hijackloader | db06fc0b3a8bef0fdc708948d3110b64eb7e4c9cf51ea0296b13e9f03287e327 | Triage™

Login
Reports

Overview

overview

Static

static

Install_58...ib.dll

windows10-2004-x64

3

Install_58...ib.dll

windows11-ltsc_2024-x64

3

Install_58...up.exe

windows10-2004-x64

Install_58...up.exe

windows11-ltsc_2024-x64

Install_58...le.dll

windows10-2004-x64

3

Install_58...le.dll

windows11-ltsc_2024-x64

3

Install_58...er.dll

windows10-2004-x64

3

Install_58...er.dll

windows11-ltsc_2024-x64

3

Install_58...er.dll

windows10-2004-x64

3

Install_58...er.dll

windows11-ltsc_2024-x64

3

Install_58...64.dll

windows10-2004-x64

1

Install_58...64.dll

windows11-ltsc_2024-x64

1

Install_58...L3.dll

windows10-2004-x64

3

Install_58...L3.dll

windows11-ltsc_2024-x64

3

Install_58...ge.dll

windows10-2004-x64

3

Install_58...ge.dll

windows11-ltsc_2024-x64

3

Install_58...tf.dll

windows10-2004-x64

3

Install_58...tf.dll

windows11-ltsc_2024-x64

3

Install_58...ll.exe

windows10-2004-x64

3

Install_58...ll.exe

windows11-ltsc_2024-x64

3

Install_58...om.dll

windows10-2004-x64

3

Install_58...om.dll

windows11-ltsc_2024-x64

3

Install_58...er.dll

windows10-2004-x64

3

Install_58...er.dll

windows11-ltsc_2024-x64

3

Install_58...64.dll

windows10-2004-x64

1

Install_58...64.dll

windows11-ltsc_2024-x64

1

Install_58...46.dll

windows10-2004-x64

3

Install_58...46.dll

windows11-ltsc_2024-x64

3

Install_58...64.dll

windows10-2004-x64

1

Install_58...64.dll

windows11-ltsc_2024-x64

1

Install_58...1d.dll

windows10-2004-x64

3

Install_58...1d.dll

windows11-ltsc_2024-x64

3

Resubmissions

08/08/2026, 02:26

260808-cxc1ssgj2v10

08/08/2026, 01:14

260808-bl4tpszwbv10

08/08/2026, 00:56

260808-bal5hsztfv10

22/03/2025, 04:08

250322-ep7ljsxxay10

Sharing

Copy URL Twitter E-mail

General

Target
db06fc0b3a8bef0fdc708948d3110b64eb7e4c9cf51ea0296b13e9f03287e327.zip
Size 46.8MB
Sample260808-cxc1ssgj2v
SHA256 db06fc0b3a8bef0fdc708948d3110b64eb7e4c9cf51ea0296b13e9f03287e327
MD5 a1a21fce85b065ca27cdb5f9e8cb526f
SHA1 bbeb7e033125c74d16fabe2ae86a8ba4d4140763
SHA512 360c9251288c49ec70006817a55e7a10a78db6fe66d0c079484452d9ac4ddacdfe171d7143042a41daa6c627425e431f5c9a334ac7117596fe448100ca864c76
SSDEEP 786432:LW/wKavx8gZT0KjsxLLNQozXUKmOWPzqJuGmbpsjG9gwbiIXdZmf:qoKa6gZT0LLNQogRGg/dU/9f
TLSH
T120B733D8CC3A9C37ED107A5D2BA79C9AD21A9204675A18723B6D97B330D1D68ED7300F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

hijackloader vidar eeb3a51cc4752e6b45e0be3905cb7379 anti-termination dead drop resolver dead-drop-resolver discovery evasion loader stealer

Static task

static1

7 signatures

loader hijackloader dead drop resolver

Behavioral task

behavioral1

Sample

Install_58.97.4263.21.03/DuiLib.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

Install_58.97.4263.21.03/DuiLib.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

Install_58.97.4263.21.03/Setup.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

stealer eeb3a51cc4752e6b45e0be3905cb7379 discovery vidar

Behavioral task

behavioral4

Sample

Install_58.97.4263.21.03/Setup.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

stealer eeb3a51cc4752e6b45e0be3905cb7379 discovery vidar

Behavioral task

behavioral5

Sample

Install_58.97.4263.21.03/WinSparkle.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

Install_58.97.4263.21.03/WinSparkle.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

Install_58.97.4263.21.03/bin/CSERHelper.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

Install_58.97.4263.21.03/bin/CSERHelper.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

