5e8eea6d8965c5c98f5a1625df9858938e9d42ef85e586f67bf97b8272ade3a9

Resubmissions

08/08/2026, 03:03

260808-dj1elsgn2v5

08/08/2026, 02:24

260808-cv736afr7v5

Sharing

Copy URL Twitter E-mail

General

Target
Hotscreen 0.9.1 - Demo.zip
Size 384.2MB
Sample260808-cv736afr7v
SHA256 5e8eea6d8965c5c98f5a1625df9858938e9d42ef85e586f67bf97b8272ade3a9
MD5 f7cef296be6dcc0e6ee0bdfab0e21f32
SHA1 d69fba66143310444ad703d9839aa895d8722664
SHA512 5a4f7d32e36f151d3a4324840026b46eb9af0345216bd58c900b040774642a7cc3b53ae333cfc74809c3666033a75cdf9887eaa69fa493c5e2e4dfe66d8087c7
SSDEEP 12582912:dEjNf3caN+16pTy9gkvpi5xOAr4DJLo8xRI:dYNf3Hsou9bvy38rI
TLSH
T1221933A1E6FC65C1F0A5F772D6CA7FF1525CB864A0E386E89593CC24F52E2E34D29102
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  data_hotscreen_windows_x86_64/Microsoft.ui.xaml.dll
- Size 14.3MB
- SHA256 f4084263744c5dd5c37cc7dbd1f6a26ad7acf989e306184359b4377f3435319b
- MD5 3e159aadf0f80c92149e7582085bb687
- SHA1 7aee09a5c34cd15e89556ecde1d4f9b42b441580
- SHA512 1c8191c6848df1852b6dc93a29ab8b5b65c3aa0ea260dbbe5254bf749a4f2a1f951123501ab6db1f3732ca96a348e1a63781132438cb2832bce2a4740a621c36
- SSDEEP 196608:EYJHGfte+v7CTtDI3IxmOPHgp++cDXjey4DzEPWh7zh:EYJSte+v7CTtDiIxmO/kcDXjn4DzEQl
- TLSH
  T155E65B5B62EA4592C1BEE238952B524FE6B138211372A7CF0175015D9F7FBE28B3D720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  data_hotscreen_windows_x86_64/Microsoft.ui.xaml.resources.19h1.dll
- Size 553KB
- SHA256 140a6b8a32952d416fcaed4b10e33269dd8a20b99c3c00ad413c99eadff99802
- MD5 4fb3b3a97fdbd7c168306a1045c30ce2
- SHA1 1840664620d9f9cda02ec44edf94905be16671a6
- SHA512 a286bc4ebaeca2ef5dc0ed26fb4dd68073131f23407fc3549365cc163619f6d18cdbb8101e7a4011c1f6fd5f3f2245ad41b3e2c16902f557d81f4b02046bf85a
- SSDEEP 6144:k+33u9Ra+DIY8EGc0aeGPh46AdtUJyDJAg0ZCzstVskouzj:73ufIY8EUdAzVskT
- TLSH
  T1DDC40C01E7FB1648F2F36AB06FFA496418B3BE536E31C07F40141A4E0A72F859A95763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  data_hotscreen_windows_x86_64/Microsoft.ui.xaml.resources.common.dll
- Size 54KB
- SHA256 f06e7db351730e7f9cceffd78d2165c0d92ccf6c24d5f018e6434e9351f35e68
- MD5 0699c31ec36b8ac106f40a2cacff36e3
- SHA1 1be3aa1248de5661adea11157d409df5191ab37a
- SHA512 5d84010a4cc2382322b02e6dddad656d3136df9ccc2055c2d3ac6fd705c12a5d53c6e51d46b08d5950e50012cb69ce6bc30702223a3321ed36cc8f3efdfb7657
- SSDEEP 768:mB7cNEEdKuC0eJ1MH5+1RNMoy0CW7SaDWKFxGd1HUBsUbAat+2hi9z/yfflK:mB7cNEEcuVQiHaQHpGDBsUC2kz/Afl
- TLSH
  T13343975067F95208F9F73F74AEB95A644E3ABC9AAD79C21D1210A05E1972F40CDB0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  data_hotscreen_windows_x86_64/NpuDetect/NPUDetect.dll
- Size 276KB
- SHA256 d24ca170ad4e2c63f17c3c93aed0a3ce0cba60283c41ba8c90af4992584f69ec
- MD5 3b548f3391acb2bf54fe7a57956aeeae
- SHA1 3267f6f1062dc1752d6dab315d7dce410b639b26
- SHA512 4fd5c5bd76b85966fef4b2ce4f19838c16c5618d32042b34c86ae0b8dd37cd75f71dba2c3e2681b48083f47db05a063e9a57fae039ba9df630ef8e956b6b5cc5
