Overview
overview
7Static
static
7SHINEEX PRIVATE.exe
windows10-2004-x64
7SHINEEX PRIVATE.exe
windows11-ltsc_2024-x64
7costura.dll
windows10-2004-x64
1costura.dll
windows11-ltsc_2024-x64
1costura.pdb
windows10-2004-x64
3costura.pdb
windows11-ltsc_2024-x64
3guna.ui2.dll
windows10-2004-x64
1guna.ui2.dll
windows11-ltsc_2024-x64
1system.dia...ce.dll
windows10-2004-x64
1system.dia...ce.dll
windows11-ltsc_2024-x64
1General
- Target SHINEEX PRIVATE.exe
- Size 5.8MB
- Sample260809-eyjabagf52
- SHA256 4178a36a1dd59353a70a9d72be5dc74706c08a32a2ddbdbbadf93fe98653596a
- MD5 c26e18dda15485ae328e61c430c53b53
- SHA1 dd7108f541683cff55c3cb38b73f55786337f605
- SHA512 89c30942c33e5b3e8f96accac3789f5570171b503e768071670c565b960d0af95ec0e755f879751ec0287c6c1d85b3601110d9c38ddb85bd14c01ad292fd734d
- SSDEEP 98304:vb4LVhiKmqpxCvb4LVhiKmqpxCVFz5wBrH4W58nndzg9///////////////Jqyii:vb4ZhnRx0b4ZhnRxKz5wBz4W52z0///u
- TLSH T1475633367375CB3BC82E05F2B9601A844BB275067564EAAC4DCF20EDB5A1F52F075AC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
SHINEEX PRIVATE.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
SHINEEX PRIVATE.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
costura.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
costura.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
costura.pdb
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
costura.pdb
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
guna.ui2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
guna.ui2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
system.diagnostics.diagnosticsource.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
system.diagnostics.diagnosticsource.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target SHINEEX PRIVATE.exe
- Size 5.8MB
- SHA256 4178a36a1dd59353a70a9d72be5dc74706c08a32a2ddbdbbadf93fe98653596a
- MD5 c26e18dda15485ae328e61c430c53b53
- SHA1 dd7108f541683cff55c3cb38b73f55786337f605
- SHA512 89c30942c33e5b3e8f96accac3789f5570171b503e768071670c565b960d0af95ec0e755f879751ec0287c6c1d85b3601110d9c38ddb85bd14c01ad292fd734d
- SSDEEP 98304:vb4LVhiKmqpxCvb4LVhiKmqpxCVFz5wBrH4W58nndzg9///////////////Jqyii:vb4ZhnRx0b4ZhnRxKz5wBz4W52z0///u
- TLSH T1475633367375CB3BC82E05F2B9601A844BB275067564EAAC4DCF20EDB5A1F52F075AC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
- Target costura.dll
- Size 4KB
- SHA256 41bb464ac7c0d192641077e44a59d7d89860c3c620a59961f2fc4a4be47deae3
- MD5 501981c7fc457d59238eb99780efb615
- SHA1 f1f25c01f6acf33bdd62c4f82d3ef078e76f0906
- SHA512 5921d0662add6c8aa075106878cc56335ccbf059d8bc7f359fe9e02a52ec657c3e5df1c718929564c09f205e4bd299b086f3e7424141f5e55ed0d756f65ee1e8
- SSDEEP 48:6F+lni2qJfjVRPGwzCo4MhTN0KDdilETrVsH4/QWk1qyFVT2IbG:7g7KedGEiYIWM2
- TLSH T1F791A51097A8477BE9BB0FB6ACB3534A4275FA61DC27CB2F19C562172C123180A31F72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target costura.pdb
- Size 2KB
- SHA256 89b13aa6efbc0b04745a00bb5fcf05b7a4e3537095bde974ed3490a9cf582d17
- MD5 34b42a5776a3ad022b429124d55e576d
- SHA1 6c6000a5eaf8579850ab82a89bd6268776eb51ad
- SHA512 c24bf10e1d95a07fcd65c1f7841d2d4bdf25c5db02f5f4912286c8d6c077fe8bd3fc564cb249cb4ae01aed10889f25cc22a48bd9698499ed556560d0621a64f4
- TLSH T1F35193776F04C291ED9884B28513DA492B3047127602EE7AE9E51B05CCFFDF8077286B
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target guna.ui2.dll
- Size 2.3MB
- SHA256 074722f4b6b4900c377837852d9c4e690d882f4a1e570765f3c796dc16751579
- MD5 8a51ae838ed8140875960a3908ef9d36
- SHA1 e474f635daace2a75a2ed9ad00dba1128b11e14d
- SHA512 f662f2e057b3b5abc6cfd60acbb66d64b6b31a8950f9008257e8ae49aa7bacb80c81a169b9dd86c2d9b5dfea6fa89599a49405eb33bed6f0e2e8c5fc8b7593b6
- SSDEEP 49152:dF1h+CUn8yaJS7YmLdxvOOuOi6oUdzt159QoFosA9y9/H8/qW5rwGxdfkowGQJD1:gbLjv9UMGTke41
- TLSH T13BB59D1A36CA2F1AE55419F818541325E760C5623797EB0BE182F6B5CFAF36C0FC52CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target system.diagnostics.diagnosticsource.dll
- Size 34KB
- SHA256 d22133818a30313e0becf010d78a556a56b34ea361dbd33588c9817631fed540
- MD5 8d9df432109f1cfdd86723b5f171e3d7
- SHA1 85dc92edd4b0049ed9049e075c4def8a3d64e43b
- SHA512 5c83303934eecfa61c43a071d29c98e5804d37a5dc7f7b035772d6a168b0c5e65dfabef20b46214e65493c4bda44831cafee83615498fbe9e718c884f4650edf
- SSDEEP 384:iQobG82oiaPaf/gn5LQ0+0zdQUv2CtyW8fiFISWbW9pWJbWivT1Nq0GftpBjAvnC:nA299fI5dxzL2CC11vimvnEBBNFT
- TLSH T145F25B54EBAC8953DEE71D3062A4D9423A3AEB936C10C25E2699E18D0D83BD1EB11737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10