Overview

overview

7

Static

static

3

DOGO_VP2.3.8.exe

windows10-2004-x64

7

DOGO_VP2.3.8.exe

windows11-ltsc_2024-x64

7

config/config.ini

windows10-2004-x64

1

config/config.ini

windows11-ltsc_2024-x64

1

config/script.ini

windows10-2004-x64

1

config/script.ini

windows11-ltsc_2024-x64

1

resource/CN.qm

windows10-2004-x64

3

resource/CN.qm

windows11-ltsc_2024-x64

3

resource/EN.qm

windows10-2004-x64

3

resource/EN.qm

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    300s
  • max time network
    215s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/08/2026, 13:23

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    DOGO_VP2.3.8.exe
  • Size 33.3MB
  • Sample260808-qmryvsxepg
  • SHA256 7e11461a1d85d60d4f5a61e68025252aa3e643441285b118db65b90a33860f89
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Loads dropped DLL 52 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DOGO_VP2.3.8.exe
    "C:\Users\Admin\AppData\Local\Temp\DOGO_VP2.3.8.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2532
    • C:\Users\Admin\AppData\Local\Temp\DOGO_VP2.3.8.exe
      "C:\Users\Admin\AppData\Local\Temp\DOGO_VP2.3.8.exe"
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of SetWindowsHookEx
      PID:4132
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x00000000000004C0 0x0000000000000498
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:6036