- SSDEEP 3072:cuv6ia/2pM+MkPT2K2hP97yC4K9o/EEHY6Myvtgk372Mx/FxTGW2B7cogNnD:cuiiweT2Ke9WC4K4EEpP02H
- TLSH
  T140548D15B6A40CB9ED6B853CCD534906EBF27C4647A1EACF03A04B961F277E09A3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5
- Target
  data_hotscreen_windows_x86_64/OpenCvSharp.dll
- Size 979KB
- SHA256 c12147056227406d116176635e2b9f466603dc2fc046f1b932b292da2cd8bd9b
- MD5 90c19ee9cd78808b3da08d85b831f045
- SHA1 fc1d624cc92fdc41d1be157f8e5c84aa8bb76d89
- SHA512 45d35bd56a4899924eac550bf64ff1037f6b2a5174a75f4976951b872ae900b4ca11d87e726b2ece83243f4ae04099608c49476c630cda5052a4902c1c1c8978
- SSDEEP 12288:vi443QbkNNxylx+YSBT5vZVU/1o3ORWy2rzNW4d8NN9e10:vi47kqS55LU/1o3OhNN9e
- TLSH
  T12725F704F7A05967DB1E1732C1330AA4D2B6E4E6379BDF8216A512BECC673C46E065E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  data_hotscreen_windows_x86_64/OpenCvSharpExtern.dll
- Size 65.2MB
- SHA256 3f65ddcdd4ee896820026f9a0d0be248cae1ed2794a9dc894d163975ef0061cc
- MD5 74e1a4abe7f73f66fde4c51570140ae2
- SHA1 935b3b4919a5c2fd588b6370780a9e6592d042b0
- SHA512 73441db5279020f7c53a8ed16b182ab55ccc00617e29f8c15c4443d6461b369ca415ac428ed728ee96872718573029639c909a40a3bf7acc1ef8464879b7829c
- SSDEEP 786432:L2HIFpzb5CC6K01T8kc2WF63e2z3kpNVPKX:7tV2Ws3e2gVP
- TLSH
  T1CCE7AE47E0E651ECD47BC074866AB627FB30344943645AF75790CAB12F27BE06A3BB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  data_hotscreen_windows_x86_64/PushNotificationsLongRunningTask.ProxyStub.dll
- Size 34KB
- SHA256 79b98eae3ea5df7c0726ab521c99557df54b137bb67a4b5e83987260bfec645f
- MD5 6ad9786c2038c8208c8afe8315ea68d9
- SHA1 96b6a3f34c462dbe0a986d9f4e6daa55925a791b
- SHA512 f04ddada1afac025e96078e5d8aa9cef61395e2515da44d4d685f001f36ffb020fd9aa4018b86c8d69bed09998c35b2a5eee94d7675ad1da019b95f941e74636
- SSDEEP 384:ugp6neY+nUh9rXaHGYBIk4xArWS6ZrnuYC/qryW4RP1+aHRN76mUtGkeR9z5PR:3K2HRjJyS6ZT1rc/+26mhkC9z5
- TLSH
  T10EF25CC4964C90CAE42A463480979F16B83EFB52836197CF07B0E56D1DA7BC1BB397C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  data_hotscreen_windows_x86_64/RestartAgent.exe
- Size 77KB
- SHA256 84abf6e78c442db17fda169cabf81244718fd5b9e7ce8e2d84963959d449ce84
- MD5 dd27911ca1bd211da3c9e41aefc44736
- SHA1 e01e81cc3418c718de9c5d08e5dd4f839c24462c
- SHA512 3ce70e0aa92d90dc8f224ada03a1654b1aca5d9fb96a69fcfbe2de9ec18d93b70050f51b8bd5ee49c81f486942549aec91b93a8dffe63694aa8f9cfb00138f74
- SSDEEP 1536:uRII8rpR9oR/GeuJOEHqGrLivc6uQi9ED7OChTr1j2DHzJg:uu1psG7HqRvDFvfhr1j+HF
- TLSH
  T139737DA197A510E5D13A91BC81D28B2AF7B1B44257115BDF03B0C69A1F23FF4AD3E391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  data_hotscreen_windows_x86_64/SessionHandleIPCProxyStub.dll
- Size 38KB
- SHA256 5c7449f7cb0f0b27aec4a2249cee5403cb6660b5d7391b47361cbff7fa3ce676
- MD5 c5f5cd5667cf0198859f5c1999401ee6
- SHA1 64cf24b241cfeaeb46d53486e275810575e0f91f