Install_58.97.4263.21.03/bin/GameOverlayRenderer.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

Install_58.97.4263.21.03/bin/GameOverlayRenderer.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

Install_58.97.4263.21.03/bin/GameOverlayRenderer64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

Install_58.97.4263.21.03/bin/GameOverlayRenderer64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

Install_58.97.4263.21.03/bin/SDL3.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

Install_58.97.4263.21.03/bin/SDL3.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Install_58.97.4263.21.03/bin/SDL3_image.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

Install_58.97.4263.21.03/bin/SDL3_image.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

Install_58.97.4263.21.03/bin/SDL3_ttf.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

Install_58.97.4263.21.03/bin/SDL3_ttf.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

Install_58.97.4263.21.03/bin/Uninstall.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

Install_58.97.4263.21.03/bin/Uninstall.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

Install_58.97.4263.21.03/bin/aom.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

Install_58.97.4263.21.03/bin/aom.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

Install_58.97.4263.21.03/bin/crashhandler.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

Install_58.97.4263.21.03/bin/crashhandler.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

Install_58.97.4263.21.03/bin/crashhandler64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Install_58.97.4263.21.03/bin/crashhandler64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Install_58.97.4263.21.03/bin/d3dcompiler_46.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

Install_58.97.4263.21.03/bin/d3dcompiler_46.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

Install_58.97.4263.21.03/bin/d3dcompiler_46_64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Install_58.97.4263.21.03/bin/d3dcompiler_46_64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Install_58.97.4263.21.03/bin/dav1d.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

Install_58.97.4263.21.03/bin/dav1d.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Extracted

Family

hijackloader

Attributes

directory
%APPDATA%\systemtask_vsv2
inject_dll
%windir%\SysWOW64\pla.dll

xor.hex

Extracted

Family

vidar

Version

13.2

Botnet

eeb3a51cc4752e6b45e0be3905cb7379

C2

https://t.me/g_etcontent
https://steamcommunity.com/profiles/76561199832267488

Attributes

user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:135.0) Firefox/135.0

Targets

- Target
  Install_58.97.4263.21.03/DuiLib.dll
- Size 519KB
- SHA256 249993068d99a6e06f2d24b50ef0ed00e335a453ac2699abad66c2143862bc80
- MD5 ec57d095b1b38da1ba003522c5e04d9d
- SHA1 26835c537a6c4f20a435ff56b907f307618da893
- SHA512 07c43dafacccecb7c57c07cef0b7ff037dd5fcc473da6f799e3bd2ff7c98b0982bf667df95dfd3d5c9a333564adda185581d4f5f2956db4075a2b2b879a1a5ef
- SSDEEP 6144:Hd1iwZ8jMgixiwDbKbT9vXez7OySqKNbEAOwUCEzAZPebalLUIPon:Hdo4kFXezmqKNbELABebkFC
- TLSH
  T182B48DA136F282BACDA7C6359F3D8A39BC6571500674C387B3DD4A066957FA0C9123F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  Install_58.97.4263.21.03/Setup.exe
- Size 1.2MB
- SHA256 4066bdb5e7bf703230d8f0697e53a73b661318025e24c489c6a0fe54debd805f
- MD5 f0b926a81ecef151cc9398613ab2669c
- SHA1 924d0e1c285eec13f32c4396a47033521ac2b46a
- SHA512 846b2b8a030a7b74c1942cd9ceb5d9a25e50f8cd1c8c43f6e6a4611a3f525e0fbe6167335b1fa81d5d1735b533f88ed920f6c4f7d2c6e44d16ecad2863a04de8
- SSDEEP 24576:a28cYK4T3RinfCvMoGqOd1f/CjirHDPYsAopgNGZ5id:d4rOZ/CjiDMsAk6Gqd
- TLSH
  T13245AD40E781CCB2E65201B0163693EA6A3BB51447359AC7E3F23D1D9A1DBC2BD7934E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

