6a15ca8d703bcc8113a7481c495683660fd882ad291a6b1981c5854adb4cf480

Resubmissions

09/08/2026, 12:04

260809-n8ybnazze17

09/08/2026, 11:55

260809-n3vctael6t7

Sharing

Copy URL Twitter E-mail

General

Target
Skymu.Installer.exe
Size 151.6MB
Sample260809-n3vctael6t
SHA256 6a15ca8d703bcc8113a7481c495683660fd882ad291a6b1981c5854adb4cf480
MD5 51104e44c367bd1bcacea637b59cde0a
SHA1 99032013abb22ec5b38cbe879fc53b410d01222d
SHA512 4ac68098bd573235c8688eb8a13c9de0c1e5ea0df1ebaa42d433d5d8b307d18753ac1568fe66eaa8070214441faf30d5bc38a84b0482aab6924812fef91db40a
SSDEEP 3145728:4QZd3QEhYKxQ20tZI7Rp+AhuQW6UGZh8nmQK9Qx14T/5fVc8jrwUPEjWZVSfG:Bb3VxQjZG/+Q5UGZhKY9q14xfVc6wUPx
TLSH
T1FC7833C5817A7922CC38343119C76B2A28B57D6697B9C8DE5FEDB4069336FDE10262CC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  Skymu.Installer.exe
- Size 151.6MB
- SHA256 6a15ca8d703bcc8113a7481c495683660fd882ad291a6b1981c5854adb4cf480
- MD5 51104e44c367bd1bcacea637b59cde0a
- SHA1 99032013abb22ec5b38cbe879fc53b410d01222d
- SHA512 4ac68098bd573235c8688eb8a13c9de0c1e5ea0df1ebaa42d433d5d8b307d18753ac1568fe66eaa8070214441faf30d5bc38a84b0482aab6924812fef91db40a
- SSDEEP 3145728:4QZd3QEhYKxQ20tZI7Rp+AhuQW6UGZh8nmQK9Qx14T/5fVc8jrwUPEjWZVSfG:Bb3VxQjZG/+Q5UGZhKY9q14xfVc6wUPx
- TLSH
  T1FC7833C5817A7922CC38343119C76B2A28B57D6697B9C8DE5FEDB4069336FDE10262CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops desktop.ini file(s)
behavioral1
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH
  T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
- MD5 8fe362ffdfa66269b8a64e3a87f68e52
- SHA1 b5daaa60a6b8591a670da9fc3a2d6f896d55f568
- SHA512 8f2904e01b0835683a0f11114a09da291ba527d867e73db2765185f780f2278debd9c5fc4281a42a6065c5ef5947bdc6239ae4c5835df62c71e1fce80d8bf942
- SSDEEP 96:JXzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHnDQ:JgQHDb2vSuOc41ZfUNQZGdHD
- TLSH
  T1F8E1193571C02DF7E08D89707816BD2F83F4D43627BA05A04A771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  Avalonia.Base.dll
- Size 2.0MB
- SHA256 1d1937a3a478ace686865679261e514f6efed23aeebab1fb39ca384fb1dea6da
- MD5 2fa33a61ce9c62d8498c37e22f213f94
- SHA1 c1c7a01c809b2e53c1e6b7800c597f9d884cdf42
- SHA512 e942c0fb1cd08f4c463360e2053acb6a011a20812b6014e3c8b233ee72584337f7faac4e8544445f1c167f1c05f2d6394d5e0c8377758c1f660fe922a6c1bbbc
- SSDEEP 24576:PaycEnDC6wMR5EmT+mgAkv7QJtO6PF6U1VD7PRTJ6YGm3:hcgrEmT+mgAM70RTM
- TLSH
  T152A55C42B7DA4FBAC95F0677E032950463B9D4695391DB8B0754BBBA2C473E42F003BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Avalonia.Controls.dll