- SHA512 75972b4e8825edcb512798c2ea3476a7884d133d24ad7dc2578f1a90f6435b7401edb3004c0d670e5002c1355c37a252d65f029136d8930d96bce931bc54b219
- SSDEEP 384:1VyQ2MGWumikvk+Rk4HijoMIUA1YlYfdZJxz8zfNCOVVL1rJORP+1aWTeWO/ak1+:1cP3BywaUAmSdZChdyYUP+2+Ci9zu3y
- TLSH
  T1FF036D90B6AC84CBF1664338C0639E927939F2A2936157CF07B5D63D1E637C0A7392D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral14 behavioral15
- Target
  data_hotscreen_windows_x86_64/SharpDX.DXGI.dll
- Size 144KB
- SHA256 18c4ec89bc0deecfc91bcb7ea1f29a2690e9288003c366ea02703374b4b6d732
- MD5 faccd233e453d81a69c5081971031ed9
- SHA1 4552465012d6f6eb20f90923b8cb19526aea43a7
- SHA512 9aea3ed86a5195fb2da15d73db5a297e0f7b80920eeedfa2ef59858c7fd1808ec519b8a009f1b225ccd1ea706487f75fb00bd4d67d753861674bb22f5624a311
- SSDEEP 1536:N7No01IBO1w2oCm03EN0Bb542G29uuvA1JhkrIAcFpZMD9hVRg5bT+02nBJdbeAV:N7y01IBOnoCzENmGuH3Kq/4Em1i7
- TLSH
  T1B7E33182AEB58BB4E94F6BFD6652F92A5123F1110481B64612F238004BC52539F9FFDF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  data_hotscreen_windows_x86_64/SharpDX.Direct3D11.dll
- Size 276KB
- SHA256 5c1c08571840fbf4b985a063ac6957130596a8883920a7174fb7c516826ddab1
- MD5 d2c094fef2df16d0fe0e538f4179fda1
- SHA1 08a514cf1478e9eb4fe78730bb026158704a223c
- SHA512 ca17806b7ea69b9d01b7d3dfb4fcf1ba8145e78c716d7d0a86341da74e91711cbe9d786c8ad6abbf506105511901e5a92b39f6cc4089f6b7e72e71a5e915848c
- SSDEEP 3072:ripuY+X1i7piTyVIFbi8c6LyLRVBGYbcaUi1DSkewOxEtX1FCzEn7ZG7okMr6fZX:T0VI9Ofd1FCzEn7ZG7opsz/Uv3mjxfr
- TLSH
  T17C54F911E9084E0FCA8F55FEBC12BA0702BDA415014AF767A80DC5DB1FDA3E9E91A7C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  data_hotscreen_windows_x86_64/SharpDX.dll
- Size 269KB
- SHA256 518d45a5aaec84cb37e83ee2cf58c503ab6a25febb8c48b53316340c967e84bd
- MD5 6c00b8be8fb6ff838c79c9de405db1f5
- SHA1 faf1f8f0d2d56eb2377063906432cce29d9f1839
- SHA512 e092aaa1bac82337bda113cb88a4990a9615c9cad8757af650caf1a327ada6ed83e4c6cf2b77073c028d986554b82ad16bc3e1e7a8b4466324201d8daa425ec5
- SSDEEP 6144:jG9J7gpDfCvbW2HHWUwQ9N/+bydXB33XbEOERabANrG:jG37gpjCjrH2UldXJbkRa6
- TLSH
  T1B8444B22F70C0A53DD9E47BABCB546D213B095002516D64EBB8CA5ADEDCB7807E263D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  data_hotscreen_windows_x86_64/System.AppContext.dll
- Size 15KB
- SHA256 ad2f215dfdfd3e81985a25b5bbba093797fe33ebebc5d3ac3696e3f8fd24c54b
- MD5 f485854f57b28b69ab77386e0c2d18ee
- SHA1 0faf52810fd1028c63872412ccb61c25263ddcab
- SHA512 1bc1e3f8ef9df79c8d725da8428b4b228cb0b863ba3eeb24984cd7354c001a0fc77b20e5728c3689b341cd8646ee6ca40e0ee6a0ca9c3706547b30113cdb553b
- SSDEEP 192:HYjUxAGIIaW+c7WwjWKNA/F5+MHnhWgN7aIWmINFPKBWX01k9z3AVJGQbEi:HkCdaW+c7WwvwnHRN778KER9zY7N
- TLSH
  T151625BD69BB84203EE6B5DB092A5DA433D3CA3D65D51952B12C6F9891C933C8DF3022E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  data_hotscreen_windows_x86_64/System.Buffers.dll
- Size 15KB
- SHA256 ae992fb3b9737226acc603f13ab59a48ea3233d663593952f6b2993374a7be55