anti-termination eeb3a51cc4752e6b45e0be3905cb7379 dead-drop-resolver discovery evasion vidar stealer
- Detect Vidar Stealer
  stealer
- Family: Vidar
  Vidar is an infostealer based on Arkei stealer.
  stealer vidar
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Detects potential process-critical anti-termination behavior
  Detects RtlSetProcessIsCritical or NtSetInformationProcess references associated with process criticality, likely enabling anti-termination behavior that may trigger a BSOD if the process is terminated.
  evasion anti-termination
- Executes dropped EXE
- Detects references to legitimate web services potentially used as dead drop resolvers
  Detects Telegram, Steam, and other legitimate web-service references that may be used to retrieve secondary C2 infrastructure.
  dead-drop-resolver
- Suspicious use of SetThreadContext
behavioral3 behavioral4
- Target
  Install_58.97.4263.21.03/WinSparkle.dll
- Size 1.3MB
- SHA256 45b77339724af13140d0e19c883df04f5e6c4f1aa863af51b8bf8c52ee8b57a7
- MD5 bf14b103d67bf1535cd6b140d556b00a
- SHA1 56914083d73c086e0e6f2b2160840c356a6a6653
- SHA512 b598f8d9945dec0832b358ffd3ae27f583e26c206abe58a624d63de061ca1cec8058b99c0953cb724aee56cfe6befbb23274e5a56569b99ff44e443a8059a439
- SSDEEP 24576:/xlXd8sl5Rh7lDp7VA4TzskdJi0Netgc0gWaTkqwOoA5d18Fh2jO44urY1qo8U:PX+c7L7JTzzO0kBnbIqboA5d18Fh2C4O
- TLSH
  T11755AF0375D8C47BF2BF22348929F29506FEBCB24DB4810FEE98264D1E715A2B616753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  Install_58.97.4263.21.03/bin/CSERHelper.dll
- Size 121KB
- SHA256 09d4c2067217b1900d4d7a936969f809821649b10ed8afd0f49de2871f7a3784
- MD5 833d30fa5bd04e2011cb6b9d7081dded
- SHA1 4c8a9cccbecb4d06ec76cc38a9c850f05a020057
- SHA512 649d2c1f9cf34a220e3bb67b1a656dcb290be0a3522f87fd4e948121a25153f73bc53c06d8997744cf8cdc82486a4a902d6b0c9da87ec190abe624edbb9c04ec
- SSDEEP 1536:M4LV+K0XfRcC4qOMf+6nTItU0gx1qi4p/Zf7bzHkLL3m72Sj9Ddc4K8IXcnzJ38g:sK0X5jXnMeO3Ho76DdA8IXcejaFV
- TLSH
  T1A7C3AE1273804072E4E70A7C49D5E72A6B7BBB701A3988475F68574F2FA1BE16B27313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Install_58.97.4263.21.03/bin/GameOverlayRenderer.dll
- Size 1.2MB
- SHA256 a9344d994110718c740e0313c1ad72b4800a96d92ea9a673f9a5221e79980ddf
- MD5 662b11fab7a015726163f3cef31a9414
- SHA1 9a06adb1a879c5f55a1858d2f3370f4c714819be
- SHA512 5e8e4b1b75e7ca34372e8bfdae9f417c5316e224dc65e2c3cba6a6cefb3854e8b043fd10350ec61f8eb8277c12157e975c89f236712259a6fc05e0b64819367a
- SSDEEP 12288:YaZ/Ef+YKXCnCRgjz0QHS7960CrPXZA7EsU3ldbzquItA34SbfUebfCHN0Zu3M9v:sf60Igjz0QHICxXI0fUqCHN0U89Awt
- TLSH
  T1CA456C10F540C277E4DE12F59AA8AE74B87C4E705BB611EBB6C03F9E1E701C3663499A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Install_58.97.4263.21.03/bin/GameOverlayRenderer64.dll
- Size 1.4MB
- SHA256 79824624587202762057412026c3c941de4118d87c3509c9cb053cb57401492d
- MD5 e0e2ca1dca8d52e3cacd4c8aebb239f1
- SHA1 260e6e20357c32fb8496455dcc67e334e193a03b
- SHA512 cc9731fa8a3ad5101eb9acdb289e3906c02df66d6527fc6b8e476cc67f79976649988b930dd74614ea391299c2ee2f2bbc7ee9b547708095569a64ff326b214b