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _raw_cbc.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\Crypto\Cipher\_raw_cbc.pyd
        • Size 9KB
        • SHA256 789702900399118d03cc73f3a86eaf0838a636e280c75d69fd7f4c8a645d85cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_cfb.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\Crypto\Cipher\_raw_cfb.pyd
        • Size 9KB
        • SHA256 52edb01f43e67555f09d7e581bcaa3c13060f44ebef394492f2fef855ad234c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_ctr.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\Crypto\Cipher\_raw_ctr.pyd
        • Size 10KB
        • SHA256 c16d344d9aa2dba7caefa6ad24209998ab8ccb772d31674274771baefa440267
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_ecb.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\Crypto\Cipher\_raw_ecb.pyd
        • Size 8KB
        • SHA256 e1741621c8ec808c9a78dfc981995485e1318c14f6e920571334cb0cb992a780
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _raw_ofb.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\Crypto\Cipher\_raw_ofb.pyd
        • Size 9KB
        • SHA256 07f1fdc88485374f8cf08ead6f557bd4d9e07628f4ea60ab758d34bc0ad8954b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _BLAKE2s.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\Crypto\Hash\_BLAKE2s.pyd
        • Size 11KB
        • SHA256 617ff8387636d003629c4228e18354ac28cde24e4d024368c3113d2d9857de95
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _SHA1.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\Crypto\Hash\_SHA1.pyd
        • Size 14KB
        • SHA256 38b13693eab2968cd3bd686ede73286ec4a51b334ff32504e00a0206ae246cc3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _SHA256.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\Crypto\Hash\_SHA256.pyd
        • Size 17KB
        • SHA256 a90756b5e3e61d59adf01ec30cc4d667dcefe18dc37daa9f3bce562681fdbf5b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _strxor.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\Crypto\Util\_strxor.pyd
        • Size 8KB
        • SHA256 1f6365bb3098e003e4223de5580cd18dd615c420b94c1eb6f047d4d9f365367f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSVCP140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\MSVCP140.dll
        • Size 443KB
        • SHA256 265591a709a5db413d73c95b538da321edeacb40059bdceb142f997a3d458b49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSVCP140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\MSVCP140_1.dll
        • Size 28KB
        • SHA256 b8cafc52b903ed0824882365b0a0d438460260b4ddf2487849eb3bd2241f7e8d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtCore.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\PyQt5\QtCore.pyd
        • Size 1.8MB
        • SHA256 cc1c74b4022db036318fc45cecf3e1bacabca7c842d1bc1e57f877ace6a934ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtGui.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\PyQt5\QtGui.pyd
        • Size 1.9MB
        • SHA256 b72ab0481261d732c6740aca74ed75132a81fd58d8e6541c24d1ed4aa624d549
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtWidgets.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\PyQt5\QtWidgets.pyd
        • Size 3.7MB
        • SHA256 45552b94f45d38c17fcd6236b5562acf2a4021b02e3faaf870a3e14c3d39d02a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sip.cp35-win32.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\PyQt5\sip.cp35-win32.pyd
        • Size 89KB
        • SHA256 445a93106fa28426970d80eeec5ba3e6c7bc76586e1f25731850de40287c2af8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt5Core.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\Qt5Core.dll
        • Size 5.1MB
        • SHA256 4f8dc460162407cfccb1be6ef9cce45c4449de838aeffa3fd33378f01a3f9cc4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt5Gui.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\Qt5Gui.dll
        • Size 5.6MB
        • SHA256 80016776efea2b2a838c3ffa4c82e5f146baff68c36073c0c34668809d1c4297
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt5Widgets.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\Qt5Widgets.dll
        • Size 4.3MB
        • SHA256 600285754e7eee7239b9d252dbed5c9d2c9c4c432751b8953dcb2e8b45e0408a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\VCRUNTIME140.dll
        • Size 81KB
        • SHA256 6823b98c3e922490a2f97f54862d32193900077e49f0360522b19e06e6da24b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\_bz2.pyd
        • Size 76KB
        • SHA256 397af2501f2b2a531df5b30eb93f937d052ac1dc590311854c73fd796ada033c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _cffi_backend.cp35-win32.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\_cffi_backend.cp35-win32.pyd
        • Size 143KB
        • SHA256 2abd638eb62ae118ae5a6d77eaff846aba198193e7673ad657c4e2afbeb739dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\_ctypes.pyd
        • Size 99KB
        • SHA256 2b01880005b0e4a62dec010ad31c44bc104c0d1945c91676e7c3a60cab489909
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\_hashlib.pyd
        • Size 1018KB
        • SHA256 96d5c3d935c12837a94d81fec42e02ac17202c98def9a2b7c04d1ef2208293fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\_lzma.pyd
        • Size 149KB
        • SHA256 17a8fdd44cfea1b052f1484287b921df8e8939e4ce19e652b19f6c71d1436c84
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\_socket.pyd
        • Size 60KB
        • SHA256 c1e9548f29ecc500b659afe3c72a6ef56b0c880cbc4f9d00a5d0d61b5bf16f98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\base_library.zip
        • Size 777KB
        • SHA256 f905920e70b8f1a16feaaf37d05fbec61ad6c48e41d4d34d1f85543656acce2d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\pyexpat.pyd
        • Size 159KB
        • SHA256 97b2d8cb0309ffaa447dc005ca4cbe73cf0d02ab66f46bb2e4a6057e0d0c20aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\python3.dll
        • Size 56KB
        • SHA256 bef00a500ed2694930341eb4b9dcf814dafc291738f82737d89baf1f24b7a72f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python35.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\python35.dll
        • Size 3.0MB
        • SHA256 d5c54d53564ea2475b3475a08797e4218bd5c3e5e63cbe651c24cc7f2a200beb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pythoncom35.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\pythoncom35.dll
        • Size 397KB
        • SHA256 33daf5ca3cae263b2ac05d1fe48776d114927ea4889c94825922844ea87a2de0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pywintypes35.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\pywintypes35.dll
        • Size 110KB
        • SHA256 59038e235b532f6e1cf682cfa793622a12138f20ee3ce4588bdac7b3de110f37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\select.pyd
        • Size 22KB
        • SHA256 bf1d767685e016691265856953588aaf55bced696d8b668a4b2f5ea86a69bbab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        win32api.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25322\win32api.pyd
        • Size 101KB
        • SHA256 498f9e36d79aa45117de83ecf324145d2dba2ffab56474776f4b04ab93026868
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/4132-164-0x0000000073F90000-0x0000000074347000-memory.dmp
        Download

        memory/4132-190-0x0000000003F10000-0x0000000003F20000-memory.dmp
        Download