- MD5 4fd792ed3640fa0a1ec15e7a98999577
- SHA1 00d95f7cc8e9986be4e87e885e60ca3683fde9ef
- SHA512 0da6bcf22170d35ea9b6656c16ae07463b12e2890640d491357e16f2fb26d60bb1df473048e495c01ab88a3c1bef40d4658e5db02c9b01e1c67b07781550c9c1
- SSDEEP 384:NUWYj2W6fLXmztvGHRN7v4foJR9z3IOn:gSjQtavd9zYO
- TLSH
  T12E624BD697688203EEBB2DB092E4D5537D38A7C39911A56B0AC2F6481DA3385DB3462C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  data_hotscreen_windows_x86_64/System.CodeDom.dll
- Size 179KB
- SHA256 4de88b830e6dea831e24eca66e2945536d3f5732bf49cdda46781053d983e97e
- MD5 aac38d28ea9cc8b9e68dfdd0336a9731
- SHA1 d29586fbbe48392f8a569319e378e3e0e2bc6837
- SHA512 29214dec873b231e523b34b2362e76400ea0d06166d959c3a4303812560f70a024fc1a9dde9f3e5fef759143cfb5ae9d971d4a5fa164d4474426e722b85429ac
- SSDEEP 3072:sMKminLBDcR+s0sK1eW0d5PIlwbrebRYSH+l15h12Z+y:MLBk0szhebCSK3WJ
- TLSH
  T1EA042A6437FC8376E7AE6674F028092146FCE40E7283DB5A8D8955F55E23740EE20B7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  data_hotscreen_windows_x86_64/System.Collections.Concurrent.dll
- Size 270KB
- SHA256 34b371f67cd159123b43fca5196de76535957cabb5c90fa9b0fde5ed6f52f548
- MD5 37fc47aed47bddbc19236a82b9293d3a
- SHA1 c582eda439f9c7a72a2aff37c95d8825600fbcc4
- SHA512 3945d832e3c74217c68915f596d6c05db399e8e6188362740d388c41c86bd1d783079940e7cf056a5d8dbb941089020c1bbcc549e4d4b8f1ec992360d6ad69b3
- SSDEEP 6144:OPA2H1j4tByYOTblcFe4khyO2PIykwXLJQ:OI21j4tBypHfhD2PIrEF
- TLSH
  T10E445B2173884B12FC6F497D9593D514E2B6A8530322C1DF0274A9849FDFFD2AB77522
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  data_hotscreen_windows_x86_64/System.Collections.Immutable.dll
- Size 818KB
- SHA256 fdf44cfbc78c3b0bfca774a71ff6b9cffdd0bf15925651bf17505474289962c5
- MD5 05907a9b429d5918360858861b6b0e86
- SHA1 6f364d9ac1973ade6066204644783a1bae367d1c
- SHA512 44575ec5e13d93f30d39683edeeaa85aae7d6607ef76d975479bed4c3014ee7a9f5e80a65343c33e4426110e49ed45ebb0c8fac2caab5e00692648dc91dd1b14
- SSDEEP 12288:PrJR+uRoPwK+eN8/98vTU4dQEE3k0T9YLVgHr4iutvcgllggGT:v+uM8abw+CMiAzlly
- TLSH
  T116055B96E38C0B52C62FC5BFD6534AB9D6A1C45253E291CB00DAF6B03F93BC1E57A424
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  data_hotscreen_windows_x86_64/System.Collections.NonGeneric.dll
- Size 102KB
- SHA256 4c76426273ef75a65a652ce9c9b89bc1f92075cfcdfc8232fbdb3fa3ee92b974
- MD5 9f38e230e9ddc78fbd99cc8fd165c5f0
- SHA1 2c1a68703de2792e7910062d3f11fd86a568095b
- SHA512 b1965d4e66786a270deb211fbd47be44669116ac2d96d3920f878d4d70be08ddf8e74312efcb5a442f4041c18db5cdf3b096b0b52bf01f81dea6fcd6cf001976
- SSDEEP 1536:heJ0tJVDX9LMIbwNC5IQ7XVrMZqz9A4WLUdZQc0z0w:h40dzNMIc+IQLGZqzK4XQNh
- TLSH
  T185A3272673D80322C66E5BFC91938A02E676F4D26713D1DF1618A9CC1F9BBC2D6B2147
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Event Triggered Execution: Component Object Model Hijacking

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32