- SSDEEP 24576:gvlkfS3XSvCONUJvpwCvhGRrcXl3f+g0yBbdnlSzHTAsW:gv3lOgKCvhGAlWGBxnIzHct
- TLSH
  T102655C46F7F521ACC1BAD238C6479516EAB13D61372127DB2260AA295F73BF04E3D321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Install_58.97.4263.21.03/bin/SDL3.dll
- Size 2.0MB
- SHA256 b9913beae31855b149d9c0fa2b99a0129a107c3d908b820ed3a228186aa17fa4
- MD5 428a1e6c2c221be2f7edb279f4433f89
- SHA1 022c57e5c92e0191a7df50d65bb5adccb976bed0
- SHA512 d22709732e544b1ff2190f28e592e29c5fe2770878f4f68b2695d82847283757becd7079d5231e46b877f6d32867906bfb66f4b3401315530c71ed425928dfd1
- SSDEEP 49152:hAF23rLugxjjQvT0Y8ahF2SLZW+6e7ex7DT7QMZ9:hAUrLugyvT0Y8ahNdv6sG7QM7
- TLSH
  T178A59E12B9538116EDD700B7D3BDBFB60D3E7A2C13BD05E3ABD419A568604E2623871B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  Install_58.97.4263.21.03/bin/SDL3_image.dll
- Size 665KB
- SHA256 820288aafcf1d25bd4f17469b25fec7b6ce2a9d8a9a12198c8868461ba5cbe21
- MD5 98f35264b3e2c48f1dd2b6943aebaa8a
- SHA1 b67f2af1550e6a31128a49542a723e22a6d7f41c
- SHA512 910271d8a7d28e9c6b83e901d434b5afc4617a441050bc6a4bb6f63eba4fd5aa99ef3af30eda471c80a632697cde5cbf540118051ce113af80cccd69cf84ca76
- SSDEEP 12288:wwifyyPb8ANuYSJ1hYrXPVJsxRsS5Q29o/:sfyGb//qCSS2g
- TLSH
  T14EE49E10B490C171ECE520BB52ECB63B457DA4F403289ACB5BD44AFBDB205C1AB77A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  Install_58.97.4263.21.03/bin/SDL3_ttf.dll
- Size 2.2MB
- SHA256 6920721de8a6fc15223da059519576f8ccda1f79502468ad171dff0c721aab9f
- MD5 08e8736b90940ea324b296eaa7b6a01f
- SHA1 c515de2c68dff9efd8925375031ea8c56f407bdb
- SHA512 69db9125d5208224128e448bb1ef848606ba0485539219230fb12244ed36fd24df2bafcdf42aba0fd1a156dcae6d609a60e832c87a2e935af16228c6f73b83c9
- SSDEEP 24576:I25rYD7d34Ec02SHQrRfZ3WmRu0qTDykjMxjUa/kHEBsznkXtmYvZa:IKrYD+wkfYmMjMxjjriOoYE
- TLSH
  T149B59C21B8618025FDE201F6D2FDFB7A09ADC779132D51D351D828EAEA104E37E39A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  Install_58.97.4263.21.03/bin/Uninstall.exe
- Size 387KB
- SHA256 bd591808223b361c6cc0c8654a432214fc17fcd0648adb6f7bc87dc4b5d63751
- MD5 7858bbe576791b9fea7252fda1aa8fa3
- SHA1 a69b587d6f7a0ce3e13df776d4a290542816d525
- SHA512 706e5aca6f8c5688c31a78956d4a2969bda34638039027fe120d4c8bfc4c01e438109811d9c27664ba1d6da93e58c433842d573ccd8fe66e3a59624b75f250bc
- SSDEEP 6144:Qnm1dhhx0fER0u+GIIIIIIIhIIIIIIIIIIIIIIIUe6Nu:Qnm1fm5e6Nu
- TLSH
  T1678451616A050EBCEFF07A34EBDD536513A52E91017748CF23D03F8A3936A53BE9A056
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  Install_58.97.4263.21.03/bin/aom.dll
- Size 7.1MB
- SHA256 e78492de0ab575add50b925bfd44216d224d09904a9b14c17087a92fdcbc15cd
- MD5 d764264518e77cc546a5876c3bcebad4
- SHA1 ea17d45b396fa193a851bfd345e2b2c20ad60e12
- SHA512 7cf132ea5254a55c08186ffcf5e47360ef5ddd57d03d7051171f6753b22e3925304d183c2037bfd320ad56c08e079f9b2c4640db8cb3dbd38ff500c7a39e997f
- SSDEEP 196608:m4zsVGx4oVGKVGPJ+EqfilsX3bvvEXD5n+lJYo+QYUmpd2yepYJCnTZm6nCmvQ0f:SJtlsMn+lJYo+QnmpdKu8nTZm6nCmvQ0
- TLSH
  T15476BFC17352B269E8464CB1477FD9E5162C313E932582FBB6FC6A3A12719D22638F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  Install_58.97.4263.21.03/bin/crashhandler.dll
- Size 362KB
