dll
    • Size 1.1MB
    • SHA256 0eed48313a7f904d7cc1977b70000ab3f11f18cadc8e6a69b807d288ca71f9db
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral13behavioral14
    • Target
      oneclient_app.exe
    • Size 48.0MB
    • SHA256 7b8dc878d6ac45cebb9cb6fc5e77af8814319efb29a0493f3c05019a04e18157
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral15behavioral16
    • Target
      uninstall.exe.nsis
    • Size 618KB
    • SHA256 7ef22c24a99e1fef6502c37776a72ad027b88ae4c706d778c2d751a7581ea7f1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral17behavioral18

MITRE ATT&CK Enterprise v16

Tasks