- Size 1.0MB
- SHA256 57392bd4361688989de743cbb3d3edf93f872b6a4568ada45894e39fcf71e09e
- MD5 6c6dd552dd9118ecd3789e102a60c022
- SHA1 46b37b0384fc192d7c30821b4423cf39dfc5cb91
- SHA512 725d696a8e8f8331d7c7e373f12fdd1470e28bcd22efd6b0b01fd2d07a73107ac4ff94b86b1e9cf87f5da792187b2f4dce20b08614f786d080708bb84845752e
- SSDEEP 12288:4/FF/cHpWrDPaXGxCk/k72XKHDC89Ma5ckSGBBvA6Aegsp+NwibSx5FUxv1o4R0X:gNcJ3ekU65xJO6AegfyJ5mjo4R0r2Lg
- TLSH
  T1AE355D1277689E2BD4BF5676A1708B1447B0E443FBE9EB4B2985A2EB1CC73111C413AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Avalonia.DesignerSupport.dll
- Size 203KB
- SHA256 3f7e43fdef0825499e437f06fbdf96295165641390b58d6426426a78116de0fc
- MD5 9859e2d5a2915d85fab176317beade06
- SHA1 e67f4d9847b4019df017b22ad022120b7e6af5d0
- SHA512 be8d399ba4e03355cd2b7925e616c1c49a8525d370c60e85d25d299318d27673cf02543347020733c07bc5ea053e9f5612bab5af9b5e8cfddad6e05684f81967
- SSDEEP 3072:+aS8iZALV4cAomJgg7smjjtZYVJdqi8YlCGJ5RqHfNumwB6BUPy3obIyB9B/nD:+amZASXLgyGayqHfNumq6BusyB9x
- TLSH
  T13D14E04153BC4337DAEF4A7AB2F971520B32B7176EE2E78A1B58B1E809573500760B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Avalonia.Desktop.dll
- Size 15KB
- SHA256 c90619c84bf0e2b4b9eec3a0dd3aa34ed35563215cd7b8d6be3943f961a2be8d
- MD5 def5f06f07d8cbc2fb47ba746a48c6f6
- SHA1 882e5dbe9acadc8203b770a3b796f4ece1468914
- SHA512 e3185f20711633b055e86a0e25bbe16754fbab0b65db8191330b60b7d0da5e616c2db67fb631dae1e1872b7da4de0452bc138c8eddd97025591a72ff4fc17926
- SSDEEP 192:Ks5jIbygud7aP2VAgY6DMZPGlFbnXkA9T1BxK/:39/RYZ3K
- TLSH
  T12D6297D493146167ECE28E32F5EEF892613BB582BDE2C7565230634AC827B340F65F25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Avalonia.Dialogs.dll
- Size 237KB
- SHA256 5fe7f42bafe6fb7f651131e5e0a6fee43da1ceb12122d4ef671a17f94ca28966
- MD5 bb1089b8d047d6b62ab4a5aca89c392e
- SHA1 527d312bb632a5c0d8aa8e565f2a1250e84ba0e5
- SHA512 26bab0e8ba10a22ebe1e7eec88987f2e116fe56ef005055a60167bcae5827bac8d359833262d05a792f6929d3846537a58efa5b1b2c3552e13a9a284d1b6f6af
- SSDEEP 3072:QeuNYXlLgbEmk0/Dv6QKwRr4T2EUtxq2FquPt3/yzBuNOIOU7og2FncctY7:QpgqXpSIE6Ey/SmWUMxFnZ
- TLSH
  T12D343900D2449B39CAE6A6787C7CB3BE0975F41AFC9AE61734C5AB7145C5A10EC18BBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Avalonia.FreeDesktop.dll
- Size 192KB
- SHA256 6aee81ab99b6f4a3090d62ac730bbf2071f6fd740fd9df6819039eb3b0e68016
- MD5 dd6bfb9a11e2b54037c393f9e49c6c57
- SHA1 47dc0c7089afee0621d074abf1d04f7a59dfe824