- SHA256 cc19e5ccc0c6e2152dd82ee24c04fe4f3f4d24702874c7c3801b59e206cef137
- MD5 efbe2b162f5dda866f1a5ba708409b18
- SHA1 32592f696575afbc10763ec0b4cfd6722d87ade1
- SHA512 fdbc2aee4a0fa0ca179ed3bfd2832601a7bb47105803274b096d147bc38141f4d8d45b6a1e1aa47f3344e5c564a8cbb2209893d07227029e16bb2e9170637e42
- SSDEEP 6144:Fes2UgAflFvnS6+8GU8uFskwdDgnSPO2DrEkYPP/3eZZf7Z0WKQn/:YrUgAf7vnStU8uFskwZgnS1YWZZf7ZLL
- TLSH
  T1C184AE11F481C072D9AE15317878EF695A7DB9600F65A8DBE3C809BF5E302C29736B1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  Install_58.97.4263.21.03/bin/crashhandler64.dll
- Size 464KB
- SHA256 21f282cd137581b6f8a6e8ec072ad8e11e9cb509286f86c6e256a72bc476189f
- MD5 a4c9a0bd77bff3eef0a6423fcab96ca8
- SHA1 420ed555fe83a64e87ba7b62e531ca28cc8bb4f7
- SHA512 ab15b0071a506eff0200967de20f5e79d9642efe453ec0606a21d6adc919354b7a97e048aeb292f07a05894076035fb0be885bf9cc6b3e14f9aef9993923f80f
- SSDEEP 12288:VJ7mVx3MHJR7wluPEqVF6T9aaer18BD5Q69JnOOD:VJ7mVNMpFwloEqKg5raD5QkJXD
- TLSH
  T1C5A48D19B7A800B9E5B7C138CA634A47D6B678160760E7CF03E4D6762F27BE11A3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Install_58.97.4263.21.03/bin/d3dcompiler_46.dll
- Size 3.1MB
- SHA256 996e5b57c06b5614ee7b26936b29bace62218fb3cad3a28dba9e72bcc66d2698
- MD5 c18caa9ba4f06a5d226a892df6dc1d72
- SHA1 ed5d55e13cbe6912f3230ad1914777023bc7e188
- SHA512 5e2ff504b285c7d48ac97f997a49ee668f407317fdc4d8b73587414e5830a43146c965b2c7d452422576530ac925293f5bdfafd9bfc507ce1a1a4ba824e915bf
- SSDEEP 49152:SAKNP99RYiigTKsuI12CzOtXPINjoTl7et+vXLHEpAO:SmgH/1BaFPINjoTl78+vL0AO
- TLSH
  T1E5E59F25FB01D077D8CA01B066AEBBA6643C9F30033455C7A2446DA9ED706E36F3EB56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  Install_58.97.4263.21.03/bin/d3dcompiler_46_64.dll
- Size 3.7MB
- SHA256 9614de7bac24091e2abaf70b3c852ddf9b92a48157c557c3c63d81d88d4d5ceb
- MD5 52a41f0e49b2208df75609699fc7254c
- SHA1 767a92ffbfd726ab4d09c17981caf448c6adedbf
- SHA512 5b8ce62d69b9057e11091b48170dd805a913b87b25fc4fc343f9002e88c2331e040621c490e09f1eb9e1db61b08c3ee99c8598f78e033775a3e94b2d431505f7
- SSDEEP 49152:yBz3aHgfo/CoXC3SO06vwD/Sv/i9xq2nh2I+ZLm2n0vgF0S2yptTn4:sYXicQiW2pmm02yptT4
- TLSH
  T1B6067D46B7A540F9C1BBC138C6979717EBB0781423249BDB01909665AF73FE22E3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Install_58.97.4263.21.03/bin/dav1d.dll
- Size 1.0MB
- SHA256 41a835fcd9d66a69544d5a953ccbb9bb88310f3e3f2a0563cf3090aaff1e744a
- MD5 27e7b2632474ab74ffc0fae4ad68ef90
- SHA1 81d61337044e198433f6b9105f8ee5baa7dd30b9
- SHA512 f276d0b59e9297bbf5d500ac98309b883f267ff12a3f1aec74e7fa23055c0cc7a4d309a68da827e33f752a9cb3e8f61eb231b9a7da3b4abb342fe1a15fc7b78d
- SSDEEP 24576:ynaGXH6n0+mxHLagapMJPYbigVLCorTUe1y1UDSvuia4Iw2WwWh:wH6n8HLaggvUe2UDSta4Iw2WHh
- TLSH
  T140357DC1E1D35A50D22718B086BDAD8AB52E0AAD133094F677EC4534F3F77C8A749E89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

loaderhijackloaderdead drop resolver

behavioral1

behavioral2

behavioral3

stealereeb3a51cc4752e6b45e0be3905cb7379discoveryvidar

behavioral4

stealereeb3a51cc4752e6b45e0be3905cb7379discoveryvidar

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy