Overview
overview
7Static
static
5mond.zip
windows10-2004-x64
1mond.zip
windows11-ltsc_2024-x64
1Layouts/Mo...er.ini
windows10-2004-x64
1Layouts/Mo...er.ini
windows11-ltsc_2024-x64
1RMSKIN.bmp
windows10-2004-x64
1RMSKIN.bmp
windows11-ltsc_2024-x64
1RMSKIN.ini
windows10-2004-x64
1RMSKIN.ini
windows11-ltsc_2024-x64
1Skins/Mond...B4.exe
windows10-2004-x64
3Skins/Mond...B4.exe
windows11-ltsc_2024-x64
3Skins/Mond...me.txt
windows10-2004-x64
1Skins/Mond...me.txt
windows11-ltsc_2024-x64
1Skins/Mond...ty.png
windows10-2004-x64
1Skins/Mond...ty.png
windows11-ltsc_2024-x64
1Skins/Mond...ti.otf
windows10-2004-x64
7Skins/Mond...ti.otf
windows11-ltsc_2024-x64
3Skins/Mond...co.otf
windows10-2004-x64
7Skins/Mond...co.otf
windows11-ltsc_2024-x64
3Skins/Mond...nd.otf
windows10-2004-x64
7Skins/Mond...nd.otf
windows11-ltsc_2024-x64
3Skins/Mond...ll.png
windows10-2004-x64
1Skins/Mond...ll.png
windows11-ltsc_2024-x64
1Skins/Mond...sh.inc
windows10-2004-x64
3Skins/Mond...sh.inc
windows11-ltsc_2024-x64
3Skins/Mond...ch.inc
windows10-2004-x64
3Skins/Mond...ch.inc
windows11-ltsc_2024-x64
3Skins/Mond...an.inc
windows10-2004-x64
3Skins/Mond...an.inc
windows11-ltsc_2024-x64
3Skins/Mond...ge.inc
windows10-2004-x64
3Skins/Mond...ge.inc
windows11-ltsc_2024-x64
3Skins/Mond...on.png
windows10-2004-x64
1Skins/Mond...on.png
windows11-ltsc_2024-x64
1General
- Target mond.rmskin
- Size 1.9MB
- Sample260809-31h94afp3t
- SHA256 184d3c1062644d530bc3d68ef924984809365952cbc5b75ff0de20a870959e0f
- MD5 71544e3ca0564239a86d3336e020c00d
- SHA1 44cf5edb18374ab3bb1c01d4a0c53b17859404e9
- SHA512 1a4aa73741b7a7dd95ec1ff2f8d1ad4439545ff856f0184f7e3ffdbf8050908a4efe07420e64da62080dfdc3826ad77d13eff76cfb180c193647ea51641ca38b
- SSDEEP 49152:0bKseTxGMAUQfVb8gOP/COPzOPVDBQpaZOPGQ:02oNfVUBytd+eQ
- TLSH T1D795239DE50C86A0DE366F76379ABD4096C5B7E7B6B03810C150EBB80BC64255329CEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
mond.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
mond.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Layouts/Mond/Rainmeter.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Layouts/Mond/Rainmeter.ini
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
RMSKIN.bmp
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
RMSKIN.bmp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
RMSKIN.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
RMSKIN.ini
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Skins/Mond/@Resources/Addons/RainRGB4.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Skins/Mond/@Resources/Addons/RainRGB4.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Skins/Mond/@Resources/Addons/RainRGB4Readme.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Skins/Mond/@Resources/Addons/RainRGB4Readme.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Skins/Mond/@Resources/Empty.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Skins/Mond/@Resources/Empty.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Skins/Mond/@Resources/Fonts/Anurati.otf
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Skins/Mond/@Resources/Fonts/Anurati.otf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Skins/Mond/@Resources/Fonts/Aquatico.otf
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Skins/Mond/@Resources/Fonts/Aquatico.otf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Skins/Mond/@Resources/Fonts/Quicksand.otf
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Skins/Mond/@Resources/Fonts/Quicksand.otf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Skins/Mond/@Resources/Full.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Skins/Mond/@Resources/Full.png
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
Skins/Mond/@Resources/Language/English.inc
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Skins/Mond/@Resources/Language/English.inc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Skins/Mond/@Resources/Language/French.inc
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Skins/Mond/@Resources/Language/French.inc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Skins/Mond/@Resources/Language/Serbian.inc
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Skins/Mond/@Resources/Language/Serbian.inc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
Skins/Mond/@Resources/Language/YourLanguage.inc
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Skins/Mond/@Resources/Language/YourLanguage.inc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
Skins/Mond/@Resources/Location.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Skins/Mond/@Resources/Location.png
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target mond.rmskin
- Size 1.9MB
- SHA256 184d3c1062644d530bc3d68ef924984809365952cbc5b75ff0de20a870959e0f
- MD5 71544e3ca0564239a86d3336e020c00d
- SHA1 44cf5edb18374ab3bb1c01d4a0c53b17859404e9
- SHA512 1a4aa73741b7a7dd95ec1ff2f8d1ad4439545ff856f0184f7e3ffdbf8050908a4efe07420e64da62080dfdc3826ad77d13eff76cfb180c193647ea51641ca38b
- SSDEEP 49152:0bKseTxGMAUQfVb8gOP/COPzOPVDBQpaZOPGQ:02oNfVUBytd+eQ
- TLSH T1D795239DE50C86A0DE366F76379ABD4096C5B7E7B6B03810C150EBB80BC64255329CEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Layouts/Mond/Rainmeter.ini
- Size 1KB
- SHA256 6b4fa090efadfcb7856cb8f9f69153ca7a5a1f3ff308c606ec86fd3d3d347b67
- MD5 02e2a8fbfce40c8c7db37594408e5893
- SHA1 48dbd48e611010e76c9343692ddd9a5327163168
- SHA512 f129b7128951d60dc6b089195ca4ba32f3b47af3fb257368f0a4c3f559b3fa16d1c8f970cc10e1cc7dc95bf8d13c21689fc77765d0388ab9a47d8a6b488d6f0a
- TLSH T1E521C86316E4542CB1B23B99EE79B6725B36FC58281DC05CB0D141048CF6A0269537FF
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target RMSKIN.bmp
- Size 93KB
- SHA256 a28f7ed3cb1b34684d0a727aa681046f48d5a90fb0abd82843765fff820a1ebb
- MD5 641db6615d08d7814e138047ae114901
- SHA1 982563a958f7031242efae9f29595d2df2b9cfcb
- SHA512 c49805ce92160fb4cac4d9ccaa8e30dea53a8e38e150f3d8a4bc97de20a319354aeeb74894a7fed8270f4fc3cea0ffa5cbaf6284eeb2c6ca319b8dc780e796aa
- SSDEEP 1536:ee6OH188ZK/z/CVMdZKcUA5Bhg3kCuHLEz4DrN0chvZaBDmIDKi5NTeBsO:r1zZWz2aZrU4D5HLE8DvxafDKmS+O
- TLSH T18C93D7263E87DAC8DD5E1CF0C69D1EF904A7BEA4E210607B66443C2EF076DE57272294
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target RMSKIN.ini
- Size 126B
- SHA256 b9d92e0da2e51d1265b8c66aef61e0d1ef589dda9faea53ea439a775b85392fb
- MD5 af3ce3a2d8e044f115eebe4c5da70857
- SHA1 7716ae6e9c3c207d4d229c471592e796082da029
- SHA512 a5dc414047abfc3cd51ba635551b16783c7885046372100391dcd53206a491bee65340364915814dd9a5336053f87813048321643e33cd7befdf2b03ea362045
- TLSH T1BFB02B00149002A4DF07180410767B01F54A300A0148FA00A00410A5C169D0F321D0A2
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target Skins/Mond/@Resources/Addons/RainRGB4.exe
- Size 1.2MB
- SHA256 e4814bac41a57772534536f484bf0d527a555a3c22b53f70c92e35ca664f1cfb
- MD5 3612d6168b8c5f7c5eeea57d22e916d3
- SHA1 39c43a417616d61d24f376a64fd4404427944830
- SHA512 a8a47297498591995eb3918743537d735384b1ac661b651821bfa8b6eb907dd1af0d56282cf4a4b7a7b5176d7ba53f36a966fd5450883485b2fc769510b12622
- SSDEEP 24576:9tb20pkaCqT5TBWgNQ7au4/M0xEeLmXfHeYU/6A:uVg5tQ7au4FCegfHo5
- TLSH T1F945BD92639D8362C3715273BB25A731AE7B7C1506A0F45BEFD82D7FB920121421E6E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Skins/Mond/@Resources/Addons/RainRGB4Readme.txt
- Size 3KB
- SHA256 cf273303fb0557a03c0b800529e5da6b1681895a4126cba08d28e9399f0ebf0d
- MD5 8d5c3070b41ff278803468cbf45655fd
- SHA1 187fd09d7eeb38b7ca40f7423a84dd2e796f6408
- SHA512 b6373dfae20f4cbfcf5ca4f7de964672ffde73ffc217b856ee846dc24dc1e8685f87b077955ecea5f681a8aa7595a9bd3865d55a58428735cde32ac91572230e
- TLSH T1A85176676347133354D302ED671E22D1775911F8323752686478B73C360A9B692FAAF8
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target Skins/Mond/@Resources/Empty.png
- Size 17KB
- SHA256 198551d2a3e403aabed9baf618536f22c6e00f96e2467d21bb9f8d291d2272e0
- MD5 16c40aeb7a73598e4b6f0c8ffd5d1664
- SHA1 ff4778184f35353fc1de65f0fb5f00a930e9c830
- SHA512 6c6774703c1064e3d035c01383f7e73f45f749917e7629bd4f90358828b30d5edcede046e9d3d866229cf47d6ca4f9c3e11a308183d1a6be4a7d737b8f792fed
- SSDEEP 384:NXE056GGqYxFBS68GkjBs6P07JoNkVJK/P6S4JwVGTw1vdi:5359Gqg58sa2JHKn6NmsTwXi
- TLSH T140825C9F71113DFB14D55591CA960891FA98824C6F03B818BADF2C54D88EEC0F39BEB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Skins/Mond/@Resources/Fonts/Anurati.otf
- Size 7KB
- SHA256 9b6c41cb089ea9f682f177d2a5dc21e1828c39e6f20b9a4c11d999de912e00c3
- MD5 ca8632f4d0aacae4633cbfc2f1a673f1
- SHA1 826010d7a50515ff046bfbed3f5aac62b5ec6956
- SHA512 23fc66cac2cfdc01a448c705a2ae22623c07593c0bfa8668b1ed05baec0a62812c24628f91f4b0ae50062dfdae0278e3d75887b0658050080c814dac90d53ff4
- SSDEEP 192:/jHo6zMuBIvXLiKK+hHjNdC+s0QjzRoKtUYIkN2Jd:/jdMn/xHhd+7j9oUNSd
- TLSH T1CDF118C56ED8C245F8234332E6D586397637FD8BDD80E74C930452248AE05A76B32F2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target Skins/Mond/@Resources/Fonts/Aquatico.otf
- Size 15KB
- SHA256 c295c63fa1f3d14d2c7b6c36b75bb097b4743b3f7dac728812864d27e7bff1af
- MD5 e5520ea0fac2e7a07f88fb00d7cae41c
- SHA1 2472badcd2d0793866bc8a0a977cb856176c8bee
- SHA512 c35fa83902b20a07c99c8190af58a5e5bf5712f55a0293e653e46961f7c91f880c5374f21a00482b88bf9f850f75e500504cfaa7db07b8d199a3ff7d42abce85
- SSDEEP 384:gLZ/kh+YU9QDPtXmdBcyLMojqf8ZEmIL5RR/vrlPo4:wk/AQDPtXK/AojBumIL5RR/vrlPt
- TLSH T1F1629D6EF7A04742E7DF033149B287211739BD41C62BEB4DE8C8AD266DA21B07E2C754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target Skins/Mond/@Resources/Fonts/Quicksand.otf
- Size 28KB
- SHA256 2c81dd94ebab720f768b88de0e4ec953a5528685b64b1b9a0902835f39facf83
- MD5 a1d3f9c43a9bb11db235cb6e8be77f4f
- SHA1 ccfc43aa80b53cf2df22f9dca0bc5174f3ee8c27
- SHA512 08d7b92c17d2e6b33537fece073c4c861327e763486464f756d4f9c496de1adc4c95c48fcaf1ccd82ea4a16106b3f8dc5a30907110f6dba3a950c4ec0605685a
- SSDEEP 768:DkRVXqJLHYD5NyeO/ydTMYTtPGDa8tIAXHpi4PwyXRU9d:kVXc7Ik+TMYTtqa6q4PwLd
- TLSH T12ED27D6AA08BB34AEAB1B53D07C1A33AEE2075756CFFD28604180AF7555C1075EECB13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target Skins/Mond/@Resources/Full.png
- Size 30KB
- SHA256 c776ad3ee293cfa17f47eed04be214a9f3ef3f25bb49195634d0bed0c0283f62
- MD5 071bac8121374b525d75dbb95b4f7d95
- SHA1 fe2d327530330caf1283113e522260f0cf5feb4e
- SHA512 dc4965baf12cc90cb72ecf4817058d4d7465f73778133b2b4f22539284b0735c3f643a116eec84959e3090876315613b9d9cd43f96b83ed63f15770e63ffac91
- SSDEEP 768:835nwlrbB3QGDgGm3VNO68UlX09PuisRLv1ZhUXXjpo0/JjK:gSfgTIPQti+vbh4XjTK
- TLSH T136D2E00E9126CDB9552D3206399D015B93DE12AC0EDB0A7950813A5FECDDF1B7BBB2B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Skins/Mond/@Resources/Language/English.inc
- Size 3KB
- SHA256 cc4a36c6341cdab6be58b06af5e1bbc25ebd66ff9686291bb7e7c31aa7982541
- MD5 785a0507a6ffd204550501f55bd57f5b
- SHA1 7f6511ed269e6709bd4a8180291d4b2ba86e2748
- SHA512 1469de561c7532c70c5d30730fc0f23abbde05c375202e61259f51ca45762bc81f333cc3f5391cecf5903513f458f09c28a0fb6b8bc12cb18311ca0d381e0d6c
- TLSH T14A81186FDAFA0448F6F35B8E6A772094C6327D52182DDCDC12504F4E496DA20ED22F2B
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Skins/Mond/@Resources/Language/French.inc
- Size 4KB
- SHA256 66705992b77f2cdf8fd193a23fe9be01cc9e548a17e7434b0f8149dc18fe24d3
- MD5 d002844b89f0badae7dd06d8aeadf385
- SHA1 6b25070e25335a88291d557ba66da3a8cf95cd2a
- SHA512 c3d398529e2fa5e7ac4c8aaa7d0a3ea5a3507c170659a0a04b66cc44f6d23a0299e7176f81a2eaad16a97a637ab0be563e9a0b236ddb933ac726c9250d6ae8bb
- SSDEEP 96:r6lbWMVbdMOnwMxj1btnaVCcG/9kTXfCM8B:cDpMLM1buCcGKTX58B
- TLSH T17691441EA6E6000DF6F36F8A6A771094D636BC525C2DDCCC06505E4E4CBEA20EE61F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Skins/Mond/@Resources/Language/Serbian.inc
- Size 3KB
- SHA256 e4b6a05d6bfa7a21fa5c429ec8e482c3c5d7c671f076bc2417291d6bc766ab2b
- MD5 e1266a4dc9af9c208a8e5de08813131e
- SHA1 3fe374fef3401813ea9fd8712974fe10b0c98da4
- SHA512 7f01d6ac11cd2220980666740cdec5f9300eadaaac10fabebbcf12a31d301e36ee9987778a1dc78fba437e49f3ca08229c784bb5d93473d2075a8e56f4b30a32
- TLSH T1C6712F5EDAF91048B5F34B8F6B771194CA77BD62282C9CDC01204F0E4A6EA94ED61F27
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Skins/Mond/@Resources/Language/YourLanguage.inc
- Size 6KB
- SHA256 9dda785aeda052feb811c601683173bae8a7d4c5cd6d0e66cc4200e5d075877c
- MD5 39c9ae7b2f872175dc7f8526c0d6289f
- SHA1 34cfa408db1893d111490e15f8608a83699a66b1
- SHA512 3dda1761e359e88ea5ae502ab7291d32889451cd6765ee32f22d2b44f1ed975be72d08d3a0d2196fbabf3cb86540fac9233d2326bb677187659ad5149f68d098
- SSDEEP 96:rG9Xzt9byW9FXKee7QAKWAK6UAlV49Z90Xq3JzlU04++MA+:a9VjAo4jSqfP4q
- TLSH T1FBE15A5EDBE90418B6F36B8A7A771094CA36BD52683DDCCC02400E4E49BDA54ED61F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Skins/Mond/@Resources/Location.png
- Size 15KB
- SHA256 50f2f742d790023369a0a3be197f289536a53182958842c786f5885562088ab5
- MD5 0bcf0c26ac011abbe4675076aa24c06d
- SHA1 824d0b9e765282b400436c5e70761422f73280c0
- SHA512 1b02b810b77ee76ba9033d9a5388f3580a799a47ffbebcc2806098e167091b69c908e945ac1f34dbb060983e2d6b1d6a07e3111d2755e3e212f4e95759aaba9a
- SSDEEP 48:e/6Mu+k29W8sEvPxN+Y9rB/vfqBCDBLq42LbCtsc5Nd7ec3ycKhtRVCe7:eSWkEWRmxNXrFktesc5LPyh3P
- TLSH T1B9728624FDF17668854EA6362ED524055C770B83CA41EC81BBCE4D572F12BAECC9F186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10