- SHA512 76a6bb4474fb4ef79c474cd308326a168a734b7a31224b6ead81fa9bb1aa7a37bd9931d771d3b5864d0bbb90a7e87de88c15762cdc8b09dcc22bfb93dd536c3a
- SSDEEP 3072:dklrt9z0CAMjkRJx+ARy2N80DndzG4gTVFP4NdgFoWQ36Yax4YQ:89YCSnkueF+R36Y+
- TLSH
  T195144A1563E90F93FB9F9BBEF2E4E514C737B842949BE7495D8CA4E900533809C08A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Avalonia.Markup.Xaml.dll
- Size 82KB
- SHA256 1317fac8d9a3033154ffd58346174cc57e206df645673f1971dd87b84e2fa99c
- MD5 81b4f5b0c119f3af37aad573c04c477b
- SHA1 2dab7938c44903b20c19e064ddd7c77f29e72f68
- SHA512 10d18dd0c5e62d4bb970083890e281b8bb7812d5f52e806ecb105a86162679c3cb14fcac01f26e2b3d0587495896b86c53052b39fa5995b3ff898970b5db08c9
- SSDEEP 1536:3op1Iyb3soOYPsiYvdRl65/Udm13iG5Al16bIJsEuVVrnYs0dE:m1IywyEiqdRlyZ1yrlzJsEuVVLYi
- TLSH
  T1C1835B656B694337DAFB4A36F0BC71410337B60679F1E75BAB08B2D90A63BA10540B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Avalonia.Markup.dll
- Size 63KB
- SHA256 c29ca0ea138b7ac0a5761dee57f38e9ed5c483f625d2161441c0c320db034cda
- MD5 754e802f7379f07ab5fcb4d4701f4c54
- SHA1 cf96279bee7b7efa6e1551fa01d9b6c13a6233ef
- SHA512 6143ca1d49ad460cfa7abe6e69d19575d783778fae2b011caa17f07b852104dee93bb097c313e1261eff8d5b3f94b36846fe29bd178fad760ad2b4099e91971c
- SSDEEP 768:33k+KbE4BGBkmw8w98zPXIGdiCEN2tWu+JXRhA6JSfcoISgZ4QzYZK2ZMgPvJd5G:nZKbNmpe8jXIGdjF2Sf/LyrzY60G
- TLSH
  T134535C6467C58316EFAE0731F0B875168735BA963AF3FB9E866075DB1823F110E50B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Avalonia.Metal.dll
- Size 14KB
- SHA256 f74298062c11fb1f871cbde3fd66ab53d566051a380eb8babcca372eab8b0ddb
- MD5 1fa60a8987d1e5b11b50af2724f77f1e
- SHA1 ec11b9b08c7a2e34b4a1218cebc954a28c11d9d8
- SHA512 39fd8b0d449b2d892481d7e3ebe7af04fb12fd2dea1a04159cf612637a26b23af5defde36bfb928628669aca69ded4882e79343ebcc001b171025895554c98c4
- SSDEEP 192:c0ReAgL76jCX9NY2kAgY6DMZPGLFbTuwJaX+xP/:c0ReAgL76j4UYZWf
- TLSH
  T13952A6D093042273ECD28A32B9EEF9D6617AB682ADE38B565630734AC8177340F56F15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Avalonia.MicroCom.dll
- Size 15KB
- SHA256 c000d46a5e89d9d7591e87e38147ac11352a1f10e881096d79807120fa453c71
- MD5 79bf39d218879467485b6a71d371b549
- SHA1 3027fa8452b2ead64f89d12c6cdc3c1370c970a5
- SHA512 b16e64bbce6d246825f12c407c321e1a7b1689a7d3bfae1ea693b79d30fb718a145f81a85bf0183dd80890cac2054cc95229d00142b6c27759146f7413730cb7
- SSDEEP 192:AR711jrhzkwi2CAgY6DMZPGBFb5GIQ9MBlxF/:Q3j94wNaYZ/Ix
- TLSH
  T1D362A6D593041273ECD28A3275EFF892627BB682FDE28B5566307346C826B340F65F25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Avalonia.Native.dll
- Size 297KB
- SHA256 f2e68ca07fbb9c732e78fd173f89df6ee19a033529a9c04b531c99e7261c14ac
- MD5 a6416576c1f33a85771da1fee890fe52
- SHA1 f626fdbbad64a7410110eba9d803f27933ca6dfe
- SHA512 dc9bbbd9af233e50148704a3598cc2727ab7a4ff66ea1e27fe15e23896675157865fa5008440626352da90cae6eef00c757f92e072e6f5d2740881281e5fd42d
- SSDEEP 6144:psKhDNAZVs5WmoJw5y8mw0iME5yoBDCa:ft2Vs5i
- TLSH
  T1C854290517D48775C25E0130EBA81907D375F48BD5A3FBFF0C9969B86E82330BD4A9AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Avalonia.OpenGL.dll
- Size 113KB
- SHA256 1b131d08be4a8b7945bb60fb533a518c0e7181ce5e4cab55a187d44dc5d8004c
- MD5 48d844711d1b99c383cbdebe6cb3a56d
- SHA1 3be583f4b0ff04cef83bc15a10a2c5c12d9b28bd
- SHA512 49eb02914485e802d0a89585f09a8bda3e621e237e2c58c3add164afc7f31f486db9d557b901f032ac6d7f8ab52f8ca3a883845fddd44175d0b8887ff1c0aa64
- SSDEEP 1536:EUk6K6OImKUtpVekFx3jhf3QJwpXclhPYGdWDh4M4sgcPd0DJBc7hPls6nPSYRtj:g6VmKZwxTBOhPYGdWDEcx78YRtj
- TLSH
  T16FB34A6233D949A2ECBA65F5B4BC71998372F5CA25D7E35F5048A0FC56E330C8784B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Avalonia.Remote.Protocol.dll
- Size 71KB
- SHA256 febdab9723e9f9d6914b44e8222d1a16af8ff0ffbf1f287176628d5b9c618ada
- MD5 14b25e1c75b40b1eba5b50b07a893eaa
- SHA1 419f7b20bef20888c59be0e66b6ddd23546a5fd5
- SHA512 4812a6cd57da418c6c60c8d019985d2d86d17ca5228a029255b4dbbc7ec65d83e126356278d7c2494a98ba59d200a1e680caf35b508d59a3e1ba25af98cafc59
- SSDEEP 1536:+Y6J6YmIdqx7U9IWXJTBZ8qurXHv+zn/I/znk+OCKFFAYHX:+Yw697U9Ibf+znS4waFAY3
- TLSH
  T1FF633A10D358872BDADF0A75B0B9B3124776B243B9D6F7975E28E2FA6803B500F05663
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Avalonia.Skia.dll
- Size 125KB
- SHA256 7169f4d9bb63cb3efe0f362b43aa448d8b8bcb3dbf2ff132b1373bfef8e71f1e
- MD5 34aa08c93e67f2b81563c27311fb9f31
- SHA1 9190230b8d490a087bebac73d5a5429fe564c1be
- SHA512 ef9183e4c75eab1a241fcc2b51de4bf96f01d5b3eff8289dede7db4567d6dc3baf525b24542309e44d106bc56e8b709692fbd368ab1ba35854e2b83e1b15fde0
- SSDEEP 3072:5fK9RzIL2RXMywiE4rAfLYQRmF1k3tZiaYA:5fK9RUSR8Yts/MPk9Zi
- TLSH
  T15FC36B8413698A2BD69F597AF0F438824B71F243F6E3FB5A4E80B4ED19933901E45763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Avalonia.Themes.Fluent.dll
- Size 562KB
- SHA256 8eef6f0e0cb464dd60975f94ca071ea1536ffa5307d61993a189ec91a78ee00c
- MD5 9bf6a44f9b6c5e654318e0b5a6218c63
- SHA1 6775aec665b2f8d33dbb04ecaf2e3afe31f670f4
- SHA512 68f03f527ab5359399afe59859f9470ac297e3b8647ce7899bb9f5d0c17400d2538afa30bbd8c5ae529fb1aa531e62a50a1edd4b973de45d42425cf0ffb21efe
- SSDEEP 3072:1bvQ+PLCmgNnwDMRUPGCo98MIEwfkd3qM60oJ9h+3vxasf9uTGcBURAwrdb/lMRC:xoItm418oMtPvbO9cQOBt41o
- TLSH
  T1A8C4441562C907A1E136FD3E90F817506D71B4263DD3EE8C4CA059EA0B67A823F527AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  Avalonia.Vulkan.dll
- Size 187KB
- SHA256 2bdf035c3e537fe2a838cb8bdf292c9d4174268a9e9ccc75381cd2ef2d708c84
- MD5 1db0eefa7aa53c76cba98305d938c62b
- SHA1 ed9708d3f553ef24df40aa2f9bf0cc6df22027b3
- SHA512 205895e502103c4263ebc334852ad3651ae9c0075629c49caaa8edf8285f7958c19fce3823e34872b71afd031e899010ba57433208725b75f774d02ce96fb01e
- SSDEEP 1536:r2M6SzOjbGwl7wNjY8taHAEO8Ia6eIMDg9c+WLtAS1HoJASFODCvHcpWZ38XwsUF:JOGw5Y04aHtaawZW11DCvKwXLfYk
- TLSH
  T1FC1419213265BA13D43A4ABD3CA3611483687843F2F5FBD98583C69EACD17642B3D673
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  Avalonia.Win32.Automation.dll
- Size 55KB
- SHA256 89a0fa9f18de476c57e5b94c9dc3efe08dd1128bd78e73fb1c69d9bb7199b689
- MD5 2e8e30622ac627357dce481bba86e8bb
- SHA1 ecbd6727ec9eef98dcd8183702837708c8d20861
- SHA512 ee9c68628ffd722163485e8e6f0f7747e41cfc520d2d61dae5bfefd5cc726b8dbee799be98a246454f9d998c7856e4b5a39ea46f7fcd27d51e566ea87467a15b
- SSDEEP 768:AtBBCfr++T3q7nH3Fi5IWh7bbgYZjzch:AtBBE13I85IybgY2h
- TLSH
  T1D2432C51F2041655CDDD4D3B7CE9F8044974B3C5A9E2CB1A9A34FAA88CE7A120F9225D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  Avalonia.Win32.dll
- Size 907KB
- SHA256 80dac5909bccdacffb247379a701fd374375169ea221232bb84e8ef69dbbc4ca
- MD5 df6bab8bf45cffa30b577e90fbee5dec
- SHA1 ac1f4bf54a070528ba1fa80d9ce78fd9deeaa82c
- SHA512 430103c9e46f82feea94705adb153fcd76346d02e796f4650987f5b9269b6e7c0b13cbaf6d06153170a792f1d0a9ceb8e03e5e3a05e8fb7bb015c9b1d36e30d0
- SSDEEP 12288:kbgcvGk/P7rS6w129PfPEZvyUvuy+u/EkH:kKlU9/ny+u/xH
- TLSH
  T1A4151A1057A44FAAC40F473570720343EAB4E94AF387F76BE85C25BE1ABAF902C596D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  Avalonia.X11.dll
- Size 331KB
- SHA256 d8ddea0ff9f30487678aabe9922776757a94187f2f1be1b593cd794271dacdcd
- MD5 28e99f5787ceeaf754518949d2879245
- SHA1 a8a17fd4c53983ca0eeee24e410a9287f01b1b0b
- SHA512 b18b68dfcc676f79e9328c1395fb7dd4faac303672f1c64c1814f91a023d756dcf25768dd150567b779d578a3208bf749da9fda3cf9b5e8e2e0b66994632ae43
- SSDEEP 6144:Pq0bNTrK4A/m9Tx8cXnpxMcbsN6JUnZl5s26sQuD7qUxu4g3V9:PTRTrK4qM1QkJ4Zl5f6EpxudV
- TLSH
  T1FF747C6573945D23CC6BE23BA143642683B7E5869223FB0E6B48D56A4FE37911F007E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  Avalonia.dll
- Size 4KB
- SHA256 c6d0120a41412583e85c19ef44b51a0be4952c155911c45a3d9b201348da08e8
- MD5 b00ab9bee619b6be30d9bb7906663ac2
- SHA1 00a052ac7db7801d778c90a2a691c3043870d11b
- SHA512 54dde5e33f92bfd9331d4ba0db4410ab75c9812c79f86a416edeaaefd75424e8d9ecc76141fdade56c3cb70d2d45e1223ebca2855bde92f8f786b3b5a8e74861
- TLSH
  T1AF816356E7E00636FCB347B3EEB66A425275BCA1EDB38F1F0C5252461C275244D22B32
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral24
- Target
  BouncyCastle.Cryptography.dll
- Size 4.5MB
- SHA256 d9a58c84baa55a12684cd2381bca03c8f2a9cbae21a6bf1e9ebd65f495629721
- MD5 b4787503d223596799f75b5a70e089de
- SHA1 753612f4cccba05994e5c3eee576179b2cc68e81
- SHA512 6bb819a88f3ff5f26c7c28ba672f27640f4ac96077ebcd92418dbafd9e20f7940ff7787567d3a5bb73b4455f5237f0d06f827538d72d416905d54dfd69410f0f
- SSDEEP 49152:FlSk7M+wQ6G5c1EZAb8Shn9xiKa9K7nfSyUrASuCrpmDSqVCb4qcABDWIt:TSUM+eGiEZA4NfBuEoSqVCb4rABpt
- TLSH
  T169269E1677F81E23E15F83B696F04011A7F5F86AB393EB0B6181A37A0D63B505D422B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  CommunityToolkit.Mvvm.dll
- Size 144KB
- SHA256 ea437c21e851cfc82a04b973ba368e1d2e96f0b270334ec4af4c73dc1355dcee
- MD5 2a2ae5aef8e6486202137aa37a1cd17f
- SHA1 76989b379ef0d6bd6643eb09845f076153f2e8ca
- SHA512 da620192433a6003f75bdff8b7d3aa709167a6bc0b23d810f597948303bf6142038cb1486acfba98cccf6e1b6aa8ae26df3adc4c81822de5cd3e69e721880adf
- SSDEEP 3072:KG20iTvUMgsEOToYRIl+xaccjeo3+jNXqXgpPA:KGvoVpc71p
- TLSH
  T15DE39E06A3E85B16DAFF0F7574A8500B4A33FA07EA22E34A99DCE6F116D37C05951372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  HarfBuzzSharp.dll
- Size 116KB
- SHA256 5027db30312d34724b2afc0cac9b9c5f881799fea752aec06944e3ea7927e0b0
- MD5 01c7e50248a334f65b2c47966f4dcc63
- SHA1 e4727c74272267bc4374541f1b7be04e848a34db
- SHA512 420fc606466f7e25b3eb8518cae1fee11cd350d0023fe5c3964bd0d285fe048e3dbd4bf0c7b039e3fcdeb0a03163cb80754656ef529b0ceffc3adff4768127da
- SSDEEP 1536:2R0EwkJ2OHlORXr7ZxIsVTyZOfJRmPIpZLcYk9hTgsHzD/XEpOgRgyrAzByuU8su:yM++mPkZLc/gsHzDaUByu0/G
- TLSH
  T110C35A548BAC8527DAEF1A38F4BB2A430130D684B453DBAE37E9D1FCA5A3710D4B1316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  Markdig.dll
- Size 492KB
- SHA256 dbd0a5641dcd45bfa031c25523512776b7f2f996381aba5dc1017c2a1e2a2152
- MD5 bf802d2135548add3079bc6897cc8bb2
- SHA1 eb5b6b05ec91be13bd27fdad9fabca4bd895a412
- SHA512 1c669a164f97d99765bc2ff75bd3ae810236da96dc9f1b982e4f9ed49410c93269cf1cdaac3574bfe78db0a258dc805f1d08ca7cdf2714fd5eab51fd289d8538
- SSDEEP 6144:FgXuMIyQKZDKxPaxe++RgJ5ELFnQddCR+qThknEOpX6lDklFApaYjV1PIlyyfoq6:FgX1ZDKGe++C5AydhMKnEOl6lD7Bg
