Overview
overview
10Static
static
3v2.4.1.zip
windows11-21h2-x64
1v2.4.1.exe
windows11-21h2-x64
10$PLUGINSDI...er.dll
windows11-21h2-x64
3$PLUGINSDI...ls.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDIR/app-64.7z
windows11-21h2-x64
1Installer.exe
windows11-21h2-x64
10LICENSES.c...m.html
windows11-21h2-x64
3d3dcompiler_47.dll
windows11-21h2-x64
1ffmpeg.dll
windows11-21h2-x64
1libEGL.dll
windows11-21h2-x64
1libGLESv2.dll
windows11-21h2-x64
1locales/fa.pak
windows11-21h2-x64
3locales/fi.pak
windows11-21h2-x64
3locales/fil.pak
windows11-21h2-x64
3locales/fr.pak
windows11-21h2-x64
3locales/gu.pak
windows11-21h2-x64
3locales/he.pak
windows11-21h2-x64
3locales/hi.pak
windows11-21h2-x64
3locales/hr.pak
windows11-21h2-x64
3locales/hu.pak
windows11-21h2-x64
3locales/id.pak
windows11-21h2-x64
3locales/it.pak
windows11-21h2-x64
3resources/app/main.js
windows11-21h2-x64
3resources/elevate.exe
windows11-21h2-x64
3v8_context...ot.bin
windows11-21h2-x64
3vk_swiftshader.dll
windows11-21h2-x64
1vk_swiftsh...d.json
windows11-21h2-x64
3vulkan-1.dll
windows11-21h2-x64
1$PLUGINSDI...ec.dll
windows11-21h2-x64
3$PLUGINSDI...7z.dll
windows11-21h2-x64
3$R0/Uninst...er.exe
windows11-21h2-x64
7Analysis
- user interaction
yes - max time kernel
898s - max time network
447s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
09/08/2026, 14:49
Static task
static1
Behavioral task
behavioral1
Sample
v2.4.1.zip
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral2
Sample
v2.4.1.exe
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral6
Sample
$PLUGINSDIR/app-64.7z
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral7
Sample
Installer.exe
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral8
Sample
LICENSES.chromium.html
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral9
Sample
d3dcompiler_47.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral10
Sample
ffmpeg.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral11
Sample
libEGL.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral12
Sample
libGLESv2.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral13
Sample
locales/fa.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral14
Sample
locales/fi.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral15
Sample
locales/fil.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral16
Sample
locales/fr.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral17
Sample
locales/gu.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral18
Sample
locales/he.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral19
Sample
locales/hi.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral20
Sample
locales/hr.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral21
Sample
locales/hu.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral22
Sample
locales/id.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral23
Sample
locales/it.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral24
Sample
resources/app/main.js
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral25
Sample
resources/elevate.exe
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral26
Sample
v8_context_snapshot.bin
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral27
Sample
vk_swiftshader.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral28
Sample
vk_swiftshader_icd.json
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral29
Sample
vulkan-1.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral30
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral31
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral32
Sample
$R0/Uninstall Installer.exe
Resource
win11-20260513-en
windows11-21h2-x64
General
- Target libEGL.dll
- Size 468KB
- Sample260809-r7eppss1es
- SHA256 a4336a318e8d92a47843d5fe429dc6d1ff7271d8bac189d719bc8074a128fd6e
- MD5 f1fe23058e7eece1de389a0c882bc1ad
- SHA1 e83b15d2bbcb6fb2867651a2a9797ed3b6827947
- SHA512 d7d51fcb05542fa81e871dd9f1dd960c363107d1c25311dcbf81e440d1275054c121a788def8dbae47c129e95fd990042e2d39e6ef2bdfb253a114146eb33973
- SSDEEP 3072:0Jk+JyNnPUXhbZ/+a1KYsjNDsrJg3qkrzxwbP6wvEMrwrD7Qy/x6TYtaoB+YEB0+:qbTcZ6+lOP9rmD7QMYYtaFy951wj5ze
- TLSH T1A1A48C1577E444A9E07BD474CA534642DA76B8920F24FBDF02A492392F7BBF85B39320
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\Local Settings\MuiCache MiniSearchHost.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4860 MiniSearchHost.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\libEGL.dll,#11⤵PID:4408
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4860
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4272
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
- Size 22KB
- SHA256 abc8915ea21a5e6965080e1aa7d8456f3a89b435609602855066aba905dd3fe9
- MD5 0bb8a1501d88c988e65fddffad72e8a4
- SHA1 2656d3cb6efb0e211c535071e4783a7754a5e05c
- SHA512 0ae2501c244291292bc84f98ee166e4e712b1cf3263a512ac5426cdf6b3498bc67161985a01923b149ca49c77e6168953c336ddd7b0f60dd3ce8e16b2f63ffce
- SSDEEP 384:kuJWJzVca12krtuVm+SglBOVjeQ8RJo3hghFUjUXPW35PIm59+GDa50HIsYAVocU:j+zVcWrPl8RJYhgTUjUXP6t9+GDa50Ho
- TLSH T1DFA24D743AF51319F3B29F759AF1A95A643AB866AC00DB4D0162038D0977D92CDB0F3B
- MD5 SHA1 SHA512 SSDEEP TLSH