- TLSH
  T16DB41A185BF661E4F2BBEE32E4F2344015B2BB5BFE85E61E0548354D18B5702AC136BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  MicroCom.Runtime.dll
- Size 14KB
- SHA256 e992f1407476ec7691ab6fe15e3239fd9b887fe53f2e19c79464f594ea667ca1
- MD5 140247ff6d09f587157738e93e124c98
- SHA1 798d753229ea9cdab5aa145a8987afffd6c366a3
- SHA512 fc31b4a8582d1f90e7e56fae385c0ea9863ed1f4f4ef93a630702a2b66fc117d6cdb9a3ce4369511aeff79639b58ad78e387c4d3a2bde6dead35a77cd402b40b
- SSDEEP 192:J5j3dIDz3XswUUHW+IJ9mWwoRgNRLhnKesk5Cklfj9KJ6pHxzXSM6RDogkF1YW8a:2z3cl9+I69BpFtK8pHxzClD9/W8GsW
- TLSH
  T159523B03A788C233CABE57BD98F6074A43B5EA106802DF1F188C72954E53F4466A27A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  Microsoft.Data.Sqlite.dll
- Size 171KB
- SHA256 2beaa57ae759f5073182a69f73bbf353d31657307027aceeab8b359d600ca174
- MD5 7b13114461dea0ba0c32a8fed716c32a
- SHA1 26dcffe3a84796fe84f474432391e0d9a8dec7f3
- SHA512 6de2f9b73ff6254cbae46e4b20ef5c6c05e2055f37123b4f336844a8cfa23eef5a4340600a87b53cbd35b055214ed5f1f830926a14862038c51ca14972787bb1
- SSDEEP 3072:vUg6XtEtzzLKoAaunz7gPqc48cFqteyY/dxZpJCb6XUp:vUDgXLKoRuvsqi9wr/VCvp
- TLSH
  T1D6045AA503B85943CBFFCE71A17958820B34A56BE1C1C747AE45E8F83A13B147E9426B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  Microsoft.Win32.Primitives.dll
- Size 20KB
- SHA256 5eaa2e82a26b0b302280d08f54dc9da25165dd0e286be52440a271285d63f695
- MD5 76b8d417c2f6416fa81eacc45977cea2
- SHA1 7b249c6390dfc90ef33f9a697174e363080091ef
- SHA512 3b510cdc45c94be383c91687c2cb01a501ba34e3fbb66346214fc576d6f0e63c77d1d09c6419fc907f5b083387a7046c0670377ad2e00c3ec2e731275739f9c7
- SSDEEP 384:/N9VWhX3WsQBm0GftpBjvmaQHRN7YlgaGn7rJd0:1GmViYL0Gff0
- TLSH
  T1D5923A95CABC4143ECD3AE7062A8D9C73D3CE7D35C205A2A0099F2991D933D4EF20A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  Microsoft.Win32.Registry.dll
- Size 22KB
- SHA256 619737e2af8fb713085726631dd2e522fe130cac1d388a59c38907a47d7aadea
- MD5 da40f3db8b34571684c0cb5bcecd2a79
- SHA1 1c27a41fd84d6bfe99dabae2e59fcf12fccf6213
- SHA512 e656d72e111eaca7c8e9b7d4106030c1104286395046c2de58a04edd590cb2714dcf3aeca2b93f843b4663f1d1e630cc19f1e4eae2fa62f0d382fa18cc8a5981
- SSDEEP 384:z8a6WQCgE7MHVia7Z7aLPQmlJLfbTWnWDxW8QHRN74fZalxA2:AJCp70ViyrmlDt84a
- TLSH
  T18FA22A02EFE8402FFFF70E3519B5D9225D76FAC62902864E1958D2CE5DB2BC4D630629
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Loads dropped DLL

Checks installed software on the system

Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32